2 ** satndard.h --- ISO C99 Standard Library for Splint.
4 ** Process with -DSTRICT to get strict library.
9 /*@+globsimpmodifiesnothing@*/
15 /*@constant int EDOM;@*/
16 /*@constant int ERANGE;@*/
17 /*@constant int EILSEQ;@*/
20 /*@checkedstrict@*/ int errno;
22 /*@unchecked@*/ int errno;
29 typedef /*@integraltype@*/ ptrdiff_t;
30 typedef /*@unsignedintegraltype@*/ size_t;
31 typedef /*@signedintegraltype@*/ ssize_t;
32 typedef /*@integraltype@*/ wchar_t;
35 ** Added by Amendment 1 to ISO.
38 typedef /*@integraltype@*/ wint_t;
39 typedef /*@abstract@*/ mbstate_t;
41 /*@constant null anytype NULL = 0;@*/
47 /*@constant lltX_bool NDEBUG;@*/
50 /*@falseexit@*/ void assert (/*@sef@*/ lltX_bool e)
53 /*@falseexit@*/ void assert (/*@sef@*/ lltX_bool /*@alt int@*/ e)
63 lltX_bool isalnum (int c) /*@*/ ;
64 lltX_bool isalpha (int c) /*@*/ ;
65 lltX_bool iscntrl (int c) /*@*/ ;
66 lltX_bool isdigit (int c) /*@*/ ;
67 lltX_bool isgraph (int c) /*@*/ ;
68 lltX_bool islower (int c) /*@*/ ;
69 lltX_bool isprint (int c) /*@*/ ;
70 lltX_bool ispunct (int c) /*@*/ ;
71 lltX_bool isspace (int c) /*@*/ ;
72 lltX_bool isupper (int c) /*@*/ ;
73 lltX_bool isxdigit (int c) /*@*/ ;
74 char tolower (int c) /*@*/ ;
75 char toupper (int c) /*@*/ ;
78 ** evans 2002-01-03: added alt char (was alt unsigned char)
81 lltX_bool /*@alt int@*/ isalnum (int /*@alt char, unsigned char@*/ c) /*@*/ ;
82 lltX_bool /*@alt int@*/ isalpha (int /*@alt char, unsigned char@*/ c) /*@*/ ;
83 lltX_bool /*@alt int@*/ iscntrl (int /*@alt char, unsigned char@*/ c) /*@*/ ;
84 lltX_bool /*@alt int@*/ isdigit (int /*@alt char, unsigned char@*/ c) /*@*/ ;
85 lltX_bool /*@alt int@*/ isgraph (int /*@alt char, unsigned char@*/ c) /*@*/ ;
86 lltX_bool /*@alt int@*/ islower (int /*@alt char, unsigned char@*/ c) /*@*/ ;
87 lltX_bool /*@alt int@*/ isprint (int /*@alt char, unsigned char@*/ c) /*@*/ ;
88 lltX_bool /*@alt int@*/ ispunct (int /*@alt char, unsigned char@*/ c) /*@*/ ;
89 lltX_bool /*@alt int@*/ isspace (int /*@alt char, unsigned char@*/ c) /*@*/ ;
90 lltX_bool /*@alt int@*/ isupper (int /*@alt char, unsigned char@*/ c) /*@*/ ;
91 lltX_bool /*@alt int@*/ isxdigit (int /*@alt char, unsigned char@*/ c) /*@*/ ;
92 char /*@alt int@*/ tolower (int /*@alt char, unsigned char@*/ c) /*@*/ ;
93 char /*@alt int@*/ toupper (int /*@alt char, unsigned char@*/ c) /*@*/ ;
105 char *int_curr_symbol;
106 char *currency_symbol;
107 char *mon_decimal_point;
108 char *mon_thousands_sep;
112 char int_frac_digits;
122 /*@constant int LC_ALL;@*/
123 /*@constant int LC_COLLATE;@*/
124 /*@constant int LC_CTYPE;@*/
125 /*@constant int LC_MONETARY;@*/
126 /*@constant int LC_NUMERIC;@*/
127 /*@constant int LC_TIME;@*/
129 /*@observer@*/ /*@null@*/ char *setlocale (int category, /*@null@*/ char *locale)
130 /*@modifies internalState, errno@*/ ;
132 struct lconv *localeconv (void) /*@*/ ;
139 ** Note, these are defined by macros, but NOT necessarily
140 ** constants. They may be used as lvalues.
