/* |
|
* Copyright (c) 2016, Oracle and/or its affiliates. All rights reserved. |
|
* DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS FILE HEADER. |
|
* |
|
* This code is free software; you can redistribute it and/or modify it |
|
* under the terms of the GNU General Public License version 2 only, as |
|
* published by the Free Software Foundation. Oracle designates this |
|
* particular file as subject to the "Classpath" exception as provided |
|
* by Oracle in the LICENSE file that accompanied this code. |
|
* |
|
* This code is distributed in the hope that it will be useful, but WITHOUT |
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or |
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License |
|
* version 2 for more details (a copy is included in the LICENSE file that |
|
* accompanied this code). |
|
* |
|
* You should have received a copy of the GNU General Public License version |
|
* 2 along with this work; if not, write to the Free Software Foundation, |
|
* Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA. |
|
* |
|
* Please contact Oracle, 500 Oracle Parkway, Redwood Shores, CA 94065 USA |
|
* or visit www.oracle.com if you need additional information or have any |
|
* questions. |
|
*/ |
|
package com.sun.crypto.provider; |
|
import java.util.Arrays; |
|
import java.util.Collections; |
|
import java.util.List; |
|
import java.util.function.BiFunction; |
|
import java.util.function.Function; |
|
/** |
|
* Utility methods to check if state or arguments are correct. |
|
* |
|
*/ |
|
public class Preconditions { |
|
/** |
|
* Maps out-of-bounds values to a runtime exception. |
|
* |
|
* @param checkKind the kind of bounds check, whose name may correspond |
|
* to the name of one of the range check methods, checkIndex, |
|
* checkFromToIndex, checkFromIndexSize |
|
* @param args the out-of-bounds arguments that failed the range check. |
|
* If the checkKind corresponds a the name of a range check method |
|
* then the bounds arguments are those that can be passed in order |
|
* to the method. |
|
* @param oobef the exception formatter that when applied with a checkKind |
|
* and a list out-of-bounds arguments returns a runtime exception. |
|
* If {@code null} then, it is as if an exception formatter was |
|
* supplied that returns {@link IndexOutOfBoundsException} for any |
|
* given arguments. |
|
* @return the runtime exception |
|
*/ |
|
private static RuntimeException outOfBounds( |
|
BiFunction<String, List<Integer>, ? extends RuntimeException> oobef, |
|
String checkKind, |
|
Integer... args) { |
|
List<Integer> largs = Collections.unmodifiableList(Arrays.asList(args)); |
|
RuntimeException e = oobef == null |
|
? null : oobef.apply(checkKind, largs); |
|
return e == null |
|
? new IndexOutOfBoundsException(outOfBoundsMessage(checkKind, largs)) : e; |
|
} |
|
private static RuntimeException outOfBoundsCheckIndex( |
|
BiFunction<String, List<Integer>, ? extends RuntimeException> oobe, |
|
int index, int length) { |
|
return outOfBounds(oobe, "checkIndex", index, length); |
|
} |
|
private static RuntimeException outOfBoundsCheckFromToIndex( |
|
BiFunction<String, List<Integer>, ? extends RuntimeException> oobe, |
|
int fromIndex, int toIndex, int length) { |
|
return outOfBounds(oobe, "checkFromToIndex", fromIndex, toIndex, length); |
|
} |
|
private static RuntimeException outOfBoundsCheckFromIndexSize( |
|
BiFunction<String, List<Integer>, ? extends RuntimeException> oobe, |
|
int fromIndex, int size, int length) { |
|
return outOfBounds(oobe, "checkFromIndexSize", fromIndex, size, length); |
|
} |
|
/** |
|
* Returns an out-of-bounds exception formatter from an given exception |
|
* factory. The exception formatter is a function that formats an |
|
* out-of-bounds message from its arguments and applies that message to the |
|
* given exception factory to produce and relay an exception. |
|
* |
|
* <p>The exception formatter accepts two arguments: a {@code String} |
|
