[core] use C23 memset_explicit() were available

[multiple] quiet some coverity false positives

[core] ck_calloc() ck_malloc() ck_realloc_u32()

checking functions to wrap calloc(), malloc(), and realloc(),
which ck_assert() that memory allocation succeeds

ck_realloc_u32() additionally checks

[core] ck_calloc() ck_malloc() ck_realloc_u32()

checking functions to wrap calloc(), malloc(), and realloc(),
which ck_assert() that memory allocation succeeds

ck_realloc_u32() additionally checks for integer overflow in args
and that nmemb fits in uint32_t

show more ...

[core] fix compiler warning in 32-bit build

[core] make ck_memeq_const_time() more generic (#3112)

make ck_memeq_const_time() more generically reusable

remove implementation requirements that strings be '\0' terminated,
or at least have an i

[core] make ck_memeq_const_time() more generic (#3112)

make ck_memeq_const_time() more generically reusable

remove implementation requirements that strings be '\0' terminated,
or at least have an initialized byte following each string (s[len])

x-ref:
https://redmine.lighttpd.net/issues/3112
"mod_auth cache password doesn't match"

show more ...

[core] add comment to ck_memeq_const_time()

add comment to ck_memeq_const_time() with some implementation details

[multiple] __attribute_nonnull__ now takes params

define __attribute_nonnull__(params) with params to match
recent changes in glibc development (targetting glibc 2.35 in Feb 2022)

x-ref:
new __at

[multiple] __attribute_nonnull__ now takes params

define __attribute_nonnull__(params) with params to match
recent changes in glibc development (targetting glibc 2.35 in Feb 2022)

x-ref:
new __attribute_nonnull__(params) conflicts with third-party
https://sourceware.org/bugzilla/show_bug.cgi?id=28425

show more ...

[core] portability tweaks for various platforms/cc

[core] change backtrace format to put addr first

(better monospaced alignment of frame num, addr, offset, name)

[core] expose ck_bt() for debugging

[core] move backtrace and assert macros to ck.[ch]

[core] comment out ck_getenv_s() (unused)

ck_getenv_s() not currently used in lighttpd;
lighttpd process env is stable

[multiple] move const time cmp funcs to ck.[ch]

http_auth_const_time_memeq_pad() -> ck_memeq_const_time()
http_auth_const_time_memeq() -> ck_memeq_const_time_fixed_len()

[core] ck.[ch] - C11 Annex K wrappers

(selected functions; not complete)

(import from one of my development branches from 2016)

define safe_memclear() -> ck_memzero() for transition