Add static assertion that uint32_t is unsigned int or wider
This commit is contained in:
parent
4ad408faf3
commit
c0041b5cfc
@ -7,6 +7,8 @@
|
|||||||
#ifndef SECP256K1_ASSUMPTIONS_H
|
#ifndef SECP256K1_ASSUMPTIONS_H
|
||||||
#define SECP256K1_ASSUMPTIONS_H
|
#define SECP256K1_ASSUMPTIONS_H
|
||||||
|
|
||||||
|
#include <limits.h>
|
||||||
|
|
||||||
#include "util.h"
|
#include "util.h"
|
||||||
|
|
||||||
/* This library, like most software, relies on a number of compiler implementation defined (but not undefined)
|
/* This library, like most software, relies on a number of compiler implementation defined (but not undefined)
|
||||||
@ -19,7 +21,11 @@ struct secp256k1_assumption_checker {
|
|||||||
allowed. */
|
allowed. */
|
||||||
int dummy_array[(
|
int dummy_array[(
|
||||||
/* Bytes are 8 bits. */
|
/* Bytes are 8 bits. */
|
||||||
CHAR_BIT == 8 &&
|
(CHAR_BIT == 8) &&
|
||||||
|
|
||||||
|
/* No integer promotion for uint32_t. This ensures that we can multiply uintXX_t values where XX >= 32
|
||||||
|
without signed overflow, which would be undefined behaviour. */
|
||||||
|
(UINT_MAX <= UINT32_MAX) &&
|
||||||
|
|
||||||
/* Conversions from unsigned to signed outside of the bounds of the signed type are
|
/* Conversions from unsigned to signed outside of the bounds of the signed type are
|
||||||
implementation-defined. Verify that they function as reinterpreting the lower
|
implementation-defined. Verify that they function as reinterpreting the lower
|
||||||
|
Loading…
x
Reference in New Issue
Block a user