Fix silent truncations when extracting values from CheckedNumeric

base/numerics/safe_numerics_unittest.cc

Index: base/numerics/safe_numerics_unittest.cc
diff --git a/base/numerics/safe_numerics_unittest.cc b/base/numerics/safe_numerics_unittest.cc
index 8ced4bdb7b244e0637dc18f8c2f296d84d49f671..73bb751084e4c28412f957f67dc134ed29dd3868 100644
--- a/base/numerics/safe_numerics_unittest.cc
+++ b/base/numerics/safe_numerics_unittest.cc
@@ -37,6 +37,7 @@ using base::SizeT;
 using base::StrictNumeric;
 using base::saturated_cast;
 using base::strict_cast;
+using base::StrictNumeric;
 using base::internal::MaxExponent;
 using base::internal::RANGE_VALID;
 using base::internal::RANGE_INVALID;
@@ -411,6 +412,45 @@ struct TestNumericConversion {};
       << " on line " << line
 
 template <typename Dst, typename Src>
+void TestStrictComparison() {
+  typedef numeric_limits<Dst> DstLimits;
+  typedef numeric_limits<Src> SrcLimits;
+  static_assert(StrictNumeric<Src>(SrcLimits::min()) < DstLimits::max(), "");
+  static_assert(StrictNumeric<Src>(SrcLimits::min()) < SrcLimits::max(), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::min()) >= DstLimits::max()),
+                "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::min()) >= SrcLimits::max()),
+                "");
+  static_assert(StrictNumeric<Src>(SrcLimits::min()) <= DstLimits::max(), "");
+  static_assert(StrictNumeric<Src>(SrcLimits::min()) <= SrcLimits::max(), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::min()) > DstLimits::max()), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::min()) > SrcLimits::max()), "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) > DstLimits::min(), "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) > SrcLimits::min(), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::max()) <= DstLimits::min()),
+                "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::max()) <= SrcLimits::min()),
+                "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) >= DstLimits::min(), "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) >= SrcLimits::min(), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::max()) < DstLimits::min()), "");
+  static_assert(!(StrictNumeric<Src>(SrcLimits::max()) < SrcLimits::min()), "");
+  static_assert(StrictNumeric<Src>(static_cast<Src>(1)) == static_cast<Dst>(1),
+                "");
+  static_assert(StrictNumeric<Src>(static_cast<Src>(1)) != static_cast<Dst>(0),
+                "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) != static_cast<Dst>(0),
+                "");
+  static_assert(StrictNumeric<Src>(SrcLimits::max()) != DstLimits::min(), "");
+  static_assert(
+      !(StrictNumeric<Src>(static_cast<Src>(1)) != static_cast<Dst>(1)), "");
+  static_assert(
+      !(StrictNumeric<Src>(static_cast<Src>(1)) == static_cast<Dst>(0)), "");
+
+  base::internal::TestCompileTimeConstantSupport();
+}
+
+template <typename Dst, typename Src>
 struct TestNumericConversion<Dst, Src, SIGN_PRESERVING_VALUE_PRESERVING> {
   static void Test(const char *dst, const char *src, int line) {
     typedef numeric_limits<Src> SrcLimits;
@@ -426,6 +466,8 @@ struct TestNumericConversion<Dst, Src, SIGN_PRESERVING_VALUE_PRESERVING> {
                     (DstLimits::is_signed && sizeof(Dst) > sizeof(Src)))),
                   "Comparison must be sign preserving and value preserving");
 
+    TestStrictComparison<Dst, Src>();
+
     const CheckedNumeric<Dst> checked_dst = SrcLimits::max();
     TEST_EXPECTED_SUCCESS(checked_dst);
     if (MaxExponent<Dst>::value > MaxExponent<Src>::value) {
@@ -466,6 +508,8 @@ struct TestNumericConversion<Dst, Src, SIGN_PRESERVING_NARROW> {
                    (DstLimits::is_integer && SrcLimits::is_iec559),
                   "Destination must be narrower than source");
 
+    TestStrictComparison<Dst, Src>();
+
     const CheckedNumeric<Dst> checked_dst;
     TEST_EXPECTED_FAILURE(checked_dst + SrcLimits::max());
     TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
@@ -512,6 +556,8 @@ struct TestNumericConversion<Dst, Src, SIGN_TO_UNSIGN_WIDEN_OR_EQUAL> {
     static_assert(SrcLimits::is_signed, "Source must be signed");
     static_assert(!DstLimits::is_signed, "Destination must be unsigned");
 
