src/file_psb.c: improve Frama-C annotations

This commit is contained in:
Christophe Grenier 2021-07-07 17:08:57 +02:00
parent 910bf9094f
commit 10e81c02d9

View file

@ -38,7 +38,7 @@
/* https://www.adobe.com/devnet-apps/photoshop/fileformatashtml/ */ /* https://www.adobe.com/devnet-apps/photoshop/fileformatashtml/ */
/*@ requires \valid(file_stat); */ /*@ requires valid_register_header_check(file_stat); */
static void register_header_check_psb(file_stat_t *file_stat); static void register_header_check_psb(file_stat_t *file_stat);
const file_hint_t file_hint_psb= { const file_hint_t file_hint_psb= {
@ -83,9 +83,9 @@ static uint64_t get_be64(const void *buffer, const unsigned int offset)
} }
/*@ /*@
@ requires \valid(file_recovery);
@ requires valid_file_recovery(file_recovery);
@ requires file_recovery->data_check==&psb_skip_image_data; @ requires file_recovery->data_check==&psb_skip_image_data;
@ requires valid_data_check_param(buffer, buffer_size, file_recovery);
@ ensures valid_data_check_result(\result, file_recovery);
@ ensures file_recovery->data_check==\null; @ ensures file_recovery->data_check==\null;
@ ensures \result == DC_CONTINUE; @ ensures \result == DC_CONTINUE;
@ assigns file_recovery->data_check, file_recovery->calculated_file_size; @ assigns file_recovery->data_check, file_recovery->calculated_file_size;
@ -98,12 +98,9 @@ static data_check_t psb_skip_image_data(const unsigned char *buffer, const unsig
} }
/*@ /*@
@ requires buffer_size > 0;
@ requires (buffer_size&1)==0;
@ requires \valid_read(buffer+(0..buffer_size-1));
@ requires \valid(file_recovery);
@ requires valid_file_recovery(file_recovery);
@ requires file_recovery->data_check==&psb_skip_layer_info; @ requires file_recovery->data_check==&psb_skip_layer_info;
@ requires valid_data_check_param(buffer, buffer_size, file_recovery);
@ ensures valid_data_check_result(\result, file_recovery);
@ ensures file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; @ ensures file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null;
@ ensures \result == DC_CONTINUE || \result == DC_STOP; @ ensures \result == DC_CONTINUE || \result == DC_STOP;
@ assigns file_recovery->data_check, file_recovery->file_check, file_recovery->calculated_file_size; @ assigns file_recovery->data_check, file_recovery->file_check, file_recovery->calculated_file_size;
@ -132,14 +129,10 @@ static data_check_t psb_skip_layer_info(const unsigned char *buffer, const unsig
} }
/*@ /*@
@ requires buffer_size > 0;
@ requires (buffer_size&1)==0;
@ requires \valid_read(buffer+(0..buffer_size-1));
@ requires \valid(file_recovery);
@ requires valid_file_recovery(file_recovery);
@ requires file_recovery->data_check==&psb_skip_image_resources; @ requires file_recovery->data_check==&psb_skip_image_resources;
@ requires valid_data_check_param(buffer, buffer_size, file_recovery);
@ ensures valid_data_check_result(\result, file_recovery);
@ ensures file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; @ ensures file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null;
@ ensures \result == DC_CONTINUE || \result == DC_STOP;
@ assigns file_recovery->data_check, file_recovery->calculated_file_size; @ assigns file_recovery->data_check, file_recovery->calculated_file_size;
@*/ @*/
static data_check_t psb_skip_image_resources(const unsigned char *buffer, const unsigned int buffer_size, file_recovery_t *file_recovery) static data_check_t psb_skip_image_resources(const unsigned char *buffer, const unsigned int buffer_size, file_recovery_t *file_recovery)
@ -153,7 +146,7 @@ static data_check_t psb_skip_image_resources(const unsigned char *buffer, const
#ifdef DEBUG_PHOTOSHOP #ifdef DEBUG_PHOTOSHOP
log_info("Image resource at 0x%lx, l=0x%x\n", (long unsigned)file_recovery->calculated_file_size, l); log_info("Image resource at 0x%lx, l=0x%x\n", (long unsigned)file_recovery->calculated_file_size, l);
#endif #endif
file_recovery->calculated_file_size+=l+4; file_recovery->calculated_file_size+=(uint64_t)l+4;
#ifdef DEBUG_PHOTOSHOP #ifdef DEBUG_PHOTOSHOP
log_info("Layer info at 0x%lx\n", (long unsigned)file_recovery->calculated_file_size); log_info("Layer info at 0x%lx\n", (long unsigned)file_recovery->calculated_file_size);
#endif #endif
@ -165,11 +158,9 @@ static data_check_t psb_skip_image_resources(const unsigned char *buffer, const
/*@ /*@
@ requires buffer_size >= 32; @ requires buffer_size >= 32;
@ requires (buffer_size&1)==0;
@ requires \valid_read(buffer+(0..buffer_size-1));
@ requires \valid(file_recovery);
@ requires file_recovery->data_check==&psb_skip_color_mode; @ requires file_recovery->data_check==&psb_skip_color_mode;
@ ensures \result == DC_CONTINUE || \result == DC_ERROR || \result == DC_STOP; @ requires valid_data_check_param(buffer, buffer_size, file_recovery);
@ ensures valid_data_check_result(\result, file_recovery);
@ ensures file_recovery->data_check==&psb_skip_color_mode || file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null; @ ensures file_recovery->data_check==&psb_skip_color_mode || file_recovery->data_check==&psb_skip_image_resources || file_recovery->data_check==&psb_skip_layer_info || file_recovery->data_check==\null;
@ assigns file_recovery->data_check, file_recovery->calculated_file_size; @ assigns file_recovery->data_check, file_recovery->calculated_file_size;
@*/ @*/
@ -205,13 +196,9 @@ static data_check_t psb_skip_color_mode(const unsigned char *buffer, const unsig
/*@ /*@
@ requires buffer_size >= sizeof(struct psb_file_header); @ requires buffer_size >= sizeof(struct psb_file_header);
@ requires \valid_read(buffer+(0..buffer_size-1));
@ requires valid_file_recovery(file_recovery);
@ requires \valid(file_recovery_new);
@ requires file_recovery_new->blocksize > 0;
@ requires separation: \separated(&file_hint_psb, buffer+(..), file_recovery, file_recovery_new); @ requires separation: \separated(&file_hint_psb, buffer+(..), file_recovery, file_recovery_new);
@ ensures \result == 0 || \result == 1; @ requires valid_header_check_param(buffer, buffer_size, safe_header_only, file_recovery, file_recovery_new);
@ ensures \result!=0 ==> valid_file_recovery(file_recovery_new); @ ensures valid_header_check_result(\result, file_recovery_new);
@ assigns *file_recovery_new; @ assigns *file_recovery_new;
@*/ @*/
static int header_check_psb(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new) static int header_check_psb(const unsigned char *buffer, const unsigned int buffer_size, const unsigned int safe_header_only, const file_recovery_t *file_recovery, file_recovery_t *file_recovery_new)