// Copyright (c) 2015-2016 The Khronos Group Inc. // // Licensed under the Apache License, Version 2.0 (the "License"); // you may not use this file except in compliance with the License. // You may obtain a copy of the License at // // http://www.apache.org/licenses/LICENSE-2.0 // // Unless required by applicable law or agreed to in writing, software // distributed under the License is distributed on an "AS IS" BASIS, // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. // See the License for the specific language governing permissions and // limitations under the License. #include "source/binary.h" #include <algorithm> #include <cassert> #include <cstring> #include <iterator> #include <limits> #include <string> #include <unordered_map> #include <vector> #include "source/assembly_grammar.h" #include "source/diagnostic.h" #include "source/ext_inst.h" #include "source/latest_version_spirv_header.h" #include "source/opcode.h" #include "source/operand.h" #include "source/spirv_constant.h" #include "source/spirv_endian.h" spv_result_t spvBinaryHeaderGet(const spv_const_binary binary, const spv_endianness_t endian, spv_header_t* pHeader) { if (!binary->code) return SPV_ERROR_INVALID_BINARY; if (binary->wordCount < SPV_INDEX_INSTRUCTION) return SPV_ERROR_INVALID_BINARY; if (!pHeader) return SPV_ERROR_INVALID_POINTER; // TODO: Validation checking? pHeader->magic = spvFixWord(binary->code[SPV_INDEX_MAGIC_NUMBER], endian); pHeader->version = spvFixWord(binary->code[SPV_INDEX_VERSION_NUMBER], endian); pHeader->generator = spvFixWord(binary->code[SPV_INDEX_GENERATOR_NUMBER], endian); pHeader->bound = spvFixWord(binary->code[SPV_INDEX_BOUND], endian); pHeader->schema = spvFixWord(binary->code[SPV_INDEX_SCHEMA], endian); pHeader->instructions = &binary->code[SPV_INDEX_INSTRUCTION]; return SPV_SUCCESS; } namespace { // A SPIR-V binary parser. A parser instance communicates detailed parse // results via callbacks. class Parser { public: // The user_data value is provided to the callbacks as context. Parser(const spv_const_context context, void* user_data, spv_parsed_header_fn_t parsed_header_fn, spv_parsed_instruction_fn_t parsed_instruction_fn) : grammar_(context), consumer_(context->consumer), user_data_(user_data), parsed_header_fn_(parsed_header_fn), parsed_instruction_fn_(parsed_instruction_fn) {} // Parses the specified binary SPIR-V module, issuing callbacks on a parsed // header and for each parsed instruction. Returns SPV_SUCCESS on success. // Otherwise returns an error code and issues a diagnostic. spv_result_t parse(const uint32_t* words, size_t num_words, spv_diagnostic* diagnostic); private: // All remaining methods work on the current module parse state. // Like the parse method, but works on the current module parse state. spv_result_t parseModule(); // Parses an instruction at the current position of the binary. Assumes // the header has been parsed, the endian has been set, and the word index is // still in range. Advances the parsing position past the instruction, and // updates other parsing state for the current module. // On success, returns SPV_SUCCESS and issues the parsed-instruction callback. // On failure, returns an error code and issues a diagnostic. spv_result_t parseInstruction(); // Parses an instruction operand with the given type, for an instruction // starting at inst_offset words into the SPIR-V binary. // If the SPIR-V binary is the same endianness as the host, then the // endian_converted_inst_words parameter is ignored. Otherwise, this method // appends the words for this operand, converted to host native endianness, // to the end of endian_converted_inst_words. This method also updates