/src/libxml2/include/private/memory.h
Line | Count | Source |
1 | | #ifndef XML_MEMORY_H_PRIVATE__ |
2 | | #define XML_MEMORY_H_PRIVATE__ |
3 | | |
4 | | #include "../../libxml.h" |
5 | | |
6 | | #include <limits.h> |
7 | | #include <stddef.h> |
8 | | |
9 | | #ifndef SIZE_MAX |
10 | | #define SIZE_MAX ((size_t) -1) |
11 | | #endif |
12 | | |
13 | 5.12M | #define XML_MAX_ITEMS 1000000000 /* 1 billion */ |
14 | | |
15 | | XML_HIDDEN void |
16 | | xmlInitMemoryInternal(void); |
17 | | XML_HIDDEN void |
18 | | xmlCleanupMemoryInternal(void); |
19 | | |
20 | | /** |
21 | | * xmlGrowCapacity: |
22 | | * @array: pointer to array |
23 | | * @capacity: pointer to capacity (in/out) |
24 | | * @elemSize: size of an element in bytes |
25 | | * @min: elements in initial allocation |
26 | | * @max: maximum elements in the array |
27 | | * |
28 | | * Grow an array by at least one element, checking for overflow. |
29 | | * |
30 | | * Returns the new array size on success, -1 on failure. |
31 | | */ |
32 | | static XML_INLINE int |
33 | 32.9M | xmlGrowCapacity(int capacity, size_t elemSize, int min, int max) { |
34 | 32.9M | int extra; |
35 | | |
36 | 32.9M | if (capacity <= 0) { |
37 | 7.27M | #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION |
38 | 7.27M | (void) min; |
39 | 7.27M | return(1); |
40 | | #else |
41 | | return(min); |
42 | | #endif |
43 | 7.27M | } |
44 | | |
45 | 25.6M | if ((capacity >= max) || |
46 | 25.6M | ((size_t) capacity > SIZE_MAX / 2 / elemSize)) |
47 | 3.72k | return(-1); |
48 | | |
49 | | /* Grow by 50% */ |
50 | 25.6M | extra = (capacity + 1) / 2; |
51 | | |
52 | 25.6M | if (capacity > max - extra) |
53 | 5.11k | return(max); |
54 | | |
55 | 25.6M | return(capacity + extra); |
56 | 25.6M | } Unexecuted instantiation: encoding.c:xmlGrowCapacity Line | Count | Source | 33 | 4.98M | xmlGrowCapacity(int capacity, size_t elemSize, int min, int max) { | 34 | 4.98M | int extra; | 35 | | | 36 | 4.98M | if (capacity <= 0) { | 37 | 1.20M | #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION | 38 | 1.20M | (void) min; | 39 | 1.20M | return(1); | 40 | | #else | 41 | | return(min); | 42 | | #endif | 43 | 1.20M | } | 44 | | | 45 | 3.77M | if ((capacity >= max) || | 46 | 3.77M | ((size_t) capacity > SIZE_MAX / 2 / elemSize)) | 47 | 2.16k | return(-1); | 48 | | | 49 | | /* Grow by 50% */ | 50 | 3.77M | extra = (capacity + 1) / 2; | 51 | | | 52 | 3.77M | if (capacity > max - extra) | 53 | 3.03k | return(max); | 54 | | | 55 | 3.77M | return(capacity + extra); | 56 | 3.77M | } |
Unexecuted instantiation: parserInternals.c:xmlGrowCapacity Unexecuted instantiation: threads.c:xmlGrowCapacity Line | Count | Source | 33 | 1.97M | xmlGrowCapacity(int capacity, size_t elemSize, int min, int max) { | 34 | 1.97M | int extra; | 35 | | | 36 | 1.97M | if (capacity <= 0) { | 37 | 952k | #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION | 38 | 952k | (void) min; | 39 | 952k | return(1); | 40 | | #else | 41 | | return(min); | 42 | | #endif | 43 | 952k | } | 44 | | | 45 | 1.02M | if ((capacity >= max) || | 46 | 1.02M | ((size_t) capacity > SIZE_MAX / 2 / elemSize)) | 47 | 0 | return(-1); | 48 | | | 49 | | /* Grow by 50% */ | 50 | 1.02M | extra = (capacity + 1) / 2; | 51 | | | 52 | 1.02M | if (capacity > max - extra) | 53 | 0 | return(max); | 54 | | | 55 | 1.02M | return(capacity + extra); | 56 | 1.02M | } |
Line | Count | Source | 33 | 102k | xmlGrowCapacity(int capacity, size_t elemSize, int min, int max) { | 34 | 102k | int extra; | 35 | | | 36 | 102k | if (capacity <= 0) { | 37 | 0 | #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION | 38 | 0 | (void) min; | 39 | 0 | return(1); | 40 | | #else | 41 | | return(min); | 42 | | #endif | 43 | 0 | } | 44 | | | 45 | 102k | if ((capacity >= max) || | 46 | 102k | ((size_t) capacity > SIZE_MAX / 2 / elemSize)) | 47 | 1.00k | return(-1); | 48 | | | 49 | | /* Grow by 50% */ | 50 | 101k | extra = (capacity + 1) / 2; | 51 | | | 52 | 101k | if (capacity > max - extra) | 53 | 1.17k | return(max); | 54 | | | 55 | 100k | return(capacity + extra); | 56 | 101k | } |
Unexecuted instantiation: valid.c:xmlGrowCapacity Unexecuted instantiation: xmlmemory.c:xmlGrowCapacity Unexecuted instantiation: catalog.c:xmlGrowCapacity Unexecuted instantiation: HTMLparser.c:xmlGrowCapacity Unexecuted instantiation: xinclude.c:xmlGrowCapacity Line | Count | Source | 33 | 25.9M | xmlGrowCapacity(int capacity, size_t elemSize, int min, int max) { | 34 | 25.9M | int extra; | 35 | | | 36 | 25.9M | if (capacity <= 0) { | 37 | 5.11M | #ifdef FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION | 38 | 5.11M | (void) min; | 39 | 5.11M | return(1); | 40 | | #else | 41 | | return(min); | 42 | | #endif | 43 | 5.11M | } | 44 | | | 45 | 20.7M | if ((capacity >= max) || | 46 | 20.7M | ((size_t) capacity > SIZE_MAX / 2 / elemSize)) | 47 | 559 | return(-1); | 48 | | | 49 | | /* Grow by 50% */ | 50 | 20.7M | extra = (capacity + 1) / 2; | 51 | | | 52 | 20.7M | if (capacity > max - extra) | 53 | 911 | return(max); | 54 | | | 55 | 20.7M | return(capacity + extra); | 56 | 20.7M | } |
|
57 | | |
58 | | #endif /* XML_MEMORY_H_PRIVATE__ */ |