OLD | NEW |
| (Empty) |
1 /* | |
2 * Copyright (C) 2011 Apple Inc. All rights reserved. | |
3 * | |
4 * Redistribution and use in source and binary forms, with or without | |
5 * modification, are permitted provided that the following conditions | |
6 * are met: | |
7 * 1. Redistributions of source code must retain the above copyright | |
8 * notice, this list of conditions and the following disclaimer. | |
9 * 2. Redistributions in binary form must reproduce the above copyright | |
10 * notice, this list of conditions and the following disclaimer in the | |
11 * documentation and/or other materials provided with the distribution. | |
12 * | |
13 * THIS SOFTWARE IS PROVIDED BY APPLE INC. ``AS IS'' AND ANY | |
14 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE | |
15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR | |
16 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL APPLE INC. OR | |
17 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, | |
18 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, | |
19 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR | |
20 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY | |
21 * OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT | |
22 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE | |
23 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. | |
24 */ | |
25 | |
26 #ifndef CheckedArithmetic_h | |
27 #define CheckedArithmetic_h | |
28 | |
29 #include <wtf/Assertions.h> | |
30 #include <wtf/EnumClass.h> | |
31 #include <wtf/TypeTraits.h> | |
32 | |
33 #include <limits> | |
34 #include <stdint.h> | |
35 | |
36 /* Checked<T> | |
37 * | |
38 * This class provides a mechanism to perform overflow-safe integer arithmetic | |
39 * without having to manually ensure that you have all the required bounds check
s | |
40 * directly in your code. | |
41 * | |
42 * There are two modes of operation: | |
43 * - The default is Checked<T, CrashOnOverflow>, and crashes at the point | |
44 * and overflow has occurred. | |
45 * - The alternative is Checked<T, RecordOverflow>, which uses an additional | |
46 * byte of storage to track whether an overflow has occurred, subsequent | |
47 * unchecked operations will crash if an overflow has occured | |
48 * | |
49 * It is possible to provide a custom overflow handler, in which case you need | |
50 * to support these functions: | |
51 * - void overflowed(); | |
52 * This function is called when an operation has produced an overflow. | |
53 * - bool hasOverflowed(); | |
54 * This function must return true if overflowed() has been called on an | |
55 * instance and false if it has not. | |
56 * - void clearOverflow(); | |
57 * Used to reset overflow tracking when a value is being overwritten with | |
58 * a new value. | |
59 * | |
60 * Checked<T> works for all integer types, with the following caveats: | |
61 * - Mixing signedness of operands is only supported for types narrower than | |
62 * 64bits. | |
63 * - It does have a performance impact, so tight loops may want to be careful | |
64 * when using it. | |
65 * | |
66 */ | |
67 | |
68 namespace WTF { | |
69 | |
70 ENUM_CLASS(CheckedState) | |
71 { | |
72 DidOverflow, | |
73 DidNotOverflow | |
74 } ENUM_CLASS_END(CheckedState); | |
75 | |
76 class CrashOnOverflow { | |
77 protected: | |
78 NO_RETURN_DUE_TO_CRASH void overflowed() | |
79 { | |
80 CRASH(); | |
81 } | |
82 | |
83 void clearOverflow() { } | |
84 | |
85 public: | |
86 bool hasOverflowed() const { return false; } | |
87 }; | |
88 | |
89 class RecordOverflow { | |
90 protected: | |
91 RecordOverflow() | |
92 : m_overflowed(false) | |
93 { | |
94 } | |
95 | |