143 /*@unchecked@*/ int DBL_DIG;
144 /*@unchecked@*/ double DBL_EPSILON;
145 /*@unchecked@*/ int DBL_MANT_DIG;
146 /*@unchecked@*/ double DBL_MAX;
147 /*@unchecked@*/ int DBL_MAX_10_EXP;
148 /*@unchecked@*/ int DBL_MAX_EXP;
149 /*@unchecked@*/ double DBL_MIN;
150 /*@unchecked@*/ int DBL_MIN_10_EXP;
151 /*@unchecked@*/ int DBL_MIN_EXP;
153 /*@unchecked@*/ int FLT_DIG;
154 /*@unchecked@*/ float FLT_EPSILON;
155 /*@unchecked@*/ int FLT_MANT_DIG;
156 /*@unchecked@*/ float FLT_MAX;
157 /*@unchecked@*/ int FLT_MAX_10_EXP;
158 /*@unchecked@*/ int FLT_MAX_EXP;
159 /*@unchecked@*/ float FLT_MIN;
160 /*@unchecked@*/ int FLT_MIN_10_EXP;
161 /*@unchecked@*/ int FLT_MIN_EXP;
162 /*@constant int FLT_RADIX@*/
163 /*@unchecked@*/ int FLT_ROUNDS;
165 /*@unchecked@*/ int LDBL_DIG;
166 /*@unchecked@*/ long double LDBL_EPSILON;
167 /*@unchecked@*/ int LDBL_MANT_DIG;
168 /*@unchecked@*/ long double LDBL_MAX;
169 /*@unchecked@*/ int LDBL_MAX_10_EXP;
170 /*@unchecked@*/ int LDBL_MAX_EXP;
171 /*@unchecked@*/ long double LDBL_MIN;
172 /*@unchecked@*/ int LDBL_MIN_10_EXP;
173 /*@unchecked@*/ int LDBL_MIN_EXP;
179 /*@constant int CHAR_BIT; @*/
180 /*@constant char CHAR_MAX; @*/
181 /*@constant char CHAR_MIN; @*/
182 /*@constant int INT_MAX; @*/
183 /*@constant int INT_MIN; @*/
184 /*@constant long int LONG_MAX; @*/
185 /*@constant long int LONG_MIN; @*/
186 /*@constant long int MB_LEN_MAX@*/
187 /*@constant signed char SCHAR_MAX; @*/
188 /*@constant signed char SCHAR_MIN; @*/
189 /*@constant short SHRT_MAX; @*/
190 /*@constant short SHRT_MIN; @*/
191 /*@constant unsigned char UCHAR_MAX; @*/
192 /*@constant unsigned char UCHAR_MIN; @*/
193 /*@constant unsigned int UINT_MAX; @*/
194 /*@constant unsigned long ULONG_MAX; @*/
195 /*@constant unsigned short USHRT_MAX; @*/
201 /*@constant double HUGE_VAL; @*/
204 ** math functions that may have a range error modify errno
207 double sin (double x) /*@*/ ;
208 double cos (double x) /*@*/ ;
209 double tan (double x) /*@*/ ;
210 double asin (double x) /*@modifies errno@*/ ;
211 double acos (double x) /*@modifies errno@*/ ;
212 double atan (double x) /*@*/ ;
213 double atan2 (double y, double x) /*@*/ ;
214 double sinh (double x) /*@*/ ;
215 double cosh (double x) /*@modifies errno@*/ ;
216 double tanh (double x) /*@*/ ;
218 double exp (double x) /*@modifies errno@*/ ;
219 double ldexp (double x, int n) /*@modifies errno@*/ ;
220 double frexp (double x, /*@out@*/ int *xp) /*@modifies *xp;@*/ ;
222 double log (double x) /*@modifies errno@*/ ;
223 double log10 (double x) /*@modifies errno@*/ ;
225 double pow (double x, double y) /*@modifies errno@*/ ;
226 double sqrt (double x) /*@modifies errno@*/ ;
228 double ceil (double x) /*@*/ ;
229 double floor (double x) /*@*/ ;
230 double fabs (double x) /*@*/ ;
232 double modf (double x, /*@out@*/ double *ip) /*@modifies *ip;@*/ ;
233 double fmod (double x, double y) /*@*/ ;
236 ** These functions are optional in iso C. An implementation does not
237 ** have to provide them. They are included in comments here, but
238 ** are not required to be part of the standard library.
241 # ifdef OPTIONAL_MATH
243 float acosf (float x) /*@modifies errno@*/ ;
244 long double acosl (long double x) /*@modifies errno@*/ ;
245 float asinf (float x) /*@modifies errno@*/ ;
246 long double asinl (long double x) /*@modifies errno@*/ ;
247 float atanf (float x) /*@*/ ;
248 long double atanl (long double x) /*@*/ ;
249 float atan2f (float y, float x) /*@*/ ;
250 long double atan2l (long double y, long double x) /*@*/ ;
251 float ceilf (float x) /*@*/ ;
252 long double ceill (long double x) /*@*/ ;
253 float cosf (float x) /*@*/ ;
254 long double cosl (long double x) /*@*/ ;
255 float coshf (float x) /*@modifies errno@*/ ;
256 long double coshl (long double x) /*@modifies errno@*/ ;
257 float expf (float x) /*@modifies errno@*/ ;
258 long double expl (long double x) /*@modifies errno@*/;
259 float fabsf (float x) /*@*/ ;
260 long double fabsl (long double x) /*@*/ ;
261 float floorf (float x) /*@*/ ;
262 long double floorl (long double x) /*@*/ ;
263 float fmodf (float x, float y) /*@*/ ;
264 long double fmodl (long double x, long double y) /*@*/ ;
265 float frexpf (float x, /*@out@*/ int *xp) /*@modifies *xp@*/;
266 long double frexpl (long double x, /*@out@*/ int *xp) /*@modifies *xp@*/;
267 float ldexpf (float x, int n) /*@modifies errno@*/ ;
268 long double ldexpl (long double x, int n) /*@modifies errno@*/ ;
269 float logf (float x) /*@modifies errno@*/ ;
270 long double logl (long double x) /*@modifies errno@*/ ;
271 float log10f (float x) /*@modifies errno@*/;
272 long double log10l (long double x) /*@modifies errno@*/;
273 float modff (float x, /*@out@*/ float *xp) /*@modifies *xp@*/ ;
274 long double modfl (long double x, /*@out@*/ long double *xp) /*@modifies *xp@*/ ;
275 float powf (float x, float y) /*@modifies errno@*/ ;
276 long double powl (long double x, long double y) /*@modifies errno@*/ ;
277 float sinf (float x) /*@*/ ;
278 long double sinl (long double x) /*@*/ ;
279 float sinhf (float x) /*@*/ ;
280 long double sinhl (long double x) /*@*/ ;
281 float sqrtf (float x) /*@modifies errno@*/ ;
282 long double sqrtl (long double x) /*@modifies errno@*/ ;
283 float tanf (float x) /*@*/ ;
284 long double tanl (long double x) /*@*/ ;
285 float tanhf (float x) /*@*/ ;
286 long double tanhl (long double x) /*@*/ ;
294 typedef /*@abstract@*/ /*@mutable@*/ void *jmp_buf;
296 int setjmp (/*@out@*/ jmp_buf env) /*@modifies env;@*/ ;
297 /*@mayexit@*/ void longjmp (jmp_buf env, int val) /*@*/ ;
303 /*@constant int SIGABRT; @*/
304 /*@constant int SIGFPE; @*/
305 /*@constant int SIGILL; @*/
306 /*@constant int SIGINT; @*/
307 /*@constant int SIGSEGV; @*/
308 /*@constant int SIGTERM; @*/
310 typedef /*@integraltype@*/ sig_atomic_t;
312 /*@constant void (*SIG_DFL)(int); @*/
313 /*@constant void (*SIG_ERR)(int); @*/
314 /*@constant void (*SIG_IGN)(int); @*/
317 ** signal takes an int, and a function takes int returns void, and
318 ** returns the function (or NULL if unsuccessful).
