The Tor Browser: js/src/vm/ArrayBufferObject.h@129ffea94266 (annotated)

js/src/vm/ArrayBufferObject.h@129ffea94266 (annotated)

js/src/vm/ArrayBufferObject.h

Sat, 03 Jan 2015 20:18:00 +0100

author: Michael Schloh von Bennewitz <michael@schloh.com>
date: Sat, 03 Jan 2015 20:18:00 +0100
branch: TOR_BUG_3246
changeset 7: 129ffea94266
permissions: -rw-r--r--

Conditionally enable double key logic according to:
private browsing mode or privacy.thirdparty.isolate preference and
implement in GetCookieStringCommon and FindCookie where it counts...
With some reservations of how to convince FindCookie users to test
condition and pass a nullptr when disabling double key logic.

 /* -*- Mode: C++; tab-width: 8; indent-tabs-mode: nil; c-basic-offset: 4 -*-
  * vim: set ts=8 sts=4 et sw=4 tw=99:
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 #ifndef vm_ArrayBufferObject_h
 #define vm_ArrayBufferObject_h
 #include "jsobj.h"
 #include "builtin/TypedObjectConstants.h"
 #include "vm/Runtime.h"
 typedef struct JSProperty JSProperty;
 namespace js {
 class ArrayBufferViewObject;
 // The inheritance hierarchy for the various classes relating to typed arrays
 // is as follows.
 //
 // - JSObject
 //   - ArrayBufferObject
 //     - SharedArrayBufferObject
 //   - ArrayBufferViewObject
 //     - DataViewObject
 //     - TypedArrayObject (declared in vm/TypedArrayObject.h)
 //       - TypedArrayObjectTemplate
 //         - Int8ArrayObject
 //         - Uint8ArrayObject
 //         - ...
 //     - TypedObject (declared in builtin/TypedObject.h)
 //
 // Note that |TypedArrayObjectTemplate| is just an implementation
 // detail that makes implementing its various subclasses easier.
 typedef Vector<ArrayBufferObject *, 0, SystemAllocPolicy> ArrayBufferVector;
 /*
  * ArrayBufferObject
  *
  * This class holds the underlying raw buffer that the various
  * ArrayBufferViewObject subclasses (DataViewObject and the TypedArrays)
  * access. It can be created explicitly and passed to an ArrayBufferViewObject
  * subclass, or can be created implicitly by constructing a TypedArrayObject
  * with a size.
  */
 class ArrayBufferObject : public JSObject
 {
     static bool byteLengthGetterImpl(JSContext *cx, CallArgs args);
     static bool fun_slice_impl(JSContext *cx, CallArgs args);
   public:
     static const uint8_t DATA_SLOT = 0;
     static const uint8_t BYTE_LENGTH_SLOT = 1;
     static const uint8_t VIEW_LIST_SLOT = 2;
     static const uint8_t FLAGS_SLOT = 3;
     static const uint8_t RESERVED_SLOTS = 4;
     static const size_t ARRAY_BUFFER_ALIGNMENT = 8;
     static const Class class_;
     static const Class protoClass;
     static const JSFunctionSpec jsfuncs[];
     static const JSFunctionSpec jsstaticfuncs[];
     static bool byteLengthGetter(JSContext *cx, unsigned argc, Value *vp);
     static bool fun_slice(JSContext *cx, unsigned argc, Value *vp);
     static bool fun_isView(JSContext *cx, unsigned argc, Value *vp);
     static bool class_constructor(JSContext *cx, unsigned argc, Value *vp);
     static ArrayBufferObject *create(JSContext *cx, uint32_t nbytes, void *contents = nullptr,
                                      NewObjectKind newKind = GenericObject, bool mapped = false);
     static JSObject *createSlice(JSContext *cx, Handle<ArrayBufferObject*> arrayBuffer,
                                  uint32_t begin, uint32_t end);
     static bool createDataViewForThisImpl(JSContext *cx, CallArgs args);
