| Index: webrtc/base/safe_conversions_impl.h
|
| diff --git a/webrtc/base/safe_conversions_impl.h b/webrtc/base/safe_conversions_impl.h
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..52e52eff82372d106723d26c345b531f3ae6efd1
|
| --- /dev/null
|
| +++ b/webrtc/base/safe_conversions_impl.h
|
| @@ -0,0 +1,188 @@
|
| +/*
|
| + * Copyright 2014 The WebRTC Project Authors. All rights reserved.
|
| + *
|
| + * Use of this source code is governed by a BSD-style license
|
| + * that can be found in the LICENSE file in the root of the source
|
| + * tree. An additional intellectual property rights grant can be found
|
| + * in the file PATENTS. All contributing project authors may
|
| + * be found in the AUTHORS file in the root of the source tree.
|
| + */
|
| +
|
| +// Borrowed from Chromium's src/base/numerics/safe_conversions_impl.h.
|
| +
|
| +#ifndef WEBRTC_BASE_SAFE_CONVERSIONS_IMPL_H_
|
| +#define WEBRTC_BASE_SAFE_CONVERSIONS_IMPL_H_
|
| +
|
| +#include <limits>
|
| +
|
| +namespace rtc {
|
| +namespace internal {
|
| +
|
| +enum DstSign {
|
| + DST_UNSIGNED,
|
| + DST_SIGNED
|
| +};
|
| +
|
| +enum SrcSign {
|
| + SRC_UNSIGNED,
|
| + SRC_SIGNED
|
| +};
|
| +
|
| +enum DstRange {
|
| + OVERLAPS_RANGE,
|
| + CONTAINS_RANGE
|
| +};
|
| +
|
| +// Helper templates to statically determine if our destination type can contain
|
| +// all values represented by the source type.
|
| +
|
| +template <typename Dst, typename Src,
|
| + DstSign IsDstSigned = std::numeric_limits<Dst>::is_signed ?
|
| + DST_SIGNED : DST_UNSIGNED,
|
| + SrcSign IsSrcSigned = std::numeric_limits<Src>::is_signed ?
|
| + SRC_SIGNED : SRC_UNSIGNED>
|
| +struct StaticRangeCheck {};
|
| +
|
| +template <typename Dst, typename Src>
|
| +struct StaticRangeCheck<Dst, Src, DST_SIGNED, SRC_SIGNED> {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + typedef std::numeric_limits<Src> SrcLimits;
|
| + // Compare based on max_exponent, which we must compute for integrals.
|
| + static const size_t kDstMaxExponent = DstLimits::is_iec559 ?
|
| + DstLimits::max_exponent :
|
| + (sizeof(Dst) * 8 - 1);
|
| + static const size_t kSrcMaxExponent = SrcLimits::is_iec559 ?
|
| + SrcLimits::max_exponent :
|
| + (sizeof(Src) * 8 - 1);
|
| + static const DstRange value = kDstMaxExponent >= kSrcMaxExponent ?
|
| + CONTAINS_RANGE : OVERLAPS_RANGE;
|
| +};
|
| +
|
| +template <typename Dst, typename Src>
|
| +struct StaticRangeCheck<Dst, Src, DST_UNSIGNED, SRC_UNSIGNED> {
|
| + static const DstRange value = sizeof(Dst) >= sizeof(Src) ?
|
| + CONTAINS_RANGE : OVERLAPS_RANGE;
|
| +};
|
| +
|
| +template <typename Dst, typename Src>
|
| +struct StaticRangeCheck<Dst, Src, DST_SIGNED, SRC_UNSIGNED> {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + typedef std::numeric_limits<Src> SrcLimits;
|
| + // Compare based on max_exponent, which we must compute for integrals.
|
| + static const size_t kDstMaxExponent = DstLimits::is_iec559 ?
|
| + DstLimits::max_exponent :
|
| + (sizeof(Dst) * 8 - 1);
|
| + static const size_t kSrcMaxExponent = sizeof(Src) * 8;
|
| + static const DstRange value = kDstMaxExponent >= kSrcMaxExponent ?
|
| + CONTAINS_RANGE : OVERLAPS_RANGE;
|
| +};
|
| +
|
| +template <typename Dst, typename Src>
|
| +struct StaticRangeCheck<Dst, Src, DST_UNSIGNED, SRC_SIGNED> {
|
| + static const DstRange value = OVERLAPS_RANGE;
|
| +};
|
| +
|
| +
|
| +enum RangeCheckResult {
|
| + TYPE_VALID = 0, // Value can be represented by the destination type.
|
| + TYPE_UNDERFLOW = 1, // Value would overflow.
|
| + TYPE_OVERFLOW = 2, // Value would underflow.
|
| + TYPE_INVALID = 3 // Source value is invalid (i.e. NaN).
|
| +};
|
| +
|
| +// This macro creates a RangeCheckResult from an upper and lower bound
|
| +// check by taking advantage of the fact that only NaN can be out of range in
|
| +// both directions at once.
