mirror of https://github.com/grpc/grpc.git
The C based gRPC (C++, Python, Ruby, Objective-C, PHP, C#)
https://grpc.io/
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
460 lines
17 KiB
460 lines
17 KiB
// Copyright 2022 Google LLC |
|
// |
|
// Use of this source code is governed by an MIT-style |
|
// license that can be found in the LICENSE file or at |
|
// https://opensource.org/licenses/MIT. |
|
|
|
/* This is a wrapper for the Google range-sse.cc algorithm which checks whether a |
|
* sequence of bytes is a valid UTF-8 sequence and finds the longest valid prefix of |
|
* the UTF-8 sequence. |
|
* |
|
* The key difference is that it checks for as much ASCII symbols as possible |
|
* and then falls back to the range-sse.cc algorithm. The changes to the |
|
* algorithm are cosmetic, mostly to trick the clang compiler to produce optimal |
|
* code. |
|
* |
|
* For API see the utf8_validity.h header. |
|
*/ |
|
#include "utf8_validity.h" |
|
|
|
#include <cstddef> |
|
#include <cstdint> |
|
|
|
#include "absl/strings/ascii.h" |
|
#include "absl/strings/string_view.h" |
|
|
|
#ifdef __SSE4_1__ |
|
#include <emmintrin.h> |
|
#include <smmintrin.h> |
|
#include <tmmintrin.h> |
|
#endif |
|
|
|
namespace utf8_range { |
|
namespace { |
|
|
|
inline uint64_t UNALIGNED_LOAD64(const void* p) { |
|
uint64_t t; |
|
memcpy(&t, p, sizeof t); |
|
return t; |
|
} |
|
|
|
inline bool TrailByteOk(const char c) { |
|
return static_cast<int8_t>(c) <= static_cast<int8_t>(0xBF); |
|
} |
|
|
|
/* If ReturnPosition is false then it returns 1 if |data| is a valid utf8 |
|
* sequence, otherwise returns 0. |
|
* If ReturnPosition is set to true, returns the length in bytes of the prefix |
|
of |data| that is all structurally valid UTF-8. |
|
*/ |
|
template <bool ReturnPosition> |
|
size_t ValidUTF8Span(const char* data, const char* end) { |
|
/* We return err_pos in the loop which is always 0 if !ReturnPosition */ |
|
size_t err_pos = 0; |
|
size_t codepoint_bytes = 0; |
|
/* The early check is done because of early continue's on codepoints of all |
|
* sizes, i.e. we first check for ascii and if it is, we call continue, then |
|
* for 2 byte codepoints, etc. This is done in order to reduce indentation and |
|
* improve readability of the codepoint validity check. |
|
*/ |
|
while (data + codepoint_bytes < end) { |
|
if (ReturnPosition) { |
|
err_pos += codepoint_bytes; |
|
} |
|
data += codepoint_bytes; |
|
const size_t len = end - data; |
|
const unsigned char byte1 = data[0]; |
|
|
|
/* We do not skip many ascii bytes at the same time as this function is |
|
used for tail checking (< 16 bytes) and for non x86 platforms. We also |
|
don't think that cases where non-ASCII codepoints are followed by ascii |
|
happen often. For small strings it also introduces some penalty. For |
|
purely ascii UTF8 strings (which is the overwhelming case) we call |
|
SkipAscii function which is multiplatform and extremely fast. |
|
*/ |
|
/* [00..7F] ASCII -> 1 byte */ |
|
if (absl::ascii_isascii(byte1)) { |
|
codepoint_bytes = 1; |
|
continue; |
|
} |
|
/* [C2..DF], [80..BF] -> 2 bytes */ |
|
if (len >= 2 && byte1 >= 0xC2 && byte1 <= 0xDF && TrailByteOk(data[1])) { |
|
codepoint_bytes = 2; |
|
continue; |
|
} |
|
if (len >= 3) { |
|
const unsigned char byte2 = data[1]; |
|
const unsigned char byte3 = data[2]; |
|
|
|
/* Is byte2, byte3 between [0x80, 0xBF] |
|
* Check for 0x80 was done above. |
|
*/ |
|
if (!TrailByteOk(byte2) || !TrailByteOk(byte3)) { |
