mirror of
git://git.sv.gnu.org/emacs.git
synced 2026-01-18 08:51:45 -08:00
(allocate_vectorlike, buffer_memory_full, struct sdata, SDATA_SIZE) (string_bytes, check_sblock, allocate_string_data): (compact_small_strings, Fmake_bool_vector, make_string) (make_unibyte_string, make_multibyte_string) (make_string_from_bytes, make_specified_string) (allocate_vectorlike, Fmake_vector, find_string_data_in_pure) (make_pure_string, make_pure_c_string, make_pure_vector, Fpurecopy) (mark_vectorlike): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (allocate_pseudovector): Use int, not EMACS_INT, where int is wide enough. (inhibit_garbage_collection, Fgarbage_collect): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * bidi.c (bidi_mirror_char): Use EMACS_INT, not int, where int might not be wide enough. (bidi_cache_search, bidi_cache_find, bidi_init_it) (bidi_count_bytes, bidi_char_at_pos, bidi_fetch_char) (bidi_at_paragraph_end, bidi_find_paragraph_start) (bidi_paragraph_init, bidi_resolve_explicit, bidi_resolve_weak) (bidi_level_of_next_char, bidi_move_to_visually_next): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * buffer.c (copy_overlays, Fgenerate_new_buffer_name) (Fkill_buffer, Fset_buffer_major_mode) (advance_to_char_boundary, Fbuffer_swap_text) (Fset_buffer_multibyte, overlays_at, overlays_in) (overlay_touches_p, struct sortvec, record_overlay_string) (overlay_strings, recenter_overlay_lists) (adjust_overlays_for_insert, adjust_overlays_for_delete) (fix_start_end_in_overlays, fix_overlays_before, modify_overlay) (Fmove_overlay, Fnext_overlay_change, Fprevious_overlay_change) (Foverlay_recenter, last_overlay_modification_hooks_used) (report_overlay_modification, evaporate_overlays, enlarge_buffer_text): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (validate_region): Omit unnecessary test for b <= e, since that's guaranteed by the previous test. (adjust_overlays_for_delete): Avoid pos + length overflow. (Fmove_overlay, Fdelete_overlay, add_overlay_mod_hooklist) (report_overlay_modification): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Foverlays_at, Fnext_overlay_change, Fprevious_overlay_change): Omit pointer cast, which isn't needed anyway, and doesn't work after the EMACS_INT -> ptrdiff_t change. * buffer.h: Adjust decls to match defn changes elsewhere. (struct buffer_text, struct buffer): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. Use EMACS_INT, not int, where int might not be wide enough. * bytecode.c (exec_byte_code): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. Remove unnecessary memory-full test. Use EMACS_INT, not ptrdiff_t or int, where ptrdiff_t or int might not be wide enough. * callint.c (Fcall_interactively): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * callproc.c (call_process_kill, Fcall_process): Don't assume pid_t fits into an Emacs fixnum. (call_process_cleanup, Fcall_process, child_setup): Don't assume pid_t fits into int. (call_process_cleanup, Fcall_process, delete_temp_file) (Fcall_process_region): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fcall_process): Simplify handling of volatile integers. Use int, not EMACS_INT, where int will do. * casefiddle.c (casify_object, casify_region, operate_on_word) (Fupcase_word, Fdowncase_word, Fcapitalize_word): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (casify_object): Avoid integer overflow when overallocating buffer. * casetab.c (set_identity, shuffle): Prefer int to unsigned when either works. * category.c (Fchar_category_set): Don't assume fixnum fits in int. * category.h (CATEGORYP): Don't assume arg is nonnegative. * ccl.c (GET_CCL_INT): Remove; no longer needed, since the integers are now checked earlier. All uses replaced with XINT. (ccl_driver): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. For CCL_MapSingle, check that content and value are in int range. (resolve_symbol_ccl_program): Check that vector header is in range. Always copy the vector, so that we can check its contents reliably now rather than having to recheck each instruction as it's being executed. Check that vector words fit in 'int'. (ccl_get_compiled_code, Fregister_ccl_program) (Fregister_code_conversion_map): Use ptrdiff_t, not int, for program indexes, to avoid needless 32-bit limit on 64-bit hosts. (Fccl_execute, Fccl_execute_on_string): Check that initial reg contents are in range. (Fccl_execute_on_string): Check that status is in range. * ccl.h (struct ccl_program.idx): Now ptrdiff_t, not int. * character.c (char_resolve_modifier_mask, Fchar_resolve_modifiers): Accept and return EMACS_INT, not int, because callers can pass values out of 'int' range. (c_string_width, strwidth, lisp_string_width, chars_in_text) (multibyte_chars_in_text, parse_str_as_multibyte) (str_as_multibyte, count_size_as_multibyte, str_to_multibyte) (str_as_unibyte, str_to_unibyte, string_count_byte8) (string_escape_byte8, Fget_byte): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Funibyte_string): Use CHECK_CHARACTER, not CHECK_NATNUM, to avoid mishandling large integers. * character.h: Adjust decls to match defn changes elsewhere. * charset.c (load_charset_map_from_file, find_charsets_in_text) (Ffind_charset_region): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (load_charset_map_from_file): Redo idx calculation to avoid overflow. (load_charset_map_from_vector, Fdefine_charset_internal): Don't assume fixnum fits in int or unsigned int. (load_charset_map_from_vector, Fmap_charset_chars): Remove now-unnecessary CHECK_NATNUMs. (Fdefine_charset_internal): Check ranges here, more carefully. * chartab.c (Fmake_char_table, Fset_char_table_range) (uniprop_get_decoder, uniprop_get_encoder): Don't assume fixnum fits in int. * cmds.c (move_point): New function, that does the gist of Fforward_char and Fbackward_char, but does so while checking for integer overflow more accurately. (Fforward_char, Fbackward_char, internal_self_insert): Use it. (Fforward_line, Fend_of_line, internal_self_insert) (internal_self_insert): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. Fix a FIXME, by checking for integer overflow when calculating target_clm and actual_clm. * coding.c (detect_coding_XXX, encode_coding_XXX, CODING_DECODE_CHAR) (ASSURE_DESTINATION, coding_alloc_by_realloc) (coding_alloc_by_making_gap, alloc_destination) (detect_coding_utf_8, encode_coding_utf_8, decode_coding_utf_16) (encode_coding_utf_16, detect_coding_emacs_mule) (decode_coding_emacs_mule, encode_coding_emacs_mule) (detect_coding_iso_2022, decode_coding_iso_2022) (encode_invocation_designation, encode_designation_at_bol) (encode_coding_iso_2022, detect_coding_sjis, detect_coding_big5) (decode_coding_sjis, decode_coding_big5, encode_coding_sjis) (encode_coding_big5, detect_coding_ccl, decode_coding_ccl) (encode_coding_ccl, encode_coding_raw_text) (detect_coding_charset, decode_coding_charset) (encode_coding_charset, detect_eol, decode_eol, produce_chars) (produce_composition, produce_charset, produce_annotation) (decode_coding, handle_composition_annotation) (handle_charset_annotation, consume_chars, decode_coding_gap) (decode_coding_object, encode_coding_object, detect_coding_system) (Ffind_coding_systems_region_internal, Fcheck_coding_systems_region) (code_convert_region, code_convert_string) (Fdefine_coding_system_internal): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (setup_iso_safe_charsets, consume_chars, Funencodable_char_position) (Fdefine_coding_system_internal): Don't assume fixnums fit in int. (decode_coding_gap, decode_coding_object, encode_coding_object) (Fread_coding_system, Fdetect_coding_region, Funencodable_char_position) (Fcheck_coding_systems_region): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Ffind_operation_coding_system): NATNUMP can eval its arg twice. (Fdefine_coding_system_internal): Check for charset-id overflow. * coding.h: Adjust decls to match defn changes elsewhere. (struct coding_system): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * composite.c (get_composition_id, find_composition) (run_composition_function, update_compositions) (compose_text, composition_gstring_put_cache) (composition_gstring_p, composition_gstring_width) (fill_gstring_header, fill_gstring_body, autocmp_chars) (composition_compute_stop_pos, composition_reseat_it) (composition_update_it, struct