Mojo cpp bindings: validation logic for incoming messages

mojo/public/tools/bindings/generators/cpp_templates/struct_macros.tmpl

+{%- macro validate(struct, class_name) %}
+  if (!data)
+    return true;
+
+  if (!ValidateStructHeader(
+          data, sizeof({{class_name}}),
+          {{struct.packed.packed_fields|length}}, bounds_checker)) {
+    return false;
+  }
+
+  const {{class_name}}* MOJO_ALLOW_UNUSED object =
+      static_cast<const {{class_name}}*>(data);
+
+{%-   for packed_field in struct.packed.packed_fields
+          if packed_field.field.kind|is_object_kind %}
+{%-     set wrapper_type = packed_field.field.kind|cpp_wrapper_type %}
+{%-     set name = packed_field.field.name %}
+  if (!mojo::internal::ValidateEncodedPointer(&object->{{name}}_.offset) ||
+      !{{wrapper_type}}::Data::Validate(
+          mojo::internal::DecodePointerRaw(&object->{{name}}_.offset),
+          bounds_checker)) {
+    return false;
+  }
+{%-   endfor %}
+{%-   for packed_field in struct.packed.packed_fields
+          if packed_field.field.kind|is_handle_kind %}
+{%-     set name = packed_field.field.name %}
+  if (!bounds_checker->ClaimHandle(object->{{name}}_))
+    return false;
+{%-   endfor %}
+
+  return true;
+{%- endmacro %}
+
 {%- macro setters(struct) %}
 {%    for packed_field in struct.packed.packed_fields %}
 {%-     set type = packed_field.field.kind|cpp_type %}
 {%-     set name = packed_field.field.name %}
 {%-     if packed_field.field.kind|is_object_kind %}
   void set_{{name}}({{type}} {{name}}) { {{name}}_.ptr = {{name}}; }
 {%-     else %}
   void set_{{name}}({{type}} {{name}}) { {{name}}_ = {{name}}; }
 {%-     endif %}
 {%-   endfor %}
@@ skipping 63 matching lines @@
 {%-   for pf in struct.packed.packed_fields if pf.field.kind|is_object_kind -%}
 if (!mojo::internal::Decode(&{{pf.field.name}}_, message))
   return false;
 {%    endfor %}
 {%-   for pf in struct.packed.packed_fields if pf.field.kind|is_handle_kind -%}
 if (!mojo::internal::DecodeHandle(&{{pf.field.name}}_,
                                   message->mutable_handles()))
   return false;
 {%    endfor %}
 {%- endmacro -%}