Coverage Report

Created: 2026-03-15 06:41

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/nanopb/pb_common.c
Line
Count
Source
1
/* pb_common.c: Common support functions for pb_encode.c and pb_decode.c.
2
 *
3
 * 2014 Petteri Aimonen <jpa@kapsi.fi>
4
 */
5
6
#include "pb_common.h"
7
8
static bool load_descriptor_values(pb_field_iter_t *iter)
9
4.38M
{
10
4.38M
    uint32_t word0;
11
4.38M
    uint32_t data_offset;
12
4.38M
    int_least8_t size_offset;
13
14
4.38M
    if (iter->index >= iter->descriptor->field_count)
15
161k
        return false;
16
17
4.22M
    word0 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
18
4.22M
    iter->type = (pb_type_t)((word0 >> 8) & 0xFF);
19
20
4.22M
    switch(word0 & 3)
21
4.22M
    {
22
460k
        case 0: {
23
            /* 1-word format */
24
460k
            iter->array_size = 1;
25
460k
            iter->tag = (pb_size_t)((word0 >> 2) & 0x3F);
26
460k
            size_offset = (int_least8_t)((word0 >> 24) & 0x0F);
27
460k
            data_offset = (word0 >> 16) & 0xFF;
28
460k
            iter->data_size = (pb_size_t)((word0 >> 28) & 0x0F);
29
460k
            break;
30
0
        }
31
32
3.26M
        case 1: {
33
            /* 2-word format */
34
3.26M
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
35
36
3.26M
            iter->array_size = (pb_size_t)((word0 >> 16) & 0x0FFF);
37
3.26M
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 28) << 6));
38
3.26M
            size_offset = (int_least8_t)((word0 >> 28) & 0x0F);
39
3.26M
            data_offset = word1 & 0xFFFF;
40
3.26M
            iter->data_size = (pb_size_t)((word1 >> 16) & 0x0FFF);
41
3.26M
            break;
42
0
        }
43
44
426k
        case 2: {
45
            /* 4-word format */
46
426k
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
47
426k
            uint32_t word2 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 2]);
48
426k
            uint32_t word3 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 3]);
49
50
426k
            iter->array_size = (pb_size_t)(word0 >> 16);
51
426k
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 8) << 6));
52
426k
            size_offset = (int_least8_t)(word1 & 0xFF);
53
426k
            data_offset = word2;
54
426k
            iter->data_size = (pb_size_t)word3;
55
426k
            break;
56
0
        }
57
58
69.6k
        default: {
59
            /* 8-word format */
60
69.6k
            uint32_t word1 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 1]);
61
69.6k
            uint32_t word2 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 2]);
62
69.6k
            uint32_t word3 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 3]);
63
69.6k
            uint32_t word4 = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index + 4]);
64
65
69.6k
            iter->array_size = (pb_size_t)word4;
66
69.6k
            iter->tag = (pb_size_t)(((word0 >> 2) & 0x3F) | ((word1 >> 8) << 6));
67
69.6k
            size_offset = (int_least8_t)(word1 & 0xFF);
68
69.6k
            data_offset = word2;
69
69.6k
            iter->data_size = (pb_size_t)word3;
70
69.6k
            break;
71
0
        }
72
4.22M
    }
73
74
4.22M
    if (!iter->message)
75
0
    {
76
        /* Avoid doing arithmetic on null pointers, it is undefined */
77
0
        iter->pField = NULL;
78
0
        iter->pSize = NULL;
79
0
    }
80
4.22M
    else
81
4.22M
    {
82
4.22M
        iter->pField = (char*)iter->message + data_offset;
83
84
4.22M
        if (size_offset)
85
1.24M
        {
86
1.24M
            iter->pSize = (char*)iter->pField - size_offset;
87
1.24M
        }
88
2.98M