position_record) (find_automatic_composition, composition_adjust_point) (Fcomposition_get_gstring, Ffind_composition_internal): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (update_compositions): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * composite.h: Adjust decls to match defn changes elsewhere. (struct composition): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * data.c (let_shadows_buffer_binding_p, let_shadows_global_binding_p): Do not attempt to compute the address of the object just before a buffer; this is not portable. (Faref, Faset): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Faset): Use int, not EMACS_INT, where int is wide enough. (Fstring_to_number): Don't assume fixnums fit in int. (Frem): Don't assume arg is nonnegative. * dbusbind.c (xd_append_arg): Check for integers out of range. (Fdbus_call_method): Don't overflow the timeout int. * dired.c (directory_files_internal, file_name_completion, scmp) (file_name_completion_stat): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (file_name_completion): Don't overflow matchcount. (file_name_completion_stat): Use SAFE_ALLOCA, not alloca. * dispextern.h: Adjust decls to match defn changes elsewhere. (struct text_pos, struct glyph, struct bidi_saved_info) (struct bidi_string_data, struct bidi_it, struct composition_it) (struct it): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (struct display_pos, struct composition_it, struct it): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * dispnew.c (increment_matrix_positions) (increment_row_positions, mode_line_string) (marginal_area_string): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (change_frame_size_1, Fredisplay): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (duration_to_sec_usec): New function, to check for overflow better. (Fsleep_for, sit_for): Use it. * doc.c (get_doc_string, store_function_docstring): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (get_doc_string, Fsnarf_documentation): Use int, not EMACS_INT, where int is wide enough. (get_doc_string): Use SAFE_ALLOCA, not alloca. Check for overflow when converting EMACS_INT to off_t. * doprnt.c (doprnt): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * editfns.c (init_editfns, Fuser_uid, Fuser_real_uid): Don't assume uid_t fits into fixnum. (buildmark, Fgoto_char, overlays_around, find_field, Fdelete_field) (Ffield_string, Ffield_string_no_properties, Ffield_beginning) (Ffield_end, Fconstrain_to_field, Fline_beginning_position) (Fline_end_position, Fprevious_char, Fchar_after, Fchar_before) (general_insert_function) (Finsert_char, make_buffer_string, make_buffer_string_both) (update_buffer_properties, Fbuffer_substring) (Fbuffer_substring_no_properties, Fcompare_buffer_substrings) (Fsubst_char_in_region, check_translation) (Ftranslate_region_internal, save_restriction_restore, Fformat) (transpose_markers, Ftranspose_regions): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (clip_to_bounds): Move to lisp.h as an inline function). (Fconstrain_to_field): Don't assume integers are nonnegative. (Fline_beginning_position, Fsave_excursion, Fsave_current_buffer): (Fsubst_char_in_region, Fsave_restriction): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Femacs_pid): Don't assume pid_t fits into fixnum. (lo_time): Use int, not EMACS_INT, when int suffices. (lisp_time_argument): Check for usec out of range. (Fencode_time): Don't assume fixnum fits in int. * emacs.c (gdb_valbits, gdb_gctypebits): Now int, not EMACS_INT. (gdb_data_seg_bits): Now uintptr_t, not EMACS_INT. (PVEC_FLAG, gdb_array_mark_flag): Now ptrdiff_t, not EMACS_INT. (init_cmdargs, Fdump_emacs): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fkill_emacs): Don't assume fixnum fits in int; instead, take just the bottom (typically) 32 bits of the fixnum. * eval.c (specpdl_size, call_debugger): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (when_entered_debugger, Fbacktrace_debug): Don't assume fixnum can fit in int. (Fdefvaralias, Fdefvar): Do not attempt to compute the address of the object just before a buffer; this is not portable. (FletX, Flet, Funwind_protect, do_autoload, Feval, funcall_lambda) (grow_specpdl, unbind_to): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fapply, apply_lambda): Don't assume ptrdiff_t can hold fixnum. (grow_specpdl): Simplify allocation by using xpalloc. * fileio.c (Ffind_file_name_handler, Fcopy_file, Frename_file) (Finsert_file_contents, Fwrite_region, Fdo_auto_save): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Ffind_file_name_handler, non_regular_inserted, Finsert_file_contents) (a_write, e_write): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fcopy_file, non_regular_nbytes, read_non_regular) (Finsert_file_contents): Use int, not EMACS_INT, where int is wide enough. (READ_BUF_SIZE): Verify that it fits in int. (Finsert_file_contents): Check that counts are in proper range, rather than assuming fixnums fit into ptrdiff_t etc. Don't assume fixnums fit into int. (Fdo_auto_save, Fset_buffer_auto_saved) (Fclear_buffer_auto_save_failure): Don't assume time_t is signed, or that it fits in int. * fns.c (Fcompare_strings, Fstring_lessp, struct textprop_rec) (concat, string_char_byte_cache_charpos, string_char_byte_cache_bytepos) (string_char_to_byte, string_byte_to_char) (string_make_multibyte, string_to_multibyte) (string_make_unibyte, Fstring_as_unibyte, Fstring_as_multibyte) (Fstring_to_unibyte, Fsubstring, Fsubstring_no_properties) (substring_both, Fdelete, internal_equal, Ffillarray) (Fclear_string, mapcar1) (Fbase64_encode_region, Fbase64_encode_string, base64_encode_1) (Fbase64_decode_region, Fbase64_decode_string, base64_decode_1) (larger_vector, make_hash_table, maybe_resize_hash_table) (hash_lookup, hash_remove_from_table, hash_clear, sweep_weak_table) (Fmaphash, secure_hash): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (concat): Check for string index and length overflow. (Fmapconcat): Don't assume fixnums fit into ptrdiff_t. (Frequire): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (larger_vector): New API (vec, incr_min, size_max) replaces old one (vec, new_size, init). This catches size overflow. INIT was removed because it was always Qnil. All callers changed. (INDEX_SIZE_BOUND): New macro, which calculates more precisely the upper bound on a hash table index size. (make_hash_table, maybe_resize_hash_table): Use it. (secure_hash): Computer start_byte and end_byte only after they're known to be in ptrdiff_t range. * font.c (font_intern_prop, font_at, font_range, Ffont_shape_gstring) (Ffont_get_glyphs, Ffont_at): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (font_style_to_value, font_prop_validate_style, font_expand_wildcards) (Flist_fonts, Fopen_font): Don't assume fixnum can fit in int. (check_gstring): Don't assume index can fit in int. (font_match_p): Check that fixnum is a character, not a nonnegative fixnum, since the later code needs to stuff it into an int. (font_find_for_lface): Use SAFE_ALLOCA_LISP, not alloca. (font_fill_lglyph_metrics): Use unsigned, not EMACS_INT, to avoid conversion overflow issues. (Fopen_font): Check for integer out of range. (Ffont_get_glyphs): Don't assume index can fit in int. * font.h: Adjust decls to match defn changes elsewhere. * fontset.c (reorder_font_vector): Redo score calculation to avoid integer overflow. (num_auto_fontsets, fontset_from_font): Use ptrdiff_t, not printmax_t, where ptrdiff_t is wide enough. (Finternal_char_font): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * frame.c (Fset_mouse_position, Fset_mouse_pixel_position) (Fset_frame_height, Fset_frame_width, Fset_frame_size) (Fset_frame_position, x_set_frame_parameters) (x_set_line_spacing, x_set_border_width) (x_set_internal_border_width, x_set_alpha, x_figure_window_size): Check that fixnums are in proper range for system types. (frame_name_fnn_p, Fframe_parameter, Fmodify_frame_parameters): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fmodify_frame_parameters): Don't assume fixnum fits in int. Use SAFE_ALLOCA_LISP, not alloca. * frame.h (struct frame): Use intptr_t, not EMACS_INT, where intptr_t is wide enough. * fringe.c (lookup_fringe_bitmap, get_logical_fringe_bitmap) (Fdefine_fringe_bitmap): Don't assume fixnum fits in int. (Ffringe_bitmaps_at_pos): Don't assume index fits in int. Check for fixnum out of range. * ftfont.c (ftfont_list): Don't assume index fits in int. Check that fixnums are in proper range for system types. (ftfont_shape_by_flt): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. Remove no-longer-needed lint_assume. * gnutls.c (emacs_gnutls_write, emacs_gnutls_read): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fgnutls_error_fatalp, Fgnutls_error_string, Fgnutls_boot): Check that fixnums are in proper range for system types. * gnutls.h: Adjust decls to match defn changes elsewhere. * gtkutil.c (xg_dialog_run): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (update_frame_tool_bar): Check that fixnums are in proper range for system types. * image.c (parse_image_spec): Redo count calculation to avoid overflow. (lookup_image): Check that fixnums are in proper range for system types. * indent.c (last_known_column, last_known_column_point): (current_column_bol_cache): (skip_invisible, current_column, check_display_width): (check_display_width, scan_for_column, current_column_1) (Findent_to, Fcurrent_indentation, position_indentation) (indented_beyond_p, Fmove_to_column, compute_motion): (Fcompute_motion, Fvertical_motion): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (last_known_column_modified): Use EMACS_INT, not int. (check_display_width): (Fcompute_motion): Check that fixnums and floats are in proper range for system types. (compute_motion): Don't assume index or fixnum fits in int. (compute_motion, Fcompute_motion): Use int, not EMACS_INT, when it is wide enough. (vmotion): Omit local var start_hpos that is always 0; that way we don't need to worry about overflow in expressions involving it. * indent.h: Adjust decls to match defn changes elsewhere. (struct position): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. Use int, not EMACS_INT, where int is wide enough. Remove unused members ovstring_chars_done and tab_offset; all uses removed. * insdel.c (move_gap, move_gap_both, gap_left, gap_right) (adjust_markers_for_delete, adjust_markers_for_insert, adjust_point) (adjust_markers_for_replace, make_gap_larger, make_gap_smaller) (make_gap, copy_text, insert, insert_and_inherit) (insert_before_markers, insert_before_markers_and_inherit) (insert_1, count_combining_before, count_combining_after) (insert_1_both, insert_from_string) (insert_from_string_before_markers, insert_from_string_1) (insert_from_gap, insert_from_buffer, insert_from_buffer_1) (adjust_after_replace, adjust_after_insert, replace_range) (replace_range_2, del_range, del_range_1, del_range_byte) (del_range_both, del_range_2, modify_region) (prepare_to_modify_buffer, signal_before_change) (signal_after_change, Fcombine_after_change_execute): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * intervals.c (traverse_intervals, rotate_right, rotate_left) (balance_an_interval, split_interval_right, split_interval_left) (find_interval, next_interval, update_interval) (adjust_intervals_for_insertion, delete_node, delete_interval) (interval_deletion_adjustment, adjust_intervals_for_deletion) (static_offset_intervals, offset_intervals) (merge_interval_right, merge_interval_left, make_new_interval) (graft_intervals_into_buffer, temp_set_point_both) (temp_set_point, set_point, adjust_for_invis_intang) (set_point_both, move_if_not_intangible, get_property_and_range) (get_local_map, copy_intervals, copy_intervals_to_string) (compare_string_intervals, set_intervals_multibyte_1): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * intervals.h: Adjust decls to match defn changes elsewhere. (struct interval): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * keyboard.c (this_command_key_count, this_single_command_key_start) (before_command_key_count, before_command_echo_length, echo_now) (echo_length, recursive_edit_1, Frecursive_edit, Ftrack_mouse) (command_loop_1, safe_run_hooks, read_char, timer_check_2) (menu_item_eval_property, read_key_sequence, Fread_key_sequence) (Fread_key_sequence_vector, Fexecute_extended_command, Fsuspend_emacs): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (last_non_minibuf_size, last_point_position, echo_truncate) (command_loop_1, adjust_point_for_property, read_char, gen_help_event) (make_lispy_position, make_lispy_event, parse_modifiers_uncached) (parse_modifiers, modify_event_symbol, Fexecute_extended_command) (stuff_buffered_input): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (last_auto_save, command_loop_1, read_char): Use EMACS_INT, not int, to avoid integer overflow. (record_char): Avoid overflow in total_keys computation. (parse_modifiers_uncached): Redo index calculation to avoid overflow. * keyboard.h: Adjust decls to match defn changes elsewhere. * keymap.c (Fdefine_key, Fcurrent_active_maps, accessible_keymaps_1) (Fkey_description, Fdescribe_vector, Flookup_key): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (click_position): New function, to check that positions are in range. (Fcurrent_active_maps): (describe_command): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Faccessible_keymaps, Fkey_description): (preferred_sequence_p): Don't assume fixnum can fit into int. (Fkey_description): Use SAFE_ALLOCA_LISP, not alloca. Check for integer overflow in size calculations. (Ftext_char_description): Use CHECK_CHARACTER, not CHECK_NUMBER, to avoid mishandling large integers. * lisp.h: Adjust decls to match defn changes elsewhere. (ARRAY_MARK_FLAG, PSEUDOVECTOR_FLAG, struct Lisp_String) (struct vectorlike_header, struct Lisp_Subr, struct Lisp_Hash_Table) (struct Lisp_Marker): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (clip_to_bounds): Now an inline function, moved here from editfns.c. (XSETSUBR): Use size of 0 since the actual size doesn't matter, and using 0 avoids overflow. (GLYPH_CODE_P): Check for overflow in system types, subsuming the need for GLYPH_CODE_CHAR_VALID_P and doing proper checking ourselves. All callers changed. (GLYPH_CODE_CHAR, GLYPH_CODE_FACE): Assume the arg has valid form, since it always does. (TYPE_RANGED_INTEGERP): Avoid bug when checking against a wide unsigned integer system type. (CHECK_RANGED_INTEGER, CHECK_TYPE_RANGED_INTEGER): New macros. (struct catchtag, specpdl_size, SPECPDL_INDEX, USE_SAFE_ALLOCA): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (struct catchtag): Use EMACS_INT, not int, since it may be a fixnum. (duration_to_sec_usec): New decl. * lread.c (read_from_string_index, read_from_string_index_byte) (read_from_string_limit, readchar, unreadchar, openp) (read_internal_start, read1, oblookup): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fload, readevalloop, Feval_buffer, Feval_region): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (openp): Check for out-of-range argument to 'access'. (read1): Use int, not EMACS_INT, where int is wide enough. Don't assume fixnum fits into int. * macros.c (Fstart_kbd_macro): Use xpalloc to check for overflow in size calculation. (Fexecute_kbd_macro): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * marker.c (cached_charpos, cached_bytepos, CONSIDER) (byte_char_debug_check, buf_charpos_to_bytepos, verify_bytepos) (buf_bytepos_to_charpos, Fset_marker, set_marker_restricted) (set_marker_both, set_marker_restricted_both, marker_position) (marker_byte_position, Fbuffer_has_markers_at): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fset_marker, set_marker_restricted): Don't assume fixnum fits in int. * menu.c (ensure_menu_items): Renamed from grow_menu_items. It now merely ensures that the menu is large enough, without necessarily growing it, as this avoids some integer overflow issues. All callers changed. (keymap_panes, parse_single_submenu, Fx_popup_menu): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (parse_single_submenu, Fx_popup_menu): Don't assume fixnum fits in int. Use SAFE_ALLOCA_LISP, not alloca. (find_and_return_menu_selection): Avoid unnecessary casts of pointers to EMACS_INT. Check that fixnums are in proper range for system types. * minibuf.c (minibuf_prompt_width, string_to_object) (Fminibuffer_contents, Fminibuffer_contents_no_properties) (Fminibuffer_completion_contents, Ftry_completion, Fall_completions): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (get_minibuffer, read_minibuf_unwind): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (read_minibuf): Omit unnecessary arg BACKUP_N, which is always nil; this simplifies overflow