Coverage Report

Created: 2025-07-11 06:35

/src/nanopb/pb_common.c
Line
Count
Source (jump to first uncovered line)
1
/* pb_common.c: Common support functions for pb_encode.c and pb_decode.c.
2
 *
3
 * 2014 Petteri Aimonen <jpa@kapsi.fi>
4
 */
5
6
#include "pb_common.h"
7
8
static bool load_descriptor_values(pb_field_iter_t *iter)
9
6.34M
{
10
6.34M
    uint32_t word0;
11
6.34M
    uint32_t data_offset;
12
6.34M
    int_least8_t size_offset;
13
14
6.34M
    if (iter->index >= iter->descriptor->field_count)
15
602k
        return false;
16
17
5.74M
    word0 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
18
5.74M
    iter->type = (pb_type_t)((word0 >> 8) & 0xFF);
19
20
5.74M
    switch(word0 & 3)
21
5.74M
    {
22
1.36M
        case 0: {
23
            /* 1-word format */
24
1.36M
            iter->array_size = 1;
25
1.36M
            iter->tag = (pb_size_t)((word0 >> 2) & 0x3F);
26
1.36M
            size_offset = (int_least8_t)((word0 >> 24) & 0x0F);
27
1.36M
            data_offset = (word0 >> 16) & 0xFF;
28
1.36M
            iter->data_size = (pb_size_t)((word0 >> 28) & 0x0F);
29
1.36M
            break;
30
0
        }
31
32
3.73M
        case 1: {
33
            /* 2-word format */
34
3.73M
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
35
36
3.73M
            iter->array_size = (pb_size_t)((word0 >> 16) & 0x0FFF);
37
3.73M
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 28) << 6));
38
3.73M
            size_offset = (int_least8_t)((word0 >> 28) & 0x0F);
39
3.73M
            data_offset = word1 & 0xFFFF;
40
3.73M
            iter->data_size = (pb_size_t)((word1 >> 16) & 0x0FFF);
41
3.73M
            break;
42
0
        }
43
44
470k
        case 2: {
45
            /* 4-word format */
46
470k
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
47
470k
            uint32_t word2 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 2]);
48
470k
            uint32_t word3 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 3]);
49
50
470k
            iter->array_size = (pb_size_t)(word0 >> 16);
51
470k
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 8) << 6));
52
470k
            size_offset = (int_least8_t)(word1 & 0xFF);
53
470k
            data_offset = word2;
54
470k
            iter->data_size = (pb_size_t)word3;
55
470k
            break;
56
0
        }
57
58
170k
        default: {
59
            /* 8-word format */
60
170k
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
61
170k
            uint32_t word2 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 2]);
62
170k
            uint32_t word3 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 3]);
63
170k
            uint32_t word4 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 4]);
64
65
170k
            iter->array_size = (pb_size_t)word4;
66
170k
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 8) << 6));
67
170k
            size_offset = (int_least8_t)(word1 & 0xFF);
68
170k
            data_offset = word2;
69
170k
            iter->data_size = (pb_size_t)word3;
70
170k
            break;
71
0
        }
72
5.74M
    }
73
74
5.74M
    if (!iter->message)
75
0
    {
76
        /* Avoid doing arithmetic on null pointers, it is undefined */
77
0
        iter->pField = NULL;
78
0
        iter->pSize = NULL;
79
0
    }
80
5.74M
    else
81
5.74M
    {
82
5.74M
        iter->pField = (char*)iter->message + data_offset;
83
84
5.74M
        if (size_offset)
85
840k
        {
86
840k
            iter->pSize = (char*)iter->pField - size_offset;
87
840k
        }
88
4.90M
        else if (PB_HTYPE(iter->type) == PB_HTYPE_REPEATED &&