     static bool createDataViewForThis(JSContext *cx, unsigned argc, Value *vp);
     template<typename T>
     static bool createTypedArrayFromBufferImpl(JSContext *cx, CallArgs args);
     template<typename T>
     static bool createTypedArrayFromBuffer(JSContext *cx, unsigned argc, Value *vp);
     static void obj_trace(JSTracer *trc, JSObject *obj);
     static void sweep(JSCompartment *rt);
     static void resetArrayBufferList(JSCompartment *rt);
     static bool saveArrayBufferList(JSCompartment *c, ArrayBufferVector &vector);
     static void restoreArrayBufferLists(ArrayBufferVector &vector);
     static void *stealContents(JSContext *cx, Handle<ArrayBufferObject*> buffer);
     bool hasStealableContents() const {
         // Inline elements strictly adhere to the corresponding buffer.
         if (!ownsData())
             return false;
         // asm.js buffer contents are transferred by copying, just like inline
         // elements.
         if (isAsmJSArrayBuffer())
             return false;
         // Neutered contents aren't transferrable because we want a neutered
         // array's contents to be backed by zeroed memory equal in length to
         // the original buffer contents.  Transferring these contents would
         // allocate new ones based on the current byteLength, which is 0 for a
         // neutered array -- not the original byteLength.
         return !isNeutered();
     }
     static void addSizeOfExcludingThis(JSObject *obj, mozilla::MallocSizeOf mallocSizeOf,
                                        JS::ObjectsExtraSizes *sizes);
     void addView(ArrayBufferViewObject *view);
     void setNewOwnedData(FreeOp* fop, void *newData);
     void changeContents(JSContext *cx, void *newData);
     /*
      * Ensure data is not stored inline in the object. Used when handing back a
      * GC-safe pointer.
      */
     static bool ensureNonInline(JSContext *cx, Handle<ArrayBufferObject*> buffer);
     bool canNeuter(JSContext *cx);
     /* Neuter this buffer and all its views. */
     static void neuter(JSContext *cx, Handle<ArrayBufferObject*> buffer, void *newData);
     uint8_t *dataPointer() const;
     size_t byteLength() const;
     void releaseData(FreeOp *fop);
     /*
      * Check if the arrayBuffer contains any data. This will return false for
      * ArrayBuffer.prototype and neutered ArrayBuffers.
      */
     bool hasData() const {
         return getClass() == &class_;
     }
     bool isAsmJSArrayBuffer() const { return flags() & ASMJS_BUFFER; }
     bool isSharedArrayBuffer() const { return flags() & SHARED_BUFFER; }
     bool isMappedArrayBuffer() const { return flags() & MAPPED_BUFFER; }
     bool isNeutered() const { return flags() & NEUTERED_BUFFER; }
     static bool prepareForAsmJS(JSContext *cx, Handle<ArrayBufferObject*> buffer);
     static bool canNeuterAsmJSArrayBuffer(JSContext *cx, ArrayBufferObject &buffer);
     static void finalize(FreeOp *fop, JSObject *obj);
     static void *createMappedContents(int fd, size_t offset, size_t length);
     static size_t flagsOffset() {
         return getFixedSlotOffset(FLAGS_SLOT);
     }
     static uint32_t neuteredFlag() { return NEUTERED_BUFFER; }
   protected:
     enum OwnsState {
         DoesntOwnData = 0,
         OwnsData = 1,
     };
     void setDataPointer(void *data, OwnsState ownsState);
     void setByteLength(size_t length);
     ArrayBufferViewObject *viewList() const;
