• Home
  • Features
  • Pricing
  • Docs
  • Announcements
  • Sign In

realm / realm-core / thomas.goyne_111

27 Oct 2023 10:49AM UTC coverage: 91.582% (+0.01%) from 91.571%
thomas.goyne_111

push

Evergreen

web-flow
Merge pull request #7085 from realm/release/13.23.2

Release/13.23.2

91742 of 168234 branches covered (0.0%)

230135 of 251288 relevant lines covered (91.58%)

6778766.91 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

91.26
/src/realm/util/compression.cpp
1
/*************************************************************************
2
 *
3
 * Copyright 2022 Realm Inc.
4
 *
5
 * Licensed under the Apache License, Version 2.0 (the "License");
6
 * you may not use this file except in compliance with the License.
7
 * You may obtain a copy of the License at
8
 *
9
 * http://www.apache.org/licenses/LICENSE-2.0
10
 *
11
 * Unless required by applicable law or agreed to in writing, software
12
 * distributed under the License is distributed on an "AS IS" BASIS,
13
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14
 * See the License for the specific language governing permissions and
15
 * limitations under the License.
16
 *
17
 **************************************************************************/
18

19
#include <realm/util/compression.hpp>
20
#include <realm/util/safe_int_ops.hpp>
21
#include <realm/util/scope_exit.hpp>
22

23
#include <cstring>
24
#include <limits>
25
#include <map>
26
#include <zlib.h>
27
#include <zconf.h> // for zlib
28

29
#if REALM_USE_LIBCOMPRESSION
30
#include <compression.h>
31
#include <os/availability.h>
32
#endif
33

34
using namespace realm;
35
using namespace util;
36

37
namespace {
38

39
enum class Algorithm {
40
    None = 0,
41
    Deflate = 1,
42
    Lzfse = 2,
43
};
44

45
using stream_avail_size_t = std::conditional_t<sizeof(uInt) < sizeof(size_t), uInt, size_t>;
46
constexpr stream_avail_size_t g_max_stream_avail = std::numeric_limits<stream_avail_size_t>::max();
47

48
stream_avail_size_t bounded_avail(size_t s)
49
{
98,436✔
50
    return s > g_max_stream_avail ? g_max_stream_avail : stream_avail_size_t(s);
98,436✔
51
}
98,436✔
52

53
Bytef* to_bytef(const char* str)
54
{
160,146✔
55
    return reinterpret_cast<Bytef*>(const_cast<char*>(str));
160,146✔
56
}
160,146✔
57

58
class ErrorCategoryImpl : public std::error_category {
59
public:
60
    const char* name() const noexcept override final
61
    {
×
62
        return "realm::util::compression::error";
×
63
    }
×
64
    std::string message(int err) const override final
65
    {
×
66
        using error = realm::util::compression::error;
×
67
        error e = error(err);
×
68
        switch (e) {
×
69
            case error::out_of_memory:
×
70
                return "Out of memory";
×
71
            case error::compress_buffer_too_small:
×
72
                return "Compression buffer too small";
×
73
            case error::compress_error:
×
74
                return "Compression error";
×
75
            case error::compress_input_too_long:
×
76
                return "Compression input too long";
×
77
            case error::corrupt_input:
×
78
                return "Corrupt input data";
×
79
            case error::incorrect_decompressed_size:
×
80
                return "Decompressed data size not equal to expected size";
×
81
            case error::decompress_error:
×
82
                return "Decompression error";
×
83
            case error::decompress_unsupported:
×
84
                return "Decompression failed due to unsupported input compression";
×
85
        }
×
86
        REALM_UNREACHABLE();
×
87
    }
×
88
};
89

90
ErrorCategoryImpl g_error_category;
91

92
void* custom_alloc(void* opaque, unsigned int cnt, unsigned int size)
93
{
114,255✔
94
    using Alloc = realm::util::compression::Alloc;
114,255✔
95
    Alloc& alloc = *static_cast<Alloc*>(opaque);
114,255✔
96
    std::size_t accum_size = cnt * std::size_t(size);
114,255✔
97
    return alloc.alloc(accum_size);
114,255✔
98
}
114,255✔
99

100
void custom_free(void* opaque, void* addr)
101
{
114,255✔
102
    using Alloc = realm::util::compression::Alloc;
114,255✔
103
    Alloc& alloc = *static_cast<Alloc*>(opaque);
114,255✔
104
    return alloc.free(addr);
114,255✔
105
}
114,255✔
106

107
void init_arena(compression::CompressMemoryArena& compress_memory_arena)
108
{
48,378✔
109
    if (compress_memory_arena.size() == 0) {
48,378✔
110
        // Zlib documentation says that with default settings deflate requires
7,605✔
111
        // at most 268 KB. We round up slightly.
7,605✔
112
        compress_memory_arena.resize(270 * 1024); // Throws
16,299✔
113
    }
16,299✔
114
    else {
32,079✔
115
        compress_memory_arena.reset();
32,079✔
116
    }
32,079✔
117
}
48,378✔
118

119
void grow_arena(compression::CompressMemoryArena& compress_memory_arena)
120
{
17,010✔
121
    std::size_t n = compress_memory_arena.size();
17,010✔
122
    REALM_ASSERT(n != 0);
17,010✔
123
    REALM_ASSERT(n != std::numeric_limits<std::size_t>::max());
17,010✔
124
    if (util::int_multiply_with_overflow_detect(n, 2))
17,010✔
125
        n = std::numeric_limits<std::size_t>::max();
×
126
    compress_memory_arena.resize(n); // Throws
17,010✔
127
}
17,010✔
128

129
uint8_t read_byte(InputStream& is, Span<const char>& buf)
130
{
660,732✔
131
    if (!buf.size())
660,732✔
132
        buf = is.next_block();
30,225✔
133
    if (buf.size()) {
660,732✔
134
        char c = buf.front();
630,567✔
135
        buf = buf.sub_span(1);
630,567✔
136
        return c;
630,567✔
137
    }
630,567✔
138
    return 0;
30,165✔
139
}
30,165✔
140

