malloca.h 4.4 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123
  1. /* Safe automatic memory allocation.
  2. Copyright (C) 2003-2007, 2009-2021 Free Software Foundation, Inc.
  3. Written by Bruno Haible <bruno@clisp.org>, 2003.
  4. This program is free software; you can redistribute it and/or modify
  5. it under the terms of the GNU General Public License as published by
  6. the Free Software Foundation; either version 3, or (at your option)
  7. any later version.
  8. This program is distributed in the hope that it will be useful,
  9. but WITHOUT ANY WARRANTY; without even the implied warranty of
  10. MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  11. GNU General Public License for more details.
  12. You should have received a copy of the GNU General Public License
  13. along with this program; if not, see <https://www.gnu.org/licenses/>. */
  14. #ifndef _MALLOCA_H
  15. #define _MALLOCA_H
  16. #include <alloca.h>
  17. #include <stddef.h>
  18. #include <stdlib.h>
  19. #include <stdint.h>
  20. #include "xalloc-oversized.h"
  21. #ifdef __cplusplus
  22. extern "C" {
  23. #endif
  24. /* safe_alloca(N) is equivalent to alloca(N) when it is safe to call
  25. alloca(N); otherwise it returns NULL. It either returns N bytes of
  26. memory allocated on the stack, that lasts until the function returns,
  27. or NULL.
  28. Use of safe_alloca should be avoided:
  29. - inside arguments of function calls - undefined behaviour,
  30. - in inline functions - the allocation may actually last until the
  31. calling function returns.
  32. */
  33. #if HAVE_ALLOCA
  34. /* The OS usually guarantees only one guard page at the bottom of the stack,
  35. and a page size can be as small as 4096 bytes. So we cannot safely
  36. allocate anything larger than 4096 bytes. Also care for the possibility
  37. of a few compiler-allocated temporary stack slots.
  38. This must be a macro, not a function. */
  39. # define safe_alloca(N) ((N) < 4032 ? alloca (N) : NULL)
  40. #else
  41. # define safe_alloca(N) ((void) (N), NULL)
  42. #endif
  43. /* malloca(N) is a safe variant of alloca(N). It allocates N bytes of
  44. memory allocated on the stack, that must be freed using freea() before
  45. the function returns. Upon failure, it returns NULL. */
  46. #if HAVE_ALLOCA
  47. # define malloca(N) \
  48. ((N) < 4032 - (2 * sa_alignment_max - 1) \
  49. ? (void *) (((uintptr_t) (char *) alloca ((N) + 2 * sa_alignment_max - 1) \
  50. + (2 * sa_alignment_max - 1)) \
  51. & ~(uintptr_t)(2 * sa_alignment_max - 1)) \
  52. : mmalloca (N))
  53. #else
  54. # define malloca(N) \
  55. mmalloca (N)
  56. #endif
  57. extern void * mmalloca (size_t n);
  58. /* Free a block of memory allocated through malloca(). */
  59. #if HAVE_ALLOCA
  60. extern void freea (void *p);
  61. #else
  62. # define freea free
  63. #endif
  64. /* nmalloca(N,S) is an overflow-safe variant of malloca (N * S).
  65. It allocates an array of N objects, each with S bytes of memory,
  66. on the stack. S must be positive and N must be nonnegative.
  67. The array must be freed using freea() before the function returns. */
  68. #define nmalloca(n, s) (xalloc_oversized (n, s) ? NULL : malloca ((n) * (s)))
  69. #ifdef __cplusplus
  70. }
  71. #endif
  72. /* ------------------- Auxiliary, non-public definitions ------------------- */
  73. /* Determine the alignment of a type at compile time. */
  74. #if defined __GNUC__ || defined __clang__ || defined __IBM__ALIGNOF__
  75. # define sa_alignof __alignof__
  76. #elif defined __cplusplus
  77. template <class type> struct sa_alignof_helper { char __slot1; type __slot2; };
  78. # define sa_alignof(type) offsetof (sa_alignof_helper<type>, __slot2)
  79. #elif defined __hpux
  80. /* Work around a HP-UX 10.20 cc bug with enums constants defined as offsetof
  81. values. */
  82. # define sa_alignof(type) (sizeof (type) <= 4 ? 4 : 8)
  83. #elif defined _AIX
  84. /* Work around an AIX 3.2.5 xlc bug with enums constants defined as offsetof
  85. values. */
  86. # define sa_alignof(type) (sizeof (type) <= 4 ? 4 : 8)
  87. #else
  88. # define sa_alignof(type) offsetof (struct { char __slot1; type __slot2; }, __slot2)
  89. #endif
  90. enum
  91. {
  92. /* The desired alignment of memory allocations is the maximum alignment
  93. among all elementary types. */
  94. sa_alignment_long = sa_alignof (long),
  95. sa_alignment_double = sa_alignof (double),
  96. sa_alignment_longlong = sa_alignof (long long),
  97. sa_alignment_longdouble = sa_alignof (long double),
  98. sa_alignment_max = ((sa_alignment_long - 1) | (sa_alignment_double - 1)
  99. | (sa_alignment_longlong - 1)
  100. | (sa_alignment_longdouble - 1)
  101. ) + 1
  102. };
  103. #endif /* _MALLOCA_H */