about summary refs log tree commit diff
path: root/libio
diff options
context:
space:
mode:
authorXi Ruoyao <xry111@xry111.site>2023-04-21 14:21:33 +0800
committerAdhemerval Zanella <adhemerval.zanella@linaro.org>2023-05-16 06:56:32 -0300
commit71d9e0fe766a3c22a730995b9d024960970670af (patch)
treebbf0973cd973a5195a1126aa46f9ea800309f4a9 /libio
parentbea1a4a77305cef90dac47b873bd9f01a6409c22 (diff)
downloadglibc-71d9e0fe766a3c22a730995b9d024960970670af.tar.gz
glibc-71d9e0fe766a3c22a730995b9d024960970670af.tar.xz
glibc-71d9e0fe766a3c22a730995b9d024960970670af.zip
libio: Add __nonnull for FILE * arguments of fclose and freopen
Calling fclose or freopen with a null FILE * is undefined behavior, and
doing so in practice will cause a SIGSEGV.  So it seems suitable for
__nonnull.

This will help the compiler to warn for some buggy code, like
https://gcc.gnu.org/bugzilla/show_bug.cgi?id=109570.
Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
Diffstat (limited to 'libio')
-rw-r--r--libio/stdio.h6
1 files changed, 3 insertions, 3 deletions
diff --git a/libio/stdio.h b/libio/stdio.h
index 2387590d6a..4cf9f1c012 100644
--- a/libio/stdio.h
+++ b/libio/stdio.h
@@ -180,7 +180,7 @@ extern int renameat2 (int __oldfd, const char *__old, int __newfd,
 
    This function is a possible cancellation point and therefore not
    marked with __THROW.  */
-extern int fclose (FILE *__stream);
+extern int fclose (FILE *__stream) __nonnull ((1));
 
 #undef __attr_dealloc_fclose
 #define __attr_dealloc_fclose __attr_dealloc (fclose, 1)
@@ -269,7 +269,7 @@ extern FILE *fopen (const char *__restrict __filename,
    marked with __THROW.  */
 extern FILE *freopen (const char *__restrict __filename,
 		      const char *__restrict __modes,
-		      FILE *__restrict __stream) __wur;
+		      FILE *__restrict __stream) __wur __nonnull ((3));
 #else
 # ifdef __REDIRECT
 extern FILE *__REDIRECT (fopen, (const char *__restrict __filename,
@@ -290,7 +290,7 @@ extern FILE *fopen64 (const char *__restrict __filename,
   __attribute_malloc__ __attr_dealloc_fclose __wur;
 extern FILE *freopen64 (const char *__restrict __filename,
 			const char *__restrict __modes,
-			FILE *__restrict __stream) __wur;
+			FILE *__restrict __stream) __wur __nonnull ((3));
 #endif
 
 #ifdef	__USE_POSIX