gmtime(3) / locatime(3) can fail when timestamps are way off.

Add missing error checks to all calls under bin/

Input & OK millert

Since tzset(3) ignores arbitrary files, we no longer need rpath
and can depend on the /usr/share/zoneinfo bypass.

OK mestre, millert, deraadt

When setting time, date(1) pledges "wpath" for logwtmp(3). Restrict
this using unveil(2), but ignore errors if /var/log doesn't exist. We
want to be able to set the time if the system is damanged or /var is
not mounted yet.
We also need to unveil everything for reading since we still allow
arbitrary locations of zone info files. Hopefully that will go away
soon.
OK deraadt

If the -f argument includes %s, we need to use timegm(3) rather
than mktime(3) because the UNIX Epoch is defined in UTC rather than
in the local timezone.

Combining %s with other format specifiers is usually not useful.
But if a user does that, then parsing the whole input as UTC seems
better than parsing some of it as UTC and some of it in the local
time zone.

Bug found by Bryan Vyhmeister.
The final patch is joint work with and OK by gerhard@.
No objection when shown on tech@.

date(1): remove -d dst and -t minutes_west

Part of the kernel timezone removal effort.

With input from deraadt@ and tedu@.

"burn it!" mpi@, ok tedu@ deraadt@

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

Since tzset(3) ignores arbitrary files, we no longer need rpath
and can depend on the /usr/share/zoneinfo bypass.

OK mestre, millert, deraadt

When setting time, date(1) pledges "wpath" for logwtmp(3). Restrict
this using unveil(2), but ignore errors if /var/log doesn't exist. We
want to be able to set the time if the system is damanged or /var is
not mounted yet.
We also need to unveil everything for reading since we still allow
arbitrary locations of zone info files. Hopefully that will go away
soon.
OK deraadt

If the -f argument includes %s, we need to use timegm(3) rather
than mktime(3) because the UNIX Epoch is defined in UTC rather than
in the local timezone.

Combining %s with other format specifiers is usually not useful.
But if a user does that, then parsing the whole input as UTC seems
better than parsing some of it as UTC and some of it in the local
time zone.

Bug found by Bryan Vyhmeister.
The final patch is joint work with and OK by gerhard@.
No objection when shown on tech@.

date(1): remove -d dst and -t minutes_west

Part of the kernel timezone removal effort.

With input from deraadt@ and tedu@.

"burn it!" mpi@, ok tedu@ deraadt@

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

When setting time, date(1) pledges "wpath" for logwtmp(3). Restrict
this using unveil(2), but ignore errors if /var/log doesn't exist. We
want to be able to set the time if the system is damanged or /var is
not mounted yet.
We also need to unveil everything for reading since we still allow
arbitrary locations of zone info files. Hopefully that will go away
soon.
OK deraadt

If the -f argument includes %s, we need to use timegm(3) rather
than mktime(3) because the UNIX Epoch is defined in UTC rather than
in the local timezone.

Combining %s with other format specifiers is usually not useful.
But if a user does that, then parsing the whole input as UTC seems
better than parsing some of it as UTC and some of it in the local
time zone.

Bug found by Bryan Vyhmeister.
The final patch is joint work with and OK by gerhard@.
No objection when shown on tech@.

date(1): remove -d dst and -t minutes_west

Part of the kernel timezone removal effort.

With input from deraadt@ and tedu@.

"burn it!" mpi@, ok tedu@ deraadt@

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

If the -f argument includes %s, we need to use timegm(3) rather
than mktime(3) because the UNIX Epoch is defined in UTC rather than
in the local timezone.

Combining %s with other format specifiers is usually not useful.
But if a user does that, then parsing the whole input as UTC seems
better than parsing some of it as UTC and some of it in the local
time zone.

Bug found by Bryan Vyhmeister.
The final patch is joint work with and OK by gerhard@.
No objection when shown on tech@.

date(1): remove -d dst and -t minutes_west

Part of the kernel timezone removal effort.

With input from deraadt@ and tedu@.

"burn it!" mpi@, ok tedu@ deraadt@

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

date(1): remove -d dst and -t minutes_west

Part of the kernel timezone removal effort.

With input from deraadt@ and tedu@.

"burn it!" mpi@, ok tedu@ deraadt@

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

When system calls indicate an error they return -1, not some arbitrary
value < 0. errno is only updated in this case. Change all (most?)
callers of syscalls to follow this better, and let's see if this strictness
helps us in the future.

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

add a -f pformat flag to parse the given time with strptime.

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok

spacing

Remove the advertising clause in the UCB license which Berkeley
rescinded 22 July 1999. Proofed by myself and Theo.

ansi

getopt idiot

Part one of userland __P removal. Done with a simple regexp with some minor hand editing to make comments line up correctly. Another pass is forthcoming that handles the cases that could not be done automatically.

missed some registers, kill'em!

millert@ ok

add -a to use adjtime(), like rdate(1) does

o) __progname aria;

millert@ ok.

