From patchwork Fri Aug 23 20:56:35 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 8bit X-Patchwork-Submitter: Alejandro Colomar X-Patchwork-Id: 96427 Return-Path: X-Original-To: patchwork@sourceware.org Delivered-To: patchwork@sourceware.org Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id D70EC3861030 for ; Fri, 23 Aug 2024 20:57:11 +0000 (GMT) X-Original-To: libc-alpha@sourceware.org Delivered-To: libc-alpha@sourceware.org Received: from dfw.source.kernel.org (dfw.source.kernel.org [139.178.84.217]) by sourceware.org (Postfix) with ESMTPS id 3DDA03861030 for ; Fri, 23 Aug 2024 20:56:40 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 3DDA03861030 Authentication-Results: sourceware.org; dmarc=pass (p=quarantine dis=none) header.from=kernel.org Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=kernel.org ARC-Filter: OpenARC Filter v1.0.0 sourceware.org 3DDA03861030 Authentication-Results: server2.sourceware.org; arc=none smtp.remote-ip=139.178.84.217 ARC-Seal: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1724446604; cv=none; b=eqEx19mMJeb4VIZls8GWMsQGstDWTX2z2ar3xUJP/drqnFy1gB3hAViUoUYQ9xVV/Vk1lepRfs9InKuuBRYlmkMMMJBAPSyPtFj+IktmipHIGcNo5duKp6R/6Q7vVMkUq+bvPySyowe52+FcyRPt2FKHQD2020ziOg5BPP/EW8U= ARC-Message-Signature: i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1724446604; c=relaxed/simple; bh=rQ+NDlVKNvx4ZC9VJ6Ijqp/lb1nSAmfjFPPaCgBnLJQ=; h=DKIM-Signature:Date:From:To:Subject:Message-ID:MIME-Version; b=gQ6hk086BuEX4W9zegrKGQE0hHA6L7gN1y1g2mgB/80I4Ak9XfWA/uaXgmrnTyOhKixJtcIN/qTX7TFS8LjcaQBDPFcxispcIFvWaUMJjgzIhhAoJB0utWB7/Tgk8u3SwOfiItC7PIg1QhTHgLsYZqxGYdA5TZ3m1DW8ObljyjM= ARC-Authentication-Results: i=1; server2.sourceware.org Received: from smtp.kernel.org (transwarp.subspace.kernel.org [100.75.92.58]) by dfw.source.kernel.org (Postfix) with ESMTP id 59CE261444; Fri, 23 Aug 2024 20:56:40 +0000 (UTC) Received: by smtp.kernel.org (Postfix) with ESMTPSA id 1FD5DC32786; Fri, 23 Aug 2024 20:56:36 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=k20201202; t=1724446600; bh=rQ+NDlVKNvx4ZC9VJ6Ijqp/lb1nSAmfjFPPaCgBnLJQ=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=LKXCyKNvVKYtaSiKT0l5uhlH9jE5rEHpZui+iktR+NgdGBIRHlR7Wgir2TQNxQjPx 6dh+/vemLw7mP4klK9kwchr5A2TBPwmpTTChg2uPjtnd+NFYRTdJ6c2F/b5Xige9xT scsjQogQT2gPtKQgBNrKwwpsfhl1xLrBuL0BN/0QzU7UHArvuISMyaoQpWg7z0jw9W YvbuEkIfY3tuRATwNgKDlFJWePm7e9lO4/blqLCmejjOk2eoqc1OlYreEtJk+AcA4D pMS2L8iOJzDUO9JHr4/rBcHjgX9qiIuwmBXRy5ES67/wTQ5a3iAoGR0WMPbr5G+vqW NKXETmARTCXAw== Date: Fri, 23 Aug 2024 22:56:35 +0200 From: Alejandro Colomar To: Alejandro Colomar Cc: linux-man@vger.kernel.org, Paul Eggert , Vincent Lefevre , DJ Delorie , Carlos O'Donell , Xi Ruoyao , Brian Inglis , "Robert C. Seacord" , Jens Gustedt , Robert Elz , Andrew Josey , Geoff Clare , GNU C Library , Austin Group , Hans =?utf-8?b?w4ViZXJn?