From 12941721d24be65c5ec600b9f7d1ec866d2ca746 Mon Sep 17 00:00:00 2001
From: versat <versat@users.noreply.github.com>
Date: Tue, 12 Mar 2019 11:41:10 +0100
Subject: [PATCH] posix.cfg: Further fixes/enhancements; adding more argument
 directions.

---
 cfg/posix.cfg | 329 +++++++++++++++++++++++++++++---------------------
 1 file changed, 191 insertions(+), 138 deletions(-)

diff --git a/cfg/posix.cfg b/cfg/posix.cfg
index df64d2247..caa32d8ce 100644
--- a/cfg/posix.cfg
+++ b/cfg/posix.cfg
@@ -2514,21 +2514,22 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/009696799/functions/ecvt.html -->
   <!-- char *ecvt(double value, int ndigit, int *restrict decpt, int *restrict sign);-->
   <!--      LEGACY in POSIX.1-2001, removed in POSIX.1-2008-->
   <function name="ecvt">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
     </arg>
-    <arg nr="4">
+    <arg nr="4" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
@@ -2539,16 +2540,16 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="fcvt">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
     </arg>
-    <arg nr="4">
+    <arg nr="4" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
@@ -2559,30 +2560,31 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="gcvt">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="sprintf"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/lseek.html -->
   <!-- off_t lseek(int fildes, off_t offset, int whence); -->
   <function name="lseek">
     <returnValue type="off_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
     </arg>
   </function>
@@ -2591,18 +2593,19 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-bool/>
     </arg>
   </function>
   <!-- void setkey(const char *key); -->
   <function name="setkey">
     <noreturn>false</noreturn>
+    <returnValue type="void"/>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
@@ -2612,7 +2615,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-bool/>
     </arg>
@@ -2624,6 +2627,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="double"/>
     <noreturn>false</noreturn>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/putenv.html -->
   <!-- int putenv(char *string); -->
   <function name="putenv">
     <returnValue type="int"/>
@@ -2634,19 +2638,20 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/setenv.html -->
   <!-- int setenv(const char *envname, const char *envval, int overwrite); -->
   <function name="setenv">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
     </arg>
   </function>
@@ -2654,7 +2659,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="unsetenv">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -2665,7 +2670,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <returnValue type="struct tm *"/>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -2677,15 +2682,16 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <returnValue type="struct tm *"/>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/readdir.html -->
   <!-- struct dirent *readdir(DIR *dirp); -->
   <function name="readdir">
     <returnValue type="struct dirent *"/>
@@ -2707,28 +2713,29 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/readlink.html -->
   <!-- ssize_t readlink(const char *path, char *buf, size_t bufsiz); -->
   <function name="readlink">
     <returnValue type="ssize_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <minsize type="argvalue" arg="3"/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
       <valid>0:</valid>
@@ -2739,50 +2746,54 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
       <minsize type="argvalue" arg="4"/>
     </arg>
-    <arg nr="4">
+    <arg nr="4" direction="in">
       <not-uninit/>
       <not-bool/>
       <valid>0:</valid>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/asctime.html -->
   <!-- char *asctime_r(const struct tm *tm, char *buf); -->
   <function name="asctime_r">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
+      <!-- TODO: add something like "<minsize type="value" value="26"/>" when implemented, see #8335 -->
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="strftime"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/ctime.html -->
   <!-- char *ctime_r(const time_t *timep, char *buf); -->
   <function name="ctime_r">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
+      <!-- TODO: add something like "<minsize type="value" value="26"/>" when implemented, see #8335 -->
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="strftime"/>
   </function>
@@ -2791,22 +2802,23 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="struct tm *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/gmtime.html -->
   <!-- struct tm * gmtime(const time_t *tp); -->
   <function name="gmtime">
     <returnValue type="struct tm *"/>
     <use-retval/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -2814,14 +2826,15 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <warn severity="portability">Non reentrant function 'gmtime' called. For threadsafe applications it is recommended to use the reentrant replacement function 'gmtime_r'.</warn>
   </function>
   <!-- http://pubs.opengroup.org/onlinepubs/007908799/xsh/time.h.html -->
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/clock_settime.html -->
   <!-- int clock_settime(clockid_t clock_id, const struct timespec *tp); -->
   <function name="clock_settime">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -2830,10 +2843,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="killpg">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -2842,10 +2855,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="kill">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -2854,10 +2867,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="clock_gettime">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
@@ -2866,20 +2879,20 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="clock_getres">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/tmpnam.html -->
   <!-- char* tmpnam(char *s); -->
   <function name="tmpnam,tmpnam_r">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
-      <not-uninit/>
+    <arg nr="1" direction="out">
       <not-bool/>
