1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
|
#ifndef ___SAFETY_H__
#define ___SAFETY_H__
_Noreturn void __undefined(const char *, ...);
#define GCC_SSE_HACK __attribute__((noinline, target("no-sse")))
#include <errno.h>
#include <stdlib.h>
#include <stdio.h>
/*
#include "stdlib/_stdlib.h"
*/
#include "signal/_signal.h"
#if __STDC_VERSION__ >= 199901L
#include <inttypes.h>
#else
#include "inttypes/uintmax_t.h"
#endif
#if 0
_Thread_local
#endif
extern struct __checked_call {
char *file;
char *func;
unsigned long long line;
} __checked_call;
#if 0
_Thread_local
#endif
extern struct __dangerous {
int reporting;
struct __danger {
const char *func;
const char *param;
uintptr_t addr;
size_t len;
} read, write;
} __dangerous;
#ifndef NDEBUG
#define UNDEFINED(...) __undefined(__VA_ARGS__)
#define DANGEROUS_READ(__s, __l) do { \
if (__dangerous.reporting == 0 && __dangerous.read.func == 0) { \
__dangerous.read.func = __func__; \
__dangerous.read.param = #__s; \
__dangerous.read.addr = (uintptr_t)__s; \
__dangerous.read.len = __l; \
} \
} while (0)
#define DANGEROUS_WRITE(__s, __l) do { \
if (__dangerous.reporting == 0 && __dangerous.write.func == 0) { \
__dangerous.write.func = __func__; \
__dangerous.write.param = #__s; \
__dangerous.write.addr = (uintptr_t)__s; \
__dangerous.write.len = __l; \
} \
} while (0)
#define DANGER_OVER() do { \
if (__dangerous.reporting == 0) { \
__dangerous.read.func = __dangerous.write.func = 0; \
} \
} while (0)
#define ADD_PREV(__val, __arr, __count) do { \
void *tmp = realloc((__arr), ((__count) + 1) * sizeof((__arr)[0])); \
if (tmp == NULL) { \
fprintf(stderr, "Out of memory tracking values\n"); \
abort(); \
} \
(__arr) = tmp; \
(__arr)[__count] = __val; \
(__count)++; \
} while (0)
#define ADD_PREV_STRING(__val, __arr, __count) do { \
void *tmp = realloc((__arr), ((__count) + 1) * sizeof((__arr)[0])); \
if (tmp == NULL) { \
fprintf(stderr, "Out of memory tracking values\n"); \
abort(); \
} \
(__arr) = tmp; \
(__arr)[__count] = strdup(__val); \
(__count)++; \
} while (0)
#define ASSERT_PREV(__val, __arr, __count, __prev) do { \
int __found = 0; \
for (size_t __i = 0; __i < (__count); __i++) { \
if ((__arr)[__i] == (__val)) { \
__found = 1; \
break; \
} \
} \
if (!__found) { \
UNDEFINED("In call to %s(): %s was not returned by a previous call to %s", __func__, #__val, __prev); \
} \
} while (0)
#define ASSERT_PREV_STRING(__val, __arr, __count, __prev) do { \
int __found = 0; \
for (size_t __i = 0; __i < (__count); __i++) { \
printf("checking '%s' vs [%zu] '%s'\n", (__val), __i, (__arr)[__i]); \
if (strcmp((__arr)[__i], (__val)) == 0) { \
__found = 1; \
break; \
} \
} \
if (!__found) { \
UNDEFINED("In call to %s(): %s was not returned by a previous call to %s", __func__, __val, __prev); \
} \
} while (0)
#define ASSERT_NONNULL(__ptr) do { \
if (!__ptr) { \
UNDEFINED("In call to %s(), parameter %s cannot be NULL", __func__, #__ptr); \
} \
} while (0)
#define ASSERT_NOOVERLAP(__p1, __l1, __p2, __l2) do { \
char *__s1 = (char*)(__p1); \
char *__s2 = (char*)(__p2); \
if (((__s1 < __s2) && ((__s1 + (__l1)) > __s2)) || ((__s1 > __s2) && ((__s2 + (__l2)) > __s1))) { \
UNDEFINED("In call to %s(), parameters %s (%p-%p) and %s (%p-%p) overlap", __func__, #__p1, __p1, __s1 + __l1 - 1, #__p2, __p2, __s2 + __l2 - 1); \
