value-serializer.h 10.7 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13
// Copyright 2016 the V8 project authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#ifndef V8_VALUE_SERIALIZER_H_
#define V8_VALUE_SERIALIZER_H_

#include <cstdint>
#include <vector>

#include "include/v8.h"
#include "src/base/compiler-specific.h"
#include "src/base/macros.h"
14
#include "src/identity-map.h"
15
#include "src/messages.h"
16
#include "src/vector.h"
17
#include "src/zone/zone.h"
18 19 20 21

namespace v8 {
namespace internal {

22
class HeapNumber;
23
class Isolate;
24
class JSArrayBuffer;
25
class JSArrayBufferView;
26
class JSDate;
27
class JSMap;
28
class JSRegExp;
29
class JSSet;
30
class JSValue;
31 32
class Object;
class Oddball;
33
class Smi;
34
class WasmModuleObject;
35 36 37 38 39 40 41 42 43 44 45

enum class SerializationTag : uint8_t;

/**
 * Writes V8 objects in a binary format that allows the objects to be cloned
 * according to the HTML structured clone algorithm.
 *
 * Format is based on Blink's previous serialization logic.
 */
class ValueSerializer {
 public:
46
  ValueSerializer(Isolate* isolate, v8::ValueSerializer::Delegate* delegate);
47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62
  ~ValueSerializer();

  /*
   * Writes out a header, which includes the format version.
   */
  void WriteHeader();

  /*
   * Serializes a V8 object into the buffer.
   */
  Maybe<bool> WriteObject(Handle<Object> object) WARN_UNUSED_RESULT;

  /*
   * Returns the stored data. This serializer should not be used once the buffer
   * is released. The contents are undefined if a previous write has failed.
   */
63 64 65 66 67 68 69
  std::vector<uint8_t> ReleaseBuffer();

  /*
   * Returns the buffer, allocated via the delegate, and its size.
   * Caller assumes ownership of the buffer.
   */
  std::pair<uint8_t*, size_t> Release();
70

71 72 73 74 75 76 77 78
  /*
   * Marks an ArrayBuffer as havings its contents transferred out of band.
   * Pass the corresponding JSArrayBuffer in the deserializing context to
   * ValueDeserializer::TransferArrayBuffer.
   */
  void TransferArrayBuffer(uint32_t transfer_id,
                           Handle<JSArrayBuffer> array_buffer);

79 80 81 82 83 84 85
  /*
   * Publicly exposed wire format writing methods.
   * These are intended for use within the delegate's WriteHostObject method.
   */
  void WriteUint32(uint32_t value);
  void WriteUint64(uint64_t value);
  void WriteRawBytes(const void* source, size_t length);
86
  void WriteDouble(double value);
87

88 89 90 91 92 93 94 95 96
  /*
   * Indicate whether to treat ArrayBufferView objects as host objects,
   * i.e. pass them to Delegate::WriteHostObject. This should not be
   * called when no Delegate was passed.
   *
   * The default is not to treat ArrayBufferViews as host objects.
   */
  void SetTreatArrayBufferViewsAsHostObjects(bool mode);

97
 private:
98
  // Managing allocations of the internal buffer.
99
  Maybe<bool> ExpandBuffer(size_t required_capacity);
100

101 102 103 104
  // Writing the wire format.
  void WriteTag(SerializationTag tag);
  template <typename T>
  void WriteVarint(T value);
105 106
  template <typename T>
  void WriteZigZag(T value);
107 108
  void WriteOneByteString(Vector<const uint8_t> chars);
  void WriteTwoByteString(Vector<const uc16> chars);
109
  Maybe<uint8_t*> ReserveRawBytes(size_t bytes);
110 111 112

  // Writing V8 objects of various kinds.
  void WriteOddball(Oddball* oddball);
113 114
  void WriteSmi(Smi* smi);
  void WriteHeapNumber(HeapNumber* number);
115
  void WriteString(Handle<String> string);
116 117
  Maybe<bool> WriteJSReceiver(Handle<JSReceiver> receiver) WARN_UNUSED_RESULT;
  Maybe<bool> WriteJSObject(Handle<JSObject> object) WARN_UNUSED_RESULT;
118
  Maybe<bool> WriteJSObjectSlow(Handle<JSObject> object) WARN_UNUSED_RESULT;
119
  Maybe<bool> WriteJSArray(Handle<JSArray> array) WARN_UNUSED_RESULT;
120
  void WriteJSDate(JSDate* date);
121
  Maybe<bool> WriteJSValue(Handle<JSValue> value) WARN_UNUSED_RESULT;
122
  void WriteJSRegExp(JSRegExp* regexp);
123 124
  Maybe<bool> WriteJSMap(Handle<JSMap> map) WARN_UNUSED_RESULT;
  Maybe<bool> WriteJSSet(Handle<JSSet> map) WARN_UNUSED_RESULT;
125 126
  Maybe<bool> WriteJSArrayBuffer(Handle<JSArrayBuffer> array_buffer)
      WARN_UNUSED_RESULT;
127
  Maybe<bool> WriteJSArrayBufferView(JSArrayBufferView* array_buffer);
128
  Maybe<bool> WriteWasmModule(Handle<JSObject> object) WARN_UNUSED_RESULT;
129
  Maybe<bool> WriteHostObject(Handle<JSObject> object) WARN_UNUSED_RESULT;
130