|
return err_pos; |
|
} |
|
|
|
if (/* E0, A0..BF, 80..BF */ |
|
((byte1 == 0xE0 && byte2 >= 0xA0) || |
|
/* E1..EC, 80..BF, 80..BF */ |
|
(byte1 >= 0xE1 && byte1 <= 0xEC) || |
|
/* ED, 80..9F, 80..BF */ |
|
(byte1 == 0xED && byte2 <= 0x9F) || |
|
/* EE..EF, 80..BF, 80..BF */ |
|
(byte1 >= 0xEE && byte1 <= 0xEF))) { |
|
codepoint_bytes = 3; |
|
continue; |
|
} |
|
if (len >= 4) { |
|
const unsigned char byte4 = data[3]; |
|
/* Is byte4 between 0x80 ~ 0xBF */ |
|
if (!TrailByteOk(byte4)) { |
|
return err_pos; |
|
} |
|
|
|
if (/* F0, 90..BF, 80..BF, 80..BF */ |
|
((byte1 == 0xF0 && byte2 >= 0x90) || |
|
/* F1..F3, 80..BF, 80..BF, 80..BF */ |
|
(byte1 >= 0xF1 && byte1 <= 0xF3) || |
|
/* F4, 80..8F, 80..BF, 80..BF */ |
|
(byte1 == 0xF4 && byte2 <= 0x8F))) { |
|
codepoint_bytes = 4; |
|
continue; |
|
} |
|
} |
|
} |
|
return err_pos; |
|
} |
|
if (ReturnPosition) { |
|
err_pos += codepoint_bytes; |
|
} |
|
/* if ReturnPosition is false, this returns 1. |
|
* if ReturnPosition is true, this returns err_pos. |
|
*/ |
|
return err_pos + (1 - ReturnPosition); |
|
} |
|
|
|
#ifdef __SSE4_1__ |
|
/* Returns the number of bytes needed to skip backwards to get to the first |
|
byte of codepoint. |
|
*/ |
|
inline int CodepointSkipBackwards(int32_t codepoint_word) { |
|
const int8_t* const codepoint = |
|
reinterpret_cast<const int8_t*>(&codepoint_word); |
|
if (!TrailByteOk(codepoint[3])) { |
|
return 1; |
|
} else if (!TrailByteOk(codepoint[2])) { |
|
return 2; |
|
} else if (!TrailByteOk(codepoint[1])) { |
|
return 3; |
|
} |
|
return 0; |
|
} |
|
#endif // __SSE4_1__ |
|
|
|
/* Skipping over ASCII as much as possible, per 8 bytes. It is intentional |
|
as most strings to check for validity consist only of 1 byte codepoints. |
|
*/ |
|
inline const char* SkipAscii(const char* data, const char* end) { |
|
while (8 <= end - data && |
|
(UNALIGNED_LOAD64(data) & 0x8080808080808080) == 0) { |
|
data += 8; |
|
} |
|
while (data < end && absl::ascii_isascii(*data)) { |
|
++data; |
|
} |
|
return data; |
|
} |
|
|
|
template <bool ReturnPosition> |
|
size_t ValidUTF8(const char* data, size_t len) { |
|
if (len == 0) return 1 - ReturnPosition; |
|
const char* const end = data + len; |
|
data = SkipAscii(data, end); |
|
/* SIMD algorithm always outperforms the naive version for any data of |
|
length >=16. |
|
*/ |
|
if (end - data < 16) { |
|
return (ReturnPosition ? (data - (end - len)) : 0) + |
|
ValidUTF8Span<ReturnPosition>(data, end); |
|
} |
|
#ifndef __SSE4_1__ |
|
return (ReturnPosition ? (data - (end - len)) : 0) + |
|
ValidUTF8Span<ReturnPosition>(data, end); |
|
#else |
|
/* This code checks that utf-8 ranges are structurally valid 16 bytes at once |
|
* using superscalar instructions. |
|
* The mapping between ranges of codepoint and their corresponding utf-8 |
|
* sequences is below. |
|
*/ |
|
|
|
/* |
|
* U+0000...U+007F 00...7F |
|
* U+0080...U+07FF C2...DF 80...BF |
|
* U+0800...U+0FFF E0 A0...BF 80...BF |
|
* U+1000...U+CFFF E1...EC 80...BF 80...BF |
|
* U+D000...U+D7FF ED 80...9F 80...BF |
|
* U+E000...U+FFFF EE...EF 80...BF 80...BF |
|
* U+10000...U+3FFFF F0 90...BF 80...BF 80...BF |
|
* U+40000...U+FFFFF F1...F3 80...BF 80...BF 80...BF |
|
* U+100000...U+10FFFF F4 80...8F 80...BF 80...BF |
|
*/ |
|
|
|
/* First we compute the type for each byte, as given by the table below. |
|
* This type will be used as an index later on. |
|
*/ |
|
|
|
/* |
|
* Index Min Max Byte Type |
|
