104 lines
4.1 KiB
C
104 lines
4.1 KiB
C
|
/****************************************************************************
|
||
|
|
*
|
||
|
|
* Open Watcom Project
|
||
|
|
*
|
||
|
|
* Portions Copyright (c) 1983-2002 Sybase, Inc. All Rights Reserved.
|
||
|
|
*
|
||
|
|
* ========================================================================
|
||
|
|
*
|
||
|
|
* This file contains Original Code and/or Modifications of Original
|
||
|
|
* Code as defined in and that are subject to the Sybase Open Watcom
|
||
|
|
* Public License version 1.0 (the 'License'). You may not use this file
|
||
|
|
* except in compliance with the License. BY USING THIS FILE YOU AGREE TO
|
||
|
|
* ALL TERMS AND CONDITIONS OF THE LICENSE. A copy of the License is
|
||
|
|
* provided with the Original Code and Modifications, and is also
|
||
|
|
* available at www.sybase.com/developer/opensource.
|
||
|
|
*
|
||
|
|
* The Original Code and all software distributed under the License are
|
||
|
|
* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
|
||
|
|
* EXPRESS OR IMPLIED, AND SYBASE AND ALL CONTRIBUTORS HEREBY DISCLAIM
|
||
|
|
* ALL SUCH WARRANTIES, INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF
|
||
|
|
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR
|
||
|
|
* NON-INFRINGEMENT. Please see the License for the specific language
|
||
|
|
* governing rights and limitations under the License.
|
||
|
|
*
|
||
|
|
* ========================================================================
|
||
|
|
*
|
||
|
|
* Description: Internal data and routines for "Safer C", or bounds-checking
|
||
|
|
* library extension.
|
||
|
|
*
|
||
|
|
****************************************************************************/
|
||
|
|
|
||
|
|
|
||
|
|
#ifndef _SAFERLIB_H_INCLUDED
|
||
|
|
#define _SAFERLIB_H_INCLUDED
|
||
|
|
|
||
|
|
#define __STDC_WANT_LIB_EXT1__ 1
|
||
|
|
#include <stdlib.h>
|
||
|
|
#include <stdint.h>
|
||
|
|
|
||
|
|
// Maximum length of runtime-constraint error message
|
||
|
|
#define RTCT_MSG_MAX 128
|
||
|
|
|
||
|
|
#define _RWD_rtcthandler __runtime_constraint_handler
|
||
|
|
|
||
|
|
extern constraint_handler_t __runtime_constraint_handler;
|
||
|
|
|
||
|
|
extern void __rtct_fail( const char *fn, const char *reason, void *reserved );
|
||
|
|
|
||
|
|
// Runtime-constraint validation macros. Call the handler and return zero if check
|
||
|
|
// failed, return non-zero value if check succeeded.
|
||
|
|
|
||
|
|
#define __check_constraint_nullptr( arg ) \
|
||
|
|
((arg == NULL) ? __rtct_fail( __func__, #arg " == NULL", NULL ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_maxsize( arg ) \
|
||
|
|
((arg > RSIZE_MAX) ? __rtct_fail( __func__, #arg " > RSIZE_MAX", NULL ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_zero( arg ) \
|
||
|
|
((arg == 0) ? __rtct_fail( __func__, #arg " == 0", NULL ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_toosmall( name, left ) \
|
||
|
|
((left == 0) ? __rtct_fail( __func__, #name " is too small to hold data", NULL ), 0 : 1)
|
||
|
|
|
||
|
|
|
||
|
|
// Runtime-constraint validation macros. Construct the message and return
|
||
|
|
// zero if check failed, return non-zero value if check succeeded.
|
||
|
|
// __rtct_fail has to be explicitly called later.
|
||
|
|
|
||
|
|
#define __check_constraint_nullptr_msg( msg, arg ) \
|
||
|
|
((arg == NULL) ? ( msg = #arg " == NULL" ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_maxsize_msg( msg, arg ) \
|
||
|
|
((arg > RSIZE_MAX) ? ( msg = #arg " > RSIZE_MAX" ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_zero_msg( msg, arg ) \
|
||
|
|
((arg == 0) ? ( msg = #arg " == 0" ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_toosmall_msg( msg, name, left ) \
|
||
|
|
((left == 0) ? ( msg = #name " is too small to hold data" ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_a_gt_b_msg( msg, a, b ) \
|
||
|
|
((a > b) ? ( msg = #a " > " #b ), 0 : 1)
|
||
|
|
|
||
|
|
#define __check_constraint_overlap_msg( msg, p1, len1, p2, len2 ) \
|
||
|
|
(((p1 == p2) || ( (p1 > p2) && ( p1 < (CHAR_TYPE *)p2 + len2 * sizeof( CHAR_TYPE ))) \
|
||
|
|
|| ( (p2 > p1) && ( p2 < (CHAR_TYPE *)p1 + len1 * sizeof( CHAR_TYPE )))) \
|
||
|
|
? ( msg = #p1 " overlap " #p2 ), 0 : 1)
|
||
|
|
|
||
|
|
|
||
|
|
// For 16-bit targets, the RSIZE_MAX check is effectively no-op. Object sizes
|
||
|
|
// up to SIZE_MAX are legal and not uncommon.
|
||
|
|
#if RSIZE_MAX == SIZE_MAX
|
||
|
|
#undef __check_constraint_maxsize
|
||
|
|
#define __check_constraint_maxsize( arg ) 1
|
||
|
|
#undef __check_constraint_maxsize_msg
|
||
|
|
#define __check_constraint_maxsize_msg( msg, arg ) 1
|
||
|
|
|
||
|
|
#define __lte_rsizmax( arg ) 1
|
||
|
|
#else
|
||
|
|
#define __lte_rsizmax( arg ) (arg <= RSIZE_MAX)
|
||
|
|
#endif
|
||
|
|
|
||
|
|
#endif // _SAFERLIB_H_INCLUDED
|