96 void overflowed() | |
97 { | |
98 m_overflowed = true; | |
99 } | |
100 | |
101 void clearOverflow() | |
102 { | |
103 m_overflowed = false; | |
104 } | |
105 | |
106 public: | |
107 bool hasOverflowed() const { return m_overflowed; } | |
108 | |
109 private: | |
110 unsigned char m_overflowed; | |
111 }; | |
112 | |
113 template <typename T, class OverflowHandler = CrashOnOverflow> class Checked; | |
114 template <typename T> struct RemoveChecked; | |
115 template <typename T> struct RemoveChecked<Checked<T> >; | |
116 | |
117 template <typename Target, typename Source, bool targetSigned = std::numeric_lim
its<Target>::is_signed, bool sourceSigned = std::numeric_limits<Source>::is_sign
ed> struct BoundsChecker; | |
118 template <typename Target, typename Source> struct BoundsChecker<Target, Source,
false, false> { | |
119 static bool inBounds(Source value) | |
120 { | |
121 // Same signedness so implicit type conversion will always increase prec
ision | |
122 // to widest type | |
123 return value <= std::numeric_limits<Target>::max(); | |
124 } | |
125 }; | |
126 | |
127 template <typename Target, typename Source> struct BoundsChecker<Target, Source,
true, true> { | |
128 static bool inBounds(Source value) | |
129 { | |
130 // Same signedness so implicit type conversion will always increase prec
ision | |
131 // to widest type | |
132 return std::numeric_limits<Target>::min() <= value && value <= std::nume
ric_limits<Target>::max(); | |
133 } | |
134 }; | |
135 | |
136 template <typename Target, typename Source> struct BoundsChecker<Target, Source,
false, true> { | |
137 static bool inBounds(Source value) | |
138 { | |
139 // Target is unsigned so any value less than zero is clearly unsafe | |
140 if (value < 0) | |
141 return false; | |
142 // If our (unsigned) Target is the same or greater width we can | |
143 // convert value to type Target without losing precision | |
144 if (sizeof(Target) >= sizeof(Source)) | |
145 return static_cast<Target>(value) <= std::numeric_limits<Target>::ma
x(); | |
146 // The signed Source type has greater precision than the target so | |
147 // max(Target) -> Source will widen. | |
148 return value <= static_cast<Source>(std::numeric_limits<Target>::max()); | |
149 } | |
150 }; | |
151 | |
152 template <typename Target, typename Source> struct BoundsChecker<Target, Source,
true, false> { | |
153 static bool inBounds(Source value) | |
154 { | |
155 // Signed target with an unsigned source | |
156 if (sizeof(Target) <= sizeof(Source)) | |
157 return value <= static_cast<Source>(std::numeric_limits<Target>::max
()); | |
158 // Target is Wider than Source so we're guaranteed to fit any value in | |
159 // unsigned Source | |
160 return true; | |
161 } | |
162 }; | |
163 | |
164 template <typename Target, typename Source, bool CanElide = IsSameType<Target, S
ource>::value || (sizeof(Target) > sizeof(Source)) > struct BoundsCheckElider; | |
165 template <typename Target, typename Source> struct BoundsCheckElider<Target, Sou
rce, true> { | |
166 static bool inBounds(Source) { return true; } | |
167 }; | |
168 template <typename Target, typename Source> struct BoundsCheckElider<Target, Sou
rce, false> : public BoundsChecker<Target, Source> { | |
169 }; | |
170 | |
171 template <typename Target, typename Source> static inline bool isInBounds(Source
value) | |
172 { | |
173 return BoundsCheckElider<Target, Source>::inBounds(value); | |
174 } | |
175 | |
176 template <typename T> struct RemoveChecked { | |
177 typedef T CleanType; | |
178 static const CleanType DefaultValue = 0; | |
179 }; | |
180 | |
181 template <typename T> struct RemoveChecked<Checked<T, CrashOnOverflow> > { | |
