Coverage Report

Created: 2026-11-12 06:21

next uncovered line (L), next uncovered region (R), next uncovered branch (B)
/src/zlib-ng/inffast_tpl.h
Line
Count
Source
1
/* inffast.c -- fast decoding
2
 * Copyright (C) 1995-2017 Mark Adler
3
 * For conditions of distribution and use, see copyright notice in zlib.h
4
 */
5
6
#include "zbuild.h"
7
#include "zutil.h"
8
#include "inftrees.h"
9
#include "inflate.h"
10
#include "inflate_p.h"
11
#include "functable.h"
12
13
/*
14
   Decode literal, length, and distance codes and write out the resulting
15
   literal and match bytes until either not enough input or output is
16
   available, an end-of-block is encountered, or a data error is encountered.
17
   When large enough input and output buffers are supplied to inflate(), for
18
   example, a 16K input buffer and a 64K output buffer, more than 95% of the
19
   inflate execution time is spent in this routine.
20
21
   Entry assumptions:
22
23
        state->mode == LEN
24
        strm->avail_in >= INFLATE_FAST_MIN_HAVE
25
        strm->avail_out >= INFLATE_FAST_MIN_LEFT
26
        start >= strm->avail_out
27
        state->bits < 8
28
29
   On return, state->mode is one of:
30
31
        LEN -- ran out of enough output space or enough available input
32
        TYPE -- reached end of block code, inflate() to interpret next block
33
        BAD -- error in block data
34
35
   Notes:
36
37
    - The maximum input bits used by a length/distance pair is 15 bits for the
38
      length code, 5 bits for the length extra, 15 bits for the distance code,
39
      and 13 bits for the distance extra.  This totals 48 bits, or six bytes.
40
      Therefore if strm->avail_in >= 6, then there is enough input to avoid
41
      checking for available input while decoding.
42
43
    - On some architectures, it can be significantly faster (e.g. up to 1.2x
44
      faster on x86_64) to load from strm->next_in 64 bits, or 8 bytes, at a
45
      time, so INFLATE_FAST_MIN_HAVE == 8.
46
47
    - The maximum bytes that a single length/distance pair can output is 258
48
      bytes, which is the maximum length that can be coded.  inflate_fast()
49
      requires strm->avail_out >= 258 for each loop to avoid checking for
50
      output space.
51
 */
52
0
void Z_INTERNAL INFLATE_FAST(PREFIX3(stream) *strm, uint32_t start) {
53
    /* start: inflate()'s starting value for strm->avail_out */
54
0
    struct inflate_state *state;
55
0
    z_const unsigned char *in;  /* local strm->next_in */
56
0
    const unsigned char *last;  /* have enough input while in < last */
57
0
    unsigned char *out;         /* local strm->next_out */
58
0
    unsigned char *beg;         /* inflate()'s initial strm->next_out */
59
0
    unsigned char *end;         /* while out < end, enough space available */
60
0
    unsigned char *safe;        /* can use chunkcopy provided out < safe */
61
0
    unsigned char *window;      /* allocated sliding window, if wsize != 0 */
62
0
    unsigned wsize;             /* window size or zero if not using window */
63
0
    unsigned whave;             /* valid bytes in the window */
64
0
    unsigned wnext;             /* window write index */
65
66
    /* hold is a local copy of strm->hold. By default, hold satisfies the same
67
       invariants that strm->hold does, namely that (hold >> bits) == 0. This
68
       invariant is kept by loading bits into hold one byte at a time, like:
69
70
       hold |= next_byte_of_input << bits; in++; bits += 8;
71
72
       If we need to ensure that bits >= 15 then this code snippet is simply
73
       repeated. Over one iteration of the outermost do/while loop, this
74
       happens up to six times (48 bits of input), as described in the NOTES
75
       above.
76
77
       However, on some little endian architectures, it can be significantly
78
       faster to load 64 bits once instead of 8 bits six times:
79
80
       if (bits <= 16) {
81
         hold |= next_8_bytes_of_input << bits; in += 6; bits += 48;
82
       }
83
84
       Unlike the simpler one byte load, shifting the next_8_bytes_of_input
85
       by bits will overflow and lose those high bits, up to 2 bytes' worth.
86
       The conservative estimate is therefore that we have read only 6 bytes
87
       (48 bits). Again, as per the NOTES above, 48 bits is sufficient for the
88
       rest of the iteration, and we will not need to load another 8 bytes.
89
90
       Inside this function, we no longer satisfy (hold >> bits) == 0, but
91
       this is not problematic, even if that overflow does not land on an 8 bit
92
       byte boundary. Those excess bits will eventually shift down lower as the
93
       Huffman decoder consumes input, and when new input bits need to be loaded
94
       into the bits variable, the same input bits will be or'ed over those
95
       existing bits. A bitwise or is idempotent: (a | b | b) equals (a | b).
