Coverage Report

Created: 2026-04-01 07:17

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/ghostpdl/psi/iutil.c
Line
Count
Source
1
/* Copyright (C) 2001-2024 Artifex Software, Inc.
2
   All Rights Reserved.
3
4
   This software is provided AS-IS with no warranty, either express or
5
   implied.
6
7
   This software is distributed under license and may not be copied,
8
   modified or distributed except as expressly authorized under the terms
9
   of the license contained in the file LICENSE in this distribution.
10
11
   Refer to licensing information at http://www.artifex.com or contact
12
   Artifex Software, Inc.,  39 Mesa Street, Suite 108A, San Francisco,
13
   CA 94129, USA, for further information.
14
*/
15
16
17
/* Utilities for Ghostscript interpreter */
18
#include "math_.h"    /* for fabs */
19
#include "memory_.h"
20
#include "string_.h"
21
#include "ghost.h"
22
#include "ierrors.h"
23
#include "gsccode.h"    /* for gxfont.h */
24
#include "gsmatrix.h"
25
#include "gsutil.h"
26
#include "gxfont.h"
27
#include "strimpl.h"
28
#include "sstring.h"
29
#include "idict.h"
30
#include "ifont.h"    /* for FontID equality */
31
#include "imemory.h"
32
#include "iname.h"
33
#include "ipacked.h"    /* for array_get */
34
#include "iutil.h"    /* for checking prototypes */
35
#include "ivmspace.h"
36
#include "oper.h"
37
#include "store.h"
38
39
/*
40
 * By design choice, none of the procedures in this file take a context
41
 * pointer (i_ctx_p).  Since a number of them require a gs_dual_memory_t
42
 * for store checking or save bookkeeping, we need to #undef idmemory.
43
 */
44
#undef idmemory
45
46
/* ------ Object utilities ------ */
47
48
/* Define the table of ref type properties. */
49
const byte ref_type_properties[] = {
50
    REF_TYPE_PROPERTIES_DATA
51
};
52
53
/* Copy refs from one place to another. */
54
int
55
refcpy_to_old(ref * aref, uint index, const ref * from,
56
              uint size, gs_dual_memory_t *idmemory, client_name_t cname)
57
811M
{
58
811M
    ref *to = aref->value.refs + index;
59
811M
    int code = refs_check_space(from, size, r_space(aref));
60
61
811M
    if (code < 0)
62
0
        return code;
63
    /* We have to worry about aliasing.... */
64
811M
    if (to <= from || from + size <= to)
65
2.26G
        while (size--)
66
1.45G
            ref_assign_old(aref, to, from, cname), to++, from++;
67
0
    else
68
0
        for (from += size, to += size; size--;)
69
0
            from--, to--, ref_assign_old(aref, to, from, cname);
70
811M
    return 0;
71
811M
}
72
void
73
refcpy_to_new(ref * to, const ref * from, uint size,
74
              gs_dual_memory_t *idmemory)
75
0
{
76
0
    while (size--)
77
0
        ref_assign_new(to, from), to++, from++;
78
0
}
79
80
/* Fill a new object with nulls. */
81
void
82
refset_null_new(ref * to, uint size, uint new_mask)
83
1.11G
{
84
29.7G
    for (; size--; ++to)
85
28.6G
        make_ta(to, t_null, new_mask);
86
1.11G
}
87
88
/* Compare two objects for equality. */
89
static bool fid_eq(const gs_memory_t *mem, const gs_font *pfont1,
90
                    const gs_font *pfont2);
91
bool
92
obj_eq(const gs_memory_t *mem, const ref * pref1, const ref * pref2)
93
7.67G
{
94
7.67G
    ref nref;
95
96
7.67G
    if (r_type(pref1) != r_type(pref2)) {
97
        /*
98
         * Only a few cases need be considered here:
99
         * integer/real (and vice versa), name/string (and vice versa),
100
         * arrays, and extended operators.
101
         */
102
1.84G
        switch (r_type(pref1)) {
103
1.13M
            case t_integer:
104
1.13M
                return (r_has_type(pref2, t_real) &&
105
3.29k
                        pref2->value.realval == pref1->value.intval);
106
13.3M
            case t_real:
107
13.3M
                return (r_has_type(pref2, t_integer) &&
108
4.52k
                        pref2->value.intval == pref1->value.realval);
109
1.67G
            case t_name:
110
1.67G
                if (!r_has_type(pref2, t_string))
111
1.65G
                    return false;
112
18.0M
                name_string_ref(mem, pref1, &nref);
113
18.0M
                pref1 = &nref;
114
18.0M
                break;
115
21.5M
            case t_string:
116
21.5M
                if (!r_has_type(pref2, t_name))
117
2.55M
                    return false;
118
19.0M
                name_string_ref(mem, pref2, &nref);
119
19.0M
                pref2 = &nref;
120
19.0M
                break;
121
                /*
122
                 * Differing implementations of packedarray can be eq,
123
                 * if the length is zero, but an array is never eq to a
124
                 * packedarray.
125
                 */
126
1.09M
            case t_mixedarray:
127
1.09M
            case t_shortarray:
128
                /*
129
                 * Since r_type(pref1) is one of the above, this is a
130
                 * clever fast check for r_type(pref2) being the other.
