// Copyright 2013 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.

#include <stddef.h>
#include <stdint.h>

#define PROVIDE_NUMERIC_LIMITS_UNSPECIALIZED
#include <fbl/limits.h>
#include <fbl/type_support.h>

#include <unittest.h>

#include <safeint/safe_conversions.h>
#include <safeint/safe_math.h>

#if defined(COMPILER_MSVC) && defined(ARCH_CPU_32_BITS)
#include <mmintrin.h>
#endif

using fbl::numeric_limits;
using safeint::CheckedNumeric;
using safeint::checked_cast;
using safeint::IsValueInRangeForNumericType;
using safeint::IsValueNegative;
using safeint::SizeT;
using safeint::StrictNumeric;
using safeint::saturated_cast;
using safeint::strict_cast;
using safeint::internal::MaxExponent;
using safeint::internal::RANGE_VALID;
using safeint::internal::RANGE_INVALID;
using safeint::internal::RANGE_OVERFLOW;
using safeint::internal::RANGE_UNDERFLOW;
using safeint::internal::SignedIntegerForSize;

// These tests deliberately cause arithmetic overflows. If the compiler is
// aggressive enough, it can const fold these overflows. Disable warnings about
// overflows for const expressions.
#if defined(OS_WIN)
#pragma warning(disable:4756)
#endif

// Helper macros to wrap displaying the conversion types and line numbers.
#define TEST_EXPECTED_VALIDITY(expected, actual)                           \
  EXPECT_EQ(expected, CheckedNumeric<Dst>(actual).validity(),              \
            "unexpected validity")

#define TEST_EXPECTED_VALUE(expected, actual)                              \
  EXPECT_EQ(static_cast<Dst>(expected),                                    \
            CheckedNumeric<Dst>(actual).ValueUnsafe(),                     \
            "unexpected value")

#define EXPECT_EQ2(v1, v2) \
        EXPECT_EQ(v1, v2, "EXPECT_EQ fail")

#define EXPECT_TRUE1(v1) \
        EXPECT_TRUE(v1, "EXPECT_TRUE fail")
#define EXPECT_FALSE1(v1) \
        EXPECT_FALSE(v1, "EXPECT_FALSE fail")

// Signed integer arithmetic.
template <typename Dst>
static bool TestSpecializedArithmetic(
    typename fbl::enable_if<numeric_limits<Dst>::is_integer &&
                                numeric_limits<Dst>::is_signed,
                            int>::type = 0) {
  typedef numeric_limits<Dst> DstLimits;
  BEGIN_TEST;
  TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW,
                         -CheckedNumeric<Dst>(DstLimits::min()));
  TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()).Abs());
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(-1).Abs());

  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::max()) + -1);
  TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) + -1);
  TEST_EXPECTED_VALIDITY(
      RANGE_UNDERFLOW,
      CheckedNumeric<Dst>(-DstLimits::max()) + -DstLimits::max());

  TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) - 1);
  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::min()) - -1);
  TEST_EXPECTED_VALIDITY(
      RANGE_OVERFLOW,
      CheckedNumeric<Dst>(DstLimits::max()) - -DstLimits::max());
  TEST_EXPECTED_VALIDITY(
      RANGE_UNDERFLOW,
      CheckedNumeric<Dst>(-DstLimits::max()) - DstLimits::max());

  TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) * 2);

  TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) / -1);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(-1) / 2);

  // Modulus is legal only for integers.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>() % 1);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % 1);
  TEST_EXPECTED_VALUE(-1, CheckedNumeric<Dst>(-1) % 2);
  TEST_EXPECTED_VALIDITY(RANGE_INVALID, CheckedNumeric<Dst>(-1) % -2);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(DstLimits::min()) % 2);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(DstLimits::max()) % 2);
  // Test all the different modulus combinations.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, 1 % CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % 1);
  CheckedNumeric<Dst> checked_dst = 1;
  TEST_EXPECTED_VALUE(0, checked_dst %= 1);
  END_TEST;
}

