/* Fully extensible Emacs, running on Unix, intended for GNU.

Copyright (C) 1985-1987, 1993-1995, 1997-1999, 2001-2024 Free Software
Foundation, Inc.

This file is part of GNU Emacs.

GNU Emacs is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or (at
your option) any later version.

GNU Emacs is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
GNU General Public License for more details.

You should have received a copy of the GNU General Public License
along with GNU Emacs.  If not, see <https://www.gnu.org/licenses/>.  */

#define INLINE EXTERN_INLINE
#include <config.h>

#include <errno.h>
#include <fcntl.h>
#include <stdlib.h>

#include <sys/file.h>
#include <sys/stat.h>
#include <unistd.h>

#define MAIN_PROGRAM
#include "lisp.h"
#include "sysstdio.h"

#ifdef HAVE_ANDROID
#include "androidterm.h"
#endif

#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
#include "sfntfont.h"
#endif

#ifdef WINDOWSNT
#include <fcntl.h>
#include <sys/socket.h>
#include <mbstring.h>
#include <filename.h>	/* for IS_ABSOLUTE_FILE_NAME */
#include "w32.h"
#include "w32heap.h"
#endif

#if defined WINDOWSNT || defined HAVE_NTGUI
#include "w32select.h"
#include "w32font.h"
#include "w32common.h"
#endif

#if defined CYGWIN
#include "cygw32.h"
#endif

#ifdef MSDOS
#include <binary-io.h>
#include "dosfns.h"
#endif

#ifdef HAVE_LIBSYSTEMD
# include <systemd/sd-daemon.h>
# include <sys/socket.h>
#endif

#if defined HAVE_LINUX_SECCOMP_H && defined HAVE_LINUX_FILTER_H \
  && HAVE_DECL_SECCOMP_SET_MODE_FILTER                          \
  && HAVE_DECL_SECCOMP_FILTER_FLAG_TSYNC
# define SECCOMP_USABLE 1
#else
# define SECCOMP_USABLE 0
#endif

#if SECCOMP_USABLE
# include <linux/seccomp.h>
# include <linux/filter.h>
# include <sys/prctl.h>
# include <sys/syscall.h>
#endif

#ifdef HAVE_WINDOW_SYSTEM
#include TERM_HEADER
#endif /* HAVE_WINDOW_SYSTEM */

#include "bignum.h"
#include "itree.h"
#include "intervals.h"
#include "character.h"
#include "buffer.h"
#include "window.h"
#include "xwidget.h"
#include "atimer.h"
#include "blockinput.h"
#include "syssignal.h"
#include "process.h"
#include "frame.h"
#include "termhooks.h"
#include "keyboard.h"
#include "keymap.h"
#include "category.h"
#include "charset.h"
#include "composite.h"
#include "dispextern.h"
#include "regex-emacs.h"
#include "sheap.h"
#include "syntax.h"
#include "sysselect.h"
#include "systime.h"
#include "puresize.h"

#include "getpagesize.h"
#include "gnutls.h"

#ifdef HAVE_HAIKU
#include <kernel/OS.h>
#endif

#ifdef PROFILING
# include <sys/gmon.h>
extern void moncontrol (int mode);
# ifdef __MINGW32__
extern unsigned char etext asm ("etext");
# else
extern char etext;
# endif
#endif

#ifdef HAVE_SETLOCALE
#include <locale.h>
#endif

#if HAVE_WCHAR_H
# include <wchar.h>
#endif

#ifdef HAVE_SETRLIMIT
#include <sys/time.h>
#include <sys/resource.h>
#endif

#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
#include "android.h"
#endif

/* We don't guard this with HAVE_TREE_SITTER because treesit.o is
   always compiled (to provide treesit-available-p).  */
#include "treesit.h"

#include "pdumper.h"
#include "fingerprint.h"
#include "epaths.h"

/* Include these only because of INLINE.  */
#include "comp.h"
#include "thread.h"

static const char emacs_version[] = PACKAGE_VERSION;
static const char emacs_copyright[] = COPYRIGHT;
static const char emacs_bugreport[] = PACKAGE_BUGREPORT;

/* Put version info into the executable in the form that 'ident' uses.  */
char const EXTERNALLY_VISIBLE RCS_Id[]
  = "$Id" ": GNU Emacs " PACKAGE_VERSION
    " (" EMACS_CONFIGURATION " " EMACS_CONFIG_FEATURES ") $";

/* Empty lisp strings.  To avoid having to build any others.  */
Lisp_Object empty_unibyte_string, empty_multibyte_string;

#ifdef WINDOWSNT
/* Cache for externally loaded libraries.  */
Lisp_Object Vlibrary_cache;
/* Original command line string as received from the OS.  */
static char *initial_cmdline;
/* Original working directory when invoked.  */
static const char *initial_wd;
#endif

struct gflags gflags;
bool initialized;

/* If true, Emacs should not attempt to use a window-specific code,
   but instead should use the virtual terminal under which it was started.  */
bool inhibit_window_system;

/* If true, a filter or a sentinel is running.  Tested to save the match
   data on the first attempt to change it inside asynchronous code.  */
bool running_asynch_code;

#if defined (HAVE_X_WINDOWS) || defined (HAVE_NS)
/* If true, -d was specified, meaning we're using some window system.  */
bool display_arg;
#endif

#if defined GNU_LINUX && defined HAVE_UNEXEC
/* The gap between BSS end and heap start as far as we can tell.  */
static uintmax_t heap_bss_diff;
#endif

/* To run as a background daemon under Cocoa or Windows,
   we must do a fork+exec, not a simple fork.

   On Cocoa, CoreFoundation lib fails in forked process, see Mac OS X
   Leopard Developer Release Notes for CoreFoundation Framework:

   https://web.archive.org/web/20090225231934/http://developer.apple.com/ReleaseNotes/CoreFoundation/CoreFoundation.html

   On Windows, a Cygwin fork child cannot access the USER subsystem.

   We mark being in the exec'd process by a daemon name argument of
   form "--daemon=\nFD0,FD1\nNAME" where FD are the pipe file descriptors,
   NAME is the original daemon name, if any.

   On Haiku, the table of semaphores used for looper locks doesn't
   persist across forked processes.  */
#if defined NS_IMPL_COCOA || defined CYGWIN || defined HAVE_HAIKU
# define DAEMON_MUST_EXEC
#endif

/* True means running Emacs without interactive terminal.  */
bool noninteractive;

/* True means remove site-lisp directories from load-path.  */
bool no_site_lisp;

/* True means put details like time stamps into builds.  */
bool build_details;

/* Name for the server started by the daemon.*/
static char *daemon_name;

/* 0 not a daemon, 1 new-style (foreground), 2 old-style (background).
   A negative value means the daemon initialization was already done.  */
int daemon_type;

#ifndef WINDOWSNT
/* Pipe used to send exit notification to the background daemon parent at
   startup.  On Windows, we use a kernel event instead.  */
static int daemon_pipe[2];
#else
HANDLE w32_daemon_event;
#endif

/* Save argv and argc.  */
char **initial_argv;
int initial_argc;
static char *initial_emacs_executable = NULL;

/* The name of the working directory, or NULL if this info is unavailable.  */
char const *emacs_wd;

static void sort_args (int argc, char **argv);
static void syms_of_emacs (void);

/* C99 needs each string to be at most 4095 characters, and the usage
   strings below are split to not overflow this limit.  */
static char const *const usage_message[] =
  { "\
\n\
Run Emacs, the extensible, customizable, self-documenting real-time\n\
display editor.  The recommended way to start Emacs for normal editing\n\
is with no options at all.\n\
\n\
Run M-x info RET m emacs RET m emacs invocation RET inside Emacs to\n\
read the main documentation for these command-line arguments.\n\
\n\
Initialization options:\n\
\n\
",
    "\
--batch                     do not do interactive display; implies -q\n\
--chdir DIR                 change to directory DIR\n\
--daemon, --bg-daemon[=NAME] start a (named) server in the background\n\
--fg-daemon[=NAME]          start a (named) server in the foreground\n\
--debug-init                enable Emacs Lisp debugger for init file\n\
--display, -d DISPLAY       use X server DISPLAY\n\
",
#ifdef HAVE_MODULES
    "\
--module-assertions         assert behavior of dynamic modules\n\
",
#endif
#ifdef HAVE_PDUMPER
    "\
--dump-file FILE            read dumped state from FILE\n\
--fingerprint               output fingerprint and exit\n\
",
#endif
#if SECCOMP_USABLE
    "\
--seccomp=FILE              read Seccomp BPF filter from FILE\n\
"
#endif
    "\
--no-build-details          do not add build details such as time stamps\n\
--no-desktop                do not load a saved desktop\n\
--no-init-file, -q          load neither ~/.emacs nor default.el\n\
--no-loadup, -nl            do not load loadup.el into bare Emacs\n\
--no-site-file              do not load site-start.el\n\
--no-x-resources            do not load X resources\n\
--no-site-lisp, -nsl        do not add site-lisp directories to load-path\n\
--no-splash                 do not display a splash screen on startup\n\
--no-window-system, -nw     do not communicate with X, ignoring $DISPLAY\n\
--init-directory=DIR        use DIR when looking for the Emacs init files.\n\
",
    "\
--quick, -Q                 equivalent to:\n\
                              -q --no-site-file --no-site-lisp --no-splash\n\
                              --no-x-resources\n\
--script FILE               run FILE as an Emacs Lisp script\n\
-x                          to be used in #!/usr/bin/emacs -x\n\
                              and has approximately the same meaning\n\
			      as -Q --script\n\
--terminal, -t DEVICE       use DEVICE for terminal I/O\n\
--user, -u USER             load ~USER/.emacs instead of your own\n\
\n\
",
    "\
Action options:\n\
\n\
FILE                    visit FILE\n\
+LINE                   go to line LINE in next FILE\n\
+LINE:COLUMN            go to line LINE, column COLUMN, in next FILE\n\
--directory, -L DIR     prepend DIR to load-path (with :DIR, append DIR)\n\
--eval EXPR             evaluate Emacs Lisp expression EXPR\n\
--execute EXPR          evaluate Emacs Lisp expression EXPR\n\
",
    "\
--file FILE             visit FILE\n\
--find-file FILE        visit FILE\n\
--funcall, -f FUNC      call Emacs Lisp function FUNC with no arguments\n\
--insert FILE           insert contents of FILE into current buffer\n\
--kill                  exit without asking for confirmation\n\
--load, -l FILE         load Emacs Lisp FILE using the load function\n\
--visit FILE            visit FILE\n\
\n\
",
    "\
Display options:\n\
\n\
--background-color, -bg COLOR   window background color\n\
--basic-display, -D             disable many display features;\n\
                                  used for debugging Emacs\n\
--border-color, -bd COLOR       main border color\n\
--border-width, -bw WIDTH       width of main border\n\
",
    "\
--color, --color=MODE           override color mode for character terminals;\n\
                                  MODE defaults to `auto', and\n\
                                  can also be `never', `always',\n\
                                  or a mode name like `ansi8'\n\
--cursor-color, -cr COLOR       color of the Emacs cursor indicating point\n\
--font, -fn FONT                default font; must be fixed-width\n\
--foreground-color, -fg COLOR   window foreground color\n\
",
    "\
--fullheight, -fh               make the first frame high as the screen\n\
--fullscreen, -fs               make the first frame fullscreen\n\
--fullwidth, -fw                make the first frame wide as the screen\n\
--maximized, -mm                make the first frame maximized\n\
--geometry, -g GEOMETRY         window geometry\n\
",
    "\
--no-bitmap-icon, -nbi          do not use picture of gnu for Emacs icon\n\
--iconic                        start Emacs in iconified state\n\
--internal-border, -ib WIDTH    width between text and main border\n\
--line-spacing, -lsp PIXELS     additional space to put between lines\n\
--mouse-color, -ms COLOR        mouse cursor color in Emacs window\n\
--name NAME                     title for initial Emacs frame\n\
",
    "\
--no-blinking-cursor, -nbc      disable blinking cursor\n\
--reverse-video, -r, -rv        switch foreground and background\n\
--title, -T TITLE               title for initial Emacs frame\n\
--vertical-scroll-bars, -vb     enable vertical scroll bars\n\
--xrm XRESOURCES                set additional X resources\n\
--parent-id XID                 set parent window\n\
--help                          display this help and exit\n\
--version                       output version information and exit\n\
\n\
",
    "\
You can generally also specify long option names with a single -; for\n\
example, -batch as well as --batch.  You can use any unambiguous\n\
abbreviation for a --option.\n\
\n\
Various environment variables and window system resources also affect\n\
the operation of Emacs.  See the main documentation.\n\
\n\
Report bugs to " PACKAGE_BUGREPORT ".  First, please see the Bugs\n\
section of the Emacs manual or the file BUGS.\n"
  };

\f
/* True if handling a fatal error already.  */
bool fatal_error_in_progress;

#if !HAVE_SETLOCALE
static char *
setlocale (int cat, char const *locale)
{
  return 0;
}
#endif

/* True if the current system locale uses UTF-8 encoding.  */
static bool
using_utf8 (void)
{
  /* We don't want to compile in mbrtowc on WINDOWSNT because that
     will prevent Emacs from starting on older Windows systems, while
     the result is known in advance anyway...  */
#if defined HAVE_WCHAR_H && !defined WINDOWSNT
  wchar_t wc;
#ifndef HAVE_ANDROID
  mbstate_t mbs = { 0 };
#else
  mbstate_t mbs;

  /* Not sure how mbstate works on Android, but this seems to be
     required.  */
  memset (&mbs, 0, sizeof mbs);
#endif
  return mbrtowc (&wc, "\xc4\x80", 2, &mbs) == 2 && wc == 0x100;
#else
  return false;
#endif
}


/* Report a fatal error due to signal SIG, output a backtrace of at
   most BACKTRACE_LIMIT lines, and exit.  */
AVOID
terminate_due_to_signal (int sig, int backtrace_limit)
{
  signal (sig, SIG_DFL);

  if (attempt_orderly_shutdown_on_fatal_signal)
    {
      /* If fatal error occurs in code below, avoid infinite recursion.  */
      if (! fatal_error_in_progress)
        {
          fatal_error_in_progress = 1;

          totally_unblock_input ();
          if (sig == SIGTERM || sig == SIGHUP || sig == SIGINT)
	    {
	      /* Avoid abort in shut_down_emacs if we were interrupted
		 in noninteractive usage, as in that case we don't
		 care about the message stack.  */
	      if (noninteractive)
		clear_message_stack ();
	      Fkill_emacs (make_fixnum (sig), Qnil);
	    }

          shut_down_emacs (sig, Qnil);
          emacs_backtrace (backtrace_limit);
        }
    }

  /* Signal the same code; this time it will really be fatal.
     Since we're in a signal handler, the signal is blocked, so we
     have to unblock it if we want to really receive it.  */
#ifndef MSDOS
  {
    sigset_t unblocked;
    sigemptyset (&unblocked);
    sigaddset (&unblocked, sig);
    pthread_sigmask (SIG_UNBLOCK, &unblocked, 0);
  }
#endif

  emacs_raise (sig);

  /* This shouldn't be executed, but it prevents a warning.  */
  exit (1);
}

\f
/* Code for dealing with Lisp access to the Unix command line.  */
static void
init_cmdargs (int argc, char **argv, int skip_args, char const *original_pwd)
{
  int i;
  Lisp_Object name, dir, handler;
  specpdl_ref count = SPECPDL_INDEX ();
  Lisp_Object raw_name;
  AUTO_STRING (slash_colon, "/:");

  initial_argv = argv;
  initial_argc = argc;