|
| +#define BASE_NUMERIC_RANGE_CHECK_RESULT(is_in_upper_bound, is_in_lower_bound) \
|
| + RangeCheckResult(((is_in_upper_bound) ? 0 : TYPE_OVERFLOW) | \
|
| + ((is_in_lower_bound) ? 0 : TYPE_UNDERFLOW))
|
| +
|
| +template <typename Dst,
|
| + typename Src,
|
| + DstSign IsDstSigned = std::numeric_limits<Dst>::is_signed ?
|
| + DST_SIGNED : DST_UNSIGNED,
|
| + SrcSign IsSrcSigned = std::numeric_limits<Src>::is_signed ?
|
| + SRC_SIGNED : SRC_UNSIGNED,
|
| + DstRange IsSrcRangeContained = StaticRangeCheck<Dst, Src>::value>
|
| +struct RangeCheckImpl {};
|
| +
|
| +// The following templates are for ranges that must be verified at runtime. We
|
| +// split it into checks based on signedness to avoid confusing casts and
|
| +// compiler warnings on signed an unsigned comparisons.
|
| +
|
| +// Dst range always contains the result: nothing to check.
|
| +template <typename Dst, typename Src, DstSign IsDstSigned, SrcSign IsSrcSigned>
|
| +struct RangeCheckImpl<Dst, Src, IsDstSigned, IsSrcSigned, CONTAINS_RANGE> {
|
| + static RangeCheckResult Check(Src value) {
|
| + return TYPE_VALID;
|
| + }
|
| +};
|
| +
|
| +// Signed to signed narrowing.
|
| +template <typename Dst, typename Src>
|
| +struct RangeCheckImpl<Dst, Src, DST_SIGNED, SRC_SIGNED, OVERLAPS_RANGE> {
|
| + static RangeCheckResult Check(Src value) {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + return DstLimits::is_iec559 ?
|
| + BASE_NUMERIC_RANGE_CHECK_RESULT(
|
| + value <= static_cast<Src>(DstLimits::max()),
|
| + value >= static_cast<Src>(DstLimits::max() * -1)) :
|
| + BASE_NUMERIC_RANGE_CHECK_RESULT(
|
| + value <= static_cast<Src>(DstLimits::max()),
|
| + value >= static_cast<Src>(DstLimits::min()));
|
| + }
|
| +};
|
| +
|
| +// Unsigned to unsigned narrowing.
|
| +template <typename Dst, typename Src>
|
| +struct RangeCheckImpl<Dst, Src, DST_UNSIGNED, SRC_UNSIGNED, OVERLAPS_RANGE> {
|
| + static RangeCheckResult Check(Src value) {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + return BASE_NUMERIC_RANGE_CHECK_RESULT(
|
| + value <= static_cast<Src>(DstLimits::max()), true);
|
| + }
|
| +};
|
| +
|
| +// Unsigned to signed.
|
| +template <typename Dst, typename Src>
|
| +struct RangeCheckImpl<Dst, Src, DST_SIGNED, SRC_UNSIGNED, OVERLAPS_RANGE> {
|
| + static RangeCheckResult Check(Src value) {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + return sizeof(Dst) > sizeof(Src) ? TYPE_VALID :
|
| + BASE_NUMERIC_RANGE_CHECK_RESULT(
|
| + value <= static_cast<Src>(DstLimits::max()), true);
|
| + }
|
| +};
|
| +
|
| +// Signed to unsigned.
|
| +template <typename Dst, typename Src>
|
| +struct RangeCheckImpl<Dst, Src, DST_UNSIGNED, SRC_SIGNED, OVERLAPS_RANGE> {
|
| + static RangeCheckResult Check(Src value) {
|
| + typedef std::numeric_limits<Dst> DstLimits;
|
| + typedef std::numeric_limits<Src> SrcLimits;
|
| + // Compare based on max_exponent, which we must compute for integrals.
|
| + static const size_t kDstMaxExponent = sizeof(Dst) * 8;
|
| + static const size_t kSrcMaxExponent = SrcLimits::is_iec559 ?
|
| + SrcLimits::max_exponent :
|
| + (sizeof(Src) * 8 - 1);
|
| + return (kDstMaxExponent >= kSrcMaxExponent) ?
|
| + BASE_NUMERIC_RANGE_CHECK_RESULT(true, value >= static_cast<Src>(0)) :
|
| + BASE_NUMERIC_RANGE_CHECK_RESULT(
|
| + value <= static_cast<Src>(DstLimits::max()),
|
| + value >= static_cast<Src>(0));
|
| + }
|
| +};
|
| +
|
| +template <typename Dst, typename Src>
|
| +inline RangeCheckResult RangeCheck(Src value) {
|
| + static_assert(std::numeric_limits<Src>::is_specialized,
|
| + "argument must be numeric");
|
| + static_assert(std::numeric_limits<Dst>::is_specialized,
|
| + "result must be numeric");
|
| + return RangeCheckImpl<Dst, Src>::Check(value);
|
| +}
|
| +
|
| +} // namespace internal
|
| +} // namespace rtc
|
| +
|
| +#endif // WEBRTC_BASE_SAFE_CONVERSIONS_IMPL_H_
|
|
|