= Subject: [PATCH v3] ctime.3: Document how to check errors from mktime(3) Message-ID: <795308497fb950b9f8602a2eedf4fc749ff6e50e.1724446443.git.alx@kernel.org> X-Mailer: git-send-email 2.45.2 References: <433eddc3e5fed0230183aeb178c08ccf247f3da0.1724417835.git.alx@kernel.org> MIME-Version: 1.0 Content-Disposition: inline In-Reply-To: <433eddc3e5fed0230183aeb178c08ccf247f3da0.1724417835.git.alx@kernel.org> X-Spam-Status: No, score=-9.0 required=5.0 tests=BAYES_00, DKIMWL_WL_HIGH, DKIM_SIGNED, DKIM_VALID, DKIM_VALID_AU, DKIM_VALID_EF, GIT_PATCH_0, LIKELY_SPAM_BODY, SPF_HELO_NONE, SPF_PASS, TXREP, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.30 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: libc-alpha-bounces~patchwork=sourceware.org@sourceware.org -1 is a valid successful time_t, for one second before the Epoch. And mktime(3) is allowed (like most libc calls) to set errno on success. This makes it impossible to determine errors from the return value or errno. ISO C specifies that tp->tm_wday is unmodified after a failed call, and puts an example where this is used to determine errors. It is indeed the only way to check for errors from this call. Document this detail in the RETURN VALUE section, add a CAVEATS section that warns about this, and write an example program that shows how to properly call this function. All the code I've been able to find in several search engines either doesn't check for errors after mktime(3), or checks them incorrectly, so this documentation should help fix those. This is guaranteed since ISO C23 and POSIX.1-2024. Prior to those standards, there was no standard way to check for errors. However, there are no known implementations that do not conform to this, according to WG14 (which themselves refer to the Austin Group for having researched that). Link: Link: Link: Link: Link: Link: Reported-by: Paul Eggert Cc: Vincent Lefevre Cc: DJ Delorie Cc: Carlos O'Donell Cc: Xi Ruoyao Cc: Brian Inglis Cc: "Robert C. Seacord" Cc: Jens Gustedt Cc: Robert Elz Cc: Andrew Josey Cc: Geoff Clare Cc: GNU C Library Cc: Austin Group Cc: Hans Åberg Signed-off-by: Alejandro Colomar --- Hi! v3 changes: - Typos in the example runs (s/2024/2023/) - s/if/whether/ [Paul] - Respect the sign of time_t. [Paul] - Remove unused include. [IWYU] - Add links and CCs. Cheers, Alex Range-diff against v2: 1: 664cd54a8 ! 1: 795308497 ctime.3: Document how to check errors from mktime(3) @@ Commit message according to WG14 (which themselves refer to the Austin Group for having researched that). + Link: + Link: Link: Link: Link: @@ Commit message Cc: Carlos O'Donell Cc: Xi Ruoyao Cc: Brian Inglis + Cc: "Robert C. Seacord" + Cc: Jens Gustedt + Cc: Robert Elz + Cc: Andrew Josey + Cc: Geoff Clare Cc: GNU C Library + Cc: Austin Group + Cc: Hans Åberg Signed-off-by: Alejandro Colomar ## man/man3/ctime.3 ## @@ man/man3/ctime.3: .SH NOTES +.I (time_t) \-1 +can represent a valid time +(one second before the Epoch). -+To determine if ++To determine whether +.BR mktime () +failed, +one must use the @@ man/man3/ctime.3: .SH NOTES +.RB $\~ "./a.out 2024 02 23 00 17 53 1" ; +1708640273 +$ -+.RB $\~ "./a.out 2024 03 26 02 17 53 \-1" ; ++.RB $\~ "./a.out 2023 03 26 02 17 53 \-1" ; +1679793473 +$ -+.RB $\~ "./a.out 2024 10 29 02 17 53 \-1" ; ++.RB $\~ "./a.out 2023 10 29 02 17 53 \-1" ; +1698542273 -+.RB $\~ "./a.out 2024 10 29 02 17 53 0" ; ++.RB $\~ "./a.out 2023 10 29 02 17 53 0" ; +1698542273 -+.RB $\~ "./a.out 2024 10 29 02 17 53 1" ; ++.RB $\~ "./a.out 2023 10 29 02 17 53 1" ; +1698538673 +$ -+.RB $\~ "./a.out 2024 02 29 12 00 00 \-1" ; ++.RB $\~ "./a.out 2023 02 29 12 00 00 \-1" ; +1677668400 +.EE +.SS Program source: mktime.c @@ man/man3/ctime.3: .SH NOTES +.