#ifdef WINDOWSNT
  /* Must use argv[0] converted to UTF-8, as it begets many standard
     file and directory names.  */
  {
    char argv0[MAX_UTF8_PATH];

    if (filename_from_ansi (argv[0], argv0) == 0)
      raw_name = build_unibyte_string (argv0);
    else
      raw_name = build_unibyte_string (argv[0]);
  }
#else
  raw_name = build_unibyte_string (argv[0]);
#endif

  /* Add /: to the front of the name
     if it would otherwise be treated as magic.  */
  handler = Ffind_file_name_handler (raw_name, Qt);
  if (! NILP (handler))
    raw_name = concat2 (slash_colon, raw_name);

  Vinvocation_name = Ffile_name_nondirectory (raw_name);
  Vinvocation_directory = Ffile_name_directory (raw_name);

  /* If we got no directory in argv[0], search PATH to find where
     Emacs actually came from.  */
  if (NILP (Vinvocation_directory))
    {
      Lisp_Object found;
      int yes = openp (Vexec_path, Vinvocation_name, Vexec_suffixes,
		       &found, make_fixnum (X_OK), false, false,
		       NULL);
      if (yes == 1)
	{
	  /* Add /: to the front of the name
	     if it would otherwise be treated as magic.  */
	  handler = Ffind_file_name_handler (found, Qt);
	  if (! NILP (handler))
	    found = concat2 (slash_colon, found);
	  Vinvocation_directory = Ffile_name_directory (found);
	}
    }

  if (!NILP (Vinvocation_directory)
      && NILP (Ffile_name_absolute_p (Vinvocation_directory)))
    /* Emacs was started with relative path, like ./emacs.
       Make it absolute.  */
    {
      Lisp_Object odir =
	original_pwd ? build_unibyte_string (original_pwd) : Qnil;

      Vinvocation_directory = Fexpand_file_name (Vinvocation_directory, odir);
    }

  Vinstallation_directory = Qnil;

  if (!NILP (Vinvocation_directory))
    {
      dir = Vinvocation_directory;
#ifdef WINDOWSNT
      /* If we are running from the build directory, set DIR to the
	 src subdirectory of the Emacs tree, like on Posix
	 platforms.  */
      if (SBYTES (dir) > sizeof ("/i386/") - 1
	  && 0 == strcmp (SSDATA (dir) + SBYTES (dir) - sizeof ("/i386/") + 1,
			  "/i386/"))
	{
	  if (NILP (Vpurify_flag))
	    {
	      Lisp_Object file_truename = intern ("file-truename");
	      if (!NILP (Ffboundp (file_truename)))
		dir = call1 (file_truename, dir);
	    }
	  dir = Fexpand_file_name (build_string ("../.."), dir);
	}
#endif
      name = Fexpand_file_name (Vinvocation_name, dir);
      while (1)
	{
	  Lisp_Object tem, lib_src_exists;
	  Lisp_Object etc_exists, info_exists;

	  /* See if dir contains subdirs for use by Emacs.
	     Check for the ones that would exist in a build directory,
	     not including lisp and info.  */
	  tem = Fexpand_file_name (build_string ("lib-src"), dir);
	  lib_src_exists = Ffile_exists_p (tem);

#ifdef MSDOS
	  /* MSDOS installations frequently remove lib-src, but we still
	     must set installation-directory, or else info won't find
	     its files (it uses the value of installation-directory).  */
	  tem = Fexpand_file_name (build_string ("info"), dir);
	  info_exists = Ffile_exists_p (tem);
#else
	  info_exists = Qnil;
#endif

	  if (!NILP (lib_src_exists) || !NILP (info_exists))
	    {
	      tem = Fexpand_file_name (build_string ("etc"), dir);
	      etc_exists = Ffile_exists_p (tem);
	      if (!NILP (etc_exists))
		{
                  Vinstallation_directory = Ffile_name_as_directory (dir);
		  break;
		}
	    }

	  /* See if dir's parent contains those subdirs.  */
	  tem = Fexpand_file_name (build_string ("../lib-src"), dir);
	  lib_src_exists = Ffile_exists_p (tem);


#ifdef MSDOS
	  /* See the MSDOS commentary above.  */
	  tem = Fexpand_file_name (build_string ("../info"), dir);
	  info_exists = Ffile_exists_p (tem);
#else
	  info_exists = Qnil;
#endif

	  if (!NILP (lib_src_exists) || !NILP (info_exists))
	    {
	      tem = Fexpand_file_name (build_string ("../etc"), dir);
	      etc_exists = Ffile_exists_p (tem);
	      if (!NILP (etc_exists))
		{
		  tem = Fexpand_file_name (build_string (".."), dir);
                  Vinstallation_directory = Ffile_name_as_directory (tem);
		  break;
		}
	    }

	  /* If the Emacs executable is actually a link,
	     next try the dir that the link points into.  */
	  tem = Ffile_symlink_p (name);
	  if (!NILP (tem))
	    {
	      name = Fexpand_file_name (tem, dir);
	      dir = Ffile_name_directory (name);
	    }
	  else
	    break;
	}
    }

  Vcommand_line_args = Qnil;

  for (i = argc - 1; i >= 0; i--)
    {
      if (i == 0 || i > skip_args)
	/* For the moment, we keep arguments as is in unibyte strings.
	   They are decoded in the function command-line after we know
	   locale-coding-system.  */
	Vcommand_line_args
	  = Fcons (build_unibyte_string (argv[i]), Vcommand_line_args);
    }

  unbind_to (count, Qnil);
}

DEFUN ("invocation-name", Finvocation_name, Sinvocation_name, 0, 0, 0,
       doc: /* Return the program name that was used to run Emacs.
Any directory names are omitted.  */)
  (void)
{
  return Fcopy_sequence (Vinvocation_name);
}

DEFUN ("invocation-directory", Finvocation_directory, Sinvocation_directory,
       0, 0, 0,
       doc: /* Return the directory name in which the Emacs executable was located.  */)
  (void)
{
  return Fcopy_sequence (Vinvocation_directory);
}

\f
/* Test whether the next argument in ARGV matches SSTR or a prefix of
   LSTR (at least MINLEN characters).  If so, then if VALPTR is non-null
   (the argument is supposed to have a value) store in *VALPTR either
   the next argument or the portion of this one after the equal sign.
   ARGV is read starting at position *SKIPPTR; this index is advanced
   by the number of arguments used.

   Too bad we can't just use getopt for all of this, but we don't have
   enough information to do it right.  */

static bool
argmatch (char **argv, int argc, const char *sstr, const char *lstr,
          int minlen, char **valptr, int *skipptr)
{
  char *p = NULL;
  ptrdiff_t arglen;
  char *arg;

  /* Don't access argv[argc]; give up in advance.  */
  if (argc <= *skipptr + 1)
    return 0;

  arg = argv[*skipptr+1];
  if (arg == NULL)
    return 0;
  if (strcmp (arg, sstr) == 0)
    {
      if (valptr != NULL)
	{
	  *valptr = argv[*skipptr+2];
	  *skipptr += 2;
	}
      else
	*skipptr += 1;
      return 1;
    }
  arglen = (valptr != NULL && (p = strchr (arg, '=')) != NULL
	    ? p - arg : strlen (arg));
  if (!lstr)
    return 0;
  if (arglen < minlen || strncmp (arg, lstr, arglen) != 0)
    return 0;
  else if (valptr == NULL)
    {
      *skipptr += 1;
      return 1;
    }
  else if (p != NULL)
    {
      *valptr = p+1;
      *skipptr += 1;
      return 1;
    }
  else if (argv[*skipptr+2] != NULL)
    {
      *valptr = argv[*skipptr+2];
      *skipptr += 2;
      return 1;
    }
  else
    {
      return 0;
    }
}

#if !defined HAVE_ANDROID || defined ANDROID_STUBIFY

/* Find a name (absolute or relative) of the Emacs executable whose
   name (as passed into this program) is ARGV0.  Called early in
   initialization by portable dumper loading code, so avoid Lisp and
   associated machinery.  Return a heap-allocated string giving a name
   of the Emacs executable, or an empty heap-allocated string or NULL
   if not found.  Store into *CANDIDATE_SIZE a lower bound on the size
   of any heap allocation.  */
static char *
find_emacs_executable (char const *argv0, ptrdiff_t *candidate_size)
{
  *candidate_size = 0;

  /* Use xstrdup etc. to allocate storage, so as to call our private
     implementation of malloc, since the caller calls our free.  */
#ifdef WINDOWSNT
  char *prog_fname = w32_my_exename ();
  if (prog_fname)
    *candidate_size = strlen (prog_fname) + 1;
  return prog_fname ? xstrdup (prog_fname) : NULL;
#else  /* !WINDOWSNT */
  char *candidate = NULL;

  /* If the executable name contains a slash, we have some kind of
     path already, so just resolve symlinks and return the result.  */
  eassert (argv0);
  if (strchr (argv0, DIRECTORY_SEP))
    {
      char *real_name = realpath (argv0, NULL);

      if (real_name)
	{
	  *candidate_size = strlen (real_name) + 1;
	  return real_name;
	}

      char *val = xstrdup (argv0);
      *candidate_size = strlen (val) + 1;
      return val;
    }
  ptrdiff_t argv0_length = strlen (argv0);

  const char *path = getenv ("PATH");
  if (!path)
    {
      /* Default PATH is implementation-defined, so we don't know how
         to conduct the search.  */
      return NULL;
    }

  /* Actually try each concatenation of a path element and the
     executable basename.  */
  do
    {
      static char const path_sep[] = { SEPCHAR, '\0' };
      ptrdiff_t path_part_length = strcspn (path, path_sep);
      const char *path_part = path;
      path += path_part_length;
      if (path_part_length == 0)
        {
          path_part = ".";
          path_part_length = 1;
        }
      ptrdiff_t needed = path_part_length + 1 + argv0_length + 1;
      if (*candidate_size <= needed)
	{
	  xfree (candidate);
	  candidate = xpalloc (NULL, candidate_size,
			       needed - *candidate_size + 1, -1, 1);
	}
      memcpy (candidate + 0, path_part, path_part_length);
      candidate[path_part_length] = DIRECTORY_SEP;
      memcpy (candidate + path_part_length + 1, argv0, argv0_length + 1);
      struct stat st;
      if (file_access_p (candidate, X_OK)
	  && stat (candidate, &st) == 0 && S_ISREG (st.st_mode))
	{
	  /* People put on PATH a symlink to the real Emacs
	     executable, with all the auxiliary files where the real
	     executable lives.  Support that.  */
	  if (lstat (candidate, &st) == 0 && S_ISLNK (st.st_mode))
	    {
	      char *real_name = realpath (candidate, NULL);

	      if (real_name)
		{
		  *candidate_size = strlen (real_name) + 1;
		  return real_name;
		}
	    }
	  return candidate;
	}
      *candidate = '\0';
    }
  while (*path++ != '\0');

  return candidate;
#endif	/* !WINDOWSNT */
}

#endif

#ifdef HAVE_PDUMPER

static const char *
dump_error_to_string (int result)
{
  switch (result)
    {
    case PDUMPER_LOAD_SUCCESS:
      return "success";
    case PDUMPER_LOAD_OOM:
      return "out of memory";
    case PDUMPER_NOT_LOADED:
      return "not loaded";
    case PDUMPER_LOAD_FILE_NOT_FOUND:
      return "could not open file";
    case PDUMPER_LOAD_BAD_FILE_TYPE:
      return "not a dump file";
    case PDUMPER_LOAD_FAILED_DUMP:
      return "dump file is result of failed dump attempt";
    case PDUMPER_LOAD_VERSION_MISMATCH:
      return "not built for this Emacs executable";
    default:
      return (result <= PDUMPER_LOAD_ERROR
	      ? "generic error"
	      : strerror (result - PDUMPER_LOAD_ERROR));
    }
}

/* This function returns the Emacs executable.  DUMP_FILE is ignored
   outside of Android.  Otherwise, it is the name of the dump file to
   use, or NULL if Emacs should look for a ``--dump-file'' argument
   instead.  */

static char *
load_pdump (int argc, char **argv, char *dump_file)
{
#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
  int skip_args = 0, result;

  while (skip_args < argc - 1)
    {
      if (argmatch (argv, argc, "-dump-file", "--dump-file",
		    6, &dump_file, &skip_args)
	  || argmatch (argv, argc, "--", NULL, 2, NULL,
		       &skip_args))
	break;
      skip_args++;
    }

  if (!dump_file)
    return argv[0];

  result = pdumper_load (dump_file, argv[0]);

  if (result != PDUMPER_LOAD_SUCCESS)
    fatal ("could not load dump file \"%s\": %s",
	   dump_file, dump_error_to_string (result));
  return argv[0];
#else

  const char *const suffix = ".pdmp";
  int result;
  char *emacs_executable = argv[0];
  ptrdiff_t hexbuf_size;
  char *hexbuf;
  const char *strip_suffix =
#if defined DOS_NT || defined CYGWIN
    ".exe"
#else
    NULL
#endif
    ;
  const char *argv0_base =
#ifdef NS_SELF_CONTAINED
    "Emacs"
#else
    "emacs"
#endif
    ;

  /* TODO: maybe more thoroughly scrub process environment in order to
     make this use case (loading a dump file in an unexeced emacs)
     possible?  Right now, we assume that things we don't touch are
     zero-initialized, and in an unexeced Emacs, this assumption
     doesn't hold.  */
  if (initialized)
    fatal ("cannot load dump file in unexeced Emacs");

  /* Look for an explicitly-specified dump file.  */
  const char *path_exec = PATH_EXEC;
  dump_file = NULL;
  int skip_args = 0;
  while (skip_args < argc - 1)
    {
      if (argmatch (argv, argc, "-dump-file", "--dump-file", 6,
		    &dump_file, &skip_args)
	  || argmatch (argv, argc, "--", NULL, 2, NULL, &skip_args))
	break;
      skip_args++;
    }

  /* Where's our executable?  */
  ptrdiff_t exec_bufsize, bufsize, needed;
  emacs_executable = find_emacs_executable (argv[0], &exec_bufsize);

  /* If we couldn't find our executable, go straight to looking for
     the dump in the hardcoded location.  */
  if (!(emacs_executable && *emacs_executable))
    {
      bufsize = 0;
      dump_file = NULL;
      goto hardcoded;
    }

  if (dump_file)
    {
      result = pdumper_load (dump_file, emacs_executable);

      if (result != PDUMPER_LOAD_SUCCESS)
        fatal ("could not load dump file \"%s\": %s",
               dump_file, dump_error_to_string (result));
      return emacs_executable;
    }

  /* Look for a dump file in the same directory as the executable; it
     should have the same basename.  Take care to search PATH to find
     the executable if needed.  We're too early in init to use Lisp,
     so we can't use decode_env_path.  We're working in whatever
     encoding the system natively uses for filesystem access, so
     there's no need for character set conversion.  */
  ptrdiff_t exenamelen = strlen (emacs_executable);
  if (strip_suffix)
    {
      ptrdiff_t strip_suffix_length = strlen (strip_suffix);
      ptrdiff_t prefix_length = exenamelen - strip_suffix_length;
      if (0 <= prefix_length
	  && !memcmp (&emacs_executable[prefix_length], strip_suffix,
		      strip_suffix_length))
	exenamelen = prefix_length;
    }
  bufsize = exenamelen + strlen (suffix) + 1;
  dump_file = xpalloc (NULL, &bufsize, 1, -1, 1);
  memcpy (dump_file, emacs_executable, exenamelen);
  strcpy (dump_file + exenamelen, suffix);
  result = pdumper_load (dump_file, emacs_executable);
  if (result == PDUMPER_LOAD_SUCCESS)
    goto out;

  if (result != PDUMPER_LOAD_FILE_NOT_FOUND)
    fatal ("could not load dump file \"%s\": %s",
	   dump_file, dump_error_to_string (result));

 hardcoded:

