14e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)// Copyright 2013 The Chromium Authors. All rights reserved.
24e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)// Use of this source code is governed by a BSD-style license that can be
34e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)// found in the LICENSE file.
44e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)
54e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include "mojo/system/memory.h"
64e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)
74e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include <limits>
84e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)
94e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)#include "base/logging.h"
1046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)#include "build/build_config.h"
114e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)
124e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)namespace mojo {
134e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)namespace system {
1446d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)namespace internal {
1546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
1646d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)template <size_t alignment>
1746d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)bool IsAligned(const void* pointer) {
1846d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)  return reinterpret_cast<uintptr_t>(pointer) % alignment == 0;
1946d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)}
2046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
2146d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)// MSVS (2010, 2013) sometimes (on the stack) aligns, e.g., |int64_t|s (for
2246d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)// which |__alignof(int64_t)| is 8) to 4-byte boundaries. http://goo.gl/Y2n56T
2346d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)#if defined(COMPILER_MSVC) && defined(ARCH_CPU_32_BITS)
2446d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)template <>
2546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)bool IsAligned<8>(const void* pointer) {
2646d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)  return reinterpret_cast<uintptr_t>(pointer) % 4 == 0;
2746d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)}
2846d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)#endif
2946d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
3046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)template <size_t size, size_t alignment>
315f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)void MOJO_SYSTEM_IMPL_EXPORT CheckUserPointer(const void* pointer) {
325f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)  CHECK(pointer && IsAligned<alignment>(pointer));
3346d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)}
3446d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
3546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)// Explicitly instantiate the sizes we need. Add instantiations as needed.
365f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT CheckUserPointer<1, 1>(const void*);
375f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT CheckUserPointer<4, 4>(const void*);
386e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT CheckUserPointer<8, 4>(const void*);
395f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT CheckUserPointer<8, 8>(const void*);
4046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
4146d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)template <size_t size, size_t alignment>
425f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)void MOJO_SYSTEM_IMPL_EXPORT
435f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)CheckUserPointerWithCount(const void* pointer, size_t count) {
445f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)  CHECK_LE(count, std::numeric_limits<size_t>::max() / size);
455f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)  CHECK(count == 0 || (pointer && IsAligned<alignment>(pointer)));
464e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)}
474e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)
484e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)// Explicitly instantiate the sizes we need. Add instantiations as needed.
495f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
505f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithCount<1, 1>(const void*, size_t);
515f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
525f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithCount<4, 4>(const void*, size_t);
535f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
546e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles)    CheckUserPointerWithCount<8, 4>(const void*, size_t);
556e8cce623b6e4fe0c9e4af605d675dd9d0338c38Torne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
565f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithCount<8, 8>(const void*, size_t);
5746d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
5846d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)template <size_t alignment>
595f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)void CheckUserPointerWithSize(const void* pointer, size_t size) {
6046d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)  // TODO(vtl): If running in kernel mode, do a full verification. For now, just
6146d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)  // check that it's non-null and aligned. (A faster user mode implementation is
6246d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)  // also possible if this check is skipped.)
635f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)  CHECK(size == 0 || (!!pointer && internal::IsAligned<alignment>(pointer)));
6446d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)}
6546d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
665f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)// Explicitly instantiate the sizes we need. Add instantiations as needed.
675f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
685f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithSize<1>(const void*, size_t);
695f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
705f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithSize<4>(const void*, size_t);
715f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)// Whereas the other |Check...()| functions are usually used with integral typs
725f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)// or arrays of integral types, this one is used with Options structs for which
735f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)// alignment has been explicitly been specified (using |MOJO_ALIGNAS()|), which
745f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)// MSVS *does* respect.
755f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#if defined(COMPILER_MSVC) && defined(ARCH_CPU_32_BITS)
765f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template <>
775f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)void MOJO_SYSTEM_IMPL_EXPORT
785f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)CheckUserPointerWithSize<8>(const void* pointer, size_t size) {
795f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)  CHECK(size == 0 ||
805f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)        (!!pointer && reinterpret_cast<uintptr_t>(pointer) % 8 == 0));
815f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)}
825f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#else
835f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)template void MOJO_SYSTEM_IMPL_EXPORT
845f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)    CheckUserPointerWithSize<8>(const void*, size_t);
855f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)#endif
8646d4c2bc3267f3f028f39e7e311b0f89aba2e4fdTorne (Richard Coles)
875f1c94371a64b3196d4be9466099bb892df9b88eTorne (Richard Coles)}  // namespace internal
884e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)}  // namespace system
894e180b6a0b4720a9b8e9e959a882386f690f08ffTorne (Richard Coles)}  // namespace mojo
90