131
                 */
132
1.09M
                return ((int)r_type(pref1) + (int)r_type(pref2) ==
133
1.09M
                        t_mixedarray + t_shortarray) &&
134
0
                    r_size(pref1) == 0 && r_size(pref2) == 0;
135
137M
            default:
136
137M
                if (r_btype(pref1) != r_btype(pref2))
137
137M
                    return false;
138
1.84G
        }
139
1.84G
    }
140
    /*
141
     * Now do a type-dependent comparison.  This would be very simple if we
142
     * always filled in all the bytes of a ref, but we currently don't.
143
     */
144
5.86G
    switch (r_btype(pref1)) {
145
5.84M
        case t_array:
146
5.84M
            return ((pref1->value.refs == pref2->value.refs ||
147
5.79M
                     r_size(pref1) == 0) &&
148
2.09M
                    r_size(pref1) == r_size(pref2));
149
3
        case t_mixedarray:
150
182k
        case t_shortarray:
151
182k
            return ((pref1->value.packed == pref2->value.packed ||
152
182k
                     r_size(pref1) == 0) &&
153
3
                    r_size(pref1) == r_size(pref2));
154
17.6M
        case t_boolean:
155
17.6M
            return (pref1->value.boolval == pref2->value.boolval);
156
57.9M
        case t_dictionary:
157
57.9M
            return (pref1->value.pdict == pref2->value.pdict);
158
217k
        case t_file:
159
217k
            return (pref1->value.pfile == pref2->value.pfile &&
160
217k
                    r_size(pref1) == r_size(pref2));
161
2.30G
        case t_integer:
162
2.30G
            return (pref1->value.intval == pref2->value.intval);
163
394k
        case t_mark:
164
138M
        case t_null:
165
138M
            return true;
166
2.98G
        case t_name:
167
2.98G
            return (pref1->value.pname == pref2->value.pname);
168
0
        case t_oparray:
169
185
        case t_operator:
170
185
            return (op_index(pref1) == op_index(pref2));
171
1.88M
        case t_real:
172
1.88M
            return (pref1->value.realval == pref2->value.realval);
173
204M
        case t_save:
174
204M
            return (pref2->value.saveid == pref1->value.saveid);
175
149M
        case t_string:
176
149M
            return (!bytes_compare(pref1->value.bytes, r_size(pref1),
177
149M
                                   pref2->value.bytes, r_size(pref2)));
178
0
        case t_device:
179
0
            return (pref1->value.pdevice->device == pref2->value.pdevice->device);
180
0
        case t_struct:
181
7
        case t_astruct:
182
7
        case t_pdfctx:
183
7
            return (pref1->value.pstruct == pref2->value.pstruct);
184
0
        case t_fontID:
185
            /* This is complicated enough to deserve a separate procedure. */
186
0
            return fid_eq(mem, r_ptr(pref1, gs_font), r_ptr(pref2, gs_font));
187
5.86G
    }
188
0
    return false;   /* shouldn't happen! */
189
5.86G
}
190
191
/*
192
 * Compare two FontIDs for equality.  In the Adobe implementations,
193
 * different scalings of a font have "equal" FIDs, so we do the same.
194
 * Furthermore, in more recent Adobe interpreters, different *copies* of a
195
 * font have equal FIDs -- at least for Type 1 and Type 3 fonts -- as long
196
 * as the "contents" of the font are the same.  We aren't sure that the
197
 * following matches the Adobe algorithm, but it's close enough to pass the
198
 * Genoa CET.
199
 */
200
/* (This is a single-use procedure, for clearer code.) */
201
static bool
202
fid_eq(const gs_memory_t *mem, const gs_font *pfont1, const gs_font *pfont2)
203
0
{
204
0
    while (pfont1->base != pfont1)
205
0
        pfont1 = pfont1->base;
206
0
    while (pfont2->base != pfont2)
207
0
        pfont2 = pfont2->base;
208
0
    if (pfont1 == pfont2)
209
0
        return true;
210
0
    switch (pfont1->FontType) {
211
0
    case 1: case 3:
212
0
        if (pfont1->FontType == pfont2->FontType)
213
0
            break;
214
0
    default:
215
0
        return false;
216
0
    }
217
    /* The following, while peculiar, appears to match CPSI. */
218
0
    {
219
0
        const gs_uid *puid1 = &((const gs_font_base *)pfont1)->UID;
220
0
        const gs_uid *puid2 = &((const gs_font_base *)pfont2)->UID;
221
0
    if (uid_is_UniqueID(puid1) || uid_is_UniqueID(puid2) ||
222
0
        ((uid_is_XUID(puid1) || uid_is_XUID(puid2)) &&
223
0
         !uid_equal(puid1, puid2)))
224
0
        return false;
225
0
    }
226
0
    {
227
0
        const font_data *pfd1 = (const font_data *)pfont1->client_data;
228
0
        const font_data *pfd2 = (const font_data *)pfont2->client_data;
229
230
0
        if (!(obj_eq(mem, &pfd1->BuildChar, &pfd2->BuildChar) &&
231
0
              obj_eq(mem, &pfd1->BuildGlyph, &pfd2->BuildGlyph) &&
232
0
              obj_eq(mem, &pfd1->Encoding, &pfd2->Encoding) &&
233
0
              obj_eq(mem, &pfd1->CharStrings, &pfd2->CharStrings)))
234
0
            return false;
235
0
        if (pfont1->FontType == 1) {
236
0
            ref *ppd1, *ppd2;
237
238
0
            if (dict_find_string(&pfd1->dict, "Private", &ppd1) > 0 &&
239
0
                dict_find_string(&pfd2->dict, "Private", &ppd2) > 0 &&
240
0
                !obj_eq(mem, ppd1, ppd2))
241
0
                return false;
242
0
        }
243
0
    }
244
0
    return true;
245
0
}
246
247
/* Compare two objects for identity. */
248
bool
249
obj_ident_eq(const gs_memory_t *mem, const ref * pref1, const ref * pref2)
250
0
{
251
0
    if (r_type(pref1) != r_type(pref2))
252
0
        return false;
253
0
    if (r_has_type(pref1, t_string))
254
0
        return (pref1->value.bytes == pref2->value.bytes &&
255
0
                r_size(pref1) == r_size(pref2));
256
0
    return obj_eq(mem, pref1, pref2);
257
0
}
258
259
/*
260
 * Set *pchars and *plen to point to the data of a name or string, and
261
 * return 0.  If the object isn't a name or string, return gs_error_typecheck.