321 /*@null@*/ void (*signal (int sig, /*@null@*/ void (*func)(int))) (int)
322 /*@modifies internalState, errno;@*/ ;
324 /*@mayexit@*/ int raise (int sig) ;
330 typedef /*@abstract@*/ /*@mutable@*/ void *va_list;
332 void va_start (/*@out@*/ va_list ap, ...) /*@modifies ap;@*/ ;
333 void va_end (va_list va) /*@modifies va;@*/ ;
343 typedef /*@abstract@*/ /*@mutable@*/ void *FILE;
344 typedef /*@abstract@*/ /*@mutable@*/ void *fpos_t;
346 /*@constant size_t _IOFBF; @*/
347 /*@constant size_t _IOLBF; @*/
348 /*@constant size_t _IONBF; @*/
350 /*@constant size_t BUFSIZ; @*/ /* evans 2002-02-27 change suggested by Walter Briscoe */
352 /*@constant int EOF; @*/
354 /*@constant int FOPEN_MAX; @*/
355 /*@constant int FILENAME_MAX; @*/
357 /*@constant int L_tmpnam; @*/
359 /*@constant int SEEK_CUR; @*/
360 /*@constant int SEEK_END; @*/
361 /*@constant int SEEK_SET; @*/
363 /*@constant int TMP_MAX; @*/
366 /*@checked@*/ FILE *stderr;
367 /*@checked@*/ FILE *stdin;
368 /*@checked@*/ FILE *stdout;
370 /*@unchecked@*/ FILE *stderr;
371 /*@unchecked@*/ FILE *stdin;
372 /*@unchecked@*/ FILE *stdout;
375 int remove (char *filename) /*@modifies fileSystem, errno@*/ ;
376 int rename (char *old, char *new) /*@modifies fileSystem, errno@*/ ;
378 /*@null@*/ FILE *tmpfile (void) /*@modifies fileSystem@*/ ;
379 /*@observer@*/ char *
380 tmpnam (/*@out@*/ /*@null@*/ /*@returned@*/ char *s)
381 /*@modifies *s, internalState@*/ ;
383 int fclose (FILE *stream) /*@modifies *stream, errno, fileSystem;@*/ ;
384 int fflush (/*@null@*/ FILE *stream)
385 /*@modifies *stream, errno, fileSystem;@*/ ;
387 /*@null@*/ /*@dependent@*/ FILE *fopen (char *filename, char *mode)
388 /*@modifies fileSystem@*/ ;
390 /*@null@*/ FILE *freopen (char *filename, char *mode, FILE *stream)
391 /*@modifies *stream, fileSystem, errno@*/ ;
393 extern void setbuf (FILE *stream, /*@null@*/ /*@exposed@*/ /*@out@*/ char *buf)
394 /*@modifies fileSystem, *stream, *buf@*/ ;
396 extern int setvbuf (FILE *stream, /*@null@*/ /*@exposed@*/ /*@out@*/ char *buf,
397 int mode, size_t size)
398 /*@modifies fileSystem, *stream, *buf@*/ ;
402 int fprintf (FILE *stream, char *format, ...)
403 /*@modifies fileSystem, *stream@*/ ;
406 int /*@alt void@*/ fprintf (FILE *stream, char *format, ...)
407 /*@modifies fileSystem, *stream@*/ ;
411 int fscanf (FILE *stream, char *format, ...)
412 /*@modifies fileSystem, *stream@*/ ;
416 int printf (char *format, ...)
418 /*@modifies fileSystem, *stdout@*/ ;
421 int /*@alt void@*/ printf (char *format, ...)
423 /*@modifies fileSystem, *stdout@*/ ;
427 int scanf(char *format, ...)
429 /*@modifies fileSystem, *stdin@*/ ;
433 int sprintf (/*@out@*/ char *s, char *format, ...)
437 int /*@alt void@*/ sprintf (/*@out@*/ char *s, char *format, ...)
