ade8521657
Change-Id: I665f6c2f94b6c03d6fb5136fff3054ad6f0ca962
193 lines
5.3 KiB
C++
193 lines
5.3 KiB
C++
/* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4 -*- */
|
|
/*
|
|
* This file is part of the LibreOffice project.
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/.
|
|
*/
|
|
|
|
#ifndef INCLUDED_O3TL_SAFEINT_HXX
|
|
#define INCLUDED_O3TL_SAFEINT_HXX
|
|
|
|
#include <sal/config.h>
|
|
|
|
#include <limits>
|
|
#include <type_traits>
|
|
|
|
#if defined(_MSC_VER)
|
|
#include <safeint.h>
|
|
#else
|
|
#ifndef __has_builtin
|
|
# define __has_builtin(x) 0
|
|
#endif
|
|
#endif
|
|
|
|
namespace o3tl
|
|
{
|
|
|
|
template<typename T> inline
|
|
typename std::enable_if<std::is_signed<T>::value, T>::type saturating_add(
|
|
T a, T b)
|
|
{
|
|
if (b >= 0) {
|
|
if (a <= std::numeric_limits<T>::max() - b) {
|
|
return a + b;
|
|
} else {
|
|
return std::numeric_limits<T>::max();
|
|
}
|
|
} else {
|
|
if (a >= std::numeric_limits<T>::min() - b) {
|
|
return a + b;
|
|
} else {
|
|
return std::numeric_limits<T>::min();
|
|
}
|
|
}
|
|
}
|
|
|
|
template<typename T> inline
|
|
typename std::enable_if<std::is_unsigned<T>::value, T>::type saturating_add(
|
|
T a, T b)
|
|
{
|
|
if (a <= std::numeric_limits<T>::max() - b) {
|
|
return a + b;
|
|
} else {
|
|
return std::numeric_limits<T>::max();
|
|
}
|
|
}
|
|
|
|
#if defined(_MSC_VER)
|
|
|
|
template<typename T> inline bool checked_multiply(T a, T b, T& result)
|
|
{
|
|
return !msl::utilities::SafeMultiply(a, b, result);
|
|
}
|
|
|
|
template<typename T> inline bool checked_add(T a, T b, T& result)
|
|
{
|
|
return !msl::utilities::SafeAdd(a, b, result);
|
|
}
|
|
|
|
template<typename T> inline bool checked_sub(T a, T b, T& result)
|
|
{
|
|
return !msl::utilities::SafeSubtract(a, b, result);
|
|
}
|
|
|
|
#elif (defined __GNUC__ && __GNUC__ >= 5) || (__has_builtin(__builtin_mul_overflow) && !(defined ANDROID && defined __clang__))
|
|
|
|
template<typename T> inline bool checked_multiply(T a, T b, T& result)
|
|
{
|
|
return __builtin_mul_overflow(a, b, &result);
|
|
}
|
|
|
|
template<typename T> inline bool checked_add(T a, T b, T& result)
|
|
{
|
|
return __builtin_add_overflow(a, b, &result);
|
|
}
|
|
|
|
template<typename T> inline bool checked_sub(T a, T b, T& result)
|
|
{
|
|
return __builtin_sub_overflow(a, b, &result);
|
|
}
|
|
|
|
#else
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT32-C.+Ensure+that+operations+on+signed+integers+do+not+result+in+overflow
|
|
template<typename T> inline typename std::enable_if<std::is_signed<T>::value, bool>::type checked_multiply(T a, T b, T& result)
|
|
{
|
|
if (a > 0) { /* a is positive */
|
|
if (b > 0) { /* a and b are positive */
|
|
if (a > (std::numeric_limits<T>::max() / b)) {
|
|
return true; /* Handle error */
|
|
}
|
|
} else { /* a positive, b nonpositive */
|
|
if (b < (std::numeric_limits<T>::min() / a)) {
|
|
return true; /* Handle error */
|
|
}
|
|
} /* a positive, b nonpositive */
|
|
} else { /* a is nonpositive */
|
|
if (b > 0) { /* a is nonpositive, b is positive */
|
|
if (a < (std::numeric_limits<T>::min() / b)) {
|
|
return true; /* Handle error */
|
|
}
|
|
} else { /* a and b are nonpositive */
|
|
if ( (a != 0) && (b < (std::numeric_limits<T>::max() / a))) {
|
|
return true; /* Handle error */
|
|
}
|
|
} /* End if a and b are nonpositive */
|
|
} /* End if a is nonpositive */
|
|
|
|
result = a * b;
|
|
|
|
return false;
|
|
}
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT30-C.+Ensure+that+unsigned+integer+operations+do+not+wrap
|
|
template<typename T> inline typename std::enable_if<std::is_unsigned<T>::value, bool>::type checked_multiply(T a, T b, T& result)
|
|
{
|
|
if (b && a > std::numeric_limits<T>::max() / b) {
|
|
return true;/* Handle error */
|
|
}
|
|
|
|
result = a * b;
|
|
|
|
return false;
|
|
}
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT32-C.+Ensure+that+operations+on+signed+integers+do+not+result+in+overflow
|
|
template<typename T> inline typename std::enable_if<std::is_signed<T>::value, bool>::type checked_add(T a, T b, T& result)
|
|
{
|
|
if (((b > 0) && (a > (std::numeric_limits<T>::max() - b))) ||
|
|
((b < 0) && (a < (std::numeric_limits<T>::min() - b)))) {
|
|
return true;
|
|
}
|
|
|
|
result = a + b;
|
|
|
|
return false;
|
|
}
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT30-C.+Ensure+that+unsigned+integer+operations+do+not+wrap
|
|
template<typename T> inline typename std::enable_if<std::is_unsigned<T>::value, bool>::type checked_add(T a, T b, T& result)
|
|
{
|
|
if (std::numeric_limits<T>::max() - a < b) {
|
|
return true;/* Handle error */
|
|
}
|
|
|
|
result = a + b;
|
|
|
|
return false;
|
|
}
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT32-C.+Ensure+that+operations+on+signed+integers+do+not+result+in+overflow
|
|
template<typename T> inline typename std::enable_if<std::is_signed<T>::value, bool>::type checked_sub(T a, T b, T& result)
|
|
{
|
|
if ((b > 0 && a < std::numeric_limits<T>::min() + b) ||
|
|
(b < 0 && a > std::numeric_limits<T>::max() + b)) {
|
|
return true;
|
|
}
|
|
|
|
result = a - b;
|
|
|
|
return false;
|
|
}
|
|
|
|
//https://www.securecoding.cert.org/confluence/display/c/INT30-C.+Ensure+that+unsigned+integer+operations+do+not+wrap
|
|
template<typename T> inline typename std::enable_if<std::is_unsigned<T>::value, bool>::type checked_sub(T a, T b, T& result)
|
|
{
|
|
if (a < b) {
|
|
return true;
|
|
}
|
|
|
|
result = a - b;
|
|
|
|
return false;
|
|
}
|
|
|
|
#endif
|
|
|
|
}
|
|
|
|
#endif
|
|
|
|
/* vim:set shiftwidth=4 softtabstop=4 expandtab: */
|