262
 * If the object is a string without read access, return gs_error_invalidaccess.
263
 */
264
int
265
obj_string_data(const gs_memory_t *mem, const ref *op, const byte **pchars, uint *plen)
266
370M
{
267
370M
    switch (r_type(op)) {
268
248M
    case t_name: {
269
248M
        ref nref;
270
271
248M
        name_string_ref(mem, op, &nref);
272
248M
        *pchars = nref.value.bytes;
273
248M
        *plen = r_size(&nref);
274
248M
        return 0;
275
0
    }
276
121M
    case t_string:
277
121M
        check_read(*op);
278
121M
        *pchars = op->value.bytes;
279
121M
        *plen = r_size(op);
280
121M
        return 0;
281
0
    default:
282
0
        return_error(gs_error_typecheck);
283
370M
    }
284
370M
}
285
286
/*
287
 * Create a printable representation of an object, a la cvs and =
288
 * (full_print = 0), == (full_print = 1), or === (full_print = 2).  Return 0
289
 * if OK, 1 if the destination wasn't large enough, gs_error_invalidaccess if the
290
 * object's contents weren't readable.  If the return value is 0 or 1,
291
 * *prlen contains the amount of data returned.  start_pos is the starting
292
 * output position -- the first start_pos bytes of output are discarded.
293
 *
294
 * When (restart = false) return gs_error_rangecheck the when destination wasn't
295
 * large enough without modifying the destination. This is needed for
296
 * compatibility with Adobe implementation of cvs and cvrs, which don't
297
 * change the destination string on failure.
298
 *
299
 * The mem argument is only used for getting the type of structures,
300
 * not for allocating; if it is NULL and full_print != 0, structures will
301
 * print as --(struct)--.
302
 *
303
 * This rather complex API is needed so that a client can call obj_cvp
304
 * repeatedly to print on a stream, which may require suspending at any
305
 * point to handle stream callouts.
306
 */
307
static void ensure_dot(char *, size_t);
308
int
309
obj_cvp(const ref * op, byte * str, uint len, uint * prlen,
310
        int full_print, uint start_pos, const gs_memory_t *mem, bool restart)
311
398M
{
312
398M
    char buf[256];  /* big enough for any float, double, or struct name */
313
398M
    const byte *data = (const byte *)buf;
314
398M
    uint size;
315
398M
    int code;
316
398M
    ref nref;
317
318
398M
    if (full_print) {
319
2.76M
        static const char * const type_strings[] = { REF_TYPE_PRINT_STRINGS };
320
321
2.76M
        switch (r_btype(op)) {
322
41
        case t_boolean:
323
51.3k
        case t_integer:
324
51.3k
            break;
325
718
        case t_real: {
326
            /*
327
             * To get fully accurate output results for IEEE
328
             * single-precision floats (24 bits of mantissa), the ANSI %g
329
             * default of 6 digits is not enough; 9 are needed.
330
             * Unfortunately, using %.9g for floats (as opposed to doubles)
331
             * produces unfortunate artifacts such as 0.01 5 mul printing as
332
             * 0.049999997.  Therefore, we print using %g, and if the result
333
             * isn't accurate enough, print again using %.9g.
334
             * Unfortunately, a few PostScript programs 'know' that the
335
             * printed representation of floats fits into 6 digits (e.g.,
336
             * with cvs).  We resolve this by letting cvs, cvrs, and = do
337
             * what the Adobe interpreters appear to do (use %g), and only
338
             * produce accurate output for ==, for which there is no
339
             * analogue of cvs.  What a hack!