141
struct Header {
142
    Algorithm algorithm;
143
    size_t size;
144
};
145

146
Header read_header(InputStream& is, Span<const char>& buf)
147
{
323,055✔
148
    Header ret = {};
323,055✔
149
    auto first_byte = read_byte(is, buf);
323,055✔
150
    ret.algorithm = Algorithm(first_byte >> 4);
323,055✔
151
    size_t size_width = first_byte & 0b1111;
323,055✔
152
    if (size_width > sizeof(size_t))
323,055✔
153
        ret.size = -1;
12✔
154
    else {
323,043✔
155
        for (size_t i = 0; i < size_width; ++i) {
646,839✔
156
            ret.size += size_t(read_byte(is, buf)) << (i * 8);
323,796✔
157
        }
323,796✔
158
    }
323,043✔
159
    return ret;
323,055✔
160
}
323,055✔
161

162
uint8_t header_width(size_t size)
163
{
131,142✔
164
    uint8_t width = 0;
131,142✔
165
    while (size) {
286,728✔
166
        ++width;
155,586✔
167
        size >>= 8;
155,586✔
168
    }
155,586✔
169
    return width + 1;
131,142✔
170
}
131,142✔
171

172
size_t write_header(Header h, Span<char> target)
173
{
140,691✔
174
    uint8_t width = 0;
140,691✔
175
    target[0] = uint8_t(h.algorithm) << 4;
140,691✔
176
    for (size_t sz = h.size; sz; sz >>= 8, ++width) {
315,714✔
177
        target[width + 1] = uint8_t(sz & 0xFF);
175,023✔
178
        ++target[0];
175,023✔
179
    }
175,023✔
180
    return width + 1;
140,691✔
181
}
140,691✔
182

183
// Feed in a zlib header to inflate() for the places we don't store it
184
void inflate_zlib_header(z_stream& strm)
185
{
4,923✔
186
    Bytef out;
4,923✔
187
    strm.avail_in = 2;
4,923✔
188
    strm.next_in = to_bytef("\x78\x5e");
4,923✔
189
    strm.avail_out = sizeof(out);
4,923✔
190
    strm.next_out = &out;
4,923✔
191

4,923✔
192
    int rc = inflate(&strm, Z_SYNC_FLUSH);
4,923✔
193
    REALM_ASSERT(rc == Z_OK);
4,923!
194
    REALM_ASSERT(strm.avail_in == 0);
4,923!
195
}
4,923✔
196

197
struct DecompressInputStreamNone final : public InputStream {
198
    DecompressInputStreamNone(InputStream& s, Span<const char> b)
199
        : source(s)
200
        , current_block(b)
201
    {
88,320✔
202
        if (current_block.empty())
88,320✔
203
            current_block = source.next_block();
687✔
204
    }
88,320✔
205
    InputStream& source;
206
    Span<const char> current_block;
207

208
    Span<const char> next_block() override
209
    {
317,487✔
210
        auto ret = current_block;
317,487✔
211
        if (ret.size())
317,487✔
212
            current_block = source.next_block();
229,179✔
213
        return ret;
317,487✔
214
    }
317,487✔
215
};
216

217
class DecompressInputStreamZlib final : public InputStream {
218
public:
219
    DecompressInputStreamZlib(InputStream& s, Span<const char> b, size_t total_size)
220
        : m_source(s)
221
    {
1,206✔
222
        // Arbitrary upper limit to reduce peak memory usage
1,206✔
223
        constexpr const size_t max_out_buffer_size = 1024 * 1024;
1,206✔
224
        m_buffer.reserve(std::min(total_size, max_out_buffer_size));
1,206✔
225

1,206✔
226
        int rc = inflateInit(&m_strm);
1,206✔
227
        if (rc != Z_OK)
1,206!
228
            throw std::system_error(make_error_code(compression::error::decompress_error), m_strm.msg);
1,206✔
229
        inflate_zlib_header(m_strm);
1,206✔
230

1,206✔
231
        m_strm.avail_in = bounded_avail(b.size());
1,206✔
232
        m_strm.next_in = to_bytef(b.data());
1,206✔
233
        m_current_block = b.sub_span(m_strm.avail_in);
1,206✔
234
    }
1,206✔
235

236
    ~DecompressInputStreamZlib()
237
    {
1,206✔
238
        inflateEnd(&m_strm);
1,206✔
239
    }
1,206✔
240

241
    Span<const char> next_block() override
242
    {
4,152✔
243
        m_buffer.resize(m_buffer.capacity());
4,152✔
244
        m_strm.avail_out = bounded_avail(m_buffer.size());
4,152✔
245
        m_strm.next_out = to_bytef(m_buffer.data());
4,152✔
246

4,152✔
247
        while (true) {
4,548✔
248
            // We may have some leftover input buffer from a previous call if the
4,548✔
249
            // inflated result didn't fit in the output buffer. If not, we need to
4,548✔
250
            // fetch the next block.
4,548✔
251
            if (m_strm.avail_in == 0) {
4,548!
252
                m_current_block = m_source.next_block();
2,292✔
253
                if (m_current_block.size()) {
2,292!
254
                    m_strm.next_in = to_bytef(m_current_block.data());
1,098✔
255
                    m_strm.avail_in = bounded_avail(m_current_block.size());
1,098✔
256
                }
1,098✔
257
            }
2,292✔
258

4,548✔
259
            m_strm.total_out = 0;
4,548✔
260
            auto rc = inflate(&m_strm, m_strm.avail_in ? Z_SYNC_FLUSH : Z_FINISH);
4,548!
261
            REALM_ASSERT(rc == Z_OK || rc == Z_STREAM_END || rc == Z_BUF_ERROR);
4,548!
262