        else if (PB_HTYPE(iter->type) == PB_HTYPE_REPEATED &&
89
95.2k
                 (PB_ATYPE(iter->type) == PB_ATYPE_STATIC ||
90
50.4k
                  PB_ATYPE(iter->type) == PB_ATYPE_POINTER))
91
44.8k
        {
92
            /* Fixed count array */
93
44.8k
            iter->pSize = &iter->array_size;
94
44.8k
        }
95
2.93M
        else
96
2.93M
        {
97
2.93M
            iter->pSize = NULL;
98
2.93M
        }
99
100
4.22M
        if (PB_ATYPE(iter->type) == PB_ATYPE_POINTER && iter->pField != NULL)
101
0
        {
102
0
            iter->pData = *(void**)iter->pField;
103
0
        }
104
4.22M
        else
105
4.22M
        {
106
4.22M
            iter->pData = iter->pField;
107
4.22M
        }
108
4.22M
    }
109
110
4.22M
    if (PB_LTYPE_IS_SUBMSG(iter->type))
111
629k
    {
112
629k
        iter->submsg_desc = iter->descriptor->submsg_info[iter->submessage_index];
113
629k
    }
114
3.59M
    else
115
3.59M
    {
116
3.59M
        iter->submsg_desc = NULL;
117
3.59M
    }
118
119
4.22M
    return true;
120
4.22M
}
121
122
static void advance_iterator(pb_field_iter_t *iter)
123
27.2M
{
124
27.2M
    iter->index++;
125
126
27.2M
    if (iter->index >= iter->descriptor->field_count)
127
823k
    {
128
        /* Restart */
129
823k
        iter->index = 0;
130
823k
        iter->field_info_index = 0;
131
823k
        iter->submessage_index = 0;
132
823k
        iter->required_field_index = 0;
133
823k
    }
134
26.4M
    else
135
26.4M
    {
136
        /* Increment indexes based on previous field type.
137
         * All field info formats have the following fields:
138
         * - lowest 2 bits tell the amount of words in the descriptor (2^n words)
139
         * - bits 2..7 give the lowest bits of tag number.
140
         * - bits 8..15 give the field type.
141
         */
142
26.4M
        uint32_t prev_descriptor = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
143
26.4M
        pb_type_t prev_type = (prev_descriptor >> 8) & 0xFF;
144
26.4M
        pb_size_t descriptor_len = (pb_size_t)(1 << (prev_descriptor & 3));
145
146
        /* Add to fields.
147
         * The cast to pb_size_t is needed to avoid -Wconversion warning.
148
         * Because the data is is constants from generator, there is no danger of overflow.
149
         */
150
26.4M
        iter->field_info_index = (pb_size_t)(iter->field_info_index + descriptor_len);
151
26.4M
        iter->required_field_index = (pb_size_t)(iter->required_field_index + (PB_HTYPE(prev_type) == PB_HTYPE_REQUIRED));
152
26.4M
        iter->submessage_index = (pb_size_t)(iter->submessage_index + PB_LTYPE_IS_SUBMSG(prev_type));
153
26.4M
    }
154
27.2M
}
155
156
bool pb_field_iter_begin(pb_field_iter_t *iter, const pb_msgdesc_t *desc, void *message)
157
576k
{
158
576k
    memset(iter, 0, sizeof(*iter));
159
160
576k
    iter->descriptor = desc;
161
576k
    iter->message = message;
162
163
576k
    return load_descriptor_values(iter);
164
576k
}
165
166
bool pb_field_iter_begin_extension(pb_field_iter_t *iter, pb_extension_t *extension)
167
136k
{
168
136k
    const pb_msgdesc_t *msg = (const pb_msgdesc_t*)extension->type->arg;
169
136k
    bool status;
170
171
136k
    uint32_t word0 = PB_PROGMEM_READU32(msg->field_info[0]);
172
136k
    if (PB_ATYPE(word0 >> 8) == PB_ATYPE_POINTER)
173
0
    {
174
        /* For pointer extensions, the pointer is stored directly
175
         * in the extension structure. This avoids having an extra
176
         * indirection. */
177
0
        status = pb_field_iter_begin(iter, msg, &extension->dest);
178
0
    }
179
136k
    else
180
136k
    {
181
136k
