# German translation of manpages # This file is distributed under the same license as the manpages-l10n package. # Copyright © of this file: # Helge Kreutzmann , 2024. msgid "" msgstr "" "Project-Id-Version: manpages-l10n 4.21.0\n" "POT-Creation-Date: 2024-03-01 16:52+0100\n" "PO-Revision-Date: 2024-03-03 10:43+0100\n" "Last-Translator: Helge Kreutzmann \n" "Language-Team: German \n" "Language: de\n" "MIME-Version: 1.0\n" "Content-Type: text/plain; charset=UTF-8\n" "Content-Transfer-Encoding: 8bit\n" "Plural-Forms: nplurals=2; plural=(n != 1);\n" #. type: TH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "attributes" msgstr "Attribute" #. type: TH #: archlinux fedora-40 fedora-rawhide mageia-cauldron #, no-wrap msgid "2023-11-01" msgstr "1. November 2023" #. type: TH #: archlinux fedora-40 fedora-rawhide mageia-cauldron #, no-wrap msgid "Linux man-pages 6.06" msgstr "Linux man-pages 6.06" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "NAME" msgstr "BEZEICHNUNG" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "attributes - POSIX safety concepts" msgstr "attributes - POSIX-Sicherheitskonzepte" #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "DESCRIPTION" msgstr "BESCHREIBUNG" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "I: the text of this man page is based on the material taken from the " "\"POSIX Safety Concepts\" section of the GNU C Library manual. Further " "details on the topics described here can be found in that manual." msgstr "" "I: Der Text dieser Handbuchseite basiert auf Material, das dem " "Abschnitt »POSIX Safety Concepts« des GNU-C-Bibliothekshandbuchs entnommen " "ist. Weitere Details über die hier beschriebenen Themen können Sie in jenem " "Handbuch finden." #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Various function manual pages include a section ATTRIBUTES that describes " "the safety of calling the function in various contexts. This section " "annotates functions with the following safety markings:" msgstr "" "Verschiedene Funktionshandbuchseiten enthalten einen Abschnitt ATTRIBUTE, " "der die Sicherheit beim Aufruf der Funktionen in verschiedenen Kontexten " "beschreibt. Jener Abschnitt kommentiert Funktionen mit den folgenden " "Sicherheitsmarkierungen:" #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "I or Thread-Safe functions are safe to call in the presence of " "other threads. MT, in MT-Safe, stands for Multi Thread." msgstr "" "I oder Thread-sichere Funktionen können sicher in der Anwesenheit " "von anderen Threads aufgerufen werden. Das »MT« in »MT-Sicher« steht für " "»Multi Thread«." #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Being MT-Safe does not imply a function is atomic, nor that it uses any of " "the memory synchronization mechanisms POSIX exposes to users. It is even " "possible that calling MT-Safe functions in sequence does not yield an MT-" "Safe combination. For example, having a thread call two MT-Safe functions " "one right after the other does not guarantee behavior equivalent to atomic " "execution of a combination of both functions, since concurrent calls in " "other threads may interfere in a destructive way." msgstr "" "MT-Sicher zu sein bedeutet nicht, dass eine Funktion atomar ist noch dass " "sie die von POSIX für Benutzer bereitgestellten " "Speichersynchronisationsmechanismen verwendet. Es ist sogar möglich, dass " "der Aufruf von MT-Sicher-Funktionen nacheinander nicht zu einer MT-Sicher-" "Kombination führt. Ruft ein Thread beispielsweise zwei MT-Sicher-Funktionen " "direkt nacheinander auf, garantiert dies nicht, dass das Verhalten " "äquivalent zu einem atomaren Aufruf einer Kombination beider Funktionen ist, " "da nebenläufige Aufrufe in anderen Threads diesen Thread destruktiv " "beeinflussen können." # # # #. #-#-#-#-# archlinux: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# debian-bookworm: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancellation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# debian-unstable: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# fedora-40: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# fedora-rawhide: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# mageia-cauldron: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# opensuse-leap-15-6: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #. #-#-#-#-# opensuse-tumbleweed: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. .TP #. .I AS-Safe #. .I AS-Safe #. or Async-Signal-Safe functions are safe to call from #. asynchronous signal handlers. #. AS, in AS-Safe, stands for Asynchronous Signal. #. Many functions that are AS-Safe may set #. .IR errno , #. or modify the floating-point environment, #. because their doing so does not make them #. unsuitable for use in signal handlers. #. However, programs could misbehave should asynchronous signal handlers #. modify this thread-local state, #. and the signal handling machinery cannot be counted on to #. preserve it. #. Therefore, signal handlers that call functions that may set #. .I errno #. or modify the floating-point environment #. .I must #. save their original values, and restore them before returning. #. .TP #. .I AC-Safe #. .I AC-Safe #. or Async-Cancel-Safe functions are safe to call when #. asynchronous cancelation is enabled. #. AC in AC-Safe stands for Asynchronous Cancelation. #. The POSIX standard defines only three functions to be AC-Safe, namely #. .BR pthread_cancel (3), #. .BR pthread_setcancelstate (3), #. and #. .BR pthread_setcanceltype (3). #. At present the GNU C Library provides no #. guarantees beyond these three functions, #. but does document which functions are presently AC-Safe. #. This documentation is provided for use #. by the GNU C Library developers. #. Just like signal handlers, cancelation cleanup routines must configure #. the floating point environment they require. #. The routines cannot assume a floating point environment, #. particularly when asynchronous cancelation is enabled. #. If the configuration of the floating point #. environment cannot be performed atomically then it is also possible that #. the environment encountered is internally inconsistent. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Whole-program optimizations that could inline functions across library " "interfaces may expose unsafe reordering, and so performing inlining across " "the GNU C Library interface is not recommended. The documented MT-Safety " "status is not guaranteed under whole-program optimization. However, " "functions defined in user-visible headers are designed to be safe for " "inlining." msgstr "" "Gesamtprogramm-Optimierungen, die über Bibliotheksgrenzen hinweg Inline-" "Ersetzungen vornehmen, könnten unsichere Umordnungen offenlegen. Daher wird " "empfohlen, keine Inline-Ersetzungen über die GNU-C-Bibliothek-Schnittstelle " "hinweg vorzunehmen. Der dokumentierte MT-Sicherheits-Status wird unter " "Gesamtprogramm-Optimierungen nicht garantiert. Funktionen, die in Headern " "definiert sind, die Benutzern zugänglich sind, wurden allerdings so " "entworfen, dass sie sicher für Inline-Ersetzungen sind." #. ", " AS-Unsafe ", " AC-Unsafe #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" # # # # # # #. ", " AS-Unsafe ", " AC-Unsafe #. functions are not #. safe to call within the safety contexts described above. #. Calling them #. within such contexts invokes undefined behavior. #. Functions not explicitly documented as safe in a safety context should #. be regarded as Unsafe. #. .TP #. .I Preliminary #. .I Preliminary #. safety properties are documented, indicating these #. properties may #. .I not #. be counted on in future releases of #. the GNU C Library. #. Such preliminary properties are the result of an assessment of the #. properties of our current implementation, #. rather than of what is mandated and permitted #. by current and future standards. #. Although we strive to abide by the standards, in some cases our #. implementation is safe even when the standard does not demand safety, #. and in other cases our implementation does not meet the standard safety #. requirements. #. The latter are most likely bugs; the former, when marked #. as #. .IR Preliminary , #. should not be counted on: future standards may #. require changes that are not compatible with the additional safety #. properties afforded by the current implementation. #. Furthermore, #. the POSIX standard does not offer a detailed definition of safety. #. We assume that, by "safe to call", POSIX means that, #. as long as the program does not invoke undefined behavior, #. the "safe to call" function behaves as specified, #. and does not cause other functions to deviate from their specified behavior. #. We have chosen to use its loose #. definitions of safety, not because they are the best definitions to use, #. but because choosing them harmonizes this manual with POSIX. #. Please keep in mind that these are preliminary definitions and annotations, #. and certain aspects of the definitions are still under #. discussion and might be subject to clarification or change. #. Over time, #. we envision evolving the preliminary safety notes into stable commitments, #. as stable as those of our interfaces. #. As we do, we will remove the #. .I Preliminary #. keyword from safety notes. #. As long as the keyword remains, however, #. they are not to be regarded as a promise of future behavior. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "I functions are not safe to call in a multithreaded programs." msgstr "" "I-Funktionen können nicht sicher in Programmen mit mehreren " "Threads aufgerufen werden." # # # # # # # # # # # #. .SS Unsafe features #. Functions that are unsafe to call in certain contexts are annotated with #. keywords that document their features that make them unsafe to call. #. AS-Unsafe features in this section indicate the functions are never safe #. to call when asynchronous signals are enabled. #. AC-Unsafe features #. indicate they are never safe to call when asynchronous cancelation is #. .\" enabled. #. There are no MT-Unsafe marks in this section. #. .TP #. .\" .I code #. Functions marked with #. .I lock #. as an AS-Unsafe feature may be #. .\" interrupted by a signal while holding a non-recursive lock. #. If the signal handler calls another such function that takes the same lock, #. the result is a deadlock. #. Functions annotated with #. .I lock #. as an AC-Unsafe feature may, if canceled asynchronously, #. fail to release a lock that would have been released if their execution #. had not been interrupted by asynchronous thread cancelation. #. Once a lock is left taken, #. attempts to take that lock will block indefinitely. #. .TP #. .I corrupt #. Functions marked with #. .\" .I corrupt #. as an AS-Unsafe feature may corrupt #. data structures and misbehave when they interrupt, #. or are interrupted by, another such function. #. Unlike functions marked with #. .IR lock , #. these take recursive locks to avoid MT-Safety problems, #. but this is not enough to stop a signal handler from observing #. a partially-updated data structure. #. Further corruption may arise from the interrupted function's #. failure to notice updates made by signal handlers. #. Functions marked with #. .I corrupt #. as an AC-Unsafe feature may leave #. data structures in a corrupt, partially updated state. #. Subsequent uses of the data structure may misbehave. #. .\" A special case, probably not worth documenting separately, involves #. .\" reallocing, or even freeing pointers. Any case involving free could #. .\" be easily turned into an ac-safe leak by resetting the pointer before #. .\" releasing it; I don't think we have any case that calls for this sort #. .\" of fixing. Fixing the realloc cases would require a new interface: #. .\" instead of @code{ptr=realloc(ptr,size)} we'd have to introduce #. .\" @code{acsafe_realloc(&ptr,size)} that would modify ptr before #. .\" releasing the old memory. The ac-unsafe realloc could be implemented #. .\" in terms of an internal interface with this semantics (say #. .\" __acsafe_realloc), but since realloc can be overridden, the function #. .\" we call to implement realloc should not be this internal interface, #. .\" but another internal interface that calls __acsafe_realloc if realloc #. .\" was not overridden, and calls the overridden realloc with async #. .\" cancel disabled. --lxoliva #. .TP #. .I heap #. Functions marked with #. .I heap #. may call heap memory management functions from the #. .BR malloc (3)/ free (3) #. family of functions and are only as safe as those functions. #. This note is thus equivalent to: #. | AS-Unsafe lock | AC-Unsafe lock fd mem | #. .