checking. All callers changed. (read_minibuf, Fread_buffer, Ftry_completion, Fall_completions) (Ftest_completion): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * nsfns.m (check_ns_display_info): Don't assume fixnum fits in long. (x_set_menu_bar_lines, x_set_tool_bar_lines, Fx_create_frame): Check that fixnums are in proper range for system types. (Fx_create_frame, Fx_show_tip): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * nsfont.m (ns_findfonts, nsfont_list_family): Don't assume fixnum fits in long. * nsmenu.m (ns_update_menubar, ns_menu_show, ns_popup_dialog): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (ns_update_menubar): Use intptr_t, not EMACS_INT, when intptr_t is wide enough. * nsselect.m (ns_get_local_selection): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * print.c (print_buffer_size, print_buffer_pos, print_buffer_pos_byte) (PRINTDECLARE, PRINTPREPARE): (strout, print_string): (print, print_preprocess, print_check_string_charset_prop) (print_object): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (PRINTDECLARE): (temp_output_buffer_setup, Fprin1_to_string, print_object): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (PRINTPREPARE): Use int, not ptrdiff_t, where int is wide enough. (PRINTFINISH): Use SAFE_ALLOCA, not alloca. (printchar, strout): Use xpalloc to catch size calculation overflow. (Fexternal_debugging_output): Use CHECK_CHARACTER, not CHECK_NUMBER, to avoid mishandling large integers. (print_error_message): Use SAFE_ALLOCA, not alloca. (print_object): Use int, not EMACS_INT, where int is wide enough. * process.c (Fdelete_process): Don't assume pid fits into EMACS_INT. (Fset_process_window_size, Fformat_network_address) (get_lisp_to_sockaddr_size, set_socket_option, Fmake_network_process) (Fsignal_process, sigchld_handler): Check that fixnums are in proper range for system types. (Fformat_network_address, read_process_output, send_process) (Fprocess_send_region, status_notify): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fformat_network_address, Fmake_serial_process, Fmake_network_process) (wait_reading_process_output, read_process_output, exec_sentinel): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (conv_lisp_to_sockaddr): Don't assume fixnums fit into int. (Faccept_process_output): Use duration_to_sec_usec to do proper overflow checking on durations. * scroll.c (calculate_scrolling, calculate_direct_scrolling) (line_ins_del): Use int, not EMACS_INT, where int is wide enough. * search.c (looking_at_1, string_match_1): (fast_string_match, fast_c_string_match_ignore_case) (fast_string_match_ignore_case, fast_looking_at, scan_buffer) (scan_newline, find_before_next_newline, search_command) (trivial_regexp_p, search_buffer, simple_search, boyer_moore) (set_search_regs, wordify): (Freplace_match): (Fmatch_data): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (string_match_1, search_buffer, set_search_regs): (Fmatch_data): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (wordify): Check for overflow in size calculation. (Freplace_match): Avoid potential buffer overflow in search_regs.start. (Fset_match_data): Don't assume fixnum fits in ptrdiff_t. Check that fixnums are in proper range for system types. * sound.c (struct sound_device) (wav_play, au_play, vox_write, alsa_period_size, alsa_write): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fplay_sound_internal): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * syntax.c (ST_COMMENT_STYLE, ST_STRING_STYLE): In definitions, make it clearer that these values must be out of range for the respective integer ranges. This fixes a bug with ST_STRING_STYLE and non-ASCII characters. (struct lisp_parse_state, find_start_modiff) (Finternal_describe_syntax_value, scan_lists, scan_sexps_forward): (Fparse_partial_sexp): Don't assume fixnums can fit in int. (struct lisp_parse_state, find_start_pos, find_start_value) (find_start_value_byte, find_start_begv) (update_syntax_table, char_quoted, dec_bytepos) (find_defun_start, prev_char_comend_first, back_comment): (scan_words, skip_chars, skip_syntaxes, forw_comment, Fforward_comment) (scan_lists, Fbackward_prefix_chars, scan_sexps_forward): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Finternal_describe_syntax_value): Check that match_lisp is a character, not an integer, since the code stuffs it into int. (scan_words, scan_sexps_forward): Check that fixnums are in proper range for system types. (Fforward_word): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (scan_sexps_forward): Use CHARACTERP, not INTEGERP, since the value must fit into int. (Fparse_partial_sexp): Fix doc; element 8 is not ignored. * syntax.h: Adjust decls to match defn changes elsewhere. (struct gl_state_s): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * sysdep.c (wait_for_termination_1, wait_for_termination) (interruptible_wait_for_termination, mkdir): Don't assume pid_t fits in int; on 64-bit AIX pid_t is 64-bit. (emacs_read, emacs_write): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (system_process_attributes): Don't assume uid_t, gid_t, and double all fit in int or even EMACS_INT. * term.c (set_tty_color_mode): Check that fixnums are in proper range for system types. * termhooks.h (struct input_event): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * textprop.c (validate_interval_range, interval_of) (Fadd_text_properties, set_text_properties_1) (Fremove_text_properties, Fremove_list_of_text_properties) (Ftext_property_any, Ftext_property_not_all) (copy_text_properties, text_property_list, extend_property_ranges) (verify_interval_modification): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fnext_single_char_property_change) (Fprevious_single_char_property_change): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (copy_text_properties): Check for integer overflow in index calculation. * undo.c (last_boundary_position, record_point, record_insert) (record_delete, record_marker_adjustment, record_change) (record_property_change): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (truncate_undo_list, Fprimitive_undo): Don't assume fixnum fits in int. Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * w32fns.c (Fx_create_frame, x_create_tip_frame, Fx_show_tip) (Fx_hide_tip, Fx_file_dialog): * w32menu.c (set_frame_menubar): Use ptrdiff_t, not int, for consistency with rest of code. * window.c (window_scroll_preserve_hpos, window_scroll_preserve_vpos) (select_window, Fdelete_other_windows_internal) (window_scroll_pixel_based, window_scroll_line_based) (Frecenter, Fset_window_configuration): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (Fset_window_hscroll, run_window_configuration_change_hook) (set_window_buffer, temp_output_buffer_show, scroll_command) (Fscroll_other_window): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fwindow_line_height, window_scroll, Fscroll_left, Fscroll_right): Don't assume fixnum fits in int. (Fset_window_scroll_bars): Check that fixnums are in proper range for system types. * xdisp.c (help_echo_pos, pos_visible_p, string_pos_nchars_ahead) (string_pos, c_string_pos, number_of_chars, init_iterator) (in_ellipses_for_invisible_text_p, init_from_display_pos) (compute_stop_pos, next_overlay_change, compute_display_string_pos) (compute_display_string_end, handle_face_prop) (face_before_or_after_it_pos, handle_invisible_prop, handle_display_prop) (handle_display_spec, handle_single_display_spec) (display_prop_intangible_p, string_buffer_position_lim) (string_buffer_position, handle_composition_prop, load_overlay_strings) (get_overlay_strings_1, get_overlay_strings) (iterate_out_of_display_property, forward_to_next_line_start) (back_to_previous_visible_line_start, reseat, reseat_to_string) (get_next_display_element, set_iterator_to_next) (get_visually_first_element, compute_stop_pos_backwards) (handle_stop_backwards, next_element_from_buffer) (move_it_in_display_line_to, move_it_in_display_line) (move_it_to, move_it_vertically_backward, move_it_by_lines) (add_to_log, message_dolog, message_log_check_duplicate) (message2, message2_nolog, message3, message3_nolog (with_echo_area_buffer, display_echo_area_1, resize_mini_window_1) (current_message_1, truncate_echo_area, truncate_message_1) (set_message, set_message_1, store_mode_line_noprop) (hscroll_window_tree, debug_delta, debug_delta_bytes, debug_end_vpos) (text_outside_line_unchanged_p, check_point_in_composition) (reconsider_clip_changes) (redisplay_internal, set_cursor_from_row, try_scrolling) (try_cursor_movement, set_vertical_scroll_bar, redisplay_window) (redisplay_window, find_last_unchanged_at_beg_row) (find_first_unchanged_at_end_row, row_containing_pos, try_window_id) (trailing_whitespace_p, find_row_edges, display_line) (RECORD_MAX_MIN_POS, Fcurrent_bidi_paragraph_direction) (display_mode_element, store_mode_line_string) (pint2str, pint2hrstr, decode_mode_spec) (display_count_lines, display_string, draw_glyphs) (x_produce_glyphs, x_insert_glyphs) (rows_from_pos_range, mouse_face_from_buffer_pos) (fast_find_string_pos, mouse_face_from_string_pos) (note_mode_line_or_margin_highlight, note_mouse_highlight): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (safe_call, init_from_display_pos, handle_fontified_prop) (handle_single_display_spec, load_overlay_strings) (with_echo_area_buffer, setup_echo_area_for_printing) (display_echo_area, echo_area_display) (x_consider_frame_title, prepare_menu_bars, update_menu_bar) (update_tool_bar, hscroll_window_tree, redisplay_internal) (redisplay_window, dump_glyph_row, display_mode_line, Fformat_mode_line) (decode_mode_spec, on_hot_spot_p): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (handle_single_display_spec, build_desired_tool_bar_string) (redisplay_tool_bar, scroll_window_tree, Fdump_glyph_matrix) (get_specified_cursor_type): Check that fixnums are in proper range for system types. (struct overlay_entry, resize_mini_window, Fdump_glyph_row) (Flookup_image_map): Don't assume fixnums fit in int. (compare_overlay_entries): Avoid mishandling comparisons due to subtraction overflow. (load_overlay_strings): Use SAFE_NALLOCA, not alloca. (last_escape_glyph_face_id, last_glyphless_glyph_face_id): (handle_tool_bar_click): Use int, not unsigned, since we prefer signed and the signedness doesn't matter here. (get_next_display_element, next_element_from_display_vector): Use int, not EMACS_INT, when int is wide enough. (start_hourglass): Use duration_to_sec_usec to do proper overflow checking on durations. * xfaces.c (Fbitmap_spec_p): Check that fixnums are in proper range for system types. (compare_fonts_by_sort_order): Avoid mishandling comparisons due to subtraction overflow. (Fx_family_fonts, realize_basic_faces): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fx_family_fonts): Don't assume fixnum fits in int. Use SAFE_ALLOCA_LISP, not alloca. (merge_face_heights): Remove unnecessary cast to EMACS_INT. (Finternal_make_lisp_face): Don't allocate more than MAX_FACE_ID. (face_at_buffer_position, face_for_overlay_string) (face_at_string_position): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. (merge_faces): Use int, not EMACS_INT, where int is wide enough. * xfns.c (x_set_menu_bar_lines, x_set_tool_bar_lines, x_icon_verify) (Fx_show_tip): Check that fixnums are in proper range for system types. (Fx_create_frame, x_create_tip_frame, Fx_show_tip) (Fx_hide_tip, Fx_file_dialog, Fx_select_font): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (Fx_change_window_property): Don't assume fixnums fit in int. * xfont.c (xfont_chars_supported): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * xmenu.c (Fx_popup_dialog, set_frame_menubar) (create_and_show_popup_menu, create_and_show_dialog, xmenu_show): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * xml.c (parse_region): * xrdb.c (magic_file_p): Use ptrdiff_t, not EMACS_INT, where ptrdiff_t is wide enough. * xselect.c (TRACE1): Don't assume pid_t promotes to int. (x_get_local_selection, x_reply_selection_request) (x_handle_selection_request, wait_for_property_change): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. (selection_data_to_lisp_data): Use short, not EMACS_INT, where short is wide enough. (x_send_client_event): Don't assume fixnum fits in int. * xterm.c (x_x_to_emacs_modifiers): Don't assume EMACS_INT overflows nicely into int. (x_emacs_to_x_modifiers): Use EMACS_INT, not int, because values may come from Lisp. (handle_one_xevent): NATNUMP can eval its arg twice. (x_connection_closed): Use ptrdiff_t, not int, to avoid needless 32-bit limit on 64-bit hosts. * xterm.h: Adjust decls to match defn changes elsewhere. (struct scroll_bar): Use struct vectorlike_header rather than rolling our own approximation. (SCROLL_BAR_VEC_SIZE): Remove; not used.
705 lines
21 KiB
C
705 lines
21 KiB
C
/* undo handling for GNU Emacs.
|
||
Copyright (C) 1990, 1993-1994, 2000-2011 Free Software Foundation, Inc.
|
||
|
||
This file is part of GNU Emacs.
|
||
|
||
GNU Emacs is free software: you can redistribute it and/or modify
|
||
it under the terms of the GNU General Public License as published by
|
||
the Free Software Foundation, either version 3 of the License, or
|
||
(at your option) any later version.
|
||
|
||
GNU Emacs is distributed in the hope that it will be useful,
|
||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||
GNU General Public License for more details.
|
||
|
||
You should have received a copy of the GNU General Public License
|
||
along with GNU Emacs. If not, see <http://www.gnu.org/licenses/>. */
|
||
|
||
|
||
#include <config.h>
|
||
#include <setjmp.h>
|
||
#include "lisp.h"
|
||
#include "buffer.h"
|
||
#include "commands.h"
|
||
#include "window.h"
|
||
|
||
/* Last buffer for which undo information was recorded. */
|
||
/* BEWARE: This is not traced by the GC, so never dereference it! */
|
||
static struct buffer *last_undo_buffer;
|
||
|
||
/* Position of point last time we inserted a boundary. */
|
||
static struct buffer *last_boundary_buffer;
|
||
static ptrdiff_t last_boundary_position;
|
||
|
||
Lisp_Object Qinhibit_read_only;
|
||
|
||
/* Marker for function call undo list elements. */
|
||
|
||
Lisp_Object Qapply;
|
||
|
||
/* The first time a command records something for undo.
|
||
it also allocates the undo-boundary object
|
||
which will be added to the list at the end of the command.
|
||
This ensures we can't run out of space while trying to make
|
||
an undo-boundary. */
|
||
static Lisp_Object pending_boundary;
|
||
|
||
/* Record point as it was at beginning of this command (if necessary)
|
||
and prepare the undo info for recording a change.
|
||
PT is the position of point that will naturally occur as a result of the
|
||
undo record that will be added just after this command terminates. */
|
||
|
||
static void
|
||
record_point (ptrdiff_t pt)
|
||
{
|
||
int at_boundary;
|
||
|
||
/* Don't record position of pt when undo_inhibit_record_point holds. */
|
||
if (undo_inhibit_record_point)
|
||
return;
|
||
|
||
/* Allocate a cons cell to be the undo boundary after this command. */
|
||
if (NILP (pending_boundary))
|
||
pending_boundary = Fcons (Qnil, Qnil);
|
||
|
||
if ((current_buffer != last_undo_buffer)
|
||
/* Don't call Fundo_boundary for the first change. Otherwise we
|
||
risk overwriting last_boundary_position in Fundo_boundary with
|
||
PT of the current buffer and as a consequence not insert an
|
||
undo boundary because last_boundary_position will equal pt in
|
||
the test at the end of the present function (Bug#731). */
|
||
&& (MODIFF > SAVE_MODIFF))
|
||
Fundo_boundary ();
|
||
last_undo_buffer = current_buffer;
|
||
|
||
if (CONSP (BVAR (current_buffer, undo_list)))
|
||
{
|
||
/* Set AT_BOUNDARY to 1 only when we have nothing other than
|
||
marker adjustment before undo boundary. */
|
||
|
||
Lisp_Object tail = BVAR (current_buffer, undo_list), elt;
|
||
|
||
while (1)
|
||
{
|
||
if (NILP (tail))
|
||
elt = Qnil;
|
||
else
|
||
elt = XCAR (tail);
|
||
if (NILP (elt) || ! (CONSP (elt) && MARKERP (XCAR (elt))))
|
||
break;
|
||
tail = XCDR (tail);
|
||
}
|
||
at_boundary = NILP (elt);
|
||
}
|
||
else
|
||
at_boundary = 1;
|
||
|
||
if (MODIFF <= SAVE_MODIFF)
|
||
record_first_change ();
|
||
|
||
/* If we are just after an undo boundary, and
|
||
point wasn't at start of deleted range, record where it was. */
|
||
if (at_boundary
|
||
&& current_buffer == last_boundary_buffer
|
||
&& last_boundary_position != pt)
|
||
BVAR (current_buffer, undo_list)
|
||
= Fcons (make_number (last_boundary_position), BVAR (current_buffer, undo_list));
|
||
}
|
||
|
||
/* Record an insertion that just happened or is about to happen,
|
||
for LENGTH characters at position BEG.
