X-Git-Url: http://review.tizen.org/git/?a=blobdiff_plain;f=src%2Fhb-open-type-private.hh;h=ab2a3462d8d717c8e05f21fa8dff7245d06763ac;hb=97158392a5899ddb739afaac925128f33f699bd7;hp=bdffa955b4fc84b6ccb0953e6710901855ff8f30;hpb=27e302dc8e794ff6bf878bc76e17d336d510849e;p=framework%2Fuifw%2Fharfbuzz.git diff --git a/src/hb-open-type-private.hh b/src/hb-open-type-private.hh index bdffa95..ab2a346 100644 --- a/src/hb-open-type-private.hh +++ b/src/hb-open-type-private.hh @@ -1,5 +1,5 @@ /* - * Copyright (C) 2007,2008,2009,2010 Red Hat, Inc. + * Copyright © 2007,2008,2009,2010 Red Hat, Inc. * * This is part of HarfBuzz, a text shaping library. * @@ -24,31 +24,21 @@ * Red Hat Author(s): Behdad Esfahbod */ -#ifndef HB_OPEN_TYPES_PRIVATE_HH -#define HB_OPEN_TYPES_PRIVATE_HH +#ifndef HB_OPEN_TYPE_PRIVATE_HH +#define HB_OPEN_TYPE_PRIVATE_HH -#include "hb-private.h" +#include "hb-private.hh" #include "hb-blob.h" - -/* Table/script/language-system/feature/... not found */ -#define NO_INDEX ((unsigned int) 0xFFFF) - +HB_BEGIN_DECLS +HB_END_DECLS /* * Casts */ -/* Cast to "const char *" and "char *" */ -template -inline const char * CharP (const Type* X) -{ return reinterpret_cast(X); } -template -inline char * CharP (Type* X) -{ return reinterpret_cast(X); } - /* Cast to struct T, reference to reference */ template inline const Type& CastR(const TObject &X) @@ -65,23 +55,65 @@ template inline Type* CastP(TObject *X) { return reinterpret_cast (X); } -/* StructAtOffset(X,Ofs) returns the struct T& that is placed at memory - * location of X plus Ofs bytes. */ -template -inline const Type& StructAtOffset(const TObject &X, unsigned int offset) -{ return * reinterpret_cast (CharP(&X) + offset); } -template -inline Type& StructAtOffset(TObject &X, unsigned int offset) -{ return * reinterpret_cast (CharP(&X) + offset); } +/* StructAtOffset(P,Ofs) returns the struct T& that is placed at memory + * location pointed to by P plus Ofs bytes. */ +template +inline const Type& StructAtOffset(const void *P, unsigned int offset) +{ return * reinterpret_cast ((const char *) P + offset); } +template +inline Type& StructAtOffset(void *P, unsigned int offset) +{ return * reinterpret_cast ((char *) P + offset); } /* StructAfter(X) returns the struct T& that is placed after X. * Works with X of variable size also. X must implement get_size() */ template inline const Type& StructAfter(const TObject &X) -{ return StructAtOffset(X, X.get_size()); } +{ return StructAtOffset(&X, X.get_size()); } template inline Type& StructAfter(TObject &X) -{ return StructAtOffset(X, X.get_size()); } +{ return StructAtOffset(&X, X.get_size()); } + + + +/* + * Size checking + */ + +/* Check _assertion in a method environment */ +#define _DEFINE_SIZE_ASSERTION(_assertion) \ + inline void _size_assertion (void) const \ + { ASSERT_STATIC (_assertion); } +/* Check that _code compiles in a method environment */ +#define _DEFINE_COMPILES_ASSERTION(_code) \ + inline void _compiles_assertion (void) const \ + { _code; } + + +#define DEFINE_SIZE_STATIC(size) \ + _DEFINE_SIZE_ASSERTION (sizeof (*this) == (size)); \ + static const unsigned int static_size = (size); \ + static const unsigned int min_size = (size) + +/* Size signifying variable-sized array */ +#define VAR 1 + +#define DEFINE_SIZE_UNION(size, _member) \ + _DEFINE_SIZE_ASSERTION (this->u._member.static_size == (size)); \ + static const unsigned int min_size = (size) + +#define DEFINE_SIZE_MIN(size) \ + _DEFINE_SIZE_ASSERTION (sizeof (*this) >= (size)); \ + static const unsigned int min_size = (size) + +#define DEFINE_SIZE_ARRAY(size, array) \ + _DEFINE_SIZE_ASSERTION (sizeof (*this) == (size) + sizeof (array[0])); \ + _DEFINE_COMPILES_ASSERTION ((void) array[0].static_size) \ + static const unsigned int min_size = (size) + +#define