\" @sampsafety{@asunsafe{@asulock{}}@acunsafe{@aculock{} @acsfd{} @acsmem{}}} #. .\" #. .\" Check for cases that should have used plugin instead of or in #. .\" addition to this. Then, after rechecking gettext, adjust i18n if #. .\" needed. #. .TP #. .I dlopen #. Functions marked with #. .I dlopen #. use the dynamic loader to load #. shared libraries into the current execution image. #. This involves opening files, mapping them into memory, #. allocating additional memory, resolving symbols, #. applying relocations and more, #. all of this while holding internal dynamic loader locks. #. The locks are enough for these functions to be AS-Unsafe and AC-Unsafe, #. but other issues may arise. #. At present this is a placeholder for all #. potential safety issues raised by #. .BR dlopen (3). #. .\" dlopen runs init and fini sections of the module; does this mean #. .\" dlopen always implies plugin? #. .TP #. .I plugin #. Functions annotated with #. .I plugin #. may run code from plugins that #. may be external to the GNU C Library. #. Such plugin functions are assumed to be #. MT-Safe, AS-Unsafe and AC-Unsafe. #. Examples of such plugins are stack unwinding libraries, #. name service switch (NSS) and character set conversion (iconv) back-ends. #. Although the plugins mentioned as examples are all brought in by means #. of dlopen, the #. .I plugin #. keyword does not imply any direct #. involvement of the dynamic loader or the #. .I libdl #. interfaces, #. those are covered by #. .IR dlopen . #. For example, if one function loads a module and finds the addresses #. of some of its functions, #. while another just calls those already-resolved functions, #. the former will be marked with #. .IR dlopen , #. whereas the latter will get the #. .IR plugin . #. When a single function takes all of these actions, then it gets both marks. #. .TP #. .I i18n #. Functions marked with #. .I i18n #. may call internationalization #. functions of the #. .BR gettext (3) #. family and will be only as safe as those #. functions. #. This note is thus equivalent to: #. | MT-Safe env | AS-Unsafe corrupt heap dlopen | AC-Unsafe corrupt | #. .\" @sampsafety{@mtsafe{@mtsenv{}}@asunsafe{@asucorrupt{} @ascuheap{} @ascudlopen{}}@acunsafe{@acucorrupt{}}} #. .TP #. .I timer #. Functions marked with #. .I timer #. use the #. .BR alarm (3) #. function or #. similar to set a time-out for a system call or a long-running operation. #. In a multi-threaded program, there is a risk that the time-out signal #. will be delivered to a different thread, #. thus failing to interrupt the intended thread. #. Besides being MT-Unsafe, such functions are always #. AS-Unsafe, because calling them in signal handlers may interfere with #. timers set in the interrupted code, and AC-Unsafe, #. because there is no safe way to guarantee an earlier timer #. will be reset in case of asynchronous cancelation. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Other keywords that appear in safety notes are defined in subsequent " "sections." msgstr "" "Andere Schlüsselwörter, die in den Sicherheitshinweisen auftauchen, sind in " "nachfolgenden Abschnitten definiert." #. type: SS #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "Conditionally safe features" msgstr "Bedingt sichere Funktionalitäten" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "For some features that make functions unsafe to call in certain contexts, " "there are known ways to avoid the safety problem other than refraining from " "calling the function altogether. The keywords that follow refer to such " "features, and each of their definitions indicates how the whole program " "needs to be constrained in order to remove the safety problem indicated by " "the keyword. Only when all the reasons that make a function unsafe are " "observed and addressed, by applying the documented constraints, does the " "function become safe to call in a context." msgstr "" "Für einige Funktionalitäten, die Funktionsaufrufe in bestimmten Kontexten " "unsicher machen, gibt es bekannte Möglichkeiten, das Sicherheitsproblem zu " "vermeiden (jenseits vom kompletten Vermeiden des Funktionsaufrufs). Die " "nachfolgenden Schlüsselwörter beziehen sich auf solche Funktionalitäten und " "jede ihrer Definitionen zeigt an, wie das gesamte Programm beschränkt werden " "muss, um dass durch das Schlüsselwort angezeigte Sicherheitsproblem zu " "entfernen. Nur wenn alle Gründe, die eine Funktion unsicher machen, " "berücksichtigt und durch die dokumentierten Beschränkungen adressiert " "werden, kann die Funktion in einem Kontext sicher aufgerufen werden." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Unsafe feature perform MT-Unsafe " "initialization when they are first called." msgstr "" "Mit I als MT-Unsicher-Funktionalitäten markierte Funktionen führen " "beim ersten Aufruf MT-Unsichere Initialisierungen durch." # # # # # #. Functions marked with #. .I init #. as an AS-Unsafe or AC-Unsafe feature use the GNU C Library internal #. .I libc_once #. machinery or similar to initialize internal data structures. #. If a signal handler interrupts such an initializer, #. and calls any function that also performs #. .I libc_once #. initialization, it will deadlock if the thread library has been loaded. #. Furthermore, if an initializer is partially complete before it is canceled #. or interrupted by a signal whose handler requires the same initialization, #. some or all of the initialization may be performed more than once, #. leaking resources or even resulting in corrupt internal data. #. Applications that need to call functions marked with #. .I init #. as an AS-Safety or AC-Unsafe feature should ensure #. the initialization is performed #. before configuring signal handlers or enabling cancelation, #. so that the AS-Safety and AC-Safety issues related with #. .I libc_once #. do not arise. #. .\" We may have to extend the annotations to cover conditions in which #. .\" initialization may or may not occur, since an initial call in a safe #. .\" context is no use if the initialization doesn't take place at that #. .\" time: it doesn't remove the risk for later calls. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Calling such a function at least once in single-threaded mode removes this " "specific cause for the function to be regarded as MT-Unsafe. If no other " "cause for that remains, the function can then be safely called after other " "threads are started." msgstr "" "Durch mindestens einmaligen Aufruf dieser Funktion in einem Einzel-Thread-" "Modus wird dieser bestimmte Grund, aus dem die Funktion als MT-Unsicher " "betrachtet wird, entfernt. Falls dafür kein weiterer Grund verbleibt, kann " "diese Funktion sicher aufgerufen werden, nachdem andere Threads gestartet " "wurden." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" # # # # # # # #. #-#-#-#-# archlinux: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-null pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# debian-bookworm: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-NULL pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# debian-unstable: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-NULL pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# fedora-40: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-null pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# fedora-rawhide: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-null pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# mageia-cauldron: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-null pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# opensuse-leap-15-6: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-NULL pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #. #-#-#-#-# opensuse-tumbleweed: attributes.7.pot (PACKAGE VERSION) #-#-#-#-# #. We consider access to objects passed as (indirect) arguments to #. functions to be data race free. #. The assurance of data race free objects #. is the caller's responsibility. #. We will not mark a function as MT-Unsafe or AS-Unsafe #. if it misbehaves when users fail to take the measures required by #. POSIX to avoid data races when dealing with such objects. #. As a general rule, if a function is documented as reading from #. an object passed (by reference) to it, or modifying it, #. users ought to use memory synchronization primitives #. to avoid data races just as they would should they perform #. the accesses themselves rather than by calling the library function. #. Standard I/O #. .RI ( "FILE *" ) #. streams are the exception to the general rule, #. in that POSIX mandates the library to guard against data races #. in many functions that manipulate objects of this specific opaque type. #. We regard this as a convenience provided to users, #. rather than as a general requirement whose expectations #. should extend to other types. #. In order to remind users that guarding certain arguments is their #. responsibility, we will annotate functions that take objects of certain #. types as arguments. #. We draw the line for objects passed by users as follows: #. objects whose types are exposed to users, #. and that users are expected to access directly, #. such as memory buffers, strings, #. and various user-visible structured types, do #. .I not #. give reason for functions to be annotated with #. .IR race . #. It would be noisy and redundant with the general requirement, #. and not many would be surprised by the library's lack of internal #. guards when accessing objects that can be accessed directly by users. #. As for objects that are opaque or opaque-like, #. in that they are to be manipulated only by passing them #. to library functions (e.g., #. .IR FILE , #. .IR DIR , #. .IR obstack , #. .IR iconv_t ), #. there might be additional expectations as to internal coordination #. of access by the library. #. We will annotate, with #. .I race #. followed by a colon and the argument name, #. functions that take such objects but that do not take #. care of synchronizing access to them by default. #. For example, #. .I FILE #. stream #. .I unlocked #. functions #. .RB ( unlocked_stdio (3)) #. will be annotated, #. but those that perform implicit locking on #. .I FILE #. streams by default will not, #. even though the implicit locking may be disabled on a per-stream basis. #. In either case, we will not regard as MT-Unsafe functions that may #. access user-supplied objects in unsafe ways should users fail to ensure #. the accesses are well defined. #. The notion prevails that users are expected to safeguard against #. data races any user-supplied objects that the library accesses #. on their behalf. #. .\" The above describes @mtsrace; @mtasurace is described below. #. This user responsibility does not apply, however, #. to objects controlled by the library itself, #. such as internal objects and static buffers used #. to return values from certain calls. #. When the library doesn't guard them against concurrent uses, #. these cases are regarded as MT-Unsafe and AS-Unsafe (although the #. .I race #. mark under AS-Unsafe will be omitted #. as redundant with the one under MT-Unsafe). #. As in the case of user-exposed objects, #. the mark may be followed by a colon and an identifier. #. The identifier groups all functions that operate on a #. certain unguarded object; users may avoid the MT-Safety issues related #. with unguarded concurrent access to such internal objects by creating a #. non-recursive mutex related with the identifier, #. and always holding the mutex when calling any function marked #. as racy on that identifier, #. as they would have to should the identifier be #. an object under user control. #. The non-recursive mutex avoids the MT-Safety issue, #. but it trades one AS-Safety issue for another, #. so use in asynchronous signals remains undefined. #. When the identifier relates to a static buffer used to hold return values, #. the mutex must be held for as long as the buffer remains in use #. by the caller. #. Many functions that return pointers to static buffers offer reentrant #. variants that store return values in caller-supplied buffers instead. #. In some cases, such as #. .BR tmpname (3), #. the variant is chosen not by calling an alternate entry point, #. but by passing a non-NULL pointer to the buffer in which the #. returned values are to be stored. #. These variants are generally preferable in multi-threaded programs, #. although some of them are not MT-Safe because of other internal buffers, #. also documented with #. .I race #. notes. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions annotated with I as an MT-Safety issue operate on objects in " "ways that may cause data races or similar forms of destructive interference " "out of concurrent execution. In some cases, the objects are passed to the " "functions by users; in others, they are used by the functions to return " "values to users; in others, they are not even exposed to users." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen agieren auf " "Objekten derart, dass Ressourcenwettläufe auf Daten oder ähnliche Formen " "desktruktiven Störens bei nebenläufiger Ausführung ausgelöst werden können. " "In einigen Fällen werden die Objekte durch Benutzer an die Funktionen " "übergeben. In anderen Fällen werden sie von den Funktionen verwandt, um " "Werte an Benutzer zurückzugeben. In wieder anderen werden sie noch nicht mal " "gegenüber Benutzern offengelegt." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. and AS-Unsafe, #. equally #. and AS-Unsafe #. and AS-Safe #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Safety issue non-atomically modify " "internal objects that are better regarded as constant, because a substantial " "portion of the GNU C Library accesses them without synchronization. Unlike " "I, which causes both readers and writers of internal objects to be " "regarded as MT-Unsafe, this mark is applied to writers only. Writers remain " "MT-Unsafe to call, but the then-mandatory constness of objects they modify " "enables readers to be regarded as MT-Safe (as long as no other reasons for " "them to be unsafe remain), since the lack of synchronization is not a " "problem when the objects are effectively constant." msgstr "" "Mit I als MT-Sicherheitsproblem markierte Funktionen verändern " "interne Objekte nicht atomar, die besser als konstant betrachtet werden, da " "ein wesentlicher Anteil der GNU-C-Bibliothek auf sie ohne Synchronisierung " "zugreift. Anders als bei I, bei dem sowohl schreibende als auch " "lesende Zugriffe auf interne Objekte als MT-Unsicher betrachtet werden, gilt " "diese Markierung nur für schreibende Zugriffe. Bei schreibenden Zugriffen " "bleibt der Aufruf MT-Unsicher, aber die dann-verpflichtende Konstantheit von " "Objekten, die sie verändern, ermöglicht MT-Safe lesenden Zugriff (solange " "kein anderer Grund verbleibt, sie als unsicher zu betrachten), da das Fehlen " "von Synchronisierung kein Problem darstellt, wenn die Objekte tatsächlich " "konstant sind." # #. The non-recursive locking removes the MT-Safety problem, #. but it trades one AS-Safety problem for another, #. so use in asynchronous signals remains undefined. #. .\" But what if, instead of marking modifiers with const:id and readers #. .\" with just id, we marked writers with race:id and readers with ro:id? #. .\" Instead of having to define each instance of 'id', we'd have a #. .\" general pattern governing all such 'id's, wherein race:id would #. .\" suggest the need for an exclusive/write lock to make the function #. .\" safe, whereas ro:id would indicate 'id' is expected to be read-only, #. .\" but if any modifiers are called (while holding an exclusive lock), #. .\" then ro:id-marked functions ought to be guarded with a read lock for #. .\" safe operation. ro:env or ro:locale, for example, seems to convey #. .\" more clearly the expectations and the meaning, than just env or #. .\" locale. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "The identifier that follows the I mark will appear by itself as a " "safety note in readers. Programs that wish to work around this safety " "issue, so as to call writers, may use a non-recursive read-write lock " "associated with the identifier, and guard I calls to functions marked " "with I followed by the identifier with a write lock, and I calls " "to functions marked with the identifier by itself with a read lock." msgstr "" "Der Markierung I folgende Kennzeichner taucht selbst als " "Sicherheitshinweis für Lesezugriffe auf. Programme, die dieses " "Sicherheitsproblem umgehen möchten, um Schreibzugriff durchzuführen, können " "eine dem Kennzeichner zugeordnete nicht rekursive Lese-Schreib-Sperre " "verwenden und I Aufrufe von mit I gefolgt von dem Kennzeichner " "markierten Funktionen mit einer Schreibsperre und I Aufrufe von mit " "dem Kennzeichner selbst markierten Funktionen mit einer Lesesperre absichern." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. (that implies an identical AS-Safety issue, omitted for brevity) #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as a MT-Safety issue may temporarily install a " "signal handler for internal purposes, which may interfere with other uses of " "the signal, identified after a colon." msgstr "" "Mit I als MT-Sicherheitsproblem markierte Funktionen können temporär " "einen Signal-Handhaber für interne Zwecke installieren, der mit anderen " "Verwendungen des Signals wechselwirkt, die nach einem Doppelpunkt " "dargestellt sind." # # # #. There is no safe way to guarantee the original signal handler is #. restored in case of asynchronous cancelation, #. therefore so-marked functions are also AC-Unsafe. #. .\" fixme: at least deferred cancelation should get it right, and would #. .\" obviate the restoring bit below, and the qualifier above. #. Besides the measures recommended to work around the #. MT-Safety and AS-Safety problem, #. in order to avert the cancelation problem, #. disabling asynchronous cancelation #. .I and #. installing a cleanup handler to restore the signal to the desired state #. and to release the mutex are recommended. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "This safety problem can be worked around by ensuring that no other uses of " "the signal will take place for the duration of the call. Holding a non-" "recursive mutex while calling all functions that use the same temporary " "signal; blocking that signal before the call and resetting its handler " "afterwards is recommended." msgstr "" "Dieses Sicherheitsproblem kann umgangen werden, indem sichergestellt wird, " "dass während der Dauer des Aufrufs keine andere Verwendung dieses Signals " "stattfindet. Es wird empfohlen, einen nicht rekursiven Mutex beim Aufruf " "aller Funktionen, die das gleiche temporäre Signal verwenden, zu halten und " "das Signal vor dem Aufruf zu blockieren und seinen Handhaber danach " "zurückzusetzen." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. The same window enables changes made by asynchronous signals to be lost. #. These functions are also AS-Unsafe, #. but the corresponding mark is omitted as redundant. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Safety issue may change the terminal " "settings in the recommended way, namely: call B(3), modify some " "flags, and then call B(3), this creates a window in which changes " "made by other threads are lost. Thus, functions marked with I are MT-" "Unsafe." msgstr "" "Mit I als MT-Sicherheitsproblem markierte Funktionen können ihre " "Terminaleinstellungen auf die empfohlene Art ändern, konkret: " "B(3) aufrufen, einige Schalter ändern und dann B(3) " "aufrufen. Dadurch entsteht ein Fenster, in dem einige durch andere Threads " "vorgenommene Änderungen verloren gehen. Daher sind mit I markierte " "Funktionen MT-Unsicher." # # # #. Functions marked with #. .I term #. as an AC-Safety issue are supposed to #. restore terminal settings to their original state, #. after temporarily changing them, but they may fail to do so if canceled. #. .\" fixme: at least deferred cancelation should get it right, and would #. .\" obviate the restoring bit below, and the qualifier above. #. Besides the measures recommended to work around the #. MT-Safety and AS-Safety problem, #. in order to avert the cancelation problem, #. disabling asynchronous cancelation #. .I and #. installing a cleanup handler to #. restore the terminal settings to the original state and to release the #. mutex are recommended. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "It is thus advisable for applications using the terminal to avoid concurrent " "and reentrant interactions with it, by not using it in signal handlers or " "blocking signals that might use it, and holding a lock while calling these " "functions and interacting with the terminal. This lock should also be used " "for mutual exclusion with functions marked with I, where " "I is a file descriptor for the controlling terminal. The caller may use " "a single mutex for simplicity, or use one mutex per terminal, even if " "referenced by different file descriptors." msgstr "" "Für Anwendungen, die das Terminal verwenden, wird daher empfohlen, " "nebenläufige oder wiedereintrittsfähige Interaktionen dadurch zu vermeiden, " "dass keine Signal-Handhaber verwandt oder Signale, die es verwenden könnte, " "blockiert werden und eine Sperre gehalten wird, während diese Funktionen " "aufgerufen und mit dem Terminal interagiert wird. Diese Sperre sollte auch " "zum gegenseitigen Ausschluss von mit I markierten " "Funktionen verwandt werden, wo I
ein Dateideskriptor für das steuernde " "Terminal ist. Das aufrufende Programm kann zur Vereinfachung einen einzelnen " "Mutex oder einen Mutex pro Terminal verwenden, selbst wenn die Referenz von " "verschiedenen Dateideskriptoren kommt." #. type: SS #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "Other safety remarks" msgstr "Andere Sicherheitsbemerkungen" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Additional keywords may be attached to functions, indicating features that " "do not make a function unsafe to call, but that may need to be taken into " "account in certain classes of programs:" msgstr "" "An Funktionen können zusätzliche Schlüsselwörter angehängt werden, die " "Funktionalitäten andeuten, die nicht zum unsicheren Aufruf einer Funktion " "führen, die aber möglicherweise in bestimmten Klassen von Programmen " "berücksichtigt werden müssten:" #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions annotated with I as an MT-Safety issue read from the " "locale object without any form of synchronization. Functions annotated with " "I called concurrently with locale changes may behave in ways that do " "not correspond to any of the locales active during their execution, but an " "unpredictable mix thereof." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen lesen vom " "Locale-Objekt ohne irgendeine Form der Synchronisierung. Werden mit " "I kommentierte Funktionen gleichzeitig zu Locale-Änderungen " "aufgerufen, könnte sich deren Verhalten so ändern, dass es nicht den Locale-" "Werten entspricht, die während ihrer Ausführung aktiv waren, sondern einer " "nicht vorhersagbaren Mischung daraus." #. or AS-Unsafe, #. Should the locking strategy suggested under @code{const} be used, #. failure to guard locale uses is not as fatal as data races in #. general: unguarded uses will @emph{not} follow dangling pointers or #. access uninitialized, unmapped or recycled memory. Each access will #. read from a consistent locale object that is or was active at some #. point during its execution. Without synchronization, however, it #. cannot even be assumed that, after a change in locale, earlier #. locales will no longer be used, even after the newly-chosen one is #. used in the thread. Nevertheless, even though unguarded reads from #. the locale will not violate type safety, functions that access the #. locale multiple times may invoke all sorts of undefined behavior #. because of the unexpected locale changes. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "We do not mark these functions as MT-Unsafe, however, because functions that " "modify the locale object are marked with I and regarded as " "unsafe. Being unsafe, the latter are not to be called when multiple threads " "are running or asynchronous signals are enabled, and so the locale can be " "considered effectively constant in these contexts, which makes the former " "safe." msgstr "" "Diese Funktionen sind allerdings nicht als MT-Unsicher markiert, da " "Funktionen, die das Locale-Objekt verändern, als I markiert " "sind und als unsicher betrachtet werden. Da sie unsicher sind, dürfen " "letztere nicht aufgerufen werden, wenn mehrere Threads laufen oder " "asynchrone Signale aktiviert sind, und daher das Locale-Objekt tatsächlich " "in diesen Kontexten als konstant betrachtet werden kann, wodurch erstere " "sicher sind." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Safety issue access the environment " "with B(3) or similar, without any guards to ensure safety in the " "presence of concurrent modifications." