* Add signed to unsigned conversion to SafeCast * Update SafeCast exception message * Add test for SafeCast int to uint conversion - Update SafeCastMock - Add tests for SafeCast int256 to uint256 * Update SafeCast int to uint definition Apply suggestions from code review. Co-Authored-By: Nicolás Venturo <nicolas.venturo@gmail.com> * Update test for SafeCast int to uint conversion * Update SafeCast test after code review - Change "downcasts" to "casts" - Move test closer to its function * Fix error in SafeCast toUint256 description * Fix breaking error in SafeCast * Add uint256 to int256 conversion to SafeCast - Add function - Add mock - Add test * Update SafeCast unsigned to signed conversion - Update error in conversion to be more clear - Update constants in test to be powers of 2 instead of shifts * Add changelog entry * Update SafeCast tests - Add minus in INT256_MIN for clarity Co-Authored-By: Nicolás Venturo <nicolas.venturo@gmail.com> Co-authored-by: Nicolás Venturo <nicolas.venturo@gmail.com>
120 lines
3.6 KiB
Solidity
120 lines
3.6 KiB
Solidity
pragma solidity ^0.6.0;
|
|
|
|
|
|
/**
|
|
* @dev Wrappers over Solidity's uintXX casting operators with added overflow
|
|
* checks.
|
|
*
|
|
* Downcasting from uint256 in Solidity does not revert on overflow. This can
|
|
* easily result in undesired exploitation or bugs, since developers usually
|
|
* assume that overflows raise errors. `SafeCast` restores this intuition by
|
|
* reverting the transaction when such an operation overflows.
|
|
*
|
|
* Using this library instead of the unchecked operations eliminates an entire
|
|
* class of bugs, so it's recommended to use it always.
|
|
*
|
|
* Can be combined with {SafeMath} to extend it to smaller types, by performing
|
|
* all math on `uint256` and then downcasting.
|
|
*/
|
|
library SafeCast {
|
|
|
|
/**
|
|
* @dev Returns the downcasted uint128 from uint256, reverting on
|
|
* overflow (when the input is greater than largest uint128).
|
|
*
|
|
* Counterpart to Solidity's `uint128` operator.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must fit into 128 bits
|
|
*/
|
|
function toUint128(uint256 value) internal pure returns (uint128) {
|
|
require(value < 2**128, "SafeCast: value doesn\'t fit in 128 bits");
|
|
return uint128(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Returns the downcasted uint64 from uint256, reverting on
|
|
* overflow (when the input is greater than largest uint64).
|
|
*
|
|
* Counterpart to Solidity's `uint64` operator.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must fit into 64 bits
|
|
*/
|
|
function toUint64(uint256 value) internal pure returns (uint64) {
|
|
require(value < 2**64, "SafeCast: value doesn\'t fit in 64 bits");
|
|
return uint64(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Returns the downcasted uint32 from uint256, reverting on
|
|
* overflow (when the input is greater than largest uint32).
|
|
*
|
|
* Counterpart to Solidity's `uint32` operator.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must fit into 32 bits
|
|
*/
|
|
function toUint32(uint256 value) internal pure returns (uint32) {
|
|
require(value < 2**32, "SafeCast: value doesn\'t fit in 32 bits");
|
|
return uint32(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Returns the downcasted uint16 from uint256, reverting on
|
|
* overflow (when the input is greater than largest uint16).
|
|
*
|
|
* Counterpart to Solidity's `uint16` operator.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must fit into 16 bits
|
|
*/
|
|
function toUint16(uint256 value) internal pure returns (uint16) {
|
|
require(value < 2**16, "SafeCast: value doesn\'t fit in 16 bits");
|
|
return uint16(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Returns the downcasted uint8 from uint256, reverting on
|
|
* overflow (when the input is greater than largest uint8).
|
|
*
|
|
* Counterpart to Solidity's `uint8` operator.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must fit into 8 bits.
|
|
*/
|
|
function toUint8(uint256 value) internal pure returns (uint8) {
|
|
require(value < 2**8, "SafeCast: value doesn\'t fit in 8 bits");
|
|
return uint8(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Converts a signed int256 into an unsigned uint256.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must be greater than or equal to 0.
|
|
*/
|
|
function toUint256(int256 value) internal pure returns (uint256) {
|
|
require(value >= 0, "SafeCast: value must be positive");
|
|
return uint256(value);
|
|
}
|
|
|
|
/**
|
|
* @dev Converts an unsigned uint256 into a signed int256.
|
|
*
|
|
* Requirements:
|
|
*
|
|
* - input must be less than or equal to maxInt256.
|
|
*/
|
|
function toInt256(uint256 value) internal pure returns (int256) {
|
|
require(value < 2**255, "SafeCast: value doesn't fit in an int256");
|
|
return int256(value);
|
|
}
|
|
}
|