DEFINE_SIZE_ARRAY2(size, array1, array2) \ + _DEFINE_SIZE_ASSERTION (sizeof (*this) == (size) + sizeof (this->array1[0]) + sizeof (this->array2[0])); \ + _DEFINE_COMPILES_ASSERTION ((void) array1[0].static_size; (void) array2[0].static_size) \ + static const unsigned int min_size = (size) @@ -90,221 +122,205 @@ inline Type& StructAfter(TObject &X) */ /* Global nul-content Null pool. Enlarge as necessary. */ -static const void *_NullPool[32 / sizeof (void *)]; +static const void *_NullPool[64 / sizeof (void *)]; -/* Generic template for nul-content sizeof-sized Null objects. */ +/* Generic nul-content Null objects. */ template -static inline const Type& Null () { - ASSERT_STATIC (sizeof (Type) <= sizeof (_NullPool)); +static inline const Type& Null (void) { + ASSERT_STATIC (Type::min_size <= sizeof (_NullPool)); return *CastP (_NullPool); } /* Specializaiton for arbitrary-content arbitrary-sized Null objects. */ -#define DEFINE_NULL_DATA(Type, size, data) \ -static const char _Null##Type[size + 1] = data; /* +1 is for nul-termination in data */ \ +#define DEFINE_NULL_DATA(Type, data) \ +static const char _Null##Type[Type::min_size + 1] = data; /* +1 is for nul-termination in data */ \ template <> \ -inline const Type& Null () { \ +inline const Type& Null (void) { \ return *CastP (_Null##Type); \ } /* The following line really exists such that we end in a place needing semicolon */ \ -ASSERT_STATIC (sizeof (Type) + 1 <= sizeof (_Null##Type)) +ASSERT_STATIC (Type::min_size + 1 <= sizeof (_Null##Type)) /* Accessor macro. */ #define Null(Type) Null() -/* - * Trace - */ - - -template -struct hb_trace_t { - explicit hb_trace_t (unsigned int *pdepth) : pdepth(pdepth) { if (max_depth) ++*pdepth; } - ~hb_trace_t (void) { if (max_depth) --*pdepth; } - - inline void log (const char *what, const char *function, const void *obj) - { - if (*pdepth < max_depth) - fprintf (stderr, "%s(%p) %-*d-> %s\n", what, obj, *pdepth, *pdepth, function); - } - - private: - unsigned int *pdepth; -}; -template <> /* Optimize when tracing is disabled */ -struct hb_trace_t<0> { - explicit hb_trace_t (unsigned int *p) {} - inline void log (const char *what, const char *function, const void *obj) {}; -}; - - /* * Sanitize */ #ifndef HB_DEBUG_SANITIZE -#define HB_DEBUG_SANITIZE HB_DEBUG+0 +#define HB_DEBUG_SANITIZE (HB_DEBUG+0) #endif #define TRACE_SANITIZE() \ - hb_trace_t trace (&context->debug_depth); \ - trace.log ("SANITIZE", HB_FUNC, this); + hb_auto_trace_t trace (&c->debug_depth, "SANITIZE", this, NULL, HB_FUNC); struct hb_sanitize_context_t { - inline void init (hb_blob_t *blob) + inline void init (hb_blob_t *b) + { + this->blob = hb_blob_reference (b); + this->writable = false; + } + + inline void setup (void) { - this->blob = hb_blob_reference (blob); - this->start = hb_blob_lock (blob); - this->end = this->start + hb_blob_get_length (blob); - this->writable = hb_blob_is_writable (blob); + this->start = hb_blob_get_data (this->blob, NULL); + this->end = this->start + hb_blob_get_length (this->blob); this->edit_count = 0; this->debug_depth = 0; - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "sanitize %p init [%p..%p] (%u bytes)\n", - this->blob, this->start, this->end, this->end - this->start); + DEBUG_MSG (SANITIZE, this->blob, + "init [%p..%p] (%lu bytes)", + this->start, this->end, + (unsigned long) (this->end - this->start)); } inline void finish (void) { - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "sanitize %p fini [%p..%p] %u edit requests\n", - this->blob, this->start, this->end, this->edit_count); + DEBUG_MSG (SANITIZE, this->blob, + "fini [%p..