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen greifen auf die " "Umgebung mit B(3) oder ähnlichem zu, ohne jeglichen Schutz, um " "Sicherheit in der Anwesenheit von nebenläufigen Veränderungen " "sicherzustellen." #. or AS-Unsafe, #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "We do not mark these functions as MT-Unsafe, however, because functions that " "modify the environment are all marked with I and regarded as " "unsafe. Being unsafe, the latter are not to be called when multiple threads " "are running or asynchronous signals are enabled, and so the environment can " "be considered effectively constant in these contexts, which makes the former " "safe." msgstr "" "Diese Funktionen sind allerdings nicht als MT-Unsicher markiert, da " "Funktionen, die die Umgebung verändern, alle mit I markiert sind " "und als unsicher betrachtet werden. Da sie unsicher sind, dürfen letztere " "nicht aufgerufen werden, wenn mehrere Threads laufen oder asynchrone Signale " "aktiviert sind, und daher die Umgebung tatsächlich in diesen Kontexten als " "konstant betrachtet werden können, wodurch erstere sicher sind." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" # FIXME The function → Functions marked with # FIXME reads → read #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "The function marked with I as an MT-Safety issue reads from the " "system-wide data structures that hold the \"host ID\" of the machine. These " "data structures cannot generally be modified atomically. Since it is " "expected that the \"host ID\" will not normally change, the function that " "reads from it (B(3)) is regarded as safe, whereas the function " "that modifies it (B(3)) is marked with I, " "indicating it may require special care if it is to be called. In this " "specific case, the special care amounts to system-wide (not merely intra-" "process) coordination." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen lesen von " "systemweiten Datenstrukturen, die die »Rechnerkennung« der Maschine halten. " "Diese Datenstrukturen können im Allgemeinen nicht atomar verändert werden. " "Da erwartet wird, dass sich die »Rechnerkennung« im Allgemeinen nicht " "ändert, wird die daraus lesende Funktionen (B(3)) als sicher " "betrachtet, während die verändernde Funktion (B(3)) als I markiert ist und damit anzeigt, dass bei Aufruf besondere Vorsicht " "walten zu lassen ist. In diesem speziellen Fall erfordert die besondere " "Vorsicht eine systemweite (und nicht nur zwischen Prozessen) Koordination." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Safety issue access the GNU C " "Library I<_sigintr> internal data structure without any guards to ensure " "safety in the presence of concurrent modifications." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen greifen auf " "die interne Datenstruktur I<_sigintr> der GNU-C-Bibliothek ohne jeglichen " "Schutz zu, um Sicherheit beim Auftreten von nebenläufigen Veränderungen " "sicherzustellen." # # # # # #. or AS-Unsafe, #. .TP #. .I fd #. Functions annotated with #. .I fd #. as an AC-Safety issue may leak file #. descriptors if asynchronous thread cancelation interrupts their #. execution. #. Functions that allocate or deallocate file descriptors will generally be #. marked as such. #. Even if they attempted to protect the file descriptor #. allocation and deallocation with cleanup regions, #. allocating a new descriptor and storing its number where the cleanup region #. could release it cannot be performed as a single atomic operation. #. Similarly, #. releasing the descriptor and taking it out of the data structure #. normally responsible for releasing it cannot be performed atomically. #. There will always be a window in which the descriptor cannot be released #. because it was not stored in the cleanup handler argument yet, #. or it was already taken out before releasing it. #. .\" It cannot be taken out after release: #. an open descriptor could mean either that the descriptor still #. has to be closed, #. or that it already did so but the descriptor was #. reallocated by another thread or signal handler. #. Such leaks could be internally avoided, with some performance penalty, #. by temporarily disabling asynchronous thread cancelation. #. However, #. since callers of allocation or deallocation functions would have to do #. this themselves, to avoid the same sort of leak in their own layer, #. it makes more sense for the library to assume they are taking care of it #. than to impose a performance penalty that is redundant when the problem #. is solved in upper layers, and insufficient when it is not. #. This remark by itself does not cause a function to be regarded as #. AC-Unsafe. #. However, cumulative effects of such leaks may pose a #. problem for some programs. #. If this is the case, #. suspending asynchronous cancelation for the duration of calls #. to such functions is recommended. #. .TP #. .I mem #. Functions annotated with #. .I mem #. as an AC-Safety issue may leak #. memory if asynchronous thread cancelation interrupts their execution. #. The problem is similar to that of file descriptors: there is no atomic #. interface to allocate memory and store its address in the argument to a #. cleanup handler, #. or to release it and remove its address from that argument, #. without at least temporarily disabling asynchronous cancelation, #. which these functions do not do. #. This remark does not by itself cause a function to be regarded as #. generally AC-Unsafe. #. However, cumulative effects of such leaks may be #. severe enough for some programs that disabling asynchronous cancelation #. for the duration of calls to such functions may be required. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "We do not mark these functions as MT-Unsafe, however, because functions that " "modify this data structure are all marked with I and regarded " "as unsafe. Being unsafe, the latter are not to be called when multiple " "threads are running or asynchronous signals are enabled, and so the data " "structure can be considered effectively constant in these contexts, which " "makes the former safe." msgstr "" "Diese Funktionen sind allerdings nicht als MT-Unsicher markiert, da " "Funktionen, die diese Datenstruktur verändern, alle mit I " "markiert sind und als unsicher betrachtet werden. Da sie unsicher sind, " "dürfen letztere nicht aufgerufen werden, wenn mehrere Threads laufen oder " "asynchrone Signale aktiviert sind, und daher die Datenstruktur tatsächlich " "in diesen Kontexten als konstant betrachtet werden kann, wodurch erstere " "sicher sind." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Functions marked with I as an MT-Safety issue may temporarily change " "the current working directory during their execution, which may cause " "relative pathnames to be resolved in unexpected ways in other threads or " "within asynchronous signal or cancelation handlers." msgstr "" "Mit I als MT-Sicherheitsproblem kommentierte Funktionen können temporär " "während ihrer Ausführung ihr aktuelles Arbeitsverzeichnis ändern, wodurch " "relative Pfadnamen in anderen Threads oder innerhalb asynchroner Signal- " "oder Abbruch-Handhaber auf unvorhergesehene Weise aufgelöst werden könnten." # #. or AS-Unsafe, #. .TP #. .I !posix #. This remark, as an MT-Safety, AS-Safety or AC-Safety #. note to a function, #. indicates the safety status of the function is known to differ #. from the specified status in the POSIX standard. #. For example, POSIX does not require a function to be Safe, #. but our implementation is, or vice-versa. #. For the time being, the absence of this remark does not imply the safety #. properties we documented are identical to those mandated by POSIX for #. the corresponding functions. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "This is not enough of a reason to mark so-marked functions as MT-Unsafe, but " "when this behavior is optional (e.g., B(3) with B), " "avoiding the option may be a good alternative to using full pathnames or " "file descriptor-relative (e.g., B(2)) system calls." msgstr "" "Dies ist kein ausreichender Grund, die so markierten Funktionen als MT-" "Unsicher zu markieren, aber wenn dieses Verhalten optional ist (z.B. " "B(3) mit B) könnte das Vermeiden dieser Option eine gute " "Alternative zur Verwendung vollständiger Pfadnamen oder Systemaufrufen mit " "relativen Dateideskriptoren (z.B. B(2)) sein." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I<:identifier>" msgstr "I<:Kennzeichner>" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Annotations may sometimes be followed by identifiers, intended to group " "several functions that, for example, access the data structures in an unsafe " "way, as in I and I, or to provide more specific information, " "such as naming a signal in a function marked with I. It is envisioned " "that it may be applied to I and I as well in the future." msgstr "" "Funktionen können manchmal Kennzeichner folgen, die zum Gruppieren mehrerer " "Funktionen gedacht sind, die beispielsweise auf Datenstrukturen auf eine " "unsichere Art zugreifen, wie bei I und I, oder um genauere " "Informationen wie die Benennung von Signalen in einer mit I markierten " "Funktion bereitzustellen. Es wird angedacht, dies in der Zukunft auf I " "und I anzuwenden." #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "In most cases, the identifier will name a set of functions, but it may name " "global objects or function arguments, or identifiable properties or logical " "components associated with them, with a notation such as, for example, I<:" "buf(arg)> to denote a buffer associated with the argument I, or I<:" "tcattr(fd)> to denote the terminal attributes of a file descriptor I." msgstr "" "In den meisten Fällen wird der Kennzeichner eine Gruppe von Funktionen " "benennen, er kann aber auch globale Objekte oder Funktionsargumente benennen " "oder identifizierbare Eigenschaften oder ihnen zugeordnete logische " "Komponenten. Eine Darstellung kann beispielsweise I<:buf(arg)> zur " "Bezeichnung eines einem Argumenten I zugeordneten Puffers oder I<:" "tcattr(fd)> zur Bezeichnung der Terminalattribute eines Dateideskriptors " "I
sein." #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "The most common use for identifiers is to provide logical groups of " "functions and arguments that need to be protected by the same " "synchronization primitive in order to ensure safe operation in a given " "context." msgstr "" "Die häufigste Verwendung von Kennzeichnern ist die Bereitstellung logischer " "Gruppen von Funktionen und Argumenten, die durch die gleichen " "Synchronisationsprimitiven geschützt werden müssen, um eine sichere Aktion " "in einem gegebenen Kontext sicherzustellen." #. type: TP #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "I" msgstr "I" #. Such conditions as #. .I /hurd #. or #. .I /!linux!bsd #. indicate the preceding marker only #. applies when the underlying kernel is the HURD, #. or when it is neither Linux nor a BSD kernel, respectively. #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "Some safety annotations may be conditional, in that they only apply if a " "boolean expression involving arguments, global variables or even the " "underlying kernel evaluates to true. For example, I and I indicate the preceding marker only applies when argument I " "is NULL, or global variable I is nonzero." msgstr "" "Einige Sicherheitsanmerkungen können von Bedingungen abhängen. Sie gelten " "nur, falls ein logischer Ausdruck, der Argumente, globale Variablen oder " "sogar den zugrunde liegenden Kernel als wahr ausgewertet werden kann. " "Beispielsweise zeigen I und I an, dass die " "vorhergehende Markierung nur gilt, wenn das Argument I NULL oder die " "globale Variable I von Null verschieden ist." #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "" "When all marks that render a function unsafe are adorned with such " "conditions, and none of the named conditions hold, then the function can be " "regarded as safe." msgstr "" "Wenn alle Markierungen, die eine Funktion unsicher werden lassen, mit " "solchen Bedingungen verziert sind und keine der benannten Bedingungen " "zutrifft, dann kann diese Funktion als sicher betrachtet werden." #. type: SH #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "SEE ALSO" msgstr "SIEHE AUCH" #. type: Plain text #: archlinux debian-bookworm debian-unstable fedora-40 fedora-rawhide #: mageia-cauldron opensuse-leap-15-6 opensuse-tumbleweed msgid "B(7), B(7)" msgstr "B(7), B(7)" #. type: TH #: debian-bookworm #, no-wrap msgid "2022-10-30" msgstr "30. Oktober 2022" #. type: TH #: debian-bookworm #, no-wrap msgid "Linux man-pages 6.03" msgstr "Linux man-pages 6.03" #. type: TH #: debian-unstable opensuse-leap-15-6 opensuse-tumbleweed #, no-wrap msgid "2023-03-18" msgstr "18. März 2023" #. type: TH #: debian-unstable opensuse-tumbleweed #, no-wrap msgid "Linux man-pages 6.05.01" msgstr "Linux man-pages 6.05.01" #. type: TH #: opensuse-leap-15-6 #, no-wrap msgid "Linux man-pages 6.04" msgstr "Linux-Handbuchseiten 6.04"