[serialize] Add c->check_assign()

To check for assignment overflows.
This commit is contained in:
Behdad Esfahbod 2019-04-24 10:07:19 -04:00
parent 00a00bc1f2
commit 915b9ea5f4
3 changed files with 17 additions and 12 deletions

View File

@ -182,8 +182,7 @@ struct Offset : Type
void *serialize (hb_serialize_context_t *c, const void *base) void *serialize (hb_serialize_context_t *c, const void *base)
{ {
void *t = c->start_embed<void> (); void *t = c->start_embed<void> ();
unsigned int offset = (char *) t - (char *) base; c->check_assign (*this, (char *) t - (char *) base);
c->propagate_error ((*this = offset) == offset);
return t; return t;
} }
@ -549,7 +548,7 @@ struct ArrayOf
{ {
TRACE_SERIALIZE (this); TRACE_SERIALIZE (this);
if (unlikely (!c->extend_min (*this))) return_trace (false); if (unlikely (!c->extend_min (*this))) return_trace (false);
c->propagate_error ((len = items_len) == items_len); c->check_assign (len, items_len);
if (unlikely (!c->extend (*this))) return_trace (false); if (unlikely (!c->extend (*this))) return_trace (false);
return_trace (true); return_trace (true);
} }
@ -699,7 +698,7 @@ struct HeadlessArrayOf
{ {
TRACE_SERIALIZE (this); TRACE_SERIALIZE (this);
if (unlikely (!c->extend_min (*this))) return_trace (false); if (unlikely (!c->extend_min (*this))) return_trace (false);
c->propagate_error ((lenP1 = items.length + 1) == items.length + 1); c->check_assign (lenP1, items.length + 1);
if (unlikely (!c->extend (*this))) return_trace (false); if (unlikely (!c->extend (*this))) return_trace (false);
for (unsigned int i = 0; i < items.length; i++) for (unsigned int i = 0; i < items.length; i++)
arrayZ[i] = items[i]; arrayZ[i] = items[i];

View File

@ -90,7 +90,7 @@ struct SingleSubstFormat1
TRACE_SERIALIZE (this); TRACE_SERIALIZE (this);
if (unlikely (!c->extend_min (*this))) return_trace (false); if (unlikely (!c->extend_min (*this))) return_trace (false);
if (unlikely (!coverage.serialize (c, this).serialize (c, glyphs))) return_trace (false); if (unlikely (!coverage.serialize (c, this).serialize (c, glyphs))) return_trace (false);
c->propagate_error ((deltaGlyphID = delta) == delta); c->check_assign (deltaGlyphID, delta);
return_trace (true); return_trace (true);
} }

View File

@ -120,11 +120,19 @@ struct hb_serialize_context_t
this->packed.push (nullptr); this->packed.push (nullptr);
} }
bool propagate_error (bool success) bool check_success (bool success)
{ return this->successful && (success || (err_propagated_error (), false)); } { return this->successful && (success || (err_propagated_error (), false)); }
template <typename T1, typename T2>
bool check_equal (T1 &&v1, T2 &&v2)
{ return check_success (v1 == v2); }
template <typename T1, typename T2>
bool check_assign (T1 &v1, T2 &&v2)
{ return check_equal (v1 = v2, v2); }
template <typename T> bool propagate_error (T &&obj) template <typename T> bool propagate_error (T &&obj)
{ return propagate_error (!hb_deref_pointer (obj).in_error ()); } { return check_success (!hb_deref_pointer (obj).in_error ()); }
template <typename T1, typename... Ts> bool propagate_error (T1 &&o1, Ts &&...os) template <typename T1, typename... Ts> bool propagate_error (T1 &&o1, Ts &&...os)
{ return propagate_error (hb_forward<T1> (o1)) && { return propagate_error (hb_forward<T1> (o1)) &&
@ -170,7 +178,7 @@ struct hb_serialize_context_t
{ {
object_t *obj = object_pool.alloc (); object_t *obj = object_pool.alloc ();
if (unlikely (!obj)) if (unlikely (!obj))
propagate_error (false); check_success (false);
else else
{ {
obj->head = head; obj->head = head;
@ -293,15 +301,13 @@ struct hb_serialize_context_t
{ {
auto &off = * ((BEInt<uint32_t, 4> *) (parent.head + link.position)); auto &off = * ((BEInt<uint32_t, 4> *) (parent.head + link.position));
assert (0 == off); assert (0 == off);
off = offset; check_assign (off, offset);
propagate_error (off == offset);
} }
else else
{ {
auto &off = * ((BEInt<uint16_t, 2> *) (parent.head + link.position)); auto &off = * ((BEInt<uint16_t, 2> *) (parent.head + link.position));
assert (0 == off); assert (0 == off);
off = offset; check_assign (off, offset);
propagate_error (off == offset);
} }
} }
} }