|
||
(It is possible to record an insertion before or after the fact
|
||
because we don't need to record the contents.) */
|
||
|
||
void
|
||
record_insert (ptrdiff_t beg, ptrdiff_t length)
|
||
{
|
||
Lisp_Object lbeg, lend;
|
||
|
||
if (EQ (BVAR (current_buffer, undo_list), Qt))
|
||
return;
|
||
|
||
record_point (beg);
|
||
|
||
/* If this is following another insertion and consecutive with it
|
||
in the buffer, combine the two. */
|
||
if (CONSP (BVAR (current_buffer, undo_list)))
|
||
{
|
||
Lisp_Object elt;
|
||
elt = XCAR (BVAR (current_buffer, undo_list));
|
||
if (CONSP (elt)
|
||
&& INTEGERP (XCAR (elt))
|
||
&& INTEGERP (XCDR (elt))
|
||
&& XINT (XCDR (elt)) == beg)
|
||
{
|
||
XSETCDR (elt, make_number (beg + length));
|
||
return;
|
||
}
|
||
}
|
||
|
||
XSETFASTINT (lbeg, beg);
|
||
XSETINT (lend, beg + length);
|
||
BVAR (current_buffer, undo_list) = Fcons (Fcons (lbeg, lend),
|
||
BVAR (current_buffer, undo_list));
|
||
}
|
||
|
||
/* Record that a deletion is about to take place,
|
||
of the characters in STRING, at location BEG. */
|
||
|
||
void
|
||
record_delete (ptrdiff_t beg, Lisp_Object string)
|
||
{
|
||
Lisp_Object sbeg;
|
||
|
||
if (EQ (BVAR (current_buffer, undo_list), Qt))
|
||
return;
|
||
|
||
if (PT == beg + SCHARS (string))
|
||
{
|
||
XSETINT (sbeg, -beg);
|
||
record_point (PT);
|
||
}
|
||
else
|
||
{
|
||
XSETFASTINT (sbeg, beg);
|
||
record_point (beg);
|
||
}
|
||
|
||
BVAR (current_buffer, undo_list)
|
||
= Fcons (Fcons (string, sbeg), BVAR (current_buffer, undo_list));
|
||
}
|
||
|
||
/* Record the fact that MARKER is about to be adjusted by ADJUSTMENT.
|
||
This is done only when a marker points within text being deleted,
|
||
because that's the only case where an automatic marker adjustment
|
||
won't be inverted automatically by undoing the buffer modification. */
|
||
|
||
void
|
||
record_marker_adjustment (Lisp_Object marker, ptrdiff_t adjustment)
|
||
{
|
||
if (EQ (BVAR (current_buffer, undo_list), Qt))
|
||
return;
|
||
|
||
/* Allocate a cons cell to be the undo boundary after this command. */
|
||
if (NILP (pending_boundary))
|
||
pending_boundary = Fcons (Qnil, Qnil);
|
||
|
||
if (current_buffer != last_undo_buffer)
|
||
Fundo_boundary ();
|
||
last_undo_buffer = current_buffer;
|
||
|
||
BVAR (current_buffer, undo_list)
|
||
= Fcons (Fcons (marker, make_number (adjustment)),
|
||
BVAR (current_buffer, undo_list));
|
||
}
|
||
|
||
/* Record that a replacement is about to take place,
|
||
for LENGTH characters at location BEG.
|
||
The replacement must not change the number of characters. */
|
||
|
||
void
|
||
record_change (ptrdiff_t beg, ptrdiff_t length)
|
||
{
|
||
record_delete (beg, make_buffer_string (beg, beg + length, 1));
|
||
record_insert (beg, length);
|
||
}
|
||
|
||
/* Record that an unmodified buffer is about to be changed.
|
||
Record the file modification date so that when undoing this entry
|
||
we can tell whether it is obsolete because the file was saved again. */
|
||
|
||
void
|
||
record_first_change (void)
|
||
{
|
||
struct buffer *base_buffer = current_buffer;
|
||
|
||
if (EQ (BVAR (current_buffer, undo_list), Qt))
|
||
return;
|
||
|
||
if (current_buffer != last_undo_buffer)
|
||
Fundo_boundary ();
|
||
last_undo_buffer = current_buffer;
|
||
|
||
if (base_buffer->base_buffer)
|
||
base_buffer = base_buffer->base_buffer;
|
||
|
||
BVAR (current_buffer, undo_list) =
|
||
Fcons (Fcons (Qt, INTEGER_TO_CONS (base_buffer->modtime)),
|
||
BVAR (current_buffer, undo_list));
|
||
}
|
||
|
||
/* Record a change in property PROP (whose old value was VAL)
|
||
for LENGTH characters starting at position BEG in BUFFER. */
|
||
|
||
void
|
||
record_property_change (ptrdiff_t beg, ptrdiff_t length,
|
||
Lisp_Object prop, Lisp_Object value,
|
||
Lisp_Object buffer)
|
||
{
|
||
Lisp_Object lbeg, lend, entry;
|
||
struct buffer *obuf = current_buffer, *buf = XBUFFER (buffer);
|
||
int boundary = 0;
|
||
|
||
if (EQ (BVAR (buf, undo_list), Qt))
|
||
return;
|
||
|
||
/* Allocate a cons cell to be the undo boundary after this command. */
|
||
if (NILP (pending_boundary))
|
||
pending_boundary = Fcons (Qnil, Qnil);
|
||
|
||
if (buf != last_undo_buffer)
|
||
boundary = 1;
|
||
last_undo_buffer = buf;
|
||
|
||
/* Switch temporarily to the buffer that was changed. */
|
||
current_buffer = buf;
|
||
|
||
if (boundary)
|
||
Fundo_boundary ();
|
||
|
||
if (MODIFF <= SAVE_MODIFF)
|
||
record_first_change ();
|
||
|
||
XSETINT (lbeg, beg);
|
||
XSETINT (lend, beg + length);
|
||
entry = Fcons (Qnil, Fcons (prop, Fcons (value, Fcons (lbeg, lend))));
|
||
BVAR (current_buffer, undo_list) = Fcons (entry, BVAR (current_buffer, undo_list));
|
||
|
||
current_buffer = obuf;
|
||
}
|
||
|
||
DEFUN ("undo-boundary", Fundo_boundary, Sundo_boundary, 0, 0, 0,
|
||
doc: /* Mark a boundary between units of undo.
|
||
An undo command will stop at this point,
|
||
but another undo command will undo to the previous boundary. */)
|
||
(void)
|
||
{
|
||
Lisp_Object tem;
|
||
if (EQ (BVAR (current_buffer, undo_list), Qt))
|
||
return Qnil;
|
||
tem = Fcar (BVAR (current_buffer, undo_list));
|
||
if (!NILP (tem))
|
||
{
|
||
/* One way or another, cons nil onto the front of the undo list. */
|
||
if (!NILP (pending_boundary))
|
||
{
|
||
/* If we have preallocated the cons cell to use here,
|
||
use that one. */
|
||
XSETCDR (pending_boundary, BVAR (current_buffer, undo_list));
|
||
BVAR (current_buffer, undo_list) = pending_boundary;
|
||
pending_boundary = Qnil;
|
||
}
|
||
else
|
||
BVAR (current_buffer, undo_list) = Fcons (Qnil, BVAR (current_buffer, undo_list));
|
||
}
|
||
last_boundary_position = PT;
|
||
last_boundary_buffer = current_buffer;
|
||
return Qnil;
|
||
}
|
||
|
||
/* At garbage collection time, make an undo list shorter at the end,
|
||
returning the truncated list. How this is done depends on the
|
||
variables undo-limit, undo-strong-limit and undo-outer-limit.