96
       Note that we therefore write that load operation as "hold |= etc" and not
97
       "hold += etc".
98
99
       Outside that loop, at the end of the function, hold is bitwise and'ed
100
       with (1<<bits)-1 to drop those excess bits so that, on function exit, we
101
       keep the invariant that (state->hold >> state->bits) == 0.
102
    */
103
0
    bits_t bits;                /* local strm->bits */
104
0
    uint64_t hold;              /* local strm->hold */
105
0
    unsigned lmask;             /* mask for first level of length codes */
106
0
    unsigned dmask;             /* mask for first level of distance codes */
107
0
    code const *lcode;          /* local strm->lencode */
108
0
    code const *dcode;          /* local strm->distcode */
109
0
    code here;                  /* retrieved table entry */
110
0
    unsigned op;                /* code bits, operation, extra bits, or */
111
                                /*  window position, window bytes to copy */
112
0
    unsigned len;               /* match length, unused bytes */
113
0
    unsigned char *from;        /* where to copy match from */
114
0
    unsigned dist;              /* match distance */
115
0
    uint64_t old;               /* look-behind buffer for extra bits */
116
117
    /* copy state to local variables */
118
0
    state = (struct inflate_state *)strm->state;
119
0
    in = strm->next_in;
120
0
    last = in + (strm->avail_in - (INFLATE_FAST_MIN_HAVE - 1));
121
0
    out = strm->next_out;
122
0
    beg = out - (start - strm->avail_out);
123
0
    safe = out + strm->avail_out;
124
#ifdef USE_SAFE_MODE
125
0
    end = safe - INFLATE_FAST_MIN_SAFE + 1;
126
#else
127
0
    end = safe - INFLATE_FAST_MIN_LEFT + 1;
128
#endif
129
0
    wsize = state->wsize;
130
0
    whave = state->whave;
131
0
    wnext = state->wnext;
132
0
    window = state->window;
133
0
    hold = state->hold;
134
0
    bits = (bits_t)state->bits;
135
0
    lcode = state->lencode;
136
0
    dcode = state->distcode;
137
0
    lmask = (1U << state->lenbits) - 1;
138
0
    dmask = (1U << state->distbits) - 1;
139
140
    /* Ensure enough bits for the first length table lookup. Every refill after
141
       this one is issued behind a table lookup that only needs bits already in
142
       hold, so the refill's load latency overlaps with the table load instead
143
       of feeding it. */
144
0
    REFILL();
145
146
    /* decode literals and length/distances until end-of-block or not enough
147
       input data or output space */
148
0
    do {
149
        /* This lookup needs bits >= MAX_LEN_ROOT_BITS, which every path here
150
           guarantees: each refill leaves bits >= 56, the literal-only paths
151
           loop after consuming at most 35 bits, and the distance path refills
152
           to at least MAX_BITS + MAX_DIST_EXTRA_BITS + MAX_LEN_ROOT_BITS
153
           before consuming at most MAX_BITS + MAX_DIST_EXTRA_BITS. */
154
0
        here = lcode[hold & lmask];
155
0
        Z_TOUCH(here);
156
        /* No-op on the first iteration: the pre-loop refill already filled hold
157
           and the lookup above consumes nothing, so bits is still >= 56. Tops
158
           hold back up on every later iteration. */
159
0
        REFILL();
160
0
        old = hold;
161
0
        DROPBITS(here.bits);
162
0
        if (LIKELY(here.op == 0)) {
163
0
            TRACE_LITERAL(here.val);
164
0
            *out++ = (unsigned char)(here.val);
165
0
            here = lcode[hold & lmask];
166
0
            Z_TOUCH(here);
167
0
            old = hold;
168
0
            DROPBITS(here.bits);
169
0
            if (LIKELY(here.op == 0)) {
170
0
                TRACE_LITERAL(here.val);
171
0
                *out++ = (unsigned char)(here.val);
172
0
                here = lcode[hold & lmask];
173
0
                Z_TOUCH(here);
174
0
            dolen:
175
0
                old = hold;
176
0
                DROPBITS(here.bits);
177
0
                if (LIKELY(here.op == 0)) {
178
0
                    TRACE_LITERAL(here.val);
179
0
                    *out++ = (unsigned char)(here.val);
180
0
                    continue;
181
0
                }
182
0
            }
183
0
        }
184
0
        op = here.op;
185
0
        if (LIKELY(op & 16)) {                  /* length base */
186
0
            len = here.val + EXTRA_BITS(old, here, op);
187
0
            TRACE_LENGTH(len);
188
0
            here = dcode[hold & dmask];
189
0
            Z_TOUCH(here);
190
            /* Reserve bits for the distance code and its extra bits, plus the
191
               next iteration's length table lookup, which happens before the
192
               next refill. */
193
0
            if (UNLIKELY(bits < MAX_BITS + MAX_DIST_EXTRA_BITS + MAX_LEN_ROOT_BITS)) {
194
0
                REFILL();
195
0
            }
196
0
          dodist:
197
0
            old = hold;
198
0
