| Index: webrtc/base/safe_compare.h | 
| diff --git a/webrtc/base/safe_compare.h b/webrtc/base/safe_compare.h | 
| new file mode 100644 | 
| index 0000000000000000000000000000000000000000..37ddf780c7241a5f55f3e42dc100a7a3a9bb62c2 | 
| --- /dev/null | 
| +++ b/webrtc/base/safe_compare.h | 
| @@ -0,0 +1,180 @@ | 
| +/* | 
| + *  Copyright 2016 The WebRTC Project Authors. All rights reserved. | 
| + * | 
| + *  Use of this source code is governed by a BSD-style license | 
| + *  that can be found in the LICENSE file in the root of the source | 
| + *  tree. An additional intellectual property rights grant can be found | 
| + *  in the file PATENTS.  All contributing project authors may | 
| + *  be found in the AUTHORS file in the root of the source tree. | 
| + */ | 
| + | 
| +// This file defines six functions: | 
| +// | 
| +//   rtc::safe_cmp::Eq  // == | 
| +//   rtc::safe_cmp::Ne  // != | 
| +//   rtc::safe_cmp::Lt  // < | 
| +//   rtc::safe_cmp::Le  // <= | 
| +//   rtc::safe_cmp::Gt  // > | 
| +//   rtc::safe_cmp::Ge  // >= | 
| +// | 
| +// They each accept two arguments of arbitrary types, and in almost all cases, | 
| +// they simply call the appropriate comparison operator. However, if both | 
| +// arguments are integers, they don't compare them using C++'s quirky rules, | 
| +// but instead adhere to the true mathematical definitions. It is as if the | 
| +// arguments were first converted to infinite-range signed integers, and then | 
| +// compared, although of course nothing expensive like that actually takes | 
| +// place. In practice, for signed/signed and unsigned/unsigned comparisons and | 
| +// some mixed-signed comparisons with a compile-time constant, the overhead is | 
| +// zero; in the remaining cases, it is just a few machine instructions (no | 
| +// branches). | 
| + | 
| +#ifndef WEBRTC_BASE_SAFE_COMPARE_H_ | 
| +#define WEBRTC_BASE_SAFE_COMPARE_H_ | 
| + | 
| +#include <stddef.h> | 
| +#include <stdint.h> | 
| + | 
| +#include <type_traits> | 
| +#include <utility> | 
| + | 
| +namespace rtc { | 
| +namespace safe_cmp { | 
| + | 
| +namespace safe_cmp_impl { | 
| + | 
| +template <size_t N> | 
| +struct LargerIntImpl : std::false_type {}; | 
| +template <> | 
| +struct LargerIntImpl<sizeof(int8_t)> : std::true_type { | 
| +  using type = int16_t; | 
| +}; | 
| +template <> | 
| +struct LargerIntImpl<sizeof(int16_t)> : std::true_type { | 
| +  using type = int32_t; | 
| +}; | 
| +template <> | 
| +struct LargerIntImpl<sizeof(int32_t)> : std::true_type { | 
| +  using type = int64_t; | 
| +}; | 
| + | 
| +// LargerInt<T1, T2>::value is true iff there's a signed type that's larger | 
| +// than T1 (and no larger than the larger of T2 and int*, for performance | 
| +// reasons); and if there is such a type, LargerInt<T1, T2>::type is an alias | 
| +// for it. | 
| +template <typename T1, typename T2> | 
| +struct LargerInt | 
| +    : LargerIntImpl<sizeof(T1) < sizeof(T2) || sizeof(T1) < sizeof(int*) | 
| +                        ? sizeof(T1) | 
| +                        : 0> {}; | 
| + | 
| +template <typename T> | 
| +inline typename std::make_unsigned<T>::type MakeUnsigned(T a) { | 
| +  return static_cast<typename std::make_unsigned<T>::type>(a); | 
| +} | 
| + | 
| +// Overload for when both T1 and T2 have the same signedness. | 
| +template <typename Op, | 
| +          typename T1, | 
| +          typename T2, | 
| +          typename std::enable_if<std::is_signed<T1>::value == | 
| +                                  std::is_signed<T2>::value>::type* = nullptr> | 
| +inline bool Cmp(T1 a, T2 b) { | 
| +  return Op::Op(a, b); | 
| +} | 
| + | 
| +// Overload for signed - unsigned comparison that can be promoted to a bigger | 
| +// signed type. | 
| +template <typename Op, | 
| +          typename T1, | 
| +          typename T2, | 
| +          typename std::enable_if<std::is_signed<T1>::value && | 
| +                                  std::is_unsigned<T2>::value && | 
| +                                  LargerInt<T2, T1>::value>::type* = nullptr> | 
| +inline bool Cmp(T1 a, T2 b) { | 
| +  return Op::Op(a, static_cast<typename LargerInt<T2, T1>::type>(b)); | 
| +} | 
