| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2016 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 // Blacklisted typedefs | |
| 6 typedef __INTMAX_TYPE__ intmax_t; | |
| 7 typedef __UINTMAX_TYPE__ uintmax_t; | |
| 8 typedef int intptr_t; | |
| 9 typedef unsigned int uintptr_t; | |
| 10 typedef __WINT_TYPE__ wint_t; | |
| 11 typedef __SIZE_TYPE__ size_t; | |
| 12 typedef __SIZE_TYPE__ rsize_t; | |
| 13 typedef long ssize_t; | |
| 14 typedef __PTRDIFF_TYPE__ ptrdiff_t; | |
| 15 typedef unsigned int dev_t; | |
| 16 typedef int off_t; | |
| 17 typedef long clock_t; | |
| 18 typedef int time_t; | |
| 19 typedef long suseconds_t; | |
| 20 | |
| 21 // Other typedefs | |
| 22 typedef int int32_t; | |
| 23 typedef unsigned int uint32_t; | |
| 24 typedef long int64_t; | |
| 25 typedef unsigned long uint64_t; | |
| 26 | |
| 27 namespace std { | |
| 28 | |
| 29 template <class T> | |
| 30 struct allocator {}; | |
| 31 | |
| 32 template <class T, class A = allocator<T>> | |
| 33 struct vector {}; | |
| 34 | |
| 35 template <class F, class S> | |
| 36 struct pair {}; | |
| 37 | |
| 38 } // namespace std | |
| 39 | |
| 40 namespace base { | |
| 41 | |
| 42 class Pickle {}; | |
| 43 | |
| 44 template <class T, class... Ts> | |
| 45 struct Tuple { | |
| 46 T value; | |
| 47 }; | |
| 48 | |
| 49 } // namespace base | |
| 50 | |
| 51 namespace IPC { | |
| 52 | |
| 53 template <class... T> | |
| 54 struct CheckedTuple { | |
| 55 typedef base::Tuple<T...> Tuple; | |
| 56 }; | |
| 57 | |
| 58 template <class T> | |
| 59 struct ParamTraits { | |
| 60 static void Write(base::Pickle*, const T&) {} | |
| 61 }; | |
| 62 | |
| 63 template <class T> | |
| 64 void WriteParam(base::Pickle* pickle, const T& value) { | |
| 65 ParamTraits<T>::Write(pickle, value); | |
| 66 } | |
| 67 | |
| 68 } // namespace IPC | |
| 69 | |
| 70 | |
| 71 /* Test IPC::WriteParam() usage in templates. ERRORS: 6 */ | |
| 72 | |
| 73 struct Data { | |
| 74 uint32_t value; | |
| 75 size_t size; | |
| 76 }; | |
| 77 | |
| 78 template <> | |
| 79 struct IPC::ParamTraits<Data> { | |
| 80 static void Write(base::Pickle* pickle, const Data& p) { | |
| 81 // OK: WriteParam() called in explicit specialization | |
| 82 WriteParam(pickle, p.value); // OK | |
| 83 WriteParam(pickle, p.size); // ERROR | |
| 84 } | |
| 85 }; | |
| 86 | |
| 87 template <class T> | |
| 88 struct Container { | |
| 89 T value; | |
| 90 }; | |
| 91 | |
| 92 template <class T> | |
| 93 struct IPC::ParamTraits<Container<T>> { | |
| 94 static void Write(base::Pickle* pickle, const Container<T>& container) { | |
| 95 // NOT CHECKED: T is not explicitly referenced | |
| 96 IPC::WriteParam(pickle, container.value); // NOT CHECKED | |
| 97 WriteParam(pickle, container.value); // NOT CHECKED | |
| 98 | |
| 99 // NOT CHECKED: T explicitly referenced | |
| 100 IPC::WriteParam<T>(pickle, container.value); // NOT CHECKED | |
| 101 WriteParam<T>(pickle, container.value); // NOT CHECKED | |
| 102 | |
| 103 // OK: explicit cast to non-dependent allowed type | |
| 104 WriteParam(pickle, static_cast<uint32_t>(container.value)); // OK | |
| 105 | |
