================ @@ -0,0 +1,75 @@ +//===----------------------------------------------------------------------===// +// +// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions. +// See https://llvm.org/LICENSE.txt for license information. +// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception +// +//===----------------------------------------------------------------------===// +/// +/// \file +/// This file contains the implementation of strcpy_s. +/// +//===----------------------------------------------------------------------===// + +#define __STDC_WANT_LIB_EXT1__ 1 +#include "hdr/stdint_proxy.h" +#undef __STDC_WANT_LIB_EXT1__ +#include "hdr/types/constraint_handler_t.h" +#include "hdr/types/errno_t.h" +#include "hdr/types/rsize_t.h" +#include "src/__support/common.h" +#include "src/__support/constraint_handler.h" +#include "src/__support/macros/config.h" +#include "src/string/memory_utils/inline_memcpy.h" +#include "src/string/strcpy_s.h" +#include "src/string/string_utils.h" +#include "src/string/strnlen_s.h" + +namespace LIBC_NAMESPACE_DECL { + +LLVM_LIBC_FUNCTION(errno_t, strcpy_s, + (char *__restrict s1, rsize_t s1max, + const char *__restrict s2)) { + const char *constraint_violation_msg = 0; + size_t count; + + if (s1 == 0) { + constraint_violation_msg = "strcpy_s: s1 cannot be null"; + } else if (s2 == 0) { + constraint_violation_msg = "strcpy_s: s2 cannot be null"; + } else if (s1max > RSIZE_MAX) { + constraint_violation_msg = "strcpy_s: s1max cannot exceed RSIZE_MAX"; + } else if (s1max == 0) { + constraint_violation_msg = "strcpy_s: s1max cannot be 0"; + } else if (count = strnlen_s(s2, s1max); + s1max == count) { // count can't be greater than s1max by + // definition, so no need to check for this case + constraint_violation_msg = "strcpy_s: s1max is too small for s2"; + } + // Check overlap using the full regions defined by the standard, including the + // terminating null byte: + // destination: [s1, s1 + s1max) + // source: [s2, s2 + count + 1) + // Use s1max for the destination's length, not count + 1, because the + // standard allows for overwriting the entire destination region, even if + // s2's length is smaller than s1max. + else if (const uintptr_t s1_addr = reinterpret_cast<uintptr_t>(s1), + s2_addr = reinterpret_cast<uintptr_t>(s2); + s1_addr < s2_addr ? s2_addr - s1_addr < s1max + : s1_addr - s2_addr < count + 1) { + constraint_violation_msg = "strcpy_s: s1 and s2 cannot overlap"; + } + + if (constraint_violation_msg) { + if (s1 != 0 && s1max > 0 && s1max <= RSIZE_MAX) { + s1[0] = '\0'; + } + libc_global_constraint_handler(constraint_violation_msg, 0, 1); ---------------- kaladron wrote:
>From your other PR, it looks like the "1" here is intended to be the errno >that is set? If yes, we should use the constants. https://github.com/llvm/llvm-project/pull/197709 _______________________________________________ llvm-branch-commits mailing list [email protected] https://lists.llvm.org/cgi-bin/mailman/listinfo/llvm-branch-commits