+    TestStrictComparison<Dst, Src>();
+
     const CheckedNumeric<Dst> checked_dst;
     TEST_EXPECTED_VALUE(SrcLimits::max(), checked_dst + SrcLimits::max());
     TEST_EXPECTED_FAILURE(checked_dst + static_cast<Src>(-1));
@@ -535,6 +581,8 @@ struct TestNumericConversion<Dst, Src, SIGN_TO_UNSIGN_NARROW> {
     static_assert(SrcLimits::is_signed, "Source must be signed.");
     static_assert(!DstLimits::is_signed, "Destination must be unsigned.");
 
+    TestStrictComparison<Dst, Src>();
+
     const CheckedNumeric<Dst> checked_dst;
     TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
     TEST_EXPECTED_FAILURE(checked_dst + SrcLimits::max());
@@ -577,6 +625,8 @@ struct TestNumericConversion<Dst, Src, UNSIGN_TO_SIGN_NARROW_OR_EQUAL> {
     static_assert(!SrcLimits::is_signed, "Source must be unsigned.");
     static_assert(DstLimits::is_signed, "Destination must be signed.");
 
+    TestStrictComparison<Dst, Src>();
+
     const CheckedNumeric<Dst> checked_dst;
     TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
     TEST_EXPECTED_FAILURE(checked_dst + SrcLimits::max());
@@ -754,14 +804,16 @@ TEST(SafeNumerics, CastTests) {
   auto int8_max = CheckNum(numeric_limits<int8_t>::max());
   auto double_max = CheckNum(numeric_limits<double>::max());
   static_assert(
-      std::is_same<int16_t, decltype(int8_min.ValueOrDie<int16_t>())>::value,
+      std::is_same<int16_t,
+                   decltype(int8_min.ValueOrDie<int16_t>())::type>::value,
       "ValueOrDie returning incorrect type.");
   static_assert(
       std::is_same<int16_t,
-                   decltype(int8_min.ValueOrDefault<int16_t>(0))>::value,
+                   decltype(int8_min.ValueOrDefault<int16_t>(0))::type>::value,
       "ValueOrDefault returning incorrect type.");
   static_assert(
-      std::is_same<float, decltype(double_max.ValueFloating<float>())>::value,
+      std::is_same<float,
+                   decltype(double_max.ValueFloating<float>())::type>::value,
       "ValueFloating returning incorrect type.");
   EXPECT_FALSE(int8_min.template IsValid<uint8_t>());
   EXPECT_TRUE(int8_max.template IsValid<uint8_t>());
@@ -896,19 +948,19 @@ TEST(SafeNumerics, CompoundNumericOperations) {
 
 TEST(SafeNumerics, VariadicNumericOperations) {
   auto a = CheckAdd(1, 2UL, CheckNum(3LL), 4).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(a)>(10), a);
+  EXPECT_EQ(static_cast<decltype(a)::type>(10), a);
   auto b = CheckSub(CheckNum(20.0), 2UL, 4).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(b)>(14.0), b);
+  EXPECT_EQ(static_cast<decltype(b)::type>(14.0), b);
   auto c = CheckMul(20.0, CheckNum(1), 5, 3UL).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(c)>(300.0), c);
+  EXPECT_EQ(static_cast<decltype(c)::type>(300.0), c);
   auto d = CheckDiv(20.0, 2.0, CheckNum(5LL), -4).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(d)>(-.5), d);
+  EXPECT_EQ(static_cast<decltype(d)::type>(-.5), d);
   auto e = CheckMod(CheckNum(20), 3).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(e)>(2), e);
+  EXPECT_EQ(static_cast<decltype(e)::type>(2), e);
   auto f = CheckLsh(1, CheckNum(2)).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(f)>(4), f);
+  EXPECT_EQ(static_cast<decltype(f)::type>(4), f);
   auto g = CheckRsh(4, CheckNum(2)).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(g)>(1), g);
+  EXPECT_EQ(static_cast<decltype(g)::type>(1), g);
   auto h = CheckRsh(CheckAdd(1, 1, 1, 1), CheckSub(4, 2)).ValueOrDie();
-  EXPECT_EQ(static_cast<decltype(h)>(1), h);
+  EXPECT_EQ(static_cast<decltype(h)::type>(1), h);
 }