| 106 // ERROR: explicit cast to non-dependent banned type | |
| 107 WriteParam(pickle, static_cast<long>(container.value)); // ERROR | |
| 108 } | |
| 109 }; | |
| 110 | |
| 111 template <class T, class... Ts> | |
| 112 struct MultiContainer { | |
| 113 T value; | |
| 114 }; | |
| 115 | |
| 116 template <class T, class... Ts> | |
| 117 struct IPC::ParamTraits<MultiContainer<T, Ts...>> { | |
| 118 static void Write(base::Pickle* pickle, | |
| 119 const MultiContainer<T, Ts...>& container) { | |
| 120 // NOT CHECKED: template argument explicitly referenced | |
| 121 bool helper[] = { | |
| 122 (WriteParam<Ts>(pickle, container.value), true)... // NOT CHECKED | |
| 123 }; | |
| 124 (void)helper; | |
| 125 } | |
| 126 }; | |
| 127 | |
| 128 template <class T> | |
| 129 struct SomeClass { | |
| 130 static void Write(base::Pickle* pickle) { | |
| 131 // NOT CHECKED: WriteParam() calls on dependent types | |
| 132 IPC::WriteParam(pickle, T(0)); // NOT CHECKED | |
| 133 | |
| 134 // Non-dependent types are checked | |
| 135 IPC::WriteParam(pickle, size_t(0)); // ERROR | |
| 136 IPC::WriteParam(pickle, uint64_t(0)); // OK | |
| 137 } | |
| 138 | |
| 139 template <class U> | |
| 140 static void WriteEx(base::Pickle* pickle) { | |
| 141 // NOT CHECKED: WriteParam() calls on dependent types | |
| 142 IPC::WriteParam(pickle, U(0)); // NOT CHECKED | |
| 143 | |
| 144 // Non-dependent types are checked | |
| 145 IPC::WriteParam(pickle, time_t(0)); // ERROR | |
| 146 IPC::WriteParam(pickle, uint32_t(0)); // OK | |
| 147 } | |
| 148 }; | |
| 149 | |
| 150 template <class T> | |
| 151 void SomeWriteFunction(base::Pickle* pickle) { | |
| 152 // NOT CHECKED: WriteParam() calls on dependent types | |
| 153 IPC::WriteParam(pickle, T(0)); // NOT CHECKED | |
| 154 | |
| 155 // Non-dependent types are checked | |
| 156 IPC::WriteParam(pickle, long(0)); // ERROR | |
| 157 IPC::WriteParam(pickle, char(0)); // OK | |
| 158 | |
| 159 [&](){ | |
| 160 IPC::WriteParam(pickle, T(0)); // NOT CHECKED | |
| 161 | |
| 162 IPC::WriteParam(pickle, clock_t(0)); // ERROR | |
| 163 IPC::WriteParam(pickle, int64_t(0)); // OK | |
| 164 }(); | |
| 165 } | |
| 166 | |
| 167 void TestWriteParamInTemplates() { | |
| 168 // These specializations call WriteParam() on various banned types, either | |
| 169 // because they were specified directly (long) or because non-blacklisted | |
| 170 // typedef (uint64_t) was stripped down to its underlying type, which is | |
| 171 // blacklisted when used as is (unsigned long). | |
| 172 // However, since it's hard (if not impossible) to check specializations | |
| 173 // properly, we're simply not checking them. | |
| 174 SomeClass<long>::Write(nullptr); | |
| 175 SomeClass<long>::WriteEx<uint64_t>(nullptr); | |
| 176 SomeWriteFunction<uint64_t>(nullptr); | |
| 177 } | |
| 178 | |
| 179 | |
| 180 /* Test IPC::CheckedTuple. ERRORS: 5 */ | |
| 181 | |
| 182 #define IPC_TUPLE(...) IPC::CheckedTuple<__VA_ARGS__>::Tuple | |
| 183 | |
| 184 #define IPC_MESSAGE_DECL(name, id, in_tuple) \ | |
| 185 struct name ## Meta_ ## id { \ | |
| 186 using InTuple = in_tuple; \ | |
| 187 }; | |
| 188 | |
| 189 #define IPC_TEST_MESSAGE(id, in) \ | |