340
             */
341
718
            float value = op->value.realval;
342
718
            float scanned;
343
718
            code = gs_snprintf(buf, sizeof(buf), "%g", value);
344
718
            if (code <= 0)
345
0
                return_error(gs_error_undefinedresult);
346
718
            code = sscanf(buf, "%f", &scanned);
347
718
            if (code <= 0)
348
8
                return_error(gs_error_undefinedresult);
349
710
            if (scanned != value)
350
362
                gs_snprintf(buf, sizeof(buf), "%.9g", value);
351
710
            ensure_dot(buf, 256);
352
710
            goto rs;
353
718
        }
354
6.89k
        case t_operator:
355
9.35k
        case t_oparray:
356
9.35k
            code = obj_cvp(op, (byte *)buf + 2, sizeof(buf) - 4, &size, 0, 0, mem, restart);
357
9.35k
            if (code < 0)
358
0
                return code;
359
9.35k
            buf[0] = buf[1] = buf[size + 2] = buf[size + 3] = '-';
360
9.35k
            size += 4;
361
9.35k
            goto nl;
362
87.0k
        case t_name:
363
87.0k
            if (r_has_attr(op, a_executable)) {
364
22.1k
                code = obj_string_data(mem, op, &data, &size);
365
22.1k
                if (code < 0)
366
0
                    return code;
367
22.1k
                goto nl;
368
22.1k
            }
369
64.8k
            if (start_pos > 0)
370
0
                return obj_cvp(op, str, len, prlen, 0, start_pos - 1, mem, restart);
371
64.8k
            if (len < 1)
372
0
                return_error(gs_error_rangecheck);
373
64.8k
            code = obj_cvp(op, str + 1, len - 1, prlen, 0, 0, mem, restart);
374
64.8k
            if (code < 0)
375
0
                return code;
376
64.8k
            str[0] = '/';
377
64.8k
            ++*prlen;
378
64.8k
            return code;
379
0
        case t_null:
380
0
            data = (const byte *)"null";
381
0
            goto rs;
382
2.61M
        case t_string:
383
2.61M
            if (!r_has_attr(op, a_read))
384
13
                goto other;
385
2.61M
            size = r_size(op);
386
2.61M
            {
387
2.61M
                bool truncate = (full_print == 1 && size > CVP_MAX_STRING);
388
2.61M
                stream_cursor_read r;
389
2.61M
                stream_cursor_write w;
390
2.61M
                uint skip;
391
2.61M
                byte *wstr;
392
2.61M
                uint len1;
393
2.61M
                int status = 1;
394
395
2.61M
                if (start_pos == 0) {
396
2.48M
                    if (len < 1)
397
0
                        return_error(gs_error_rangecheck);
398
2.48M
                    str[0] = '(';
399
2.48M
                    skip = 0;
400
2.48M
                    wstr = str + 1;
401
2.48M
                } else {
402
134k
                    skip = start_pos - 1;
403
134k
                    wstr = str;
404
134k
                }
405
2.61M
                len1 = len + (str - wstr);
406
2.61M
                stream_cursor_read_init(&r, op->value.const_bytes, truncate ? CVP_MAX_STRING : size);
407
408
2.67M
                while (skip && status == 1) {
409
190k
                    uint written;
410
411
190k
                    stream_cursor_write_init(&w, (byte *)buf, min(skip + len1, sizeof(buf)));
412
190k
                    status = s_PSSE_template.process(NULL, &r, &w, false);
413
                    /* +1 accounts for crazy w.ptr initialisation - see stream_cursor_write_init() */
414
190k
                    written = (w.ptr - ((byte *)buf)) + 1;
415
190k
                    if (written > skip) {
416
133k
                        written -= skip;
417
133k
                        memcpy(wstr, buf + skip, written);
418
133k
                        wstr += written;
419
133k
                        skip = 0;
420
133k
                        break;
421
133k
                    }
422
57.0k
                    skip -= written;
423
57.0k
                }
424
                /*
425
                 * We can reach here with status == 0 (and skip != 0) if
426
                 * start_pos lies within the trailing ")" or  "...)".
427
                 */
428
2.61M
                if (status == 0) {
429
#ifdef DEBUG
430
                    if (skip > (truncate ? 4 : 1)) {
431
                        return_error(gs_error_Fatal);
432
                    }
433
#endif
434
41.1k
                }
435
2.61M
                stream_cursor_write_init(&w, (byte *)wstr, (size_t)((str + len) - wstr));
436
2.61M
                if (status == 1)
437
2.57M
                    status = s_PSSE_template.process(NULL, &r, &w, false);
438
2.61M
                *prlen = w.ptr - (str - 1);
439
2.61M
                if (status != 0)
440
133k
                    return 1;
441
2.48M
                if (truncate) {
442
4.10k
                    if (len - *prlen < 4 - skip)
443
145
                        return 1;
444
3.96k
                    memcpy(w.ptr + 1, &"...)"[skip], 4 - skip);
445
3.96k
                    *prlen += 4 - skip;
446
2.47M
                } else {
447
2.47M
                    if (len - *prlen < 1 - skip)
448
823
                        return 1;
449
2.47M
                    if (!skip) {
450
2.47M
                        w.ptr[1] = ')';
451
2.47M
                        *prlen += 1;
452
2.47M
                    }
453
2.47M
                }
454
2.48M
            }
455
2.48M
            return 0;
456
0
        case t_astruct:
457
0
        case t_struct:
458
0
            if (r_is_foreign(op)) {
459
                /* gs_object_type may not work. */
460
0
                data = (const byte *)"-foreign-struct-";
461
0
                goto rs;
462
0
            }
463
0
            if (!mem) {
464
0
                data = (const byte *)"-(struct)-";
465