* 0 00 7F Single byte sequence |
|
* 1,2,3 80 BF Second, third and fourth byte for many of the sequences. |
|
* 4 A0 BF Second byte after E0 |
|
* 5 80 9F Second byte after ED |
|
* 6 90 BF Second byte after F0 |
|
* 7 80 8F Second byte after F4 |
|
* 8 C2 F4 First non ASCII byte |
|
* 9..15 7F 80 Invalid byte |
|
*/ |
|
|
|
/* After the first step we compute the index for all bytes, then we permute |
|
the bytes according to their indices to check the ranges from the range |
|
table. |
|
* The range for a given type can be found in the range_min_table and |
|
range_max_table, the range for type/index X is in range_min_table[X] ... |
|
range_max_table[X]. |
|
*/ |
|
|
|
/* Algorithm: |
|
* Put index zero to all bytes. |
|
* Find all non ASCII characters, give them index 8. |
|
* For each tail byte in a codepoint sequence, give it an index corresponding |
|
to the 1 based index from the end. |
|
* If the first byte of the codepoint is in the [C0...DF] range, we write |
|
index 1 in the following byte. |
|
* If the first byte of the codepoint is in the range [E0...EF], we write |
|
indices 2 and 1 in the next two bytes. |
|
* If the first byte of the codepoint is in the range [F0...FF] we write |
|
indices 3,2,1 into the next three bytes. |
|
* For finding the number of bytes we need to look at high nibbles (4 bits) |
|
and do the lookup from the table, it can be done with shift by 4 + shuffle |
|
instructions. We call it `first_len`. |
|
* Then we shift first_len by 8 bits to get the indices of the 2nd bytes. |
|
* Saturating sub 1 and shift by 8 bits to get the indices of the 3rd bytes. |
|
* Again to get the indices of the 4th bytes. |
|
* Take OR of all that 4 values and check within range. |
|
*/ |
|
/* For example: |
|
* input C3 80 68 E2 80 20 A6 F0 A0 80 AC 20 F0 93 80 80 |
|
* first_len 1 0 0 2 0 0 0 3 0 0 0 0 3 0 0 0 |
|
* 1st byte 8 0 0 8 0 0 0 8 0 0 0 0 8 0 0 0 |
|
* 2nd byte 0 1 0 0 2 0 0 0 3 0 0 0 0 3 0 0 // Shift + sub |
|
* 3rd byte 0 0 0 0 0 1 0 0 0 2 0 0 0 0 2 0 // Shift + sub |
|
* 4th byte 0 0 0 0 0 0 0 0 0 0 1 0 0 0 0 1 // Shift + sub |
|
* Index 8 1 0 8 2 1 0 8 3 2 1 0 8 3 2 1 // OR of results |
|
*/ |
|
|
|
/* Checking for errors: |
|
* Error checking is done by looking up the high nibble (4 bits) of each byte |
|
against an error checking table. |
|
* Because the lookup value for the second byte depends of the value of the |
|
first byte in codepoint, we use saturated operations to adjust the index. |
|
* Specifically we need to add 2 for E0, 3 for ED, 3 for F0 and 4 for F4 to |
|
match the correct index. |
|
* If we subtract from all bytes EF then EO -> 241, ED -> 254, F0 -> 1, |
|
F4 -> 5 |
|
* Do saturating sub 240, then E0 -> 1, ED -> 14 and we can do lookup to |
|
match the adjustment |
|
* Add saturating 112, then F0 -> 113, F4 -> 117, all that were > 16 will |
|
be more 128 and lookup in ef_fe_table will return 0 but for F0 |
|
and F4 it will be 4 and 5 accordingly |
|
*/ |
|
/* |
|
* Then just check the appropriate ranges with greater/smaller equal |
|
instructions. Check tail with a naive algorithm. |
|
* To save from previous 16 byte checks we just align previous_first_len to |
|
get correct continuations of the codepoints. |
|
*/ |
|
|
|
/* |
|
* Map high nibble of "First Byte" to legal character length minus 1 |
|
* 0x00 ~ 0xBF --> 0 |
|
* 0xC0 ~ 0xDF --> 1 |
|
* 0xE0 ~ 0xEF --> 2 |
|
* 0xF0 ~ 0xFF --> 3 |
|
*/ |
|
const __m128i first_len_table = |
|