442 int sscanf (/*@out@*/ char *s, char *format, ...) /*@*/ ;
443 /* modifies extra arguments */
445 int vprintf (const char *format, va_list arg)
447 /*@modifies fileSystem, *stdout@*/ ;
449 int vfprintf (FILE *stream, char *format, va_list arg)
450 /*@modifies fileSystem, *stream, arg, errno@*/ ;
452 int vsprintf (/*@out@*/ char *str, const char *format, va_list ap)
453 /*@warn bufferoverflowhigh "Use vsnprintf instead"@*/
456 int vsnprintf (/*@out@*/ char *str, size_t size, const char *format, va_list ap)
457 /*@requires maxSet(str) >= size@*/
460 int fgetc (FILE *stream)
461 /*@modifies fileSystem, *stream, errno@*/ ;
464 fgets (/*@returned@*/ /*@out@*/ char *s, int n, FILE *stream)
465 /*@modifies fileSystem, *s, *stream, errno@*/
466 /*@requires maxSet(s) >= (n -1); @*/
467 /*@ensures maxRead(s) <= (n -1) /\ maxRead(s) >= 0; @*/
470 int fputc (int /*@alt char@*/ c, FILE *stream)
472 /*@modifies fileSystem, *stream, errno@*/ ;
474 int fputs (char *s, FILE *stream)
475 /*@modifies fileSystem, *stream@*/ ;
477 /* note use of sef --- stream may be evaluated more than once */
478 int getc (/*@sef@*/ FILE *stream)
479 /*@modifies fileSystem, *stream@*/ ;
481 int getchar (void) /*@globals stdin@*/ /*@modifies fileSystem, *stdin@*/ ;
483 /*@null@*/ char *gets (/*@out@*/ char *s)
484 /*@warn bufferoverflowhigh
485 "Use of gets leads to a buffer overflow vulnerability. Use fgets instead"@*/
486 /*@globals stdin@*/ /*@modifies fileSystem, *s, *stdin, errno@*/ ;
488 int putc (int /*@alt char@*/ c, /*@sef@*/ FILE *stream)
490 /*@modifies fileSystem, *stream;@*/ ;
492 int putchar (int /*@alt char@*/ c)
494 /*@globals stdout@*/ /*@modifies fileSystem, *stdout@*/ ;
496 int puts (const char *s)
499 /*@modifies fileSystem, *stdout@*/ ;
501 int ungetc (int /*@alt char@*/ c, FILE *stream)
502 /*@modifies fileSystem, *stream, errno@*/ ;
505 fread (/*@out@*/ void *ptr, size_t size, size_t nobj, FILE *stream)
506 /*@modifies fileSystem, *ptr, *stream, errno@*/ ;
508 size_t fwrite (void *ptr, size_t size, size_t nobj, FILE *stream)
509 /*@modifies fileSystem, *stream, errno@*/ ;
511 int fgetpos (FILE *stream, /*@out@*/ fpos_t *pos)
512 /*@modifies *pos, errno@*/ ;
514 int fseek (FILE *stream, long int offset, int whence)
516 /*@modifies fileSystem, *stream, errno@*/ ;
518 int fsetpos (FILE *stream, fpos_t *pos)
519 /*@modifies fileSystem, *stream, errno@*/ ;
521 long int ftell(FILE *stream)
522 /*:errorcode -1:*/ /*@modifies errno*/ ;
524 void rewind (FILE *stream) /*@modifies *stream@*/ ;
525 void clearerr (FILE *stream) /*@modifies *stream@*/ ;
527 int feof (FILE *stream) /*@modifies errno@*/ ;
528 int ferror (FILE *stream) /*@modifies errno@*/ ;
530 void perror (/*@null@*/ char *s)
531 /*@globals errno, stderr@*/ /*@modifies fileSystem, *stderr@*/ ;
537 double atof (char *s) /*@*/ ;
538 int atoi (char *s) /*@*/ ;
539 long int atol (char *s) /*@*/ ;
541 double strtod (char *s, /*@null@*/ /*@out@*/ char **endp)
542 /*@modifies *endp, errno@*/ ;
544 long strtol (char *s, /*@null@*/ /*@out@*/ char **endp, int base)
545 /*@modifies *endp, errno@*/ ;
548 strtoul (char *s, /*@null@*/ /*@out@*/ char **endp, int base)
549 /*@modifies *endp, errno@*/ ;
551 /*@constant int RAND_MAX; @*/
552 int rand (void) /*@modifies internalState@*/ ;
553 void srand (unsigned int seed) /*@modifies internalState@*/ ;
560 /*@null@*/ /*@only@*/ void *calloc (size_t nobj, size_t size) /*@*/
561 /*@ensures maxSet(result) == (nobj - 1); @*/ ;
562 /*@null@*/ /*@out@*/ /*@only@*/ void *malloc (size_t size) /*@*/
563 /*@ensures maxSet(result) == (size - 1); @*/ ;
567 /* 11 June 1997: removed out on return value */
570 /*@null@*/ /*@only@*/ void *
571 realloc (/*@null@*/ /*@only@*/ /*@special@*/ void *p,
572 size_t size) /*@releases p@*/ /*@modifies *p@*/
573 /*@ensures maxSet(result) == (size - 1) @*/;
577 ** LCLint annotations cannot fully describe realloc. The semantics we
579 ** realloc returns null: ownership of parameter is not changed
580 ** realloc returns non-null: ownership of parameter is transferred to return value
582 ** Otherwise, storage is in the same state before and after the call.