Fix comments, it is "daylight saving time", not "daylight savings time"

Fix an off-by-one-hour error that would occur when changing the time across
DST (Daylight Saving Time); from NetBSD.

check return value for setenv(3) for failure, and deal appropriately

remove extra externs not needed because of unistd.h (rest of tree will be done later.. contact me if you want to help)

GMT -> UTC in comments; make y2k hack easier to read

Clean up some -Wall stuff, and a potential problem if TM_TIME_BASE was not
1900.

Clear up an overeager Y2K fix; be a little stricter with allowable times

Cosmetic:
Correct usage message.
Capitalize hours, minutes and seconds so that minutes are
distinguisable from months and so that things are in line
with strftime(3)

nicer spacing in usage

correct [yy]yy stuff in manpages and usage

tabify

duh, my mind is not crisp

yyyy specification code; m4@nts.umn.edu

cleanup from danny@freebsd

wtmp repairs; netbsd

update rcsid

branches: 1.1.1;
Initial revision

The time-setting codepath can use pledge "settime" which was added for
ntpd, but apparently date was never revisited. "wpath" is for wtmp logging.
"rpath" for the case where -z argument isn't in the standard timezone dir.
discussed with tb and guenther

atoll -> strtonum

ok millert@ tb@

As we only use the .tv_sec field, simplify gettimeofday(2) -> time(3).

While here, use err(3) instead of errx(3) if adjtime(2) fails.

Discussed/tweaked with/by tb@ and jca@.

ok tb@ jca@

Delete useless setlocale(3) in src/bin/.
Minor cleanup while here: return from main, static void __dead usage, etc.
Based on a patch from Jan Stary <hans at stare dot cz>.
Feedback and OK tb@, OK millert@.

Change all tame callers to namechange to pledge(2).

tame "stdio rpath wpath". rpath is for localtime() and mktime(),
while wpath is for logwtmp(), a bit pessimistically since it is not clear
what could happen.
This is done AFTER the time is potentially set, since settimeofday() is
not available to us. Improvements and tests would be welcome.

FALLTHROUGH in getopt is incorrect. While here use strtonum
to parse tz_minuteswest.
ok millert

Eliminate use of TM_YEAR_BASE. OK guenther@ deraadt@ miod@

tzfile.h is an internal header that should never have been installed.
What's worse, the tzfile.h that gets installed is over 20 years old
and doesn't match the real tzfile.h in libc/time. This makes the
tree safe for /usr/include/tzfile.h removal. The TM_YEAR_BASE
define has been moved to time.h temporarily until its usage is
replaced by 1900 in the tree. Actual removal of tzfile.h is pending
a ports build. Based on a diff from deraadt@

When getopt processing flags, many should be flag=1 instead of flag++
ok tedu miod

localtime(3) can return NULL; seen by Rod Whitworth; ok guenther@

garbage collect unused global variable retval,
forgotten in rev. 1.36 when removing timed(8) support;
proofed by sobrado@

remove erroneous char cast to switch expression processing getopt(3);
not used in any cases.

ok deraadt@, guenther@, millert@

add unsigned char casts for specific calls to ctype.h macros.
ok guenther step

Parse the argument the -r option with atoll() to support dates past 2038

from J Drivdal (xjd (at) rivu.net)

replace sys/param.h with sys/types.h (and sometimes add limits.h if needed)
ok guenther

extern.h no longer needed

timed's time is up. use ntpd(8). Even our own fossil developers
switched a while back.
ok miod, kettenis

Add a non-standard option that affects the output TZ only. The input (for
parsing) TZ is unaffected. This makes it it easier to convert timestamps
from any timezone to any other timezone -- no need for $() gymnastics
ok millert

Check that date(1) is not passed any extra arguments.
ok millert

Make a -DSMALL version of date(1) for the media

rcsid[] and sccsid[] and copyright[] are essentially unmaintained (and
unmaintainable). these days, people use source. these id's do not provide
any benefit, and do hurt the small install media
(the 33,000 line diff is essentially mechanical)
ok with the idea millert, ok dms

printf field widths are always int, so add a cast to remove
"warning: field width is not type int"

"looks good" otto@

sync the synopsis and usage of commands

ok jmc@

Remove y2k hack. If no century is specified, use the current one.
OK otto@

use UTC instead of GMT0 for -u; from Jared R.R.Spiegel <jrrs@ice-nine.org>
ok millert@, otto@

add an option -j which suppresses setting the clock, but parses the date
argument. useful to convert string-to-epoch (with +%s) or just to check
whether the argument is parsed correctly before really setting the clock.
ok millert@, deraadt@

errx -> err. From form.

millert@ ok