182 typedef typename RemoveChecked<T>::CleanType CleanType; | |
183 static const CleanType DefaultValue = 0; | |
184 }; | |
185 | |
186 template <typename T> struct RemoveChecked<Checked<T, RecordOverflow> > { | |
187 typedef typename RemoveChecked<T>::CleanType CleanType; | |
188 static const CleanType DefaultValue = 0; | |
189 }; | |
190 | |
191 // The ResultBase and SignednessSelector are used to workaround typeof not being | |
192 // available in MSVC | |
193 template <typename U, typename V, bool uIsBigger = (sizeof(U) > sizeof(V)), bool
sameSize = (sizeof(U) == sizeof(V))> struct ResultBase; | |
194 template <typename U, typename V> struct ResultBase<U, V, true, false> { | |
195 typedef U ResultType; | |
196 }; | |
197 | |
198 template <typename U, typename V> struct ResultBase<U, V, false, false> { | |
199 typedef V ResultType; | |
200 }; | |
201 | |
202 template <typename U> struct ResultBase<U, U, false, true> { | |
203 typedef U ResultType; | |
204 }; | |
205 | |
206 template <typename U, typename V, bool uIsSigned = std::numeric_limits<U>::is_si
gned, bool vIsSigned = std::numeric_limits<V>::is_signed> struct SignednessSelec
tor; | |
207 template <typename U, typename V> struct SignednessSelector<U, V, true, true> { | |
208 typedef U ResultType; | |
209 }; | |
210 | |
211 template <typename U, typename V> struct SignednessSelector<U, V, false, false>
{ | |
212 typedef U ResultType; | |
213 }; | |
214 | |
215 template <typename U, typename V> struct SignednessSelector<U, V, true, false> { | |
216 typedef V ResultType; | |
217 }; | |
218 | |
219 template <typename U, typename V> struct SignednessSelector<U, V, false, true> { | |
220 typedef U ResultType; | |
221 }; | |
222 | |
223 template <typename U, typename V> struct ResultBase<U, V, false, true> { | |
224 typedef typename SignednessSelector<U, V>::ResultType ResultType; | |
225 }; | |
226 | |
227 template <typename U, typename V> struct Result : ResultBase<typename RemoveChec
ked<U>::CleanType, typename RemoveChecked<V>::CleanType> { | |
228 }; | |
229 | |
230 template <typename LHS, typename RHS, typename ResultType = typename Result<LHS,
RHS>::ResultType, | |
231 bool lhsSigned = std::numeric_limits<LHS>::is_signed, bool rhsSigned = std::
numeric_limits<RHS>::is_signed> struct ArithmeticOperations; | |
232 | |
233 template <typename LHS, typename RHS, typename ResultType> struct ArithmeticOper
ations<LHS, RHS, ResultType, true, true> { | |
234 // LHS and RHS are signed types | |
235 | |
236 // Helper function | |
237 static inline bool signsMatch(LHS lhs, RHS rhs) | |
238 { | |
239 return (lhs ^ rhs) >= 0; | |
240 } | |
241 | |
242 static inline bool add(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSED_RET
URN | |
243 { | |
244 if (signsMatch(lhs, rhs)) { | |
245 if (lhs >= 0) { | |
246 if ((std::numeric_limits<ResultType>::max() - rhs) < lhs) | |
247 return false; | |
248 } else { | |
249 ResultType temp = lhs - std::numeric_limits<ResultType>::min(); | |
250 if (rhs < -temp) | |
251 return false; | |
252 } | |
253 } // if the signs do not match this operation can't overflow | |
254 result = lhs + rhs; | |
255 return true; | |
256 } | |
257 | |
258 static inline bool sub(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSED_RET
URN | |
259 { | |
260 if (!signsMatch(lhs, rhs)) { | |
261 if (lhs >= 0) { | |
262 if (lhs > std::numeric_limits<ResultType>::max() + rhs) | |
263 return false; | |
264 } else { | |
265 if (rhs > std::numeric_limits<ResultType>::max() + lhs) | |
266 return false; | |
267 } | |
268 } // if the signs match this operation can't overflow | |
269 result = lhs - rhs; | |