     void setViewList(ArrayBufferViewObject *viewsHead);
     void setViewListNoBarrier(ArrayBufferViewObject *viewsHead);
     enum ArrayBufferFlags {
         // In the gcLiveArrayBuffers list.
         IN_LIVE_LIST       =  0x1,
         // The dataPointer() is owned by this buffer and should be released
         // when no longer in use. Releasing the pointer may be done by either
         // freeing or unmapping it, and how to do this is determined by the
         // buffer's other flags.
         OWNS_DATA          =  0x2,
         ASMJS_BUFFER       =  0x4,
         SHARED_BUFFER      =  0x8,
         MAPPED_BUFFER      = 0x10,
         NEUTERED_BUFFER    = 0x20
     };
     uint32_t flags() const;
     void setFlags(uint32_t flags);
     bool inLiveList() const { return flags() & IN_LIVE_LIST; }
     void setInLiveList(bool value) {
         setFlags(value ? (flags() | IN_LIVE_LIST) : (flags() & ~IN_LIVE_LIST));
     }
     bool ownsData() const { return flags() & OWNS_DATA; }
     void setOwnsData(OwnsState owns) {
         setFlags(owns ? (flags() | OWNS_DATA) : (flags() & ~OWNS_DATA));
     }
     void setIsAsmJSArrayBuffer() { setFlags(flags() | ASMJS_BUFFER); }
     void setIsSharedArrayBuffer() { setFlags(flags() | SHARED_BUFFER); }
     void setIsMappedArrayBuffer() { setFlags(flags() | MAPPED_BUFFER); }
     void setIsNeutered() { setFlags(flags() | NEUTERED_BUFFER); }
     void initialize(size_t byteLength, void *data, OwnsState ownsState) {
         setByteLength(byteLength);
         setFlags(0);
         setViewListNoBarrier(nullptr);
         setDataPointer(data, ownsState);
     }
     void releaseAsmJSArray(FreeOp *fop);
     void releaseMappedArray();
 };
 /*
  * ArrayBufferViewObject
  *
  * Common definitions shared by all ArrayBufferViews.
  */
 class ArrayBufferViewObject : public JSObject
 {
   protected:
     /* Offset of view in underlying ArrayBufferObject */
     static const size_t BYTEOFFSET_SLOT  = JS_TYPEDOBJ_SLOT_BYTEOFFSET;
     /* Byte length of view */
     static const size_t BYTELENGTH_SLOT  = JS_TYPEDOBJ_SLOT_BYTELENGTH;
     /* Underlying ArrayBufferObject */
     static const size_t BUFFER_SLOT      = JS_TYPEDOBJ_SLOT_OWNER;
     /* ArrayBufferObjects point to a linked list of views, chained through this slot */
     static const size_t NEXT_VIEW_SLOT   = JS_TYPEDOBJ_SLOT_NEXT_VIEW;
   public:
     static ArrayBufferObject *bufferObject(JSContext *cx, Handle<ArrayBufferViewObject *> obj);
     ArrayBufferViewObject *nextView() const {
         return static_cast<ArrayBufferViewObject*>(getFixedSlot(NEXT_VIEW_SLOT).toPrivate());
     }
     inline void setNextView(ArrayBufferViewObject *view);
     void neuter(void *newData);
     static void trace(JSTracer *trc, JSObject *obj);
     uint8_t *dataPointer() {
         return static_cast<uint8_t *>(getPrivate());
     }
 };
 bool
 ToClampedIndex(JSContext *cx, HandleValue v, uint32_t length, uint32_t *out);
 inline void
 PostBarrierTypedArrayObject(JSObject *obj)
 {
 #ifdef JSGC_GENERATIONAL
     JS_ASSERT(obj);
     JSRuntime *rt = obj->runtimeFromMainThread();
     if (!rt->isHeapBusy() && !IsInsideNursery(rt, obj))
         rt->gcStoreBuffer.putWholeCell(obj);
 #endif
 }
 inline void
 InitArrayBufferViewDataPointer(ArrayBufferViewObject *obj, ArrayBufferObject *buffer, size_t byteOffset)
 {
     /*
      * N.B. The base of the array's data is stored in the object's