the // expected_operands parameter, and the scalar members of the inst parameter. // On success, returns SPV_SUCCESS, advances past the operand, and pushes a // new entry on to the operands vector. Otherwise returns an error code and // issues a diagnostic. spv_result_t parseOperand(size_t inst_offset, spv_parsed_instruction_t* inst, const spv_operand_type_t type, std::vector<uint32_t>* endian_converted_inst_words, std::vector<spv_parsed_operand_t>* operands, spv_operand_pattern_t* expected_operands); // Records the numeric type for an operand according to the type information // associated with the given non-zero type Id. This can fail if the type Id // is not a type Id, or if the type Id does not reference a scalar numeric // type. On success, return SPV_SUCCESS and populates the num_words, // number_kind, and number_bit_width fields of parsed_operand. spv_result_t setNumericTypeInfoForType(spv_parsed_operand_t* parsed_operand, uint32_t type_id); // Records the number type for an instruction at the given offset, if that // instruction generates a type. For types that aren't scalar numbers, // record something with number kind SPV_NUMBER_NONE. void recordNumberType(size_t inst_offset, const spv_parsed_instruction_t* inst); // Returns a diagnostic stream object initialized with current position in // the input stream, and for the given error code. Any data written to the // returned object will be propagated to the current parse's diagnostic // object. spvtools::DiagnosticStream diagnostic(spv_result_t error) { return spvtools::DiagnosticStream({0, 0, _.instruction_count}, consumer_, "", error); } // Returns a diagnostic stream object with the default parse error code. spvtools::DiagnosticStream diagnostic() { // The default failure for parsing is invalid binary. return diagnostic(SPV_ERROR_INVALID_BINARY); } // Issues a diagnostic describing an exhaustion of input condition when // trying to decode an instruction operand, and returns // SPV_ERROR_INVALID_BINARY. spv_result_t exhaustedInputDiagnostic(size_t inst_offset, SpvOp opcode, spv_operand_type_t type) { return diagnostic() << "End of input reached while decoding Op" << spvOpcodeString(opcode) << " starting at word " << inst_offset << ((_.word_index < _.num_words) ? ": truncated " : ": missing ") << spvOperandTypeStr(type) << " operand at word offset " << _.word_index - inst_offset << "."; } // Returns the endian-corrected word at the current position. uint32_t peek() const { return peekAt(_.word_index); } // Returns the endian-corrected word at the given position. uint32_t peekAt(size_t index) const { assert(index < _.num_words); return spvFixWord(_.words[index], _.endian); } // Data members const spvtools::AssemblyGrammar grammar_; // SPIR-V syntax utility. const spvtools::MessageConsumer& consumer_; // Message consumer callback. void* const user_data_; // Context for the callbacks const spv_parsed_header_fn_t parsed_header_fn_; // Parsed header callback const spv_parsed_instruction_fn_t parsed_instruction_fn_; // Parsed instruction callback // Describes the format of a typed literal number. struct NumberType { spv_number_kind_t type; uint32_t bit_width; }; // The state used to parse a single SPIR-V binary module. struct State { State(const uint32_t* words_arg, size_t num_words_arg, spv_diagnostic* diagnostic_arg) : words(words_arg), num_words(num_words_arg), diagnostic(diagnostic_arg), word_index(0), instruction_count(0), endian(), requires_endian_conversion(false) { // Temporary storage for parser state within a single instruction. // Most instructions require fewer than 25 words or operands. operands.reserve(25); endian_converted_words.reserve(25); expected_operands.reserve(25); } State() : State(0, 