585 /*@null@*/ /*@only@*/ void *
586 realloc (/*@null@*/ /*@only@*/ /*@out@*/ /*@returned@*/ void *p, size_t size)
587 /*@modifies *p@*/ /*@ensures maxSet(result) >= (size - 1) @*/;
589 void free (/*@null@*/ /*@out@*/ /*@only@*/ void *p) /*@modifies p@*/ ;
591 /*@constant int EXIT_FAILURE; @*/
592 /*@constant int EXIT_SUCCESS; @*/
594 /*@exits@*/ void abort (void) /*@*/ ;
595 /*@exits@*/ void exit (int status) /*@*/ ;
596 int atexit (void (*func)(void)) /*@modifies internalState@*/ ;
598 /*@observer@*/ /*@null@*/ char *getenv (char *name) /*@*/ ;
600 int system (/*@null@*/ char *s) /*@modifies fileSystem@*/ ;
602 /*@null@*/ /*@dependent@*/ void *
603 bsearch (void *key, void *base,
604 size_t n, size_t size,
605 int (*compar)(void *, void *)) /*@*/ ;
607 void qsort (void *base, size_t n, size_t size,
608 int (*compar)(void *, void *))
609 /*@modifies *base, errno@*/ ;
611 int abs (int n) /*@*/ ;
613 typedef /*@concrete@*/ struct
619 div_t div (int num, int denom) /*@*/ ;
621 long int labs (long int n) /*@*/ ;
623 typedef /*@concrete@*/ struct
629 ldiv_t ldiv (long num, long denom) /*@*/ ;
631 /*@constant size_t MB_CUR_MAX; @*/
634 ** wchar_t and wint_t functions added by Amendment 1 to ISO.
637 /*@constant int WCHAR_MAX@*/
638 /*@constant int WCHAR_MIN@*/
639 /*@constant wint_t WEOF@*/
641 wint_t btowc (int c) /*@*/ ;
643 wint_t fgetwc (FILE *fp) /*@modifies fileSystem, *fp*/ ;
645 /*@null@*/ wchar_t *fgetws (/*@returned@*/ wchar_t *s, int n, FILE *stream)
646 /*@modifies fileSystem, *s, *stream@*/;
648 wint_t fputwc (wchar_t c, FILE *stream)
649 /*@modifies fileSystem, *stream@*/;
651 int fputws (const wchar_t *s, FILE *stream)
652 /*@modifies fileSystem, *stream@*/ ;
654 int fwide (FILE *stream, int mode) /*@*/ ;
655 /* does not modify the stream */
657 /*@printflike@*/ int fwprintf (FILE *stream, const wchar_t *format, ...)
658 /*@modifies *stream, fileSystem@*/ ;
660 /*@scanflike@*/ int fwscanf (FILE *stream, const wchar_t *format, ...)
661 /*@modifies *stream, fileSystem@*/ ;
663 /* note use of sef --- stream may be evaluated more than once */
664 wint_t getwc (/*@sef@*/ FILE *stream) /*@modifies fileSystem, *stream@*/ ;
666 wint_t getwchar (void) /*@modifies fileSystem, *stdin@*/;
668 size_t mbrlen (const char *s, size_t n, /*@null@*/ mbstate_t *ps) /*@*/ ;
670 size_t mbrtowc (/*@null@*/ wchar_t *pwc, const char *s, size_t n,
671 /*@null@*/ mbstate_t *ps)
672 /*@modifies *pwc@*/ ;
674 int mbsinit (/*@null@*/ const mbstate_t *ps) /*@*/ ;
676 size_t mbsrtowcs (/*@null@*/ wchar_t *dst, const char **src, size_t len,
677 /*@null@*/ mbstate_t *ps)
678 /*@modifies *dst@*/ ;
680 /* note use of sef --- stream may be evaluated more than once */
681 wint_t putwc (wchar_t c, /*@sef@*/ FILE *stream) /*@modifies fileSystem, *stream@*/ ;
683 wint_t putwchar (wchar_t c) /*@modifies fileSystem, *stdout@*/ ;
685 /*@printflike@*/ int swprintf (wchar_t *s, size_t n, const wchar_t *format, ...)
688 /*@scanflike@*/ int swscanf (const wchar_t *s, const wchar_t *format, ...)
689 /*@modifies *stdin@*/ ;
691 wint_t ungetwc (wint_t c, FILE *stream) /*@modifies fileSystem, *stream@*/ ;
693 int vfwprintf (FILE *stream, const wchar_t *format, va_list arg)
694 /*@modifies fileSystem, *stream@*/ ;
696 int vswprintf (wchar_t *s, size_t n, const wchar_t *format, va_list arg)
699 int vwprintf (const wchar_t *format, va_list arg)
700 /*@modifies fileSystem, *stdout@*/ ;
702 size_t wcrtomb (/*@null@*/ /*@out@*/ char *s, wchar_t wc, /*@null@*/ mbstate_t *ps)
705 void /*@alt wchar_t *@*/
706 wcscat (/*@unique@*/ /*@returned@*/ /*@out@*/ wchar_t *s1, const wchar_t *s2)
709 /*@exposed@*/ /*@null@*/ wchar_t *
710 wcschr (/*@returned@*/ const wchar_t *s, wchar_t c)
713 int wcscmp (const wchar_t *s1, const wchar_t *s2) /*@*/ ;
715 int wcscoll (const wchar_t *s1, const wchar_t *s2) /*@*/ ;
717 void /*@alt wchar_t *@*/
718 wcscpy (/*@unique@*/ /*@out@*/ /*@returned@*/ wchar_t *s1, const wchar_t *s2)
721 size_t wcscspn (const wchar_t *s1, const wchar_t *s2) /*@*/ ;
723 size_t wcsftime (/*@out@*/ wchar_t *s, size_t maxsize, const wchar_t *format,
724 const struct tm *timeptr)
727 size_t wcslen (const wchar_t *s) /*@*/ ;