0
                goto rs;
466
0
            }
467
0
            data = (const byte *)
468
0
                gs_struct_type_name_string(
469
0
                                gs_object_type(mem,
470
0
                                    (const obj_header_t *)op->value.pstruct));
471
0
            size = strlen((const char *)data);
472
0
            if (size > 4 && !memcmp(data + size - 4, "type", 4))
473
0
                size -= 4;
474
0
            if (size > sizeof(buf) - 3)
475
0
                return_error(gs_error_rangecheck);
476
0
            buf[0] = '-';
477
0
            memcpy(buf + 1, data, size);
478
0
            buf[size + 1] = '-';
479
0
            size += 2;
480
0
            data = (const byte *)buf;
481
0
            goto nl;
482
0
        case t_pdfctx:
483
0
            data = (const byte *)"-pdfcontext-";
484
0
            goto rs;
485
6.70k
        default:
486
6.72k
other:
487
6.72k
            {
488
6.72k
                int rtype = r_btype(op);
489
490
6.72k
                if (rtype >= countof(type_strings))
491
0
                    return_error(gs_error_rangecheck);
492
6.72k
                data = (const byte *)type_strings[rtype];
493
6.72k
                if (data == 0)
494
0
                    return_error(gs_error_rangecheck);
495
6.72k
            }
496
6.72k
            goto rs;
497
2.76M
        }
498
2.76M
    }
499
    /* full_print = 0 */
500
395M
    switch (r_btype(op)) {
501
55.8k
    case t_boolean:
502
55.8k
        data = (const byte *)(op->value.boolval ? "true" : "false");
503
55.8k
        break;
504
18.2M
    case t_integer:
505
18.2M
        gs_snprintf(buf, sizeof(buf), "%"PRIpsint, op->value.intval);
506
18.2M
        break;
507
2.75M
    case t_string:
508
2.75M
        check_read(*op);
509
        /* falls through */
510
250M
    case t_name:
511
250M
        code = obj_string_data(mem, op, &data, &size);
512
250M
        if (code < 0)
513
0
            return code;
514
250M
        goto nl;
515
250M
    case t_oparray: {
516
119M
        uint index = op_index(op);
517
119M
        const op_array_table *opt = get_op_array(mem, index);
518
519
119M
        name_index_ref(mem, opt->nx_table[index - opt->base_index], &nref);
520
119M
        name_string_ref(mem, &nref, &nref);
521
119M
        code = obj_string_data(mem, &nref, &data, &size);
522
119M
        if (code < 0)
523
0
            return code;
524
119M
        goto nl;
525
119M
    }
526
119M
    case t_operator: {
527
        /* Recover the name from the initialization table. */
528
3.23M
        uint index = op_index(op);
529
530
        /*
531
         * Check the validity of the index.  (An out-of-bounds index
532
         * is only possible when examining an invalid object using
533
         * the debugger.)
534
         */
535
3.23M
        if (index > 0 && index < op_def_count) {
536
3.23M
            data = (const byte *)(op_index_def(index)->oname + 1);
537
3.23M
            break;
538
3.23M
        }
539
        /* Internal operator, no name. */
540
#if defined(DEBUG) && DEBUG != 0
541
        gs_snprintf(buf, sizeof(buf), "@"PRI_INTPTR, (intptr_t) op->value.opproc);
542
#else
543
180
        gs_snprintf(buf, sizeof(buf), "@anonymous_operator", (intptr_t) op->value.opproc);
544
180
#endif
545
180
        break;
546
3.23M
    }
547
658k
    case t_real:
548
        /*
549
         * The value 0.0001 is a boundary case that the Adobe interpreters
550
         * print in f-format but at least some gs versions print in
551
         * e-format, presumably because of differences in the underlying C
552
         * library implementation.  Work around this here.
553
         */
554
658k
        if (op->value.realval == (float)0.0001) {
555
36
            strncpy(buf, "0.0001", 256);
556
658k
        } else {
557
658k
            gs_snprintf(buf, sizeof(buf), "%g", op->value.realval);
558
658k
        }
559
658k
        ensure_dot(buf, 256);
560
658k
        break;
561
3.77M
    default:
562
3.77M
        data = (const byte *)"--nostringval--";
563
395M
    }
564
26.0M
rs: size = strlen((const char *)data);
565
395M
nl: if (size < start_pos)
566
0
        return_error(gs_error_rangecheck);
567
395M
    if (!restart && size > len)
568
4
        return_error(gs_error_rangecheck);
569
395M
    size -= start_pos;
570
395M
    *prlen = min(size, len);
571
395M
    memmove(str, data + start_pos, *prlen);
572
395M
    return (size > len);
573
395M
}
574
/*
575
 * Make sure the converted form of a real number has at least one of an 'e'
576
 * or a decimal point, so it won't be mistaken for an integer.
577
 * Re-format the exponent to satisfy Genoa CET test.
578
 */
579
static void
580
ensure_dot(char *buf, size_t buflen)
581
659k
{
582
659k
    char *pe = strchr(buf, 'e');
583
659k
    if (pe) {
584
359k
        int i;
585
359k
        (void)sscanf(pe + 1, "%d", &i);
586
359k
        buflen -= (size_t)(pe - buf);
587
        /* MSVC .net 2005 express doesn't support "%+02d" */
588
359k
        if (i >= 0)
589
133k
            gs_snprintf(pe + 1, buflen, "+%02d", i);
590
225k
        else
591
225k
            gs_snprintf(pe + 1, buflen, "-%02d", -i);
592
359k
    } else if (strchr(buf, '.') == NULL) {
593
135k
        strcat(buf, ".0");
594
135k
    }
595
659k
}
596
597
/*
598
 * Create a printable representation of an object, a la cvs and =.  Return 0
599
 * if OK, gs_error_rangecheck if the destination wasn't large enough,
600
 * gs_error_invalidaccess if the object's contents weren't readable.  If pchars !=
601
 * NULL, then if the object was a string or name, store a pointer to its
602
 * characters in *pchars even if it was too large; otherwise, set *pchars =
603
 * str.  In any case, store the length in *prlen.