%p] %u edit requests", + this->start, this->end, this->edit_count); - hb_blob_unlock (this->blob); hb_blob_destroy (this->blob); this->blob = NULL; this->start = this->end = NULL; } - inline bool check (const char *base, unsigned int len) const + inline bool check_range (const void *base, unsigned int len) const { - bool ret = this->start <= base && - base <= this->end && - (unsigned int) (this->end - base) >= len; - - if (HB_DEBUG_SANITIZE && (int) this->debug_depth < (int) HB_DEBUG_SANITIZE) \ - fprintf (stderr, "SANITIZE(%p) %-*d-> check [%p..%p] (%d bytes) in [%p..%p] -> %s\n", \ - base, - this->debug_depth, this->debug_depth, - base, base+len, len, - this->start, this->end, - ret ? "pass" : "FAIL"); + const char *p = (const char *) base; + bool ret = this->start <= p && + p <= this->end && + (unsigned int) (this->end - p) >= len; + + DEBUG_MSG_LEVEL (SANITIZE, this->blob, this->debug_depth, + "%-*d-> range [%p..%p] (%d bytes) in [%p..%p] -> %s", + this->debug_depth, this->debug_depth, + p, p + len, len, + this->start, this->end, + ret ? "pass" : "FAIL"); return likely (ret); } - inline bool check_array (const char *base, unsigned int record_size, unsigned int len) const + inline bool check_array (const void *base, unsigned int record_size, unsigned int len) const { - bool overflows = len >= ((unsigned int) -1) / record_size; + const char *p = (const char *) base; + bool overflows = _hb_unsigned_int_mul_overflows (len, record_size); + DEBUG_MSG_LEVEL (SANITIZE, this->blob, this->debug_depth, + "%-*d-> array [%p..%p] (%d*%d=%ld bytes) in [%p..%p] -> %s", + this->debug_depth, this->debug_depth, + p, p + (record_size * len), record_size, len, (unsigned long) record_size * len, + this->start, this->end, + !overflows ? "does not overflow" : "OVERFLOWS FAIL"); - if (HB_DEBUG_SANITIZE && (int) this->debug_depth < (int) HB_DEBUG_SANITIZE) - fprintf (stderr, "SANITIZE(%p) %-*d-> array [%p..%p] (%d*%d=%ld bytes) in [%p..%p] -> %s\n", \ - base, - this->debug_depth, this->debug_depth, - base, base + (record_size * len), record_size, len, (unsigned long) record_size * len, - this->start, this->end, - !overflows ? "does not overflow" : "OVERFLOWS FAIL"); + return likely (!overflows && this->check_range (base, record_size * len)); + } - return likely (!overflows && this->check (base, record_size * len)); + template + inline bool check_struct (const Type *obj) const + { + return likely (this->check_range (obj, obj->min_size)); } - inline bool can_edit (const char *base HB_UNUSED, unsigned int len HB_UNUSED) + inline bool can_edit (const void *base HB_UNUSED, unsigned int len HB_UNUSED) { + const char *p = (const char *) base; this->edit_count++; - if (HB_DEBUG_SANITIZE && (int) this->debug_depth < (int) HB_DEBUG_SANITIZE) - fprintf (stderr, "SANITIZE(%p) %-*d-> edit(%u) [%p..%p] (%d bytes) in [%p..%p] -> %s\n", \ - base, - this->debug_depth, this->debug_depth, - this->edit_count, - base, base+len, len, - this->start, this->end, - this->writable ? "granted" : "REJECTED"); + DEBUG_MSG_LEVEL (SANITIZE, this->blob, this->debug_depth, + "%-*d-> edit(%u) [%p..%p] (%d bytes) in [%p..%p] -> %s", + this->debug_depth, this->debug_depth, + this->edit_count, + p, p + len, len, + this->start, this->end, + this->writable ? "granted" : "REJECTED"); return this->writable; } + unsigned int debug_depth; const char *start, *end; bool writable; unsigned int edit_count; hb_blob_t *blob; - unsigned int debug_depth; }; -#define SANITIZE(X) likely ((X).sanitize (context)) - -#define SANITIZE_WITH_BASE(B,X) likely ((X).sanitize (context, CharP(B))) - -#define SANITIZE_SELF() SANITIZE_MEM(this, sizeof (*this)) - -#define SANITIZE_MEM(B,L) likely (context->check (CharP(B), (L))) - -#define SANITIZE_ARRAY(A,S,L) likely (context->check_array (CharP(A), S, L)) - /* Template to sanitize an object. */ template struct Sanitizer { static hb_blob_t *sanitize (hb_blob_t *blob) { - hb_sanitize_context_t context[1]; + hb_sanitize_context_t c[1] = {{0}}; bool sane; /* TODO is_sane() stuff */ + c->init (blob); + retry: - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "Sanitizer %p start %s\n", blob, HB_FUNC); + DEBUG_MSG_FUNC (SANITIZE, blob, "start"); + + c->setup (); - context->init (blob); + if (unlikely (!c->start)) { + c->finish (); + return blob; + } - Type *t = CastP (const_cast (context->start)); + Type *t = CastP (const_cast (c->start)); - sane = t->sanitize (context); + sane = t->sanitize (c); if (sane) { - if (context->edit_count) { - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "Sanitizer %p passed first round with %d edits; doing a second round %s\n", - blob, context->edit_count, HB_FUNC); + if (c->edit_count) { + DEBUG_MSG_FUNC (SANITIZE, blob, "passed first round with %d edits; going for second round", c->edit_count); /* sanitize again to ensure no toe-stepping */ - context->edit_count = 0; - sane = t->sanitize (context); - if (context->edit_count) { - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "Sanitizer %p requested %d edits in second round; FAILLING %s\n", - blob, context->edit_count, HB_FUNC); + c->edit_count = 0; + sane = t->sanitize (c); + if (c->edit_count) { + DEBUG_MSG_FUNC (SANITIZE, blob, "requested %d edits in second round; FAILLING", c->edit_count); sane = false; } } - context->finish (); } else { - unsigned int edit_count = context->edit_count; - context->finish (); - if (edit_count && !hb_blob_is_writable (blob) && hb_blob_try_writable (blob)) { - /* ok, we made it writable by relocating. try again */ - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "Sanitizer %p retry %s\n", blob, HB_FUNC); - goto retry; + unsigned int edit_count = c->edit_count; + if (edit_count && !c->writable) { + c->start = hb_blob_get_data_writable (blob, NULL); + c->end = c->start + hb_blob_get_length (blob); + + if (c->start) { + c->writable = true; + /* ok, we made it writable by relocating. try again */ + DEBUG_MSG_FUNC (SANITIZE, blob, "retry"); + goto retry; + } } } - if (HB_DEBUG_SANITIZE) - fprintf (stderr, "Sanitizer %p %s %s\n", blob, sane ? "passed" : "FAILED", HB_FUNC); + c->finish (); + + DEBUG_MSG_FUNC (SANITIZE, blob, sane ? "PASSED" : "FAILED"); if (sane) return blob; else { hb_blob_destroy (blob); - return hb_blob_create_empty (); + return hb_blob_get_empty (); } } + + static const Type* lock_instance (hb_blob_t *blob) { + hb_blob_make_immutable (blob); + const char *base = hb_blob_get_data (blob, NULL); + return unlikely (!base) ? &Null(Type) : CastP (base); + } }; @@ -332,9 +348,9 @@ template class BEInt { public: - inline class BEInt& operator = (Type i) { hb_be_uint16_put (v,i); return *this; } - inline operator Type () const { return hb_be_uint16_get (v); } - inline bool operator == (const BEInt& o) const { return hb_be_uint16_cmp (v, o.v); } + inline void set (Type i) { hb_be_uint16_put (v,i); } + inline operator Type (void) const { return hb_be_uint16_get (v); } + inline bool operator == (const BEInt& o) const { return hb_be_uint16_eq (v, o.v); } inline bool operator != (const BEInt& o) const { return !(*this == o); } private: uint8_t v[2]; }; @@ -342,9 +358,9 @@ template class BEInt { public: - inline class BEInt& operator = (Type i) { hb_be_uint32_put (v,i); return *this; } - inline operator Type () const { return hb_be_uint32_get (v); } - inline bool operator == (const BEInt& o) const { return hb_be_uint32_cmp (v, o.v); } + inline void set (Type i) { hb_be_uint32_put (v,i); } + inline operator Type (void) const { return hb_be_uint32_get (v); } + inline bool operator == (const BEInt& o) const { return hb_be_uint32_eq (v, o.v); } inline bool operator != (const BEInt& o) const { return !