cannam@62
|
1 // Copyright (c) 2013-2014 Sandstorm Development Group, Inc. and contributors
|
cannam@62
|
2 // Licensed under the MIT License:
|
cannam@62
|
3 //
|
cannam@62
|
4 // Permission is hereby granted, free of charge, to any person obtaining a copy
|
cannam@62
|
5 // of this software and associated documentation files (the "Software"), to deal
|
cannam@62
|
6 // in the Software without restriction, including without limitation the rights
|
cannam@62
|
7 // to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
cannam@62
|
8 // copies of the Software, and to permit persons to whom the Software is
|
cannam@62
|
9 // furnished to do so, subject to the following conditions:
|
cannam@62
|
10 //
|
cannam@62
|
11 // The above copyright notice and this permission notice shall be included in
|
cannam@62
|
12 // all copies or substantial portions of the Software.
|
cannam@62
|
13 //
|
cannam@62
|
14 // THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
cannam@62
|
15 // IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
cannam@62
|
16 // FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
cannam@62
|
17 // AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
cannam@62
|
18 // LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
cannam@62
|
19 // OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
cannam@62
|
20 // THE SOFTWARE.
|
cannam@62
|
21
|
cannam@62
|
22 #ifndef CAPNP_SCHEMA_LOADER_H_
|
cannam@62
|
23 #define CAPNP_SCHEMA_LOADER_H_
|
cannam@62
|
24
|
cannam@62
|
25 #if defined(__GNUC__) && !defined(CAPNP_HEADER_WARNINGS)
|
cannam@62
|
26 #pragma GCC system_header
|
cannam@62
|
27 #endif
|
cannam@62
|
28
|
cannam@62
|
29 #include "schema.h"
|
cannam@62
|
30 #include <kj/memory.h>
|
cannam@62
|
31 #include <kj/mutex.h>
|
cannam@62
|
32
|
cannam@62
|
33 namespace capnp {
|
cannam@62
|
34
|
cannam@62
|
35 class SchemaLoader {
|
cannam@62
|
36 // Class which can be used to construct Schema objects from schema::Nodes as defined in
|
cannam@62
|
37 // schema.capnp.
|
cannam@62
|
38 //
|
cannam@62
|
39 // It is a bad idea to use this class on untrusted input with exceptions disabled -- you may
|
cannam@62
|
40 // be exposing yourself to denial-of-service attacks, as attackers can easily construct schemas
|
cannam@62
|
41 // that are subtly inconsistent in a way that causes exceptions to be thrown either by
|
cannam@62
|
42 // SchemaLoader or by the dynamic API when the schemas are subsequently used. If you enable and
|
cannam@62
|
43 // properly catch exceptions, you should be OK -- assuming no bugs in the Cap'n Proto
|
cannam@62
|
44 // implementation, of course.
|
cannam@62
|
45
|
cannam@62
|
46 public:
|
cannam@62
|
47 class LazyLoadCallback {
|
cannam@62
|
48 public:
|
cannam@62
|
49 virtual void load(const SchemaLoader& loader, uint64_t id) const = 0;
|
cannam@62
|
50 // Request that the schema node with the given ID be loaded into the given SchemaLoader. If
|
cannam@62
|
51 // the callback is able to find a schema for this ID, it should invoke `loadOnce()` on
|
cannam@62
|
52 // `loader` to load it. If no such node exists, it should simply do nothing and return.
|
cannam@62
|
53 //
|
cannam@62
|
54 // The callback is allowed to load schema nodes other than the one requested, e.g. because it
|
cannam@62
|
55 // expects they will be needed soon.
|
cannam@62
|
56 //
|
cannam@62
|
57 // If the `SchemaLoader` is used from multiple threads, the callback must be thread-safe.
|
cannam@62
|
58 // In particular, it's possible for multiple threads to invoke `load()` with the same ID.
|
cannam@62
|
59 // If the callback performs a large amount of work to look up IDs, it should be sure to
|
cannam@62
|
60 // de-dup these requests.
