Index: webrtc/base/safe_compare.h |
diff --git a/webrtc/base/safe_compare.h b/webrtc/base/safe_compare.h |
new file mode 100644 |
index 0000000000000000000000000000000000000000..37ddf780c7241a5f55f3e42dc100a7a3a9bb62c2 |
--- /dev/null |
+++ b/webrtc/base/safe_compare.h |
@@ -0,0 +1,180 @@ |
+/* |
+ * Copyright 2016 The WebRTC Project Authors. All rights reserved. |
+ * |
+ * Use of this source code is governed by a BSD-style license |
+ * that can be found in the LICENSE file in the root of the source |
+ * tree. An additional intellectual property rights grant can be found |
+ * in the file PATENTS. All contributing project authors may |
+ * be found in the AUTHORS file in the root of the source tree. |
+ */ |
+ |
+// This file defines six functions: |
+// |
+// rtc::safe_cmp::Eq // == |
+// rtc::safe_cmp::Ne // != |
+// rtc::safe_cmp::Lt // < |
+// rtc::safe_cmp::Le // <= |
+// rtc::safe_cmp::Gt // > |
+// rtc::safe_cmp::Ge // >= |
+// |
+// They each accept two arguments of arbitrary types, and in almost all cases, |
+// they simply call the appropriate comparison operator. However, if both |
+// arguments are integers, they don't compare them using C++'s quirky rules, |
+// but instead adhere to the true mathematical definitions. It is as if the |
+// arguments were first converted to infinite-range signed integers, and then |
+// compared, although of course nothing expensive like that actually takes |
+// place. In practice, for signed/signed and unsigned/unsigned comparisons and |
+// some mixed-signed comparisons with a compile-time constant, the overhead is |
+// zero; in the remaining cases, it is just a few machine instructions (no |
+// branches). |
+ |
+#ifndef WEBRTC_BASE_SAFE_COMPARE_H_ |
+#define WEBRTC_BASE_SAFE_COMPARE_H_ |
+ |
+#include <stddef.h> |
+#include <stdint.h> |
+ |
+#include <type_traits> |
+#include <utility> |
+ |
+namespace rtc { |
+namespace safe_cmp { |
+ |
+namespace safe_cmp_impl { |
+ |
+template <size_t N> |
+struct LargerIntImpl : std::false_type {}; |
+template <> |
+struct LargerIntImpl<sizeof(int8_t)> : std::true_type { |
+ using type = int16_t; |
+}; |
+template <> |
+struct LargerIntImpl<sizeof(int16_t)> : std::true_type { |
+ using type = int32_t; |
+}; |
+template <> |
+struct LargerIntImpl<sizeof(int32_t)> : std::true_type { |
+ using type = int64_t; |
+}; |
+ |
+// LargerInt<T1, T2>::value is true iff there's a signed type that's larger |
+// than T1 (and no larger than the larger of T2 and int*, for performance |
+// reasons); and if there is such a type, LargerInt<T1, T2>::type is an alias |
+// for it. |
+template <typename T1, typename T2> |
+struct LargerInt |
+ : LargerIntImpl<sizeof(T1) < sizeof(T2) || sizeof(T1) < sizeof(int*) |
+ ? sizeof(T1) |
+ : 0> {}; |
+ |
+template <typename T> |
+inline typename std::make_unsigned<T>::type MakeUnsigned(T a) { |
+ return static_cast<typename std::make_unsigned<T>::type>(a); |
+} |
+ |
+// Overload for when both T1 and T2 have the same signedness. |
+template <typename Op, |
+ typename T1, |
+ typename T2, |
+ typename std::enable_if<std::is_signed<T1>::value == |
+ std::is_signed<T2>::value>::type* = nullptr> |
+inline bool Cmp(T1 a, T2 b) { |