729 void /*@alt wchar_t *@*/
730 wcsncat (/*@unique@*/ /*@returned@*/ /*@out@*/ wchar_t *s1, const wchar_t *s2,
734 int wcsncmp (const wchar_t *s1, const wchar_t *s2, size_t n) /*@*/ ;
736 void /*@alt wchar_t *@*/
737 wcsncpy (/*@unique@*/ /*@returned@*/ /*@out@*/ wchar_t *s1, const wchar_t *s2,
742 wcspbrk (/*@returned@*/ const wchar_t *s1, const wchar_t *s2)
746 wcsrchr (/*@returned@*/ const wchar_t *s, wchar_t c)
750 wcsrtombs (/*@null@*/ char *dst, const wchar_t **src, size_t len,
751 /*@null@*/ mbstate_t *ps)
752 /*@modifies *src@*/ ;
754 size_t wcsspn (const wchar_t *s1, const wchar_t *s2) /*@*/ ;
756 /*@null@*/ wchar_t *wcsstr (const wchar_t *s1, const wchar_t *s2) /*@*/ ;
758 double wcstod (const wchar_t *nptr, /*@null@*/ wchar_t **endptr)
759 /*@modifies *endptr@*/ ;
762 wcstok (/*@null@*/ wchar_t *s1, const wchar_t *s2, wchar_t **ptr)
765 long wcstol (const wchar_t *nptr, /*@null@*/ wchar_t **endptr, int base)
766 /*@modifies *endptr@*/;
769 wcstoul (const wchar_t *nptr, /*@null@*/ wchar_t **endptr, int base)
770 /*@modifies *endptr@*/;
773 wcsxfrm (/*@null@*/ wchar_t *s1, const wchar_t *s2, size_t n)
776 int wctob (wint_t c) /*@*/;
778 /*@null@*/ wchar_t *wmemchr (const wchar_t *s, wchar_t c, size_t n) /*@*/ ;
780 int wmemcmp (const wchar_t *s1, const wchar_t *s2, size_t n) /*@*/ ;
782 wchar_t *wmemcpy (/*@returned@*/ wchar_t *s1, const wchar_t *s2, size_t n)
785 wchar_t *wmemmove (/*@returned@*/ wchar_t *s1, const wchar_t *s2, size_t n)
788 wchar_t *wmemset (/*@returned@*/ wchar_t *s, wchar_t c, size_t n)
791 /*@printflike@*/ int wprintf (const wchar_t *format, ...)
792 /*@globals stdout@*/ /*@modifies errno, *stdout@*/;
795 wscanf (const wchar_t *format, ...)
796 /*@globals stdin@*/ /*@modifies errno, *stdin@*/;
799 ** wctype.h (added by Amendment 1)
802 /* Warning: not sure about these (maybe abstract?): */
803 typedef /*@integraltype@*/ wctype_t;
804 typedef /*@integraltype@*/ wctrans_t;
807 lltX_bool iswalnum (wint_t c) /*@*/ ;
808 lltX_bool iswalpha (wint_t c) /*@*/ ;
809 lltX_bool iswcntrl (wint_t c) /*@*/ ;
810 lltX_bool iswctype (wint_t c, wctype_t ctg) /*@*/ ;
811 lltX_bool iswdigit (wint_t c) /*@*/ ;
812 lltX_bool iswgraph (wint_t c) /*@*/ ;
813 lltX_bool iswlower (wint_t c) /*@*/ ;
814 lltX_bool iswprint (wint_t c) /*@*/ ;
815 lltX_bool iswpunct (wint_t c) /*@*/ ;
816 lltX_bool iswspace (wint_t c) /*@*/ ;
817 lltX_bool iswupper (wint_t c) /*@*/ ;
818 lltX_bool iswxdigit (wint_t c) /*@*/ ;
820 wint_t towctrans (wint_t c, wctrans_t ctg) /*@*/ ;
821 wint_t towlower (wint_t c) /*@*/ ;
822 wint_t towupper (wint_t c) /*@*/ ;
824 lltX_bool /*@alt int@*/ iswalnum (wint_t c) /*@*/ ;
825 lltX_bool /*@alt int@*/ iswalpha (wint_t c) /*@*/ ;
826 lltX_bool /*@alt int@*/ iswcntrl (wint_t c) /*@*/ ;
827 lltX_bool /*@alt int@*/ iswctype (wint_t c, wctype_t ctg) /*@*/ ;
828 lltX_bool /*@alt int@*/ iswdigit (wint_t c) /*@*/ ;
829 lltX_bool /*@alt int@*/ iswgraph (wint_t c) /*@*/ ;
830 lltX_bool /*@alt int@*/ iswlower (wint_t c) /*@*/ ;
831 lltX_bool /*@alt int@*/ iswprint (wint_t c) /*@*/ ;
832 lltX_bool /*@alt int@*/ iswpunct (wint_t c) /*@*/ ;
833 lltX_bool /*@alt int@*/ iswspace (wint_t c) /*@*/ ;
834 lltX_bool /*@alt int@*/ iswupper (wint_t c) /*@*/ ;
835 lltX_bool /*@alt int@*/ iswxdigit (wint_t c) /*@*/ ;
837 wint_t /*@alt int@*/ towctrans (wint_t c, wctrans_t ctg) /*@*/ ;
838 wint_t /*@alt int@*/ towlower (wint_t c) /*@*/ ;
839 wint_t /*@alt int@*/ towupper (wint_t c) /*@*/ ;
842 wctrans_t wctrans (const char *property) /*@*/ ;
843 wctype_t wctype (const char *property) /*@*/ ;
845 int mblen (char *s, size_t n) /*@*/ ;
846 int mbtowc (/*@null@*/ wchar_t *pwc, /*@null@*/ char *s, size_t n)
847 /*@modifies *pwc@*/ ;
848 int wctomb (/*@out@*/ /*@null@*/ char *s, wchar_t wchar)
850 size_t mbstowcs (/*@out@*/ wchar_t *pwcs, char *s, size_t n)
851 /*@modifies *pwcs@*/ ;
852 size_t wcstombs (/*@out@*/ char *s, wchar_t *pwcs, size_t n)
859 void /*@alt void * @*/
860 memcpy (/*@unique@*/ /*@returned@*/ /*@out@*/ void *s1, void *s2, size_t n)
862 /*@requires maxRead(s2) >= (n - 1) /\ maxSet(s1) >= (n - 1); @*/
865 void /*@alt void * @*/