* describing the out-of-bounds range check that failed, referred to as the |
|
* <em>check kind</em>; and a {@code List<Integer>} containing the |
|
* out-of-bound integer values that failed the check. The list of |
|
* out-of-bound values is not modified. |
|
* |
|
* <p>Three check kinds are supported {@code checkIndex}, |
|
* {@code checkFromToIndex} and {@code checkFromIndexSize} corresponding |
|
* respectively to the specified application of an exception formatter as an |
|
* argument to the out-of-bounds range check methods |
|
* {@link #checkIndex(int, int, BiFunction) checkIndex}, |
|
* {@link #checkFromToIndex(int, int, int, BiFunction) checkFromToIndex}, and |
|
* {@link #checkFromIndexSize(int, int, int, BiFunction) checkFromIndexSize}. |
|
* Thus a supported check kind corresponds to a method name and the |
|
* out-of-bound integer values correspond to method argument values, in |
|
* order, preceding the exception formatter argument (similar in many |
|
* respects to the form of arguments required for a reflective invocation of |
|
* such a range check method). |
|
* |
|
* <p>Formatter arguments conforming to such supported check kinds will |
|
* produce specific exception messages describing failed out-of-bounds |
|
* checks. Otherwise, more generic exception messages will be produced in |
|
* any of the following cases: the check kind is supported but fewer |
|
* or more out-of-bounds values are supplied, the check kind is not |
|
* supported, the check kind is {@code null}, or the list of out-of-bound |
|
* values is {@code null}. |
|
* |
|
* @apiNote |
|
* This method produces an out-of-bounds exception formatter that can be |
|
* passed as an argument to any of the supported out-of-bounds range check |
|
* methods declared by {@code Objects}. For example, a formatter producing |
|
* an {@code ArrayIndexOutOfBoundsException} may be produced and stored on a |
|
* {@code static final} field as follows: |
|
* <pre>{@code |
|
* static final |
|
* BiFunction<String, List<Integer>, ArrayIndexOutOfBoundsException> AIOOBEF = |
|
* outOfBoundsExceptionFormatter(ArrayIndexOutOfBoundsException::new); |
|
* }</pre> |
|
* The formatter instance {@code AIOOBEF} may be passed as an argument to an |
|
* out-of-bounds range check method, such as checking if an {@code index} |
|
* is within the bounds of a {@code limit}: |
|
* <pre>{@code |
|
* checkIndex(index, limit, AIOOBEF); |
|
* }</pre> |
|
* If the bounds check fails then the range check method will throw an |
|
* {@code ArrayIndexOutOfBoundsException} with an appropriate exception |
|
* message that is a produced from {@code AIOOBEF} as follows: |
|
* <pre>{@code |
|
* AIOOBEF.apply("checkIndex", List.of(index, limit)); |
|
* }</pre> |
|
* |
|
* @param f the exception factory, that produces an exception from a message |
|
* where the message is produced and formatted by the returned |
|
* exception formatter. If this factory is stateless and side-effect |
|
* free then so is the returned formatter. |
|
* Exceptions thrown by the factory are relayed to the caller |
|
* of the returned formatter. |
|
* @param <X> the type of runtime exception to be returned by the given |
|
* exception factory and relayed by the exception formatter |
|
* @return the out-of-bounds exception formatter |
|
*/ |
|
public static <X extends RuntimeException> |
|
BiFunction<String, List<Integer>, X> outOfBoundsExceptionFormatter(Function<String, X> f) { |
|
// Use anonymous class to avoid bootstrap issues if this method is |
|
// used early in startup |
|
return new BiFunction<String, List<Integer>, X>() { |
|
@Override |
|
public X apply(String checkKind, List<Integer> args) { |
|
return f.apply(outOfBoundsMessage(checkKind, args)); |
|
} |
|
}; |
|
} |
|
private static String outOfBoundsMessage(String checkKind, List<Integer> args) { |
|
if (checkKind == null && args == null) { |
|
return String.format("Range check failed"); |
|
} else if (checkKind == null) { |
|
return String.format("Range check failed: %s", args); |
|
