Coverage Report

Created: 2025-11-24 06:51

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/WasmEdge/lib/loader/filemgr.cpp
Line
Count
Source
1
// SPDX-License-Identifier: Apache-2.0
2
// SPDX-FileCopyrightText: 2019-2024 Second State INC
3
4
#include "loader/filemgr.h"
5
6
#include <algorithm>
7
#include <iterator>
8
9
// Error logging of file manager need to be handled in caller.
10
11
namespace WasmEdge {
12
13
// Set path to file manager. See "include/loader/filemgr.h".
14
0
Expect<void> FileMgr::setPath(const std::filesystem::path &FilePath) {
15
0
  reset();
16
0
  std::error_code ErrCode;
17
0
  Size = std::filesystem::file_size(FilePath, ErrCode);
18
0
  if (likely(!ErrCode)) {
19
0
    if (!MMap::supported()) {
20
0
      Size = 0;
21
0
      Status = ErrCode::Value::IllegalPath;
22
0
      return Unexpect(Status);
23
0
    }
24
0
    FileMap.emplace(FilePath);
25
0
    if (auto *Pointer = FileMap->address(); likely(Pointer)) {
26
0
      Data = reinterpret_cast<const Byte *>(Pointer);
27
0
      Status = ErrCode::Value::Success;
28
0
    } else {
29
      // File size is 0, mmap failed.
30
      // Will get 'UnexpectedEnd' error while the first reading.
31
0
      FileMap.reset();
32
0
    }
33
0
    return {};
34
0
  }
35
0
  Size = 0;
36
0
  Status = ErrCode::Value::IllegalPath;
37
0
  return Unexpect(Status);
38
0
}
39
40
// Set code data. See "include/loader/filemgr.h".
41
9.42k
Expect<void> FileMgr::setCode(Span<const Byte> CodeData) {
42
9.42k
  reset();
43
9.42k
  Data = CodeData.data();
44
9.42k
  Size = CodeData.size();
45
9.42k
  Status = ErrCode::Value::Success;
46
9.42k
  return {};
47
9.42k
}
48
49
// Set code data. See "include/loader/filemgr.h".
50
0
Expect<void> FileMgr::setCode(std::vector<Byte> CodeData) {
51
0
  reset();
52
  // Tell GCC 14 that DataHolder has no data.
53
  // Fix the false positive warning,
54
  // which is reported by GCC 14 with `maybe-uninitialized`
55
0
  assuming(!DataHolder);
56
57
0
  DataHolder.emplace(std::move(CodeData));
58
0
  Data = DataHolder->data();
59
0
  Size = DataHolder->size();
60
0
  Status = ErrCode::Value::Success;
61
0
  return {};
62
0
}
63
64
// Read one byte. See "include/loader/filemgr.h".
65
9.00M
Expect<Byte> FileMgr::readByte() {
66
9.00M
  if (unlikely(Status != ErrCode::Value::Success)) {
67
0
    return Unexpect(Status);
68
0
  }
69
  // Set the flag to the start offset.
70
9.00M
  LastPos = Pos;
71
  // Check if exceed the data boundary and section boundary.
72
9.00M
  EXPECTED_TRY(testRead(1));
73
8.99M
  return Data[Pos++];
74
9.00M
}
75
76
// Read number of bytes. See "include/loader/filemgr.h".
77
62.9k
Expect<std::vector<Byte>> FileMgr::readBytes(size_t SizeToRead) {
78
  // Set the flag to the start offset.
79
62.9k
  LastPos = Pos;
80
  // Read bytes into vector.
81
62.9k
  std::vector<Byte> Buf(SizeToRead);
82
62.9k
  EXPECTED_TRY(readBytes(Buf));
83
62.9k
  return Buf;
84
62.9k
}
85
86
// Decode and read an unsigned int. See "include/loader/filemgr.h".
