C bindings: Implement _Validate(), and some pre-requisites

mojo/public/c/bindings/array.h

 // Copyright 2016 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef MOJO_PUBLIC_C_BINDINGS_ARRAY_H_
 #define MOJO_PUBLIC_C_BINDINGS_ARRAY_H_
 
 #include <stdint.h>
 
 #include "mojo/public/c/bindings/buffer.h"
@@ skipping 77 matching lines @@
 // |inout_handles|: Mojo handles are moved out of this array, and are references
 // by index in |inout_buf|.
 // |in_num_handles|: Size in # of number elements available in |inout_handles|.
 void MojomArray_DecodePointersAndHandles(
     const struct MojomTypeDescriptorArray* in_type_desc,
     struct MojomArrayHeader* inout_array,
     uint32_t in_array_size,
     MojoHandle* inout_handles,
     uint32_t in_num_handles);
 
+// Validates the mojom array described by the |in_struct| buffer. Any
+// references from the array are also recursively validated, and are expected
+// to be in the same buffer backing |in_array|.
+// |in_type_desc|: Describes the pointer and handle fields of the mojom array.
+// |in_array|: Buffer containing the array, and any other references outside of
+//             the array
+// |in_array_size|: Size of the buffer backed by |in_array| in bytes.
+// |in_num_handles|: Number of valid handles expected to be referenced from
+//                   |in_array|.
+// |inout_context|: An initialized context that contains the expected location
+//                  of the next pointer and next offset. This is used to
+//                  validate that no two pointers or handles are shared.
+MojomValidationResult MojomArray_Validate(
+    const struct MojomTypeDescriptorArray* in_type_desc,
+    const struct MojomArrayHeader* in_array,
+    uint32_t in_array_size,
+    uint32_t in_num_handles,
+    struct MojomValidationContext* inout_context);
+
 MOJO_END_EXTERN_C
 
 #endif  // MOJO_PUBLIC_C_BINDINGS_ARRAY_H_