4,548✔
263
            if (m_strm.total_out) {
4,548!
264
                // We got some output, so return that. We might also have reached
2,946✔
265
                // the end of the stream, which'll be reported on the next call
2,946✔
266
                // if so.
2,946✔
267
                REALM_ASSERT(m_strm.total_out <= m_buffer.capacity());
2,946!
268
                m_buffer.resize(m_strm.total_out);
2,946✔
269
                return m_buffer;
2,946✔
270
            }
2,946✔
271

1,602✔
272
            if (rc != Z_OK) {
1,602!
273
                // We reached the end of the stream without producing more data, so
1,206✔
274
                // we're done.
1,206✔
275
                return {nullptr, nullptr};
1,206✔
276
            }
1,206✔
277

1,602✔
278
            // Otherwise we produced no output but also didn't reach the end of the
1,602✔
279
            // stream, so we need to feed more data in.
1,602✔
280
        }
1,602✔
281
    }
4,152✔
282

283
private:
284
    InputStream& m_source;
285
    Span<const char> m_current_block;
286
    z_stream m_strm = {};
287
    AppendBuffer<char> m_buffer;
288
};
289

290
#if REALM_USE_LIBCOMPRESSION
291

292
compression_algorithm algorithm_to_compression_algorithm(Algorithm a)
293
{
12,606✔
294
    switch (Algorithm(a)) {
12,606✔
295
        case Algorithm::Deflate:
6,966✔
296
            return COMPRESSION_ZLIB;
6,966✔
297
        case Algorithm::Lzfse:
5,637✔
298
            return COMPRESSION_LZFSE;
5,637✔
299
        default:
3✔
300
            return (compression_algorithm)0;
3✔
301
    }
12,606✔
302
}
12,606✔
303

304
API_AVAILABLE_BEGIN(macos(10.11))
305

306
class DecompressInputStreamLibCompression final : public InputStream {
307
public:
308
    DecompressInputStreamLibCompression(InputStream& s, Span<const char> b, Header h)
309
        : m_source(s)
310
    {
1,206✔
311
        // Arbitrary upper limit to reduce peak memory usage
312
        constexpr const size_t max_out_buffer_size = 1024 * 1024;
1,206✔
313
        m_buffer.reserve(std::min(h.size, max_out_buffer_size));
1,206✔
314
        auto rc = compression_stream_init(&m_strm, COMPRESSION_STREAM_DECODE,
1,206✔
315
                                          algorithm_to_compression_algorithm(h.algorithm));
1,206✔
316
        if (rc != COMPRESSION_STATUS_OK)
1,206✔
317
            throw std::system_error(compression::error::decompress_error);
318
        m_strm.src_size = b.size();
1,206✔
319
        m_strm.src_ptr = to_bytef(b.data());
1,206✔
320
    }
1,206✔
321

322
    ~DecompressInputStreamLibCompression()
323
    {
1,206✔
324
        compression_stream_destroy(&m_strm);
1,206✔
325
    }
1,206✔
326

327
    Span<const char> next_block() override
328
    {
3,471✔
329
        m_buffer.resize(m_buffer.capacity());
3,471✔
330
        m_strm.dst_size = m_buffer.size();
3,471✔
331
        m_strm.dst_ptr = to_bytef(m_buffer.data());
3,471✔
332

333
        while (true) {
4,953✔
334
            // We may have some leftover input buffer from a previous call if the
335
            // inflated result didn't fit in the output buffer. If not, we need to
336
            // fetch the next block.
337
            bool end = false;
4,953✔
338
            if (m_strm.src_size == 0) {
4,953✔
339
                if (auto block = m_source.next_block(); block.size()) {
3,651✔
340
                    m_strm.src_ptr = to_bytef(block.data());
1,509✔
341
                    m_strm.src_size = block.size();
1,509✔
342
                }
1,509✔
343
                else {
2,142✔
344
                    end = true;
2,142✔
345
                }
2,142✔
346
            }
3,651✔
347

348
            auto rc = compression_stream_process(&m_strm, end ? COMPRESSION_STREAM_FINALIZE : 0);
2,811✔
349
            if (rc == COMPRESSION_STATUS_ERROR)
4,953✔
350
                throw std::system_error(compression::error::corrupt_input);
351
            auto bytes_written = m_buffer.size() - m_strm.dst_size;
4,953✔
352
            if (bytes_written) {
4,953✔
353
                // We got some output, so return that. We might also have reached
354
                // the end of the stream, which'll be reported on the next call
355
                // if so.
356
                m_buffer.resize(bytes_written);
2,265✔
357
                return m_buffer;
2,265✔
358
            }
2,265✔
359
            if (rc == COMPRESSION_STATUS_END) {
2,688✔
360
                // We reached the end of the stream and are done
361
                return {nullptr, nullptr};
1,206✔
362
            }
1,206✔
363

364
            if (end) {
1,482✔
365
                // We ran out of input data but didn't get COMPRESSION_STATUS_END,
366
                // so the input is truncated
367
                throw std::system_error(compression::error::corrupt_input);
368
            }
369

370
            // Otherwise we produced no output but also didn't reach the end of the
371
            // stream, so we need to feed more data in.
372
        }
1,482✔
373
    }
3,471✔
374

375
private:
376
    InputStream& m_source;
377
    compression_stream m_strm = {};
378
    AppendBuffer<char> m_buffer;
379
};
380

381
API_AVAILABLE_END
382
#endif
383

384
std::error_code decompress_none(InputStream& compressed, Span<const char> compressed_buf, Span<char> decompressed_buf)
385
{
56,469✔
386
    do {
56,469✔
387
        auto count = std::min(decompressed_buf.size(), compressed_buf.size());
56,469✔
388
        std::memcpy(decompressed_buf.data(), compressed_buf.data(), count);
56,469✔
389
        decompressed_buf = decompressed_buf.sub_span(count);
56,469✔
390
        compressed_buf = compressed.next_block();
56,469✔
391
    } while (compressed_buf.size() && decompressed_buf.size());
56,469!
392