} else if (args == null) { |
|
return String.format("Range check failed: %s", checkKind); |
|
} |
|
int argSize = 0; |
|
switch (checkKind) { |
|
case "checkIndex": |
|
argSize = 2; |
|
break; |
|
case "checkFromToIndex": |
|
case "checkFromIndexSize": |
|
argSize = 3; |
|
break; |
|
default: |
|
} |
|
// Switch to default if fewer or more arguments than required are supplied |
|
switch ((args.size() != argSize) ? "" : checkKind) { |
|
case "checkIndex": |
|
return String.format("Index %d out-of-bounds for length %d", |
|
args.get(0), args.get(1)); |
|
case "checkFromToIndex": |
|
return String.format("Range [%d, %d) out-of-bounds for length %d", |
|
args.get(0), args.get(1), args.get(2)); |
|
case "checkFromIndexSize": |
|
return String.format("Range [%d, %<d + %d) out-of-bounds for length %d", |
|
args.get(0), args.get(1), args.get(2)); |
|
default: |
|
return String.format("Range check failed: %s %s", checkKind, args); |
|
} |
|
} |
|
/** |
|
* Checks if the {@code index} is within the bounds of the range from |
|
* {@code 0} (inclusive) to {@code length} (exclusive). |
|
* |
|
* <p>The {@code index} is defined to be out-of-bounds if any of the |
|
* following inequalities is true: |
|
* <ul> |
|
* <li>{@code index < 0}</li> |
|
* <li>{@code index >= length}</li> |
|
* <li>{@code length < 0}, which is implied from the former inequalities</li> |
|
* </ul> |
|
* |
|
* <p>If the {@code index} is out-of-bounds, then a runtime exception is |
|
* thrown that is the result of applying the following arguments to the |
|
* exception formatter: the name of this method, {@code checkIndex}; |
|
* and an unmodifiable list integers whose values are, in order, the |
|
* out-of-bounds arguments {@code index} and {@code length}. |
|
* |
|
* @param <X> the type of runtime exception to throw if the arguments are |
|
* out-of-bounds |
|
* @param index the index |
|
* @param length the upper-bound (exclusive) of the range |
|
* @param oobef the exception formatter that when applied with this |
|
* method name and out-of-bounds arguments returns a runtime |
|
* exception. If {@code null} or returns {@code null} then, it is as |
|
* if an exception formatter produced from an invocation of |
|
* {@code outOfBoundsExceptionFormatter(IndexOutOfBounds::new)} is used |
|
* instead (though it may be more efficient). |
|
* Exceptions thrown by the formatter are relayed to the caller. |
|
* @return {@code index} if it is within bounds of the range |
|
* @throws X if the {@code index} is out-of-bounds and the exception |
|
* formatter is non-{@code null} |
|
* @throws IndexOutOfBoundsException if the {@code index} is out-of-bounds |
|
* and the exception formatter is {@code null} |
|
* @since 9 |
|
* |
|
* @implNote |
|
* This method is made intrinsic in optimizing compilers to guide them to |
|
* perform unsigned comparisons of the index and length when it is known the |
|
* length is a non-negative value (such as that of an array length or from |
|
* the upper bound of a loop) |
|
*/ |
|
public static <X extends RuntimeException> |
|
int checkIndex(int index, int length, |
|
BiFunction<String, List<Integer>, X> oobef) { |
|
if (index < 0 || index >= length) |
|
throw outOfBoundsCheckIndex(oobef, index, length); |
|
return index; |
|
} |
|
/** |
|
* Checks if the sub-range from {@code fromIndex} (inclusive) to |
|
* {@code toIndex} (exclusive) is within the bounds of range from {@code 0} |
|
* (inclusive) to {@code length} (exclusive). |
|
* |
|
* <p>The sub-range is defined to be out-of-bounds if any of the following |
|
* inequalities is true: |
|
* <ul> |
|
* <li>{@code fromIndex < 0}</li> |
|
* <li>{@code fromIndex > toIndex}</li> |
|
* <li>{@code toIndex > length}</li> |
|
* <li>{@code length < 0}, which is implied from the former inequalities</li> |
|
* </ul> |
|
* |
|
* <p>If the sub-range is out-of-bounds, then a runtime exception is |
|
* thrown that is the result of applying the following arguments to the |
|
* exception formatter: the name of this method, {@code checkFromToIndex}; |