604
 */
605
int
606
obj_cvs(const gs_memory_t *mem, const ref * op, byte * str, uint len, uint * prlen,
607
        const byte ** pchars)
608
383M
{
609
383M
    int code = obj_cvp(op, str, len, prlen, 0, 0, mem, false);  /* NB: NULL memptr */
610
611
383M
    if (code == 1) {
612
0
        if (pchars)
613
0
            obj_string_data(mem, op, pchars, prlen);
614
0
        return gs_note_error(gs_error_rangecheck);
615
383M
    } else {
616
383M
        if (pchars)
617
383M
          *pchars = str;
618
383M
        return code;
619
383M
    }
620
383M
}
621
622
/* Find the index of an operator that doesn't have one stored in it. */
623
ushort
624
op_find_index(const ref * pref /* t_operator */ )
625
5.29M
{
626
5.29M
    op_proc_t proc = real_opproc(pref);
627
5.29M
    const op_def *const *opp = op_defs_all;
628
5.29M
    const op_def *const *opend = opp + (op_def_count / OP_DEFS_MAX_SIZE);
629
630
99.0M
    for (; opp < opend; ++opp) {
631
99.0M
        const op_def *def = *opp;
632
633
639M
        for (; def->oname != 0; ++def)
634
545M
            if (def->proc == proc)
635
5.29M
                return (opp - op_defs_all) * OP_DEFS_MAX_SIZE + (def - *opp);
636
99.0M
    }
637
    /* Lookup failed!  This isn't possible.... */
638
344
    return 0;
639
5.29M
}
640
641
/*
642
 * Convert an operator index to an operator or oparray ref.
643
 * This is only used for debugging and for 'get' from packed arrays,
644
 * so it doesn't have to be very fast.
645
 */
646
void
647
op_index_ref(const gs_memory_t *mem, uint index, ref * pref)
648
280M
{
649
280M
    const op_array_table *opt;
650
651
280M
    if (op_index_is_operator(index)) {
652
123M
        make_oper(pref, index, op_index_proc(index));
653
123M
        return;
654
123M
    }
655
157M
    opt = get_op_array(mem, index);
656
157M
    make_tasv(pref, t_oparray, opt->attrs, index,
657
157M
              const_refs, (opt->table.value.const_refs
658
157M
                           + index - opt->base_index));
659
157M
}
660
661
/* Get an element from an array of some kind. */
662
/* This is also used to index into Encoding vectors, */
663
/* the error name vector, etc. */
664
int
665
array_get(const gs_memory_t *mem, const ref * aref, long index_long, ref * pref)
666
12.3G
{
667
12.3G
    if ((ulong)index_long >= r_size(aref))
668
13.0k
        return_error(gs_error_rangecheck);
669
12.3G
    switch (r_type(aref)) {
670
8.68G
        case t_array:
671
8.68G
            {
672
8.68G
                const ref *pvalue = aref->value.refs + index_long;
673
674
8.68G
                ref_assign(pref, pvalue);
675
8.68G
            }
676
8.68G
            break;
677
2.45G
        case t_mixedarray:
678
2.45G
            {
679
2.45G
                const ref_packed *packed = aref->value.packed;
680
2.45G
                uint index = (uint)index_long;
681
682
36.7G
                for (; index--;)
683
34.3G
                    packed = packed_next(packed);
684
2.45G
                packed_get(mem, packed, pref);
685
2.45G
            }
686
2.45G
            break;
687
1.16G
        case t_shortarray:
688
1.16G
            {
689
1.16G
                const ref_packed *packed = aref->value.packed + index_long;
690
691
1.16G
                packed_get(mem, packed, pref);
692
1.16G
            }
693
1.16G
            break;
694
8
        default:
695
8
            return_error(gs_error_typecheck);
696
12.3G
    }
697
12.3G
    return 0;
698
12.3G
}
699
700
/* Get an element from a packed array. */
701
/* (This works for ordinary arrays too.) */
702
/* Source and destination are allowed to overlap if the source is packed, */
703
/* or if they are identical. */
704
void
705
packed_get(const gs_memory_t *mem, const ref_packed * packed, ref * pref)
706
4.95G
{
707
4.95G
    const ref_packed elt = *packed;
708
4.95G
    uint value = elt & packed_value_mask;
709
710
4.95G
    switch (elt >> r_packed_type_shift) {
711
0
        default:    /* (shouldn't happen) */
712
0
            make_null(pref);
713
0
            break;
714
123M
        case pt_executable_operator:
715
123M
            op_index_ref(mem, value, pref);
716
123M
            break;
717
903M
        case pt_integer:
718
903M
            make_int(pref, (ps_int)value + packed_min_intval);
719
903M
            break;
720
983M
        case pt_literal_name:
721
983M
            name_index_ref(mem, value, pref);
722
983M
            break;
723
2.76G
        case pt_executable_name:
724
2.76G
            name_index_ref(mem, value, pref);
725
2.76G
            r_set_attrs(pref, a_executable);
726
2.76G
            break;
727
175M
        case pt_full_ref:
728
175M
        case pt_full_ref + 1:
729
175M
            ref_assign(pref, (const ref *)packed);
730
4.95G
    }
731
4.95G
}
732
733
/* Check to make sure an interval contains no object references */
734
