[libc-commits] [libc] [libc] Add `ctime_s` (PR #110676)

[Nick Desaulniers via libc-commits]

================
@@ -0,0 +1,43 @@
+//===-- Implementation of ctime_s function --------------------------------===//
+//
+// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
+// See https://llvm.org/LICENSE.txt for license information.
+// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
+//
+//===----------------------------------------------------------------------===//
+
+#include "ctime_s.h"
+#include "hdr/errno_macros.h"
+#include "src/__support/CPP/limits.h"
+#include "src/__support/common.h"
+#include "src/__support/macros/config.h"
+#include "time_utils.h"
+
+namespace LIBC_NAMESPACE_DECL {
+
+using LIBC_NAMESPACE::time_utils::TimeConstants;
+
+LLVM_LIBC_FUNCTION(int, ctime_s,
+                   (char *buffer, rsize_t buffer_size, const time_t *t_ptr)) {
+  if (t_ptr == nullptr || buffer == nullptr ||
+      *t_ptr > cpp::numeric_limits<int32_t>::max()) {
+    if (buffer_size != 0 && buffer_size <= RSIZE_MAX)
+      buffer[0] = '\0';
----------------
nickdesaulniers wrote:

What happens if `buffer` is `nullptr` (while the other params are ok)? We'll end up dereferencing it, which we do not want to do.  So I think you should just start out with:

```c++
if (buffer == nullptr || t_ptr == nullptr)
  return EINVAL;
```
then move on to validating the other inputs.

https://github.com/llvm/llvm-project/pull/110676