            DROPBITS(here.bits);
199
0
            op = here.op;
200
0
            if (LIKELY(op & 16)) {              /* distance base */
201
0
                dist = here.val + EXTRA_BITS(old, here, op);
202
#ifdef INFLATE_STRICT
203
                if (UNLIKELY(dist > state->dmax)) {
204
                    SET_BAD("invalid distance too far back");
205
                    break;
206
                }
207
#endif
208
0
                TRACE_DISTANCE(dist);
209
210
#ifdef USE_SAFE_MODE
211
                /* If there isn't enough output space for the full copy, bail to the
212
                   slow path's MATCH state which handles partial copies. */
213
0
                if (UNLIKELY(len > (unsigned)(safe - out))) {
214
0
                    state->mode = MATCH;
215
0
                    state->length = len;
216
0
                    state->was = len;
217
0
                    state->offset = dist;
218
0
                    break;
219
0
                }
220
0
#endif
221
222
0
                op = (unsigned)(out - beg);     /* max distance in output */
223
0
                if (UNLIKELY(dist > op)) {      /* see if copy from window */
224
0
                    op = dist - op;             /* distance back in window */
225
0
                    if (UNLIKELY(op > whave)) {
226
#ifdef INFLATE_ALLOW_INVALID_DISTANCE_TOOFAR_ARRR
227
                        if (LIKELY(state->sane)) {
228
                            SET_BAD("invalid distance too far back");
229
                            break;
230
                        }
231
                        unsigned gap = op - whave;
232
                        unsigned zeros = MIN(len, gap);
233
                        memset(out, 0, zeros);  /* fill missing bytes with zeros */
234
                        out += zeros;
235
                        len -= zeros;
236
                        if (UNLIKELY(len == 0))
237
                            continue;
238
                        op = whave;
239
                        if (UNLIKELY(op == 0)) {/* copy from already-decoded output */
240
                            out = chunkcopy_safe(out, out - dist, len, safe);
241
                            continue;
242
                        }
243
#else
244
0
                        SET_BAD("invalid distance too far back");
245
0
                        break;
246
0
#endif
247
0
                    }
248
0
                    from = window;
249
0
                    if (LIKELY(wnext == 0)) {           /* very common case */
250
0
                        from += wsize - op;
251
0
                    } else if (LIKELY(wnext >= op)) {   /* contiguous in window */
252
0
                        from += wnext - op;
253
0
                    } else {                            /* wrap around window */
254
0
                        op -= wnext;
255
0
                        from += wsize - op;
256
0
                        if (UNLIKELY(op < len)) {       /* some from end of window */
257
0
                            len -= op;
258
0
                            out = CHUNKCOPY_SAFE(out, from, op, safe);
259
0
                            from = window;              /* more from start of window */
260
0
                            op = wnext;
261
                            /* This (rare) case can create a situation where
262
                               the first chunkcopy below must be checked.
263
                             */
264
0
                        }
265
0
                    }
266
0
                    if (UNLIKELY(op < len)) {           /* still need some from output */
267
0
                        len -= op;
268
#ifndef USE_SAFE_MODE
269
                        out = CHUNKCOPY_SAFE(out, from, op, safe);
270
0
                        out = CHUNKUNROLL(out, &dist, &len);
271
                        out = CHUNKCOPY_SAFE(out, out - dist, len, safe);
272
#elif defined(HAVE_MASKED_READWRITE)
273
                        out = CHUNKCOPY_SAFE(out, from, op, safe);
274
                        out = CHUNKCOPY_SAFE(out, out - dist, len, safe);
275
#else
276
                        out = chunkcopy_safe(out, from, op, safe);
277
                        out = chunkcopy_safe(out, out - dist, len, safe);
278
#endif
279
0
                    } else {
280
#if !defined(USE_SAFE_MODE) || defined(HAVE_MASKED_READWRITE)
281
                        out = CHUNKCOPY_SAFE(out, from, len, safe);
282
#else
283
                        out = chunkcopy_safe(out, from, len, safe);
284
#endif
285
0
                    }
286
0
                } else {
287
#ifndef USE_SAFE_MODE
288
                    /* Whole reference is in range of current output.  No range checks are
289
                       necessary because we start with room for at least 258 bytes of output,
290
                       so unroll and roundoff operations can write beyond `out+len` so long
291
                       as they stay within 258 bytes of `out`.
