From 10e81c02d914e3216995fe1c4b5bdeac92d84232 Mon Sep 17 00:00:00 2001 From: Christophe Grenier Date: Wed, 7 Jul 2021 17:08:57 +0200 Subject: [PATCH] src/file_psb.c: improve Frama-C annotations --- src/file_psb.c | 37 ++++++++++++------------------------- 1 file changed, 12 insertions(+), 25 deletions(-) diff --git a/src/file_psb.c b/src/file_psb.c index 8786f2de..630613e3 100644 --- a/src/file_psb.c +++ b/src/file_psb.c @@ -38,7 +38,7 @@ /* https://www.adobe.com/devnet-apps/photoshop/fileformatashtml/ */ -/*@ requires \valid(file_stat); */ +/*@ requires valid_register_header_check(file_stat); */ static void register_header_check_psb(file_stat_t *file_stat); const file_hint_t file_hint_psb= { @@ -83,9 +83,9 @@ static uint64_t get_be64(const void *buffer, const unsigned int offset) } /*@ - @ requires \valid(file_recovery); - @ requires valid_file_recovery(file_recovery); @ requires file_recovery->data_check==&psb_skip_image_data; + @ requires valid_data_check_param(buffer, buffer_size, file_recovery); + @ ensures valid_data_check_result(\result, file_recovery); @ ensures file_recovery->data_check==\null; @ ensures \result == DC_CONTINUE; @ assigns file_recovery->data_check, file_recovery->calculated_file_size; @@ -98,12 +98,9 @@ static data_check_t psb_skip_image_data(const unsigned char *buffer, const unsig } /*@ - @ requires buffer_size > 0; - @ requires (buffer_size&1)==0; - @ requires \valid_read(buffer+(0..buffer_size-1)); - @ requires \valid(file_recovery); - @ requires valid_file_recovery(file_recovery); @ requires file_recovery->data_check==&psb_skip_layer_info; + @ requires valid_data_check_param(buffer, buffer_size, file_recovery); + @ ensures valid_data_check_result(\result, file_recovery); @ ensures file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; @ ensures \result == DC_CONTINUE || \result == DC_STOP; @ assigns file_recovery->data_check, file_recovery->file_check, file_recovery->calculated_file_size; @@ -132,14 +129,10 @@ static data_check_t psb_skip_layer_info(const unsigned char *buffer, const unsig } /*@ - @ requires buffer_size > 0; - @ requires (buffer_size&1)==0; - @ requires \valid_read(buffer+(0..buffer_size-1)); - @ requires \valid(file_recovery); - @ requires valid_file_recovery(file_recovery); @ requires file_recovery->data_check==&psb_skip_image_resources; + @ requires valid_data_check_param(buffer, buffer_size, file_recovery); + @ ensures valid_data_check_result(\result, file_recovery); @ ensures file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; - @ ensures \result == DC_CONTINUE || \result == DC_STOP; @ assigns file_recovery->data_check, file_recovery->calculated_file_size; @*/ static data_check_t psb_skip_image_resources(const unsigned char *buffer, const unsigned int buffer_size, file_recovery_t *file_recovery) @@ -153,7 +146,7 @@ static data_check_t psb_skip_image_resources(const unsigned char *buffer, const #ifdef DEBUG_PHOTOSHOP log_info("Image resource at 0x%lx, l=0x%x\n", (long unsigned)file_recovery->calculated_file_size, l); #endif - file_recovery->calculated_file_size+=l+4; + file_recovery->calculated_file_size+=(uint64_t)l+4; #ifdef DEBUG_PHOTOSHOP log_info("Layer info at 0x%lx\n", (long unsigned)file_recovery->calculated_file_size); #endif @@ -165,11 +158,9 @@ static data_check_t psb_skip_image_resources(const unsigned char *buffer, const /*@ @ requires buffer_size >= 32; - @ requires (buffer_size&1)==0; - @ requires \valid_read(buffer+(0..buffer_size-1)); - @ requires \valid(file_recovery); @ requires file_recovery->data_check==&psb_skip_color_mode; - @ ensures \result == DC_CONTINUE || \result == DC_ERROR || \result == DC_STOP; + @ requires valid_data_check_param(buffer, buffer_size, file_recovery); + @ ensures valid_data_check_result(\result, file_recovery); @ ensures file_recovery->data_check==&psb_skip_color_mode || file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; @ assigns file_recovery->data_check, file_recovery->calculated_file_size; @*/ @@ -205,13 +196,9 @@ static data_check_t psb_skip_color_mode(const unsigned char *buffer, const unsig /*@ @ requires buffer_size >= sizeof(struct psb_file_header); - @ requires \valid_read(buffer+(0..buffer_size-1)); - @ requires valid_file_recovery(file_recovery); - @ requires \valid(file_recovery_new); - @ requires file_recovery_new->blocksize > 0; @ requires separation: \separated(&file_hint_psb, buffer+(..), file_recovery, file_recovery_new); - @ ensures \result == 0 || \result == 1; - @ ensures \result!=0 ==> valid_file_recovery(file_recovery_new); + @ requires valid_header_check_param(buffer, buffer_size, safe_header_only, file_recovery, file_recovery_new); + @ ensures valid_header_check_result(\result, file_recovery_new); @ assigns *file_recovery_new; @*/ static int header_check_psb(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new)