| 190 IPC_MESSAGE_DECL(TestMessage, id, IPC_TUPLE in) | |
| 191 | |
| 192 struct Empty {}; | |
| 193 | |
| 194 IPC_TEST_MESSAGE(__COUNTER__, (bool, size_t, Empty, long)) // 2 ERRORs | |
| 195 | |
| 196 typedef std::vector<long> long1D; | |
| 197 typedef std::vector<long1D> long2D; | |
| 198 IPC_TEST_MESSAGE(__COUNTER__, (bool, long2D)) // ERROR | |
| 199 | |
| 200 IPC_TEST_MESSAGE(__COUNTER__, (char, short, std::pair<size_t, bool>)) // ERROR | |
| 201 | |
| 202 IPC_TEST_MESSAGE(__COUNTER__, (std::vector<std::vector<long&>&>&)) // ERROR | |
| 203 | |
| 204 | |
| 205 /* Check IPC::WriteParam() arguments. ERRORS: 31 */ | |
| 206 | |
| 207 // ERRORS: 21 | |
| 208 void TestWriteParamArgument() { | |
| 209 #define CALL_WRITEPARAM(Type) \ | |
| 210 { \ | |
| 211 Type p; \ | |
| 212 IPC::WriteParam(nullptr, p); \ | |
| 213 } | |
| 214 | |
| 215 // ERROR: blacklisted types / typedefs | |
| 216 CALL_WRITEPARAM(long) // ERROR | |
| 217 CALL_WRITEPARAM(unsigned long) // ERROR | |
| 218 CALL_WRITEPARAM(intmax_t) // ERROR | |
| 219 CALL_WRITEPARAM(uintmax_t) // ERROR | |
| 220 CALL_WRITEPARAM(intptr_t) // ERROR | |
| 221 CALL_WRITEPARAM(uintptr_t) // ERROR | |
| 222 CALL_WRITEPARAM(wint_t) // ERROR | |
| 223 CALL_WRITEPARAM(size_t) // ERROR | |
| 224 CALL_WRITEPARAM(rsize_t) // ERROR | |
| 225 CALL_WRITEPARAM(ssize_t) // ERROR | |
| 226 CALL_WRITEPARAM(ptrdiff_t) // ERROR | |
| 227 CALL_WRITEPARAM(dev_t) // ERROR | |
| 228 CALL_WRITEPARAM(off_t) // ERROR | |
| 229 CALL_WRITEPARAM(clock_t) // ERROR | |
| 230 CALL_WRITEPARAM(time_t) // ERROR | |
| 231 CALL_WRITEPARAM(suseconds_t) // ERROR | |
| 232 | |
| 233 // ERROR: typedef to blacklisted typedef | |
| 234 typedef size_t my_size; | |
| 235 CALL_WRITEPARAM(my_size) // ERROR | |
| 236 | |
| 237 // ERROR: expression ends up with type "unsigned long" | |
| 238 { | |
| 239 uint64_t p = 0; | |
| 240 IPC::WriteParam(nullptr, p + 1); // ERROR | |
| 241 } | |
| 242 | |
| 243 // ERROR: long chain of typedefs, ends up with blacklisted typedef | |
| 244 { | |
| 245 typedef size_t my_size_base; | |
| 246 typedef const my_size_base my_size; | |
| 247 typedef my_size& my_size_ref; | |
| 248 my_size_ref p = 0; | |
| 249 IPC::WriteParam(nullptr, p); // ERROR | |
| 250 } | |
| 251 | |
| 252 // ERROR: template specialization references blacklisted type | |
| 253 CALL_WRITEPARAM(std::vector<long>) // ERROR | |
| 254 CALL_WRITEPARAM(std::vector<size_t>) // ERROR | |
| 255 | |
| 256 // OK: typedef to blacklisted type | |
| 257 typedef long my_long; | |
| 258 CALL_WRITEPARAM(my_long) // OK | |
| 259 | |
| 260 // OK: other types / typedefs | |
| 261 CALL_WRITEPARAM(char) // OK | |
| 262 CALL_WRITEPARAM(int) // OK | |
| 263 CALL_WRITEPARAM(uint32_t) // OK | |
| 264 CALL_WRITEPARAM(int64_t) // OK | |
| 265 | |
| 266 // OK: long chain of typedefs, ends up with non-blacklisted typedef | |
| 267 { | |
| 268 typedef uint32_t my_int_base; | |
| 269 typedef const my_int_base my_int; | |
| 270 typedef my_int& my_int_ref; | |
| 271 my_int_ref p = 0; | |
| 272 IPC::WriteParam(nullptr, p); // OK | |
| 273 } | |
| 274 | |
| 275 // OK: template specialization references non-blacklisted type | |