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="tmpfile,mkstemp,mkdtemp"/>
@@ -2927,10 +2940,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="useconds_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -2942,10 +2955,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <use-retval/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -2955,35 +2968,36 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="bcopy">
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <minsize type="argvalue" arg="3"/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
+      <minsize type="argvalue" arg="3"/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <valid>0:</valid>
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="memcpy,memmove"/>
   </function>
-  <!-- int bcmp(const void *s1, void *s2, size_t n); -->
+  <!-- int bcmp(const void *s1, const void *s2, size_t n); -->
   <function name="bcmp">
     <use-retval/>
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
       <valid>0:</valid>
@@ -2994,22 +3008,23 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="bzero">
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-null/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <valid>0:</valid>
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="memset"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/007904875/functions/ftime.html -->
   <!-- int ftime(struct timeb *tp); -->
   <function name="ftime">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
-      <not-uninit/>
+    <arg nr="1" direction="out">
+      <not-null/>
       <not-bool/>
     </arg>
     <warn severity="style" reason="Obsolescent" alternatives="time,gettimeofday,clock_gettime"/>
@@ -3020,11 +3035,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="wchar_t *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -3036,11 +3051,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-null/>
       <minsize type="strlen" arg="2"/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
       <strz/>
@@ -3053,11 +3068,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3069,11 +3084,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3084,7 +3099,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="sighandler_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
     <arg nr="2">
@@ -3113,6 +3128,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <leak-ignore/>
     <arg nr="3"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_cond_broadcast.html -->
   <!-- int pthread_cond_signal(pthread_cond_t *cond);
        int pthread_cond_broadcast(pthread_cond_t *cond); -->
   <function name="pthread_cond_signal,pthread_cond_broadcast">
@@ -3124,32 +3140,39 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-uninit/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_create.html -->
   <!-- int pthread_create(pthread_t * thread, const pthread_attr_t * attr, void *(*start_routine)(void*), void * arg); -->
   <function name="pthread_create">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-null/>
     </arg>
-    <arg nr="2"/>
+    <arg nr="2" direction="in"/>
     <arg nr="3">
       <not-null/>
     </arg>
     <arg nr="4"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_detach.html -->
+  <!-- int pthread_detach(pthread_t thread); -->
   <function name="pthread_detach">
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <returnValue type="int"/>
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_equal.html -->
+  <!-- int pthread_equal(pthread_t t1, pthread_t t2); -->
   <function name="pthread_equal">
     <noreturn>false</noreturn>
     <use-retval/>
-    <arg nr="1">
+    <returnValue type="int"/>
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
   </function>
@@ -3157,40 +3180,55 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>true</noreturn>
     <arg nr="1"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_join.html -->
   <!-- int pthread_join(pthread_t thread, void **value_ptr); -->
   <function name="pthread_join">
     <noreturn>false</noreturn>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2"/>
+    <arg nr="2" direction="out">
+      <not-bool/>
+    </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_kill.html -->
+  <!-- int pthread_kill(pthread_t thread, int sig); -->
   <function name="pthread_kill">
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <returnValue type="int"/>
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_self.html -->
+  <!-- pthread_t pthread_self(void); -->
   <function name="pthread_self">
     <noreturn>false</noreturn>
     <use-retval/>
+    <returnValue type="pthread_t"/>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_attr_destroy.html -->
+  <!-- int pthread_attr_destroy(pthread_attr_t *attr); -->
   <function name="pthread_attr_destroy">
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <returnValue type="int"/>
+    <arg nr="1" direction="inout">
       <not-null/>
     </arg>
   </function>
+  <!-- int pthread_attr_init(pthread_attr_t *attr); -->
   <function name="pthread_attr_init">
     <noreturn>false</noreturn>
-    <arg nr="1">
+    <returnValue type="int"/>
+    <arg nr="1" direction="out">
       <not-null/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/009695399/functions/pthread_attr_getstackaddr.html -->
   <!-- int pthread_attr_setstackaddr(pthread_attr_t *attr, void *stackaddr); -->
   <function name="pthread_attr_setstackaddr">
     <noreturn>false</noreturn>
@@ -3232,7 +3270,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
       <valid>0:</valid>
@@ -3248,19 +3286,20 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_mutex_init.html -->
   <!-- int pthread_mutex_init(pthread_mutex_t *restrict mutex, const pthread_mutexattr_t *restrict attr); -->
   <function name="pthread_mutex_init">
     <noreturn>false</noreturn>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-null/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <!-- NULL is valid -->
     </arg>
   </function>
@@ -3268,19 +3307,21 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
   <function name="pthread_mutex_destroy">
     <noreturn>false</noreturn>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="inout">
       <not-null/>