// Unsigned integer arithmetic.
template <typename Dst>
static bool TestSpecializedArithmetic(
    typename fbl::enable_if<numeric_limits<Dst>::is_integer &&
                                !numeric_limits<Dst>::is_signed,
                            int>::type = 0) {
  typedef numeric_limits<Dst> DstLimits;
  BEGIN_TEST;
  TEST_EXPECTED_VALIDITY(RANGE_VALID, -CheckedNumeric<Dst>(DstLimits::min()));
  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::min()).Abs());
  TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) + -1);
  TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW,
                         CheckedNumeric<Dst>(DstLimits::min()) - 1);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(DstLimits::min()) * 2);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) / 2);
  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::min()).UnsignedAbs());
  TEST_EXPECTED_VALIDITY(
      RANGE_VALID,
      CheckedNumeric<typename SignedIntegerForSize<Dst>::type>(
          fbl::numeric_limits<typename SignedIntegerForSize<Dst>::type>::min())
          .UnsignedAbs());

  // Modulus is legal only for integers.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>() % 1);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % 1);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) % 2);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(DstLimits::min()) % 2);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(DstLimits::max()) % 2);
  // Test all the different modulus combinations.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, 1 % CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) % 1);
  CheckedNumeric<Dst> checked_dst = 1;
  TEST_EXPECTED_VALUE(0, checked_dst %= 1);
  END_TEST;
}

// Generic arithmetic tests.
template <typename Dst>
static bool TestArithmetic(void* ctx) {
  typedef numeric_limits<Dst> DstLimits;

  BEGIN_TEST;
  EXPECT_EQ2(true, CheckedNumeric<Dst>().IsValid());
  EXPECT_EQ2(false,
            CheckedNumeric<Dst>(CheckedNumeric<Dst>(DstLimits::max()) *
                                DstLimits::max()).IsValid());
  EXPECT_EQ2(static_cast<Dst>(0), CheckedNumeric<Dst>().ValueOrDie());
  EXPECT_EQ2(static_cast<Dst>(0), CheckedNumeric<Dst>().ValueOrDefault(1));
  EXPECT_EQ2(static_cast<Dst>(1),
            CheckedNumeric<Dst>(CheckedNumeric<Dst>(DstLimits::max()) *
                                DstLimits::max()).ValueOrDefault(1));

  // Test the operator combinations.
  TEST_EXPECTED_VALUE(2, CheckedNumeric<Dst>(1) + CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) - CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) * CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) / CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(2, 1 + CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(0, 1 - CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(1, 1 * CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(1, 1 / CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(2, CheckedNumeric<Dst>(1) + 1);
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>(1) - 1);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) * 1);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) / 1);
  CheckedNumeric<Dst> checked_dst = 1;
  TEST_EXPECTED_VALUE(2, checked_dst += 1);
  checked_dst = 1;
  TEST_EXPECTED_VALUE(0, checked_dst -= 1);
  checked_dst = 1;
  TEST_EXPECTED_VALUE(1, checked_dst *= 1);
  checked_dst = 1;
  TEST_EXPECTED_VALUE(1, checked_dst /= 1);

  // Generic negation.
  TEST_EXPECTED_VALUE(0, -CheckedNumeric<Dst>());
  TEST_EXPECTED_VALUE(-1, -CheckedNumeric<Dst>(1));
  TEST_EXPECTED_VALUE(1, -CheckedNumeric<Dst>(-1));
  TEST_EXPECTED_VALUE(static_cast<Dst>(DstLimits::max() * -1),
                      -CheckedNumeric<Dst>(DstLimits::max()));

  // Generic absolute value.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>().Abs());
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1).Abs());
  TEST_EXPECTED_VALUE(DstLimits::max(),
                      CheckedNumeric<Dst>(DstLimits::max()).Abs());

  // Generic addition.
  TEST_EXPECTED_VALUE(1, (CheckedNumeric<Dst>() + 1));
  TEST_EXPECTED_VALUE(2, (CheckedNumeric<Dst>(1) + 1));
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>(-1) + 1));
  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::min()) + 1);
  TEST_EXPECTED_VALIDITY(
      RANGE_OVERFLOW, CheckedNumeric<Dst>(DstLimits::max()) + DstLimits::max());

  // Generic subtraction.
  TEST_EXPECTED_VALUE(-1, (CheckedNumeric<Dst>() - 1));
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>(1) - 1));
  TEST_EXPECTED_VALUE(-2, (CheckedNumeric<Dst>(-1) - 1));
  TEST_EXPECTED_VALIDITY(RANGE_VALID,
                         CheckedNumeric<Dst>(DstLimits::max()) - 1);