87
1.86M
Expect<uint32_t> FileMgr::readU32() {
88
1.86M
  if (unlikely(Status != ErrCode::Value::Success)) {
89
0
    return Unexpect(Status);
90
0
  }
91
  // Set the flag to the start offset.
92
1.86M
  LastPos = Pos;
93
94
  // Read and decode U32.
95
1.86M
  uint32_t Result = 0;
96
1.86M
  uint32_t Offset = 0;
97
1.86M
  Byte Byte = 0x80;
98
4.30M
  while (Byte & 0x80) {
99
2.44M
    if (unlikely(Offset >= 32)) {
100
12
      Status = ErrCode::Value::IntegerTooLong;
101
12
      return Unexpect(Status);
102
12
    }
103
2.44M
    EXPECTED_TRY(testRead(1));
104
2.44M
    Byte = Data[Pos++];
105
2.44M
    Result |= (Byte & UINT32_C(0x7F)) << Offset;
106
2.44M
    if (Offset == 28 && unlikely((Byte & UINT32_C(0x70)) != 0)) {
107
55
      Status = ErrCode::Value::IntegerTooLarge;
108
55
      return Unexpect(Status);
109
55
    }
110
2.44M
    Offset += 7;
111
2.44M
  }
112
1.86M
  return Result;
113
1.86M
}
114
115
// Decode and read an unsigned long long int. See "include/loader/filemgr.h".
116
0
Expect<uint64_t> FileMgr::readU64() {
117
0
  if (Status != ErrCode::Value::Success) {
118
0
    return Unexpect(Status);
119
0
  }
120
  // Set the flag to the start offset.
121
0
  LastPos = Pos;
122
123
  // Read and decode U64.
124
0
  uint64_t Result = 0;
125
0
  uint64_t Offset = 0;
126
0
  Byte Byte = 0x80;
127
0
  while (Byte & 0x80) {
128
0
    if (unlikely(Offset >= 64)) {
129
0
      Status = ErrCode::Value::IntegerTooLong;
130
0
      return Unexpect(Status);
131
0
    }
132
0
    EXPECTED_TRY(testRead(1));
133
0
    Byte = Data[Pos++];
134
0
    Result |= (Byte & UINT64_C(0x7F)) << Offset;
135
0
    if (Offset == 63 && unlikely((Byte & UINT32_C(0x7E)) != 0)) {
136
0
      Status = ErrCode::Value::IntegerTooLarge;
137
0
      return Unexpect(Status);
138
0
    }
139
0
    Offset += 7;
140
0
  }
141
0
  return Result;
142
0
}
143
144
2.62M
template <typename RetType, size_t N> Expect<RetType> FileMgr::readSN() {
145
2.62M
  static_assert(N >= 8, "The N of S_N must have at least length of a byte");
146
2.62M
  static_assert(8 * sizeof(RetType) >= N,
147
2.62M
                "RetType cannot hold the full range of S_N");
148
2.62M
  static_assert(std::is_signed_v<RetType>,
149
2.62M
                "RetType of S_N must be signed type");
150
151
2.62M
  if (Status != ErrCode::Value::Success) {
152
0
    return Unexpect(Status);
153
0
  }
154
  // Set the flag to the start offset.
155
2.62M
  LastPos = Pos;
156
157
  // Read and decode S_N.
158
2.62M
  RetType Result = 0;
159
2.62M
  size_t Offset = 0;
160
2.62M
  size_t RemainingBits = N;
161
2.88M
  while (true) {
162
2.88M
    if (RemainingBits <= 0) {
163
0
      Status = ErrCode::Value::IntegerTooLong;
164
0
      return Unexpect(Status);
165
0
    }
166
167
    // In the rest logic, RemainingBits must be at least 1.
168
2.88M
    EXPECTED_TRY(testRead(1));
169
2.88M
    WasmEdge::Byte Byte = Data[Pos++];
170
171
2.88M
    const WasmEdge::Byte HighestBitMask = 1 << 7;
172
2.88M
    const WasmEdge::Byte SecondHighestBitMask = 1 << 6;
173
2.88M
    if (Byte & HighestBitMask) {
174
      // The byte has leading 1. It contains 7 bits payload.