(*this == o); } private: uint8_t v[4]; }; @@ -353,16 +369,19 @@ class BEInt template struct IntType { - static inline unsigned int get_size () { return sizeof (Type); } - inline void set (Type i) { v = i; } + inline void set (Type i) { v.set (i); } inline operator Type(void) const { return v; } inline bool operator == (const IntType &o) const { return v == o.v; } inline bool operator != (const IntType &o) const { return v != o.v; } - inline bool sanitize (hb_sanitize_context_t *context) { + inline int cmp (Type a) const { Type b = v; return a < b ? -1 : a == b ? 0 : +1; } + inline bool sanitize (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - return SANITIZE_SELF (); + return likely (c->check_struct (this)); } - private: BEInt v; + protected: + BEInt v; + public: + DEFINE_SIZE_STATIC (sizeof (Type)); }; typedef IntType USHORT; /* 16-bit unsigned integer. */ @@ -370,25 +389,42 @@ typedef IntType SHORT; /* 16-bit signed integer. */ typedef IntType ULONG; /* 32-bit unsigned integer. */ typedef IntType LONG; /* 32-bit signed integer. */ -ASSERT_SIZE (USHORT, 2); -ASSERT_SIZE (SHORT, 2); -ASSERT_SIZE (ULONG, 4); -ASSERT_SIZE (LONG, 4); +/* Date represented in number of seconds since 12:00 midnight, January 1, + * 1904. The value is represented as a signed 64-bit integer. */ +struct LONGDATETIME +{ + inline bool sanitize (hb_sanitize_context_t *c) { + TRACE_SANITIZE (); + return likely (c->check_struct (this)); + } + private: + LONG major; + ULONG minor; + public: + DEFINE_SIZE_STATIC (8); +}; /* Array of four uint8s (length = 32 bits) used to identify a script, language * system, feature, or baseline */ struct Tag : ULONG { /* What the char* converters return is NOT nul-terminated. Print using "%.4s" */ - inline operator const char* (void) const { return CharP(this); } - inline operator char* (void) { return CharP(this); } + inline operator const char* (void) const { return reinterpret_cast (&this->v); } + inline operator char* (void) { return reinterpret_cast (&this->v); } + public: + DEFINE_SIZE_STATIC (4); }; -ASSERT_SIZE (Tag, 4); -DEFINE_NULL_DATA (Tag, 4, " "); +DEFINE_NULL_DATA (Tag, " "); /* Glyph index number, same as uint16 (length = 16 bits) */ typedef USHORT GlyphID; +/* Script/language-system/feature index */ +struct Index : USHORT { + static const unsigned int NOT_FOUND_INDEX = 0xFFFF; +}; +DEFINE_NULL_DATA (Index, "\xff\xff"); + /* Offset to a table, same as uint16 (length = 16 bits), Null offset = 0x0000 */ typedef USHORT Offset; @@ -402,14 +438,15 @@ struct CheckSum : ULONG static uint32_t CalcTableChecksum (ULONG *Table, uint32_t Length) { uint32_t Sum = 0L; - ULONG *EndPtr = Table+((Length+3) & ~3) / ULONG::get_size (); + ULONG *EndPtr = Table+((Length+3) & ~3) / ULONG::static_size; while (Table < EndPtr) Sum += *Table++; return Sum; } + public: + DEFINE_SIZE_STATIC (4); }; -ASSERT_SIZE (CheckSum, 4); /* @@ -418,17 +455,18 @@ ASSERT_SIZE (CheckSum, 4); struct FixedVersion { - inline operator uint32_t (void) const { return (major << 16) + minor; } + inline uint32_t to_int (void) const { return (major << 16) + minor; } - inline bool sanitize (hb_sanitize_context_t *context) { + inline bool sanitize (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - return SANITIZE_SELF (); + return c->check_struct (this); } USHORT major; USHORT minor; + public: + DEFINE_SIZE_STATIC (4); }; -ASSERT_SIZE (FixedVersion, 4); @@ -444,31 +482,31 @@ struct GenericOffsetTo : OffsetType { unsigned int offset = *this; if (unlikely (!offset)) return Null(Type); - return StructAtOffset (*CharP(base), offset); + return StructAtOffset (base, offset); } - inline bool sanitize (hb_sanitize_context_t *context, void *base) { + inline bool sanitize (hb_sanitize_context_t *c, void *base) { TRACE_SANITIZE (); - if (!SANITIZE_SELF ()) return false; + if (unlikely (!c->check_struct (this))) return false; unsigned int offset = *this; if (unlikely (!offset)) return true; - Type &obj = StructAtOffset (*CharP(base), offset); - return likely (obj.sanitize (context)) || neuter (context); + Type &obj = StructAtOffset (base, offset); + return likely (obj.sanitize (c)) || neuter (c); } template - inline bool sanitize (hb_sanitize_context_t *context, void *base, T user_data) { + inline bool sanitize (hb_sanitize_context_t *c, void *base, T user_data) { TRACE_SANITIZE (); - if (!SANITIZE_SELF ()) return false; + if (unlikely (!c->check_struct (this))) return false; unsigned int offset = *this; if (unlikely (!offset)) return true; - Type &obj = StructAtOffset (*CharP(base), offset); - return likely (obj.sanitize (context, user_data)) || neuter (context); + Type &obj = StructAtOffset (base, offset); + return likely (obj.sanitize (c, user_data)) || neuter (c); } private: /* Set the offset to Null */ - inline bool neuter (hb_sanitize_context_t *context) { - if (context->can_edit (CharP(this), this->get_size ())) { + inline bool neuter (hb_sanitize_context_t *c) { + if (c->can_edit (this, this->static_size)) { this->set (0); /* 0 is Null offset */ return true; } @@ -492,9 +530,6 @@ struct LongOffsetTo : GenericOffsetTo {}; template struct GenericArrayOf { - const Type *array(void) const { return &StructAfter (len); } - Type *array(void) { return &StructAfter (len); } - const Type *sub_array (unsigned int start_offset, unsigned int *pcount /* IN/OUT */) const { unsigned int count = len; @@ -504,63 +539,64 @@ struct GenericArrayOf count -= start_offset; count = MIN (count, *pcount); *pcount = count; - return array() + start_offset; + return array + start_offset; } inline const Type& operator [] (unsigned int i) const { if (unlikely (i >= len)) return Null(Type); - return array()[i]; + return array[i]; } - inline unsigned int get_size () const - { return len.get_size () + len * Type::get_size (); } + inline unsigned int get_size (void) const + { return len.static_size + len * Type::static_size; } - inline bool sanitize (hb_sanitize_context_t *context) { + inline bool sanitize (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - if (!likely (sanitize_shallow (context))) return false; + if (unlikely (!sanitize_shallow (c))) return false; + /* Note: for structs that do not reference other structs, * we do not need to call their sanitize() as we already did - * a bound check on the aggregate array size, hence the return. + * a bound check on the aggregate array size. We just include + * a small unreachable expression to make sure the structs + * pointed to do have a simple sanitize(), ie. they do not + * reference other structs via offsets. */ - return true; - /* We do keep this code though to make sure the structs pointed - * to do have a simple sanitize(), ie. they do not reference - * other structs. */ - unsigned int count = len; - for (unsigned int i = 0; i < count; i++) - if (!SANITIZE (array()[i])) - return false; + (void) (false && array[0].sanitize (c)); + return true; } - inline bool sanitize (hb_sanitize_context_t *context, void *base) { + inline bool sanitize (hb_sanitize_context_t *c, void *base) { TRACE_SANITIZE (); - if (!likely (sanitize_shallow (context))) return false; + if (unlikely (!sanitize_shallow (c))) return false; unsigned int count = len; for (unsigned int i = 0; i < count; i++) - if (!array()[i].sanitize (context, base)) + if (unlikely (!array[i].sanitize (c, base))) return false; return true; } template - inline bool sanitize (hb_sanitize_context_t *context, void *base, T user_data) { + inline bool sanitize (hb_sanitize_context_t *c, void *base, T user_data) { TRACE_SANITIZE (); - if (!likely (sanitize_shallow (context))) return false; + if (unlikely (!sanitize_shallow (c))) return false; unsigned int count = len; for (unsigned int i = 0; i < count; i++) - if (!array()[i].sanitize (context, base, user_data)) + if (unlikely (!array[i].sanitize (c, base, user_data))) return