131 132 133 134 135
  /*
   * Reads the specified keys from the object and writes key-value pairs to the
   * buffer. Returns the number of keys actually written, which may be smaller
   * if some keys are not own properties when accessed.
   */
136
  Maybe<uint32_t> WriteJSObjectPropertiesSlow(
137 138
      Handle<JSObject> object, Handle<FixedArray> keys) WARN_UNUSED_RESULT;

139 140 141 142 143 144 145 146
  /*
   * Asks the delegate to handle an error that occurred during data cloning, by
   * throwing an exception appropriate for the host.
   */
  void ThrowDataCloneError(MessageTemplate::Template template_index);
  V8_NOINLINE void ThrowDataCloneError(MessageTemplate::Template template_index,
                                       Handle<Object> arg0);

147 148
  Maybe<bool> ThrowIfOutOfMemory();

149
  Isolate* const isolate_;
150
  v8::ValueSerializer::Delegate* const delegate_;
151
  bool treat_array_buffer_views_as_host_objects_ = false;
152 153 154
  uint8_t* buffer_ = nullptr;
  size_t buffer_size_ = 0;
  size_t buffer_capacity_ = 0;
155
  bool out_of_memory_ = false;
156 157 158 159 160
  Zone zone_;

  // To avoid extra lookups in the identity map, ID+1 is actually stored in the
  // map (checking if the used identity is zero is the fast way of checking if
  // the entry is new).
161
  IdentityMap<uint32_t, ZoneAllocationPolicy> id_map_;
162
  uint32_t next_id_ = 0;
163

164
  // A similar map, for transferred array buffers.
165
  IdentityMap<uint32_t, ZoneAllocationPolicy> array_buffer_transfer_map_;
166

167 168 169 170 171 172 173 174 175
  DISALLOW_COPY_AND_ASSIGN(ValueSerializer);
};

/*
 * Deserializes values from data written with ValueSerializer, or a compatible
 * implementation.
 */
class ValueDeserializer {
 public:
176 177
  ValueDeserializer(Isolate* isolate, Vector<const uint8_t> data,
                    v8::ValueDeserializer::Delegate* delegate);
178 179 180 181 182 183 184
  ~ValueDeserializer();

  /*
   * Runs version detection logic, which may fail if the format is invalid.
   */
  Maybe<bool> ReadHeader() WARN_UNUSED_RESULT;

185 186 187 188 189 190 191
  /*
   * Reads the underlying wire format version. Likely mostly to be useful to
   * legacy code reading old wire format versions. Must be called after
   * ReadHeader.
   */
  uint32_t GetWireFormatVersion() const { return version_; }

192 193 194 195 196
  /*
   * Deserializes a V8 object from the buffer.
   */
  MaybeHandle<Object> ReadObject() WARN_UNUSED_RESULT;

197 198 199 200 201 202 203 204 205 206
  /*
   * Reads an object, consuming the entire buffer.
   *
   * This is required for the legacy "version 0" format, which did not allow
   * reference deduplication, and instead relied on a "stack" model for
   * deserializing, with the contents of objects and arrays provided first.
   */
  MaybeHandle<Object> ReadObjectUsingEntireBufferForLegacyFormat()
      WARN_UNUSED_RESULT;

207 208 209 210 211 212 213
  /*
   * Accepts the array buffer corresponding to the one passed previously to
   * ValueSerializer::TransferArrayBuffer.
   */
  void TransferArrayBuffer(uint32_t transfer_id,
                           Handle<JSArrayBuffer> array_buffer);

214 215 216 217 218 219
  /*
   * Publicly exposed wire format writing methods.
   * These are intended for use within the delegate's WriteHostObject method.
   */
  bool ReadUint32(uint32_t* value) WARN_UNUSED_RESULT;
  bool ReadUint64(uint64_t* value) WARN_UNUSED_RESULT;
220
  bool ReadDouble(double* value) WARN_UNUSED_RESULT;
221
  bool ReadRawBytes(size_t length, const void** data) WARN_UNUSED_RESULT;
222 223 224
  void set_expect_inline_wasm(bool expect_inline_wasm) {
    expect_inline_wasm_ = expect_inline_wasm;
  }
225

