/*
 * Copyright (C) 2010 Google Inc. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * 1.  Redistributions of source code must retain the above copyright
 *     notice, this list of conditions and the following disclaimer.
 * 2.  Redistributions in binary form must reproduce the above copyright
 *     notice, this list of conditions and the following disclaimer in the
 *     documentation and/or other materials provided with the distribution.
 * 3.  Neither the name of Apple Computer, Inc. ("Apple") nor the names of
 *     its contributors may be used to endorse or promote products derived
 *     from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY APPLE AND ITS CONTRIBUTORS "AS IS" AND ANY
 * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
 * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
 * DISCLAIMED. IN NO EVENT SHALL APPLE OR ITS CONTRIBUTORS BE LIABLE FOR ANY
 * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
 * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
 * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */

#ifndef AudioArray_h
#define AudioArray_h

#include "wtf/Allocator.h"
#include "wtf/Vector.h"
#include "wtf/allocator/Partitions.h"
#include "wtf/build_config.h"
#include <string.h>

namespace blink {

template <typename T>
class AudioArray {
  USING_FAST_MALLOC(AudioArray);
  WTF_MAKE_NONCOPYABLE(AudioArray);

 public:
  AudioArray() : m_allocation(nullptr), m_alignedData(nullptr), m_size(0) {}
  explicit AudioArray(size_t n)
      : m_allocation(nullptr), m_alignedData(nullptr), m_size(0) {
    allocate(n);
  }

  ~AudioArray() { WTF::Partitions::fastFree(m_allocation); }

  // It's OK to call allocate() multiple times, but data will *not* be copied
  // from an initial allocation if re-allocated. Allocations are
  // zero-initialized.
  void allocate(size_t n) {
    // Although n is a size_t, its true limit is max unsigned because we use
    // unsigned in zeroRange() and copyToRange(). Also check for integer
    // overflow.
    RELEASE_ASSERT(n <= std::numeric_limits<unsigned>::max() / sizeof(T));

    unsigned initialSize = sizeof(T) * n;

#if USE(WEBAUDIO_FFMPEG) || USE(WEBAUDIO_OPENMAX_DL_FFT)
    const size_t alignment = 32;
#else
    const size_t alignment = 16;
#endif

    if (m_allocation)
      WTF::Partitions::fastFree(m_allocation);

    bool isAllocationGood = false;

    while (!isAllocationGood) {
      // Initially we try to allocate the exact size, but if it's not aligned
      // then we'll have to reallocate and from then on allocate extra.
      static size_t extraAllocationBytes = 0;

      // Again, check for integer overflow.
      RELEASE_ASSERT(initialSize + extraAllocationBytes >= initialSize);

      T* allocation = static_cast<T*>(WTF::Partitions::fastMalloc(
          initialSize + extraAllocationBytes,
          WTF_HEAP_PROFILER_TYPE_NAME(AudioArray<T>)));
      RELEASE_ASSERT(allocation);

      T* alignedData = alignedAddress(allocation, alignment);

      if (alignedData == allocation || extraAllocationBytes == alignment) {
        m_allocation = allocation;
        m_alignedData = alignedData;
        m_size = n;
        isAllocationGood = true;
        zero();
      } else {
        // always allocate extra after the first alignment failure.
        extraAllocationBytes = alignment;
        WTF::Partitions::fastFree(allocation);
      }
    }
  }

  T* data() { return m_alignedData; }
  const T* data() const { return m_alignedData; }
  size_t size() const { return m_size; }

  T& at(size_t i) {
    // Note that although it is a size_t, m_size is now guaranteed to be
    // no greater than max unsigned. This guarantee is enforced in allocate().
    ASSERT_WITH_SECURITY_IMPLICATION(i < size());
    return data()[i];
  }

  T& operator[](size_t i) { return at(i); }

  void zero() {
    // This multiplication is made safe by the check in allocate().
    memset(this->data(), 0, sizeof(T) * this->size());
  }

  void zeroRange(unsigned start, unsigned end) {
    bool isSafe = (start <= end) && (end <= this->size());
    ASSERT(isSafe);
    if (!isSafe)
      return;

    // This expression cannot overflow because end - start cannot be
    // greater than m_size, which is safe due to the check in allocate().
    memset(this->data() + start, 0, sizeof(T) * (end - start));
  }

  void copyToRange(const T* sourceData, unsigned start, unsigned end) {
    bool isSafe = (start <= end) && (end <= this->size());
    ASSERT(isSafe);
    if (!isSafe)
      return;

    // This expression cannot overflow because end - start cannot be
    // greater than m_size, which is safe due to the check in allocate().
    memcpy(this->data() + start, sourceData, sizeof(T) * (end - start));
  }

 private:
  static T* alignedAddress(T* address, intptr_t alignment) {
    intptr_t value = reinterpret_cast<intptr_t>(address);
    return reinterpret_cast<T*>((value + alignment - 1) & ~(alignment - 1));
  }

  T* m_allocation;
  T* m_alignedData;
  size_t m_size;
};

typedef AudioArray<float> AudioFloatArray;
typedef AudioArray<double> AudioDoubleArray;

}  // namespace blink

#endif  // AudioArray_h