#ifdef WINDOWSNT
  /* On MS-Windows, PATH_EXEC normally starts with a literal
     "%emacs_dir%", so it will never work without some tweaking.  */
  path_exec = w32_relocate (path_exec);
#elif defined (HAVE_NS)
  path_exec = ns_relocate (path_exec);
#endif

  /* Look for "emacs-FINGERPRINT.pdmp" in PATH_EXEC.  We hardcode
     "emacs" in "emacs-FINGERPRINT.pdmp" so that the Emacs binary
     still works if the user copies and renames it.  */
  hexbuf_size = 2 * sizeof fingerprint;
  hexbuf = xmalloc (hexbuf_size + 1);
  hexbuf_digest (hexbuf, (char *) fingerprint, sizeof fingerprint);
  hexbuf[hexbuf_size] = '\0';
  needed = (strlen (path_exec)
	    + 1
	    + strlen (argv0_base)
	    + 1
	    + strlen (hexbuf)
	    + strlen (suffix)
	    + 1);
  if (bufsize < needed)
    {
      xfree (dump_file);
      dump_file = xpalloc (NULL, &bufsize, needed - bufsize, -1, 1);
    }
  sprintf (dump_file, "%s%c%s-%s%s",
           path_exec, DIRECTORY_SEP, argv0_base, hexbuf, suffix);
#if !defined (NS_SELF_CONTAINED)
  if (!(emacs_executable && *emacs_executable))
    {
      /* If we didn't find the Emacs binary, assume that it lives in a
	 sibling directory as set up by the default installation
	 configuration.  */
      const char *go_up = "../../../../bin/";
      needed += (strip_suffix ? strlen (strip_suffix) : 0)
	- strlen (suffix) + strlen (go_up);
      if (exec_bufsize < needed)
	{
	  xfree (emacs_executable);
	  emacs_executable = xpalloc (NULL, &exec_bufsize,
				      needed - exec_bufsize, -1, 1);
	}
      sprintf (emacs_executable, "%s%c%s%s%s",
	       path_exec, DIRECTORY_SEP, go_up, argv0_base,
	       strip_suffix ? strip_suffix : "");
    }
#endif
  result = pdumper_load (dump_file, emacs_executable);

  if (result == PDUMPER_LOAD_FILE_NOT_FOUND)
    {
      /* Finally, look for basename(argv0)+".pdmp" in PATH_EXEC.
	 This way, they can rename both the executable and its pdump
	 file in PATH_EXEC, and have several Emacs configurations in
	 the same versioned libexec subdirectory.  */
      char *p, *last_sep = NULL;
      for (p = argv[0]; *p; p++)
	{
	  if (IS_DIRECTORY_SEP (*p))
	    last_sep = p;
	}
      argv0_base = last_sep ? last_sep + 1 : argv[0];
      ptrdiff_t needed = (strlen (path_exec)
			  + 1
			  + strlen (argv0_base)
			  + strlen (suffix)
			  + 1);
      if (bufsize < needed)
	{
	  xfree (dump_file);
	  dump_file = xmalloc (needed);
	}
#ifdef DOS_NT
      ptrdiff_t argv0_len = strlen (argv0_base);
      if (argv0_len >= 4
	  && c_strcasecmp (argv0_base + argv0_len - 4, ".exe") == 0)
	sprintf (dump_file, "%s%c%.*s%s", path_exec, DIRECTORY_SEP,
		 (int)(argv0_len - 4), argv0_base, suffix);
      else
#endif
      sprintf (dump_file, "%s%c%s%s",
	       path_exec, DIRECTORY_SEP, argv0_base, suffix);
      result = pdumper_load (dump_file, emacs_executable);
    }

  if (result != PDUMPER_LOAD_SUCCESS)
    {
      if (result != PDUMPER_LOAD_FILE_NOT_FOUND)
	fatal ("could not load dump file \"%s\": %s",
	       dump_file, dump_error_to_string (result));
    }

 out:
  xfree (dump_file);

  return emacs_executable;
#endif
}
#endif /* HAVE_PDUMPER */

#if SECCOMP_USABLE

/* Wrapper function for the `seccomp' system call on GNU/Linux.  This
   system call usually doesn't have a wrapper function.  See the
   manual page of `seccomp' for the signature.  */

static int
emacs_seccomp (unsigned int operation, unsigned int flags, void *args)
{
#ifdef SYS_seccomp
  return syscall (SYS_seccomp, operation, flags, args);
#else
  errno = ENOSYS;
  return -1;
#endif
}

/* Read SIZE bytes into BUFFER.  Return the number of bytes read, or
   -1 if reading failed altogether.  */

static ptrdiff_t
read_full (int fd, void *buffer, ptrdiff_t size)
{
  eassert (0 <= fd);
  eassert (buffer != NULL);
  eassert (0 <= size);
  enum
  {
  /* See MAX_RW_COUNT in sysdep.c.  */
#ifdef MAX_RW_COUNT
    max_size = MAX_RW_COUNT
#else
    max_size = INT_MAX >> 18 << 18
#endif
  };
  if (PTRDIFF_MAX < size || max_size < size)
    {
      errno = EFBIG;
      return -1;
    }
  char *ptr = buffer;
  ptrdiff_t read = 0;
  while (size != 0)
    {
      ptrdiff_t n = emacs_read (fd, ptr, size);
      if (n < 0)
        return -1;
      if (n == 0)
        break;  /* Avoid infinite loop on encountering EOF.  */
      eassert (n <= size);
      size -= n;
      ptr += n;
      read += n;
    }
  return read;
}

/* Attempt to load Secure Computing filters from FILE.  Return false
   if that doesn't work for some reason.  */

static bool
load_seccomp (const char *file)
{
  bool success = false;
  void *buffer = NULL;
  int fd
    = emacs_open_noquit (file, O_RDONLY | O_CLOEXEC | O_BINARY, 0);
  if (fd < 0)
    {
      emacs_perror ("open");
      goto out;
    }
  struct stat stat;
  if (sys_fstat (fd, &stat) != 0)
    {
      emacs_perror ("fstat");
      goto out;
    }
  if (! S_ISREG (stat.st_mode))
    {
      fprintf (stderr, "seccomp file %s is not regular\n", file);
      goto out;
    }
  struct sock_fprog program;
  if (stat.st_size <= 0 || SIZE_MAX <= stat.st_size
      || PTRDIFF_MAX <= stat.st_size
      || stat.st_size % sizeof *program.filter != 0)
    {
      fprintf (stderr, "seccomp filter %s has invalid size %ld\n",
               file, (long) stat.st_size);
      goto out;
    }
  size_t size = stat.st_size;
  size_t count = size / sizeof *program.filter;
  eassert (0 < count && count < SIZE_MAX);
  if (USHRT_MAX < count)
    {
      fprintf (stderr, "seccomp filter %s is too big\n", file);
      goto out;
    }
  /* Try reading one more byte to detect file size changes.  */
  buffer = malloc (size + 1);
  if (buffer == NULL)
    {
      emacs_perror ("malloc");
      goto out;
    }
  ptrdiff_t read = read_full (fd, buffer, size + 1);
  if (read < 0)
    {
      emacs_perror ("read");
      goto out;
    }
  eassert (read <= SIZE_MAX);
  if (read != size)
    {
      fprintf (stderr,
               "seccomp filter %s changed size while reading\n",
               file);
      goto out;
    }
  if (emacs_close (fd) != 0)
    emacs_perror ("close");  /* not a fatal error */
  fd = -1;
  program.len = count;
  program.filter = buffer;

  /* See man page of `seccomp' why this is necessary.  Note that we
     intentionally don't check the return value: a parent process
     might have made this call before, in which case it would fail;
     or, if enabling privilege-restricting mode fails, the `seccomp'
     syscall will fail anyway.  */
  prctl (PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0);
  /* Install the filter.  Make sure that potential other threads can't
     escape it.  */
  if (emacs_seccomp (SECCOMP_SET_MODE_FILTER,
                     SECCOMP_FILTER_FLAG_TSYNC, &program)
      != 0)
    {
      emacs_perror ("seccomp");
      goto out;
    }
  success = true;

 out:
  if (0 <= fd)
    emacs_close (fd);
  free (buffer);
  return success;
}

/* Load Secure Computing filter from file specified with the --seccomp
   option.  Exit if that fails.  */

static void
maybe_load_seccomp (int argc, char **argv)
{
  int skip_args = 0;
  char *file = NULL;
  while (skip_args < argc - 1)
    {
      if (argmatch (argv, argc, "-seccomp", "--seccomp", 9, &file,
                    &skip_args)
          || argmatch (argv, argc, "--", NULL, 2, NULL, &skip_args))
        break;
      ++skip_args;
    }
  if (file == NULL)
    return;
  if (! load_seccomp (file))
    fatal ("cannot enable seccomp filter from %s", file);
}

#endif  /* SECCOMP_USABLE */

#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
int
android_emacs_init (int argc, char **argv, char *dump_file)
#else
int
main (int argc, char **argv)
#endif
{
  /* Variable near the bottom of the stack, and aligned appropriately
     for pointers.  */
  void *stack_bottom_variable;
  int old_argc;
#if defined HAVE_PDUMPER && !(defined HAVE_ANDROID && !defined ANDROID_STUBIFY)
  char *dump_file;

  /* This is just a dummy argument used to avoid extra defines.  */
  dump_file = NULL;
#endif

  /* First, check whether we should apply a seccomp filter.  This
     should come at the very beginning to allow the filter to protect
     the initialization phase.  */
#if SECCOMP_USABLE
  maybe_load_seccomp (argc, argv);
#endif

  bool no_loadup = false;
  char *junk = 0;
  char *dname_arg = 0;
#ifdef DAEMON_MUST_EXEC
  char dname_arg2[80];
#endif
  char *ch_to_dir = 0;

  /* If we use --chdir, this records the original directory.  */
  char const *original_pwd = 0;

  /* Record (approximately) where the stack begins.  */
  stack_bottom = (char *) &stack_bottom_variable;

  const char *dump_mode = NULL;
  int skip_args = 0;
  char *temacs = NULL;
  while (skip_args < argc - 1)
    {
      if (argmatch (argv, argc, "-temacs", "--temacs", 8, &temacs, &skip_args)
	  || argmatch (argv, argc, "--", NULL, 2, NULL, &skip_args))
	break;
      skip_args++;
    }
#ifdef HAVE_PDUMPER
  bool attempt_load_pdump = false;
#endif

  /* Look for this argument first, before any heap allocation, so we
     can set heap flags properly if we're going to unexec.  */
  if (!initialized && temacs)
    {
#ifdef HAVE_UNEXEC
      if (strcmp (temacs, "dump") == 0 ||
          strcmp (temacs, "bootstrap") == 0)
        gflags.will_dump_with_unexec_ = true;
#endif
#ifdef HAVE_PDUMPER
      if (strcmp (temacs, "pdump") == 0 ||
          strcmp (temacs, "pbootstrap") == 0)
        gflags.will_dump_with_pdumper_ = true;
#endif
#if defined HAVE_PDUMPER || defined HAVE_UNEXEC
      if (strcmp (temacs, "bootstrap") == 0 ||
          strcmp (temacs, "pbootstrap") == 0)
        gflags.will_bootstrap_ = true;
      gflags.will_dump_ =
        will_dump_with_pdumper_p () ||
        will_dump_with_unexec_p ();
      if (will_dump_p ())
        dump_mode = temacs;
#endif
      if (!dump_mode)
        fatal ("Invalid temacs mode '%s'", temacs);
    }
  else if (temacs)
    {
      fatal ("--temacs not supported for unexeced emacs");
    }
  else
    {
      eassert (!temacs);
#ifndef HAVE_UNEXEC
      eassert (!initialized);
#endif
#ifdef HAVE_PDUMPER
      if (!initialized)
	attempt_load_pdump = true;
#endif
    }

#ifdef HAVE_UNEXEC
  if (!will_dump_with_unexec_p ())
    gflags.will_not_unexec_ = true;
#endif

#ifdef WINDOWSNT
  /* Grab our malloc arena space now, before anything important
     happens.  This relies on the static heap being needed only in
     temacs and only if we are going to dump with unexec.  */
  bool use_dynamic_heap = true;
  if (temacs)
    {
      char *temacs_str = NULL, *p;
      for (p = argv[0]; (p = strstr (p, "temacs")) != NULL; p++)
	temacs_str = p;
      if (temacs_str != NULL
	  && (temacs_str == argv[0] || IS_DIRECTORY_SEP (temacs_str[-1])))
	{
	  /* Note that gflags are set at this point only if we have been
	     called with the --temacs=METHOD option.  We assume here that
	     temacs is always called that way, otherwise the functions
	     that rely on gflags, like will_dump_with_pdumper_p below,
	     will not do their job.  */
	  use_dynamic_heap = will_dump_with_pdumper_p ();
	}
    }
  init_heap (use_dynamic_heap);
  initial_cmdline = GetCommandLine ();
#endif
#if defined WINDOWSNT || defined HAVE_NTGUI
  /* Set global variables used to detect Windows version.  Do this as
     early as possible.  (w32proc.c calls this function as well, but
     the additional call here is harmless.) */
  cache_system_info ();
#ifdef WINDOWSNT
  /* On Windows 9X, we have to load UNICOWS.DLL as early as possible,
     to have non-stub implementations of APIs we need to convert file
     names between UTF-8 and the system's ANSI codepage.  */
  maybe_load_unicows_dll ();
  /* Initialize the codepage for file names, needed to decode
     non-ASCII file names during startup.  */
  w32_init_file_name_codepage ();
  /* Initialize the startup directory, needed for emacs_wd below.  */
  w32_init_current_directory ();
#endif
  w32_init_main_thread ();
#endif

#ifdef HAVE_NS
  /* Initialize the Obj C autorelease pool.  */
  ns_init_pool ();
#endif

#ifdef HAVE_PDUMPER
  if (attempt_load_pdump)
    initial_emacs_executable = load_pdump (argc, argv, dump_file);
#else
  ptrdiff_t bufsize;
  initial_emacs_executable = find_emacs_executable (argv[0], &bufsize);
#endif

  argc = maybe_disable_address_randomization (argc, argv);

#if defined GNU_LINUX && defined HAVE_UNEXEC
  if (!initialized)
    {
      char *heap_start = my_heap_start ();
      heap_bss_diff = heap_start - max (my_endbss, my_endbss_static);
    }
#endif

#ifdef RUN_TIME_REMAP
  if (initialized)
    run_time_remap (argv[0]);
#endif

/* If using unexmacosx.c (set by s/darwin.h), we must do this. */
#if defined DARWIN_OS && defined HAVE_UNEXEC
  if (!initialized)
    unexec_init_emacs_zone ();
#endif

  init_standard_fds ();
  atexit (close_output_streams);

  /* Command-line argument processing.

     The arguments in the argv[] array are sorted in the descending
     order of their priority as defined in the standard_args[] array
     below.  Then the sorted arguments are processed from the highest
     to the lowest priority.  Each command-line argument that is
     recognized by 'main', if found in argv[], causes skip_args to be
     incremented, effectively removing the processed argument from the
     command line.