866 memmove (/*@returned@*/ /*@out@*/ void *s1, void *s2, size_t n)
868 /*@requires maxRead(s2) >= (n - 1) /\ maxSet(s1) >= (n - 1); @*/
876 void /*@alt char * @*/
877 strcpy (/*@unique@*/ /*@out@*/ /*@returned@*/ char *s1, char *s2)
879 /*@requires maxSet(s1) >= maxRead(s2) @*/
880 /*@ensures maxRead(s1) == maxRead (s2) /\ maxRead(result) == maxRead(s2) /\ maxSet(result) == maxSet(s1); @*/;
882 void /*@alt char * @*/
883 strncpy (/*@unique@*/ /*@out@*/ /*@returned@*/ char *s1, char *s2, size_t n)
885 /*@requires maxSet(s1) >= ( n - 1 ); @*/
886 /*@ensures maxRead (s2) >= maxRead(s1) /\ maxRead (s1) <= n; @*/ ;
888 void /*@alt char * @*/
889 strcat (/*@unique@*/ /*@returned@*/ char *s1, char *s2)
890 /*@modifies *s1@*/ /*@requires maxSet(s1) >= (maxRead(s1) + maxRead(s2) );@*/
891 /*@ensures maxRead(result) == (maxRead(s1) + maxRead(s2) );@*/;
893 void /*@alt char * @*/
894 strncat (/*@unique@*/ /*@returned@*/ char *s1, char *s2, size_t n)
896 /*@requires maxSet(s1) >= ( maxRead(s1) + n); @*/
897 /*@ensures maxRead(s1) >= (maxRead(s1) + n); @*/;
901 int memcmp (void *s1, void *s2, size_t n) /*@*/ ;
902 int strcmp (char *s1, char *s2) /*@*/ ;
903 int strcoll (char *s1, char *s2) /*@*/ ;
904 int strncmp (char *s1, char *s2, size_t n) /*@*/ ;
905 size_t strxfrm (/*@out@*/ /*@null@*/ char *s1, char *s2, size_t n)
906 /*@modifies *s1@*/ ; /* s1 may be null only if n == 0 */
908 /*@null@*/ void *memchr (void *s, int c, size_t n) /*@*/ ;
911 /*@exposed@*/ /*@null@*/ char *
912 strchr (/*@returned@*/ char *s, char c) /*@*/ /*@ensures maxSet(result) >= 0 /\ maxSet(result) <= maxSet(s) /\ maxRead (result) <= maxRead(s) /\ maxRead(result) >= 0 @*/ ;
914 /*@exposed@*/ /*@null@*/ char *
915 strchr (/*@returned@*/ char *s, int /*@alt char@*/ c) /*@*/ /*@ensures maxSet(result) >= 0 /\ maxSet(result) <= maxSet(s) /\ maxRead (result) <= maxRead(s) /\ maxRead(result) >= 0; @*/ ;
918 size_t strcspn (char *s1, char *s2) /*@*/ ;
919 /*@null@*/ /*@exposed@*/ char *
920 strpbrk (/*@returned@*/ char *s, char *t) /*@*/ ;
923 /*@null@*/ /*@exposed@*/ char *
924 strrchr (/*@returned@*/ char *s, char c) /*@*/ /*@ensures maxSet(result) >= 0 /\ maxSet(result) <= maxSet(s) /\ maxRead (result) <= maxRead(s) /\ maxRead(result) >= 0 @*/ ;
926 /*@null@*/ /*@exposed@*/ char *
927 strrchr (/*@returned@*/ char *s, int /*@alt char@*/ c) /*@*/ /*@ensures maxSet(result) >= 0 /\ maxSet(result) <= maxSet(s) /\ maxRead (result) <= maxRead(s) /\ maxRead(result) >= 0 @*/ ;
930 size_t strspn (char *s, char *t) /*@*/ ;
932 /*@null@*/ /*@exposed@*/ char *
933 strstr (/*@returned@*/ /*@unique@*/ char *s, char *t) /*@*/
934 /*@ensures maxSet(result) >= 0 /\ maxSet(result) <= maxSet(s) /\ maxRead (result) <= maxRead(s) /\ maxRead(result) >= 0 /\ maxRead(result) >= maxRead(t) /\ maxSet(result) >= maxRead(t)@*/ ;
936 /*@null@*/ /*@exposed@*/ char *
937 strtok (/*@returned@*/ /*@null@*/ char *s, char *t)
938 /*@modifies *s, internalState, errno@*/ ;
940 void /*@alt void *@*/ memset (/*@out@*/ /*@returned@*/ void *s,
942 /*@modifies *s@*/ /*@requires maxSet(s) >= (n - 1) @*/ /*@ensures maxRead(s) >= (n - 1) @*/ ;
944 /*@observer@*/ char *strerror (int errnum) /*@*/ ;
947 size_t strlen (char *s) /*@*/ /*@ensures result == maxRead(s); @*/;
953 /*@constant int CLOCKS_PER_SEC;@*/
955 typedef /*@integraltype@*/ clock_t;
956 typedef /*@integraltype@*/ time_t;
971 clock_t clock (void) /*@modifies internalState@*/ ;
972 double difftime (time_t time1, time_t time0) /*@*/ ;
973 time_t mktime (struct tm *timeptr) /*@*/ ;
975 time_t time (/*@null@*/ /*@out@*/ time_t *tp)
978 /*@observer@*/ char *asctime (struct tm *timeptr)
979 /*@modifies errno*/ /*@ensures maxSet(result) == 25 /\ maxRead(result) == 25; @*/ ;
981 /*@observer@*/ char *ctime (time_t *tp) /*@*/
982 /*@ensures maxSet(result) == 25 /\ maxRead(result) == 25; @*/;
984 /*@null@*/ /*@observer@*/ struct tm *gmtime (time_t *tp) /*@*/ ;
986 /*@null@*/ /*@observer@*/ struct tm *localtime (time_t *tp)
987 /*@modifies errno@*/ ;
989 size_t strftime (/*@out@*/ char *s, size_t smax,
990 char *fmt, struct tm *timeptr)
994 ** ISO c99: 7.18 Integer types <stdint.h>
998 ** These types are OPTIONAL. Provide warnings on use.
