| 1 | /* GLIB - Library of useful routines for C programming |
| 2 | * Copyright (C) 1995-1997 Peter Mattis, Spencer Kimball and Josh MacDonald |
| 3 | * |
| 4 | * This library is free software; you can redistribute it and/or |
| 5 | * modify it under the terms of the GNU Lesser General Public |
| 6 | * License as published by the Free Software Foundation; either |
| 7 | * version 2.1 of the License, or (at your option) any later version. |
| 8 | * |
| 9 | * This library is distributed in the hope that it will be useful, |
| 10 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 11 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 12 | * Lesser General Public License for more details. |
| 13 | * |
| 14 | * You should have received a copy of the GNU Lesser General Public |
| 15 | * License along with this library; if not, see <http://www.gnu.org/licenses/>. |
| 16 | */ |
| 17 | |
| 18 | /* |
| 19 | * Modified by the GLib Team and others 1997-2000. See the AUTHORS |
| 20 | * file for a list of people on the GLib Team. See the ChangeLog |
| 21 | * files for a list of changes. These files are distributed with |
| 22 | * GLib at ftp://ftp.gtk.org/pub/gtk/. |
| 23 | */ |
| 24 | |
| 25 | #ifndef __G_ALLOCA_H__ |
| 26 | #define __G_ALLOCA_H__ |
| 27 | |
| 28 | #if !defined (__GLIB_H_INSIDE__) && !defined (GLIB_COMPILATION) |
| 29 | #error "Only <glib.h> can be included directly." |
| 30 | #endif |
| 31 | |
| 32 | #include <glib/gtypes.h> |
| 33 | #include <string.h> |
| 34 | |
| 35 | #if defined(__BIONIC__) && defined (GLIB_HAVE_ALLOCA_H) |
| 36 | # include <alloca.h> |
| 37 | #elif defined(__GNUC__) |
| 38 | /* GCC does the right thing */ |
| 39 | # undef alloca |
| 40 | # define alloca(size) __builtin_alloca (size) |
| 41 | #elif defined (GLIB_HAVE_ALLOCA_H) |
| 42 | /* a native and working alloca.h is there */ |
| 43 | # include <alloca.h> |
| 44 | #else /* !__GNUC__ && !GLIB_HAVE_ALLOCA_H */ |
| 45 | # if defined(_MSC_VER) || defined(__DMC__) |
| 46 | # include <malloc.h> |
| 47 | # define alloca _alloca |
| 48 | # else /* !_MSC_VER && !__DMC__ */ |
| 49 | # ifdef _AIX |
| 50 | # pragma alloca |
| 51 | # else /* !_AIX */ |
| 52 | # ifndef alloca /* predefined by HP cc +Olibcalls */ |
| 53 | G_BEGIN_DECLS |
| 54 | char *alloca (); |
| 55 | G_END_DECLS |
| 56 | # endif /* !alloca */ |
| 57 | # endif /* !_AIX */ |
| 58 | # endif /* !_MSC_VER && !__DMC__ */ |
| 59 | #endif /* !__GNUC__ && !GLIB_HAVE_ALLOCA_H */ |
| 60 | |
| 61 | /** |
| 62 | * g_alloca: |
| 63 | * @size: number of bytes to allocate. |
| 64 | * |
| 65 | * Allocates @size bytes on the stack; these bytes will be freed when the current |
| 66 | * stack frame is cleaned up. This macro essentially just wraps the alloca() |
| 67 | * function present on most UNIX variants. |
| 68 | * Thus it provides the same advantages and pitfalls as alloca(): |
| 69 | * |
| 70 | * - alloca() is very fast, as on most systems it's implemented by just adjusting |
| 71 | * the stack pointer register. |
| 72 | * |
| 73 | * - It doesn't cause any memory fragmentation, within its scope, separate alloca() |
| 74 | * blocks just build up and are released together at function end. |
| 75 | * |
| 76 | * - Allocation sizes have to fit into the current stack frame. For instance in a |
| 77 | * threaded environment on Linux, the per-thread stack size is limited to 2 Megabytes, |
| 78 | * so be sparse with alloca() uses. |
| 79 | * |
| 80 | * - Allocation failure due to insufficient stack space is not indicated with a %NULL |
| 81 | * return like e.g. with malloc(). Instead, most systems probably handle it the same |
| 82 | * way as out of stack space situations from infinite function recursion, i.e. |
| 83 | * with a segmentation fault. |
| 84 | * |
| 85 | * - Allowing @size to be specified by an untrusted party would allow for them |
| 86 | * to trigger a segmentation fault by specifying a large size, leading to a |
| 87 | * denial of service vulnerability. @size must always be entirely under the |
| 88 | * control of the program. |
| 89 | * |
| 90 | * - Special care has to be taken when mixing alloca() with GNU C variable sized arrays. |
| 91 | * Stack space allocated with alloca() in the same scope as a variable sized array |
| 92 | * will be freed together with the variable sized array upon exit of that scope, and |
| 93 | * not upon exit of the enclosing function scope. |
| 94 | * |
| 95 | * Returns: space for @size bytes, allocated on the stack |
| 96 | */ |
| 97 | #define g_alloca(size) alloca (size) |
| 98 | |
| 99 | /** |
| 100 | * g_alloca0: |
| 101 | * @size: number of bytes to allocate. |
| 102 | * |
| 103 | * Wraps g_alloca() and initializes allocated memory to zeroes. |
| 104 | * If @size is `0` it returns %NULL. |
| 105 | * |
| 106 | * Note that the @size argument will be evaluated multiple times. |
| 107 | * |
| 108 | * Returns: (nullable) (transfer full): space for @size bytes, allocated on the stack |
| 109 | * |
| 110 | * Since: 2.72 |
| 111 | */ |
| 112 | #define g_alloca0(size) ((size) == 0 ? NULL : memset (g_alloca (size), 0, (size))) |
| 113 | |
| 114 | /** |
| 115 | * g_newa: |
| 116 | * @struct_type: Type of memory chunks to be allocated |
| 117 | * @n_structs: Number of chunks to be allocated |
| 118 | * |
| 119 | * Wraps g_alloca() in a more typesafe manner. |
| 120 | * |
| 121 | * As mentioned in the documentation for g_alloca(), @n_structs must always be |
| 122 | * entirely under the control of the program, or you may introduce a denial of |
| 123 | * service vulnerability. In addition, the multiplication of @struct_type by |
| 124 | * @n_structs is not checked, so an overflow may lead to a remote code execution |
| 125 | * vulnerability. |
| 126 | * |
| 127 | * Returns: Pointer to stack space for @n_structs chunks of type @struct_type |
| 128 | */ |
| 129 | #define g_newa(struct_type, n_structs) ((struct_type*) g_alloca (sizeof (struct_type) * (gsize) (n_structs))) |
| 130 | |
| 131 | /** |
| 132 | * g_newa0: |
| 133 | * @struct_type: the type of the elements to allocate. |
| 134 | * @n_structs: the number of elements to allocate. |
| 135 | * |
| 136 | * Wraps g_alloca0() in a more typesafe manner. |
| 137 | * |
| 138 | * Returns: (nullable) (transfer full): Pointer to stack space for @n_structs |
| 139 | * chunks of type @struct_type |
| 140 | * |
| 141 | * Since: 2.72 |
| 142 | */ |
| 143 | #define g_newa0(struct_type, n_structs) ((struct_type*) g_alloca0 (sizeof (struct_type) * (gsize) (n_structs))) |
| 144 | |
| 145 | #endif /* __G_ALLOCA_H__ */ |
| 146 | |