     Then init_cmdargs is called, and conses a list of the unprocessed
     command-line arguments, as strings, in 'command-line-args'.  It
     ignores all the arguments up to the one indexed by skip_args, as
     those were already processed.

     The arguments in 'command-line-args' are further processed by
     startup.el, functions 'command-line' and 'command-line-1'.  The
     first of them handles the arguments which need to be processed
     before loading the user init file and initializing the
     window-system.  The second one processes the arguments that are
     related to the GUI system, like -font, -geometry, and -title, and
     then processes the rest of arguments whose priority is below
     those that are related to the GUI system.  The arguments
     processed by 'command-line' are removed from 'command-line-args';
     the arguments processed by 'command-line-1' aren't, they are only
     removed from 'command-line-args-left'.

     'command-line-1' emits an error message for any argument it
     doesn't recognize, so any command-line arguments processed in C
     below whose priority is below the GUI system related switches
     should be explicitly recognized, ignored, and removed from
     'command-line-args-left' in 'command-line-1'.  */

  bool only_version = false;
  sort_args (argc, argv);
  old_argc = argc, argc = 0;
  /* Don't allow going past argv.  */
  while (argc < old_argc && argv[argc]) argc++;

  skip_args = 0;
  if (argmatch (argv, argc, "-version", "--version", 3, NULL, &skip_args))
    only_version = true;

#ifdef HAVE_PDUMPER
  if (argmatch (argv, argc, "-fingerprint", "--fingerprint", 4,
		NULL, &skip_args)
      && !only_version)
    {
      if (initialized)
        {
          dump_fingerprint (stdout, "",
			    (unsigned char *) fingerprint);
          exit (0);
        }
      else
        {
          fputs ("Not initialized\n", stderr);
          exit (1);
        }
    }
#endif

  emacs_wd = emacs_get_current_dir_name ();
#ifdef WINDOWSNT
  initial_wd = emacs_wd;
#endif
#ifdef HAVE_PDUMPER
  if (dumped_with_pdumper_p ())
    pdumper_record_wd (emacs_wd);
#endif

  if (argmatch (argv, argc, "-chdir", "--chdir", 4, &ch_to_dir, &skip_args)
      && !only_version)
    {
#ifdef WINDOWSNT
      /* argv[] array is kept in its original ANSI codepage encoding,
	 we need to convert to UTF-8, for chdir to work.  */
      char newdir[MAX_UTF8_PATH];

      filename_from_ansi (ch_to_dir, newdir);
      ch_to_dir = newdir;
#endif
      if (chdir (ch_to_dir) != 0)
        {
          fprintf (stderr, "%s: Can't chdir to %s: %s\n",
                   argv[0], ch_to_dir, strerror (errno));
          exit (1);
        }
      original_pwd = emacs_wd;
#ifdef WINDOWSNT
      /* Reinitialize Emacs's notion of the startup directory.  */
      w32_init_current_directory ();
#endif
      emacs_wd = emacs_get_current_dir_name ();
    }

#if defined (HAVE_SETRLIMIT) && defined (RLIMIT_STACK) && !defined (CYGWIN)
  /* Extend the stack space available.  Don't do that if dumping,
     since some systems (e.g. DJGPP) might define a smaller stack
     limit at that time.  And it's not needed on Cygwin, since emacs
     is built with an 8MB stack.  Moreover, the setrlimit call can
     cause problems on Cygwin
     (https://www.cygwin.com/ml/cygwin/2015-07/msg00096.html).  */
  struct rlimit rlim;
  if (getrlimit (RLIMIT_STACK, &rlim) == 0
      && 0 <= rlim.rlim_cur && rlim.rlim_cur <= LONG_MAX)
    {
      rlim_t lim = rlim.rlim_cur;

      /* Approximate the amount regex-emacs.c needs per unit of
	 emacs_re_max_failures, then add 33% to cover the size of the
	 smaller stacks that regex-emacs.c successively allocates and
	 discards on its way to the maximum.  */
      int min_ratio = 20 * sizeof (char *);
      int ratio = min_ratio + min_ratio / 3;

      /* Extra space to cover what we're likely to use for other
         reasons.  For example, a typical GC might take 30K stack
         frames.  */
      int extra = (30 * 1000) * 50;

      bool try_to_grow_stack = !noninteractive || initialized;

      if (try_to_grow_stack)
	{
	  rlim_t newlim = emacs_re_max_failures * ratio + extra;

	  /* Round the new limit to a page boundary; this is needed
	     for Darwin kernel 15.4.0 (see Bug#23622) and perhaps
	     other systems.  Do not shrink the stack and do not exceed
	     rlim_max.  Don't worry about exact values of
	     RLIM_INFINITY etc. since in practice when they are
	     nonnegative they are so large that the code does the
	     right thing anyway.  */
	  long pagesize = getpagesize ();
	  newlim += pagesize - 1;
	  if (0 <= rlim.rlim_max && rlim.rlim_max < newlim)
	    newlim = rlim.rlim_max;
	  newlim -= newlim % pagesize;

	  if (newlim > lim	/* in case rlim_t is an unsigned type */
	      && pagesize <= newlim - lim)
	    {
	      rlim.rlim_cur = newlim;
	      if (setrlimit (RLIMIT_STACK, &rlim) == 0)
		lim = newlim;
	    }
	}
      /* If the stack is big enough, let regex-emacs.c use more of it
	 before falling back to heap allocation.  */
      if (lim < extra)
        lim = extra;    /* avoid wrap-around in unsigned subtraction */
      ptrdiff_t max_failures
	= min (lim - extra, min (PTRDIFF_MAX, SIZE_MAX)) / ratio;
      emacs_re_safe_alloca = max (max_failures * min_ratio, MAX_ALLOCA);
    }
#endif /* HAVE_SETRLIMIT and RLIMIT_STACK and not CYGWIN */

  clearerr (stdin);

  emacs_backtrace (-1);

#if !defined SYSTEM_MALLOC && !defined HYBRID_MALLOC
  /* Arrange to get warning messages as memory fills up.  */
  memory_warnings (0, malloc_warning);

  /* Call malloc at least once, to run malloc_initialize_hook.
     Also call realloc and free for consistency.  */
  free (realloc (malloc (4), 4));

#endif	/* not SYSTEM_MALLOC and not HYBRID_MALLOC */

#ifdef MSDOS
  set_binary_mode (STDIN_FILENO, O_BINARY);
  fflush (stdout);
  set_binary_mode (STDOUT_FILENO, O_BINARY);
#endif /* MSDOS */

  /* Set locale, so that initial error messages are localized properly.
     However, skip this if LC_ALL is "C", as it's not needed in that case.
     Skipping helps if dumping with unexec, to ensure that the dumped
     Emacs does not have its system locale tables initialized, as that
     might cause screwups when the dumped Emacs starts up.  */
  char *lc_all = getenv ("LC_ALL");
  if (! (lc_all && strcmp (lc_all, "C") == 0))
    {
      #ifdef HAVE_NS
        ns_init_locale ();
      #endif
      setlocale (LC_ALL, "");
      fixup_locale ();
    }
  text_quoting_flag = using_utf8 ();

  inhibit_window_system = 0;

  /* Handle the -t switch, which specifies filename to use as terminal.  */
  while (!only_version)
    {
      char *term;
      if (argmatch (argv, argc, "-t", "--terminal", 4, &term, &skip_args))
	{
	  emacs_close (STDIN_FILENO);
	  emacs_close (STDOUT_FILENO);
	  int result = emacs_open_noquit (term, O_RDWR, 0);
	  if (result != STDIN_FILENO
	      || (fcntl (STDIN_FILENO, F_DUPFD_CLOEXEC, STDOUT_FILENO)
		  != STDOUT_FILENO))
	    {
	      const char *errstring = strerror (errno);
	      fprintf (stderr, "%s: %s: %s\n", argv[0], term, errstring);
	      exit (EXIT_FAILURE);
	    }
	  if (! isatty (STDIN_FILENO))
	    {
	      fprintf (stderr, "%s: %s: not a tty\n", argv[0], term);
	      exit (EXIT_FAILURE);
	    }
	  fprintf (stderr, "Using %s\n", term);
#ifdef HAVE_WINDOW_SYSTEM
	  inhibit_window_system = true; /* -t => -nw */
#endif
	}
      else
	break;
    }

  /* Command line option --no-windows is deprecated and thus not mentioned
     in the manual and usage information.  */
  if (argmatch (argv, argc, "-nw", "--no-window-system", 6, NULL, &skip_args)
      || argmatch (argv, argc, "-nw", "--no-windows", 6, NULL, &skip_args))
    inhibit_window_system = 1;

  /* Handle the -batch switch, which means don't do interactive display.  */
  noninteractive = 0;
  if (argmatch (argv, argc, "-batch", "--batch", 5, NULL, &skip_args)
      || only_version)
    {
      noninteractive = 1;
      Vundo_outer_limit = Qnil;
    }
  if (argmatch (argv, argc, "-script", "--script", 3, &junk, &skip_args))
    {
      noninteractive = 1;	/* Set batch mode.  */
      /* Convert --script to -scriptload, un-skip it, and sort again
	 so that it will be handled in proper sequence.  */
      /* FIXME broken for --script=FILE - is that supposed to work?  */
      argv[skip_args - 1] = (char *) "-scriptload";
      skip_args -= 2;
      sort_args (argc, argv);
    }

  /* Handle the --help option, which gives a usage message.  */
  if (argmatch (argv, argc, "-help", "--help", 3, NULL, &skip_args)
      && !only_version)
    {
      int i;
      printf ("Usage: %s [OPTION-OR-FILENAME]...\n", argv[0]);
      for (i = 0; i < ARRAYELTS (usage_message); i++)
	fputs (usage_message[i], stdout);
      exit (0);
    }

  daemon_type = 0;

#ifndef WINDOWSNT
  /* Make sure IS_DAEMON starts up as false.  */
  daemon_pipe[1] = 0;
#else
  w32_daemon_event = NULL;
#endif


  int sockfd = -1;

  if (!only_version)
    {
      if (argmatch (argv, argc, "-fg-daemon", "--fg-daemon", 10, NULL,
		    &skip_args)
	  || argmatch (argv, argc, "-fg-daemon", "--fg-daemon", 10, &dname_arg,
		       &skip_args))
	{
	  daemon_type = 1;           /* foreground */
	}
      else if (argmatch (argv, argc, "-daemon", "--daemon", 5, NULL, &skip_args)
	       || argmatch (argv, argc, "-daemon", "--daemon", 5, &dname_arg,
			    &skip_args)
	       || argmatch (argv, argc, "-bg-daemon", "--bg-daemon", 10, NULL,
			    &skip_args)
	       || argmatch (argv, argc, "-bg-daemon", "--bg-daemon", 10,
			    &dname_arg, &skip_args))
	{
	  daemon_type = 2;          /* background */
	}
    }

  if (daemon_type > 0)
    {
#ifndef DOS_NT
      if (daemon_type == 2)
        {
          /* Start as a background daemon: fork a new child process which
             will run the rest of the initialization code, then exit.

             Detaching a daemon requires the following steps:
             - fork
             - setsid
             - exit the parent
             - close the tty file-descriptors

             We only want to do the last 2 steps once the daemon is ready to
             serve requests, i.e. after loading .emacs (initialization).
             OTOH initialization may start subprocesses (e.g. ispell) and these
             should be run from the proper process (the one that will end up
             running as daemon) and with the proper "session id" in order for
             them to keep working after detaching, so fork and setsid need to be
             performed before initialization.

             We want to avoid exiting before the server socket is ready, so
             use a pipe for synchronization.  The parent waits for the child
             to close its end of the pipe (using `daemon-initialized')
             before exiting.  */
          if (emacs_pipe (daemon_pipe) != 0)
            {
              fputs ("Cannot pipe!\n", stderr);
              exit (1);
            }
        } /* daemon_type == 2 */

#ifdef HAVE_LIBSYSTEMD
      /* Read the number of sockets passed through by systemd.  */
      int systemd_socket = sd_listen_fds (1);

      if (systemd_socket > 1)
        fputs (("\n"
		"Warning: systemd passed more than one socket to Emacs.\n"
		"Try 'Accept=false' in the Emacs socket unit file.\n"),
	       stderr);
      else if (systemd_socket == 1
	       && (0 < sd_is_socket (SD_LISTEN_FDS_START,
				     AF_UNSPEC, SOCK_STREAM, 1)))
	sockfd = SD_LISTEN_FDS_START;
#endif /* HAVE_LIBSYSTEMD */

      /* On X, the bug happens because we call abort to avoid GLib
	 crashes upon a longjmp in our X error handler.

         On PGTK, GTK calls exit in its own error handlers for either
         X or Wayland.  Display different messages depending on the
         window system to avoid referring users to the wrong GTK bug
         report.  */
#ifdef HAVE_PGTK
      fputs ("Due to a limitation in GTK 3, Emacs built with PGTK will simply exit when a\n"
	     "display connection is closed.  The problem is especially difficult to fix,\n"
	     "such that Emacs on Wayland with multiple displays is unlikely ever to be able\n"
	     "to survive disconnects.\n",
	     stderr);
#elif defined USE_GTK
      fputs ("\nWarning: due to a long standing Gtk+ bug\nhttps://gitlab.gnome.org/GNOME/gtk/issues/221\n\
Emacs might crash when run in daemon mode and the X11 connection is unexpectedly lost.\n\
Using an Emacs configured with --with-x-toolkit=lucid does not have this problem.\n",
	     stderr);
#endif

      if (daemon_type == 2)
        {
          pid_t f;
#ifndef DAEMON_MUST_EXEC

          f = fork ();
#else /* DAEMON_MUST_EXEC */
          if (!dname_arg || !strchr (dname_arg, '\n'))
            f = fork ();  /* in orig */
          else
            f = 0;  /* in exec'd */
#endif /* !DAEMON_MUST_EXEC */
          if (f > 0)
            {
              int retval;
              char buf[1];

              /* Close unused writing end of the pipe.  */
              emacs_close (daemon_pipe[1]);

              /* Just wait for the child to close its end of the pipe.  */
              do
                {
                  retval = read (daemon_pipe[0], &buf, 1);
                }
              while (retval == -1 && errno == EINTR);

              if (retval < 0)
                {
                  fputs ("Error reading status from child\n", stderr);
                  exit (1);
                }
              else if (retval == 0)
                {
                  fputs ("Error: server did not start correctly\n", stderr);
                  exit (1);
                }

              emacs_close (daemon_pipe[0]);
              exit (0);
            }
          if (f < 0)
            {
              emacs_perror ("fork");
              exit (EXIT_CANCELED);
            }

#ifdef DAEMON_MUST_EXEC
          {
            /* In orig process, forked as child, OR in exec'd. */
            if (!dname_arg || !strchr (dname_arg, '\n'))
              {  /* In orig, child: now exec w/special daemon name. */
                char fdStr[80];
                int fdStrlen =
                  snprintf (fdStr, sizeof fdStr,
                            "--bg-daemon=\n%d,%d\n%s", daemon_pipe[0],
                            daemon_pipe[1], dname_arg ? dname_arg : "");

                if (! (0 <= fdStrlen && fdStrlen < sizeof fdStr))
                  {
                    fputs ("daemon: child name too long\n", stderr);
                    exit (EXIT_CANNOT_INVOKE);
                  }

                argv[skip_args] = fdStr;

                fcntl (daemon_pipe[0], F_SETFD, 0);
                fcntl (daemon_pipe[1], F_SETFD, 0);
                execvp (argv[0], argv);
                emacs_perror (argv[0]);
                exit (errno == ENOENT ? EXIT_ENOENT : EXIT_CANNOT_INVOKE);
              }