0, nullptr) {} const uint32_t* words; // Words in the binary SPIR-V module. size_t num_words; // Number of words in the module. spv_diagnostic* diagnostic; // Where diagnostics go. size_t word_index; // The current position in words. size_t instruction_count; // The count of processed instructions spv_endianness_t endian; // The endianness of the binary. // Is the SPIR-V binary in a different endiannes from the host native // endianness? bool requires_endian_conversion; // Maps a result ID to its type ID. By convention: // - a result ID that is a type definition maps to itself. // - a result ID without a type maps to 0. (E.g. for OpLabel) std::unordered_map<uint32_t, uint32_t> id_to_type_id; // Maps a type ID to its number type description. std::unordered_map<uint32_t, NumberType> type_id_to_number_type_info; // Maps an ExtInstImport id to the extended instruction type. std::unordered_map<uint32_t, spv_ext_inst_type_t> import_id_to_ext_inst_type; // Used by parseOperand std::vector<spv_parsed_operand_t> operands; std::vector<uint32_t> endian_converted_words; spv_operand_pattern_t expected_operands; } _; }; spv_result_t Parser::parse(const uint32_t* words, size_t num_words, spv_diagnostic* diagnostic_arg) { _ = State(words, num_words, diagnostic_arg); const spv_result_t result = parseModule(); // Clear the module state. The tables might be big. _ = State(); return result; } spv_result_t Parser::parseModule() { if (!_.words) return diagnostic() << "Missing module."; if (_.num_words < SPV_INDEX_INSTRUCTION) return diagnostic() << "Module has incomplete header: only " << _.num_words << " words instead of " << SPV_INDEX_INSTRUCTION; // Check the magic number and detect the module's endianness. spv_const_binary_t binary{_.words, _.num_words}; if (spvBinaryEndianness(&binary, &_.endian)) { return diagnostic() << "Invalid SPIR-V magic number '" << std::hex << _.words[0] << "'."; } _.requires_endian_conversion = !spvIsHostEndian(_.endian); // Process the header. spv_header_t header; if (spvBinaryHeaderGet(&binary, _.endian, &header)) { // It turns out there is no way to trigger this error since the only // failure cases are already handled above, with better messages. return diagnostic(SPV_ERROR_INTERNAL) << "Internal error: unhandled header parse failure"; } if (parsed_header_fn_) { if (auto error = parsed_header_fn_(user_data_, _.endian, header.magic, header.version, header.generator, header.bound, header.schema)) { return error; } } // Process the instructions. _.word_index = SPV_INDEX_INSTRUCTION; while (_.word_index < _.num_words) if (auto error = parseInstruction()) return error; // Running off the end should already have been reported earlier. assert(_.word_index == _.num_words); return SPV_SUCCESS; } spv_result_t Parser::parseInstruction() { _.instruction_count++; // The zero values for all members except for opcode are the // correct initial values. spv_parsed_instruction_t inst = {}; const uint32_t first_word = peek(); // If the module's endianness is different from the host native endianness, // then converted_words contains the the endian-translated words in the // instruction. _.endian_converted_words.clear(); _.endian_converted_words.push_back(first_word); // After a successful parse of the instruction, the inst.operands member // will point to this vector's storage. _.operands.clear(); assert(_.word_index < _.num_words); // Decompose and check the first word. uint16_t inst_word_count = 0; spvOpcodeSplit(first_word, &inst_word_count, &inst.opcode); if (inst_word_count < 1) { return diagnostic() << "Invalid instruction word count: " << inst_word_count; } spv_opcode_desc