175
176
256k
      if (unlikely(RemainingBits < 7)) {
177
28
        Status = ErrCode::Value::IntegerTooLong;
178
28
        return Unexpect(Status);
179
28
      }
180
181
255k
      std::make_unsigned_t<RetType> Payload =
182
255k
          Byte & (~HighestBitMask); // & 0b01111111
183
255k
      Result |= (Payload << Offset);
184
255k
      Offset += 7;
185
255k
      RemainingBits -= 7;
186
2.62M
    } else {
187
      // The byte has leading 0. It will be the last byte.
188
189
      // The number of bits that take effect in the byte. Since RemainingBits
190
      // must be at least 1, EffectiveBits also must be at least 1. It is also
191
      // at most 7.
192
2.62M
      size_t EffectiveBits = RemainingBits < 7 ? RemainingBits : 7;
193
2.62M
      std::make_unsigned_t<RetType> Payload = Byte;
194
2.62M
      if (Byte & SecondHighestBitMask) {
195
        // The byte is signed.
196
1.95M
        if (Byte >= (1 << 7) - (1 << (EffectiveBits - 1))) {
197
1.95M
          Payload -= (1 << 7);
198
1.95M
        } else {
199
15
          Status = ErrCode::Value::IntegerTooLarge;
200
15
          return Unexpect(Status);
201
15
        }
202
1.95M
      } else {
203
        // The byte is unsigned.
204
677k
        if (Byte >= (1 << (EffectiveBits - 1))) {
205
16
          Status = ErrCode::Value::IntegerTooLarge;
206
16
          return Unexpect(Status);
207
16
        }
208
677k
      }
209
2.62M
      Result |= (Payload << Offset);
210
2.62M
      break;
211
2.62M
    }
212
2.88M
  }
213
214
2.62M
  return Result;
215
2.62M
}
cxx20::expected<long, WasmEdge::ErrCode> WasmEdge::FileMgr::readSN<long, 33ul>()
Line
Count
Source
144
345k
template <typename RetType, size_t N> Expect<RetType> FileMgr::readSN() {
145
345k
  static_assert(N >= 8, "The N of S_N must have at least length of a byte");
146
345k
  static_assert(8 * sizeof(RetType) >= N,
147
345k
                "RetType cannot hold the full range of S_N");
148
345k
  static_assert(std::is_signed_v<RetType>,
149
345k
                "RetType of S_N must be signed type");
150
151
345k
  if (Status != ErrCode::Value::Success) {
152
0
    return Unexpect(Status);
153
0
  }
154
  // Set the flag to the start offset.
155
345k
  LastPos = Pos;
156
157
  // Read and decode S_N.
158
345k
  RetType Result = 0;
159
345k
  size_t Offset = 0;
160
345k
  size_t RemainingBits = N;
161
369k
  while (true) {
162
369k
    if (RemainingBits <= 0) {
163
0
      Status = ErrCode::Value::IntegerTooLong;
164
0
      return Unexpect(Status);
165
0
    }
166
167
    // In the rest logic, RemainingBits must be at least 1.
168
369k
    EXPECTED_TRY(testRead(1));
169
368k
    WasmEdge::Byte Byte = Data[Pos++];
170
171
368k
    const WasmEdge::Byte HighestBitMask = 1 << 7;
172
368k
    const WasmEdge::Byte SecondHighestBitMask = 1 << 6;
173
368k
    if (Byte & HighestBitMask) {
174
      // The byte has leading 1. It contains 7 bits payload.