            /* In exec'd: parse special dname into pipe and name info. */
            if (!dname_arg || !*dname_arg || strnlen (dname_arg, 71) == 71
		|| !strchr (dname_arg, '\n'))
	      {
		fputs ("emacs daemon: daemon name absent or too long\n",
		       stderr);
		exit (EXIT_CANNOT_INVOKE);
	      }
            dname_arg2[0] = '\0';
            sscanf (dname_arg, "\n%d,%d\n%s", &(daemon_pipe[0]), &(daemon_pipe[1]),
                    dname_arg2);
            dname_arg = *dname_arg2 ? dname_arg2 : NULL;
            fcntl (daemon_pipe[1], F_SETFD, FD_CLOEXEC);
          }
#endif /* DAEMON_MUST_EXEC */

          /* Close unused reading end of the pipe.  */
          emacs_close (daemon_pipe[0]);

          setsid ();
        } /* daemon_type == 2 */
#elif defined(WINDOWSNT)
      /* Indicate that we want daemon mode.  */
      w32_daemon_event = CreateEvent (NULL, TRUE, FALSE, W32_DAEMON_EVENT);
      if (w32_daemon_event == NULL)
        {
          fprintf (stderr, "Couldn't create MS-Windows event for daemon: %s\n",
		   w32_strerror (0));
          exit (1);
        }
#else /* MSDOS */
      fputs ("This platform does not support daemon mode.\n", stderr);
      exit (1);
#endif /* MSDOS */
      if (dname_arg)
	daemon_name = xstrdup (dname_arg);
    }

#if defined HAVE_PTHREAD && !defined SYSTEM_MALLOC \
  && !defined DOUG_LEA_MALLOC && !defined HYBRID_MALLOC
  /* Do not make gmalloc thread-safe when creating bootstrap-emacs, as
     that causes an infinite recursive loop with FreeBSD.  See
     Bug#14569.  The part of this bug involving Cygwin is no longer
     relevant, now that Cygwin defines HYBRID_MALLOC.  */
  if (!noninteractive || !will_dump_p ())
    malloc_enable_thread ();
#endif

  init_signals ();

  noninteractive1 = noninteractive;

  /* Perform basic initializations (not merely interning symbols).  */

  if (!initialized)
    {
      init_alloc_once ();
      init_pdumper_once ();
      init_obarray_once ();
      init_eval_once ();
      init_charset_once ();
      init_coding_once ();
      init_syntax_once ();	/* Create standard syntax table.  */
      init_category_once ();	/* Create standard category table.  */
      init_casetab_once ();	/* Must be done before init_buffer_once.  */
      init_buffer_once ();	/* Create buffer table and some buffers.  */
      init_minibuf_once ();	/* Create list of minibuffers.  */
				/* Must precede init_window_once.  */

      /* Call syms_of_xfaces before init_window_once because that
	 function creates Vterminal_frame.  Termcap frames now use
	 faces, and the face implementation uses some symbols as
	 face names.  */
      syms_of_xfaces ();
      /* XXX syms_of_keyboard uses some symbols in keymap.c.  It would
         be better to arrange things not to have this dependency.  */
      syms_of_keymap ();
      /* Call syms_of_keyboard before init_window_once because
	 keyboard sets up symbols that include some face names that
	 the X support will want to use.  This can happen when
	 Emacs starts up from scratch (e.g., temacs).  */
      syms_of_keyboard ();

      /* Called before syms_of_fileio, because it sets up Qerror_condition.  */
      syms_of_data ();
      syms_of_fns ();  /* Before syms_of_charset which uses hash tables.  */
      syms_of_fileio ();
      /* Before syms_of_coding to initialize Vgc_cons_threshold.  */
      syms_of_alloc ();
      /* May call Ffuncall and so GC, thus the latter should be initialized.  */
      init_print_once ();
      /* Before syms_of_coding because it initializes Qcharsetp.  */
      syms_of_charset ();
      /* Before init_window_once, because it sets up the
	 Vcoding_system_hash_table.  */
      syms_of_coding ();	/* This should be after syms_of_fileio.  */
      init_frame_once ();       /* Before init_window_once.  */
      /* init_window_once calls make_initial_frame, which calls
	 Fcurrent_time and bset_display_time, both of which allocate
	 bignums.  Without the following call to init_bignums, crashes
	 happen on Windows 9X after dumping when GC tries to free a
	 pointer allocated on the system heap.  */
      init_bignum ();
      init_window_once ();	/* Init the window system.  */
#ifdef HAVE_WINDOW_SYSTEM
      init_fringe_once ();	/* Swap bitmaps if necessary.  */
#endif /* HAVE_WINDOW_SYSTEM */
#ifdef HAVE_TEXT_CONVERSION
      syms_of_textconv ();
#endif
    }

  init_alloc ();
  init_bignum ();
  init_threads ();
  init_eval ();
  running_asynch_code = 0;
  init_random ();
  init_xfaces ();

#if defined HAVE_JSON && !defined WINDOWSNT
  init_json ();
#endif

  if (!initialized)
    syms_of_comp ();

  /* Do less garbage collection in batch mode (since these tend to be
     more short-lived, and the memory is returned to the OS on exit
     anyway).  */
  Vgc_cons_percentage = make_float (noninteractive && initialized ? 1.0 : 0.1);

  no_loadup
    = argmatch (argv, argc, "-nl", "--no-loadup", 6, NULL, &skip_args);

  no_site_lisp
    = argmatch (argv, argc, "-nsl", "--no-site-lisp", 11, NULL, &skip_args);

  build_details = ! argmatch (argv, argc, "-no-build-details",
			      "--no-build-details", 7, NULL, &skip_args);

#ifdef HAVE_MODULES
  bool module_assertions
    = argmatch (argv, argc, "-module-assertions", "--module-assertions", 15,
                NULL, &skip_args);
  if (will_dump_p () && module_assertions && !only_version)
    {
      fputs ("Module assertions are not supported during dumping\n", stderr);
      exit (1);
    }
  init_module_assertions (module_assertions);
#endif

#ifdef HAVE_NS
  if (!noninteractive)
    {
#ifdef NS_IMPL_COCOA
      /* Started from GUI? */
      bool go_home = (!ch_to_dir && !inhibit_window_system
		      && !isatty (STDIN_FILENO));
      if (skip_args < argc)
        {
          if (!strncmp (argv[skip_args], "-psn", 4))
            {
              skip_args += 1;
	      go_home |= !ch_to_dir;
            }
          else if (skip_args+1 < argc && !strncmp (argv[skip_args+1], "-psn", 4))
            {
              skip_args += 2;
	      go_home |= !ch_to_dir;
            }
        }
      if (go_home)
	{
	  char const *home = get_homedir ();
	  if (*home && chdir (home) == 0)
	    emacs_wd = emacs_get_current_dir_name ();
	}
#endif  /* COCOA */
    }
#endif /* HAVE_NS */

  /* Stupid kludge to catch command-line display spec.  We can't
     handle this argument entirely in window system dependent code
     because we don't even know which window system dependent code
     to run until we've recognized this argument.  */
  {
    int count_before = skip_args;

#ifdef HAVE_X_WINDOWS
    char *displayname = 0;

    /* Skip any number of -d options, but only use the last one.  */
    while (!only_version)
      {
	int count_before_this = skip_args;

	if (argmatch (argv, argc, "-d", "--display", 3, &displayname, &skip_args))
	  display_arg = 1;
	else if (argmatch (argv, argc, "-display", 0, 3, &displayname, &skip_args))
	  display_arg = 1;
	else
	  break;

	count_before = count_before_this;
      }

    /* If we have the form --display=NAME,
       convert it into  -d name.
       This requires inserting a new element into argv.  */
    if (displayname && count_before < skip_args)
      {
	if (skip_args == count_before + 1)
	  {
	    memmove (argv + count_before + 3, argv + count_before + 2,
		     (argc - (count_before + 2)) * sizeof *argv);
	    argv[count_before + 2] = displayname;
	    argc++;
	  }
	argv[count_before + 1] = (char *) "-d";
      }
#endif	/* HAVE_X_WINDOWS */

    if (! no_site_lisp)
      {

	if (argmatch (argv, argc, "-Q", "--quick", 3, NULL, &skip_args)
            || argmatch (argv, argc, "-quick", 0, 2, NULL, &skip_args))
	  no_site_lisp = 1;

      }

    if (argmatch (argv, argc, "-x", 0, 1, &junk, &skip_args))
      {
	noninteractive = 1;
	no_site_lisp = 1;
	/* This is picked up in startup.el.  */
	argv[skip_args - 1] = (char *) "-scripteval";
	skip_args -= 1;
	sort_args (argc, argv);
      }

    /* Don't actually discard this arg.  */
    skip_args = count_before;
  }

  /* argmatch must not be used after here,
     except when building temacs
     because the -d argument has not been skipped in skip_args.  */

#ifdef MSDOS
  /* Call early 'cause init_environment needs it.  */
  init_dosfns ();
  /* Set defaults for several environment variables.  */
  if (initialized)
    init_environment (argc, argv, skip_args);
  else
    tzset ();
#endif /* MSDOS */

#ifdef HAVE_KQUEUE
  globals_of_kqueue ();
#endif

#ifdef HAVE_GFILENOTIFY
  globals_of_gfilenotify ();
#endif

  /* Initialize and GC-protect Vinitial_environment and
     Vprocess_environment before set_initial_environment fills them
     in.  */
  if (!initialized)
    syms_of_callproc ();
  /* egetenv is a pretty low-level facility, which may get called in
     many circumstances; it seems flimsy to put off initializing it
     until calling init_callproc.  Do not do it when dumping.  */
  if (!will_dump_p ())
    set_initial_environment ();

  /* Has to run after the environment is set up. */
  init_atimer ();

#ifdef WINDOWSNT
  globals_of_w32 ();
#ifdef HAVE_W32NOTIFY
  globals_of_w32notify ();
#endif
  /* Initialize environment from registry settings.  Make sure to do
     this only after calling set_initial_environment so that
     Vinitial_environment and Vprocess_environment will contain only
     variables from the parent process without modifications from
     Emacs.  */
  init_environment (argv);
  init_ntproc (will_dump_p ()); /* must precede init_editfns.  */
#endif

  /* AIX crashes are reported in system versions 3.2.3 and 3.2.4
     if this is not done.  Do it after set_global_environment so that we
     don't pollute Vglobal_environment.  */
  /* Setting LANG here will defeat the startup locale processing...  */
#ifdef AIX
  xputenv ("LANG=C");
#endif

  /* Init buffer storage and default directory of main buffer.  */
  init_buffer ();

  /* Must precede init_cmdargs and init_sys_modes.  */
  init_callproc_1 ();

  /* Must precede init_lread.  */
  init_cmdargs (argc, argv, skip_args, original_pwd);

  if (initialized)
    {
      /* Erase any pre-dump messages in the message log, to avoid confusion.  */
      Lisp_Object old_log_max;
      old_log_max = Vmessage_log_max;
      XSETFASTINT (Vmessage_log_max, 0);
      message_dolog ("", 0, 1, 0);
      Vmessage_log_max = old_log_max;
    }

  init_callproc ();	/* Must follow init_cmdargs but not init_sys_modes.  */
  init_fileio ();
  init_lread ();

  /* If "-version" was specified, produce version information and
     exit.  We do it here because the code below needs to call Lisp
     primitives, which cannot be done safely before we call all the
     init_FOO initialization functions above.  */
  if (only_version)
    {
      const char *version, *copyright;

      if (initialized)
	{
	  Lisp_Object tem = Fsymbol_value (intern_c_string ("emacs-version"));
	  Lisp_Object tem2 = Fsymbol_value (intern_c_string ("emacs-copyright"));
	  if (!STRINGP (tem))
	    {
	      fputs ("Invalid value of 'emacs-version'\n", stderr);
	      exit (1);
	    }
	  if (!STRINGP (tem2))
	    {
	      fputs ("Invalid value of 'emacs-copyright'\n", stderr);
	      exit (1);
	    }
	  else
	    {
	      version = SSDATA (tem);
	      copyright = SSDATA (tem2);
	    }
	}
      else
	{
	  version = emacs_version;
	  copyright = emacs_copyright;
	}
      printf ("%s %s\n", PACKAGE_NAME, version);

      if (initialized)
	{
	  Lisp_Object rversion, rbranch, rtime;

	  rversion
	    = Fsymbol_value (intern_c_string ("emacs-repository-version"));
	  rbranch
	    = Fsymbol_value (intern_c_string ("emacs-repository-branch"));
	  rtime
	    = Fsymbol_value (intern_c_string ("emacs-build-time"));

	  if (!NILP (rversion) && !NILP (rbranch) && !NILP (rtime))
	    printf ("Development version %s on %s branch; build date %s.\n",
		    SSDATA (Fsubstring (rversion, make_fixnum (0),
					make_fixnum (12))),
		    SSDATA (rbranch),
		    SSDATA (Fformat_time_string (build_string ("%Y-%m-%d"),
						 rtime, Qnil)));
	}

      printf (("%s\n"
	       "%s comes with ABSOLUTELY NO WARRANTY.\n"
	       "You may redistribute copies of %s\n"
	       "under the terms of the GNU General Public License.\n"
	       "For more information about these matters, "
	       "see the file named COPYING.\n"),
	      copyright, PACKAGE_NAME, PACKAGE_NAME);
      exit (0);
    }

#ifdef WINDOWSNT
  /* Check to see if Emacs has been installed correctly.  */
  check_windows_init_file ();
#endif

  /* Intern the names of all standard functions and variables;
     define standard keys.  */

  if (!initialized)
    {
      /* The basic levels of Lisp must come first.  Note that
	 syms_of_data and some others have already been called.  */
      syms_of_chartab ();
      syms_of_lread ();
      syms_of_print ();
      syms_of_eval ();
      syms_of_floatfns ();

      syms_of_buffer ();
      syms_of_bytecode ();
      syms_of_callint ();
      syms_of_casefiddle ();
      syms_of_casetab ();
      syms_of_category ();
      syms_of_ccl ();
      syms_of_character ();
      syms_of_cmds ();
      syms_of_dired ();
      syms_of_display ();
      syms_of_doc ();
      syms_of_editfns ();
      syms_of_emacs ();
      syms_of_filelock ();
      syms_of_indent ();
      syms_of_insdel ();
      /* syms_of_keymap (); */
      syms_of_macros ();
      syms_of_marker ();
      syms_of_minibuf ();
      syms_of_process ();
      syms_of_search ();
      syms_of_sysdep ();
      syms_of_timefns ();
      syms_of_frame ();
      syms_of_syntax ();
      syms_of_terminal ();
      syms_of_term ();
      syms_of_undo ();

#ifdef HAVE_MODULES
      syms_of_module ();
#endif
      /* We don't guard this with HAVE_TREE_SITTER because treesit.o
	 is always compiled (to provide treesit-available-p).  */
      syms_of_treesit ();
#ifdef HAVE_SOUND
      syms_of_sound ();
#endif
      syms_of_textprop ();
      syms_of_composite ();
#ifdef WINDOWSNT
      syms_of_ntproc ();
#endif /* WINDOWSNT */
#if defined CYGWIN
      syms_of_cygw32 ();
#endif
      syms_of_window ();
      syms_of_xdisp ();
      syms_of_sqlite ();
      syms_of_font ();
#ifdef HAVE_WINDOW_SYSTEM
      syms_of_fringe ();
      syms_of_image ();
#endif /* HAVE_WINDOW_SYSTEM */
#ifdef HAVE_X_WINDOWS
      syms_of_xterm ();
      syms_of_xfns ();
      syms_of_xmenu ();
      syms_of_fontset ();
      syms_of_xsettings ();
#ifdef HAVE_X_SM
      syms_of_xsmfns ();
#endif
#ifdef HAVE_X11
      syms_of_xselect ();
#endif
#endif /* HAVE_X_WINDOWS */

      syms_of_xml ();