_mm_setr_epi8(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 1, 1, 2, 3); |
|
|
|
/* Map "First Byte" to 8-th item of range table (0xC2 ~ 0xF4) */ |
|
const __m128i first_range_table = |
|
_mm_setr_epi8(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 8, 8, 8, 8); |
|
|
|
/* |
|
* Range table, map range index to min and max values |
|
*/ |
|
const __m128i range_min_table = |
|
_mm_setr_epi8(0x00, 0x80, 0x80, 0x80, 0xA0, 0x80, 0x90, 0x80, 0xC2, 0x7F, |
|
0x7F, 0x7F, 0x7F, 0x7F, 0x7F, 0x7F); |
|
|
|
const __m128i range_max_table = |
|
_mm_setr_epi8(0x7F, 0xBF, 0xBF, 0xBF, 0xBF, 0x9F, 0xBF, 0x8F, 0xF4, 0x80, |
|
0x80, 0x80, 0x80, 0x80, 0x80, 0x80); |
|
|
|
/* |
|
* Tables for fast handling of four special First Bytes(E0,ED,F0,F4), after |
|
* which the Second Byte are not 80~BF. It contains "range index adjustment". |
|
* +------------+---------------+------------------+----------------+ |
|
* | First Byte | original range| range adjustment | adjusted range | |
|
* +------------+---------------+------------------+----------------+ |
|
* | E0 | 2 | 2 | 4 | |
|
* +------------+---------------+------------------+----------------+ |
|
* | ED | 2 | 3 | 5 | |
|
* +------------+---------------+------------------+----------------+ |
|
* | F0 | 3 | 3 | 6 | |
|
* +------------+---------------+------------------+----------------+ |
|
* | F4 | 4 | 4 | 8 | |
|
* +------------+---------------+------------------+----------------+ |
|
*/ |
|
|
|
/* df_ee_table[1] -> E0, df_ee_table[14] -> ED as ED - E0 = 13 */ |
|
// The values represent the adjustment in the Range Index table for a correct |
|
// index. |
|
const __m128i df_ee_table = |
|
_mm_setr_epi8(0, 2, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 3, 0); |
|
|
|
/* ef_fe_table[1] -> F0, ef_fe_table[5] -> F4, F4 - F0 = 4 */ |
|
// The values represent the adjustment in the Range Index table for a correct |
|
// index. |
|
const __m128i ef_fe_table = |
|
_mm_setr_epi8(0, 3, 0, 0, 0, 4, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0); |
|
|
|
__m128i prev_input = _mm_set1_epi8(0); |
|
__m128i prev_first_len = _mm_set1_epi8(0); |
|
__m128i error = _mm_set1_epi8(0); |
|
while (end - data >= 16) { |
|
const __m128i input = |
|
_mm_loadu_si128(reinterpret_cast<const __m128i*>(data)); |
|
|
|
/* high_nibbles = input >> 4 */ |
|
const __m128i high_nibbles = |
|
_mm_and_si128(_mm_srli_epi16(input, 4), _mm_set1_epi8(0x0F)); |
|
|
|
/* first_len = legal character length minus 1 */ |
|
/* 0 for 00~7F, 1 for C0~DF, 2 for E0~EF, 3 for F0~FF */ |
|
/* first_len = first_len_table[high_nibbles] */ |
|
__m128i first_len = _mm_shuffle_epi8(first_len_table, high_nibbles); |
|
|
|
/* First Byte: set range index to 8 for bytes within 0xC0 ~ 0xFF */ |
|
/* range = first_range_table[high_nibbles] */ |
|
__m128i range = _mm_shuffle_epi8(first_range_table, high_nibbles); |
|
|
|
/* Second Byte: set range index to first_len */ |
|
/* 0 for 00~7F, 1 for C0~DF, 2 for E0~EF, 3 for F0~FF */ |
|
/* range |= (first_len, prev_first_len) << 1 byte */ |
|
range = _mm_or_si128(range, _mm_alignr_epi8(first_len, prev_first_len, 15)); |
|
|
|
/* Third Byte: set range index to saturate_sub(first_len, 1) */ |
|
/* 0 for 00~7F, 0 for C0~DF, 1 for E0~EF, 2 for F0~FF */ |
|
__m128i tmp1; |
|
__m128i tmp2; |
|
/* tmp1 = saturate_sub(first_len, 1) */ |
|
tmp1 = _mm_subs_epu8(first_len, _mm_set1_epi8(1)); |
|
/* tmp2 = saturate_sub(prev_first_len, 1) */ |
|
tmp2 = _mm_subs_epu8(prev_first_len, _mm_set1_epi8(1)); |
|