27,441✔
393
    if (compressed_buf.size() || decompressed_buf.size()) {
56,469✔
394
        return compression::error::incorrect_decompressed_size;
×
395
    }
×
396
    return std::error_code{};
56,469✔
397
}
56,469✔
398

399
std::error_code decompress_zlib(InputStream& compressed, Span<const char> compressed_buf, Span<char> decompressed_buf,
400
                                bool has_header)
401
{
10,251✔
402
    using namespace compression;
10,251✔
403

10,251✔
404
    z_stream strm = {};
10,251✔
405
    int rc = inflateInit(&strm);
10,251✔
406
    if (rc != Z_OK)
10,251!
407
        return error::decompress_error;
10,251✔
408
    util::ScopeExit cleanup([&]() noexcept {
10,251✔
409
        // inflateEnd() only fails if we modified the fields of strm in an invalid way
10,251✔
410
        int rc = inflateEnd(&strm);
10,251✔
411
        REALM_ASSERT(rc == Z_OK);
10,251!
412
        static_cast<void>(rc);
10,251✔
413
    });
10,251✔
414

10,251✔
415
    if (!has_header)
10,251!
416
        inflate_zlib_header(strm);
3,717✔
417

10,251✔
418
    do {
11,025✔
419
        size_t in_offset = 0;
11,025✔
420

11,025✔
421
        // This loop will typically run exactly once. If size_t is larger than
11,025✔
422
        // uInt (as it is on most 64-bit platforms), input or output larger than
11,025✔
423
        // uInt's upper bound will require multiple iterations of passing data
11,025✔
424
        // to zlib.
11,025✔
425
        while (in_offset < compressed_buf.size()) {
11,805!
426
            strm.avail_in = bounded_avail(compressed_buf.size() - in_offset);
11,028✔
427
            strm.next_in = to_bytef(compressed_buf.data() + in_offset);
11,028✔
428
            strm.next_out = to_bytef(decompressed_buf.data());
11,028✔
429
            strm.avail_out = bounded_avail(decompressed_buf.size());
11,028✔
430
            strm.total_in = 0;
11,028✔
431
            strm.total_out = 0;
11,028✔
432

11,028✔
433
            int rc = inflate(&strm, Z_SYNC_FLUSH);
11,028✔
434
            REALM_ASSERT(rc != Z_STREAM_ERROR && rc != Z_MEM_ERROR);
11,028!
435
            in_offset += strm.total_in;
11,028✔
436
            decompressed_buf = decompressed_buf.sub_span(strm.total_out);
11,028✔
437

11,028✔
438
            if (rc == Z_OK) {
11,028!
439
                // We made forward progress but did not reach the end
780✔
440
                continue;
780✔
441
            }
780✔
442
            if (rc == Z_STREAM_END) {
10,248!
443
                // If we got Z_STREAM_END and there's leftover input then the
10,242✔
444
                // data is invalid
10,242✔
445
                if (strm.avail_in || in_offset < compressed_buf.size() || compressed.next_block().size())
10,242!
446
                    return error::corrupt_input;
3✔
447
                if (decompressed_buf.size() != 0)
10,239!
448
                    return error::incorrect_decompressed_size;
3✔
449
                return std::error_code{};
10,236✔
450
            }
10,236✔
451
            if (rc == Z_NEED_DICT) {
6!
452
                // We don't support custom dictionaries
453
                return error::decompress_unsupported;
×
454
            }
×
455
            if (rc == Z_DATA_ERROR) {
6!
456
                return error::corrupt_input;
3✔
457
            }
3✔
458
            if (rc == Z_BUF_ERROR) {
3!
459
                if (strm.avail_out == 0) {
3!
460
                    if (decompressed_buf.size() > 0) {
3!
461
                        // We need to pass in the next range of the decompress buffer
462
                        continue;
×
463
                    }
×
464
                    // We should never run out of output buffer space unless the
3✔
465
                    // decompressed size was wrong.
3✔
466
                    return error::incorrect_decompressed_size;
3✔
467
                }
3✔
468
                // If there's space left in the output buffer then that means
469
                // we ran out of input without getting Z_STREAM_END
470
                return error::corrupt_input;
×
471
            }
×
472

473
            // Unknown error code
474
            REALM_UNREACHABLE();
×
475
        }
×
476
    } while ((compressed_buf = compressed.next_block()), compressed_buf.size());
11,025!
477

10,251✔
478
    if (strm.avail_in && !strm.avail_out) {
10,251!
479
        // Ran out of output buffer with remaining input
480
        return error::incorrect_decompressed_size;
×
481
    }
×
482

3✔
483
    // We ran out of input without getting Z_STREAM_END
3✔
484
    return error::corrupt_input;
3✔
485
}
3✔
486

487
#if REALM_USE_LIBCOMPRESSION
488
API_AVAILABLE_BEGIN(macos(10.11))
489
std::error_code decompress_libcompression(InputStream& compressed, Span<const char> compressed_buf,
490
                                          Span<char> decompressed_buf, Algorithm algorithm, bool has_header)
491
{
11,397✔
492
    using namespace compression;
11,397✔
493

494
    // If we're given a buffer with a zlib header we have to parse it outselves,
495
    // as libcompression doesn't handle it.
496
    if (has_header) {
11,397✔
497
        // The first nibble is compression algorithm (where 8 is DEFLATE), and second
498
        // nibble is window size. RFC 1950 only allows window size 7, so the first
499
        // byte must be 0x78.
500
        if (read_byte(compressed, compressed_buf) != 0x78)
6,963✔
501
            return error::corrupt_input;
502
        // The second byte has flags. Bit 5 is the only interesting one, which
503
        // indicates if a custom dictionary was used. We don't support that.
504
        uint8_t flags = read_byte(compressed, compressed_buf);
6,963✔
505
        if (flags & 0b100000)
6,963✔
506
            return error::decompress_unsupported;
507
        algorithm = Algorithm::Deflate;
6,963✔
508
    }
6,963✔
509