|
cannam@62
|
61 };
|
cannam@62
|
62
|
cannam@62
|
63 SchemaLoader();
|
cannam@62
|
64
|
cannam@62
|
65 SchemaLoader(const LazyLoadCallback& callback);
|
cannam@62
|
66 // Construct a SchemaLoader which will invoke the given callback when a schema node is requested
|
cannam@62
|
67 // that isn't already loaded.
|
cannam@62
|
68
|
cannam@62
|
69 ~SchemaLoader() noexcept(false);
|
cannam@62
|
70 KJ_DISALLOW_COPY(SchemaLoader);
|
cannam@62
|
71
|
cannam@62
|
72 Schema get(uint64_t id, schema::Brand::Reader brand = schema::Brand::Reader(),
|
cannam@62
|
73 Schema scope = Schema()) const;
|
cannam@62
|
74 // Gets the schema for the given ID, throwing an exception if it isn't present.
|
cannam@62
|
75 //
|
cannam@62
|
76 // The returned schema may be invalidated if load() is called with a new schema for the same ID.
|
cannam@62
|
77 // In general, you should not call load() while a schema from this loader is in-use.
|
cannam@62
|
78 //
|
cannam@62
|
79 // `brand` and `scope` are used to determine brand bindings where relevant. `brand` gives
|
cannam@62
|
80 // parameter bindings for the target type's brand parameters that were specified at the reference
|
cannam@62
|
81 // site. `scope` specifies the scope in which the type ID appeared -- if `brand` itself contains
|
cannam@62
|
82 // parameter references or indicates that some parameters will be inherited, these will be
|
cannam@62
|
83 // interpreted within / inherited from `scope`.
|
cannam@62
|
84
|
cannam@62
|
85 kj::Maybe<Schema> tryGet(uint64_t id, schema::Brand::Reader bindings = schema::Brand::Reader(),
|
cannam@62
|
86 Schema scope = Schema()) const;
|
cannam@62
|
87 // Like get() but doesn't throw.
|
cannam@62
|
88
|
cannam@62
|
89 Schema getUnbound(uint64_t id) const;
|
cannam@62
|
90 // Gets a special version of the schema in which all brand parameters are "unbound". This means
|
cannam@62
|
91 // that if you look up a type via the Schema API, and it resolves to a brand parameter, the
|
cannam@62
|
92 // returned Type's getBrandParameter() method will return info about that parameter. Otherwise,
|
cannam@62
|
93 // normally, all brand parameters that aren't otherwise bound are assumed to simply be
|
cannam@62
|
94 // "AnyPointer".
|
cannam@62
|
95
|
cannam@62
|
96 Type getType(schema::Type::Reader type, Schema scope = Schema()) const;
|
cannam@62
|
97 // Convenience method which interprets a schema::Type to produce a Type object. Implemented in
|
cannam@62
|
98 // terms of get().
|
cannam@62
|
99
|
cannam@62
|
100 Schema load(const schema::Node::Reader& reader);
|
cannam@62
|
101 // Loads the given schema node. Validates the node and throws an exception if invalid. This
|
cannam@62
|
102 // makes a copy of the schema, so the object passed in can be destroyed after this returns.
|
cannam@62
|
103 //
|
cannam@62
|
104 // If the node has any dependencies which are not already loaded, they will be initialized as
|
cannam@62
|
105 // stubs -- empty schemas of whichever kind is expected.
|
cannam@62
|
106 //
|
cannam@62
|
107 // If another schema for the given reader has already been seen, the loader will inspect both
|
cannam@62
|
108 // schemas to determine which one is newer, and use that that one. If the two versions are
|
cannam@62
|
109 // found to be incompatible, an exception is thrown. If the two versions differ but are
|
cannam@62
|
110 // compatible and the loader cannot determine which is newer (e.g., the only changes are renames),
|
cannam@62
|
111 // the existing schema will be preferred. Note that in any case, the loader will end up keeping
|
cannam@62
|
112 // around copies of both schemas, so you shouldn't repeatedly reload schemas into the same loader.
|
cannam@62
|
113 //
|
cannam@62
|
114 // The following properties of the schema node are validated:
|
cannam@62
|
115 // - Struct size and preferred list encoding are valid and consistent.