292
                    */
293
0
                    if (LIKELY(dist >= len || dist > CHUNKSIZE()))
294
0
                        out = CHUNKCOPY(out, out - dist, len);
295
0
                    else
296
0
                        out = CHUNKMEMSET(out, out - dist, len);
297
#elif defined(HAVE_MASKED_READWRITE)
298
                    out = CHUNKCOPY_SAFE(out, out - dist, len, safe);
299
#else
300
                    out = chunkcopy_safe(out, out - dist, len, safe);
301
#endif
302
0
                }
303
0
            } else if (UNLIKELY((op & 64) == 0)) {          /* 2nd level distance code */
304
0
                here = dcode[here.val + BITS(op)];
305
0
                Z_TOUCH(here);
306
0
                goto dodist;
307
0
            } else {
308
0
                SET_BAD("invalid distance code");
309
0
                break;
310
0
            }
311
0
        } else if (UNLIKELY((op & 64) == 0)) {              /* 2nd level length code */
312
0
            here = lcode[here.val + BITS(op)];
313
0
            Z_TOUCH(here);
314
0
            goto dolen;
315
0
        } else if (UNLIKELY(op & 32)) {                     /* end-of-block */
316
0
            TRACE_END_OF_BLOCK();
317
0
            state->mode = TYPE;
318
0
            break;
319
0
        } else {
320
0
            SET_BAD("invalid literal/length code");
321
0
            break;
322
0
        }
323
0
    } while (in < last && out < end);
324
325
    /* return unused bytes (on entry, bits < 8, so in won't go too far back) */
326
0
    len = bits >> 3;
327
0
    in -= len;
328
0
    bits -= (bits_t)(len << 3);
329
0
    hold &= (UINT64_C(1) << bits) - 1;
330
331
    /* update state and return */
332
0
    strm->next_in = in;
333
0
    strm->next_out = out;
334
0
    strm->avail_in = (unsigned)(in < last ? (INFLATE_FAST_MIN_HAVE - 1) + (last - in)
335
0
                                          : (INFLATE_FAST_MIN_HAVE - 1) - (in - last));
336
0
    strm->avail_out = (unsigned)(safe - out);
337
338
0
    Assert(bits <= 32, "Remaining bits greater than 32");
339
0
    state->hold = (uint32_t)hold;
340
0
    state->bits = bits;
341
0
    return;
342
0
}
Unexecuted instantiation: inflate_fast_sse2
Unexecuted instantiation: inflate_fast_safe_sse2
Unexecuted instantiation: inflate_fast_ssse3
Unexecuted instantiation: inflate_fast_safe_ssse3
Unexecuted instantiation: inflate_fast_avx2
Unexecuted instantiation: inflate_fast_safe_avx2
Unexecuted instantiation: inflate_fast_avx512
Unexecuted instantiation: inflate_fast_safe_avx512
343
344
/*
345
   inflate_fast() speedups that turned out slower (on a PowerPC G3 750CXe):
346
   - Using bit fields for code structure
347
   - Different op definition to avoid & for extra bits (do & for table bits)
348
   - Three separate decoding do-loops for direct, window, and wnext == 0
349
   - Special case for distance > 1 copies to do overlapped load and store copy
350
   - Explicit branch predictions (based on measured branch probabilities)
351
   - Deferring match copy and interspersed it with decoding subsequent codes
352
   - Swapping literal/length else
353
   - Swapping window/direct else
354
   - Larger unrolled copy loops (three is about right)
355
   - Moving len -= 3 statement into middle of loop
356
 */
357
358
 // Cleanup
359
#undef INFLATE_FAST
360
361
/* The chunkset macros are shared by both instantiations, so they can only be
362
   released once the safe one has been emitted. */
363
#ifdef USE_SAFE_MODE
364
#  undef CHUNKCOPY
365
#  undef CHUNKMEMSET
366
#  undef CHUNKMEMSET_SAFE
367
#  undef CHUNKSIZE
368
#  undef CHUNKUNROLL
369
#  undef HAVE_CHUNKCOPY
370
#  undef HAVE_CHUNKMEMSET_2
371
#  undef HAVE_CHUNKMEMSET_4
372
#  undef HAVE_CHUNKMEMSET_8
373
#  undef HAVE_CHUNKMEMSET_16
374
#  undef HAVE_CHUNK_MAG
375
#  undef HAVE_HALFCHUNKCOPY
376
#  undef HAVE_HALF_CHUNK
377
#  undef HAVE_MASKED_READWRITE
378
#  undef USE_SAFE_MODE
379
#endif