Function xmlShellPwd 

#[unsafe(no_mangle)]
pub unsafe extern "C" fn xmlShellPwd(
    _ctxt: *mut _xmlShellCtxt,
    buffer: *mut c_char,
    node: *mut _xmlNode,
    _node2: *mut _xmlNode,
) -> c_int

int xmlShellPwd(xmlShellCtxtPtr ctxt, char *buffer, xmlNodePtr node, xmlNodePtr node2) — the shell “pwd” command: full path of node into buffer (which must hold at least 500 chars).

SAFETY

• _ctxt, buffer, node, _node2 must be valid pointers (or NULL where the upstream C contract allows), obtained from the matching constructor/owner and not yet freed; the callee may take or keep ownership exactly as the C API specifies.

The caller must not race this call with concurrent mutation of the same objects from other threads (per-object state is not internally synchronized). Violating any of the above is undefined behavior.

Exercised by the C-API differential courts (courts/suites/data-abi/*-family-probe.c) and the CLI differential courts; those pass byte-for-byte against the upstream oracle.