#ifdef HAVE_LCMS2
      syms_of_lcms2 ();
#endif

#ifdef HAVE_ZLIB
      syms_of_decompress ();
#endif

      syms_of_menu ();

#ifdef HAVE_NTGUI
      syms_of_w32term ();
      syms_of_w32fns ();
      syms_of_w32menu ();
      syms_of_fontset ();
#endif /* HAVE_NTGUI */

#if defined HAVE_NTGUI || defined CYGWIN
      syms_of_w32cygwinx ();
#endif

#if defined WINDOWSNT || defined HAVE_NTGUI
      syms_of_w32select ();
#endif

#ifdef MSDOS
      syms_of_xmenu ();
      syms_of_dosfns ();
      syms_of_msdos ();
      syms_of_win16select ();
#endif	/* MSDOS */

#ifdef HAVE_NS
      syms_of_nsterm ();
      syms_of_nsfns ();
      syms_of_nsmenu ();
      syms_of_nsselect ();
      syms_of_fontset ();
#endif /* HAVE_NS */

#ifdef HAVE_PGTK
      syms_of_pgtkterm ();
      syms_of_pgtkfns ();
      syms_of_pgtkselect ();
      syms_of_pgtkmenu ();
      syms_of_pgtkim ();
      syms_of_fontset ();
      syms_of_xsettings ();
#endif /* HAVE_PGTK */
#ifdef HAVE_HAIKU
      syms_of_haikuterm ();
      syms_of_haikufns ();
      syms_of_haikumenu ();
      syms_of_haikufont ();
      syms_of_haikuselect ();
#ifdef HAVE_NATIVE_IMAGE_API
      syms_of_haikuimage ();
#endif
      syms_of_fontset ();
#endif /* HAVE_HAIKU */
#ifdef HAVE_ANDROID
      syms_of_androidterm ();
      syms_of_androidfns ();
      syms_of_androidmenu ();
      syms_of_fontset ();
#if !defined ANDROID_STUBIFY
      syms_of_androidfont ();
      syms_of_androidselect ();
      syms_of_androidvfs ();
      syms_of_sfntfont ();
      syms_of_sfntfont_android ();
#endif /* !ANDROID_STUBIFY */
#endif /* HAVE_ANDROID */

      syms_of_gnutls ();

#ifdef HAVE_INOTIFY
      syms_of_inotify ();
#endif /* HAVE_INOTIFY */

#ifdef HAVE_KQUEUE
      syms_of_kqueue ();
#endif /* HAVE_KQUEUE */

#ifdef HAVE_GFILENOTIFY
      syms_of_gfilenotify ();
#endif /* HAVE_GFILENOTIFY */

#ifdef HAVE_DBUS
      syms_of_dbusbind ();
#endif /* HAVE_DBUS */

#ifdef WINDOWSNT
      syms_of_ntterm ();
#ifdef HAVE_W32NOTIFY
      syms_of_w32notify ();
#endif /* HAVE_W32NOTIFY */
#endif /* WINDOWSNT */

      syms_of_xwidget ();
      syms_of_threads ();
      syms_of_profiler ();
      syms_of_pdumper ();

#ifdef HAVE_JSON
      syms_of_json ();
#endif

      keys_of_keyboard ();

#ifdef HAVE_NATIVE_COMP
      /* Must be after the last defsubr has run.  */
      hash_native_abi ();
#endif
    }
  else
    {
      /* Initialization that must be done even if the global variable
	 initialized is non zero.  */
#ifdef HAVE_NTGUI
      globals_of_w32font ();
      globals_of_w32fns ();
      globals_of_w32menu ();
#endif  /* HAVE_NTGUI */

#if defined WINDOWSNT || defined HAVE_NTGUI
      globals_of_w32select ();
#endif
    }

#ifdef HAVE_HAIKU
  init_haiku_select ();
#endif

  init_charset ();

  /* This calls putenv and so must precede init_process_emacs.  */
  init_timefns ();

  init_editfns ();

  /* These two call putenv.  */
#ifdef HAVE_DBUS
  init_dbusbind ();
#endif

#ifdef HAVE_X_WINDOWS
  init_xterm ();
#endif

  /* This can create a thread that may call getenv, so it must follow
     all calls to putenv and setenv.  Also, this sets up
     add_keyboard_wait_descriptor, which init_display uses.  */
  init_process_emacs (sockfd);

  init_keyboard ();	/* This too must precede init_sys_modes.  */
  init_display ();	/* Determine terminal type.  Calls init_sys_modes.  */
#if HAVE_W32NOTIFY
  if (noninteractive)
    init_crit ();	/* w32notify.c needs this in batch mode.  */
#endif	/* HAVE_W32NOTIFY */
  init_xdisp ();
#ifdef HAVE_WINDOW_SYSTEM
  init_fringe ();
#endif /* HAVE_WINDOW_SYSTEM */
  init_macros ();
  init_window ();
  init_font ();

#ifdef HAVE_ANDROID
  init_androidmenu ();
#endif

#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
  init_androidfont ();
  init_androidselect ();
  init_sfntfont ();
  init_sfntfont_android ();
#endif

  if (!initialized)
    {
      char *file;
      /* Handle -l loadup, args passed by Makefile.  */
      if (argmatch (argv, argc, "-l", "--load", 3, &file, &skip_args))
	{
#ifdef WINDOWSNT
	  char file_utf8[MAX_UTF8_PATH];

	  if (filename_from_ansi (file, file_utf8) == 0)
	    file = file_utf8;
#endif
	  Vtop_level = list2 (Qload, build_unibyte_string (file));
	}
      /* Unless next switch is -nl, load "loadup.el" first thing.  */
      if (! no_loadup)
	Vtop_level = list2 (Qload, build_string ("loadup.el"));

#ifdef HAVE_NATIVE_COMP
      /* If we are going to load stuff in a non-initialized Emacs,
	 update the value of native-comp-eln-load-path, so that the
	 *.eln files will be found if they are there.  */
      if (!NILP (Vtop_level) && !temacs)
	Vnative_comp_eln_load_path =
	  Fcons (Fexpand_file_name (XCAR (Vnative_comp_eln_load_path),
				    Vinvocation_directory),
		 Qnil);
#endif
    }

  /* Set up for profiling.  This is known to work on FreeBSD,
     GNU/Linux and MinGW.  It might work on some other systems too.
     Give it a try and tell us if it works on your system.  To compile
     for profiling, use the configure option --enable-profiling.  */
#ifdef PROFILING
  if (initialized)
    {
      atexit (_mcleanup);
      monstartup ((uintptr_t) __executable_start, (uintptr_t) &etext);
    }
  else
    moncontrol (0);
#endif

  initialized = true;

  if (dump_mode)
    Vdump_mode = build_string (dump_mode);

#ifdef HAVE_PDUMPER
  /* Allow code to be run (mostly useful after redumping). */
  safe_run_hooks (Qafter_pdump_load_hook);
#endif

#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY && 0
  /* This comes very late in the startup process because it requires
     most of lisp/international to be loaded.  This approach doesn't
     work because normal-top-level runs and creates the initial frame
     before fonts are initialized.  So this is done in
     normal-top-level instead.  */
  Vtop_level = list3 (Qprogn, Vtop_level,
		      list1 (Qandroid_enumerate_fonts));
#endif

  /* Enter editor command loop.  This never returns.  */
  set_initial_minibuffer_mode ();
  Frecursive_edit ();
  eassume (false);
}
\f
/* Sort the args so we can find the most important ones
   at the beginning of argv.  */

/* First, here's a table of all the standard options.  */

struct standard_args
{
  const char *name;
  const char *longname;
  int priority;
  int nargs;
};

static const struct standard_args standard_args[] =
{
  { "-version", "--version", 150, 0 },
#ifdef HAVE_PDUMPER
  { "-fingerprint", "--fingerprint", 140, 0 },
#endif
  { "-chdir", "--chdir", 130, 1 },
  { "-t", "--terminal", 120, 1 },
  { "-nw", "--no-window-system", 110, 0 },
  { "-nw", "--no-windows", 110, 0 },
  { "-batch", "--batch", 100, 0 },
  { "-script", "--script", 100, 1 },
  { "-daemon", "--daemon", 99, 0 },
  { "-bg-daemon", "--bg-daemon", 99, 0 },
  { "-fg-daemon", "--fg-daemon", 99, 0 },
  { "-help", "--help", 90, 0 },
  { "-nl", "--no-loadup", 70, 0 },
  { "-nsl", "--no-site-lisp", 65, 0 },
  { "-no-build-details", "--no-build-details", 63, 0 },
#ifdef HAVE_MODULES
  { "-module-assertions", "--module-assertions", 62, 0 },
#endif
  /* -d must come last before the options handled in startup.el.  */
  { "-d", "--display", 60, 1 },
  { "-display", 0, 60, 1 },
  /* Now for the options handled in `command-line' (startup.el).  */
  /* (Note that to imply -nsl, -Q is partially handled here.)  */
  { "-Q", "--quick", 55, 0 },
  { "-quick", 0, 55, 0 },
  { "-x", 0, 55, 0 },
  { "-q", "--no-init-file", 50, 0 },
  { "-no-init-file", 0, 50, 0 },
  { "-init-directory", "--init-directory", 30, 1 },
  { "-no-x-resources", "--no-x-resources", 40, 0 },
  { "-no-site-file", "--no-site-file", 40, 0 },
  { "-no-comp-spawn", "--no-comp-spawn", 60, 0 },
  { "-u", "--user", 30, 1 },
  { "-user", 0, 30, 1 },
  { "-debug-init", "--debug-init", 20, 0 },
  { "-iconic", "--iconic", 15, 0 },
  { "-D", "--basic-display", 12, 0},
  { "-basic-display", 0, 12, 0},
  { "-nbc", "--no-blinking-cursor", 12, 0 },
  /* Now for the options handled in `command-line-1' (startup.el).  */
  { "-nbi", "--no-bitmap-icon", 10, 0 },
  { "-bg", "--background-color", 10, 1 },
  { "-background", 0, 10, 1 },
  { "-fg", "--foreground-color", 10, 1 },
  { "-foreground", 0, 10, 1 },
  { "-bd", "--border-color", 10, 1 },
  { "-bw", "--border-width", 10, 1 },
  { "-ib", "--internal-border", 10, 1 },
  { "-ms", "--mouse-color", 10, 1 },
  { "-cr", "--cursor-color", 10, 1 },
  { "-fn", "--font", 10, 1 },
  { "-font", 0, 10, 1 },
  { "-fs", "--fullscreen", 10, 0 },
  { "-fw", "--fullwidth", 10, 0 },
  { "-fh", "--fullheight", 10, 0 },
  { "-mm", "--maximized", 10, 0 },
  { "-g", "--geometry", 10, 1 },
  { "-geometry", 0, 10, 1 },
  { "-T", "--title", 10, 1 },
  { "-title", 0, 10, 1 },
  { "-name", "--name", 10, 1 },
  { "-xrm", "--xrm", 10, 1 },
  { "-parent-id", "--parent-id", 10, 1 },
  { "-r", "--reverse-video", 5, 0 },
  { "-rv", 0, 5, 0 },
  { "-reverse", 0, 5, 0 },
  { "-hb", "--horizontal-scroll-bars", 5, 0 },
  { "-vb", "--vertical-scroll-bars", 5, 0 },
  { "-color", "--color", 5, 0},
  { "-no-splash", "--no-splash", 3, 0 },
  { "-no-desktop", "--no-desktop", 3, 0 },
  /* The following three must be just above the file-name args, to get
     them out of our way, but without mixing them with file names.  */
  { "-temacs", "--temacs", 1, 1 },
#ifdef HAVE_PDUMPER
  { "-dump-file", "--dump-file", 1, 1 },
#endif
#if SECCOMP_USABLE
  { "-seccomp", "--seccomp", 1, 1 },
#endif
#ifdef HAVE_NS
  { "-NSAutoLaunch", 0, 5, 1 },
  { "-NXAutoLaunch", 0, 5, 1 },
  { "-_NSMachLaunch", 0, 85, 1 },
  { "-MachLaunch", 0, 85, 1 },
  { "-macosx", 0, 85, 0 },
  { "-NSHost", 0, 85, 1 },
#endif
  /* These have the same priority as ordinary file name args,
     so they are not reordered with respect to those.  */
  { "-L", "--directory", 0, 1 },
  { "-directory", 0, 0, 1 },
  { "-l", "--load", 0, 1 },
  { "-load", 0, 0, 1 },
  /* This has no longname, because using --scriptload confuses sort_args,
     because then the --script long option seems to match twice; ie
     you can't have a long option which is a prefix of another long
     option.  In any case, this is entirely an internal option.  */
  { "-scriptload", NULL, 0, 1 },
  { "-f", "--funcall", 0, 1 },
  { "-funcall", 0, 0, 1 },
  { "-eval", "--eval", 0, 1 },
  { "-execute", "--execute", 0, 1 },
  { "-find-file", "--find-file", 0, 1 },
  { "-visit", "--visit", 0, 1 },
  { "-file", "--file", 0, 1 },
  { "-insert", "--insert", 0, 1 },
#ifdef HAVE_NS
  { "-NXOpen", 0, 0, 1 },
  { "-NXOpenTemp", 0, 0, 1 },
  { "-NSOpen", 0, 0, 1 },
  { "-NSOpenTemp", 0, 0, 1 },
  { "-GSFilePath", 0, 0, 1 },
#endif
  /* This should be processed after ordinary file name args and the like.  */
  { "-kill", "--kill", -10, 0 },
};

/* Reorder the elements of ARGV (assumed to have ARGC elements)
   so that the highest priority ones come first.
   Do not change the order of elements of equal priority.
   If an option takes an argument, keep it and its argument together.