  // Generic multiplication.
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>() * 1));
  TEST_EXPECTED_VALUE(1, (CheckedNumeric<Dst>(1) * 1));
  TEST_EXPECTED_VALUE(-2, (CheckedNumeric<Dst>(-1) * 2));
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>(0) * 0));
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>(-1) * 0));
  TEST_EXPECTED_VALUE(0, (CheckedNumeric<Dst>(0) * -1));
  TEST_EXPECTED_VALIDITY(
      RANGE_OVERFLOW, CheckedNumeric<Dst>(DstLimits::max()) * DstLimits::max());

  // Generic division.
  TEST_EXPECTED_VALUE(0, CheckedNumeric<Dst>() / 1);
  TEST_EXPECTED_VALUE(1, CheckedNumeric<Dst>(1) / 1);
  TEST_EXPECTED_VALUE(DstLimits::min() / 2,
                      CheckedNumeric<Dst>(DstLimits::min()) / 2);
  TEST_EXPECTED_VALUE(DstLimits::max() / 2,
                      CheckedNumeric<Dst>(DstLimits::max()) / 2);

  TestSpecializedArithmetic<Dst>();
  END_TEST;
}

#define TEST_ARITHMETIC(Dst) UNITTEST(#Dst, TestArithmetic<Dst>)

UNITTEST_START_TESTCASE(SafeNumerics_SignedIntegerMath)
TEST_ARITHMETIC(int8_t)
TEST_ARITHMETIC(int)
TEST_ARITHMETIC(intptr_t)
TEST_ARITHMETIC(intmax_t)
UNITTEST_END_TESTCASE(SafeNumerics_SignedIntegerMath,
                      "intmath", "SafeNumerics signed integer arithmetic tests",
                      NULL, NULL);

UNITTEST_START_TESTCASE(SafeNumerics_UnsignedIntegerMath)
TEST_ARITHMETIC(uint8_t)
TEST_ARITHMETIC(uint)
TEST_ARITHMETIC(uintptr_t)
TEST_ARITHMETIC(uintmax_t)
UNITTEST_END_TESTCASE(SafeNumerics_UnsignedIntegerMath,
                      "uintmath", "SafeNumerics unsigned integer arithmetic tests",
                      NULL, NULL);

// Enumerates the five different conversions types we need to test.
enum NumericConversionType {
  SIGN_PRESERVING_VALUE_PRESERVING,
  SIGN_PRESERVING_NARROW,
  SIGN_TO_UNSIGN_WIDEN_OR_EQUAL,
  SIGN_TO_UNSIGN_NARROW,
  UNSIGN_TO_SIGN_NARROW_OR_EQUAL,
};

// Template covering the different conversion tests.
template <typename Dst, typename Src, NumericConversionType conversion>
struct TestNumericConversion {};

// EXPECT_EQ2 wrappers providing specific detail on test failures.
#define TEST_EXPECTED_RANGE(expected, actual)                                  \
  EXPECT_EQ(expected,                                                          \
            safeint::internal::DstRangeRelationToSrcRange<Dst>(actual),        \
            "Conversion test failed")

template <typename Dst, typename Src>
struct TestNumericConversion<Dst, Src, SIGN_PRESERVING_VALUE_PRESERVING> {
  static bool Test(void*) {
    typedef numeric_limits<Src> SrcLimits;
    typedef numeric_limits<Dst> DstLimits;
    BEGIN_TEST;
                   // Integral to floating.
    static_assert((DstLimits::is_iec559 && SrcLimits::is_integer) ||
                  // Not floating to integral and...
                  (!(DstLimits::is_integer && SrcLimits::is_iec559) &&
                   // Same sign, same numeric, source is narrower or same.
                   ((SrcLimits::is_signed == DstLimits::is_signed &&
                    sizeof(Dst) >= sizeof(Src)) ||
                   // Or signed destination and source is smaller
                    (DstLimits::is_signed && sizeof(Dst) > sizeof(Src)))),
                  "Comparison must be sign preserving and value preserving");

    const CheckedNumeric<Dst> checked_dst = SrcLimits::max();
    TEST_EXPECTED_VALIDITY(RANGE_VALID, checked_dst);
    if (MaxExponent<Dst>::value > MaxExponent<Src>::value) {
      if (MaxExponent<Dst>::value >= MaxExponent<Src>::value * 2 - 1) {
        // At least twice larger type.
        TEST_EXPECTED_VALIDITY(RANGE_VALID, SrcLimits::max() * checked_dst);