opcode_desc; if (grammar_.lookupOpcode(static_cast<SpvOp>(inst.opcode), &opcode_desc)) return diagnostic() << "Invalid opcode: " << inst.opcode; // Advance past the opcode word. But remember the of the start // of the instruction. const size_t inst_offset = _.word_index; _.word_index++; // Maintains the ordered list of expected operand types. // For many instructions we only need the {numTypes, operandTypes} // entries in opcode_desc. However, sometimes we need to modify // the list as we parse the operands. This occurs when an operand // has its own logical operands (such as the LocalSize operand for // ExecutionMode), or for extended instructions that may have their // own operands depending on the selected extended instruction. _.expected_operands.clear(); for (auto i = 0; i < opcode_desc->numTypes; i++) _.expected_operands.push_back( opcode_desc->operandTypes[opcode_desc->numTypes - i - 1]); while (_.word_index < inst_offset + inst_word_count) { const uint16_t inst_word_index = uint16_t(_.word_index - inst_offset); if (_.expected_operands.empty()) { return diagnostic() << "Invalid instruction Op" << opcode_desc->name << " starting at word " << inst_offset << ": expected no more operands after " << inst_word_index << " words, but stated word count is " << inst_word_count << "."; } spv_operand_type_t type = spvTakeFirstMatchableOperand(&_.expected_operands); if (auto error = parseOperand(inst_offset, &inst, type, &_.endian_converted_words, &_.operands, &_.expected_operands)) { return error; } } if (!_.expected_operands.empty() && !spvOperandIsOptional(_.expected_operands.back())) { return diagnostic() << "End of input reached while decoding Op" << opcode_desc->name << " starting at word " << inst_offset << ": expected more operands after " << inst_word_count << " words."; } if ((inst_offset + inst_word_count) != _.word_index) { return diagnostic() << "Invalid word count: Op" << opcode_desc->name << " starting at word " << inst_offset << " says it has " << inst_word_count << " words, but found " << _.word_index - inst_offset << " words instead."; } // Check the computed length of the endian-converted words vector against // the declared number of words in the instruction. If endian conversion // is required, then they should match. If no endian conversion was // performed, then the vector only contains the initial opcode/word-count // word. assert(!_.requires_endian_conversion || (inst_word_count == _.endian_converted_words.size())); assert(_.requires_endian_conversion || (_.endian_converted_words.size() == 1)); recordNumberType(inst_offset, &inst); if (_.requires_endian_conversion) { // We must wait until here to set this pointer, because the vector might // have been be resized while we accumulated its elements. inst.words = _.endian_converted_words.data(); } else { // If no conversion is required, then just point to the underlying binary. // This saves time and space. inst.words = _.words + inst_offset; } inst.num_words = inst_word_count; // We must wait until here to set this pointer, because the vector might // have been be resized while we accumulated its elements. inst.operands = _.operands.data(); inst.num_operands = uint16_t(_.operands.size()); // Issue the callback. The callee should know that all the storage in inst // is transient, and will disappear immediately afterward. if (parsed_instruction_fn_) { if (auto error = parsed_instruction_fn_(user_data_, &inst)) return error; } return SPV_SUCCESS; } spv_result_t Parser::parseOperand(size_t inst_offset, spv_parsed_instruction_t* inst, const spv_operand_type_t type, std::vector<uint32_t>* words, std::vector<spv_parsed_operand_t>* operands, spv_operand_pattern_t* expected_operands) { const