/* to a space younger than a given one. */
735
/* Return 0 or gs_error_invalidaccess. */
736
int
737
refs_check_space(const ref * bot, uint size, uint space)
738
811M
{
739
2.46G
    for (; size--; bot++)
740
1.65G
        store_check_space(space, bot);
741
811M
    return 0;
742
811M
}
743
744
/* ------ String utilities ------ */
745
746
/* Convert a C string to a Ghostscript string */
747
int
748
string_to_ref(const char *cstr, ref * pref, gs_ref_memory_t * mem,
749
              client_name_t cname)
750
44.8k
{
751
44.8k
    uint size = strlen(cstr);
752
44.8k
    int code = gs_alloc_string_ref(mem, pref, a_all, size, cname);
753
754
44.8k
    if (code < 0)
755
0
        return code;
756
44.8k
    memcpy(pref->value.bytes, cstr, size);
757
44.8k
    return 0;
758
44.8k
}
759
760
/* Convert a Ghostscript string to a C string. */
761
/* Return 0 iff the buffer can't be allocated. */
762
char *
763
ref_to_string(const ref * pref, gs_memory_t * mem, client_name_t cname)
764
913k
{
765
913k
    uint size = r_size(pref);
766
913k
    char *str = (char *)gs_alloc_string(mem, size + 1, cname);
767
768
913k
    if (str == 0)
769
0
        return 0;
770
913k
    memcpy(str, (const char *)pref->value.bytes, size);
771
913k
    str[size] = 0;
772
913k
    return str;
773
913k
}
774
775
/* ------ Operand utilities ------ */
776
777
/* Get N numeric operands from the stack or an array. */
778
/* Return a bit-mask indicating which ones are integers, */
779
/* or a (negative) error indication. */
780
/* The 1-bit in the bit-mask refers to the first operand. */
781
/* Store float versions of the operands at pval. */
782
/* The stack underflow check (check for t__invalid) is harmless */
783
/* if the operands come from somewhere other than the stack. */
784
int
785
num_params(const ref * op, int count, double *pval)
786
90.9M
{
787
90.9M
    int mask = 0;
788
789
90.9M
    pval += count;
790
518M
    while (--count >= 0) {
791
428M
        mask <<= 1;
792
428M
        switch (r_type(op)) {
793
95.4M
            case t_real:
794
95.4M
                *--pval = op->value.realval;
795
95.4M
                break;
796
332M
            case t_integer:
797
332M
                *--pval = (double)op->value.intval;
798
332M
                mask++;
799
332M
                break;
800
124
            case t__invalid:
801
124
                return_error(gs_error_stackunderflow);
802
2.48k
            default:
803
2.48k
                return_error(gs_error_typecheck);
804
428M
        }
805
428M
        op--;
806
428M
    }
807
    /* If count is very large, mask might overflow. */
808
    /* In this case we clearly don't care about the value of mask. */
809
90.9M
    return (mask < 0 ? 0 : mask);
810
90.9M
}
811
/* float_params doesn't bother to keep track of the mask. */
812
int
813
float_params(const ref * op, int count, float *pval)
814
56.2M
{
815
228M
    for (pval += count; --count >= 0; --op)
816
172M
        switch (r_type(op)) {
817
49.9M
            case t_real:
818
49.9M
                *--pval = op->value.realval;
819
49.9M
                break;
820
122M
            case t_integer:
821
122M
                *--pval = (float)op->value.intval;
822
122M
                break;
823
86
            case t__invalid:
824
86
                return_error(gs_error_stackunderflow);
825
62
            default:
826
62
                return_error(gs_error_typecheck);
827
172M
        }
828
56.2M
    return 0;
829
56.2M
}
830
831
/* Get N numeric parameters (as floating point numbers) from an array */
832
int
833
process_float_array(const gs_memory_t *mem, const ref * parray, int count, float * pval)
834
1.91M
{
835
1.91M
    int         code = 0, indx0 = 0;
836
837
    /* we assume parray is an array of some type, of adequate length */
838
1.91M
    if (r_has_type(parray, t_array))
839
1.43M
        return float_params(parray->value.refs + count - 1, count, pval);
840
841
    /* short/mixed array; convert the entries to refs */
842
975k
    while (count > 0 && code >= 0) {
843
487k
        int     i, subcount;
844
487k
        ref     ref_buff[20];   /* 20 is arbitrary */
845
846
487k
        subcount = (count > countof(ref_buff) ? countof(ref_buff) : count);
847
1.46M
        for (i = 0; i < subcount && code >= 0; i++)
848
975k
            code = array_get(mem, parray, (long)(i + indx0), &ref_buff[i]);
849
487k
        if (code >= 0)
850
487k
            code = float_params(ref_buff + subcount - 1, subcount, pval);
851
487k
        count -= subcount;
852
487k
        pval += subcount;
853
487k
        indx0 += subcount;
854
487k
    }
855
856
487k
    return code;
857
1.91M
}
858
859
/* Get a single real parameter. */
860
/* The only possible errors are gs_error_typecheck and gs_error_stackunderflow. */
861
/* If an error is returned, the return value is not updated. */
862
int