|
||
In some cases this works by calling undo-outer-limit-function. */
|
||
|
||
void
|
||
truncate_undo_list (struct buffer *b)
|
||
{
|
||
Lisp_Object list;
|
||
Lisp_Object prev, next, last_boundary;
|
||
EMACS_INT size_so_far = 0;
|
||
|
||
/* Make sure that calling undo-outer-limit-function
|
||
won't cause another GC. */
|
||
ptrdiff_t count = inhibit_garbage_collection ();
|
||
|
||
/* Make the buffer current to get its local values of variables such
|
||
as undo_limit. Also so that Vundo_outer_limit_function can
|
||
tell which buffer to operate on. */
|
||
record_unwind_protect (set_buffer_if_live, Fcurrent_buffer ());
|
||
set_buffer_internal (b);
|
||
|
||
list = BVAR (b, undo_list);
|
||
|
||
prev = Qnil;
|
||
next = list;
|
||
last_boundary = Qnil;
|
||
|
||
/* If the first element is an undo boundary, skip past it. */
|
||
if (CONSP (next) && NILP (XCAR (next)))
|
||
{
|
||
/* Add in the space occupied by this element and its chain link. */
|
||
size_so_far += sizeof (struct Lisp_Cons);
|
||
|
||
/* Advance to next element. */
|
||
prev = next;
|
||
next = XCDR (next);
|
||
}
|
||
|
||
/* Always preserve at least the most recent undo record
|
||
unless it is really horribly big.
|
||
|
||
Skip, skip, skip the undo, skip, skip, skip the undo,
|
||
Skip, skip, skip the undo, skip to the undo bound'ry. */
|
||
|
||
while (CONSP (next) && ! NILP (XCAR (next)))
|
||
{
|
||
Lisp_Object elt;
|
||
elt = XCAR (next);
|
||
|
||
/* Add in the space occupied by this element and its chain link. */
|
||
size_so_far += sizeof (struct Lisp_Cons);
|
||
if (CONSP (elt))
|
||
{
|
||
size_so_far += sizeof (struct Lisp_Cons);
|
||
if (STRINGP (XCAR (elt)))
|
||
size_so_far += (sizeof (struct Lisp_String) - 1
|
||
+ SCHARS (XCAR (elt)));
|
||
}
|
||
|
||
/* Advance to next element. */
|
||
prev = next;
|
||
next = XCDR (next);
|
||
}
|
||
|
||
/* If by the first boundary we have already passed undo_outer_limit,
|
||
we're heading for memory full, so offer to clear out the list. */
|
||
if (INTEGERP (Vundo_outer_limit)
|
||
&& size_so_far > XINT (Vundo_outer_limit)
|
||
&& !NILP (Vundo_outer_limit_function))
|
||
{
|
||
Lisp_Object tem;
|
||
struct buffer *temp = last_undo_buffer;
|
||
|
||
/* Normally the function this calls is undo-outer-limit-truncate. */
|
||
tem = call1 (Vundo_outer_limit_function, make_number (size_so_far));
|
||
if (! NILP (tem))
|
||
{
|
||
/* The function is responsible for making
|
||
any desired changes in buffer-undo-list. */
|
||
unbind_to (count, Qnil);
|
||
return;
|
||
}
|
||
/* That function probably used the minibuffer, and if so, that
|
||
changed last_undo_buffer. Change it back so that we don't
|
||
force next change to make an undo boundary here. */
|
||
last_undo_buffer = temp;
|
||
}
|
||
|
||
if (CONSP (next))
|
||
last_boundary = prev;
|
||
|
||
/* Keep additional undo data, if it fits in the limits. */
|
||
while (CONSP (next))
|
||
{
|
||
Lisp_Object elt;
|
||
elt = XCAR (next);
|
||
|
||
/* When we get to a boundary, decide whether to truncate
|
||
either before or after it. The lower threshold, undo_limit,
|
||
tells us to truncate after it. If its size pushes past
|
||
the higher threshold undo_strong_limit, we truncate before it. */
|
||
if (NILP (elt))
|
||
{
|
||
if (size_so_far > undo_strong_limit)
|
||
break;
|
||
last_boundary = prev;
|
||
if (size_so_far > undo_limit)
|
||
break;
|
||
}
|
||
|
||
/* Add in the space occupied by this element and its chain link. */
|
||
size_so_far += sizeof (struct Lisp_Cons);
|
||
if (CONSP (elt))
|
||
{
|
||
size_so_far += sizeof (struct Lisp_Cons);
|
||
if (STRINGP (XCAR (elt)))
|
||
size_so_far += (sizeof (struct Lisp_String) - 1
|
||
+ SCHARS (XCAR (elt)));
|
||
}
|
||
|
||
/* Advance to next element. */
|
||
prev = next;
|
||
next = XCDR (next);
|
||
}
|
||
|
||
/* If we scanned the whole list, it is short enough; don't change it. */
|
||
if (NILP (next))
|
||
;
|
||
/* Truncate at the boundary where we decided to truncate. */
|
||
else if (!NILP (last_boundary))
|
||
XSETCDR (last_boundary, Qnil);
|
||
/* There's nothing we decided to keep, so clear it out. */
|
||
else
|
||
BVAR (b, undo_list) = Qnil;
|
||
|
||
unbind_to (count, Qnil);
|
||
}
|
||
|
||
DEFUN ("primitive-undo", Fprimitive_undo, Sprimitive_undo, 2, 2, 0,
|
||
doc: /* Undo N records from the front of the list LIST.
|
||
Return what remains of the list. */)
|
||
(Lisp_Object n, Lisp_Object list)
|
||
{
|
||
struct gcpro gcpro1, gcpro2;
|
||
Lisp_Object next;
|
||
ptrdiff_t count = SPECPDL_INDEX ();
|
||
register EMACS_INT arg;
|
||
Lisp_Object oldlist;
|
||
int did_apply = 0;
|
||
|
||
#if 0 /* This is a good feature, but would make undo-start
|
||
unable to do what is expected. */
|
||
Lisp_Object tem;
|
||
|
||
/* If the head of the list is a boundary, it is the boundary
|
||
preceding this command. Get rid of it and don't count it. */
|
||
tem = Fcar (list);
|
||
if (NILP (tem))
|
||
list = Fcdr (list);
|
||
#endif
|
||
|
||
CHECK_NUMBER (n);
|
||
arg = XINT (n);
|
||
next = Qnil;
|
||
GCPRO2 (next, list);
|
||
/* I don't think we need to gcpro oldlist, as we use it only
|
||
to check for EQ. ++kfs */
|
||
|
||
/* In a writable buffer, enable undoing read-only text that is so
|
||
because of text properties. */
|
||
if (NILP (BVAR (current_buffer, read_only)))
|
||
specbind (Qinhibit_read_only, Qt);
|
||
|
||
/* Don't let `intangible' properties interfere with undo. */
|
||
specbind (Qinhibit_point_motion_hooks, Qt);
|
||
|
||
oldlist = BVAR (current_buffer, undo_list);
|
||
|
||
while (arg > 0)
|
||
{
|
||
while (CONSP (list))
|
||
{
|
||
next = XCAR (list);
|
||
list = XCDR (list);
|
||
/* Exit inner loop at undo boundary. */
|
||
if (NILP (next))
|
||
break;
|
||
/* Handle an integer by setting point to that value. */
|
||
if (INTEGERP (next))
|
||
SET_PT (clip_to_bounds (BEGV, XINT (next), ZV));
|
||
else if (CONSP (next))
|
||
{
|
||
Lisp_Object car, cdr;
|
||
|
||
car = XCAR (next);
|
||
cdr = XCDR (next);
|
||
if (EQ (car, Qt))
|
||
{
|
||
/* Element (t high . low) records previous modtime. */
|
||
struct buffer *base_buffer = current_buffer;
|
||
time_t mod_time;
|
||
CONS_TO_INTEGER (cdr, time_t, mod_time);
|
||
|
||
if (current_buffer->base_buffer)
|
||
base_buffer = current_buffer->base_buffer;
|
||
|
||
/* If this records an obsolete save
|
||
(not matching the actual disk file)
|
||
then don't mark unmodified. */
|
||
if (mod_time != base_buffer->modtime)
|
||
continue;
|
||
#ifdef CLASH_DETECTION
|
||
Funlock_buffer ();
|
||
#endif /* CLASH_DETECTION */
|
||
Fset_buffer_modified_p (Qnil);
|
||
}
|
||
else if (EQ (car, Qnil))
|