SpvOp opcode = static_cast<SpvOp>(inst->opcode); // We'll fill in this result as we go along. spv_parsed_operand_t parsed_operand; parsed_operand.offset = uint16_t(_.word_index - inst_offset); // Most operands occupy one word. This might be be adjusted later. parsed_operand.num_words = 1; // The type argument is the one used by the grammar to parse the instruction. // But it can exposes internal parser details such as whether an operand is // optional or actually represents a variable-length sequence of operands. // The resulting type should be adjusted to avoid those internal details. // In most cases, the resulting operand type is the same as the grammar type. parsed_operand.type = type; // Assume non-numeric values. This will be updated for literal numbers. parsed_operand.number_kind = SPV_NUMBER_NONE; parsed_operand.number_bit_width = 0; if (_.word_index >= _.num_words) return exhaustedInputDiagnostic(inst_offset, opcode, type); const uint32_t word = peek(); // Do the words in this operand have to be converted to native endianness? // True for all but literal strings. bool convert_operand_endianness = true; switch (type) { case SPV_OPERAND_TYPE_TYPE_ID: if (!word) return diagnostic(SPV_ERROR_INVALID_ID) << "Error: Type Id is 0"; inst->type_id = word; break; case SPV_OPERAND_TYPE_RESULT_ID: if (!word) return diagnostic(SPV_ERROR_INVALID_ID) << "Error: Result Id is 0"; inst->result_id = word; // Save the result ID to type ID mapping. // In the grammar, type ID always appears before result ID. if (_.id_to_type_id.find(inst->result_id) != _.id_to_type_id.end()) return diagnostic(SPV_ERROR_INVALID_ID) << "Id " << inst->result_id << " is defined more than once"; // Record it. // A regular value maps to its type. Some instructions (e.g. OpLabel) // have no type Id, and will map to 0. The result Id for a // type-generating instruction (e.g. OpTypeInt) maps to itself. _.id_to_type_id[inst->result_id] = spvOpcodeGeneratesType(opcode) ? inst->result_id : inst->type_id; break; case SPV_OPERAND_TYPE_ID: case SPV_OPERAND_TYPE_OPTIONAL_ID: if (!word) return diagnostic(SPV_ERROR_INVALID_ID) << "Id is 0"; parsed_operand.type = SPV_OPERAND_TYPE_ID; if (opcode == SpvOpExtInst && parsed_operand.offset == 3) { // The current word is the extended instruction set Id. // Set the extended instruction set type for the current instruction. auto ext_inst_type_iter = _.import_id_to_ext_inst_type.find(word); if (ext_inst_type_iter == _.import_id_to_ext_inst_type.end()) { return diagnostic(SPV_ERROR_INVALID_ID) << "OpExtInst set Id " << word << " does not reference an OpExtInstImport result Id"; } inst->ext_inst_type = ext_inst_type_iter->second; } break; case SPV_OPERAND_TYPE_SCOPE_ID: case SPV_OPERAND_TYPE_MEMORY_SEMANTICS_ID: // Check for trivially invalid values. The operand descriptions already // have the word "ID" in them. if (!word) return diagnostic() << spvOperandTypeStr(type) << " is 0"; break; case SPV_OPERAND_TYPE_EXTENSION_INSTRUCTION_NUMBER: { assert(SpvOpExtInst == opcode); assert(inst->ext_inst_type != SPV_EXT_INST_TYPE_NONE); spv_ext_inst_desc ext_inst; if (grammar_.lookupExtInst(inst->ext_inst_type, word, &ext_inst)) return diagnostic() << "Invalid extended instruction number: " << word; spvPushOperandTypes(ext_inst->operandTypes, expected_operands); } break; case SPV_OPERAND_TYPE_SPEC_CONSTANT_OP_NUMBER: { assert(SpvOpSpecConstantOp == opcode); if (grammar_.lookupSpecConstantOpcode(SpvOp(word))) { return diagnostic() << "Invalid " << spvOperandTypeStr(type) << ": " << word; } spv_opcode_desc opcode_entry = nullptr; if (grammar_.lookupOpcode(SpvOp(word), &opcode_entry)) { return