510
    auto compression_algorithm = algorithm_to_compression_algorithm(algorithm);
11,397✔
511
    if (!compression_algorithm)
11,397✔
512
        return error::decompress_unsupported;
3✔
513

514
    compression_stream strm;
11,394✔
515
    auto rc = compression_stream_init(&strm, COMPRESSION_STREAM_DECODE, compression_algorithm);
11,394✔
516
    if (rc != COMPRESSION_STATUS_OK)
11,394✔
517
        return error::decompress_error;
518

519
    // Using ScopeExit here warns about missing availability checking, but also
520
    // complains about redundant availability checking if it's added.
521
    struct Cleanup {
11,394✔
522
        compression_stream* strm;
11,394✔
523
        ~Cleanup()
11,394✔
524
        {
11,397✔
525
            compression_stream_destroy(strm);
11,397✔
526
        }
11,397✔
527
    } cleanup{&strm};
11,394✔
528

529
    strm.dst_size = decompressed_buf.size();
11,394✔
530
    strm.dst_ptr = to_bytef(decompressed_buf.data());
11,394✔
531

532
    uint32_t expected_checksum = 0;
11,394✔
533
    uLong actual_checksum = 1;
11,394✔
534
    do {
12,165✔
535
        strm.src_size = compressed_buf.size();
12,165✔
536
        strm.src_ptr = to_bytef(compressed_buf.data());
12,165✔
537

538
        // compression_stream_process() only writes 64 KB at a time, and you
539
        // have to call it in a loop until it stops giving more output before
540
        // feeding in more input
541
        while (rc != COMPRESSION_STATUS_END) {
36,195✔
542
            auto dst_ptr_start = strm.dst_ptr;
24,777✔
543
            rc = compression_stream_process(&strm, 0);
24,777✔
544
            if (rc == COMPRESSION_STATUS_ERROR)
24,777✔
545
                return error::corrupt_input;
546
            if (strm.dst_ptr == dst_ptr_start)
24,777✔
547
                break;
747✔
548

549
            // libcompression doesn't check the checksum, so do it manually.
550
            // This loop will never actually run multiple times as in practice
551
            // libcompression doesn't actually write more bytes than fit in uLong
552
            // in a single call to compression_stream_process()
553
            while (dst_ptr_start < strm.dst_ptr) {
48,060✔
554
                auto size = bounded_avail(strm.dst_ptr - dst_ptr_start);
24,030✔
555
                actual_checksum = adler32(actual_checksum, dst_ptr_start, size);
24,030✔
556
                dst_ptr_start += size;
24,030✔
557
            }
24,030✔
558
        }
24,030✔
559

560
        // The checksum at the end can potentially be straddling a block boundary
561
        // and we can't rewind, so maintain a rolling window of the last four
562
        // bytes seen.
563
        for (uint8_t byte : compressed_buf.last(std::min<size_t>(4u, compressed_buf.size()))) {
47,187✔
564
            expected_checksum <<= 8;
47,187✔
565
            expected_checksum += byte;
47,187✔
566
        }
47,187✔
567
    } while ((compressed_buf = compressed.next_block()), compressed_buf.size());
12,165✔
568
    rc = compression_stream_process(&strm, COMPRESSION_STREAM_FINALIZE);
11,394✔
569
    if (rc != COMPRESSION_STATUS_END)
11,394✔
570
        return error::corrupt_input;
6✔
571
    if (strm.dst_size != 0)
11,388✔
572
        return error::incorrect_decompressed_size;
3✔
573
    if (expected_checksum != actual_checksum)
11,385✔
574
        return error::corrupt_input;
6✔
575
    // Check for remaining extra input
576
    if (strm.src_size || compressed.next_block().size())
11,382✔
577
        return error::corrupt_input;
578
    return std::error_code{};
11,379✔
579
}
11,379✔
580
API_AVAILABLE_END
581
#endif
582

583
std::error_code decompress(InputStream& compressed, Span<const char> compressed_buf, Span<char> decompressed_buf,
584
                           Algorithm algorithm, bool has_header)
585
{
78,135✔
586
    using namespace compression;
78,135✔
587

37,701✔
588
    if (decompressed_buf.size() == 0) {
78,135✔
589
        return std::error_code{};
12✔
590
    }
12✔
591
    if (!compressed_buf.size()) {
78,123✔
592
        return error::incorrect_decompressed_size;
×
593
    }
×
594

37,695✔
595
#if REALM_USE_LIBCOMPRESSION
40,428✔
596
    // All of our non-macOS deployment targets are high enough to have libcompression,
40,428✔
597
    // but we support some older macOS versions
11,397✔
598
    if (__builtin_available(macOS 10.11, *)) {
29,031✔
599
        if (algorithm != Algorithm::None)
37,695✔
600
            return decompress_libcompression(compressed, compressed_buf, decompressed_buf, algorithm, has_header);
66,726✔
601
    }
56,469✔
602
#endif
56,469✔
603

10,251✔
604
    switch (algorithm) {
10,251✔
605
        case Algorithm::None:
3✔
606
            return decompress_none(compressed, compressed_buf, decompressed_buf);
3✔
607
        case Algorithm::Deflate:
66,726✔
608
            return decompress_zlib(compressed, compressed_buf, decompressed_buf, has_header);
66,726✔
609
        default:
610
            return error::decompress_unsupported;
611
    }
612
}
613

614
#if 0
615
struct CompressionStats {
616
    std::mutex mutex;
617
    std::map<size_t, std::pair<size_t, size_t>> stats;
618
    ~CompressionStats()
619
    {
620
        std::lock_guard lock(mutex);
621
        size_t total_uncompressed = 0;
622
        size_t total_compressed = 0;
623
        for (auto& [size, results] : stats) {
624
            fprintf(stderr, "%zu: %zu %g\n", size, results.first, static_cast<double>(results.second) / results.first / size * 100);
625
            total_uncompressed += size * results.first;
626
            total_compressed += results.second;
627
        }
628
        fprintf(stderr, "total: %zu -> %zu (%g%%)\n", total_uncompressed, total_compressed, (double)total_compressed / total_uncompressed * 100.0);
629
    }
630
} s_compression_stats;
631