   If an option that takes no argument appears more
   than once, eliminate all but one copy of it.  */

static void
sort_args (int argc, char **argv)
{
  char **new = xmalloc (argc * sizeof *new);
  /* For each element of argv,
     the corresponding element of options is:
     0 for an option that takes no arguments,
     1 for an option that takes one argument, etc.
     -1 for an ordinary non-option argument.  */
  int *options = xnmalloc (argc, sizeof *options);
  int *priority = xnmalloc (argc, sizeof *priority);
  int to = 1;
  int incoming_used = 1;
  int from;
  int i;

  /* Categorize all the options,
     and figure out which argv elts are option arguments.  */
  for (from = 1; from < argc; from++)
    {
      options[from] = -1;
      priority[from] = 0;
      if (argv[from][0] == '-')
	{
	  int match;

	  /* If we have found "--", don't consider
	     any more arguments as options.  */
	  if (argv[from][1] == '-' && argv[from][2] == 0)
	    {
	      /* Leave the "--", and everything following it, at the end.  */
	      for (; from < argc; from++)
		{
		  priority[from] = -100;
		  options[from] = -1;
		}
	      break;
	    }

	  /* Look for a match with a known old-fashioned option.  */
	  for (i = 0; i < ARRAYELTS (standard_args); i++)
	    if (!strcmp (argv[from], standard_args[i].name))
	      {
		options[from] = standard_args[i].nargs;
		priority[from] = standard_args[i].priority;
		if (from + standard_args[i].nargs >= argc)
		  fatal ("Option '%s' requires an argument\n", argv[from]);
		from += standard_args[i].nargs;
		goto done;
	      }

	  /* Look for a match with a known long option.
	     MATCH is -1 if no match so far, -2 if two or more matches so far,
	     >= 0 (the table index of the match) if just one match so far.  */
	  if (argv[from][1] == '-')
	    {
	      char const *equals = strchr (argv[from], '=');
	      ptrdiff_t thislen =
		equals ? equals - argv[from] : strlen (argv[from]);

	      match = -1;

	      for (i = 0; i < ARRAYELTS (standard_args); i++)
		if (standard_args[i].longname
		    && !strncmp (argv[from], standard_args[i].longname,
				 thislen))
		  {
		    if (match == -1)
		      match = i;
		    else
		      match = -2;
		  }

	      /* If we found exactly one match, use that.  */
	      if (match >= 0)
		{
		  options[from] = standard_args[match].nargs;
		  priority[from] = standard_args[match].priority;
		  /* If --OPTION=VALUE syntax is used,
		     this option uses just one argv element.  */
		  if (equals != 0)
		    options[from] = 0;
		  if (from + options[from] >= argc)
		    fatal ("Option '%s' requires an argument\n", argv[from]);
		  from += options[from];
		}
	      else if (match == -2)
		{
		  /* This is an internal error.
		     Eg if one long option is a prefix of another.  */
		  fprintf (stderr, "Option '%s' matched multiple standard arguments\n", argv[from]);
		}
	      /* Should we not also warn if there was no match?	 */
	    }
	done: ;
	}
    }

  /* Copy the arguments, in order of decreasing priority, to NEW.  */
  new[0] = argv[0];
  while (incoming_used < argc)
    {
      int best = -1;
      int best_priority = -9999;

      /* Find the highest priority remaining option.
	 If several have equal priority, take the first of them.  */
      for (from = 1; from < argc; from++)
	{
	  if (argv[from] != 0 && priority[from] > best_priority)
	    {
	      best_priority = priority[from];
	      best = from;
	    }
	  /* Skip option arguments--they are tied to the options.  */
	  if (options[from] > 0)
	    from += options[from];
	}

      if (best < 0)
	emacs_abort ();

      /* Copy the highest priority remaining option, with its args, to NEW.
         Unless it is a duplicate of the previous one.  */
      if (! (options[best] == 0
	     && ! strcmp (new[to - 1], argv[best])))
	{
	  new[to++] = argv[best];
	  for (i = 0; i < options[best]; i++)
	    new[to++] = argv[best + i + 1];
	}

      incoming_used += 1 + max (options[best], 0);

      /* Clear out this option in ARGV.  */
      argv[best] = 0;
      for (i = 0; i < options[best]; i++)
	argv[best + i + 1] = 0;
    }

  /* If duplicate options were deleted, fill up extra space with null ptrs.  */
  while (to < argc)
    new[to++] = 0;

  memcpy (argv, new, sizeof (char *) * argc);

  xfree (options);
  xfree (new);
  xfree (priority);
}
\f
DEFUN ("kill-emacs", Fkill_emacs, Skill_emacs, 0, 2, "P",
       doc: /* Exit the Emacs job and kill it.
If ARG is an integer, return ARG as the exit program code.
If ARG is a string, stuff it as keyboard input.
Any other value of ARG, or ARG omitted, means return an
exit code that indicates successful program termination.

If RESTART is non-nil, instead of just exiting at the end, start a new
Emacs process, using the same command line arguments as the currently
running Emacs process.

This function is called upon receipt of the signals SIGTERM
or SIGHUP, and upon SIGINT in batch mode.

The value of `kill-emacs-hook', if not void, is a list of functions
(of no args), all of which are called before Emacs is actually
killed.  */
       attributes: noreturn)
  (Lisp_Object arg, Lisp_Object restart)
{
  int exit_code;

#ifndef WINDOWSNT
  /* Do some checking before shutting down Emacs, because errors
     can't be meaningfully reported afterwards.  */
  if (!NILP (restart)
      /* Don't perform the following checks when Emacs is running as
	 an Android GUI application, because there the system is
	 relied on to restart Emacs.  */
#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
      && !android_init_gui
#endif
      )
    {
      /* This is very unlikely, but it's possible to execute a binary
	 (on some systems) with no argv.  */
      if (initial_argc < 1)
	error ("No command line arguments known; unable to re-execute Emacs");

      /* Check that the binary hasn't gone away.  */
      if (!initial_emacs_executable)
	error ("Unknown Emacs executable");

      if (!file_access_p (initial_emacs_executable, F_OK))
	error ("Emacs executable \"%s\" can't be found", initial_argv[0]);
    }
#endif

#ifdef HAVE_LIBSYSTEMD
  /* Notify systemd we are shutting down, but only if we have notified
     it about startup.  */
  if (daemon_type == -1)
    sd_notify(0, "STOPPING=1");
#endif /* HAVE_LIBSYSTEMD */

  /* Fsignal calls emacs_abort () if it sees that waiting_for_input is
     set.  */
  waiting_for_input = 0;
  if (!NILP (find_symbol_value (Qkill_emacs_hook)))
    {
      if (noninteractive)
	safe_run_hooks (Qkill_emacs_hook);
      else
	call1 (Qrun_hook_query_error_with_timeout, Qkill_emacs_hook);
    }

#ifdef HAVE_X_WINDOWS
  /* Transfer any clipboards we own to the clipboard manager.  */
  x_clipboard_manager_save_all ();
#endif

  shut_down_emacs (0, (STRINGP (arg) && !feof (stdin)) ? arg : Qnil);

  /* If we have an auto-save list file,
     kill it because we are exiting Emacs deliberately (not crashing).
     Do it after shut_down_emacs, which does an auto-save.  */
  if (STRINGP (Vauto_save_list_file_name))
    {
      Lisp_Object listfile;
      listfile = Fexpand_file_name (Vauto_save_list_file_name, Qnil);
      emacs_unlink (SSDATA (listfile));
    }

#ifdef HAVE_NATIVE_COMP
  eln_load_path_final_clean_up ();
#endif

  if (!NILP (restart))
    {
      turn_on_atimers (false);
#if defined HAVE_ANDROID && !defined ANDROID_STUBIFY
      /* Re-executing the Emacs process created by the system doesn't
	 work.  Instead, schedule a restart for a few hundered
	 milliseconds and exit Emacs.  */
      if (android_init_gui)
	android_restart_emacs ();
#endif
#ifdef WINDOWSNT
      if (w32_reexec_emacs (initial_cmdline, initial_wd) < 0)
#else
      initial_argv[0] = initial_emacs_executable;
      if (execvp (*initial_argv, initial_argv) < 1)
#endif
	emacs_perror ("Unable to re-execute Emacs");
    }

  if (FIXNUMP (arg))
    exit_code = (XFIXNUM (arg) < 0
		 ? XFIXNUM (arg) | INT_MIN
		 : XFIXNUM (arg) & INT_MAX);
  else
    exit_code = EXIT_SUCCESS;
  exit (exit_code);
}


/* Perform an orderly shutdown of Emacs.  Autosave any modified
   buffers, kill any child processes, clean up the terminal modes (if
   we're in the foreground), and other stuff like that.  Don't perform
   any redisplay; this may be called when Emacs is shutting down in
   the background, or after its X connection has died.

   If SIG is a signal number, print a message for it.

   This is called by fatal signal handlers, X protocol error handlers,
   and Fkill_emacs.  */

void
shut_down_emacs (int sig, Lisp_Object stuff)
{
  /* Prevent running of hooks from now on.  */
  Vrun_hooks = Qnil;

  /* Don't update display from now on.  */
  Vinhibit_redisplay = Qt;

  /* If we are controlling the terminal, reset terminal modes.  */
#if !defined DOS_NT && !(defined HAVE_ANDROID && !defined ANDROID_STUBIFY)
  pid_t tpgrp = tcgetpgrp (STDIN_FILENO);
  if (tpgrp != -1 && tpgrp == getpgrp ())
    {
      reset_all_sys_modes ();
      if (sig && sig != SIGTERM)
	{
#ifdef HAVE_HAIKU
	  if (haiku_debug_on_fatal_error)
	    debugger ("Fatal error in Emacs");
#endif
	  /* Output a "Fatal error NUM: DESC\n" diagnostic with a single write,
	     but use multiple writes if the diagnosic is absurdly long
	     and likely couldn't be written atomically anyway.  */
	  static char const fmt[] = "Fatal error %d: ";
	  char buf[max ((sizeof fmt - sizeof "%d"
			 + INT_STRLEN_BOUND (int) + 1),
			min (PIPE_BUF, MAX_ALLOCA))];
	  char const *sig_desc = safe_strsignal (sig);
	  size_t sig_desclen = strlen (sig_desc);
	  int nlen = sprintf (buf, fmt, sig);
	  if (nlen + sig_desclen < sizeof buf - 1)
	    {
	      char *p = mempcpy (buf + nlen, sig_desc, sig_desclen);
	      *p++ = '\n';
	      emacs_write (STDERR_FILENO, buf, p - buf);
	    }
	  else
	    {
	      emacs_write (STDERR_FILENO, buf, nlen);
	      emacs_write (STDERR_FILENO, sig_desc, sig_desclen);
	      emacs_write (STDERR_FILENO, "\n", 1);
	    }
	}
    }
#else
  fflush (stdout);
  reset_all_sys_modes ();
#endif

  stuff_buffered_input (stuff);

  inhibit_sentinels = 1;
  kill_buffer_processes (Qnil);
  Fdo_auto_save (Qt, Qnil);

  unlock_all_files ();

  /* There is a tendency for a SIGIO signal to arrive within exit,
     and cause a SIGHUP because the input descriptor is already closed.  */
  unrequest_sigio ();

  /* Do this only if terminating normally, we want glyph matrices
     etc. in a core dump.  */
  if (sig == 0 || sig == SIGTERM)
    {
      check_glyph_memory ();
      check_message_stack ();
    }

#ifdef MSDOS
  dos_cleanup ();
#endif

#ifdef HAVE_NS
  ns_term_shutdown (sig);
#endif

#ifdef HAVE_LIBXML2
  xml_cleanup_parser ();
#endif

#ifdef WINDOWSNT
  term_ntproc (0);
#endif
}


\f
#ifdef HAVE_UNEXEC

#include "unexec.h"

DEFUN ("dump-emacs", Fdump_emacs, Sdump_emacs, 2, 2, 0,
       doc: /* Dump current state of Emacs into executable file FILENAME.
Take symbols from SYMFILE (presumably the file you executed to run Emacs).
This is used in the file `loadup.el' when building Emacs.

You must run Emacs in batch mode in order to dump it.  */)
  (Lisp_Object filename, Lisp_Object symfile)
{
  Lisp_Object tem;
  Lisp_Object symbol;
  specpdl_ref count = SPECPDL_INDEX ();

  check_pure_size ();

  if (! noninteractive)
    error ("Dumping Emacs works only in batch mode");

  if (dumped_with_unexec_p ())
    error ("Emacs can be dumped using unexec only once");

  if (definitely_will_not_unexec_p ())
    error ("This Emacs instance was not started in temacs mode");

# if defined GNU_LINUX && defined HAVE_UNEXEC

  /* Warn if the gap between BSS end and heap start is larger than this.  */
#  define MAX_HEAP_BSS_DIFF (1024 * 1024)

  if (heap_bss_diff > MAX_HEAP_BSS_DIFF)
    fprintf (stderr,
	     ("**************************************************\n"
	      "Warning: Your system has a gap between BSS and the\n"
	      "heap (%"PRIuMAX" bytes). This usually means that exec-shield\n"
	      "or something similar is in effect.  The dump may\n"
	      "fail because of this.  See the section about\n"
	      "exec-shield in etc/PROBLEMS for more information.\n"
	      "**************************************************\n"),
	     heap_bss_diff);
# endif

  /* Bind `command-line-processed' to nil before dumping,
     so that the dumped Emacs will process its command line
     and set up to work with X windows if appropriate.  */
  symbol = intern ("command-line-processed");
  specbind (symbol, Qnil);

  CHECK_STRING (filename);
  filename = Fexpand_file_name (filename, Qnil);
  filename = ENCODE_FILE (filename);
  if (!NILP (symfile))
    {
      CHECK_STRING (symfile);
      if (SCHARS (symfile))
	{
	  symfile = Fexpand_file_name (symfile, Qnil);
	  symfile = ENCODE_FILE (symfile);
	}
    }

  tem = Vpurify_flag;
  Vpurify_flag = Qnil;

# ifdef HYBRID_MALLOC
  {
    static char const fmt[] = "%d of %d static heap bytes used";
    char buf[sizeof fmt + 2 * (INT_STRLEN_BOUND (int) - 2)];
    int max_usage = max_bss_sbrk_ptr - bss_sbrk_buffer;
    sprintf (buf, fmt, max_usage, STATIC_HEAP_SIZE);
    /* Don't log messages, because at this point buffers cannot be created.  */
    message1_nolog (buf);
  }
# endif

  fflush (stdout);
  /* Tell malloc where start of impure now is.  */
  /* Also arrange for warnings when nearly out of space.  */
# if !defined SYSTEM_MALLOC && !defined HYBRID_MALLOC && !defined WINDOWSNT
  /* On Windows, this was done before dumping, and that once suffices.
     Meanwhile, my_edata is not valid on Windows.  */
  memory_warnings (my_edata, malloc_warning);
# endif

  struct gflags old_gflags = gflags;
  gflags.will_dump_ = false;
  gflags.will_dump_with_unexec_ = false;
  gflags.dumped_with_unexec_ = true;

  alloc_unexec_pre ();

  unexec (SSDATA (filename), !NILP (symfile) ? SSDATA (symfile) : 0);

  alloc_unexec_post ();

  gflags = old_gflags;

# ifdef WINDOWSNT
  Vlibrary_cache = Qnil;
# endif

  Vpurify_flag = tem;

  return unbind_to (count, Qnil);
}

#endif

\f
#if HAVE_SETLOCALE
/* Recover from setlocale (LC_ALL, "").  */
void
fixup_locale (void)
{
  /* The Emacs Lisp reader needs LC_NUMERIC to be "C",
     so that numbers are read and printed properly for Emacs Lisp.  */
  setlocale (LC_NUMERIC, "C");
}

/* Set system locale CATEGORY, with previous locale *PLOCALE, to
   DESIRED_LOCALE.  */
static void
synchronize_locale (int category, Lisp_Object *plocale, Lisp_Object desired_locale)
{
  if (! EQ (*plocale, desired_locale))
    {
      *plocale = desired_locale;
      char const *locale_string
	= STRINGP (desired_locale) ? SSDATA (desired_locale) : "";
# ifdef WINDOWSNT
      /* Changing categories like LC_TIME usually requires specifying
	 an encoding suitable for the new locale, but MS-Windows's
	 'setlocale' will only switch the encoding when LC_ALL is
	 specified.  So we ignore CATEGORY, use LC_ALL instead, and
	 then restore LC_NUMERIC to "C", so reading and printing
	 numbers is unaffected.  */
      setlocale (LC_ALL, locale_string);
      fixup_locale ();
# else	/* !WINDOWSNT */
      setlocale (category, locale_string);
# endif	/* !WINDOWSNT */
    }
}

static Lisp_Object Vprevious_system_time_locale;

/* Set system time locale to match Vsystem_time_locale, if possible.  */
void
synchronize_system_time_locale (void)
{
  synchronize_locale (LC_TIME, &Vprevious_system_time_locale,
		      Vsystem_time_locale);
}