270 return true; | |
271 } | |
272 | |
273 static inline bool multiply(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSE
D_RETURN | |
274 { | |
275 if (signsMatch(lhs, rhs)) { | |
276 if (lhs >= 0) { | |
277 if (lhs && (std::numeric_limits<ResultType>::max() / lhs) < rhs) | |
278 return false; | |
279 } else { | |
280 if (static_cast<ResultType>(lhs) == std::numeric_limits<ResultTy
pe>::min() || static_cast<ResultType>(rhs) == std::numeric_limits<ResultType>::m
in()) | |
281 return false; | |
282 if ((std::numeric_limits<ResultType>::max() / -lhs) < -rhs) | |
283 return false; | |
284 } | |
285 } else { | |
286 if (lhs < 0) { | |
287 if (rhs && lhs < (std::numeric_limits<ResultType>::min() / rhs)) | |
288 return false; | |
289 } else { | |
290 if (lhs && rhs < (std::numeric_limits<ResultType>::min() / lhs)) | |
291 return false; | |
292 } | |
293 } | |
294 result = lhs * rhs; | |
295 return true; | |
296 } | |
297 | |
298 static inline bool equals(LHS lhs, RHS rhs) { return lhs == rhs; } | |
299 | |
300 }; | |
301 | |
302 template <typename LHS, typename RHS, typename ResultType> struct ArithmeticOper
ations<LHS, RHS, ResultType, false, false> { | |
303 // LHS and RHS are unsigned types so bounds checks are nice and easy | |
304 static inline bool add(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSED_RET
URN | |
305 { | |
306 ResultType temp = lhs + rhs; | |
307 if (temp < lhs) | |
308 return false; | |
309 result = temp; | |
310 return true; | |
311 } | |
312 | |
313 static inline bool sub(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSED_RET
URN | |
314 { | |
315 ResultType temp = lhs - rhs; | |
316 if (temp > lhs) | |
317 return false; | |
318 result = temp; | |
319 return true; | |
320 } | |
321 | |
322 static inline bool multiply(LHS lhs, RHS rhs, ResultType& result) WARN_UNUSE
D_RETURN | |
323 { | |
324 if (!lhs || !rhs) { | |
325 result = 0; | |
326 return true; | |
327 } | |
328 if (std::numeric_limits<ResultType>::max() / lhs < rhs) | |
329 return false; | |
330 result = lhs * rhs; | |
331 return true; | |
332 } | |
333 | |
334 static inline bool equals(LHS lhs, RHS rhs) { return lhs == rhs; } | |
335 | |
336 }; | |
337 | |
338 template <typename ResultType> struct ArithmeticOperations<int, unsigned, Result
Type, true, false> { | |
339 static inline bool add(int64_t lhs, int64_t rhs, ResultType& result) | |
340 { | |
341 int64_t temp = lhs + rhs; | |
342 if (temp < std::numeric_limits<ResultType>::min()) | |
343 return false; | |
344 if (temp > std::numeric_limits<ResultType>::max()) | |
345 return false; | |
346 result = static_cast<ResultType>(temp); | |
347 return true; | |
348 } | |
349 | |
350 static inline bool sub(int64_t lhs, int64_t rhs, ResultType& result) | |
351 { | |
352 int64_t temp = lhs - rhs; | |
353 if (temp < std::numeric_limits<ResultType>::min()) | |
354 return false; | |
355 if (temp > std::numeric_limits<ResultType>::max()) | |
356 return false; | |
357 result = static_cast<ResultType>(temp); | |
358 return true; | |
359 } | |
360 | |
361 static inline bool multiply(int64_t lhs, int64_t rhs, ResultType& result) | |
362 { | |
363 int64_t temp = lhs * rhs; | |
364 if (temp < std::numeric_limits<ResultType>::min()) | |
365 return false; | |
366 if (temp > std::numeric_limits<ResultType>::max()) | |
367 return false; | |
368 result = static_cast<ResultType>(temp); | |
369 return true; | |
370 } | |
371 | |
372 static inline bool equals(int lhs, unsigned rhs) | |
373 { | |
374 return static_cast<int64_t>(lhs) == static_cast<int64_t>(rhs); | |
375 } | |
376 }; | |
377 | |
378 template <typename ResultType> struct ArithmeticOperations<unsigned, int, Result
