xref: /xnu-11215/tests/bounded_ptr_src/example.malloc.cpp (revision 8d741a5d)

//
// Example of providing a malloc() wrapper that returns a `bounded_ptr`.
//
// This test serves as some kind of integration test, ensuring that we're
// able to convert existing code using raw pointers to using `bounded_ptr`s
// without too much hassle. This code was lifted from existing code in XNU,
// and the variable names were changed to make it more generic.
//

#include <libkern/c++/bounded_ptr.h>
#include <cstddef>
#include <cstdint>
#include <cstdlib>
#include <darwintest.h>
#include "test_utils.h"

test_bounded_ptr<void>
bounded_malloc(std::size_t size)
{
	void* p = std::malloc(size);
	void* end = static_cast<char*>(p) + size;
	test_bounded_ptr<void> with_bounds(p, p, end);
	return with_bounds;
}

void
bounded_free(test_bounded_ptr<void> ptr)
{
	std::free(ptr.discard_bounds());
}

struct SomeType {
	std::uint32_t idx;
};

// Pretend that those functions are already part of the code base being
// transitioned over to `bounded_ptr`s, and we can't change their signature.
// The purpose of having those functions is to make sure that we're able to
// integrate into existing code bases with decent ease.
void
use(SomeType*)
{
}
void
require(bool condition)
{
	if (!condition) {
		std::exit(EXIT_FAILURE);
	}
}

T_DECL(example_malloc, "bounded_ptr.example.malloc", T_META_TAG_VM_PREFERRED) {
	test_bounded_ptr<SomeType> array = nullptr;
	std::uint32_t count = 100;
	std::uint32_t alloc_size = count * sizeof(SomeType);

	// (1) must use a bounded version of malloc
	// (2) must use a reinterpret_pointer_cast to go from void* to SomeType*
	array = libkern::reinterpret_pointer_cast<SomeType>(bounded_malloc(alloc_size));

	require(array != nullptr); // use != nullptr instead of relying on implicit conversion to bool
	use(array.discard_bounds()); // must manually discard bounds here

	for (std::uint32_t i = 0; i < count; i++) {
		std::uint32_t& idx = array[i].idx;
		idx = i;
		use(&array[idx]);
	}

	if (array) {
		bounded_free(array); // must use a bounded version of free
	}

	T_PASS("bounded_ptr.example.malloc test done");
}