89
4.90M
                 (PB_ATYPE(iter->type) == PB_ATYPE_STATIC ||
90
52.4k
                  PB_ATYPE(iter->type) == PB_ATYPE_POINTER))
91
52.4k
        {
92
            /* Fixed count array */
93
52.4k
            iter->pSize = &iter->array_size;
94
52.4k
        }
95
4.84M
        else
96
4.84M
        {
97
4.84M
            iter->pSize = NULL;
98
4.84M
        }
99
100
5.74M
        if (PB_ATYPE(iter->type) == PB_ATYPE_POINTER && iter->pField != NULL)
101
5.51M
        {
102
5.51M
            iter->pData = *(void**)iter->pField;
103
5.51M
        }
104
227k
        else
105
227k
        {
106
227k
            iter->pData = iter->pField;
107
227k
        }
108
5.74M
    }
109
110
5.74M
    if (PB_LTYPE_IS_SUBMSG(iter->type))
111
612k
    {
112
612k
        iter->submsg_desc = iter->descriptor->submsg_info[iter->submessage_index];
113
612k
    }
114
5.12M
    else
115
5.12M
    {
116
5.12M
        iter->submsg_desc = NULL;
117
5.12M
    }
118
119
5.74M
    return true;
120
5.74M
}
121
122
static void advance_iterator(pb_field_iter_t *iter)
123
18.5M
{
124
18.5M
    iter->index++;
125
126
18.5M
    if (iter->index >= iter->descriptor->field_count)
127
1.03M
    {
128
        /* Restart */
129
1.03M
        iter->index = 0;
130
1.03M
        iter->field_info_index = 0;
131
1.03M
        iter->submessage_index = 0;
132
1.03M
        iter->required_field_index = 0;
133
1.03M
    }
134
17.5M
    else
135
17.5M
    {
136
        /* Increment indexes based on previous field type.
137
         * All field info formats have the following fields:
138
         * - lowest 2 bits tell the amount of words in the descriptor (2^n words)
139
         * - bits 2..7 give the lowest bits of tag number.
140
         * - bits 8..15 give the field type.
141
         */
142
17.5M
        uint32_t prev_descriptor = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
143
17.5M
        pb_type_t prev_type = (prev_descriptor >> 8) & 0xFF;
144
17.5M
        pb_size_t descriptor_len = (pb_size_t)(1 << (prev_descriptor & 3));
145
146
        /* Add to fields.
147
         * The cast to pb_size_t is needed to avoid -Wconversion warning.
148
         * Because the data is is constants from generator, there is no danger of overflow.
149
         */
150
17.5M
        iter->field_info_index = (pb_size_t)(iter->field_info_index + descriptor_len);
151
17.5M
        iter->required_field_index = (pb_size_t)(iter->required_field_index + (PB_HTYPE(prev_type) == PB_HTYPE_REQUIRED));
152
17.5M
        iter->submessage_index = (pb_size_t)(iter->submessage_index + PB_LTYPE_IS_SUBMSG(prev_type));
153
17.5M
    }
154
18.5M
}
155
156
bool pb_field_iter_begin(pb_field_iter_t *iter, const pb_msgdesc_t *desc, void *message)
157
1.32M
{
158
1.32M
    memset(iter, 0, sizeof(*iter));
159
160
1.32M
    iter->descriptor = desc;
161
1.32M
    iter->message = message;
162
163
1.32M
    return load_descriptor_values(iter);
164
1.32M
}
165
166
bool pb_field_iter_begin_extension(pb_field_iter_t *iter, pb_extension_t *extension)
167
120k
{
168
120k
    const pb_msgdesc_t *msg = (const pb_msgdesc_t*)extension->type->arg;
169
120k
    bool status;
170
171
120k
    uint32_t word0 = PB_PROGMEM_READU32(msg->field_info[0]);
172
120k
    if (PB_ATYPE(word0 >> 8) == PB_ATYPE_POINTER)
173
0
    {
174
        /* For pointer extensions, the pointer is stored directly
175
         * in the extension structure. This avoids having an extra
176
         * indirection. */
177
0
        status = pb_field_iter_begin(iter, msg, &extension->dest);
178
0
    }
179
120k
    else
180
120k
    {
181
120k
