main
Move contains_dot_dot() to libsudo_util.
Remove Open Source PVS-Studio comments
Move base64 functions to libsudo_util
In C23 the constness of string function returns depends on the first arg
Avoid using the u_int type, which is not portable.
Call signal_pipe_cb() one a second even if the pipe is empty.
Open directories with the O_DIRECTORY flag.
Use #include <foo.h> instead of #include "foo.h" in most cases.
Restrict-qualify glob and its functions
Use the full definition of the emulated function that is missing
configure: Add check for O_NOFOLLOW definition in fcntl.h
Remove restrict noise
strlcpy_expand_host, sudo_getdelim, sudo_realpath: add restrict qualifier
add restrict to a few more places
Return 0 only when realtime signals are supported, not when it isn't
Sync siglist.in with the generated files. The change to prefer SIGSYS over SIGUNUSED wasn't made to siglist.in. Also, mksigname.c doesn't need to explicitly set sudo_sys_signame[0].
Free *strp, not str in sudo
Use O_NOFOLLOW in places where we don't expect a symlink.
Term: ECHO|ECHONL|ICANON belong to c_lflag, not oflag
get_gmtoff: fix sign bug when local time year < GMT year
sudo_ttyname_dev: check /dev/console before /proc/self/fd/[0-3]