632
void record_compression_result(size_t uncompressed, size_t compressed)
633
{
634
    std::lock_guard lock(s_compression_stats.mutex);
635
    auto& arr = s_compression_stats.stats[uncompressed];
636
    arr.first++;
123,675✔
637
    arr.second += compressed;
638
}
639
#else
640
void record_compression_result(size_t, size_t) {}
641
#endif
642

643
#if REALM_USE_LIBCOMPRESSION
25,527✔
644
API_AVAILABLE_BEGIN(macos(10.11))
25,527✔
645
std::error_code compress_lzfse(Span<const char> uncompressed_buf, Span<char> compressed_buf,
25,527✔
646
                               std::size_t& compressed_size, compression::Alloc* custom_allocator)
647
{
648
    using namespace compression;
649
    if (compressed_buf.size() < 4)
650
        return error::compress_buffer_too_small;
25,527✔
651
    // compression_encode_buffer() takes a size_t, but crashes if the value is
652
    // larger than 2^31. Using the stream API works, but it's slower for
653
    // normal-sized input, and we can just fall back to zlib for this edge case.
25,527✔
654
    if (uncompressed_buf.size() > std::numeric_limits<int32_t>::max())
25,527✔
655
        return error::compress_input_too_long;
25,527✔
656

25,527✔
657
    auto uncompressed_ptr = to_bytef(uncompressed_buf.data());
658
    auto uncompressed_size = uncompressed_buf.size();
25,527✔
659
    auto compressed_ptr = to_bytef(compressed_buf.data());
25,527✔
660
    auto compressed_buf_size = compressed_buf.size() - 4;
25,527✔
661

25,527✔
662
    void* scratch_buffer = nullptr;
17,010✔
663
    if (custom_allocator) {
8,517✔
664
        scratch_buffer = custom_allocator->alloc(compression_encode_scratch_buffer_size(COMPRESSION_LZFSE));
665
        if (!scratch_buffer)
8,517✔
666
            return error::out_of_memory;
8,517✔
667
    }
8,517✔
668

12✔
669
    size_t bytes = compression_encode_buffer(compressed_ptr, compressed_buf_size, uncompressed_ptr, uncompressed_size,
670
                                             scratch_buffer, COMPRESSION_LZFSE);
671
    if (bytes == 0)
8,505✔
672
        return error::compress_buffer_too_small;
42,525✔
673

34,020✔
674
    // Calculate the checksum and append it to the end of the stream
34,020✔
675
    uLong checksum = htonl(adler32(1, uncompressed_ptr, static_cast<uInt>(uncompressed_size)));
34,020✔
676
    for (int i = 0; i < 4; ++i) {
8,505✔
677
        compressed_buf[bytes + i] = checksum & 0xFF;
8,505✔
678
        checksum >>= 8;
8,505✔
679
    }
680
    compressed_size = bytes + 4;
681
    return std::error_code{};
682
}
683
API_AVAILABLE_END
684
#endif
685

33,000✔
686
std::error_code compress_lzfse_or_zlib(Span<const char> uncompressed_buf, Span<char> compressed_buf,
33,000✔
687
                                       std::size_t& compressed_size, int compression_level,
25,527✔
688
                                       compression::Alloc* custom_allocator)
25,527✔
689
{
25,527✔
690
    using namespace compression;
25,527✔
691
#if REALM_USE_LIBCOMPRESSION
25,527✔
692
    if (__builtin_available(macOS 10.11, *)) {
25,527✔
693
        size_t len = write_header({Algorithm::Lzfse, uncompressed_buf.size()}, compressed_buf);
694
        auto ec = compress_lzfse(uncompressed_buf, compressed_buf.sub_span(len), compressed_size, custom_allocator);
695
        if (ec != error::compress_input_too_long)
7,473✔
696
            return ec;
7,473!
697
    }
7,473✔
698
#endif
7,473✔
699
    size_t len = header_width(uncompressed_buf.size());
7,473!
700
    REALM_ASSERT(len >= 2);
7,461✔
701
    auto ec = compress(uncompressed_buf, compressed_buf.sub_span(len - 2), compressed_size, compression_level,
7,461✔
702
                       custom_allocator);
7,461✔
703
    if (!ec) {
7,461✔
704
        // Note: overwrites zlib header
7,473✔
705
        write_header({Algorithm::Deflate, uncompressed_buf.size()}, compressed_buf);
7,473✔
706
        compressed_size -= 2;
707
    }
708
    return ec;
709
}
710
} // unnamed namespace
×
711

×
712

×
713
const std::error_category& compression::error_category() noexcept
714
{
715
    return g_error_category;
178,050✔
716
}
178,050✔
717

178,050✔
718
std::error_code compression::make_error_code(error error_code) noexcept
719
{
720
    return std::error_code(int(error_code), g_error_category);
721
}
722

723

724
// zlib compression level: 1-9, 1 fastest.
96✔
725

48✔
726
// zlib deflateBound()
48✔
727
std::size_t compression::compress_bound(std::size_t size) noexcept
96✔
728
{
96✔
729
    // DEFLATE's worst-case size is a 6 byte zlib header, plus the uncompressed
×
730
    // data, plus a 5 byte header for every 16383 byte block.
96✔
731
    size_t overhead = 6 + 5 * (size / 16383 + 1);
96✔
732
    if (std::numeric_limits<size_t>::max() - overhead < size)
733
        return 0;
734
    return size + overhead;
735
}
736