+ return Op::Op(a, b); |
+} |
+ |
+// Overload for signed - unsigned comparison that can be promoted to a bigger |
+// signed type. |
+template <typename Op, |
+ typename T1, |
+ typename T2, |
+ typename std::enable_if<std::is_signed<T1>::value && |
+ std::is_unsigned<T2>::value && |
+ LargerInt<T2, T1>::value>::type* = nullptr> |
+inline bool Cmp(T1 a, T2 b) { |
+ return Op::Op(a, static_cast<typename LargerInt<T2, T1>::type>(b)); |
+} |
+ |
+// Overload for unsigned - signed comparison that can be promoted to a bigger |
+// signed type. |
+template <typename Op, |
+ typename T1, |
+ typename T2, |
+ typename std::enable_if<std::is_unsigned<T1>::value && |
+ std::is_signed<T2>::value && |
+ LargerInt<T1, T2>::value>::type* = nullptr> |
+inline bool Cmp(T1 a, T2 b) { |
+ return Op::Op(static_cast<typename LargerInt<T1, T2>::type>(a), b); |
+} |
+ |
+// Overload for signed - unsigned comparison that can't be promoted to a bigger |
+// signed type. |
+template <typename Op, |
+ typename T1, |
+ typename T2, |
+ typename std::enable_if<std::is_signed<T1>::value && |
+ std::is_unsigned<T2>::value && |
+ !LargerInt<T2, T1>::value>::type* = nullptr> |
+inline bool Cmp(T1 a, T2 b) { |
+ return a < 0 ? Op::Op(-1, 0) : Op::Op(safe_cmp_impl::MakeUnsigned(a), b); |
+} |
+ |
+// Overload for unsigned - signed comparison that can't be promoted to a bigger |
+// signed type. |
+template <typename Op, |
+ typename T1, |
+ typename T2, |
+ typename std::enable_if<std::is_unsigned<T1>::value && |
+ std::is_signed<T2>::value && |
+ !LargerInt<T1, T2>::value>::type* = nullptr> |
+inline bool Cmp(T1 a, T2 b) { |
+ return b < 0 ? Op::Op(0, -1) : Op::Op(a, safe_cmp_impl::MakeUnsigned(b)); |
+} |
+ |
+#define RTC_SAFECMP_MAKE_OP(name, op) \ |
+ struct name { \ |
+ template <typename T1, typename T2> \ |
+ static constexpr bool Op(T1 a, T2 b) { \ |
+ return a op b; \ |
+ } \ |
+ }; |
+RTC_SAFECMP_MAKE_OP(EqOp, ==) |
+RTC_SAFECMP_MAKE_OP(NeOp, !=) |
+RTC_SAFECMP_MAKE_OP(LtOp, <) |
+RTC_SAFECMP_MAKE_OP(LeOp, <=) |
+RTC_SAFECMP_MAKE_OP(GtOp, >) |
+RTC_SAFECMP_MAKE_OP(GeOp, >=) |
+#undef RTC_SAFECMP_MAKE_OP |
+ |
+} // namespace safe_cmp_impl |
+ |
+#define RTC_SAFECMP_MAKE_FUN(name) \ |
+ template < \ |
+ typename T1, typename T2, \ |
+ typename std::enable_if< \ |
+ std::is_integral<typename std::remove_reference<T1>::type>::value && \ |
+ std::is_integral<typename std::remove_reference<T2>::type>::value>:: \ |
+ type* = nullptr> \ |
+ inline bool name(T1 a, T2 b) { \ |
+ return safe_cmp_impl::Cmp<safe_cmp_impl::name##Op>(a, b); \ |
+ } \ |
+ template <typename T1, typename T2, \ |
+ typename std::enable_if< \ |
+ !std::is_integral< \ |
+ typename std::remove_reference<T1>::type>::value || \ |
+ !std::is_integral<typename std::remove_reference<T2>::type>:: \ |
+ value>::type* = nullptr> \ |
+ inline bool name(T1&& a, T2&& b) { \ |
+ return safe_cmp_impl::name##Op::Op(a, b); \ |
+ } |
+RTC_SAFECMP_MAKE_FUN(Eq) |
+RTC_SAFECMP_MAKE_FUN(Ne) |
+RTC_SAFECMP_MAKE_FUN(Lt) |
+RTC_SAFECMP_MAKE_FUN(Le) |
+RTC_SAFECMP_MAKE_FUN(Gt) |
+RTC_SAFECMP_MAKE_FUN(Ge) |
+#undef RTC_SAFECMP_MAKE_FUN |
+ |
+} // namespace safe_cmp |
+} // namespace rtc |
+ |
+#endif // WEBRTC_BASE_SAFE_COMPARE_H_ |