diagnostic(SPV_ERROR_INTERNAL) << "OpSpecConstant opcode table out of sync"; } // OpSpecConstant opcodes must have a type and result. We've already // processed them, so skip them when preparing to parse the other // operants for the opcode. assert(opcode_entry->hasType); assert(opcode_entry->hasResult); assert(opcode_entry->numTypes >= 2); spvPushOperandTypes(opcode_entry->operandTypes + 2, expected_operands); } break; case SPV_OPERAND_TYPE_LITERAL_INTEGER: case SPV_OPERAND_TYPE_OPTIONAL_LITERAL_INTEGER: // These are regular single-word literal integer operands. // Post-parsing validation should check the range of the parsed value. parsed_operand.type = SPV_OPERAND_TYPE_LITERAL_INTEGER; // It turns out they are always unsigned integers! parsed_operand.number_kind = SPV_NUMBER_UNSIGNED_INT; parsed_operand.number_bit_width = 32; break; case SPV_OPERAND_TYPE_TYPED_LITERAL_NUMBER: case SPV_OPERAND_TYPE_OPTIONAL_TYPED_LITERAL_INTEGER: parsed_operand.type = SPV_OPERAND_TYPE_TYPED_LITERAL_NUMBER; if (opcode == SpvOpSwitch) { // The literal operands have the same type as the value // referenced by the selector Id. const uint32_t selector_id = peekAt(inst_offset + 1); const auto type_id_iter = _.id_to_type_id.find(selector_id); if (type_id_iter == _.id_to_type_id.end() || type_id_iter->second == 0) { return diagnostic() << "Invalid OpSwitch: selector id " << selector_id << " has no type"; } uint32_t type_id = type_id_iter->second; if (selector_id == type_id) { // Recall that by convention, a result ID that is a type definition // maps to itself. return diagnostic() << "Invalid OpSwitch: selector id " << selector_id << " is a type, not a value"; } if (auto error = setNumericTypeInfoForType(&parsed_operand, type_id)) return error; if (parsed_operand.number_kind != SPV_NUMBER_UNSIGNED_INT && parsed_operand.number_kind != SPV_NUMBER_SIGNED_INT) { return diagnostic() << "Invalid OpSwitch: selector id " << selector_id << " is not a scalar integer"; } } else { assert(opcode == SpvOpConstant || opcode == SpvOpSpecConstant); // The literal number type is determined by the type Id for the // constant. assert(inst->type_id); if (auto error = setNumericTypeInfoForType(&parsed_operand, inst->type_id)) return error; } break; case SPV_OPERAND_TYPE_LITERAL_STRING: case SPV_OPERAND_TYPE_OPTIONAL_LITERAL_STRING: { convert_operand_endianness = false; const char* string = reinterpret_cast<const char*>(_.words + _.word_index); // Compute the length of the string, but make sure we don't run off the // end of the input. const size_t remaining_input_bytes = sizeof(uint32_t) * (_.num_words - _.word_index); const size_t string_num_content_bytes = spv_strnlen_s(string, remaining_input_bytes); // If there was no terminating null byte, then that's an end-of-input // error. if (string_num_content_bytes == remaining_input_bytes) return exhaustedInputDiagnostic(inst_offset, opcode, type); // Account for null in the word length, so add 1 for null, then add 3 to // make sure we round up. The following is equivalent to: // (string_num_content_bytes + 1 + 3) / 4 const size_t string_num_words = string_num_content_bytes / 4 + 1; // Make sure we can record the word count without overflow. // // This error can't currently be triggered because of validity // checks elsewhere. if (string_num_words > std::numeric_limits<uint16_t>::max()) { return diagnostic() << "Literal string is longer than " << std::numeric_limits<uint16_t>::max() << " words: " << string_num_words << " words long"; } parsed_operand.num_words = uint16_t(string_num_words); parsed_operand.type = SPV_OPERAND_TYPE_LITERAL_STRING; if (SpvOpExtInstImport == opcode) { // Record the extended instruction