863
real_param(const ref * op, double *pparam)
864
199M
{
865
199M
    switch (r_type(op)) {
866
95.2M
        case t_integer:
867
95.2M
            *pparam = (double)op->value.intval;
868
95.2M
            break;
869
103M
        case t_real:
870
103M
            *pparam = op->value.realval;
871
103M
            break;
872
31
        case t__invalid:
873
31
            return_error(gs_error_stackunderflow);
874
5.39k
        default:
875
5.39k
            return_error(gs_error_typecheck);
876
199M
    }
877
199M
    return 0;
878
199M
}
879
int
880
float_param(const ref * op, float *pparam)
881
3.60M
{
882
3.60M
    double dval;
883
3.60M
    int code = real_param(op, &dval);
884
885
3.60M
    if (code >= 0)
886
3.60M
        *pparam = (float)dval; /* can't overflow */
887
3.60M
    return code;
888
3.60M
}
889
890
/* Get an integer parameter in a given range. */
891
int
892
int_param(const ref * op, int max_value, int *pparam)
893
1.36M
{
894
1.36M
    check_int_leu(*op, max_value);
895
1.36M
    *pparam = (int)op->value.intval;
896
1.36M
    return 0;
897
1.36M
}
898
899
/* Make real values on the operand stack. */
900
int
901
make_reals(ref * op, const double *pval, int count)
902
103k
{
903
    /* This should return gs_error_limitcheck if any real is too large */
904
    /* to fit into a float on the stack. */
905
517k
    for (; count--; op++, pval++)
906
414k
        make_real(op, *pval);
907
103k
    return 0;
908
103k
}
909
int
910
make_floats(ref * op, const float *pval, int count)
911
4.76M
{
912
    /* This should return gs_error_undefinedresult for infinities. */
913
17.1M
    for (; count--; op++, pval++)
914
12.3M
        make_real(op, *pval);
915
4.76M
    return 0;
916
4.76M
}
917
918
/* Compute the error code when check_proc fails. */
919
/* Note that the client, not this procedure, uses return_error. */
920
/* The stack underflow check is harmless in the off-stack case. */
921
int
922
check_proc_failed(const ref * pref)
923
207
{
924
207
    if (r_is_array(pref)) {
925
21
        if (r_has_attr(pref, a_executable))
926
0
            return gs_error_invalidaccess;
927
21
        else
928
21
            return gs_error_typecheck;
929
186
    } else {
930
186
        if (r_has_type(pref, t__invalid))
931
50
            return gs_error_stackunderflow;
932
136
        else
933
136
            return gs_error_typecheck;
934
186
    }
935
207
}
936
937
/* Compute the error code when a type check on the stack fails. */
938
/* Note that the client, not this procedure, uses return_error. */
939
int
940
check_type_failed(const ref * op)
941
118M
{
942
118M
    return (r_has_type(op, t__invalid) ? gs_error_stackunderflow : gs_error_typecheck);
943
118M
}
944
945
/* ------ Matrix utilities ------ */
946
947
/* Read a matrix operand. */
948
/* Return 0 if OK, error code if not. */
949
int
950
read_matrix(const gs_memory_t *mem, const ref * op, gs_matrix * pmat)
951
4.74M
{
952
4.74M
    int code;
953
4.74M
    ref values[6];
954
4.74M
    const ref *pvalues;
955
956
4.74M
    switch (r_type(op)) {
957
4.74M
        case t_array:
958
4.74M
            pvalues = op->value.refs;
959
4.74M
            break;
960
0
        case t_mixedarray:
961
15
        case t_shortarray:
962
15
            {
963
15
                int i;
964
965
81
                for (i = 0; i < 6; ++i) {
966
70
                    code = array_get(mem, op, (long)i, &values[i]);
967
70
                    if (code < 0)
968
4
                        return code;
969
70
                }
970
11
                pvalues = values;
971
11
            }
972
0
            break;
973
328
        default:
974
328
            return_op_typecheck(op);
975
4.74M
    }
976
4.74M
    check_read(*op);
977
4.74M
    if (r_size(op) != 6)
978
23
        return_error(gs_error_rangecheck);
979
4.74M
    code = float_params(pvalues + 5, 6, (float *)pmat);
980
4.74M
    return (code < 0 ? code : 0);
981
4.74M
}
982
983
/* Write a matrix operand. */
984
/* Return 0 if OK, error code if not. */
985
int
986
write_matrix_in(ref * op, const gs_matrix * pmat, gs_dual_memory_t *idmemory,
987
                gs_ref_memory_t *imem)
988
2.25M
{
989
2.25M
    ref *aptr;
990
2.25M
    const float *pel;
991
2.25M
    int i;
992
993
2.25M
    check_write_type(*op, t_array);
994
2.25M
    if (r_size(op) != 6)
995
0
        return_error(gs_error_rangecheck);
996
2.25M
    aptr = op->value.refs;
997
2.25M
    pel = (const float *)pmat;
998
15.7M
    for (i = 5; i >= 0; i--, aptr++, pel++) {
999
13.5M
        if (idmemory) {
1000
13.2M
            ref_save(op, aptr, "write_matrix");
1001
13.2M
            make_real_new(aptr, *pel);
1002
13.2M
        } else {
1003
296k
            make_tav(aptr, t_real, imemory_new_mask(imem), realval, *pel);
1004
296k
        }
1005
13.5M
    }
1006
2.25M
    return 0;
1007
2.25M
}