      } else {  // Larger, but not at least twice as large.
        TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW, SrcLimits::max() * checked_dst);
        TEST_EXPECTED_VALIDITY(RANGE_VALID, checked_dst + 1);
      }
    } else {  // Same width type.
      TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW, checked_dst + 1);
    }

    TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::max());
    TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(1));
    if (SrcLimits::is_iec559) {
      TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::max() * static_cast<Src>(-1));
      TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::infinity());
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::infinity() * -1);
      TEST_EXPECTED_RANGE(RANGE_INVALID, SrcLimits::quiet_NaN());
    } else if (numeric_limits<Src>::is_signed) {
      TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(-1));
      TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::min());
    }
    END_TEST;
  }
};

template <typename Dst, typename Src>
struct TestNumericConversion<Dst, Src, SIGN_PRESERVING_NARROW> {
  static bool Test(void*) {
    typedef numeric_limits<Src> SrcLimits;
    typedef numeric_limits<Dst> DstLimits;
    BEGIN_TEST;
    static_assert(SrcLimits::is_signed == DstLimits::is_signed,
                  "Destination and source sign must be the same");
    static_assert(sizeof(Dst) < sizeof(Src) ||
                   (DstLimits::is_integer && SrcLimits::is_iec559),
                  "Destination must be narrower than source");

    const CheckedNumeric<Dst> checked_dst;
    TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW, checked_dst + SrcLimits::max());
    TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
    TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW, checked_dst - SrcLimits::max());

    TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::max());
    TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(1));
    if (SrcLimits::is_iec559) {
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::max() * -1);
      TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(-1));
      TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::infinity());
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::infinity() * -1);
      TEST_EXPECTED_RANGE(RANGE_INVALID, SrcLimits::quiet_NaN());
      if (DstLimits::is_integer) {
        if (SrcLimits::digits < DstLimits::digits) {
          TEST_EXPECTED_RANGE(RANGE_OVERFLOW,
                              static_cast<Src>(DstLimits::max()));
        } else {
          TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(DstLimits::max()));
        }
        TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(DstLimits::min()));
      }
    } else if (SrcLimits::is_signed) {
      TEST_EXPECTED_VALUE(-1, checked_dst - static_cast<Src>(1));
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::min());
      TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(-1));
    } else {
      TEST_EXPECTED_VALIDITY(RANGE_INVALID, checked_dst - static_cast<Src>(1));
      TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::min());
    }
    END_TEST;
  }
};

template <typename Dst, typename Src>
struct TestNumericConversion<Dst, Src, SIGN_TO_UNSIGN_WIDEN_OR_EQUAL> {
  static bool Test(void*) {
    typedef numeric_limits<Src> SrcLimits;
    typedef numeric_limits<Dst> DstLimits;
    BEGIN_TEST;
    static_assert(sizeof(Dst) >= sizeof(Src),
                  "Destination must be equal or wider than source.");
    static_assert(SrcLimits::is_signed, "Source must be signed");
    static_assert(!DstLimits::is_signed, "Destination must be unsigned");

    const CheckedNumeric<Dst> checked_dst;
    TEST_EXPECTED_VALUE(SrcLimits::max(), checked_dst + SrcLimits::max());
    TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW, checked_dst + static_cast<Src>(-1));
    TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW, checked_dst + -SrcLimits::max());

    TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::min());
    TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::max());
    TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(1));
    TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, static_cast<Src>(-1));
    END_TEST;
  }
};

template <typename Dst, typename Src>
struct TestNumericConversion<Dst, Src, SIGN_TO_UNSIGN_NARROW> {
  static bool Test(void*) {
    typedef numeric_limits<Src> SrcLimits;
    typedef numeric_limits<Dst> DstLimits;
    BEGIN_TEST;
    static_assert((DstLimits::is_integer && SrcLimits::is_iec559) ||
                   (sizeof(Dst) < sizeof(Src)),
                  "Destination must be narrower than source.");
    static_assert(SrcLimits::is_signed, "Source must be signed.");
    static_assert(!DstLimits::is_signed, "Destination must be unsigned.");

    const CheckedNumeric<Dst> checked_dst;
    TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
    TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW, checked_dst + SrcLimits::max());
    TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW, checked_dst + static_cast<Src>(-1));
    TEST_EXPECTED_VALIDITY(RANGE_UNDERFLOW, checked_dst + -SrcLimits::max());

    TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::max());
    TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(1));
    TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, static_cast<Src>(-1));
    if (SrcLimits::is_iec559) {
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::max() * -1);
      TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::infinity());
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::infinity() * -1);
      TEST_EXPECTED_RANGE(RANGE_INVALID, SrcLimits::quiet_NaN());
      if (DstLimits::is_integer) {
        if (SrcLimits::digits < DstLimits::digits) {
          TEST_EXPECTED_RANGE(RANGE_OVERFLOW,
                              static_cast<Src>(DstLimits::max()));
        } else {
          TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(DstLimits::max()));
        }
        TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(DstLimits::min()));
      }
    } else {
      TEST_EXPECTED_RANGE(RANGE_UNDERFLOW, SrcLimits::min());
    }
    END_TEST;
  }
};

template <typename Dst, typename Src>
struct TestNumericConversion<Dst, Src, UNSIGN_TO_SIGN_NARROW_OR_EQUAL> {
  static bool Test(void*) {
    typedef numeric_limits<Src> SrcLimits;
    typedef numeric_limits<Dst> DstLimits;
    BEGIN_TEST;
    static_assert(sizeof(Dst) <= sizeof(Src),
                  "Destination must be narrower or equal to source.");
    static_assert(!SrcLimits::is_signed, "Source must be unsigned.");
    static_assert(DstLimits::is_signed, "Destination must be signed.");

    const CheckedNumeric<Dst> checked_dst;
    TEST_EXPECTED_VALUE(1, checked_dst + static_cast<Src>(1));
    TEST_EXPECTED_VALIDITY(RANGE_OVERFLOW, checked_dst + SrcLimits::max());
    TEST_EXPECTED_VALUE(SrcLimits::min(), checked_dst + SrcLimits::min());

    TEST_EXPECTED_RANGE(RANGE_VALID, SrcLimits::min());
    TEST_EXPECTED_RANGE(RANGE_OVERFLOW, SrcLimits::max());
    TEST_EXPECTED_RANGE(RANGE_VALID, static_cast<Src>(1));
    END_TEST;
  }
};

#define TEST_NUMERIC_CONVERSION(d, s, t) \
    UNITTEST(#d " <--> " #s, (TestNumericConversion<d, s, t>::Test))

UNITTEST_START_TESTCASE(SafeNumerics_IntMinOperations)
TEST_NUMERIC_CONVERSION(int8_t,  int8_t,       SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(uint8_t, uint8_t,      SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(int8_t,  int,          SIGN_PRESERVING_NARROW)
TEST_NUMERIC_CONVERSION(uint8_t, unsigned int, SIGN_PRESERVING_NARROW)
TEST_NUMERIC_CONVERSION(uint8_t, int8_t,       SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(uint8_t, int,          SIGN_TO_UNSIGN_NARROW)
TEST_NUMERIC_CONVERSION(uint8_t, intmax_t,     SIGN_TO_UNSIGN_NARROW)
TEST_NUMERIC_CONVERSION(int8_t,  unsigned int, UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
TEST_NUMERIC_CONVERSION(int8_t,  uintmax_t,    UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
UNITTEST_END_TESTCASE(SafeNumerics_IntMinOperations,
                      "intmin_ops", "SafeNumerics IntMin operations",
                      NULL, NULL);

UNITTEST_START_TESTCASE(SafeNumerics_IntOperations)
TEST_NUMERIC_CONVERSION(int,          int,          SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(unsigned int, unsigned int, SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(int,          int8_t,       SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(unsigned int, uint8_t,      SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(int,          uint8_t,      SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(int,          intmax_t,     SIGN_PRESERVING_NARROW)
TEST_NUMERIC_CONVERSION(unsigned int, uintmax_t,    SIGN_PRESERVING_NARROW)
TEST_NUMERIC_CONVERSION(unsigned int, int,          SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(unsigned int, int8_t,       SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(unsigned int, intmax_t,     SIGN_TO_UNSIGN_NARROW)
TEST_NUMERIC_CONVERSION(int,          unsigned int, UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
TEST_NUMERIC_CONVERSION(int,          uintmax_t,    UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
UNITTEST_END_TESTCASE(SafeNumerics_IntOperations,
                      "int_ops", "SafeNumerics Int operations",
                      NULL, NULL);

