aboutsummaryrefslogtreecommitdiffstats
path: root/src (follow)
Commit message (Collapse)AuthorAgeFilesLines
* * image.c (xpm_scan) [HAVE_NS && !HAVE_XPM]:Paul Eggert2011-06-192-13/+6
| | | | Don't assume string length fits in int.
* * gtkutil.c (style_changed_cb): Avoid need for strlen.Paul Eggert2011-06-192-2/+4
|
* * font.c (font_intern_prop): Don't assume string length fits in int.Paul Eggert2011-06-193-4/+13
| | | | | Don't assume integer property fits in fixnum. * font.h (font_intern_prop): 2nd arg is now ptrdiff_t, not int.
* * font.c: Don't assume string length fits in int.Paul Eggert2011-06-192-5/+10
| | | | | (font_parse_xlfd, font_parse_fcname, font_unparse_fcname): Use ptrdiff_t, not int.
* * filelock.c: Fix some buffer overrun and integer overflow issues.Paul Eggert2011-06-192-42/+62
| | | | | | | | | | | | | | (get_boot_time): Don't assume that gzip command string fits in 100 bytes. Reformulate so as not to need the command string. Invoke gzip -cd rather than gunzip, as it's more portable. (lock_info_type, lock_file_1, lock_file): Don't assume pid_t and time_t fit in unsigned long. (LOCK_PID_MAX): Remove; we now use more-reliable bounds. (current_lock_owner): Prefer signed type for sizes. Use memcpy, not strncpy, where memcpy is what is really wanted. Don't assume (via atoi) that time_t and pid_t fit in int. Check for time_t and/or pid_t out of range, e.g., via a network share. Don't alloca where an auto var works fine.
* * fileio.c: Fix some integer overflow issues.Paul Eggert2011-06-192-18/+24
| | | | | | | | (file_name_as_directory, Fexpand_file_name, Fsubstitute_in_file_name): Don't assume string length fits in int. (directory_file_name): Don't assume string length fits in long. (make_temp_name): Don't assume pid fits in int, or that its print length is less than 20.
* * data.c (Fsubr_name): Rewrite to avoid a strlen call.Paul Eggert2011-06-192-1/+3
|
* * coding.c (make_subsidiaries): Don't assume string length fits in int.Paul Eggert2011-06-192-2/+4
|
* * callproc.c (child_setup): Rewrite to avoid two strlen calls.Paul Eggert2011-06-192-2/+3
|
* * process.c (Fformat_network_address): Use EMACS_INT, not EMACS_UINT.Paul Eggert2011-06-192-1/+4
| | | | We prefer signed integers, even for size calculations.
* * emacs.c: Don't assume string length fits in 'int'.Paul Eggert2011-06-192-8/+11
| | | | | (DEFINE_DUMMY_FUNCTION, sort_args): Use ptrdiff_t, not int. (main): Don't invoke strlen when not needed.
* * dbusbind.c (XD_ERROR): Don't arbitrarily truncate string.Paul Eggert2011-06-192-7/+9
| | | | (XD_DEBUG_MESSAGE): Don't waste a byte.
* * callproc.c: Don't assume string length fits in 'int.'Paul Eggert2011-06-192-5/+7
|
* * buffer.c (init_buffer): Don't assume string length fits in 'int'.Paul Eggert2011-06-192-1/+3
|
* * lread.c (string_to_number): Simplify the 2011-04-26 change by invoking ↵Paul Eggert2011-06-182-1/+2
| | | | xsignal1.
* * lread.c (invalid_syntax): Omit length argument.Paul Eggert2011-06-182-18/+21
| | | | | | All uses changed. This doesn't fix a bug, but it simplifies the code away from its former Hollerith-constant appearance, and it's one less 'int' to worry about when looking at integer-overflow issues.
* * lisp.h (make_fixnum_or_float): Remove unnecessary cast to EMACS_INT.Paul Eggert2011-06-182-3/+2
|
* * lisp.h (LIST_END_P): Remove unused macro and its bogus comment.Paul Eggert2011-06-182-18/+1
|
* * lisp.h (DEFUN): Remove bogus use of sizeof (struct Lisp_Subr).Paul Eggert2011-06-182-1/+8
| | | | | | This didn't break anything, but it didn't help either. It's confusing to put a bogus integer in a place where the actual value does not matter.
* * lisp.h (XSET) [USE_LISP_UNION_TYPE]: Use uintptr_t and intptr_t,Paul Eggert2011-06-182-3/+6
| | | | | not EMACS_UINT and EMACS_INT, when converting pointer to integer. This avoids a GCC warning when WIDE_EMACS_INT.