1001 typedef /*@integraltype@*/ int8_t
1002 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider int_least8_t instead."@*/ ;
1004 typedef /*@integraltype@*/ int16_t
1005 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider int_least16_t instead."@*/ ;
1007 typedef /*@integraltype@*/ int32_t
1008 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider int_least32_t instead."@*/ ;
1010 typedef /*@integraltype@*/ int64_t
1011 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider int_least64_t instead."@*/ ;
1013 typedef /*@unsignedintegraltype@*/ uint8_t
1014 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider uint_least8_t instead."@*/ ;
1016 typedef /*@unsignedintegraltype@*/ uint16_t
1017 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider uint_least16_t instead."@*/ ;
1019 typedef /*@unsignedintegraltype@*/ uint32_t
1020 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider uint_least32_t instead."@*/ ;
1022 typedef /*@unsignedintegraltype@*/ uint64_t
1023 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide. Consider uint_least64_t instead."@*/ ;
1025 typedef /*@integraltype@*/ int_least8_t;
1026 typedef /*@integraltype@*/ int_least16_t;
1027 typedef /*@integraltype@*/ int_least32_t;
1028 typedef /*@integraltype@*/ int_least64_t;
1030 typedef /*@unsignedintegraltype@*/ uint_least8_t;
1031 typedef /*@unsignedintegraltype@*/ uint_least16_t;
1032 typedef /*@unsignedintegraltype@*/ uint_least32_t;
1033 typedef /*@unsignedintegraltype@*/ uint_least64_t;
1035 typedef /*@integraltype@*/ int_fast8_t;
1036 typedef /*@integraltype@*/ int_fast16_t;
1037 typedef /*@integraltype@*/ int_fast32_t;
1038 typedef /*@integraltype@*/ int_fast64_t;
1040 typedef /*@unsignedintegraltype@*/ uint_fast8_t;
1041 typedef /*@unsignedintegraltype@*/ uint_fast16_t;
1042 typedef /*@unsignedintegraltype@*/ uint_fast32_t;
1043 typedef /*@unsignedintegraltype@*/ uint_fast64_t;
1045 typedef int *intptr_t
1046 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide."@*/ ;
1048 typedef unsigned int *uintptr_t
1049 /*@warn implementationoptional "ISO99 specifies as optional type, implementation need not provide."@*/ ;
1051 typedef /*@signedintegraltype@*/ intmax_t;
1052 typedef /*@unsignedintegraltype@*/ uintmax_t;
1055 ** What should the types be here?
1058 /*@constant int INT8_MIN@*/
1059 /*@constant int INT16_MIN@*/
1060 /*@constant int INT32_MIN@*/
1061 /*@constant int INT64_MIN@*/
1063 /*@constant int INT8_MAX@*/
1064 /*@constant int INT16_MAX@*/
1065 /*@constant int INT32_MAX@*/
1066 /*@constant int INT64_MAX@*/
1068 /*@constant int UINT8_MIN@*/
1069 /*@constant int UINT16_MIN@*/
1070 /*@constant int UINT32_MIN@*/
1071 /*@constant int UINT64_MIN@*/
1073 /*@constant int INT_LEAST8_MIN@*/
1074 /*@constant int INT_LEAST16_MIN@*/
1075 /*@constant int INT_LEAST32_MIN@*/
1076 /*@constant int INT_LEAST64_MIN@*/
1078 /*@constant int INT_LEAST8_MAX@*/
1079 /*@constant int INT_LEAST16_MAX@*/
1080 /*@constant int INT_LEAST32_MAX@*/
1081 /*@constant int INT_LEAST64_MAX@*/
1083 /*@constant int UINT_LEAST8_MAX@*/
1084 /*@constant int UINT_LEAST16_MAX@*/
1085 /*@constant int UINT_LEAST32_MAX@*/
1086 /*@constant int UINT_LEAST64_MAX@*/
1088 /*@constant int INT_FAST8_MIN@*/
1089 /*@constant int INT_FAST16_MIN@*/
1090 /*@constant int INT_FAST32_MIN@*/
1091 /*@constant int INT_FAST64_MIN@*/
1093 /*@constant int INT_FAST8_MAX@*/
1094 /*@constant int INT_FAST16_MAX@*/
1095 /*@constant int INT_FAST32_MAX@*/
1096 /*@constant int INT_FAST64_MAX@*/
1098 /*@constant int UINT_FAST8_MAX@*/
1099 /*@constant int UINT_FAST16_MAX@*/
1100 /*@constant int UINT_FAST32_MAX@*/
1101 /*@constant int UINT_FAST64_MAX@*/
1103 /*@constant size_t INTPTR_MIN@*/
1104 /*@constant size_t INTPTR_MAX@*/