audk/MdeModulePkg/Universal/FaultTolerantWriteDxe
Hao Wu 16f6922709 MdeModulePkg: Refine casting expression result to bigger size
There are cases that the operands of an expression are all with rank less
than UINT64/INT64 and the result of the expression is explicitly cast to
UINT64/INT64 to fit the target size.

An example will be:
UINT32 a,b;
// a and b can be any unsigned int type with rank less than UINT64, like
// UINT8, UINT16, etc.
UINT64 c;
c = (UINT64) (a + b);

Some static code checkers may warn that the expression result might
overflow within the rank of "int" (integer promotions) and the result is
then cast to a bigger size.

The commit refines codes by the following rules:
1). When the expression is possible to overflow the range of unsigned int/
int:
c = (UINT64)a + b;

2). When the expression will not overflow within the rank of "int", remove
the explicit type casts:
c = a + b;

3). When the expression will be cast to pointer of possible greater size:
UINT32 a,b;
VOID *c;
c = (VOID *)(UINTN)(a + b); --> c = (VOID *)((UINTN)a + b);

4). When one side of a comparison expression contains only operands with
rank less than UINT32:
UINT8 a;
UINT16 b;
UINTN c;
if ((UINTN)(a + b) > c) {...} --> if (((UINT32)a + b) > c) {...}

For rule 4), if we remove the 'UINTN' type cast like:
if (a + b > c) {...}
The VS compiler will complain with warning C4018 (signed/unsigned
mismatch, level 3 warning) due to promoting 'a + b' to type 'int'.

Contributed-under: TianoCore Contribution Agreement 1.0
Signed-off-by: Hao Wu <hao.a.wu@intel.com>
Reviewed-by: Feng Tian <feng.tian@intel.com>
2017-03-06 14:33:20 +08:00
..
FaultTolerantWrite.c MdeModulePkg: Refine type cast for pointer subtraction 2017-03-06 14:14:09 +08:00
FaultTolerantWrite.h MdeModulePkg/Universal: Fix typos in comments 2016-10-27 09:11:19 +08:00
FaultTolerantWriteDxe.c MdeModulePkg/Universal: Fix typos in comments 2016-10-27 09:11:19 +08:00
FaultTolerantWriteDxe.inf MdeModulePkg: INF/DEC file updates to EDK II packages 2014-08-28 06:34:06 +00:00
FaultTolerantWriteDxe.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
FaultTolerantWriteDxeExtra.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
FaultTolerantWriteSmm.c MdeModulePkg/Universal: Fix typos in comments 2016-10-27 09:11:19 +08:00
FaultTolerantWriteSmm.inf MdeModulePkg: Cleanup gEfiSmmAccess2ProtocolGuid reference. 2015-02-05 00:59:56 +00:00
FaultTolerantWriteSmmCommon.h Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied. 2011-01-12 09:05:27 +00:00
FaultTolerantWriteSmmDxe.c 1. Fix TOCTOU issue in VariableSmm, FtwSmm, FpdtSmm, SmmCorePerformance SMM handler. For VariableSmm, pre-allocate a mVariableBufferPayload buffer with mVariableBufferPayloadSize(match with mVariableBufferPayloadSize in VariableSmmRuntimeDxe) to hold communicate buffer payload to avoid TOCTOU issue. 2013-05-07 05:38:32 +00:00
FaultTolerantWriteSmmDxe.h Add SMM FTW wrapper driver since non-SMM FTW protocol can be used by some consumers (Such as capsule update) when SMM FTW driver is applied. 2011-01-12 09:05:27 +00:00
FaultTolerantWriteSmmDxe.inf MdeModulePkg: INF/DEC file updates to EDK II packages 2014-08-28 06:34:06 +00:00
FaultTolerantWriteSmmDxe.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
FaultTolerantWriteSmmDxeExtra.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
FtwMisc.c MdeModulePkg: FaultTolerantWriteDxe: mellow DEBUGs about workspace reinit 2015-10-16 15:46:32 +00:00
SmmFaultTolerantWriteDxe.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
SmmFaultTolerantWriteDxeExtra.uni MdeModulePkg: Convert all .uni files to utf-8 2015-12-15 04:56:23 +00:00
UpdateWorkingBlock.c MdeModulePkg: Refine casting expression result to bigger size 2017-03-06 14:33:20 +08:00