cc: Fix BytesPerPixel issue and refactor.

cc/resources/resource_util.h

+// Copyright 2015 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#ifndef CC_RESOURCES_RESOURCE_UTIL_H_
+#define CC_RESOURCES_RESOURCE_UTIL_H_
+
+#include "cc/base/cc_export.h"
+#include "cc/resources/resource_format.h"
+#include "ui/gfx/geometry/size.h"
+
+namespace cc {
+
+class CC_EXPORT ResourceUtil {
+ public:
+  // Dies with a CRASH() if the size can not be represented as a positive number
+  // of bytes.
+  static int CheckedSizeInBytes(const gfx::Size& size, ResourceFormat format);

[vmpstr, 2015/07/22 18:05:55]

It's a bit awkward that the Checked version returns an int and an Unchecked one
returns a size_t. Can you do one of the following options:

1. Make everything be size_t, at the call site where you want an int, do a
CHECK_LE(result, static_cast<size_t>(std::numeric_limits<int>::max()));
followed by a static_cast to int. 

or

2. Make these functions be templated, so the use would be

ResourceUtil::CheckedInBytes<int>(...);
and
ResourceUtil::CheckedInBytes<size_t>(...);

[prashant.n, 2015/07/23 05:27:10]

I thought of adding following code; but it has a drawback that if sizeof(T) >
sizeof(size_t) there will be truncation. But considering resource sizes, it may
not go beyond sizeof(unsigned int) i.e. 4 bytes unsigned data. So there will not
be problem. If this is okay, I'll add following code, otherwise we can have
CheckedSizeInBytes itself as a templated as discussed in your point 2. Do let me
know your opinion on this.

  
static size_t CheckedSizeInBytes(const gfx::Size& size,
                                   ResourceFormat format);  
static T CheckedSizeInBytes(const gfx::Size& size, ResourceFormat format) {
  static_assert(std::numeric_limits<T>::is_integer,
                    "T must be an integer type");
  size_t bytes = CheckedSizeInBytes(size, format);
  CHECK_LE(bytes, static_cast<size_t>(std::numeric_limits<T>::max()));
  return static_cast<T>(bytes);
}

[vmpstr, 2015/07/23 17:56:27]

What about the following?

template <typename T>
T ResourceUtil::CheckedSizeInBytes(const gfx::Size& size,
                                   ResourceFormat format) {
  DCHECK(VerifySizeInBytes<T>(size, format));
  base::CheckedNumeric<T> checked_value = BitsPerPixel(format);
  checked_value *= size.width();
  checked_value *= size.height();
  checked_value /= 8;
  return checked_value.ValueOrDie();
}

Would that work?

+  // Returns the width in bytes but may overflow or return 0. Only do this for
+  // computing widths for sizes that have already been checked.
+  static size_t UncheckedWidthInBytes(size_t width, ResourceFormat format);
+  static size_t UncheckedWidthInBytesAligned(size_t width,
+                                             ResourceFormat format);
+  // Returns the size in bytes but may overflow or return 0. Only do this for
+  // sizes that have already been checked.
+  static size_t UncheckedSizeInBytes(const gfx::Size& size,
+                                     ResourceFormat format);
+  static size_t UncheckedSizeInBytesAligned(const gfx::Size& size,
+                                            ResourceFormat format);
+  // Return true if the call to size in bytes would return a value that fits in
+  // a size_t.
+  static bool VerifySizeInBytes(const gfx::Size& size, ResourceFormat format);
+
+ private:
+  DISALLOW_COPY_AND_ASSIGN(ResourceUtil);
+};
+
+}  // namespace cc
+
+#endif  // CC_RESOURCES_RESOURCE_UTIL_H_