226
 private:
227
  // Reading the wire format.
228
  Maybe<SerializationTag> PeekTag() const WARN_UNUSED_RESULT;
229
  void ConsumeTag(SerializationTag peeked_tag);
230 231 232
  Maybe<SerializationTag> ReadTag() WARN_UNUSED_RESULT;
  template <typename T>
  Maybe<T> ReadVarint() WARN_UNUSED_RESULT;
233 234 235
  template <typename T>
  Maybe<T> ReadZigZag() WARN_UNUSED_RESULT;
  Maybe<double> ReadDouble() WARN_UNUSED_RESULT;
236
  Maybe<Vector<const uint8_t>> ReadRawBytes(int size) WARN_UNUSED_RESULT;
237
  bool expect_inline_wasm() const { return expect_inline_wasm_; }
238

239 240 241 242
  // Reads a string if it matches the one provided.
  // Returns true if this was the case. Otherwise, nothing is consumed.
  bool ReadExpectedString(Handle<String> expected) WARN_UNUSED_RESULT;

243 244 245 246
  // Like ReadObject, but skips logic for special cases in simulating the
  // "stack machine".
  MaybeHandle<Object> ReadObjectInternal() WARN_UNUSED_RESULT;

247 248 249 250 251
  // Reads a string intended to be part of a more complicated object.
  // Before v12, these are UTF-8 strings. After, they can be any encoding
  // permissible for a string (with the relevant tag).
  MaybeHandle<String> ReadString() WARN_UNUSED_RESULT;

252 253 254
  // Reading V8 objects of specific kinds.
  // The tag is assumed to have already been read.
  MaybeHandle<String> ReadUtf8String() WARN_UNUSED_RESULT;
255
  MaybeHandle<String> ReadOneByteString() WARN_UNUSED_RESULT;
256
  MaybeHandle<String> ReadTwoByteString() WARN_UNUSED_RESULT;
257
  MaybeHandle<JSObject> ReadJSObject() WARN_UNUSED_RESULT;
258 259
  MaybeHandle<JSArray> ReadSparseJSArray() WARN_UNUSED_RESULT;
  MaybeHandle<JSArray> ReadDenseJSArray() WARN_UNUSED_RESULT;
260
  MaybeHandle<JSDate> ReadJSDate() WARN_UNUSED_RESULT;
261
  MaybeHandle<JSValue> ReadJSValue(SerializationTag tag) WARN_UNUSED_RESULT;
262
  MaybeHandle<JSRegExp> ReadJSRegExp() WARN_UNUSED_RESULT;
263 264
  MaybeHandle<JSMap> ReadJSMap() WARN_UNUSED_RESULT;
  MaybeHandle<JSSet> ReadJSSet() WARN_UNUSED_RESULT;
265
  MaybeHandle<JSArrayBuffer> ReadJSArrayBuffer() WARN_UNUSED_RESULT;
266 267
  MaybeHandle<JSArrayBuffer> ReadTransferredJSArrayBuffer(bool is_shared)
      WARN_UNUSED_RESULT;
268 269
  MaybeHandle<JSArrayBufferView> ReadJSArrayBufferView(
      Handle<JSArrayBuffer> buffer) WARN_UNUSED_RESULT;
270
  MaybeHandle<JSObject> ReadWasmModule() WARN_UNUSED_RESULT;
271
  MaybeHandle<JSObject> ReadWasmModuleTransfer() WARN_UNUSED_RESULT;
272
  MaybeHandle<JSObject> ReadHostObject() WARN_UNUSED_RESULT;
273 274 275 276 277 278

  /*
   * Reads key-value pairs into the object until the specified end tag is
   * encountered. If successful, returns the number of properties read.
   */
  Maybe<uint32_t> ReadJSObjectProperties(Handle<JSObject> object,
279 280
                                         SerializationTag end_tag,
                                         bool can_use_transitions);
281 282 283 284 285

  // Manipulating the map from IDs to reified objects.
  bool HasObjectWithID(uint32_t id);
  MaybeHandle<JSReceiver> GetObjectWithID(uint32_t id);
  void AddObjectWithID(uint32_t id, Handle<JSReceiver> object);
286 287

  Isolate* const isolate_;
288
  v8::ValueDeserializer::Delegate* const delegate_;
289 290
  const uint8_t* position_;
  const uint8_t* const end_;
291
  PretenureFlag pretenure_;
292
  uint32_t version_ = 0;
293
  uint32_t next_id_ = 0;
294
  bool expect_inline_wasm_ = false;
295

296
  // Always global handles.
297
  Handle<FixedArray> id_map_;
298 299
  MaybeHandle<SeededNumberDictionary> array_buffer_transfer_map_;

300 301 302 303 304 305 306
  DISALLOW_COPY_AND_ASSIGN(ValueDeserializer);
};

}  // namespace internal
}  // namespace v8

#endif  // V8_VALUE_SERIALIZER_H_