175
176
23.3k
      if (unlikely(RemainingBits < 7)) {
177
9
        Status = ErrCode::Value::IntegerTooLong;
178
9
        return Unexpect(Status);
179
9
      }
180
181
23.3k
      std::make_unsigned_t<RetType> Payload =
182
23.3k
          Byte & (~HighestBitMask); // & 0b01111111
183
23.3k
      Result |= (Payload << Offset);
184
23.3k
      Offset += 7;
185
23.3k
      RemainingBits -= 7;
186
345k
    } else {
187
      // The byte has leading 0. It will be the last byte.
188
189
      // The number of bits that take effect in the byte. Since RemainingBits
190
      // must be at least 1, EffectiveBits also must be at least 1. It is also
191
      // at most 7.
192
345k
      size_t EffectiveBits = RemainingBits < 7 ? RemainingBits : 7;
193
345k
      std::make_unsigned_t<RetType> Payload = Byte;
194
345k
      if (Byte & SecondHighestBitMask) {
195
        // The byte is signed.
196
78.5k
        if (Byte >= (1 << 7) - (1 << (EffectiveBits - 1))) {
197
78.5k
          Payload -= (1 << 7);
198
78.5k
        } else {
199
5
          Status = ErrCode::Value::IntegerTooLarge;
200
5
          return Unexpect(Status);
201
5
        }
202
267k
      } else {
203
        // The byte is unsigned.
204
267k
        if (Byte >= (1 << (EffectiveBits - 1))) {
205
4
          Status = ErrCode::Value::IntegerTooLarge;
206
4
          return Unexpect(Status);
207
4
        }
208
267k
      }
209
345k
      Result |= (Payload << Offset);
210
345k
      break;
211
345k
    }
212
368k
  }
213
214
345k
  return Result;
215
345k
}
cxx20::expected<int, WasmEdge::ErrCode> WasmEdge::FileMgr::readSN<int, 32ul>()
Line
Count
Source
144
2.01M
template <typename RetType, size_t N> Expect<RetType> FileMgr::readSN() {
145
2.01M
  static_assert(N >= 8, "The N of S_N must have at least length of a byte");
146
2.01M
  static_assert(8 * sizeof(RetType) >= N,
147
2.01M
                "RetType cannot hold the full range of S_N");
148
2.01M
  static_assert(std::is_signed_v<RetType>,
149
2.01M
                "RetType of S_N must be signed type");
150
151
2.01M
  if (Status != ErrCode::Value::Success) {
152
0
    return Unexpect(Status);
153
0
  }
154
  // Set the flag to the start offset.
155
2.01M
  LastPos = Pos;
156
157
  // Read and decode S_N.
158
2.01M
  RetType Result = 0;
159
2.01M
  size_t Offset = 0;
160
2.01M
  size_t RemainingBits = N;
161
2.16M
  while (true) {
162
2.16M
    if (RemainingBits <= 0) {
163
0
      Status = ErrCode::Value::IntegerTooLong;
164
0
      return Unexpect(Status);
165
0
    }
166
167
    // In the rest logic, RemainingBits must be at least 1.
168
2.16M
    EXPECTED_TRY(testRead(1));
169
2.16M
    WasmEdge::Byte Byte = Data[Pos++];
170
171
2.16M
    const WasmEdge::Byte HighestBitMask = 1 << 7;
172
2.16M
    const WasmEdge::Byte SecondHighestBitMask = 1 << 6;
173
2.16M
    if (Byte & HighestBitMask) {
174
      // The byte has leading 1. It contains 7 bits payload.
175
176
141k
      if (unlikely(RemainingBits < 7)) {
177
5
        Status = ErrCode::Value::IntegerTooLong;
178
5
        return Unexpect(Status);
179
5
      }
180
181
141k
      std::make_unsigned_t<RetType> Payload =
182
141k
          Byte & (~HighestBitMask); // & 0b01111111
183
141k
      Result |= (Payload << Offset);
184
141k
      Offset += 7;
185
141k
      RemainingBits -= 7;
186
2.01M
    } else {
187
      // The byte has leading 0. It will be the last byte.