type for the ID for this import. // There is only one string literal argument to OpExtInstImport, // so it's sufficient to guard this just on the opcode. const spv_ext_inst_type_t ext_inst_type = spvExtInstImportTypeGet(string); if (SPV_EXT_INST_TYPE_NONE == ext_inst_type) { return diagnostic() << "Invalid extended instruction import '" << string << "'"; } // We must have parsed a valid result ID. It's a condition // of the grammar, and we only accept non-zero result Ids. assert(inst->result_id); _.import_id_to_ext_inst_type[inst->result_id] = ext_inst_type; } } break; case SPV_OPERAND_TYPE_CAPABILITY: case SPV_OPERAND_TYPE_SOURCE_LANGUAGE: case SPV_OPERAND_TYPE_EXECUTION_MODEL: case SPV_OPERAND_TYPE_ADDRESSING_MODEL: case SPV_OPERAND_TYPE_MEMORY_MODEL: case SPV_OPERAND_TYPE_EXECUTION_MODE: case SPV_OPERAND_TYPE_STORAGE_CLASS: case SPV_OPERAND_TYPE_DIMENSIONALITY: case SPV_OPERAND_TYPE_SAMPLER_ADDRESSING_MODE: case SPV_OPERAND_TYPE_SAMPLER_FILTER_MODE: case SPV_OPERAND_TYPE_SAMPLER_IMAGE_FORMAT: case SPV_OPERAND_TYPE_FP_ROUNDING_MODE: case SPV_OPERAND_TYPE_LINKAGE_TYPE: case SPV_OPERAND_TYPE_ACCESS_QUALIFIER: case SPV_OPERAND_TYPE_OPTIONAL_ACCESS_QUALIFIER: case SPV_OPERAND_TYPE_FUNCTION_PARAMETER_ATTRIBUTE: case SPV_OPERAND_TYPE_DECORATION: case SPV_OPERAND_TYPE_BUILT_IN: case SPV_OPERAND_TYPE_GROUP_OPERATION: case SPV_OPERAND_TYPE_KERNEL_ENQ_FLAGS: case SPV_OPERAND_TYPE_KERNEL_PROFILING_INFO: case SPV_OPERAND_TYPE_DEBUG_BASE_TYPE_ATTRIBUTE_ENCODING: case SPV_OPERAND_TYPE_DEBUG_COMPOSITE_TYPE: case SPV_OPERAND_TYPE_DEBUG_TYPE_QUALIFIER: case SPV_OPERAND_TYPE_DEBUG_OPERATION: { // A single word that is a plain enum value. // Map an optional operand type to its corresponding concrete type. if (type == SPV_OPERAND_TYPE_OPTIONAL_ACCESS_QUALIFIER) parsed_operand.type = SPV_OPERAND_TYPE_ACCESS_QUALIFIER; spv_operand_desc entry; if (grammar_.lookupOperand(type, word, &entry)) { return diagnostic() << "Invalid " << spvOperandTypeStr(parsed_operand.type) << " operand: " << word; } // Prepare to accept operands to this operand, if needed. spvPushOperandTypes(entry->operandTypes, expected_operands); } break; case SPV_OPERAND_TYPE_FP_FAST_MATH_MODE: case SPV_OPERAND_TYPE_FUNCTION_CONTROL: case SPV_OPERAND_TYPE_LOOP_CONTROL: case SPV_OPERAND_TYPE_IMAGE: case SPV_OPERAND_TYPE_OPTIONAL_IMAGE: case SPV_OPERAND_TYPE_OPTIONAL_MEMORY_ACCESS: case SPV_OPERAND_TYPE_SELECTION_CONTROL: case SPV_OPERAND_TYPE_DEBUG_INFO_FLAGS: { // This operand is a mask. // Map an optional operand type to its corresponding concrete type. if (type == SPV_OPERAND_TYPE_OPTIONAL_IMAGE) parsed_operand.type = SPV_OPERAND_TYPE_IMAGE; else if (type == SPV_OPERAND_TYPE_OPTIONAL_MEMORY_ACCESS) parsed_operand.type = SPV_OPERAND_TYPE_MEMORY_ACCESS; // Check validity of set mask bits. Also prepare for operands for those // masks if they have any. To get operand order correct, scan from // MSB to LSB since we can only prepend operands to a pattern. // The only case in the grammar where you have more than one mask bit // having an operand is for image operands. See SPIR-V 3.14 Image // Operands. uint32_t remaining_word = word; for (uint32_t mask = (1u << 31); remaining_word; mask >>= 1) { if (remaining_word & mask) { spv_operand_desc entry; if (grammar_.lookupOperand(type, mask, &entry)) { return diagnostic() << "Invalid " << spvOperandTypeStr(parsed_operand.type) << " operand: " << word << " has invalid mask component " << mask; } remaining_word ^= mask; spvPushOperandTypes(entry->operandTypes, expected_operands); } } if (word == 0) { // An all-zeroes mask *might* also be valid. spv_operand_desc entry; if (SPV_SUCCESS == grammar_.lookupOperand(type, 0, &entry)) { // Prepare