        status = pb_field_iter_begin(iter, msg, extension->dest);
182
136k
    }
183
184
136k
    iter->pSize = &extension->found;
185
136k
    return status;
186
136k
}
187
188
bool pb_field_iter_next(pb_field_iter_t *iter)
189
1.68M
{
190
1.68M
    advance_iterator(iter);
191
1.68M
    (void)load_descriptor_values(iter);
192
1.68M
    return iter->index != 0;
193
1.68M
}
194
195
bool pb_field_iter_find(pb_field_iter_t *iter, uint32_t tag)
196
7.92M
{
197
7.92M
    if (iter->tag == tag)
198
4.81M
    {
199
4.81M
        return true; /* Nothing to do, correct field already. */
200
4.81M
    }
201
3.11M
    else if (tag > iter->descriptor->largest_tag)
202
1.18M
    {
203
1.18M
        return false;
204
1.18M
    }
205
1.92M
    else
206
1.92M
    {
207
1.92M
        pb_size_t start = iter->index;
208
1.92M
        uint32_t fieldinfo;
209
210
1.92M
        if (tag < iter->tag)
211
517k
        {
212
            /* Fields are in tag number order, so we know that tag is between
213
             * 0 and our start position. Setting index to end forces
214
             * advance_iterator() call below to restart from beginning. */
215
517k
            iter->index = iter->descriptor->field_count;
216
517k
        }
217
218
1.92M
        do
219
25.4M
        {
220
            /* Advance iterator but don't load values yet */
221
25.4M
            advance_iterator(iter);
222
223
            /* Do fast check for tag number match */
224
25.4M
            fieldinfo = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
225
226
25.4M
            if (((fieldinfo >> 2) & 0x3F) == (tag & 0x3F))
227
1.98M
            {
228
                /* Good candidate, check further */
229
1.98M
                (void)load_descriptor_values(iter);
230
231
1.98M
                if (iter->tag == tag &&
232
1.82M
                    PB_LTYPE(iter->type) != PB_LTYPE_EXTENSION)
233
1.80M
                {
234
                    /* Found it */
235
1.80M
                    return true;
236
1.80M
                }
237
1.98M
            }
238
25.4M
        } while (iter->index != start);
239
240
        /* Searched all the way back to start, and found nothing. */
241
120k
        (void)load_descriptor_values(iter);
242
120k
        return false;
243
1.92M
    }
244
7.92M
}
245
246
bool pb_field_iter_find_extension(pb_field_iter_t *iter)
247
24.5k
{
248
24.5k
    if (PB_LTYPE(iter->type) == PB_LTYPE_EXTENSION)
249
0
    {
250
0
        return true;
251
0
    }
252
24.5k
    else
253
24.5k
    {
254
24.5k
        pb_size_t start = iter->index;
255
24.5k
        uint32_t fieldinfo;
256
257
24.5k
        do
258
147k
        {
259
            /* Advance iterator but don't load values yet */
260
147k
            advance_iterator(iter);
261
262
            /* Do fast check for field type */
263
147k
            fieldinfo = PB_PROGMEM_READU32(iter->descriptor->field_info[iter->field_info_index]);
264
265
147k
            if (PB_LTYPE((fieldinfo >> 8) & 0xFF) == PB_LTYPE_EXTENSION)
266
3.46k
            {
267
3.46k
                return load_descriptor_values(iter);
268
3.46k
            }
269
147k
        } while (iter->index != start);
270
271
        /* Searched all the way back to start, and found nothing. */
272
21.0k
        (void)load_descriptor_values(iter);
273
21.0k
        return false;
274
24.5k
    }
275
24.5k
}
276
277
static void *pb_const_cast(const void *p)
278
92.4k
{
279
    /* Note: this casts away const, in order to use the common field iterator
280
     * logic for both encoding and decoding. The cast is done using union
281
     * to avoid spurious compiler warnings. */
282
92.4k
    union {
283
92.4k
        void *p1;
284