| + | 
| +// Overload for unsigned - signed comparison that can be promoted to a bigger | 
| +// signed type. | 
| +template <typename Op, | 
| +          typename T1, | 
| +          typename T2, | 
| +          typename std::enable_if<std::is_unsigned<T1>::value && | 
| +                                  std::is_signed<T2>::value && | 
| +                                  LargerInt<T1, T2>::value>::type* = nullptr> | 
| +inline bool Cmp(T1 a, T2 b) { | 
| +  return Op::Op(static_cast<typename LargerInt<T1, T2>::type>(a), b); | 
| +} | 
| + | 
| +// Overload for signed - unsigned comparison that can't be promoted to a bigger | 
| +// signed type. | 
| +template <typename Op, | 
| +          typename T1, | 
| +          typename T2, | 
| +          typename std::enable_if<std::is_signed<T1>::value && | 
| +                                  std::is_unsigned<T2>::value && | 
| +                                  !LargerInt<T2, T1>::value>::type* = nullptr> | 
| +inline bool Cmp(T1 a, T2 b) { | 
| +  return a < 0 ? Op::Op(-1, 0) : Op::Op(safe_cmp_impl::MakeUnsigned(a), b); | 
| +} | 
| + | 
| +// Overload for unsigned - signed comparison that can't be promoted to a bigger | 
| +// signed type. | 
| +template <typename Op, | 
| +          typename T1, | 
| +          typename T2, | 
| +          typename std::enable_if<std::is_unsigned<T1>::value && | 
| +                                  std::is_signed<T2>::value && | 
| +                                  !LargerInt<T1, T2>::value>::type* = nullptr> | 
| +inline bool Cmp(T1 a, T2 b) { | 
| +  return b < 0 ? Op::Op(0, -1) : Op::Op(a, safe_cmp_impl::MakeUnsigned(b)); | 
| +} | 
| + | 
| +#define RTC_SAFECMP_MAKE_OP(name, op)      \ | 
| +  struct name {                            \ | 
| +    template <typename T1, typename T2>    \ | 
| +    static constexpr bool Op(T1 a, T2 b) { \ | 
| +      return a op b;                       \ | 
| +    }                                      \ | 
| +  }; | 
| +RTC_SAFECMP_MAKE_OP(EqOp, ==) | 
| +RTC_SAFECMP_MAKE_OP(NeOp, !=) | 
| +RTC_SAFECMP_MAKE_OP(LtOp, <) | 
| +RTC_SAFECMP_MAKE_OP(LeOp, <=) | 
| +RTC_SAFECMP_MAKE_OP(GtOp, >) | 
| +RTC_SAFECMP_MAKE_OP(GeOp, >=) | 
| +#undef RTC_SAFECMP_MAKE_OP | 
| + | 
| +}  // namespace safe_cmp_impl | 
| + | 
| +#define RTC_SAFECMP_MAKE_FUN(name)                                             \ | 
| +  template <                                                                   \ | 
| +      typename T1, typename T2,                                                \ | 
| +      typename std::enable_if<                                                 \ | 
| +          std::is_integral<typename std::remove_reference<T1>::type>::value && \ | 
| +          std::is_integral<typename std::remove_reference<T2>::type>::value>:: \ | 
| +          type* = nullptr>                                                     \ | 
| +  inline bool name(T1 a, T2 b) {                                               \ | 
| +    return safe_cmp_impl::Cmp<safe_cmp_impl::name##Op>(a, b);                  \ | 
| +  }                                                                            \ | 
| +  template <typename T1, typename T2,                                          \ | 
| +            typename std::enable_if<                                           \ | 
| +                !std::is_integral<                                             \ | 
| +                    typename std::remove_reference<T1>::type>::value ||        \ | 
| +                !std::is_integral<typename std::remove_reference<T2>::type>::  \ | 
| +                    value>::type* = nullptr>                                   \ | 
| +  inline bool name(T1&& a, T2&& b) {                                           \ | 
| +    return safe_cmp_impl::name##Op::Op(a, b);                                  \ | 
| +  } | 
| +RTC_SAFECMP_MAKE_FUN(Eq) | 
| +RTC_SAFECMP_MAKE_FUN(Ne) | 
| +RTC_SAFECMP_MAKE_FUN(Lt) | 
| +RTC_SAFECMP_MAKE_FUN(Le) | 
| +RTC_SAFECMP_MAKE_FUN(Gt) | 
| +RTC_SAFECMP_MAKE_FUN(Ge) | 
| +#undef RTC_SAFECMP_MAKE_FUN | 
| + | 
| +}  // namespace safe_cmp | 
| +}  // namespace rtc | 
| + | 
| +#endif  // WEBRTC_BASE_SAFE_COMPARE_H_ | 
|  |