# ifdef LC_MESSAGES
static Lisp_Object Vprevious_system_messages_locale;
# endif

/* Set system messages locale to match Vsystem_messages_locale, if
   possible.  */
void
synchronize_system_messages_locale (void)
{
# ifdef LC_MESSAGES
  synchronize_locale (LC_MESSAGES, &Vprevious_system_messages_locale,
		      Vsystem_messages_locale);
# endif
}
#endif /* HAVE_SETLOCALE */

/* Return a diagnostic string for ERROR_NUMBER, in the wording
   and encoding appropriate for the current locale.  */
char *
emacs_strerror (int error_number)
{
  synchronize_system_messages_locale ();
  return strerror (error_number);
}
\f

Lisp_Object
decode_env_path (const char *evarname, const char *defalt, bool empty)
{
  const char *path, *p;
  Lisp_Object lpath, element, tem;
  /* Default is to use "." for empty path elements.
     But if argument EMPTY is true, use nil instead.  */
  Lisp_Object empty_element = empty ? Qnil : build_string (".");
#ifdef WINDOWSNT
  bool defaulted = 0;
  static const char *emacs_dir_env = "%emacs_dir%/";
  const size_t emacs_dir_len = strlen (emacs_dir_env);
  const char *edir = egetenv ("emacs_dir");
  char emacs_dir[MAX_UTF8_PATH];

  /* egetenv looks in process-environment, which holds the variables
     in their original system-locale encoding.  We need emacs_dir to
     be in UTF-8.  */
  if (edir)
    filename_from_ansi (edir, emacs_dir);
#endif

  /* It's okay to use getenv here, because this function is only used
     to initialize variables when Emacs starts up, and isn't called
     after that.  */
  if (evarname != 0)
    path = getenv (evarname);
  else
    path = 0;
  if (!path)
    {
#ifdef NS_SELF_CONTAINED
      path = ns_relocate (defalt);
#else
      path = defalt;
#endif
#ifdef WINDOWSNT
      defaulted = 1;
#endif
    }
#ifdef DOS_NT
  /* Ensure values from the environment use the proper directory separator.  */
  if (path)
    {
      char *path_copy;

#ifdef WINDOWSNT
      char *path_utf8, *q, *d;
      int cnv_result;

      /* Convert each element of PATH to UTF-8.  */
      p = path_copy = alloca (strlen (path) + 1);
      strcpy (path_copy, path);
      d = path_utf8 = alloca (4 * strlen (path) + 1);
      *d = '\0';
      do {
	q = _mbschr (p, SEPCHAR);
	if (q)
	  *q = '\0';
	cnv_result = filename_from_ansi (p, d);
	if (q)
	  {
	    *q++ = SEPCHAR;
	    p = q;
	    /* If conversion of this PATH elements fails, make sure
	       destination pointer will stay put, thus effectively
	       ignoring the offending element.  */
	    if (cnv_result == 0)
	      {
		d += strlen (d);
		*d++ = SEPCHAR;
	      }
	  }
	else if (cnv_result != 0 && d > path_utf8)
	  d[-1] = '\0';	/* remove last semi-colon and null-terminate PATH */
      } while (q);
      path_copy = path_utf8;
#else  /* MSDOS */
      path_copy = alloca (strlen (path) + 1);
      strcpy (path_copy, path);
#endif
      dostounix_filename (path_copy);
      path = path_copy;
    }
#endif
  lpath = Qnil;
  while (1)
    {
      p = strchr (path, SEPCHAR);
      if (!p)
	p = path + strlen (path);
      element = ((p - path) ? make_unibyte_string (path, p - path)
		 : empty_element);
      if (! NILP (element))
        {
#ifdef WINDOWSNT
          /* Relative file names in the default path are interpreted as
             being relative to $emacs_dir.  */
          if (edir && defaulted
              && strncmp (path, emacs_dir_env, emacs_dir_len) == 0)
            element = Fexpand_file_name (Fsubstring
                                         (element,
                                          make_fixnum (emacs_dir_len),
                                          Qnil),
                                         build_unibyte_string (emacs_dir));
#endif

          /* Add /: to the front of the name
             if it would otherwise be treated as magic.  */
          tem = Ffind_file_name_handler (element, Qt);

          /* However, if the handler says "I'm safe",
             don't bother adding /:.  */
          if (SYMBOLP (tem))
            {
              Lisp_Object prop;
              prop = Fget (tem, intern ("safe-magic"));
              if (! NILP (prop))
                tem = Qnil;
            }

          if (! NILP (tem))
	    {
	      AUTO_STRING (slash_colon, "/:");
	      element = concat2 (slash_colon, element);
	    }
        } /* !NILP (element) */

      lpath = Fcons (element, lpath);
      if (*p)
	path = p + 1;
      else
	break;
    }

  return Fnreverse (lpath);
}

DEFUN ("daemonp", Fdaemonp, Sdaemonp, 0, 0, 0,
       doc: /* Return non-nil if the current emacs process is a daemon.
If the daemon was given a name argument, return that name. */)
  (void)
{
  if (IS_DAEMON)
    if (daemon_name)
      return build_string (daemon_name);
    else
      return Qt;
  else
    return Qnil;
}

DEFUN ("daemon-initialized", Fdaemon_initialized, Sdaemon_initialized, 0, 0, 0,
       doc: /* Mark the Emacs daemon as being initialized.
This finishes the daemonization process by doing the other half of detaching
from the parent process and its tty file descriptors.  */)
  (void)
{
  bool err = 0;

  if (!IS_DAEMON)
    error ("This function can only be called if emacs is run as a daemon");

  if (!DAEMON_RUNNING)
    error ("The daemon has already been initialized");

  if (NILP (Vafter_init_time))
    error ("This function can only be called after loading the init files");
#ifndef WINDOWSNT

  if (daemon_type == 1)
    {
#ifdef HAVE_LIBSYSTEMD
      sd_notify(0, "READY=1");
#endif /* HAVE_LIBSYSTEMD */
    }

  if (daemon_type == 2)
    {
      int nfd;

      /* Get rid of stdin, stdout and stderr.  */
      nfd = emacs_open_noquit ("/dev/null", O_RDWR, 0);
      err |= nfd < 0;
      err |= dup2 (nfd, STDIN_FILENO) < 0;
      err |= dup2 (nfd, STDOUT_FILENO) < 0;
      err |= dup2 (nfd, STDERR_FILENO) < 0;
      err |= emacs_close (nfd) != 0;

      /* Closing the pipe will notify the parent that it can exit.
         FIXME: In case some other process inherited the pipe, closing it here
         won't notify the parent because it's still open elsewhere, so we
         additionally send a byte, just to make sure the parent really exits.
         Instead, we should probably close the pipe in start-process and
         call-process to make sure the pipe is never inherited by
         subprocesses.  */
      err |= write (daemon_pipe[1], "\n", 1) < 0;
      err |= emacs_close (daemon_pipe[1]) != 0;
    }

  /* Set it to an invalid value so we know we've already run this function.  */
  daemon_type = -daemon_type;

#else  /* WINDOWSNT */
  /* Signal the waiting emacsclient process.  */
  err |= SetEvent (w32_daemon_event) == 0;
  err |= CloseHandle (w32_daemon_event) == 0;
  /* Set it to an invalid value so we know we've already run this function.  */
  w32_daemon_event = INVALID_HANDLE_VALUE;
#endif

  if (err)
    error ("I/O error during daemon initialization");
  return Qt;
}

void
syms_of_emacs (void)
{
  DEFSYM (Qfile_name_handler_alist, "file-name-handler-alist");
  DEFSYM (Qrisky_local_variable, "risky-local-variable");
  DEFSYM (Qkill_emacs, "kill-emacs");
  DEFSYM (Qkill_emacs_hook, "kill-emacs-hook");
  DEFSYM (Qrun_hook_query_error_with_timeout,
	  "run-hook-query-error-with-timeout");

#ifdef HAVE_UNEXEC
  defsubr (&Sdump_emacs);
#endif

  defsubr (&Skill_emacs);

  defsubr (&Sinvocation_name);
  defsubr (&Sinvocation_directory);
  defsubr (&Sdaemonp);
  defsubr (&Sdaemon_initialized);

  DEFVAR_LISP ("command-line-args", Vcommand_line_args,
	       doc: /* Args passed by shell to Emacs, as a list of strings.
Many arguments are deleted from the list as they are processed.  */);

  DEFVAR_LISP ("system-type", Vsystem_type,
	       doc: /* The value is a symbol indicating the type of operating system you are using.
Special values:
  `gnu'          compiled for a GNU Hurd system.
  `gnu/linux'    compiled for a GNU/Linux system.
  `gnu/kfreebsd' compiled for a GNU system with a FreeBSD kernel.
  `darwin'       compiled for Darwin (GNU-Darwin, macOS, ...).
  `ms-dos'       compiled as an MS-DOS application.
  `windows-nt'   compiled as a native W32 application.
  `cygwin'       compiled using the Cygwin library.
  `haiku'        compiled for a Haiku system.
  `android'	 compiled for Android.
Anything else (in Emacs 26, the possibilities are: aix, berkeley-unix,
hpux, usg-unix-v) indicates some sort of Unix system.  */);
  Vsystem_type = intern_c_string (SYSTEM_TYPE);
  /* See configure.ac for the possible SYSTEM_TYPEs.  */

  DEFVAR_LISP ("system-configuration", Vsystem_configuration,
	       doc: /* Value is string indicating configuration Emacs was built for.  */);
  Vsystem_configuration = build_string (EMACS_CONFIGURATION);

  DEFVAR_LISP ("system-configuration-options", Vsystem_configuration_options,
	       doc: /* String containing the configuration options Emacs was built with.  */);
  Vsystem_configuration_options = build_string (EMACS_CONFIG_OPTIONS);

  DEFVAR_LISP ("system-configuration-features", Vsystem_configuration_features,
	       doc: /* String listing some of the main features this Emacs was compiled with.
An element of the form \"FOO\" generally means that HAVE_FOO was
defined during the build.

This is mainly intended for diagnostic purposes in bug reports.
Don't rely on it for testing whether a feature you want to use is available.  */);
  Vsystem_configuration_features = build_string (EMACS_CONFIG_FEATURES);

  DEFVAR_BOOL ("noninteractive", noninteractive1,
               doc: /* Non-nil means Emacs is running without interactive terminal.  */);

  DEFVAR_LISP ("kill-emacs-hook", Vkill_emacs_hook,
	       doc: /* Hook run when `kill-emacs' is called.
Since `kill-emacs' may be invoked when the terminal is disconnected (or
in other similar situations), functions placed on this hook should not
expect to be able to interact with the user.  To ask for confirmation,
see `kill-emacs-query-functions' instead.

Before Emacs 24.1, the hook was not run in batch mode, i.e., if
`noninteractive' was non-nil.  */);
  Vkill_emacs_hook = Qnil;

  DEFVAR_LISP ("path-separator", Vpath_separator,
	       doc: /* String containing the character that separates directories in
search paths, such as PATH and other similar environment variables.  */);
  {
    char c = SEPCHAR;
    Vpath_separator = make_string (&c, 1);
  }

  DEFVAR_LISP ("invocation-name", Vinvocation_name,
	       doc: /* The program name that was used to run Emacs.
Any directory names are omitted.  */);

  DEFVAR_LISP ("invocation-directory", Vinvocation_directory,
	       doc: /* The directory in which the Emacs executable was found, to run it.
The value is nil if that directory's name is not known.  */);

  DEFVAR_LISP ("installation-directory", Vinstallation_directory,
	       doc: /* A directory within which to look for the `lib-src' and `etc' directories.
In an installed Emacs, this is normally nil.  It is non-nil if
both `lib-src' (on MS-DOS, `info') and `etc' directories are found
within the variable `invocation-directory' or its parent.  For example,
this is the case when running an uninstalled Emacs executable from its
build directory.  */);
  Vinstallation_directory = Qnil;

  DEFVAR_LISP ("system-messages-locale", Vsystem_messages_locale,
	       doc: /* System locale for messages.  */);
  Vsystem_messages_locale = Qnil;
#ifdef LC_MESSAGES
  Vprevious_system_messages_locale = Qnil;
  staticpro (&Vprevious_system_messages_locale);
#endif

  DEFVAR_LISP ("system-time-locale", Vsystem_time_locale,
	       doc: /* System locale for time.  */);
  Vsystem_time_locale = Qnil;
  Vprevious_system_time_locale = Qnil;
  staticpro (&Vprevious_system_time_locale);

  DEFVAR_LISP ("before-init-time", Vbefore_init_time,
	       doc: /* Value of `current-time' before Emacs begins initialization.  */);
  Vbefore_init_time = Qnil;

  DEFVAR_LISP ("after-init-time", Vafter_init_time,
	       doc: /* Value of `current-time' after loading the init files.
This is nil during initialization.  */);
  Vafter_init_time = Qnil;

  DEFVAR_BOOL ("inhibit-x-resources", inhibit_x_resources,
	       doc: /* If non-nil, X resources, Windows Registry settings, and NS defaults are not used.  */);
  inhibit_x_resources = 0;

  DEFVAR_LISP ("emacs-copyright", Vemacs_copyright,
	       doc: /* Short copyright string for this version of Emacs.  */);
  Vemacs_copyright = build_string (emacs_copyright);

  DEFVAR_LISP ("emacs-version", Vemacs_version,
	       doc: /* Version numbers of this version of Emacs.
This has the form: MAJOR.MINOR[.MICRO], where MAJOR/MINOR/MICRO are integers.
MICRO is only present in unreleased development versions,
and is not especially meaningful.  Prior to Emacs 26.1, an extra final
component .BUILD is present.  This is now stored separately in
`emacs-build-number'.  */);
  Vemacs_version = build_string (emacs_version);

  DEFVAR_LISP ("report-emacs-bug-address", Vreport_emacs_bug_address,
	       doc: /* Address of mailing list for GNU Emacs bugs.  */);
  Vreport_emacs_bug_address = build_string (emacs_bugreport);

  DEFVAR_LISP ("dump-mode", Vdump_mode,
               doc: /* Non-nil when Emacs is dumping itself.  */);

  DEFVAR_LISP ("dynamic-library-alist", Vdynamic_library_alist,
    doc: /* Alist of dynamic libraries vs external files implementing them.
Each element is a list (LIBRARY FILE...), where the car is a symbol
representing a supported external library, and the rest are strings giving
alternate filenames for that library.

Emacs tries to load the library from the files in the order they appear on
the list; if none is loaded, the running session of Emacs won't have access
to that library.

Note that image types `pbm' and `xbm' do not need entries in this variable
because they do not depend on external libraries and are always available.

Also note that this is not a generic facility for accessing external
libraries; only those already known by Emacs will be loaded.  */);
#ifdef WINDOWSNT
  /* FIXME: We may need to load libgccjit when dumping before
     term/w32-win.el defines `dynamic-library-alist`. This will fail
     if that variable is empty, so add libgccjit-0.dll to it.  */
  if (will_dump_p ())
    Vdynamic_library_alist = list1 (list2 (Qgccjit,
                                           build_string ("libgccjit-0.dll")));
  else
    Vdynamic_library_alist = Qnil;
#else
  Vdynamic_library_alist = Qnil;
#endif
  Fput (intern_c_string ("dynamic-library-alist"), Qrisky_local_variable, Qt);

#ifdef WINDOWSNT
  Vlibrary_cache = Qnil;
  staticpro (&Vlibrary_cache);
#endif
}