188
189
      // The number of bits that take effect in the byte. Since RemainingBits
190
      // must be at least 1, EffectiveBits also must be at least 1. It is also
191
      // at most 7.
192
2.01M
      size_t EffectiveBits = RemainingBits < 7 ? RemainingBits : 7;
193
2.01M
      std::make_unsigned_t<RetType> Payload = Byte;
194
2.01M
      if (Byte & SecondHighestBitMask) {
195
        // The byte is signed.
196
1.62M
        if (Byte >= (1 << 7) - (1 << (EffectiveBits - 1))) {
197
1.62M
          Payload -= (1 << 7);
198
1.62M
        } else {
199
4
          Status = ErrCode::Value::IntegerTooLarge;
200
4
          return Unexpect(Status);
201
4
        }
202
1.62M
      } else {
203
        // The byte is unsigned.
204
390k
        if (Byte >= (1 << (EffectiveBits - 1))) {
205
6
          Status = ErrCode::Value::IntegerTooLarge;
206
6
          return Unexpect(Status);
207
6
        }
208
390k
      }
209
2.01M
      Result |= (Payload << Offset);
210
2.01M
      break;
211
2.01M
    }
212
2.16M
  }
213
214
2.01M
  return Result;
215
2.01M
}
cxx20::expected<long, WasmEdge::ErrCode> WasmEdge::FileMgr::readSN<long, 64ul>()
Line
Count
Source
144
263k
template <typename RetType, size_t N> Expect<RetType> FileMgr::readSN() {
145
263k
  static_assert(N >= 8, "The N of S_N must have at least length of a byte");
146
263k
  static_assert(8 * sizeof(RetType) >= N,
147
263k
                "RetType cannot hold the full range of S_N");
148
263k
  static_assert(std::is_signed_v<RetType>,
149
263k
                "RetType of S_N must be signed type");
150
151
263k
  if (Status != ErrCode::Value::Success) {
152
0
    return Unexpect(Status);
153
0
  }
154
  // Set the flag to the start offset.
155
263k
  LastPos = Pos;
156
157
  // Read and decode S_N.
158
263k
  RetType Result = 0;
159
263k
  size_t Offset = 0;
160
263k
  size_t RemainingBits = N;
161
354k
  while (true) {
162
354k
    if (RemainingBits <= 0) {
163
0
      Status = ErrCode::Value::IntegerTooLong;
164
0
      return Unexpect(Status);
165
0
    }
166
167
    // In the rest logic, RemainingBits must be at least 1.
168
354k
    EXPECTED_TRY(testRead(1));
169
354k
    WasmEdge::Byte Byte = Data[Pos++];
170
171
354k
    const WasmEdge::Byte HighestBitMask = 1 << 7;
172
354k
    const WasmEdge::Byte SecondHighestBitMask = 1 << 6;
173
354k
    if (Byte & HighestBitMask) {
174
      // The byte has leading 1. It contains 7 bits payload.
175
176
90.6k
      if (unlikely(RemainingBits < 7)) {
177
14
        Status = ErrCode::Value::IntegerTooLong;
178
14
        return Unexpect(Status);
179
14
      }
180
181
90.6k
      std::make_unsigned_t<RetType> Payload =
182
90.6k
          Byte & (~HighestBitMask); // & 0b01111111
183
90.6k
      Result |= (Payload << Offset);
184
90.6k
      Offset += 7;
185
90.6k
      RemainingBits -= 7;
186
263k
    } else {
187
      // The byte has leading 0. It will be the last byte.
188
189
      // The number of bits that take effect in the byte. Since RemainingBits
190
      // must be at least 1, EffectiveBits also must be at least 1. It is also
191
      // at most 7.
192
263k
      size_t EffectiveBits = RemainingBits < 7 ? RemainingBits : 7;
193
263k
      std::make_unsigned_t<RetType> Payload = Byte;
194
263k
      if (Byte & SecondHighestBitMask) {
195
        // The byte is signed.