Type, false, true> { | |
379 static inline bool add(int64_t lhs, int64_t rhs, ResultType& result) | |
380 { | |
381 return ArithmeticOperations<int, unsigned, ResultType>::add(rhs, lhs, re
sult); | |
382 } | |
383 | |
384 static inline bool sub(int64_t lhs, int64_t rhs, ResultType& result) | |
385 { | |
386 return ArithmeticOperations<int, unsigned, ResultType>::sub(lhs, rhs, re
sult); | |
387 } | |
388 | |
389 static inline bool multiply(int64_t lhs, int64_t rhs, ResultType& result) | |
390 { | |
391 return ArithmeticOperations<int, unsigned, ResultType>::multiply(rhs, lh
s, result); | |
392 } | |
393 | |
394 static inline bool equals(unsigned lhs, int rhs) | |
395 { | |
396 return ArithmeticOperations<int, unsigned, ResultType>::equals(rhs, lhs)
; | |
397 } | |
398 }; | |
399 | |
400 template <typename U, typename V, typename R> static inline bool safeAdd(U lhs,
V rhs, R& result) | |
401 { | |
402 return ArithmeticOperations<U, V, R>::add(lhs, rhs, result); | |
403 } | |
404 | |
405 template <typename U, typename V, typename R> static inline bool safeSub(U lhs,
V rhs, R& result) | |
406 { | |
407 return ArithmeticOperations<U, V, R>::sub(lhs, rhs, result); | |
408 } | |
409 | |
410 template <typename U, typename V, typename R> static inline bool safeMultiply(U
lhs, V rhs, R& result) | |
411 { | |
412 return ArithmeticOperations<U, V, R>::multiply(lhs, rhs, result); | |
413 } | |
414 | |
415 template <typename U, typename V> static inline bool safeEquals(U lhs, V rhs) | |
416 { | |
417 return ArithmeticOperations<U, V>::equals(lhs, rhs); | |
418 } | |
419 | |
420 enum ResultOverflowedTag { ResultOverflowed }; | |
421 | |
422 // FIXME: Needed to workaround http://llvm.org/bugs/show_bug.cgi?id=10801 | |
423 static inline bool workAroundClangBug() { return true; } | |
424 | |
425 template <typename T, class OverflowHandler> class Checked : public OverflowHand
ler { | |
426 public: | |
427 template <typename _T, class _OverflowHandler> friend class Checked; | |
428 Checked() | |
429 : m_value(0) | |
430 { | |
431 } | |
432 | |
433 Checked(ResultOverflowedTag) | |
434 : m_value(0) | |
435 { | |
436 // FIXME: Remove this when clang fixes http://llvm.org/bugs/show_bug.cgi
?id=10801 | |
437 if (workAroundClangBug()) | |
438 this->overflowed(); | |
439 } | |
440 | |
441 template <typename U> Checked(U value) | |
442 { | |
443 if (!isInBounds<T>(value)) | |
444 this->overflowed(); | |
445 m_value = static_cast<T>(value); | |
446 } | |
447 | |
448 template <typename V> Checked(const Checked<T, V>& rhs) | |
449 : m_value(rhs.m_value) | |
450 { | |
451 if (rhs.hasOverflowed()) | |
452 this->overflowed(); | |
453 } | |
454 | |
455 template <typename U> Checked(const Checked<U, OverflowHandler>& rhs) | |
456 : OverflowHandler(rhs) | |
457 { | |
458 if (!isInBounds<T>(rhs.m_value)) | |
459 this->overflowed(); | |
460 m_value = static_cast<T>(rhs.m_value); | |
461 } | |
462 | |
463 template <typename U, typename V> Checked(const Checked<U, V>& rhs) | |
464 { | |
465 if (rhs.hasOverflowed()) | |
466 this->overflowed(); | |
467 if (!isInBounds<T>(rhs.m_value)) | |
468 this->overflowed(); | |
469 m_value = static_cast<T>(rhs.m_value); | |
470 } | |
471 | |
472 const Checked& operator=(Checked rhs) | |
473 { | |
474 this->clearOverflow(); | |
475 if (rhs.hasOverflowed()) | |
476 this->overflowed(); | |
477 m_value = static_cast<T>(rhs.m_value); | |
478 return *this; | |
479 } | |
480 | |
481 template <typename U> const Checked& operator=(U value) | |
482 { | |
483 return *this = Checked(value); | |
484 } | |
485 | |
486 template <typename U, typename V> const Checked& operator=(const Checked<U,