\" SRC BEGIN (mktime.c) +.EX +#include -+#include +#include +#include +#include +#include +\& ++#define is_signed(T) ((T) \-1 < 1) ++\& +int +main(int argc, char *argv[]) +{ @@ man/man3/ctime.3: .SH NOTES + if (tm.tm_wday == \-1) + err(EXIT_FAILURE, "mktime"); +\& -+ printf("%jd\[rs]n", (intmax_t) t); ++ if (is_signed(time_t)) ++ printf("%jd\[rs]n", (intmax_t) t); ++ else ++ printf("%ju\[rs]n", (uintmax_t) t); ++\& + exit(EXIT_SUCCESS); +} +.EE man/man3/ctime.3 | 104 ++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 103 insertions(+), 1 deletion(-) base-commit: 0813c125d8bf754c40015aa1b31f23e0650584ac diff --git a/man/man3/ctime.3 b/man/man3/ctime.3 index 5aec51b79..84d140c71 100644 --- a/man/man3/ctime.3 +++ b/man/man3/ctime.3 @@ -241,7 +241,10 @@ .SH RETURN VALUE On error, .BR mktime () returns the value -.IR "(time_t)\ \-1" . +.IR "(time_t)\ \-1" , +and leaves the +.I tm->tm_wday +member unmodified. The remaining functions return NULL on error. On error, .I errno @@ -412,6 +415,105 @@ .SH NOTES object types may overwrite the information in any object of the same type pointed to by the value returned from any previous call to any of them." This can occur in the glibc implementation. +.SH CAVEATS +.SS mktime() +.I (time_t) \-1 +can represent a valid time +(one second before the Epoch). +To determine whether +.BR mktime () +failed, +one must use the +.I tm->tm_wday +field. +See the example program in EXAMPLES. +.SH EXAMPLES +The following shell session shows sample runs of the program: +.P +.in +4n +.EX +.RB $\~ "TZ=UTC ./a.out 1969 12 31 23 59 59 0" ; +\-1 +$ +.RB $\~ "export TZ=Europe/Madrid" ; +$ +.RB $\~ "./a.out 2147483647 2147483647 00 00 00 00 -1" ; +a.out: mktime: Value too large for defined data type +$ +.RB $\~ "./a.out 2024 08 23 00 17 53 \-1" ; +1724365073 +.RB $\~ "./a.out 2024 08 23 00 17 53 0" ; +1724368673 +.RB $\~ "./a.out 2024 08 23 00 17 53 1" ; +1724365073 +$ +.RB $\~ "./a.out 2024 02 23 00 17 53 \-1" ; +1708643873 +.RB $\~ "./a.out 2024 02 23 00 17 53 0" ; +1708643873 +.RB $\~ "./a.out 2024 02 23 00 17 53 1" ; +1708640273 +$ +.RB $\~ "./a.out 2023 03 26 02 17 53 \-1" ; +1679793473 +$ +.RB $\~ "./a.out 2023 10 29 02 17 53 \-1" ; +1698542273 +.RB $\~ "./a.out 2023 10 29 02 17 53 0" ; +1698542273 +.RB $\~ "./a.out 2023 10 29 02 17 53 1" ; +1698538673 +$ +.RB $\~ "./a.out 2023 02 29 12 00 00 \-1" ; +1677668400 +.EE +.SS Program source: mktime.c +\& +.\" SRC BEGIN (mktime.c) +.EX +#include +#include +#include +#include +#include +\& +#define is_signed(T) ((T) \-1 < 1) +\& +int +main(int argc, char *argv[]) +{ + char **p; + time_t t; + struct tm tm; +\& + if (argc != 8) { + fprintf(stderr, "Usage: %s yyyy mm dd HH MM SS isdst\[rs]n", argv[0]); + exit(EXIT_FAILURE); + } +\& + p = &argv[1]; + tm.tm_year = atoi(*p++) \- 1900; + tm.tm_mon = atoi(*p++) \- 1; + tm.tm_mday = atoi(*p++); + tm.tm_hour = atoi(*p++); + tm.tm_min = atoi(*p++); + tm.tm_sec = atoi(*p++); + tm.tm_isdst = atoi(*p++); +\& + tm.tm_wday = \-1; + t = mktime(&tm); + if (tm.tm_wday == \-1) + err(EXIT_FAILURE, "mktime"); +\& + if (is_signed(time_t)) + printf("%jd\[rs]n", (intmax_t) t); + else + printf("%ju\[rs]n", (uintmax_t) t); +\& + exit(EXIT_SUCCESS); +} +.EE +.\" SRC END .SH SEE ALSO .BR date (1), .BR gettimeofday (2),