UNITTEST_START_TESTCASE(SafeNumerics_IntMaxOperations)
TEST_NUMERIC_CONVERSION(intmax_t,  intmax_t,     SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(uintmax_t, uintmax_t,    SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(intmax_t,  int,          SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(uintmax_t, unsigned int, SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(intmax_t,  unsigned int, SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(intmax_t,  uint8_t,      SIGN_PRESERVING_VALUE_PRESERVING)
TEST_NUMERIC_CONVERSION(uintmax_t, int,          SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(uintmax_t, int8_t,       SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(intmax_t,  uintmax_t,    UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
UNITTEST_END_TESTCASE(SafeNumerics_IntMaxOperations,
                      "intmax_ops", "SafeNumerics IntMax operations",
                      NULL, NULL);

UNITTEST_START_TESTCASE(SafeNumerics_SizeTOperations)
TEST_NUMERIC_CONVERSION(size_t, int,    SIGN_TO_UNSIGN_WIDEN_OR_EQUAL)
TEST_NUMERIC_CONVERSION(int,    size_t, UNSIGN_TO_SIGN_NARROW_OR_EQUAL)
UNITTEST_END_TESTCASE(SafeNumerics_SizeTOperations,
                      "sizet_ops", "SafeNumerics SizeT operations",
                      NULL, NULL);

bool SafeNumerics_CastTests(void*) {
// MSVC catches and warns that we're forcing saturation in these tests.
// Since that's intentional, we need to shut this warning off.
#if defined(COMPILER_MSVC)
#pragma warning(disable : 4756)
#endif

  int small_positive = 1;
  int small_negative = -1;

  BEGIN_TEST;

  // Just test that the casts compile, since the other tests cover logic.
  EXPECT_EQ2(0, checked_cast<int>(static_cast<size_t>(0)));
  EXPECT_EQ2(0, strict_cast<int>(static_cast<char>(0)));
  EXPECT_EQ2(0, strict_cast<int>(static_cast<unsigned char>(0)));
  EXPECT_EQ2(0U, strict_cast<unsigned>(static_cast<unsigned char>(0)));
  EXPECT_EQ2(1ULL, static_cast<uint64_t>(StrictNumeric<size_t>(1U)));
  EXPECT_EQ2(1ULL, static_cast<uint64_t>(SizeT(1U)));
  EXPECT_EQ2(1U, static_cast<size_t>(StrictNumeric<unsigned>(1U)));

  EXPECT_TRUE1(CheckedNumeric<uint64_t>(StrictNumeric<unsigned>(1U)).IsValid());
  EXPECT_TRUE1(CheckedNumeric<int>(StrictNumeric<unsigned>(1U)).IsValid());
  EXPECT_FALSE1(CheckedNumeric<unsigned>(StrictNumeric<int>(-1)).IsValid());

  EXPECT_TRUE1(IsValueNegative(-1));
  EXPECT_TRUE1(IsValueNegative(numeric_limits<int>::min()));
  EXPECT_FALSE1(IsValueNegative(numeric_limits<unsigned>::min()));
  EXPECT_FALSE1(IsValueNegative(0));
  EXPECT_FALSE1(IsValueNegative(1));
  EXPECT_FALSE1(IsValueNegative(0u));
  EXPECT_FALSE1(IsValueNegative(1u));
  EXPECT_FALSE1(IsValueNegative(numeric_limits<int>::max()));
  EXPECT_FALSE1(IsValueNegative(numeric_limits<unsigned>::max()));

  // These casts and coercions will fail to compile:
  // EXPECT_EQ2(0, strict_cast<int>(static_cast<size_t>(0)));
  // EXPECT_EQ2(0, strict_cast<size_t>(static_cast<int>(0)));
  // EXPECT_EQ2(1ULL, StrictNumeric<size_t>(1));
  // EXPECT_EQ2(1, StrictNumeric<size_t>(1U));