|
* and an unmodifiable list integers whose values are, in order, the |
|
* out-of-bounds arguments {@code fromIndex}, {@code toIndex}, and {@code length}. |
|
* |
|
* @param <X> the type of runtime exception to throw if the arguments are |
|
* out-of-bounds |
|
* @param fromIndex the lower-bound (inclusive) of the sub-range |
|
* @param toIndex the upper-bound (exclusive) of the sub-range |
|
* @param length the upper-bound (exclusive) the range |
|
* @param oobef the exception formatter that when applied with this |
|
* method name and out-of-bounds arguments returns a runtime |
|
* exception. If {@code null} or returns {@code null} then, it is as |
|
* if an exception formatter produced from an invocation of |
|
* {@code outOfBoundsExceptionFormatter(IndexOutOfBounds::new)} is used |
|
* instead (though it may be more efficient). |
|
* Exceptions thrown by the formatter are relayed to the caller. |
|
* @return {@code fromIndex} if the sub-range within bounds of the range |
|
* @throws X if the sub-range is out-of-bounds and the exception factory |
|
* function is non-{@code null} |
|
* @throws IndexOutOfBoundsException if the sub-range is out-of-bounds and |
|
* the exception factory function is {@code null} |
|
* @since 9 |
|
*/ |
|
public static <X extends RuntimeException> |
|
int checkFromToIndex(int fromIndex, int toIndex, int length, |
|
BiFunction<String, List<Integer>, X> oobef) { |
|
if (fromIndex < 0 || fromIndex > toIndex || toIndex > length) |
|
throw outOfBoundsCheckFromToIndex(oobef, fromIndex, toIndex, length); |
|
return fromIndex; |
|
} |
|
/** |
|
* Checks if the sub-range from {@code fromIndex} (inclusive) to |
|
* {@code fromIndex + size} (exclusive) is within the bounds of range from |
|
* {@code 0} (inclusive) to {@code length} (exclusive). |
|
* |
|
* <p>The sub-range is defined to be out-of-bounds if any of the following |
|
* inequalities is true: |
|
* <ul> |
|
* <li>{@code fromIndex < 0}</li> |
|
* <li>{@code size < 0}</li> |
|
* <li>{@code fromIndex + size > length}, taking into account integer overflow</li> |
|
* <li>{@code length < 0}, which is implied from the former inequalities</li> |
|
* </ul> |
|
* |
|
* <p>If the sub-range is out-of-bounds, then a runtime exception is |
|
* thrown that is the result of applying the following arguments to the |
|
* exception formatter: the name of this method, {@code checkFromIndexSize}; |
|
* and an unmodifiable list integers whose values are, in order, the |
|
* out-of-bounds arguments {@code fromIndex}, {@code size}, and |
|
* {@code length}. |
|
* |
|
* @param <X> the type of runtime exception to throw if the arguments are |
|
* out-of-bounds |
|
* @param fromIndex the lower-bound (inclusive) of the sub-interval |
|
* @param size the size of the sub-range |
|
* @param length the upper-bound (exclusive) of the range |
|
* @param oobef the exception formatter that when applied with this |
|
* method name and out-of-bounds arguments returns a runtime |
|
* exception. If {@code null} or returns {@code null} then, it is as |
|
* if an exception formatter produced from an invocation of |
|
* {@code outOfBoundsExceptionFormatter(IndexOutOfBounds::new)} is used |
|
* instead (though it may be more efficient). |
|
* Exceptions thrown by the formatter are relayed to the caller. |
|
* @return {@code fromIndex} if the sub-range within bounds of the range |
|
* @throws X if the sub-range is out-of-bounds and the exception factory |
|
* function is non-{@code null} |
|
* @throws IndexOutOfBoundsException if the sub-range is out-of-bounds and |
|
* the exception factory function is {@code null} |
|
* @since 9 |
|
*/ |
|
public static <X extends RuntimeException> |
|
int checkFromIndexSize(int fromIndex, int size, int length, |
|
BiFunction<String, List<Integer>, X> oobef) { |
|
if ((length | fromIndex | size) < 0 || size > length - fromIndex) |
|
throw outOfBoundsCheckFromIndexSize(oobef, fromIndex, size, length); |
|
return fromIndex; |
|
} |
|
} |