92.4k
        const void *p2;
285
92.4k
    } t;
286
92.4k
    t.p2 = p;
287
92.4k
    return t.p1;
288
92.4k
}
289
290
bool pb_field_iter_begin_const(pb_field_iter_t *iter, const pb_msgdesc_t *desc, const void *message)
291
89.8k
{
292
89.8k
    return pb_field_iter_begin(iter, desc, pb_const_cast(message));
293
89.8k
}
294
295
bool pb_field_iter_begin_extension_const(pb_field_iter_t *iter, const pb_extension_t *extension)
296
2.58k
{
297
2.58k
    return pb_field_iter_begin_extension(iter, (pb_extension_t*)pb_const_cast(extension));
298
2.58k
}
299
300
bool pb_default_field_callback(pb_istream_t *istream, pb_ostream_t *ostream, const pb_field_t *field)
301
65.2k
{
302
65.2k
    if (field->data_size == sizeof(pb_callback_t))
303
65.2k
    {
304
65.2k
        pb_callback_t *pCallback = (pb_callback_t*)field->pData;
305
306
65.2k
        if (pCallback != NULL)
307
65.2k
        {
308
65.2k
            if (istream != NULL && pCallback->funcs.decode != NULL)
309
6.25k
            {
310
6.25k
                return pCallback->funcs.decode(istream, field, &pCallback->arg);
311
6.25k
            }
312
313
58.9k
            if (ostream != NULL && pCallback->funcs.encode != NULL)
314
0
            {
315
0
                return pCallback->funcs.encode(ostream, field, &pCallback->arg);
316
0
            }
317
58.9k
        }
318
65.2k
    }
319
320
58.9k
    return true; /* Success, but didn't do anything */
321
322
65.2k
}
323
324
#ifdef PB_VALIDATE_UTF8
325
326
/* This function checks whether a string is valid UTF-8 text.
327
 *
328
 * Algorithm is adapted from https://www.cl.cam.ac.uk/~mgk25/ucs/utf8_check.c
329
 * Original copyright: Markus Kuhn <http://www.cl.cam.ac.uk/~mgk25/> 2005-03-30
330
 * Licensed under "Short code license", which allows use under MIT license or
331
 * any compatible with it.
332
 */
333
334
bool pb_validate_utf8(const char *str)
335
{
336
    const pb_byte_t *s = (const pb_byte_t*)str;
337
    while (*s)
338
    {
339
        if (*s < 0x80)
340
        {
341
            /* 0xxxxxxx */
342
            s++;
343
        }
344
        else if ((s[0] & 0xe0) == 0xc0)
345
        {
346
            /* 110XXXXx 10xxxxxx */
347
            if ((s[1] & 0xc0) != 0x80 ||
348
                (s[0] & 0xfe) == 0xc0)                        /* overlong? */
349
                return false;
350
            else
351
                s += 2;
352
        }
353
        else if ((s[0] & 0xf0) == 0xe0)
354
        {
355
            /* 1110XXXX 10Xxxxxx 10xxxxxx */
356
            if ((s[1] & 0xc0) != 0x80 ||
357
                (s[2] & 0xc0) != 0x80 ||
358
                (s[0] == 0xe0 && (s[1] & 0xe0) == 0x80) ||    /* overlong? */
359
                (s[0] == 0xed && (s[1] & 0xe0) == 0xa0) ||    /* surrogate? */
360
                (s[0] == 0xef && s[1] == 0xbf &&
361
                (s[2] & 0xfe) == 0xbe))                 /* U+FFFE or U+FFFF? */
362
                return false;
363
            else
364
                s += 3;
365
        }
366
        else if ((s[0] & 0xf8) == 0xf0)
367
        {
368
            /* 11110XXX 10XXxxxx 10xxxxxx 10xxxxxx */
369
            if ((s[1] & 0xc0) != 0x80 ||
370
                (s[2] & 0xc0) != 0x80 ||
371
                (s[3] & 0xc0) != 0x80 ||
372
                (s[0] == 0xf0 && (s[1] & 0xf0) == 0x80) ||    /* overlong? */
373
                (s[0] == 0xf4 && s[1] > 0x8f) || s[0] > 0xf4) /* > U+10FFFF? */
374
                return false;
375
            else
376
                s += 4;
377
        }
378
        else
379
        {
380
            return false;
381
        }
382
    }
383
384
    return true;
385
}
386
387
#endif
388