196
244k
        if (Byte >= (1 << 7) - (1 << (EffectiveBits - 1))) {
197
244k
          Payload -= (1 << 7);
198
244k
        } else {
199
6
          Status = ErrCode::Value::IntegerTooLarge;
200
6
          return Unexpect(Status);
201
6
        }
202
244k
      } else {
203
        // The byte is unsigned.
204
19.6k
        if (Byte >= (1 << (EffectiveBits - 1))) {
205
6
          Status = ErrCode::Value::IntegerTooLarge;
206
6
          return Unexpect(Status);
207
6
        }
208
19.6k
      }
209
263k
      Result |= (Payload << Offset);
210
263k
      break;
211
263k
    }
212
354k
  }
213
214
263k
  return Result;
215
263k
}
216
217
345k
Expect<int64_t> FileMgr::readS33() { return readSN<int64_t, 33>(); }
218
219
// Decode and read a signed int. See "include/loader/filemgr.h".
220
2.01M
Expect<int32_t> FileMgr::readS32() { return readSN<int32_t, 32>(); }
221
222
// Decode and read a signed long long int. See "include/loader/filemgr.h".
223
263k
Expect<int64_t> FileMgr::readS64() { return readSN<int64_t, 64>(); }
224
225
// Copy bytes to a float. See "include/loader/filemgr.h".
226
35.5k
Expect<float> FileMgr::readF32() {
227
35.5k
  if (Status != ErrCode::Value::Success) {
228
0
    return Unexpect(Status);
229
0
  }
230
  // Set the flag to the start offset.
231
35.5k
  LastPos = Pos;
232
233
35.5k
  uint32_t Buf = 0;
234
35.5k
  Byte Byte = 0x00;
235
  // Check if exceed the data boundary and section boundary.
236
35.5k
  EXPECTED_TRY(testRead(4));
237
177k
  for (uint32_t I = 0; I < 4; I++) {
238
142k
    Byte = Data[Pos++];
239
142k
    Buf |= (Byte & UINT32_C(0xFF)) << (I * UINT32_C(8));
240
142k
  }
241
35.5k
  float Result;
242
35.5k
  static_assert(sizeof(Buf) == sizeof(Result));
243
35.5k
  std::memcpy(&Result, &Buf, sizeof(Result));
244
35.5k
  return Result;
245
35.5k
}
246
247
// Copy bytes to a double. See "include/loader/filemgr.h".
248
16.5k
Expect<double> FileMgr::readF64() {
249
16.5k
  if (Status != ErrCode::Value::Success) {
250
0
    return Unexpect(Status);
251
0
  }
252
  // Set the flag to the start offset.
253
16.5k
  LastPos = Pos;
254
255
16.5k
  uint64_t Buf = 0;
256
16.5k
  Byte Byte = 0x00;
257
  // Check if exceed the data boundary and section boundary.
258
16.5k
  EXPECTED_TRY(testRead(8));
259
148k
  for (uint32_t I = 0; I < 8; I++) {
260
132k
    Byte = Data[Pos++];
261
132k
    Buf |= (Byte & UINT64_C(0xFF)) << (I * UINT64_C(8));
262
132k
  }
263
16.5k
  double Result;
264
16.5k
  static_assert(sizeof(Buf) == sizeof(Result));
265
16.5k
  std::memcpy(&Result, &Buf, sizeof(Result));
266
16.5k
  return Result;
267
16.5k
}
268
269
// Read a vector of bytes. See "include/loader/filemgr.h".
270
83.5k
Expect<std::string> FileMgr::readName() {
271
83.5k
  if (unlikely(Status != ErrCode::Value::Success)) {
272
0
    return Unexpect(Status);
273
0
  }
274
  // If UTF-8 validation or readU32() or readBytes() failed, the last succeeded
275
  // reading offset will be at the start of `Name`.
276
83.5k
  LastPos = Pos;
277
278
  // Read the name size.