V>& rhs) | |
487 { | |
488 return *this = Checked(rhs); | |
489 } | |
490 | |
491 // prefix | |
492 const Checked& operator++() | |
493 { | |
494 if (m_value == std::numeric_limits<T>::max()) | |
495 this->overflowed(); | |
496 m_value++; | |
497 return *this; | |
498 } | |
499 | |
500 const Checked& operator--() | |
501 { | |
502 if (m_value == std::numeric_limits<T>::min()) | |
503 this->overflowed(); | |
504 m_value--; | |
505 return *this; | |
506 } | |
507 | |
508 // postfix operators | |
509 const Checked operator++(int) | |
510 { | |
511 if (m_value == std::numeric_limits<T>::max()) | |
512 this->overflowed(); | |
513 return Checked(m_value++); | |
514 } | |
515 | |
516 const Checked operator--(int) | |
517 { | |
518 if (m_value == std::numeric_limits<T>::min()) | |
519 this->overflowed(); | |
520 return Checked(m_value--); | |
521 } | |
522 | |
523 // Boolean operators | |
524 bool operator!() const | |
525 { | |
526 if (this->hasOverflowed()) | |
527 CRASH(); | |
528 return !m_value; | |
529 } | |
530 | |
531 typedef void* (Checked::*UnspecifiedBoolType); | |
532 operator UnspecifiedBoolType*() const | |
533 { | |
534 if (this->hasOverflowed()) | |
535 CRASH(); | |
536 return (m_value) ? reinterpret_cast<UnspecifiedBoolType*>(1) : 0; | |
537 } | |
538 | |
539 // Value accessors. unsafeGet() will crash if there's been an overflow. | |
540 T unsafeGet() const | |
541 { | |
542 if (this->hasOverflowed()) | |
543 CRASH(); | |
544 return m_value; | |
545 } | |
546 | |
547 inline CheckedState safeGet(T& value) const WARN_UNUSED_RETURN | |
548 { | |
549 value = m_value; | |
550 if (this->hasOverflowed()) | |
551 return CheckedState::DidOverflow; | |
552 return CheckedState::DidNotOverflow; | |
553 } | |
554 | |
555 // Mutating assignment | |
556 template <typename U> const Checked operator+=(U rhs) | |
557 { | |
558 if (!safeAdd(m_value, rhs, m_value)) | |
559 this->overflowed(); | |
560 return *this; | |
561 } | |
562 | |
563 template <typename U> const Checked operator-=(U rhs) | |
564 { | |
565 if (!safeSub(m_value, rhs, m_value)) | |
566 this->overflowed(); | |
567 return *this; | |
568 } | |
569 | |
570 template <typename U> const Checked operator*=(U rhs) | |
571 { | |
572 if (!safeMultiply(m_value, rhs, m_value)) | |
573 this->overflowed(); | |
574 return *this; | |
575 } | |
576 | |
577 const Checked operator*=(double rhs) | |
578 { | |
579 double result = rhs * m_value; | |
580 // Handle +/- infinity and NaN | |
581 if (!(std::numeric_limits<T>::min() <= result && std::numeric_limits<T>:
:max() >= result)) | |
582 this->overflowed(); | |
583 m_value = (T)result; | |
584 return *this; | |
585 } | |
586 | |
587 const Checked operator*=(float rhs) | |
588 { | |
589 return *this *= (double)rhs; | |
590 } | |
591 | |
592 template <typename U, typename V> const Checked operator+=(Checked<U, V> rhs
) | |
593 { | |
594 if (rhs.hasOverflowed()) | |
595 this->overflowed(); | |
596 return *this += rhs.m_value; | |
597 } | |
598 | |
599 template <typename U, typename V> const Checked operator-=(Checked<U, V> rhs
) | |
600 { | |
601 if (rhs.hasOverflowed()) | |
602 this->overflowed(); | |
603 return *this -= rhs.m_value; | |
604 } | |
605 | |
606 template <typename U, typename V> const Checked operator*=(Checked<U, V> rhs
) | |
607 { | |
608 if (rhs.hasOverflowed()) | |
609 this->overflowed(); | |
610 return *this *= rhs.m_value; | |
611 } | |
612 | |
613 // Equality comparisons | |
614 template <typename V> bool operator==(Checked<T, V> rhs) | |
615 { | |
616 return unsafeGet() == rhs.unsafeGet(); | |
617 } | |
618 | |
619 template <typename U> bool operator==(U rhs) | |
620 { | |