* * lisp.h (struct Lisp_Bool_Vector.size): EMACS_INT, not EMACS_UINT.Paul Eggert2011-06-182-1/+4
| | | | | We prefer signed types, and the value cannot exceed the EMACS_INT range anyway (because otherwise the length would not be representable).
* * lisp.h (union Lisp_Object.i): EMACS_INT, not EMACS_UINT.Paul Eggert2011-06-182-2/+6
| | | | | This is for consistency with the ordinary, non-USE_LISP_UNION_TYPE, implementation.
* * indent.c (Fcompute_motion): Don't assume hscroll and tab offset fit in int.Paul Eggert2011-06-182-1/+2
|
* * insdel.c: Omit unnecessary forward decls, to simplify future changes.Paul Eggert2011-06-182-7/+2
|
* * indent.c (sane_tab_width): New function.Paul Eggert2011-06-182-19/+19
| | | | | (current_column, scan_for_column, Findent_to, position_indentation) (compute_motion): Use it. This is just for clarity.
* * image.c (xbm_image_p): Don't assume stated width and height fit in int.Paul Eggert2011-06-182-2/+4
|
* * lisp.h (lint_assume): New macro.Paul Eggert2011-06-184-1/+17
| | | | | * composite.c (composition_gstring_put_cache): * ftfont.c (ftfont_shape_by_flt): Use it to pacify GCC 4.6.0.
* * fns.c (Ffillarray): Don't shadow a local.Paul Eggert2011-06-181-2/+3
|
* * editfns.c: Omit unnecessary forward decls, to simplify future changes.Paul Eggert2011-06-182-14/+2
|
* * ftfont.c (ftfont_shape_by_flt): Use signed integers for lengths.Paul Eggert2011-06-182-2/+4
|
* * font.c (Ffont_shape_gstring): Don't assume glyph len fits in 'int'.Paul Eggert2011-06-182-1/+3
|
* * fns.c (mapcar1): Declare byte as byte, for clarity.Paul Eggert2011-06-182-1/+2
|
* * fns.c (Ffillarray): Use same idx as rest of code here.Paul Eggert2011-06-181-3/+2
|
* * fns.c: Check that character arg fits in 'int'.Paul Eggert2011-06-182-3/+4
|
* * fns.c: Don't assume string byte-length fits in 'int'.Paul Eggert2011-06-182-1/+2
|
* * fns.c: Use much-faster test for byte-length change.Paul Eggert2011-06-182-9/+6
|
* * fns.c (Ffillarray): Don't assume bool vector size fits in 'int'.Paul Eggert2011-06-182-10/+10
|
* * alloc.c (Fmake_bool_vector): Avoid unnecessary multiplication.Paul Eggert2011-06-182-5/+9
|
* * fns.c (concat): Catch string overflow earlier.Paul Eggert2011-06-182-2/+5
| | | | Do not rely on integer wraparound.
* * dispextern.h (struct it.overlay_strings_charpos): EMACS_INT, not int.Paul Eggert2011-06-172-1/+5
|
* * dispextern.h (struct it.selective): Now EMACS_INT, not int.Paul Eggert2011-06-173-5/+12
| | | | | | | * xdisp.c (forward_to_next_line_start) (back_to_previous_visible_line_start) (reseat_at_next_visible_line_start, next_element_from_buffer): Don't arbitrarily truncate the value of 'selective' to int.
* * xdisp.c (init_iterator): Use XINT, not XFASTINT; it might be < 0.Paul Eggert2011-06-172-1/+3
|
* * composite.c (get_composition_id, composition_gstring_put_cache): Use ↵Paul Eggert2011-06-172-3/+5
| | | | | | EMACS_INT, not EMACS_UINT, for indexes.
* * composite.c: Don't truncate sizes to 'int'.Paul Eggert2011-06-172-4/+7
| | | | | (composition_gstring_p, composition_reseat_it) (composition_adjust_point): Use EMACS_INT, not int.
* * category.h (CATEGORY_SET_P): Remove unnecessary cast to EMACS_INT.Paul Eggert2011-06-172-1/+3
|
* * buffer.c: Include <verify.h>.Paul Eggert2011-06-172-2/+6
| | | | (init_buffer_once): Check at compile-time, not run-time.
* * buffer.c (record_overlay_string): Check for size-calculation overflow.Paul Eggert2011-06-172-4/+10
| | | | (struct sortstrlist.size, struct sortlist.used): Don't truncate size to int.
* * buffer.c (struct sortstr.size, record_overlay_string): Don't truncate size ↵Paul Eggert2011-06-172-2/+4
| | | | to int.
* * buffer.c (compare_overlays, cmp_for_strings): Avoid subtraction overflow.Paul Eggert2011-06-172-5/+6
|
* * buffer.c (struct sortstr.priority): Now EMACS_INT, not int.Paul Eggert2011-06-172-2/+3
|