false; return true; } private: - inline bool sanitize_shallow (hb_sanitize_context_t *context) { + inline bool sanitize_shallow (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - return SANITIZE_SELF() && SANITIZE_ARRAY (this, Type::get_size (), len); + return c->check_struct (this) + && c->check_array (this, Type::static_size, len); } public: LenType len; -/*Type array[VAR];*/ + Type array[VAR]; + public: + DEFINE_SIZE_ARRAY (sizeof (LenType), array); }; /* An array with a USHORT number of elements. */ @@ -590,17 +626,17 @@ struct OffsetListOf : OffsetArrayOf inline const Type& operator [] (unsigned int i) const { if (unlikely (i >= this->len)) return Null(Type); - return this+this->array()[i]; + return this+this->array[i]; } - inline bool sanitize (hb_sanitize_context_t *context) { + inline bool sanitize (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - return OffsetArrayOf::sanitize (context, CharP(this)); + return OffsetArrayOf::sanitize (c, this); } template - inline bool sanitize (hb_sanitize_context_t *context, T user_data) { + inline bool sanitize (hb_sanitize_context_t *c, T user_data) { TRACE_SANITIZE (); - return OffsetArrayOf::sanitize (context, CharP(this), user_data); + return OffsetArrayOf::sanitize (c, this, user_data); } }; @@ -610,43 +646,58 @@ struct OffsetListOf : OffsetArrayOf template struct HeadlessArrayOf { - const Type *array(void) const { return &StructAfter (len); } - Type *array(void) { return &StructAfter (len); } - inline const Type& operator [] (unsigned int i) const { if (unlikely (i >= len || !i)) return Null(Type); - return array()[i-1]; + return array[i-1]; } - inline unsigned int get_size () const - { return len.get_size () + (len ? len - 1 : 0) * Type::get_size (); } + inline unsigned int get_size (void) const + { return len.static_size + (len ? len - 1 : 0) * Type::static_size; } - inline bool sanitize_shallow (hb_sanitize_context_t *context) { - return SANITIZE_SELF() && SANITIZE_ARRAY (this, Type::get_size (), len); + inline bool sanitize_shallow (hb_sanitize_context_t *c) { + return c->check_struct (this) + && c->check_array (this, Type::static_size, len); } - inline bool sanitize (hb_sanitize_context_t *context) { + inline bool sanitize (hb_sanitize_context_t *c) { TRACE_SANITIZE (); - if (!likely (sanitize_shallow (context))) return false; + if (unlikely (!sanitize_shallow (c))) return false; + /* Note: for structs that do not reference other structs, * we do not need to call their sanitize() as we already did - * a bound check on the aggregate array size, hence the return. + * a bound check on the aggregate array size. We just include + * a small unreachable expression to make sure the structs + * pointed to do have a simple sanitize(), ie. they do not + * reference other structs via offsets. */ - return true; - /* We do keep this code though to make sure the structs pointed - * to do have a simple sanitize(), ie. they do not reference - * other structs. */ - unsigned int count = len ? len - 1 : 0; - Type *a = array(); - for (unsigned int i = 0; i < count; i++) - if (!SANITIZE (a[i])) - return false; + (void) (false && array[0].sanitize (c)); + return true; } USHORT len; -/*Type array[VAR];*/ + Type array[VAR]; + public: + DEFINE_SIZE_ARRAY (sizeof (USHORT), array); }; +/* An array with sorted elements. Supports binary searching. */ +template +struct SortedArrayOf : ArrayOf { + + template + inline int search (const SearchType &x) const { + class Cmp { + public: static int cmp (const SearchType *a, const Type *b) { return b->cmp (*a); } + }; + const Type *p = (const Type *) bsearch (&x, this->array, this->len, sizeof (this->array[0]), (hb_compare_func_t) Cmp::cmp); + return p ? p - this->array : -1; + } +}; + + +HB_BEGIN_DECLS +HB_END_DECLS + #endif /* HB_OPEN_TYPE_PRIVATE_HH */