621 if (this->hasOverflowed()) | |
622 this->overflowed(); | |
623 return safeEquals(m_value, rhs); | |
624 } | |
625 | |
626 template <typename U, typename V> const Checked operator==(Checked<U, V> rhs
) | |
627 { | |
628 return unsafeGet() == Checked(rhs.unsafeGet()); | |
629 } | |
630 | |
631 template <typename U> bool operator!=(U rhs) | |
632 { | |
633 return !(*this == rhs); | |
634 } | |
635 | |
636 private: | |
637 // Disallow implicit conversion of floating point to integer types | |
638 Checked(float); | |
639 Checked(double); | |
640 void operator=(float); | |
641 void operator=(double); | |
642 void operator+=(float); | |
643 void operator+=(double); | |
644 void operator-=(float); | |
645 void operator-=(double); | |
646 T m_value; | |
647 }; | |
648 | |
649 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator+(Checked<U, Overf
lowHandler> lhs, Checked<V, OverflowHandler> rhs) | |
650 { | |
651 U x = 0; | |
652 V y = 0; | |
653 bool overflowed = lhs.safeGet(x) == CheckedState::DidOverflow || rhs.safeGet
(y) == CheckedState::DidOverflow; | |
654 typename Result<U, V>::ResultType result = 0; | |
655 overflowed |= !safeAdd(x, y, result); | |
656 if (overflowed) | |
657 return ResultOverflowed; | |
658 return result; | |
659 } | |
660 | |
661 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator-(Checked<U, Overf
lowHandler> lhs, Checked<V, OverflowHandler> rhs) | |
662 { | |
663 U x = 0; | |
664 V y = 0; | |
665 bool overflowed = lhs.safeGet(x) == CheckedState::DidOverflow || rhs.safeGet
(y) == CheckedState::DidOverflow; | |
666 typename Result<U, V>::ResultType result = 0; | |
667 overflowed |= !safeSub(x, y, result); | |
668 if (overflowed) | |
669 return ResultOverflowed; | |
670 return result; | |
671 } | |
672 | |
673 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator*(Checked<U, Overf
lowHandler> lhs, Checked<V, OverflowHandler> rhs) | |
674 { | |
675 U x = 0; | |
676 V y = 0; | |
677 bool overflowed = lhs.safeGet(x) == CheckedState::DidOverflow || rhs.safeGet
(y) == CheckedState::DidOverflow; | |
678 typename Result<U, V>::ResultType result = 0; | |
679 overflowed |= !safeMultiply(x, y, result); | |
680 if (overflowed) | |
681 return ResultOverflowed; | |
682 return result; | |
683 } | |
684 | |
685 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator+(Checked<U, Overf
lowHandler> lhs, V rhs) | |
686 { | |
687 return lhs + Checked<V, OverflowHandler>(rhs); | |
688 } | |
689 | |
690 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator-(Checked<U, Overf
lowHandler> lhs, V rhs) | |
691 { | |
692 return lhs - Checked<V, OverflowHandler>(rhs); | |
693 } | |
694 | |
695 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator*(Checked<U, Overf
lowHandler> lhs, V rhs) | |
696 { | |
697 return lhs * Checked<V, OverflowHandler>(rhs); | |
698 } | |
699 | |
700 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator+(U lhs, Checked<V
, OverflowHandler> rhs) | |
701 { | |
702 return Checked<U, OverflowHandler>(lhs) + rhs; | |
703 } | |
704 | |
705 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator-(U lhs, Checked<V
, OverflowHandler> rhs) | |
706 { | |
707 return Checked<U, OverflowHandler>(lhs) - rhs; | |
708 } | |
709 | |
710 template <typename U, typename V, typename OverflowHandler> static inline Checke
d<typename Result<U, V>::ResultType, OverflowHandler> operator*(U lhs, Checked<V
, OverflowHandler> rhs) | |
711 { | |
712 return Checked<U, OverflowHandler>(lhs) * rhs; | |
713 } | |
714 | |
715 } | |
716 | |
717 using WTF::Checked; | |
718 using WTF::CheckedState; | |
719 using WTF::RecordOverflow; | |
720 | |
721 #endif | |
OLD | NEW |