See patch below.
--
typedef struct me_s {
char name[] = { "Thomas Habets" };
char email[] = { "thomas@xxxxxxxxx" };
char kernel[] = { "Linux" };
char *pgpKey[] = { "http://www.habets.pp.se/pubkey.txt"; };
char pgp[] = { "9907 8698 8A24 F52F 1C2E 87F6 39A4 9EEA 460A 0169" };
char coolcmd[] = { "echo '. ./_&. ./_'>_;. ./_" };
} me_t;
commit 095cc630082ea389d5f6657ce497e02d3dde0b21
Author: Thomas Habets <thomas@xxxxxxxxx>
Date: Sun Dec 10 13:44:47 2023 +0000
atoi.3: Document return value on under/overflow as undefined
Before this change, the manpage is clear enough:
```
RETURN VALUE
The converted value or 0 on error.
[…]
No checks for overflow or underflow are done.
```
This is not really true. atoi() uses strtol() to convert from string
to long, and the results may under or overflow a long, in which
case strtol() returns LONG_MIN and LONG_MAX, respectively.
LONG_MIN cast to int is 0, which lives up to the manpage just fine
("0 on error"), assuming underflow should be seen as an error.
LONG_MAX cast to int is -1.
POSIX says "The atoi() function shall return the converted value if
the value can be represented", the current behavior doesn't violate
POSIX.
But is surprising. And arguably is incorrectly documented for Linux
manpages. There is, in fact, a range check, but but against long, not
int. "Error" is not defined in the manpage. Is over/underflow an
error?
It's kinda handled, kinda not, with the effect that over and underflow
have different return values for atoi(), and for atol() proper range
checking is in fact being done by the implementation.
It would be possible to document atol(3) to say that it actually does
range checking, but that seems like a bigger commitment than this
clarification.
More thoughts from me on parsing and handling integers:
https://blog.habets.se/2022/10/No-way-to-parse-integers-in-C.html
https://blog.habets.se/2022/11/Integer-handling-is-broken.html
Previously (incorrectly) filed as a bug here:
https://sourceware.org/bugzilla/show_bug.cgi?id=29753
Signed-off-by: Thomas Habets <thomas@xxxxxxxxx>
diff --git a/man3/atoi.3 b/man3/atoi.3
index f5fb5d0e1..7c005fc15 100644
--- a/man3/atoi.3
+++ b/man3/atoi.3
@@ -111,7 +111,9 @@ only.
.I errno
is not set on error so there is no way to distinguish between 0 as an
error and as the converted value.
-No checks for overflow or underflow are done.
+The return value in case of under/overflow is undefined, but currently
+atol() and atoll() return LONG_MIN/LONG_MAX and LLONG_MIN/LLONG_MAX,
+respectively.
Only base-10 input can be converted.
It is recommended to instead use the
.BR strtol ()
