add restrict to a few more places

include/sudo_util.h

@@ -306,7 +306,7 @@ sudo_dso_public int sudo_secure_open_file_v1(const char *path, uid_t uid, gid_t
 #define sudo_secure_open_file(_a, _b, _c, _d, _e) sudo_secure_open_file_v1((_a), (_b), (_c), (_d), (_e))
 sudo_dso_public int sudo_secure_open_dir_v1(const char *path, uid_t uid, gid_t gid, struct stat *sb, int *error);
 #define sudo_secure_open_dir(_a, _b, _c, _d, _e) sudo_secure_open_dir_v1((_a), (_b), (_c), (_d), (_e))
-sudo_dso_public int sudo_open_conf_path_v1(const char *path, char *name, size_t namesize, int (*fn)(const char *, int));
+sudo_dso_public int sudo_open_conf_path_v1(const char *restrict path, char *restrict name, size_t namesize, int (*fn)(const char *, int));
 #define sudo_open_conf_path(_a, _b, _c, _d) sudo_open_conf_path_v1((_a), (_b), (_c), (_d))
 
 /* setgroups.c */

lib/util/secure_path.c

@@ -165,7 +165,7 @@ sudo_secure_open_dir_v1(const char *path, uid_t uid, gid_t gid,
  * Sets name based on the last file it tried to open, even on error.
  */
 int
-sudo_open_conf_path_v1(const char *path, char *name, size_t namesize,
+sudo_open_conf_path_v1(const char *restrict path, char *restrict name, size_t namesize,
     int (*fn)(const char *, int))
 {
     const char *cp, *ep, *path_end;

lib/util/uuid.c

@@ -100,7 +100,7 @@ sudo_uuid_to_string_v1(const unsigned char uuid[restrict static 16], char * rest
  * Returns 0 on success, -1 if str is not a valid uuid.
  */
 int
-sudo_uuid_from_string_v1(const char *str, unsigned char uuid[static 16])
+sudo_uuid_from_string_v1(const char *str, unsigned char uuid[restrict static 16])
 {
     unsigned int i = 0, j = 0;
     int ch;

plugins/sudoers/toke_util.c

@@ -40,7 +40,7 @@ static size_t arg_size = 0;
  * Requires that dst have at least len + 1 bytes free.
  */
 static void
-copy_string(char *dst, const char *src, size_t len)
+copy_string(char * restrict dst, const char * restrict src, size_t len)
 {
     const char *end = src + len;
     debug_decl(copy_string, SUDOERS_DEBUG_PARSER);