Make improvements

- Invent openatemp() API
- Invent O_UNLINK open flag
- Introduce getenv_secure() API
- Remove `git pull` from cosmocc
- Fix utimes() when path is NULL
- Fix mktemp() to never return NULL
- Fix utimensat() UTIME_OMIT on XNU
- Improve utimensat() code for RHEL5
- Turn `argv[0]` C:/ to /C/ on Windows
- Introduce tmpnam() and tmpnam_r() APIs
- Fix more const issues with internal APIs
- Permit utimes() on WIN32 in O_RDONLY mode
- Fix fdopendir() to check fd is a directory
- Fix recent crash regression in landlock make
- Fix futimens(AT_FDCWD, NULL) to return EBADF
- Use workaround so `make -j` doesn't fork bomb
- Rename dontdiscard to __wur (just like glibc)
- Fix st_size for WIN32 symlinks containing UTF-8
- Introduce stdio ext APIs needed by GNU coreutils
- Fix lstat() on WIN32 for symlinks to directories
- Move some constants from normalize.inc to limits.h
- Fix segv with memchr() and memcmp() overlapping page
- Implement POSIX fflush() behavior for reader streams
- Implement AT_SYMLINK_NOFOLLOW for utimensat() on WIN32
- Don't change read-only status of existing files on WIN32
- Correctly handle `0x[^[:xdigit:]]` case in strtol() functions

libc/runtime/cocmd.c

@@ -28,10 +28,10 @@
 #include "libc/intrin/bits.h"
 #include "libc/intrin/getenv.internal.h"
 #include "libc/intrin/weaken.h"
+#include "libc/limits.h"
 #include "libc/macros.internal.h"
 #include "libc/runtime/runtime.h"
 #include "libc/stdio/stdio.h"
-#include "libc/stdio/temp.h"
 #include "libc/str/str.h"
 #include "libc/sysv/consts/lock.h"
 #include "libc/sysv/consts/o.h"
@@ -39,6 +39,7 @@
 #include "libc/sysv/consts/s.h"
 #include "libc/sysv/consts/sig.h"
 #include "libc/sysv/consts/timer.h"
+#include "libc/temp.h"
 #include "third_party/awk/cmd.h"
 #include "third_party/getopt/getopt.internal.h"
 #include "third_party/musl/glob.h"

libc/runtime/findcombinary.c

@@ -16,6 +16,7 @@
 │ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR             │
 │ PERFORMANCE OF THIS SOFTWARE.                                                │
 ╚─────────────────────────────────────────────────────────────────────────────*/
+#include "libc/limits.h"
 #include "libc/macros.internal.h"
 #include "libc/runtime/runtime.h"
 #include "libc/str/str.h"

libc/runtime/memtrack.internal.h

@@ -41,7 +41,7 @@ struct MemoryInterval {
 struct MemoryIntervals {
   size_t i, n;
   struct MemoryInterval *p;
-  struct MemoryInterval s[OPEN_MAX];
+  struct MemoryInterval s[16];
 };
 
 extern struct MemoryIntervals _mmi;

libc/runtime/printargs.c

@@ -32,6 +32,7 @@
 #include "libc/intrin/kprintf.h"
 #include "libc/intrin/promises.internal.h"
 #include "libc/intrin/strace.internal.h"
+#include "libc/limits.h"
 #include "libc/macros.internal.h"
 #include "libc/nexgen32e/cpuid4.internal.h"
 #include "libc/nexgen32e/kcpuids.h"

libc/runtime/runtime.h

@@ -36,10 +36,9 @@ void _exit(int) libcesque wontreturn;
 void _Exit(int) libcesque wontreturn;
 void quick_exit(int) wontreturn;
 void abort(void) wontreturn;
-int __cxa_atexit(void *, void *, void *) libcesque;
-int atfork(void *, void *) libcesque;
-int atexit(void (*)(void)) libcesque;
-char *getenv(const char *) nosideeffect libcesque;
+int __cxa_atexit(void *, void *, void *) paramsnonnull((1)) libcesque;
+int atexit(void (*)(void)) paramsnonnull() libcesque;
+char *getenv(const char *) paramsnonnull() __wur nosideeffect libcesque;
 int putenv(char *);
 int setenv(const char *, const char *, int);
 int unsetenv(const char *);
@@ -65,6 +64,7 @@ int acct(const char *);
 
 #if defined(_GNU_SOURCE) || defined(_COSMO_SOURCE)
 extern char **environ;
+char *secure_getenv(const char *) paramsnonnull() __wur nosideeffect libcesque;
 #endif
 
 #ifdef _COSMO_SOURCE
@@ -91,7 +91,6 @@ void _longsort(long *, size_t);
 /* diagnostics */
 void ShowCrashReports(void);
 void __printargs(const char *);
-int _getcpucount(void) pureconst;
 int ftrace_install(void);
 int ftrace_enabled(int);
 int strace_enabled(int);

libc/runtime/winargs.internal.h

@@ -1,5 +1,6 @@
 #ifndef COSMOPOLITAN_LIBC_RUNTIME_WINARGS_INTERNAL_H_
 #define COSMOPOLITAN_LIBC_RUNTIME_WINARGS_INTERNAL_H_
+#include "libc/limits.h"
 #if !(__ASSEMBLER__ + __LINKER__ + 0)
 COSMOPOLITAN_C_START_
 

libc/runtime/winmain.greg.c

@@ -98,6 +98,10 @@ static const short kConsoleModes[3] = {
 static uint32_t __init_pid;
 static uint32_t __console_mode[3];
 
+forceinline int IsAlpha(int c) {
+  return ('A' <= c && c <= 'Z') || ('a' <= c && c <= 'z');
+}
+
 // implements all win32 apis on non-windows hosts
 __msabi long __oops_win32(void) {
   assert(!"win32 api called on non-windows host");
@@ -185,6 +189,12 @@ __msabi static textwindows wontreturn void WinMainNew(const char16_t *cmdline) {
       wa->argv[0][i] = '/';
     }
   }
+  if (IsAlpha(wa->argv[0][0]) &&  //
+      wa->argv[0][1] == ':' &&    //
+      wa->argv[0][2] == '/') {
+    wa->argv[0][1] = wa->argv[0][0];
+    wa->argv[0][0] = '/';
+  }
   char16_t *env16 = __imp_GetEnvironmentStringsW();
   GetDosEnviron(env16, wa->envblock, ARRAYLEN(wa->envblock) - 8, wa->envp,
                 ARRAYLEN(wa->envp) - 1);