       <not-uninit/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/pthread_mutex_lock.html -->
   <!-- int pthread_mutex_lock(pthread_mutex_t *mutex); -->
   <function name="pthread_mutex_lock">
     <noreturn>false</noreturn>
     <leak-ignore/>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="inout">
       <not-null/>
       <not-uninit/>
+      <not-bool/>
     </arg>
   </function>
   <!-- int pthread_mutex_trylock(pthread_mutex_t *mutex); -->
@@ -3288,9 +3329,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <leak-ignore/>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="inout">
       <not-null/>
       <not-uninit/>
+      <not-bool/>
     </arg>
   </function>
   <!-- int pthread_mutex_unlock(pthread_mutex_t *mutex); -->
@@ -3298,9 +3340,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <leak-ignore/>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="inout">
       <not-null/>
       <not-uninit/>
+      <not-bool/>
     </arg>
   </function>
   <!-- char *tempnam(const char *dir, const char *pfx); -->
@@ -3309,12 +3352,14 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
+      <strz/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
+      <strz/>
     </arg>
     <warn severity="portability">Non reentrant function 'tempnam' called. For threadsafe applications it is recommended to use the reentrant replacement function 'tempnam_r'.</warn>
   </function>
@@ -3324,14 +3369,16 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
+      <strz/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
+      <strz/>
     </arg>
     <warn severity="portability">Non reentrant function 'crypt' called. For threadsafe applications it is recommended to use the reentrant replacement function 'crypt_r'.</warn>
   </function>
@@ -3341,7 +3388,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3353,7 +3400,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="struct spwd *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -3387,7 +3434,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="struct spwd *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -3421,14 +3468,15 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="2">
-      <not-uninit/>
+    <arg nr="1" direction="out"/>
+    <arg nr="2" direction="out">
+      <minsize type="argvalue" arg="3"/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <valid>0:</valid>
     </arg>
-    <arg nr="4">
+    <arg nr="4" direction="out">
       <not-bool/>
     </arg>
   </function>
@@ -3450,13 +3498,13 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <leak-ignore/>
     <returnValue type="int"/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-null/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
@@ -3468,7 +3516,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="struct group *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <not-bool/>
@@ -3481,7 +3529,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <use-retval/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3500,21 +3548,22 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-bool/>
     </arg>
     <warn severity="portability">Non reentrant function 'ctermid' called. For threadsafe applications it is recommended to use the reentrant replacement function 'ctermid_r'.</warn>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/realpath.html -->
   <!-- char *realpath(const char *path, char *resolved_path); -->
   <function name="realpath">
     <returnValue type="char *"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
       <not-null/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-bool/>
     </arg>
   </function>
@@ -3539,10 +3588,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3559,13 +3608,14 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
       <not-bool/>
     </arg>
   </function>
+  <!-- https://pubs.opengroup.org/onlinepubs/9699919799/functions/exec.html -->
   <!-- int execv(const char *path, char *const argv[]); 
        int execvp(const char *file, char *const argv[]); -->
   <function name="execv,execvp">
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
       <strz/>
@@ -3580,7 +3630,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="pid_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="out">
       <not-bool/>
     </arg>
   </function>
@@ -3589,11 +3639,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="pid_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2"/>
-    <arg nr="3">
+    <arg nr="2" direction="out"/>
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3607,11 +3657,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="size_t"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-null/>
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-bool/>
       <valid>0:</valid>
@@ -3624,7 +3674,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <use-retval/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3635,11 +3685,14 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
+    </arg>
+    <arg nr="3">
+      <!-- direction (in/out) depends on the value of arg2 "cmd" -->
       <not-bool/>
     </arg>
   </function>
@@ -3649,14 +3702,14 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <valid>0:</valid>
     </arg>
-    <arg nr="3">
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3667,11 +3720,11 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <noreturn>false</noreturn>
     <returnValue type="void *"/>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2"/>
-    <arg nr="3">
+    <arg nr="2" direction="in"/>
+    <arg nr="3" direction="in">
       <not-uninit/>
       <not-bool/>
     </arg>
@@ -3682,7 +3735,7 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-bool/>
     </arg>
   </function>
@@ -3692,10 +3745,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="out">
       <not-null/>
       <not-bool/>
     </arg>
@@ -3706,10 +3759,10 @@ The function 'mktemp' is considered to be dangerous due to race conditions and s
     <returnValue type="int"/>
     <noreturn>false</noreturn>
     <leak-ignore/>
-    <arg nr="1">
+    <arg nr="1" direction="in">
       <not-uninit/>
     </arg>
-    <arg nr="2">
+    <arg nr="2" direction="in">
       <not-uninit/>
       <not-null/>
       <not-bool/>