} \
} while (0)
#define ASSERT_MBS(__s, __fn, __desc) do { \
size_t __n = MB_CUR_MAX; \
for (size_t __i = 0; __s[__i] != '\0'; __i++) { \
wchar_t __wc = L'\0'; \
if (0 && mbtowc(&__wc, __s + __i, __n) == -1) { \
UNDEFINED("In call to %s(), %s is not a valid multi-byte string", __fn, __desc); \
} \
} \
} while (0)
#define SIGNAL_SAFE(__n) do { \
if (__n == 0 && __signal_h.current != 0) { \
int _sig = __signal_h.current; \
UNDEFINED("Function %s() is not safe to call from a signal handler (signal %d)", __func__, _sig); \
} \
} while (0)
#define __setchecked(__file, __func, __line) \
do { \
__checked_call.func = (char*)func; \
__checked_call.file = (char*)file; \
__checked_call.line = line; \
} while (0)
#define VCHECK_0(__fn) \
void __##__fn(const char * file, const char * func, unsigned long long line) { \
__setchecked(file, func, line); \
__fn(); \
__setchecked(NULL, NULL, 0); \
}
#define __vcheck_0(__fn) VCHECK_0(__fn)
#define VCHECK_1(__fn, __t1) \
void __##__fn(const char * file, const char * func, unsigned long long line, __t1 __a1) { \
__setchecked(file, func, line); \
__fn(__a1); \
__setchecked(NULL, NULL, 0); \
}
#define __vcheck_1(__fn, __t1) VCHECK_1(__fn, __t1)
#define VCHECK_2(__fn, __t1, __t2) \
void __##__fn(const char * file, const char * func, unsigned long long line, __t1 __a1, __t2 __a2) { \
__setchecked(file, func, line); \
__fn(__a1, __a2); \
__setchecked(NULL, NULL, 0); \
}
#define vcheck_2(__fn, __t1, __t2) VCHECK_2(__fn, __t1, __t2)
#define CHECK_0(__type, __def, __fn) \
__type __##__fn(const char * file, const char * func, unsigned long long line) { \
__type ret = __def; \
__setchecked(file, func, line); \
ret = __fn(); \
__setchecked(NULL, NULL, 0); \
return ret; \
}
#define CHECK_1(__type, __def, __fn, __t1) \
__type __##__fn(const char * file, const char * func, unsigned long long line, __t1 a1) { \
__type ret = __def; \
__setchecked(file, func, line); \
ret = __fn(a1); \
__setchecked(NULL, NULL, 0); \
return ret; \
}
#define CHECK_2(__type, __def, __fn, __t1, __t2) \
__type __##__fn(const char * file, const char * func, unsigned long long line, __t1 a1, __t2 a2) { \
__type ret = __def; \
__setchecked(file, func, line); \
ret = __fn(a1, a2); \
__setchecked(NULL, NULL, 0); \
return ret; \
}
#define CHECK_3(__type, __def, __fn, __t1, __t2, __t3) \
__type __##__fn(const char * file, const char * func, unsigned long long line, __t1 a1, __t2 a2, __t3 a3) { \
__type ret = __def; \
__setchecked(file, func, line); \
ret = __fn(a1, a2, a3); \
__setchecked(NULL, NULL, 0); \
return ret; \
}
#define CHECK_4(__type, __def, __fn, __t1, __t2, __t3, __t4) \
__type __##__fn(const char * file, const char * func, unsigned long long line, __t1 a1, __t2 a2, __t3 a3, __t4 a4) { \
__type ret = __def; \
__setchecked(file, func, line); \
ret = __fn(a1, a2, a3, a4); \
__setchecked(NULL, NULL, 0); \
return ret; \
}
#else
#define UNDEFINED(...)
#define ASSERT_NOOVERLAP(__x, __y, __s)
#define ASSERT_NONNULL(x)
#define ASSERT_MBS(__s, __f, __d)
#define VCHECK_0(f)
#define VCHECK_1(f, a)
#define VCHECK_2(f, a, b)
#define VCHECK_3(f, a, b, c)
#define VCHECK_4(f, a, b, c, d)
#define CHECK_0(t, d, f)
#define CHECK_1(t, d, f, a)
#define CHECK_2(t, d, f, a, b)
#define CHECK_3(t, d, f, a, b, c)
#define CHECK_4(t, d, f, a, b, c, d)
#endif
#endif
|
