Ensure low-memory renderers retry failed loads correctly.
[chromium-blink-merge.git] / third_party / brotli / dec / safe_malloc.h
blob0698239feb855557f9a9dfb1165eac9b08f2cd9d
1 /* Copyright 2013 Google Inc. All Rights Reserved.
3 Licensed under the Apache License, Version 2.0 (the "License");
4 you may not use this file except in compliance with the License.
5 You may obtain a copy of the License at
7 http://www.apache.org/licenses/LICENSE-2.0
9 Unless required by applicable law or agreed to in writing, software
10 distributed under the License is distributed on an "AS IS" BASIS,
11 WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12 See the License for the specific language governing permissions and
13 limitations under the License.
16 /* Size-checked memory allocation. */
18 #ifndef BROTLI_DEC_SAFE_MALLOC_H_
19 #define BROTLI_DEC_SAFE_MALLOC_H_
21 #include <assert.h>
23 #include "./types.h"
25 #if defined(__cplusplus) || defined(c_plusplus)
26 extern "C" {
27 #endif
29 /* This is the maximum memory amount that we will ever try to allocate. */
30 #define BROTLI_MAX_ALLOCABLE_MEMORY (1 << 30)
32 /* size-checking safe malloc/calloc: verify that the requested size is not too
33 large, or return NULL. You don't need to call these for constructs like
34 malloc(sizeof(foo)), but only if there's font-dependent size involved
35 somewhere (like: malloc(decoded_size * sizeof(*something))). That's why this
36 safe malloc() borrows the signature from calloc(), pointing at the dangerous
37 underlying multiply involved.
39 void* BrotliSafeMalloc(uint64_t nmemb, size_t size);
41 #if defined(__cplusplus) || defined(c_plusplus)
42 } /* extern "C" */
43 #endif
45 #endif /* BROTLI_DEC_SAFE_MALLOC_H_ */