tree 79e6af188846dcf2c4f54c37b517e78ce1b745a4
parent 4b976f45234c59cfa98eb8ea5b14bdbea0078f08
author David Brazdil <dbrazdil@google.com> 1566559266 +0100
committer David Brazdil <dbrazdil@google.com> 1566997901 +0100

std.c: Refactor, bring semantics closer to spec.

Small refactor replacing the pattern of verifying inputs in
safe equivalents of stdlib functions with a CHECK-like macro
which adheres to the C11 semantics of filling the destination
buffer when a constraint is not satisfied at runtime.

Semantic changes:

memcpy_s: More permissive memory ranges. Used to check that source does
not overlap with the entire destination buffer, when only the first
`count` bytes matter.

memcpy_s: Used to allow `dest==src`. Safe under our implementation in
aarch64 but not allowed under C11.

strlen_s: Should return 'strsz' if NULL character not found.

Change-Id: If483a97e6ee1c64c7f2afed9a0af1d3087da7002