| 276 CALL_WRITEPARAM(std::vector<char>) // OK | |
| 277 CALL_WRITEPARAM(std::vector<my_long>) // OK | |
| 278 | |
| 279 #undef CALL_WRITEPARAM | |
| 280 } | |
| 281 | |
| 282 struct Provider { | |
| 283 typedef unsigned int flags; | |
| 284 | |
| 285 short get_short() const { return 0; } | |
| 286 uint64_t get_uint64() const { return 0; } | |
| 287 long get_long() const { return 0; } | |
| 288 unsigned int get_uint() const { return 0; } | |
| 289 flags get_flags() const { return 0; } | |
| 290 size_t get_size() const { return 0; } | |
| 291 | |
| 292 const std::vector<size_t>& get_sizes() const { return sizes_data; } | |
| 293 const std::vector<uint64_t>& get_uint64s() const { return uint64s_data; } | |
| 294 | |
| 295 template <class T> | |
| 296 T get() const { return T(); } | |
| 297 | |
| 298 short short_data; | |
| 299 unsigned int uint_data; | |
| 300 flags flags_data; | |
| 301 long long_data; | |
| 302 size_t size_data; | |
| 303 uint64_t uint64_data; | |
| 304 std::vector<size_t> sizes_data; | |
| 305 std::vector<uint64_t> uint64s_data; | |
| 306 }; | |
| 307 | |
| 308 // ERRORS: 10 | |
| 309 void TestWriteParamMemberArgument() { | |
| 310 Provider p; | |
| 311 | |
| 312 IPC::WriteParam(nullptr, p.get<short>()); // OK | |
| 313 IPC::WriteParam(nullptr, p.get_short()); // OK | |
| 314 IPC::WriteParam(nullptr, p.short_data); // OK | |
| 315 | |
| 316 IPC::WriteParam(nullptr, p.get<unsigned int>()); // OK | |
| 317 IPC::WriteParam(nullptr, p.get_uint()); // OK | |
| 318 IPC::WriteParam(nullptr, p.uint_data); // OK | |
| 319 | |
| 320 IPC::WriteParam(nullptr, p.get<Provider::flags>()); // OK | |
| 321 IPC::WriteParam(nullptr, p.get_flags()); // OK | |
| 322 IPC::WriteParam(nullptr, p.flags_data); // OK | |
| 323 | |
| 324 IPC::WriteParam(nullptr, p.get<long>()); // ERROR | |
| 325 IPC::WriteParam(nullptr, p.get_long()); // ERROR | |
| 326 IPC::WriteParam(nullptr, p.long_data); // ERROR | |
| 327 | |
| 328 IPC::WriteParam(nullptr, p.get<size_t>()); // ERROR | |
| 329 IPC::WriteParam(nullptr, p.get_size()); // ERROR | |
| 330 IPC::WriteParam(nullptr, p.size_data); // ERROR | |
| 331 | |
| 332 // Information about uint64_t gets lost, and plugin sees WriteParam() | |
| 333 // call on unsigned long, which is blacklisted. | |
| 334 IPC::WriteParam(nullptr, p.get<uint64_t>()); // ERROR | |
| 335 IPC::WriteParam(nullptr, p.get_uint64()); // OK | |
| 336 IPC::WriteParam(nullptr, p.uint64_data); // OK | |
| 337 | |
| 338 // Same thing here, WriteParam() sees vector<unsigned long>, and denies it. | |
| 339 IPC::WriteParam(nullptr, p.get<std::vector<uint64_t>>()); // ERROR | |
| 340 IPC::WriteParam(nullptr, p.get_uint64s()); // OK | |
| 341 IPC::WriteParam(nullptr, p.uint64s_data); // OK | |
| 342 | |
| 343 // This one is flaky and depends on whether size_t is typedefed to a | |
| 344 // blacklisted type (unsigned long). | |
| 345 //IPC::WriteParam(nullptr, p.get<std::vector<size_t>>()); | |
| 346 IPC::WriteParam(nullptr, p.get_sizes()); // ERROR | |
| 347 IPC::WriteParam(nullptr, p.sizes_data); // ERROR | |
| 348 } | |
| 349 | |
| 350 | |
| 351 /* ERRORS: 42 */ | |
| OLD | NEW |