/* range |= (tmp1, tmp2) << 2 bytes */ |
|
range = _mm_or_si128(range, _mm_alignr_epi8(tmp1, tmp2, 14)); |
|
|
|
/* Fourth Byte: set range index to saturate_sub(first_len, 2) */ |
|
/* 0 for 00~7F, 0 for C0~DF, 0 for E0~EF, 1 for F0~FF */ |
|
/* tmp1 = saturate_sub(first_len, 2) */ |
|
tmp1 = _mm_subs_epu8(first_len, _mm_set1_epi8(2)); |
|
/* tmp2 = saturate_sub(prev_first_len, 2) */ |
|
tmp2 = _mm_subs_epu8(prev_first_len, _mm_set1_epi8(2)); |
|
/* range |= (tmp1, tmp2) << 3 bytes */ |
|
range = _mm_or_si128(range, _mm_alignr_epi8(tmp1, tmp2, 13)); |
|
|
|
/* |
|
* Now we have below range indices calculated |
|
* Correct cases: |
|
* - 8 for C0~FF |
|
* - 3 for 1st byte after F0~FF |
|
* - 2 for 1st byte after E0~EF or 2nd byte after F0~FF |
|
* - 1 for 1st byte after C0~DF or 2nd byte after E0~EF or |
|
* 3rd byte after F0~FF |
|
* - 0 for others |
|
* Error cases: |
|
* >9 for non ascii First Byte overlapping |
|
* E.g., F1 80 C2 90 --> 8 3 10 2, where 10 indicates error |
|
*/ |
|
|
|
/* Adjust Second Byte range for special First Bytes(E0,ED,F0,F4) */ |
|
/* Overlaps lead to index 9~15, which are illegal in range table */ |
|
__m128i shift1; |
|
__m128i pos; |
|
__m128i range2; |
|
/* shift1 = (input, prev_input) << 1 byte */ |
|
shift1 = _mm_alignr_epi8(input, prev_input, 15); |
|
pos = _mm_sub_epi8(shift1, _mm_set1_epi8(0xEF)); |
|
/* |
|
* shift1: | EF F0 ... FE | FF 00 ... ... DE | DF E0 ... EE | |
|
* pos: | 0 1 15 | 16 17 239| 240 241 255| |
|
* pos-240: | 0 0 0 | 0 0 0 | 0 1 15 | |
|
* pos+112: | 112 113 127| >= 128 | >= 128 | |
|
*/ |
|
tmp1 = _mm_subs_epu8(pos, _mm_set1_epi8(-16)); |
|
range2 = _mm_shuffle_epi8(df_ee_table, tmp1); |
|
tmp2 = _mm_adds_epu8(pos, _mm_set1_epi8(112)); |
|
range2 = _mm_add_epi8(range2, _mm_shuffle_epi8(ef_fe_table, tmp2)); |
|
|
|
range = _mm_add_epi8(range, range2); |
|
|
|
/* Load min and max values per calculated range index */ |
|
__m128i min_range = _mm_shuffle_epi8(range_min_table, range); |
|
__m128i max_range = _mm_shuffle_epi8(range_max_table, range); |
|
|
|
/* Check value range */ |
|
if (ReturnPosition) { |
|
error = _mm_cmplt_epi8(input, min_range); |
|
error = _mm_or_si128(error, _mm_cmpgt_epi8(input, max_range)); |
|
/* 5% performance drop from this conditional branch */ |
|
if (!_mm_testz_si128(error, error)) { |
|
break; |
|
} |
|
} else { |
|
error = _mm_or_si128(error, _mm_cmplt_epi8(input, min_range)); |
|
error = _mm_or_si128(error, _mm_cmpgt_epi8(input, max_range)); |
|
} |
|
|
|
prev_input = input; |
|
prev_first_len = first_len; |
|
|
|
data += 16; |
|
} |
|
/* If we got to the end, we don't need to skip any bytes backwards */ |
|
if (ReturnPosition && (data - (end - len)) == 0) { |
|
return ValidUTF8Span<true>(data, end); |
|
} |
|
/* Find previous codepoint (not 80~BF) */ |
|
data -= CodepointSkipBackwards(_mm_extract_epi32(prev_input, 3)); |
|
if (ReturnPosition) { |
|
return (data - (end - len)) + ValidUTF8Span<true>(data, end); |
|
} |
|
/* Test if there was any error */ |
|
if (!_mm_testz_si128(error, error)) { |
|
return 0; |
|
} |
|
/* Check the tail */ |
|
return ValidUTF8Span<false>(data, end); |
|
#endif |
|
} |
|
|
|
} // namespace |
|
|
|
bool IsStructurallyValid(absl::string_view str) { |
|
return ValidUTF8</*ReturnPosition=*/false>(str.data(), str.size()); |
|
} |
|
|
|
size_t SpanStructurallyValid(absl::string_view str) { |
|
return ValidUTF8</*ReturnPosition=*/true>(str.data(), str.size()); |
|
} |
|
|
|
} // namespace utf8_range
|
|
|