Make improvements

- Invent openatemp() API
- Invent O_UNLINK open flag
- Introduce getenv_secure() API
- Remove `git pull` from cosmocc
- Fix utimes() when path is NULL
- Fix mktemp() to never return NULL
- Fix utimensat() UTIME_OMIT on XNU
- Improve utimensat() code for RHEL5
- Turn `argv[0]` C:/ to /C/ on Windows
- Introduce tmpnam() and tmpnam_r() APIs
- Fix more const issues with internal APIs
- Permit utimes() on WIN32 in O_RDONLY mode
- Fix fdopendir() to check fd is a directory
- Fix recent crash regression in landlock make
- Fix futimens(AT_FDCWD, NULL) to return EBADF
- Use workaround so `make -j` doesn't fork bomb
- Rename dontdiscard to __wur (just like glibc)
- Fix st_size for WIN32 symlinks containing UTF-8
- Introduce stdio ext APIs needed by GNU coreutils
- Fix lstat() on WIN32 for symlinks to directories
- Move some constants from normalize.inc to limits.h
- Fix segv with memchr() and memcmp() overlapping page
- Implement POSIX fflush() behavior for reader streams
- Implement AT_SYMLINK_NOFOLLOW for utimensat() on WIN32
- Don't change read-only status of existing files on WIN32
- Correctly handle `0x[^[:xdigit:]]` case in strtol() functions

third_party/mbedtls/formatclientciphers.c

@@ -25,7 +25,7 @@
  * Returns string of joined list of first 𝑘 client preferred ciphers.
  * @return string that must be free'd, or null if none set
  */
-dontdiscard char *FormatSslClientCiphers(const mbedtls_ssl_context *ssl) {
+__wur char *FormatSslClientCiphers(const mbedtls_ssl_context *ssl) {
   int i;
   char *b = 0;
   for (i = 0; i < ARRAYLEN(ssl->client_ciphers); ++i) {

third_party/mbedtls/iana.h

@@ -8,7 +8,7 @@ bool IsCipherSuiteGood(uint16_t);
 const char *GetCipherSuiteName(uint16_t);
 const char *DescribeMbedtlsErrorCode(int);
 const char *GetAlertDescription(unsigned char);
-dontdiscard char *FormatSslClientCiphers(const mbedtls_ssl_context *);
+char *FormatSslClientCiphers(const mbedtls_ssl_context *) __wur;
 const char *DescribeSslClientHandshakeError(const mbedtls_ssl_context *, int);
 
 COSMOPOLITAN_C_END_