279
83.5k
  EXPECTED_TRY(uint32_t SizeToRead, readU32());
280
281
  // Check if string length exceed the data boundary.
282
83.5k
  if (auto Res = testRead(SizeToRead); unlikely(!Res)) {
283
46
    return Unexpect(ErrCode::Value::LengthOutOfBounds);
284
46
  }
285
286
  // Read the UTF-8 bytes.
287
83.4k
  std::string Str(SizeToRead, '\0');
288
83.4k
  EXPECTED_TRY(
289
83.4k
      readBytes(Span<Byte>(reinterpret_cast<Byte *>(Str.data()), Str.size())));
290
291
  // UTF-8 validation.
292
83.4k
  bool Valid = true;
293
383k
  for (uint32_t I = 0; I < Str.size() && Valid; ++I) {
294
299k
    char C = Str.data()[I];
295
299k
    uint32_t N = 0;
296
299k
    if ((C & '\x80') == 0) {
297
      // 0xxxxxxx, 7 bits UCS, ASCII
298
288k
      N = 0;
299
288k
    } else if ((C & '\xE0') == '\xC0') {
300
      // 110xxxxx, 11 bits UCS, U+80 to U+7FF
301
2.84k
      N = 1;
302
9.08k
    } else if ((C & '\xF0') == '\xE0') {
303
      // 1110xxxx, 16 bits UCS, U+800 to U+D7FF and U+E000 to U+FFFF
304
6.20k
      N = 2;
305
6.20k
    } else if ((C & '\xF8') == '\xF0') {
306
      // 11110xxx, 21 bits UCS, U+10000 to U+10FFFF
307
2.82k
      N = 3;
308
2.82k
    } else {
309
54
      Valid = false;
310
54
    }
311
312
    // Need to have N more bytes
313
299k
    if (I + N >= Str.size()) {
314
17
      Valid = false;
315
17
    }
316
    // Invalid ranges
317
299k
    if (N == 1 && (C & '\xDE') == '\xC0') {
318
      // 11 bits UCS, U+0 to U+80, FAIL
319
3
      Valid = false;
320
299k
    } else if (N == 2 &&
321
6.20k
               ((C == '\xE0' && (Str.data()[I + 1] & '\xA0') == '\x80') ||
322
                // 16 bits UCS, U+0 to U+7FF, FAIL
323
6.20k
                (C == '\xED' && (Str.data()[I + 1] & '\xA0') == '\xA0')
324
                // 16 bits UCS, U+D800 to U+DFFF, FAIL
325
6.20k
                )) {
326
5
      Valid = false;
327
299k
    } else if (N == 3 &&
328
2.82k
               ((C == '\xF0' && (Str.data()[I + 1] & '\xB0') == '\x80') ||
329
                // 21 bits UCS, U+0 to U+FFFF, FAIL
330
2.82k
                (C == '\xF4' && (Str.data()[I + 1] & '\xB0') != '\x80') ||
331
                // 21 bits UCS, U+110000 to U+13FFFF, FAIL
332
2.81k
                (C != '\xF4' && (C & '\xF4') == '\xF4')
333
                // 21 bits UCS, U+140000 to U+1FFFFF, FAIL
334
2.82k
                )) {
335
12
      Valid = false;
336
12
    }
337
338
323k
    for (uint32_t J = 0; J < N && Valid; ++J) {
339
      // N bytes needs to match 10xxxxxx
340
23.6k
      if ((Str.data()[I + J + 1] & '\xC0') != '\x80') {
341
45
        Valid = false;
342
45
      }
343
23.6k
    }
344
299k
    I += N;
345
299k
  }
346
347
83.4k
  if (!Valid) {
348
135
    Status = ErrCode::Value::MalformedUTF8;
349
135
    return Unexpect(Status);
350
135
  }
351
83.3k
  return Str;
352
83.4k
}
353
354
// Peek one byte. See "include/loader/filemgr.h".