||
{
|
||
/* Element (nil PROP VAL BEG . END) is property change. */
|
||
Lisp_Object beg, end, prop, val;
|
||
|
||
prop = Fcar (cdr);
|
||
cdr = Fcdr (cdr);
|
||
val = Fcar (cdr);
|
||
cdr = Fcdr (cdr);
|
||
beg = Fcar (cdr);
|
||
end = Fcdr (cdr);
|
||
|
||
if (XINT (beg) < BEGV || XINT (end) > ZV)
|
||
error ("Changes to be undone are outside visible portion of buffer");
|
||
Fput_text_property (beg, end, prop, val, Qnil);
|
||
}
|
||
else if (INTEGERP (car) && INTEGERP (cdr))
|
||
{
|
||
/* Element (BEG . END) means range was inserted. */
|
||
|
||
if (XINT (car) < BEGV
|
||
|| XINT (cdr) > ZV)
|
||
error ("Changes to be undone are outside visible portion of buffer");
|
||
/* Set point first thing, so that undoing this undo
|
||
does not send point back to where it is now. */
|
||
Fgoto_char (car);
|
||
Fdelete_region (car, cdr);
|
||
}
|
||
else if (EQ (car, Qapply))
|
||
{
|
||
/* Element (apply FUN . ARGS) means call FUN to undo. */
|
||
struct buffer *save_buffer = current_buffer;
|
||
|
||
car = Fcar (cdr);
|
||
cdr = Fcdr (cdr);
|
||
if (INTEGERP (car))
|
||
{
|
||
/* Long format: (apply DELTA START END FUN . ARGS). */
|
||
Lisp_Object delta = car;
|
||
Lisp_Object start = Fcar (cdr);
|
||
Lisp_Object end = Fcar (Fcdr (cdr));
|
||
Lisp_Object start_mark = Fcopy_marker (start, Qnil);
|
||
Lisp_Object end_mark = Fcopy_marker (end, Qt);
|
||
|
||
cdr = Fcdr (Fcdr (cdr));
|
||
apply1 (Fcar (cdr), Fcdr (cdr));
|
||
|
||
/* Check that the function did what the entry said it
|
||
would do. */
|
||
if (!EQ (start, Fmarker_position (start_mark))
|
||
|| (XINT (delta) + XINT (end)
|
||
!= marker_position (end_mark)))
|
||
error ("Changes to be undone by function different than announced");
|
||
Fset_marker (start_mark, Qnil, Qnil);
|
||
Fset_marker (end_mark, Qnil, Qnil);
|
||
}
|
||
else
|
||
apply1 (car, cdr);
|
||
|
||
if (save_buffer != current_buffer)
|
||
error ("Undo function switched buffer");
|
||
did_apply = 1;
|
||
}
|
||
else if (STRINGP (car) && INTEGERP (cdr))
|
||
{
|
||
/* Element (STRING . POS) means STRING was deleted. */
|
||
Lisp_Object membuf;
|
||
EMACS_INT pos = XINT (cdr);
|
||
|
||
membuf = car;
|
||
if (pos < 0)
|
||
{
|
||
if (-pos < BEGV || -pos > ZV)
|
||
error ("Changes to be undone are outside visible portion of buffer");
|
||
SET_PT (-pos);
|
||
Finsert (1, &membuf);
|
||
}
|
||
else
|
||
{
|
||
if (pos < BEGV || pos > ZV)
|
||
error ("Changes to be undone are outside visible portion of buffer");
|
||
SET_PT (pos);
|
||
|
||
/* Now that we record marker adjustments
|
||
(caused by deletion) for undo,
|
||
we should always insert after markers,
|
||
so that undoing the marker adjustments
|
||
put the markers back in the right place. */
|
||
Finsert (1, &membuf);
|
||
SET_PT (pos);
|
||
}
|
||
}
|
||
else if (MARKERP (car) && INTEGERP (cdr))
|
||
{
|
||
/* (MARKER . INTEGER) means a marker MARKER
|
||
was adjusted by INTEGER. */
|
||
if (XMARKER (car)->buffer)
|
||
Fset_marker (car,
|
||
make_number (marker_position (car) - XINT (cdr)),
|
||
Fmarker_buffer (car));
|
||
}
|
||
}
|
||
}
|
||
arg--;
|
||
}
|
||
|
||
|
||
/* Make sure an apply entry produces at least one undo entry,
|
||
so the test in `undo' for continuing an undo series
|
||
will work right. */
|
||
if (did_apply
|
||
&& EQ (oldlist, BVAR (current_buffer, undo_list)))
|
||
BVAR (current_buffer, undo_list)
|
||
= Fcons (list3 (Qapply, Qcdr, Qnil), BVAR (current_buffer, undo_list));
|
||
|
||
UNGCPRO;
|
||
return unbind_to (count, list);
|
||
}
|
||
|
||
void
|
||
syms_of_undo (void)
|
||
{
|
||
DEFSYM (Qinhibit_read_only, "inhibit-read-only");
|
||
DEFSYM (Qapply, "apply");
|
||
|
||
pending_boundary = Qnil;
|
||
staticpro (&pending_boundary);
|
||
|
||
last_undo_buffer = NULL;
|
||
last_boundary_buffer = NULL;
|
||
|
||
defsubr (&Sprimitive_undo);
|
||
defsubr (&Sundo_boundary);
|
||
|
||
DEFVAR_INT ("undo-limit", undo_limit,
|
||
doc: /* Keep no more undo information once it exceeds this size.
|
||
This limit is applied when garbage collection happens.
|
||
When a previous command increases the total undo list size past this
|
||
value, the earlier commands that came before it are forgotten.
|
||
|
||
The size is counted as the number of bytes occupied,
|
||
which includes both saved text and other data. */);
|
||
undo_limit = 80000;
|
||
|
||
DEFVAR_INT ("undo-strong-limit", undo_strong_limit,
|
||
doc: /* Don't keep more than this much size of undo information.
|
||
This limit is applied when garbage collection happens.
|
||
When a previous command increases the total undo list size past this
|
||
value, that command and the earlier commands that came before it are forgotten.
|
||
However, the most recent buffer-modifying command's undo info
|
||
is never discarded for this reason.
|
||
|
||
The size is counted as the number of bytes occupied,
|
||
which includes both saved text and other data. */);
|
||
undo_strong_limit = 120000;
|
||
|
||
DEFVAR_LISP ("undo-outer-limit", Vundo_outer_limit,
|
||
doc: /* Outer limit on size of undo information for one command.
|
||
At garbage collection time, if the current command has produced
|
||
more than this much undo information, it discards the info and displays
|
||
a warning. This is a last-ditch limit to prevent memory overflow.
|
||
|
||
The size is counted as the number of bytes occupied, which includes
|
||
both saved text and other data. A value of nil means no limit. In
|
||
this case, accumulating one huge undo entry could make Emacs crash as
|
||
a result of memory overflow.
|
||
|
||
In fact, this calls the function which is the value of
|
||
`undo-outer-limit-function' with one argument, the size.
|
||
The text above describes the behavior of the function
|
||
that variable usually specifies. */);
|
||
Vundo_outer_limit = make_number (12000000);
|
||
|
||
DEFVAR_LISP ("undo-outer-limit-function", Vundo_outer_limit_function,
|
||
doc: /* Function to call when an undo list exceeds `undo-outer-limit'.
|
||
This function is called with one argument, the current undo list size
|
||
for the most recent command (since the last undo boundary).
|
||
If the function returns t, that means truncation has been fully handled.
|
||
If it returns nil, the other forms of truncation are done.
|
||
|
||
Garbage collection is inhibited around the call to this function,
|
||
so it must make sure not to do a lot of consing. */);
|
||
Vundo_outer_limit_function = Qnil;
|
||
|
||
DEFVAR_BOOL ("undo-inhibit-record-point", undo_inhibit_record_point,
|
||
doc: /* Non-nil means do not record `point' in `buffer-undo-list'. */);
|
||
undo_inhibit_record_point = 0;
|
||
}
|