        status = pb_field_iter_begin(iter, msg, extension->dest);
182
120k
    }
183
184
120k
    iter->pSize = &extension->found;
185
120k
    return status;
186
120k
}
187
188
bool pb_field_iter_next(pb_field_iter_t *iter)
189
3.61M
{
190
3.61M
    advance_iterator(iter);
191
3.61M
    (void)load_descriptor_values(iter);
192
3.61M
    return iter->index != 0;
193
3.61M
}
194
195
bool pb_field_iter_find(pb_field_iter_t *iter, uint32_t tag)
196
28.9M
{
197
28.9M
    if (iter->tag == tag)
198
27.0M
    {
199
27.0M
        return true; /* Nothing to do, correct field already. */
200
27.0M
    }
201
1.86M
    else if (tag > iter->descriptor->largest_tag)
202
605k
    {
203
605k
        return false;
204
605k
    }
205
1.26M
    else
206
1.26M
    {
207
1.26M
        pb_size_t start = iter->index;
208
1.26M
        uint32_t fieldinfo;
209
210
1.26M
        if (tag < iter->tag)
211
321k
        {
212
            /* Fields are in tag number order, so we know that tag is between
213
             * 0 and our start position. Setting index to end forces
214
             * advance_iterator() call below to restart from beginning. */
215
321k
            iter->index = iter->descriptor->field_count;
216
321k
        }
217
218
1.26M
        do
219
14.8M
        {
220
            /* Advance iterator but don't load values yet */
221
14.8M
            advance_iterator(iter);
222
223
            /* Do fast check for tag number match */
224
14.8M
            fieldinfo = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
225
226
14.8M
            if (((fieldinfo >> 2) & 0x3F) == (tag & 0x3F))
227
1.30M
            {
228
                /* Good candidate, check further */
229
1.30M
                (void)load_descriptor_values(iter);
230
231
1.30M
                if (iter->tag == tag &&
232
1.30M
                    PB_LTYPE(iter->type) != PB_LTYPE_EXTENSION)
233
1.18M
                {
234
                    /* Found it */
235
1.18M
                    return true;
236
1.18M
                }
237
1.30M
            }
238
14.8M
        } while (iter->index != start);
239
240
        /* Searched all the way back to start, and found nothing. */
241
82.8k
        (void)load_descriptor_values(iter);
242
82.8k
        return false;
243
1.26M
    }
244
28.9M
}
245
246
bool pb_field_iter_find_extension(pb_field_iter_t *iter)
247
22.8k
{
248
22.8k
    if (PB_LTYPE(iter->type) == PB_LTYPE_EXTENSION)
249
0
    {
250
0
        return true;
251
0
    }
252
22.8k
    else
253
22.8k
    {
254
22.8k
        pb_size_t start = iter->index;
255
22.8k
        uint32_t fieldinfo;
256
257
22.8k
        do
258
137k
        {
259
            /* Advance iterator but don't load values yet */
260
137k
            advance_iterator(iter);
261
262
            /* Do fast check for field type */
263
137k
            fieldinfo = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
264
265
137k
            if (PB_LTYPE((fieldinfo >> 8) & 0xFF) == PB_LTYPE_EXTENSION)
266
3.76k
            {
267
3.76k
                return load_descriptor_values(iter);
268
3.76k
            }
269
137k
        } while (iter->index != start);
270
271
        /* Searched all the way back to start, and found nothing. */
272
19.1k
        (void)load_descriptor_values(iter);
273
19.1k
        return false;
274
22.8k
    }
275
22.8k
}
276
277
static void *pb_const_cast(const void *p)
278
503k
{
279
    /* Note: this casts away const, in order to use the common field iterator
280
     * logic for both encoding and decoding. The cast is done using union
281
     * to avoid spurious compiler warnings. */
282
503k
    union {
283