|
cannam@62
|
116 // - Struct members are fields or unions.
|
cannam@62
|
117 // - Union members are fields.
|
cannam@62
|
118 // - Field offsets are in-bounds.
|
cannam@62
|
119 // - Ordinals and codeOrders are sequential starting from zero.
|
cannam@62
|
120 // - Values are of the right union case to match their types.
|
cannam@62
|
121 //
|
cannam@62
|
122 // You should assume anything not listed above is NOT validated. In particular, things that are
|
cannam@62
|
123 // not validated now, but could be in the future, include but are not limited to:
|
cannam@62
|
124 // - Names.
|
cannam@62
|
125 // - Annotation values. (This is hard because the annotation declaration is not always
|
cannam@62
|
126 // available.)
|
cannam@62
|
127 // - Content of default/constant values of pointer type. (Validating these would require knowing
|
cannam@62
|
128 // their schema, but even if the schemas are available at validation time, they could be
|
cannam@62
|
129 // updated by a subsequent load(), invalidating existing values. Instead, these values are
|
cannam@62
|
130 // validated at the time they are used, as usual for Cap'n Proto objects.)
|
cannam@62
|
131 //
|
cannam@62
|
132 // Also note that unknown types are not considered invalid. Instead, the dynamic API returns
|
cannam@62
|
133 // a DynamicValue with type UNKNOWN for these.
|
cannam@62
|
134
|
cannam@62
|
135 Schema loadOnce(const schema::Node::Reader& reader) const;
|
cannam@62
|
136 // Like `load()` but does nothing if a schema with the same ID is already loaded. In contrast,
|
cannam@62
|
137 // `load()` would attempt to compare the schemas and take the newer one. `loadOnce()` is safe
|
cannam@62
|
138 // to call even while concurrently using schemas from this loader. It should be considered an
|
cannam@62
|
139 // error to call `loadOnce()` with two non-identical schemas that share the same ID, although
|
cannam@62
|
140 // this error may or may not actually be detected by the implementation.
|
cannam@62
|
141
|
cannam@62
|
142 template <typename T>
|
cannam@62
|
143 void loadCompiledTypeAndDependencies();
|
cannam@62
|
144 // Load the schema for the given compiled-in type and all of its dependencies.
|
cannam@62
|
145 //
|
cannam@62
|
146 // If you want to be able to cast a DynamicValue built from this SchemaLoader to the compiled-in
|
cannam@62
|
147 // type using as<T>(), you must call this method before constructing the DynamicValue. Otherwise,
|
cannam@62
|
148 // as<T>() will throw an exception complaining about type mismatch.
|
cannam@62
|
149
|
cannam@62
|
150 kj::Array<Schema> getAllLoaded() const;
|
cannam@62
|
151 // Get a complete list of all loaded schema nodes. It is particularly useful to call this after
|
cannam@62
|
152 // loadCompiledTypeAndDependencies<T>() in order to get a flat list of all of T's transitive
|
cannam@62
|
153 // dependencies.
|
cannam@62
|
154
|
cannam@62
|
155 private:
|
cannam@62
|
156 class Validator;
|
cannam@62
|
157 class CompatibilityChecker;
|
cannam@62
|
158 class Impl;
|
cannam@62
|
159 class InitializerImpl;
|
cannam@62
|
160 class BrandedInitializerImpl;
|
cannam@62
|
161 kj::MutexGuarded<kj::Own<Impl>> impl;
|
cannam@62
|
162
|
cannam@62
|
163 void loadNative(const _::RawSchema* nativeSchema);
|
cannam@62
|
164 };
|
cannam@62
|
165
|
cannam@62
|
166 template <typename T>
|
cannam@62
|
167 inline void SchemaLoader::loadCompiledTypeAndDependencies() {
|
cannam@62
|
168 loadNative(&_::rawSchema<T>());
|
cannam@62
|
169 }
|
cannam@62
|
170
|
cannam@62
|
171 } // namespace capnp
|
cannam@62
|
172
|
cannam@62
|
173 #endif // CAPNP_SCHEMA_LOADER_H_
|