Security-59754.80.3.tar.gz

[apple/security.git] / OSX / libsecurity_utilities / lib / alloc.cpp

diff --git a/OSX/libsecurity_utilities/lib/alloc.cpp b/OSX/libsecurity_utilities/lib/alloc.cpp
index 61992434e5973735d97f25741d66f4a0f408d41d..fed1a61064978b0b9d29efba8304caf2b2e7e8e4 100644 (file)
--- a/OSX/libsecurity_utilities/lib/alloc.cpp
+++ b/OSX/libsecurity_utilities/lib/alloc.cpp
@@ -27,13 +27,16 @@
 //
 // Don't eat heavily before inspecting this code.
 //
 //
 // Don't eat heavily before inspecting this code.
 //

+#define __STDC_WANT_LIB_EXT1__ 1
+#include <string.h>
+

 #include <security_utilities/alloc.h>
 #include <security_utilities/memutils.h>
 #include <security_utilities/globalizer.h>
 #include <stdlib.h>
 #include <errno.h>
 
 #include <security_utilities/alloc.h>
 #include <security_utilities/memutils.h>
 #include <security_utilities/globalizer.h>
 #include <stdlib.h>
 #include <errno.h>
 

-using LowLevelMemoryUtilities::alignof;
+using LowLevelMemoryUtilities::alignof_template;

 using LowLevelMemoryUtilities::increment;
 using LowLevelMemoryUtilities::alignUp;
 
 using LowLevelMemoryUtilities::increment;
 using LowLevelMemoryUtilities::alignUp;
 


@@ -43,7 +46,7 @@ extern "C" size_t malloc_size(void *);
 //
 // Features of the Allocator root class
 //
 //
 // Features of the Allocator root class
 //

-bool Allocator::operator == (const Allocator &alloc) const throw()
+bool Allocator::operator == (const Allocator &alloc) const _NOEXCEPT

 {
        return this == &alloc;
 }
 {
        return this == &alloc;
 }


@@ -60,14 +63,14 @@ Allocator::~Allocator()
 // pool). This is trivially achieved here by using singletons.
 //
 struct DefaultAllocator : public Allocator {
 // pool). This is trivially achieved here by using singletons.
 //
 struct DefaultAllocator : public Allocator {

-       void *malloc(size_t size) throw(std::bad_alloc);
-       void free(void *addr) throw();
-       void *realloc(void *addr, size_t size) throw(std::bad_alloc);
+       void *malloc(size_t size);
+       void free(void *addr) _NOEXCEPT;
+       void *realloc(void *addr, size_t size);

 };
 
 struct SensitiveAllocator : public DefaultAllocator {
 };
 
 struct SensitiveAllocator : public DefaultAllocator {

-    void free(void *addr) throw();
-    void *realloc(void *addr, size_t size) throw(std::bad_alloc);
+    void free(void *addr) _NOEXCEPT;
+    void *realloc(void *addr, size_t size);

 };
 
 struct DefaultAllocators {
 };
 
 struct DefaultAllocators {


@@ -90,36 +93,37 @@ Allocator &Allocator::standard(UInt32 request)
     }
 }
 
     }
 }
 

-void *DefaultAllocator::malloc(size_t size) throw(std::bad_alloc)
+void *DefaultAllocator::malloc(size_t size)

 {
        if (void *result = ::malloc(size))
                return result;
        throw std::bad_alloc();
 }
 
 {
        if (void *result = ::malloc(size))
                return result;
        throw std::bad_alloc();
 }
 

-void DefaultAllocator::free(void *addr) throw()
+void DefaultAllocator::free(void *addr) _NOEXCEPT

 {
        ::free(addr);
 }
 
 {
        ::free(addr);
 }
 

-void *DefaultAllocator::realloc(void *addr, size_t newSize) throw(std::bad_alloc)
+void *DefaultAllocator::realloc(void *addr, size_t newSize)

 {
        if (void *result = ::realloc(addr, newSize))
                return result;
        throw std::bad_alloc();
 }
 
 {
        if (void *result = ::realloc(addr, newSize))
                return result;
        throw std::bad_alloc();
 }
 

-void SensitiveAllocator::free(void *addr) throw()
+void SensitiveAllocator::free(void *addr) _NOEXCEPT

 {
 {

-    memset(addr, 0, malloc_size(addr));
+    size_t size = malloc_size(addr);
+    ::memset_s(addr, size, 0, size);

     DefaultAllocator::free(addr);
 }
 
     DefaultAllocator::free(addr);
 }
 

-void *SensitiveAllocator::realloc(void *addr, size_t newSize) throw(std::bad_alloc)
+void *SensitiveAllocator::realloc(void *addr, size_t newSize)

 {
     size_t oldSize = malloc_size(addr);
     if (newSize < oldSize)
 {
     size_t oldSize = malloc_size(addr);
     if (newSize < oldSize)

-        memset(increment(addr, newSize), 0, oldSize - newSize);
+        ::memset_s(increment(addr, newSize), oldSize - newSize, 0, oldSize - newSize);

     return DefaultAllocator::realloc(addr, newSize);
 }
 
     return DefaultAllocator::realloc(addr, newSize);
 }
 


@@ -131,25 +135,29 @@ void *SensitiveAllocator::realloc(void *addr, size_t newSize) throw(std::bad_all
 // functions to safely free our (hidden) pointer without knowing about it.
 // An allocator argument of NULL is interpreted as the standard allocator.
 //
 // functions to safely free our (hidden) pointer without knowing about it.
 // An allocator argument of NULL is interpreted as the standard allocator.
 //

-void *CssmHeap::operator new (size_t size, Allocator *alloc) throw(std::bad_alloc)
+void *CssmHeap::operator new (size_t size, Allocator *alloc)

 {
 {

-       if (alloc == NULL)
+    if (size > SIZE_T_MAX / 2) {
+        throw std::bad_alloc();
+    }
+    if (alloc == NULL) {

                alloc = &Allocator::standard();
                alloc = &Allocator::standard();

-       size = alignUp(size, alignof<Allocator *>());
+    }
+       size = alignUp(size, alignof_template<Allocator *>());

        size_t totalSize = size + sizeof(Allocator *);
        void *addr = alloc->malloc(totalSize);
        *(Allocator **)increment(addr, size) = alloc;
        return addr;
 }
 
        size_t totalSize = size + sizeof(Allocator *);
        void *addr = alloc->malloc(totalSize);
        *(Allocator **)increment(addr, size) = alloc;
        return addr;
 }
 

-void CssmHeap::operator delete (void *addr, size_t size, Allocator *alloc) throw()
+void CssmHeap::operator delete (void *addr, size_t size, Allocator *alloc) _NOEXCEPT

 {
        alloc->free(addr);      // as per C++ std, called (only) if construction fails
 }
 
 {
        alloc->free(addr);      // as per C++ std, called (only) if construction fails
 }
 

-void CssmHeap::operator delete (void *addr, size_t size) throw()
+void CssmHeap::operator delete (void *addr, size_t size) _NOEXCEPT

 {
 {

-       void *end = increment(addr, alignUp(size, alignof<Allocator *>()));
+       void *end = increment(addr, alignUp(size, alignof_template<Allocator *>()));

        (*(Allocator **)end)->free(addr);
 }
 
        (*(Allocator **)end)->free(addr);
 }