OLD | NEW |
1 // Copyright 2013 The Chromium Authors. All rights reserved. | 1 // Copyright 2013 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #ifndef MOJO_SYSTEM_MEMORY_H_ | 5 #ifndef MOJO_SYSTEM_MEMORY_H_ |
6 #define MOJO_SYSTEM_MEMORY_H_ | 6 #define MOJO_SYSTEM_MEMORY_H_ |
7 | 7 |
8 #include <stddef.h> | 8 #include <stddef.h> |
9 | 9 |
| 10 #include "mojo/public/system/system_export.h" |
| 11 |
10 namespace mojo { | 12 namespace mojo { |
11 namespace system { | 13 namespace system { |
12 | 14 |
13 // This is just forward-declared, with the definition and explicit | 15 // This is just forward-declared, with the definition and explicit |
14 // instantiations in the .cc file. This is used by |VerifyUserPointer<T>()| | 16 // instantiations in the .cc file. This is used by |VerifyUserPointer<T>()| |
15 // below, and you should use that instead. | 17 // below, and you should use that instead. |
16 template <size_t size> | 18 template <size_t size> |
17 bool VerifyUserPointerForSize(const void* pointer, size_t count); | 19 bool MOJO_SYSTEM_EXPORT VerifyUserPointerForSize(const void* pointer, |
| 20 size_t count); |
18 | 21 |
19 // Verify that |count * sizeof(T)| bytes can be read from the user |pointer| | 22 // Verify that |count * sizeof(T)| bytes can be read from the user |pointer| |
20 // insofar as possible/necessary (note: this is done carefully since |count * | 23 // insofar as possible/necessary (note: this is done carefully since |count * |
21 // sizeof(T)| may overflow a |size_t|. |count| may be zero. If |T| is |void|, | 24 // sizeof(T)| may overflow a |size_t|. |count| may be zero. If |T| is |void|, |
22 // then the size of each element is taken to be a single byte. | 25 // then the size of each element is taken to be a single byte. |
23 // | 26 // |
24 // For example, if running in kernel mode, this should be a full verification | 27 // For example, if running in kernel mode, this should be a full verification |
25 // that the given memory is owned and readable by the user process. In user | 28 // that the given memory is owned and readable by the user process. In user |
26 // mode, if crashes are acceptable, this may do nothing at all (and always | 29 // mode, if crashes are acceptable, this may do nothing at all (and always |
27 // return true). | 30 // return true). |
28 template <typename T> | 31 template <typename T> |
29 bool VerifyUserPointer(const T* pointer, size_t count) { | 32 bool VerifyUserPointer(const T* pointer, size_t count) { |
30 return VerifyUserPointerForSize<sizeof(T)>(pointer, count); | 33 return VerifyUserPointerForSize<sizeof(T)>(pointer, count); |
31 } | 34 } |
32 | 35 |
33 // Special-case |T| equals |void| so that the size is in bytes, as indicated | 36 // Special-case |T| equals |void| so that the size is in bytes, as indicated |
34 // above. | 37 // above. |
35 template <> | 38 template <> |
36 inline bool VerifyUserPointer<void>(const void* pointer, size_t count) { | 39 inline bool VerifyUserPointer<void>(const void* pointer, size_t count) { |
37 return VerifyUserPointerForSize<1>(pointer, count); | 40 return VerifyUserPointerForSize<1>(pointer, count); |
38 } | 41 } |
39 | 42 |
40 } // namespace system | 43 } // namespace system |
41 } // namespace mojo | 44 } // namespace mojo |
42 | 45 |
43 #endif // MOJO_SYSTEM_MEMORY_H_ | 46 #endif // MOJO_SYSTEM_MEMORY_H_ |
OLD | NEW |