355
133k
Expect<Byte> FileMgr::peekByte() {
356
133k
  EXPECTED_TRY(Byte B, readByte());
357
133k
  Pos--;
358
133k
  return B;
359
133k
}
360
361
// Get the file header type. See "include/loader/filemgr.h".
362
9.42k
FileMgr::FileHeader FileMgr::getHeaderType() {
363
9.42k
  if (Size >= 4) {
364
9.40k
    Byte WASMMagic[] = {0x00, 0x61, 0x73, 0x6D};
365
9.40k
    Byte ELFMagic[] = {0x7F, 0x45, 0x4C, 0x46};
366
9.40k
    Byte MAC32agic[] = {0xCE, 0xFA, 0xED, 0xFE};
367
9.40k
    Byte MAC64agic[] = {0xCF, 0xFA, 0xED, 0xFE};
368
9.40k
    if (std::equal(WASMMagic, WASMMagic + 4, Data)) {
369
9.35k
      return FileMgr::FileHeader::Wasm;
370
9.35k
    } else if (std::equal(ELFMagic, ELFMagic + 4, Data)) {
371
1
      return FileMgr::FileHeader::ELF;
372
49
    } else if (std::equal(MAC32agic, MAC32agic + 4, Data)) {
373
1
      return FileMgr::FileHeader::MachO_32;
374
48
    } else if (std::equal(MAC64agic, MAC64agic + 4, Data)) {
375
1
      return FileMgr::FileHeader::MachO_64;
376
1
    }
377
9.40k
  }
378
65
  if (Size >= 2) {
379
64
    Byte DLLMagic[] = {0x4D, 0x5A};
380
64
    if (std::equal(DLLMagic, DLLMagic + 2, Data)) {
381
1
      return FileMgr::FileHeader::DLL;
382
1
    }
383
64
  }
384
64
  return FileMgr::FileHeader::Unknown;
385
65
}
386
387
// Jump a section. See "include/loader/filemgr.h".
388
0
Expect<void> FileMgr::jumpContent() {
389
0
  if (unlikely(Status != ErrCode::Value::Success)) {
390
0
    return Unexpect(Status);
391
0
  }
392
  // Set the flag to the start offset.
393
0
  LastPos = Pos;
394
  // Read the section size.
395
0
  EXPECTED_TRY(uint32_t SecSize, readU32());
396
  // Jump the content.
397
0
  EXPECTED_TRY(testRead(SecSize));
398
0
  Pos += SecSize;
399
0
  return {};
400
0
}
401
402
// Helper function for reading number of bytes. See "include/loader/filemgr.h".
403
146k
Expect<void> FileMgr::readBytes(Span<Byte> Buffer) {
404
146k
  if (unlikely(Status != ErrCode::Value::Success)) {
405
0
    return Unexpect(Status);
406
0
  }
407
  // The adjustment of `LastPos` should be handled by caller.
408
146k
  auto SizeToRead = Buffer.size();
409
146k
  if (likely(SizeToRead > 0)) {
410
    // Check if exceed the data boundary.
411
52.2k
    EXPECTED_TRY(testRead(SizeToRead));
412
52.2k
    std::copy_n(Data + Pos, SizeToRead, Buffer.begin());
413
52.2k
    Pos += SizeToRead;
414
52.2k
  }
415
146k
  return {};
416
146k
}
417
418
// Helper function for checking boundary. See "include/loader/filemgr.h".
419
14.5M
Expect<void> FileMgr::testRead(uint64_t Read) {
420
  // Check if exceed the data boundary
421
14.5M
  if (unlikely(getRemainSize() < Read)) {
422
7.17k
    Pos = Size;
423
7.17k
    LastPos = Pos;
424
7.17k
    Status = ErrCode::Value::UnexpectedEnd;
425
7.17k
    return Unexpect(Status);
426
7.17k
  }
427
14.5M
  return {};
428
14.5M
}
429
430
} // namespace WasmEdge