      * private data rather than a slot to avoid alignment restrictions
      * on private Values.
      */
     MOZ_ASSERT(buffer->dataPointer() != nullptr);
     obj->initPrivate(buffer->dataPointer() + byteOffset);
     PostBarrierTypedArrayObject(obj);
 }
 /*
  * Tests for either ArrayBufferObject or SharedArrayBufferObject.
  * For specific class testing, use e.g., obj->is<ArrayBufferObject>().
  */
 bool IsArrayBuffer(HandleValue v);
 bool IsArrayBuffer(HandleObject obj);
 bool IsArrayBuffer(JSObject *obj);
 ArrayBufferObject &AsArrayBuffer(HandleObject obj);
 ArrayBufferObject &AsArrayBuffer(JSObject *obj);
 inline void
 ArrayBufferViewObject::setNextView(ArrayBufferViewObject *view)
 {
     setFixedSlot(NEXT_VIEW_SLOT, PrivateValue(view));
     PostBarrierTypedArrayObject(this);
 }
 extern uint32_t JS_FASTCALL
 ClampDoubleToUint8(const double x);
 struct uint8_clamped {
     uint8_t val;
     uint8_clamped() { }
     uint8_clamped(const uint8_clamped& other) : val(other.val) { }
     // invoke our assignment helpers for constructor conversion
     uint8_clamped(uint8_t x)    { *this = x; }
     uint8_clamped(uint16_t x)   { *this = x; }
     uint8_clamped(uint32_t x)   { *this = x; }
     uint8_clamped(int8_t x)     { *this = x; }
     uint8_clamped(int16_t x)    { *this = x; }
     uint8_clamped(int32_t x)    { *this = x; }
     uint8_clamped(double x)     { *this = x; }
     uint8_clamped& operator=(const uint8_clamped& x) {
         val = x.val;
         return *this;
     }
     uint8_clamped& operator=(uint8_t x) {
         val = x;
         return *this;
     }
     uint8_clamped& operator=(uint16_t x) {
         val = (x > 255) ? 255 : uint8_t(x);
         return *this;
     }
     uint8_clamped& operator=(uint32_t x) {
         val = (x > 255) ? 255 : uint8_t(x);
         return *this;
     }
     uint8_clamped& operator=(int8_t x) {
         val = (x >= 0) ? uint8_t(x) : 0;
         return *this;
     }
     uint8_clamped& operator=(int16_t x) {
         val = (x >= 0)
               ? ((x < 255)
                  ? uint8_t(x)
                  : 255)
               : 0;
         return *this;
     }
     uint8_clamped& operator=(int32_t x) {
         val = (x >= 0)
               ? ((x < 255)
                  ? uint8_t(x)
                  : 255)
               : 0;
         return *this;
     }
     uint8_clamped& operator=(const double x) {
         val = uint8_t(ClampDoubleToUint8(x));
         return *this;
     }
     operator uint8_t() const {
         return val;
     }
     void staticAsserts() {
         static_assert(sizeof(uint8_clamped) == 1,
                       "uint8_clamped must be layout-compatible with uint8_t");
     }
 };
 /* Note that we can't use std::numeric_limits here due to uint8_clamped. */
 template<typename T> inline const bool TypeIsFloatingPoint() { return false; }
 template<> inline const bool TypeIsFloatingPoint<float>() { return true; }
 template<> inline const bool TypeIsFloatingPoint<double>() { return true; }
 template<typename T> inline const bool TypeIsUnsigned() { return false; }
 template<> inline const bool TypeIsUnsigned<uint8_t>() { return true; }
 template<> inline const bool TypeIsUnsigned<uint16_t>() { return true; }
 template<> inline const bool TypeIsUnsigned<uint32_t>() { return true; }
 } // namespace js
 #endif // vm_ArrayBufferObject_h

The Tor Browser / annotate

js/src/vm/ArrayBufferObject.h@129ffea94266 (annotated)

js/src/vm/ArrayBufferObject.h