dart-sdk/runtime/vm/bitmap.h
Daco Harkes 096612ff46 [vm] Fix BitmapBuilder backing store growth
If the length was set longer than the backing store, on a call to
`Set(index, false)`, and subsequently a call `Set(index-1, true)` was
done, it would try to write outside the backing store.

Closes: https://github.com/dart-lang/sdk/issues/44946

TEST=runtime/vm/bitmap_test.cc
TEST=tests/ffi_2/function_structs_by_value_generated_test.dart/0

Change-Id: Ib636e90b0f6acace9ec8b71557370c281e9e4a99
Cq-Include-Trybots: luci.dart.try:app-kernel-linux-debug-x64-try
Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/184423
Commit-Queue: Daco Harkes <dacoharkes@google.com>
Reviewed-by: Aske Simon Christensen <askesc@google.com>
2021-02-11 16:14:13 +00:00

85 lines
2.5 KiB
C++

// Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file
// for details. All rights reserved. Use of this source code is governed by a
// BSD-style license that can be found in the LICENSE file.
#ifndef RUNTIME_VM_BITMAP_H_
#define RUNTIME_VM_BITMAP_H_
#include "vm/allocation.h"
#include "vm/datastream.h"
#include "vm/thread_state.h"
#include "vm/zone.h"
namespace dart {
// BitmapBuilder is used to build a bitmap. The implementation is optimized
// for a dense set of small bit maps without a fixed upper bound (e.g: a
// pointer map description of a stack).
class BitmapBuilder : public ZoneAllocated {
public:
BitmapBuilder()
: length_(0),
data_size_in_bytes_(kInitialSizeInBytes),
data_(ThreadState::Current()->zone()->Alloc<uint8_t>(
kInitialSizeInBytes)) {
memset(data_, 0, kInitialSizeInBytes);
}
intptr_t Length() const { return length_; }
void SetLength(intptr_t length);
// Get/Set individual bits in the bitmap, setting bits beyond the bitmap's
// length increases the length and expands the underlying bitmap if
// needed.
bool Get(intptr_t bit_offset) const;
void Set(intptr_t bit_offset, bool value);
// Return the bit offset of the highest bit set.
intptr_t Maximum() const;
// Return the bit offset of the lowest bit set.
intptr_t Minimum() const;
// Sets min..max (inclusive) to value.
void SetRange(intptr_t min, intptr_t max, bool value);
void Print() const;
void AppendAsBytesTo(BaseWriteStream* stream) const;
private:
static const intptr_t kInitialSizeInBytes = 16;
static const intptr_t kIncrementSizeInBytes = 16;
bool InRange(intptr_t offset) const {
if (offset < 0) {
FATAL1(
"Fatal error in BitmapBuilder::InRange :"
" invalid bit_offset, %" Pd "\n",
offset);
}
return (offset < length_);
}
bool InBackingStore(intptr_t bit_offset) {
intptr_t byte_offset = bit_offset >> kBitsPerByteLog2;
return byte_offset < data_size_in_bytes_;
}
// Get/Set a bit that is known to be covered by the backing store.
bool GetBit(intptr_t bit_offset) const;
void SetBit(intptr_t bit_offset, bool value);
intptr_t length_;
// Backing store for the bitmap. Reading bits beyond the backing store
// (up to length_) is allowed and they are assumed to be false.
intptr_t data_size_in_bytes_;
uint8_t* data_;
DISALLOW_COPY_AND_ASSIGN(BitmapBuilder);
};
} // namespace dart
#endif // RUNTIME_VM_BITMAP_H_