503k
        void *p1;
284
503k
        const void *p2;
285
503k
    } t;
286
503k
    t.p2 = p;
287
503k
    return t.p1;
288
503k
}
289
290
bool pb_field_iter_begin_const(pb_field_iter_t *iter, const pb_msgdesc_t *desc, const void *message)
291
500k
{
292
500k
    return pb_field_iter_begin(iter, desc, pb_const_cast(message));
293
500k
}
294
295
bool pb_field_iter_begin_extension_const(pb_field_iter_t *iter, const pb_extension_t *extension)
296
2.48k
{
297
2.48k
    return pb_field_iter_begin_extension(iter, (pb_extension_t*)pb_const_cast(extension));
298
2.48k
}
299
300
bool pb_default_field_callback(pb_istream_t *istream, pb_ostream_t *ostream, const pb_field_t *field)
301
0
{
302
0
    if (field->data_size == sizeof(pb_callback_t))
303
0
    {
304
0
        pb_callback_t *pCallback = (pb_callback_t*)field->pData;
305
306
0
        if (pCallback != NULL)
307
0
        {
308
0
            if (istream != NULL && pCallback->funcs.decode != NULL)
309
0
            {
310
0
                return pCallback->funcs.decode(istream, field, &pCallback->arg);
311
0
            }
312
313
0
            if (ostream != NULL && pCallback->funcs.encode != NULL)
314
0
            {
315
0
                return pCallback->funcs.encode(ostream, field, &pCallback->arg);
316
0
            }
317
0
        }
318
0
    }
319
320
0
    return true; /* Success, but didn't do anything */
321
322
0
}
323
324
#ifdef PB_VALIDATE_UTF8
325
326
/* This function checks whether a string is valid UTF-8 text.
327
 *
328
 * Algorithm is adapted from https://www.cl.cam.ac.uk/~mgk25/ucs/utf8_check.c
329
 * Original copyright: Markus Kuhn <http://www.cl.cam.ac.uk/~mgk25/> 2005-03-30
330
 * Licensed under "Short code license", which allows use under MIT license or
331
 * any compatible with it.
332
 */
333
334
bool pb_validate_utf8(const char *str)
335
{
336
    const pb_byte_t *s = (const pb_byte_t*)str;
337
    while (*s)
338
    {
339
        if (*s < 0x80)
340
        {
341
            /* 0xxxxxxx */
342
            s++;
343
        }
344
        else if ((s[0] & 0xe0) == 0xc0)
345
        {
346
            /* 110XXXXx 10xxxxxx */
347
            if ((s[1] & 0xc0) != 0x80 ||
348
                (s[0] & 0xfe) == 0xc0)                        /* overlong? */
349
                return false;
350
            else
351
                s += 2;
352
        }
353
        else if ((s[0] & 0xf0) == 0xe0)
354
        {
355
            /* 1110XXXX 10Xxxxxx 10xxxxxx */
356
            if ((s[1] & 0xc0) != 0x80 ||
357
                (s[2] & 0xc0) != 0x80 ||
358
                (s[0] == 0xe0 && (s[1] & 0xe0) == 0x80) ||    /* overlong? */
359
                (s[0] == 0xed && (s[1] & 0xe0) == 0xa0) ||    /* surrogate? */
360
                (s[0] == 0xef && s[1] == 0xbf &&
361
                (s[2] & 0xfe) == 0xbe))                 /* U+FFFE or U+FFFF? */
362
                return false;
363
            else
364
                s += 3;
365
        }
366
        else if ((s[0] & 0xf8) == 0xf0)
367
        {
368
            /* 11110XXX 10XXxxxx 10xxxxxx 10xxxxxx */
369
            if ((s[1] & 0xc0) != 0x80 ||
370
                (s[2] & 0xc0) != 0x80 ||
371
                (s[3] & 0xc0) != 0x80 ||
372
                (s[0] == 0xf0 && (s[1] & 0xf0) == 0x80) ||    /* overlong? */
373
                (s[0] == 0xf4 && s[1] > 0x8f) || s[0] > 0xf4) /* > U+10FFFF? */
374
                return false;
375
            else
376
                s += 4;
377
        }
378
        else
379
        {
380
            return false;
381
        }
382
    }
383
384
    return true;
385
}
386
387
#endif
388