  // Test various saturation corner cases.
  EXPECT_EQ2(saturated_cast<int>(small_negative),
            static_cast<int>(small_negative));
  EXPECT_EQ2(saturated_cast<int>(small_positive),
            static_cast<int>(small_positive));
  EXPECT_EQ2(saturated_cast<unsigned>(small_negative),
            static_cast<unsigned>(0));
  END_TEST;
}

bool SafeNumerics_IsValueInRangeForNumericType(void*) {
  BEGIN_TEST;
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint32_t>(0));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint32_t>(1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint32_t>(2));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint32_t>(-1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint32_t>(0xffffffffu));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint32_t>(UINT64_C(0xffffffff)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint32_t>(UINT64_C(0x100000000)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint32_t>(UINT64_C(0x100000001)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint32_t>(
      fbl::numeric_limits<int32_t>::min()));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint32_t>(
      fbl::numeric_limits<int64_t>::min()));

  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(0));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(2));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(-1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(0x7fffffff));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(0x7fffffffu));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(0x80000000u));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(0xffffffffu));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(INT64_C(0x80000000)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(INT64_C(0xffffffff)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(INT64_C(0x100000000)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(
      fbl::numeric_limits<int32_t>::min()));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int32_t>(
      static_cast<int64_t>(fbl::numeric_limits<int32_t>::min())));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(
      static_cast<int64_t>(fbl::numeric_limits<int32_t>::min()) - 1));
  EXPECT_FALSE1(IsValueInRangeForNumericType<int32_t>(
      fbl::numeric_limits<int64_t>::min()));

  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(0));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(2));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint64_t>(-1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(0xffffffffu));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(UINT64_C(0xffffffff)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(UINT64_C(0x100000000)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<uint64_t>(UINT64_C(0x100000001)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint64_t>(
      fbl::numeric_limits<int32_t>::min()));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint64_t>(INT64_C(-1)));
  EXPECT_FALSE1(IsValueInRangeForNumericType<uint64_t>(
      fbl::numeric_limits<int64_t>::min()));

  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(0));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(2));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(-1));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(0x7fffffff));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(0x7fffffffu));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(0x80000000u));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(0xffffffffu));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(INT64_C(0x80000000)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(INT64_C(0xffffffff)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(INT64_C(0x100000000)));
  EXPECT_TRUE1(
      IsValueInRangeForNumericType<int64_t>(INT64_C(0x7fffffffffffffff)));
  EXPECT_TRUE1(
      IsValueInRangeForNumericType<int64_t>(UINT64_C(0x7fffffffffffffff)));
  EXPECT_FALSE1(
      IsValueInRangeForNumericType<int64_t>(UINT64_C(0x8000000000000000)));
  EXPECT_FALSE1(
      IsValueInRangeForNumericType<int64_t>(UINT64_C(0xffffffffffffffff)));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(
      fbl::numeric_limits<int32_t>::min()));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(
      static_cast<int64_t>(fbl::numeric_limits<int32_t>::min())));
  EXPECT_TRUE1(IsValueInRangeForNumericType<int64_t>(
      fbl::numeric_limits<int64_t>::min()));
  END_TEST;
}

bool SafeNumerics_CompoundNumericOperations(void*) {
  BEGIN_TEST;
  CheckedNumeric<int> a = 1;
  CheckedNumeric<int> b = 2;
  CheckedNumeric<int> c = 3;
  CheckedNumeric<int> d = 4;
  a += b;
  EXPECT_EQ2(3, a.ValueOrDie());
  a -= c;
  EXPECT_EQ2(0, a.ValueOrDie());
  d /= b;
  EXPECT_EQ2(2, d.ValueOrDie());
  d *= d;
  EXPECT_EQ2(4, d.ValueOrDie());

  CheckedNumeric<int> too_large = fbl::numeric_limits<int>::max();
  EXPECT_TRUE1(too_large.IsValid());
  too_large += d;
  EXPECT_FALSE1(too_large.IsValid());
  too_large -= d;
  EXPECT_FALSE1(too_large.IsValid());
  too_large /= d;
  EXPECT_FALSE1(too_large.IsValid());
  END_TEST;
}

UNITTEST_START_TESTCASE(SafeNumerics)
UNITTEST("Cast", SafeNumerics_CastTests)
UNITTEST("In-range for type", SafeNumerics_IsValueInRangeForNumericType)
UNITTEST("Compound numeric ops", SafeNumerics_CompoundNumericOperations)
UNITTEST_END_TESTCASE(SafeNumerics,
                      "safenum", "Misc. SafeNumerics tests.",
                      NULL, NULL);