for its operands, if any. spvPushOperandTypes(entry->operandTypes, expected_operands); } } } break; default: return diagnostic() << "Internal error: Unhandled operand type: " << type; } assert(spvOperandIsConcrete(parsed_operand.type)); operands->push_back(parsed_operand); const size_t index_after_operand = _.word_index + parsed_operand.num_words; // Avoid buffer overrun for the cases where the operand has more than one // word, and where it isn't a string. (Those other cases have already been // handled earlier.) For example, this error can occur for a multi-word // argument to OpConstant, or a multi-word case literal operand for OpSwitch. if (_.num_words < index_after_operand) return exhaustedInputDiagnostic(inst_offset, opcode, type); if (_.requires_endian_conversion) { // Copy instruction words. Translate to native endianness as needed. if (convert_operand_endianness) { const spv_endianness_t endianness = _.endian; std::transform(_.words + _.word_index, _.words + index_after_operand, std::back_inserter(*words), [endianness](const uint32_t raw_word) { return spvFixWord(raw_word, endianness); }); } else { words->insert(words->end(), _.words + _.word_index, _.words + index_after_operand); } } // Advance past the operand. _.word_index = index_after_operand; return SPV_SUCCESS; } spv_result_t Parser::setNumericTypeInfoForType( spv_parsed_operand_t* parsed_operand, uint32_t type_id) { assert(type_id != 0); auto type_info_iter = _.type_id_to_number_type_info.find(type_id); if (type_info_iter == _.type_id_to_number_type_info.end()) { return diagnostic() << "Type Id " << type_id << " is not a type"; } const NumberType& info = type_info_iter->second; if (info.type == SPV_NUMBER_NONE) { // This is a valid type, but for something other than a scalar number. return diagnostic() << "Type Id " << type_id << " is not a scalar numeric type"; } parsed_operand->number_kind = info.type; parsed_operand->number_bit_width = info.bit_width; // Round up the word count. parsed_operand->num_words = static_cast<uint16_t>((info.bit_width + 31) / 32); return SPV_SUCCESS; } void Parser::recordNumberType(size_t inst_offset, const spv_parsed_instruction_t* inst) { const SpvOp opcode = static_cast<SpvOp>(inst->opcode); if (spvOpcodeGeneratesType(opcode)) { NumberType info = {SPV_NUMBER_NONE, 0}; if (SpvOpTypeInt == opcode) { const bool is_signed = peekAt(inst_offset + 3) != 0; info.type = is_signed ? SPV_NUMBER_SIGNED_INT : SPV_NUMBER_UNSIGNED_INT; info.bit_width = peekAt(inst_offset + 2); } else if (SpvOpTypeFloat == opcode) { info.type = SPV_NUMBER_FLOATING; info.bit_width = peekAt(inst_offset + 2); } // The *result* Id of a type generating instruction is the type Id. _.type_id_to_number_type_info[inst->result_id] = info; } } } // anonymous namespace spv_result_t spvBinaryParse(const spv_const_context context, void* user_data, const uint32_t* code, const size_t num_words, spv_parsed_header_fn_t parsed_header, spv_parsed_instruction_fn_t parsed_instruction, spv_diagnostic* diagnostic) { spv_context_t hijack_context = *context; if (diagnostic) { *diagnostic = nullptr; spvtools::UseDiagnosticAsMessageConsumer(&hijack_context, diagnostic); } Parser parser(&hijack_context, user_data, parsed_header, parsed_instruction); return parser.parse(code, num_words, diagnostic); } // TODO(dneto): This probably belongs in text.cpp since that's the only place // that a spv_binary_t value is created. void spvBinaryDestroy(spv_binary binary) { if (!binary) return; delete[] binary->code; delete binary; } size_t spv_strnlen_s(const char* str, size_t strsz) { if (!str) return 0; for (size_t i = 0; i < strsz; i++) { if (!str[i]) return i; } return strsz; }