737

22,953✔
738
// zlib deflate()
22,953✔
739
std::error_code compression::compress(Span<const char> uncompressed_buf, Span<char> compressed_buf,
22,953✔
740
                                      std::size_t& compressed_size, int compression_level, Alloc* custom_allocator)
22,953✔
741
{
22,953✔
742
    auto uncompressed_ptr = to_bytef(uncompressed_buf.data());
14,793✔
743
    auto uncompressed_size = uncompressed_buf.size();
22,953✔
744
    auto compressed_ptr = to_bytef(compressed_buf.data());
22,953✔
745
    auto compressed_buf_size = compressed_buf.size();
22,851✔
746

22,851✔
747
    z_stream strm = {};
22,851✔
748
    if (custom_allocator) {
22,851✔
749
        strm.opaque = custom_allocator;
14,793✔
750
        strm.zalloc = &custom_alloc;
22,953✔
751
        strm.zfree = &custom_free;
22,953✔
752
    }
14,793✔
753

14,793✔
754
    int rc = deflateInit(&strm, compression_level);
22,953✔
755
    if (rc == Z_MEM_ERROR)
14,793✔
756
        return error::out_of_memory;
14,793✔
757

22,953✔
758
    if (rc != Z_OK)
22,953✔
759
        return error::compress_error;
22,953✔
760

22,953✔
761
    strm.next_in = uncompressed_ptr;
14,793✔
762
    strm.avail_in = 0;
22,953✔
763
    strm.next_out = compressed_ptr;
22,953✔
764
    strm.avail_out = 0;
22,953✔
765

48,069✔
766
    std::size_t next_in_ndx = 0;
27,279✔
767
    std::size_t next_out_ndx = 0;
27,279✔
768
    REALM_ASSERT(rc == Z_OK);
16,563✔
769
    while (rc == Z_OK || rc == Z_BUF_ERROR) {
27,279✔
770
        REALM_ASSERT(strm.next_in + strm.avail_in == uncompressed_ptr + next_in_ndx);
16,563✔
771
        REALM_ASSERT(strm.next_out + strm.avail_out == compressed_ptr + next_out_ndx);
27,279✔
772

22,941✔
773
        bool stream_updated = false;
22,941✔
774

22,941✔
775
        if (strm.avail_in == 0 && next_in_ndx < uncompressed_size) {
22,941✔
776
            auto in_size = bounded_avail(uncompressed_size - next_in_ndx);
22,941✔
777
            next_in_ndx += in_size;
16,563✔
778
            strm.avail_in = uInt(in_size);
27,279✔
779
            stream_updated = true;
22,953✔
780
        }
22,953✔
781

22,953✔
782
        if (strm.avail_out == 0 && next_out_ndx < compressed_buf_size) {
22,953✔
783
            auto out_size = bounded_avail(compressed_buf_size - next_out_ndx);
22,953✔
784
            next_out_ndx += out_size;
16,563✔
785
            strm.avail_out = uInt(out_size);
27,279✔
786
            stream_updated = true;
2,163✔
787
        }
2,163✔
788

2,163✔
789
        if (rc == Z_BUF_ERROR && !stream_updated) {
15,678✔
790
            deflateEnd(&strm);
25,116✔
791
            return error::compress_buffer_too_small;
15,678✔
792
        }
25,116✔
793

25,116✔
794
        int flush = (next_in_ndx == uncompressed_size) ? Z_FINISH : Z_NO_FLUSH;
25,116✔
795

14,793✔
796
        rc = deflate(&strm, flush);
21,675✔
797
        REALM_ASSERT(rc != Z_STREAM_END || flush == Z_FINISH);
×
798
    }
×
799

×
800
    if (rc != Z_STREAM_END) {
13,908✔
801
        deflateEnd(&strm);
20,790✔
802
        return error::compress_error;
13,908✔
803
    }
20,790✔
804

20,790✔
805
    compressed_size = next_out_ndx - strm.avail_out;
13,908✔
806

13,908✔
807
    rc = deflateEnd(&strm);
20,790✔
808
    if (rc != Z_OK)
20,790✔
809
        return error::compress_error;
810

811
    return std::error_code{};
120✔
812
}
120✔
813

120✔
814
std::error_code compression::decompress(InputStream& compressed, Span<char> decompressed_buf)
815
{
816
    return ::decompress(compressed, compressed.next_block(), decompressed_buf, Algorithm::Deflate, true);
13,392✔
817
}
13,392✔
818

13,392✔
819
std::error_code compression::decompress(Span<const char> compressed_buf, Span<char> decompressed_buf)
13,392✔
820
{
821
    SimpleInputStream adapter(compressed_buf);
822
    return ::decompress(adapter, adapter.next_block(), decompressed_buf, Algorithm::Deflate, true);
65,199✔
823
}
65,199✔
824

65,199✔
825
std::error_code compression::decompress_nonportable(InputStream& compressed, AppendBuffer<char>& decompressed)
65,199✔
826
{
6✔
827
    auto compressed_buf = compressed.next_block();
65,193✔
828
    auto header = read_header(compressed, compressed_buf);
65,193✔
829
    if (header.size == std::numeric_limits<size_t>::max())
573✔
830
        return error::out_of_memory;
64,620✔
831
    decompressed.resize(header.size);
64,620✔
832
    if (header.size == 0)
833
        return std::error_code{};
834
    return ::decompress(compressed, compressed_buf, decompressed, header.algorithm, false);
835
}
836

13,233✔
837
std::error_code compression::allocate_and_compress(CompressMemoryArena& compress_memory_arena,
13,233✔
838
                                                   Span<const char> uncompressed_buf,
13,233✔
839
                                                   std::vector<char>& compressed_buf)
6,399✔
840
{
13,233✔
841
    const int compression_level = 1;
12,609✔
842
    std::size_t compressed_size = 0;
6,399✔
843

15,378✔
844
    if (compressed_buf.size() < 256)
15,378✔
845
        compressed_buf.resize(256); // Throws
15,378✔
846

15,378✔
847
    for (;;) {
7,269✔
848
        init_arena(compress_memory_arena);
15,378✔
849
        std::error_code ec = compression::compress(uncompressed_buf, compressed_buf, compressed_size,
2,145✔
850
                                                   compression_level, &compress_memory_arena);
2,145✔
851

2,145✔
852
        if (REALM_UNLIKELY(ec)) {
2,145✔
853
            if (ec == compression::error::compress_buffer_too_small) {
×
854
                std::size_t n = compressed_buf.size();
2,145✔
855
                REALM_ASSERT(n != std::numeric_limits<std::size_t>::max());
2,145✔
856
                if (util::int_multiply_with_overflow_detect(n, 2))
2,145✔
857
                    n = std::numeric_limits<std::size_t>::max();
×
858
                compressed_buf.resize(n); // Throws
×
859
                continue;
×
860
            }
×
861
            if (ec == compression::error::out_of_memory) {
×
862
                grow_arena(compress_memory_arena); // Throws
×
863
                continue;
13,233✔
864
            }
13,233✔
865
            return ec;
13,233✔
866
        }
13,233✔
867
        break;
13,233✔
868
    }
869
    compressed_buf.resize(compressed_size);
870
    return std::error_code{};
871
}
175,965✔
872

175,965✔
873
void compression::allocate_and_compress_nonportable(CompressMemoryArena& arena, Span<const char> uncompressed,
52,296✔
874
                                                    util::AppendBuffer<char>& compressed)
52,296✔
875
{
52,296✔
876
    if (uncompressed.size() == 0) {
60,801✔
877
        compressed.resize(0);
123,669✔
878
        return;
123,669✔
879
    }
123,669✔
880

60,801✔
881
    size_t header_size = header_width(uncompressed.size());
60,801✔
882
    compressed.resize(uncompressed.size() + header_size);
60,801✔
883
    size_t compressed_size = 0;
140,679✔
884
    // zlib is ineffective for very small sizes. Measured results indicate that
33,000✔
885
    // it only manages to compress at all past 100 bytes and the compression
33,000✔
886
    // ratio becomes interesting around 200 bytes.
33,000✔
887
    while (uncompressed.size() > 256) {
33,000✔
888
        init_arena(arena);
12✔
889
        const int compression_level = 1;
12✔
890
        auto ec = compress_lzfse_or_zlib(uncompressed, compressed, compressed_size, compression_level, &arena);
24✔
891
        if (ec == error::compress_buffer_too_small) {
24✔
892
            // Compressed result was larger than uncompressed, so just store the
24✔
893
            // uncompressed
32,976✔
894
            compressed_size = 0;
17,010✔
895
            break;
17,010✔
896
        }
17,010✔
897
        if (ec == compression::error::out_of_memory) {
15,966✔
898
            grow_arena(arena); // Throws
×
899
            continue;
×
900
        }
15,966✔
901
        if (ec) {
15,966✔
902
            throw std::system_error(ec);
15,966✔
903
        }
15,966✔
904
        REALM_ASSERT(compressed_size);
15,966✔
905
        compressed_size += header_size;
15,966✔
906
        record_compression_result(uncompressed.size(), compressed_size);
60,801✔
907
        compressed.resize(compressed_size);
60,801✔
908
        return;
60,801✔
909
    }
115,164✔
910

107,706✔
911
    // If compression made it grow or it was too small to compress then copy
107,706✔
912
    // the source over uncompressed
107,706✔
913
    if (!compressed_size) {
107,706✔
914
        record_compression_result(uncompressed.size(), uncompressed.size() + header_size);
107,703✔
915
        write_header({Algorithm::None, uncompressed.size()}, compressed);
916
        std::memcpy(compressed.data() + header_size, uncompressed.data(), uncompressed.size());
917
    }
173,553✔
918
}
173,553✔
919

173,553✔
920
util::AppendBuffer<char> compression::allocate_and_compress_nonportable(Span<const char> uncompressed_buf)
173,553✔
921
{
173,553✔
922
    util::compression::CompressMemoryArena arena;
173,553✔
923
    util::AppendBuffer<char> compressed;
924
    allocate_and_compress_nonportable(arena, uncompressed_buf, compressed);
925
    return compressed;
90,738✔
926
}
90,738✔
927

90,738✔
928
std::unique_ptr<InputStream> compression::decompress_nonportable_input_stream(InputStream& source, size_t& total_size)
90,738✔
929
{
6✔
930
    auto first_block = source.next_block();
90,732✔
931
    auto header = read_header(source, first_block);
49,491✔
932
    if (header.size == std::numeric_limits<size_t>::max())
90,732✔
933
        return nullptr;
88,323✔
934
    total_size = header.size;
1,203✔
935

1,209✔
936
    if (header.algorithm == Algorithm::None)
1,206✔
937
        return std::make_unique<DecompressInputStreamNone>(source, first_block);
2,147,483,647✔
938
#if REALM_USE_LIBCOMPRESSION
2,147,484,853✔
939
    if (__builtin_available(macOS 10.11, *)) {
1,206✔
940
        if (header.algorithm == Algorithm::Deflate || header.algorithm == Algorithm::Lzfse)
2,147,483,647✔
941
            return std::make_unique<DecompressInputStreamLibCompression>(source, first_block, header);
2,147,483,647✔
942
    }
943
#endif
944
    if (header.algorithm == Algorithm::Deflate)
167,127✔
945
        return std::make_unique<DecompressInputStreamZlib>(source, first_block, total_size);
167,127✔
946
    return nullptr;
167,127✔
947
}
167,127✔
948

949
size_t compression::get_uncompressed_size_from_header(InputStream& source)
950
{
951
    auto first_block = source.next_block();
952
    return read_header(source, first_block).size;
953
}
STATUS · Troubleshooting · Open an Issue · Sales · Support · CAREERS · ENTERPRISE · START FREE · SCHEDULE DEMO
ANNOUNCEMENTS · TWITTER · TOS & SLA · Supported CI Services · What's a CI service? · Automated Testing

© 2026 Coveralls, Inc