MdePkg/Test: Add port of BaseSafeIntLib unit tests to GoogleTest

REF: https://bugzilla.tianocore.org/show_bug.cgi?id=4134

Cc: Liming Gao <gaoliming@byosoft.com.cn>
Cc: Zhiguang Liu <zhiguang.liu@intel.com>
Signed-off-by: Michael D Kinney <michael.d.kinney@intel.com>
Reviewed-by: Liming Gao <gaoliming@byosoft.com.cn>

diff --git a/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.inf b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.inf
new file mode 100644 (file)
index 0000000..f609bfa
--- /dev/null
+++ b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.inf
@@ -0,0 +1,37 @@
+## @file\r
+# Host OS based Application that Unit Tests the SafeIntLib using Google Test\r
+#\r
+# Copyright (c) 2022, Intel Corporation. All rights reserved.\r
+# SPDX-License-Identifier: BSD-2-Clause-Patent\r
+##\r
+\r
+[Defines]\r
+  INF_VERSION     = 0x00010005\r
+  BASE_NAME       = GoogleTestBaseSafeIntLib\r
+  MODULE_UNI_FILE = GoogleTestBaseSafeIntLib.uni\r
+  FILE_GUID       = 2D9C1796-B0D2-4DA7-9529-1F8D9CCC11D3\r
+  MODULE_TYPE     = HOST_APPLICATION\r
+  VERSION_STRING  = 1.0\r
+\r
+#\r
+# The following information is for reference only and not required by the build tools.\r
+#\r
+#  VALID_ARCHITECTURES           = IA32 X64\r
+#\r
+\r
+[Sources]\r
+  TestBaseSafeIntLib.cpp\r
+\r
+[Sources.IA32]\r
+  SafeIntLibUintnIntnUnitTests32.cpp\r
+\r
+[Sources.X64]\r
+  SafeIntLibUintnIntnUnitTests64.cpp\r
+\r
+[Packages]\r
+  MdePkg/MdePkg.dec\r
+  UnitTestFrameworkPkg/UnitTestFrameworkPkg.dec\r
+\r
+[LibraryClasses]\r
+  GoogleTestLib\r
+  SafeIntLib\r

diff --git a/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.uni b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.uni
new file mode 100644 (file)
index 0000000..1c11b9e
--- /dev/null
+++ b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.uni
@@ -0,0 +1,13 @@
+// /** @file\r
+// Application that Unit Tests the SafeIntLib using Google Test\r
+//\r
+// Copyright (c) 2020, Intel Corporation. All rights reserved.<BR>\r
+//\r
+// SPDX-License-Identifier: BSD-2-Clause-Patent\r
+//\r
+// **/\r
+\r
+#string STR_MODULE_ABSTRACT             #language en-US "Application that Unit Tests the SafeIntLib using Google Test"\r
+\r
+#string STR_MODULE_DESCRIPTION          #language en-US "Application that Unit Tests the SafeIntLib using Google Test."\r
+\r

diff --git a/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests32.cpp b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests32.cpp
new file mode 100644 (file)
index 0000000..6fbf302
--- /dev/null
+++ b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests32.cpp
@@ -0,0 +1,425 @@
+/** @file\r
+  IA32-specific functions for unit-testing INTN and UINTN functions in\r
+  SafeIntLib.\r
+\r
+  Copyright (c) Microsoft Corporation.<BR>\r
+  Copyright (c) 2019 - 2020, Intel Corporation. All rights reserved.<BR>\r
+  SPDX-License-Identifier: BSD-2-Clause-Patent\r
+\r
+**/\r
+\r
+#include <gtest/gtest.h>\r
+extern "C" {\r
+  #include <Base.h>\r
+  #include <Library/SafeIntLib.h>\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INTN, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUint32ToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToInt32) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // INTN is same as INT32 in IA32, so this is just a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToUint32) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // UINTN is same as UINT32 in IA32, so this is just a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INTN, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUintnToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToInt64) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INT64       Result;\r
+\r
+  //\r
+  // UINTN is same as UINT32 in IA32, and UINT32 is a subset of\r
+  // INT64, so this is just a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToInt64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INTN and  MAX_INTN2 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-1537977259), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is between 0 and  MAX_UINTN inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INTN, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINTN, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUintnAdd) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Augend;\r
+  UINTN       Addend;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINTN, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a;\r
+  Addend = 0x3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeUintnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x74747474, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xabababab;\r
+  Addend = 0xbcbcbcbc;\r
+  Status = SafeUintnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeIntnAdd) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Augend;\r
+  INTN        Addend;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INTN\r
+  // and doesn't underflow MIN_INTN, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a;\r
+  Addend = 0x3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x74747474, Result);\r
+\r
+  Augend = (-976894522);\r
+  Addend = (-976894522);\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-1953789044), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a5a5a5a;\r
+  Addend = 0x5a5a5a5a;\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-1515870810);\r
+  Addend = (-1515870810);\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUintnSub) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Minuend;\r
+  UINTN       Subtrahend;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x3b3b3b3b;\r
+  Result     = 0;\r
+  Status     = SafeUintnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x1f1f1f1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x6d6d6d6d;\r
+  Status     = SafeUintnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeIntnSub) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Minuend;\r
+  INTN        Subtrahend;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INTN or\r
+  // underflow MIN_INTN, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x3a3a3a3a;\r
+  Result     = 0;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x20202020, Result);\r
+\r
+  Minuend    = 0x3a3a3a3a;\r
+  Subtrahend = 0x5a5a5a5a;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-538976288), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-2054847098);\r
+  Subtrahend = 2054847098;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (2054847098);\r
+  Subtrahend = (-2054847098);\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeUintnMult) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Multiplicand;\r
+  UINTN       Multiplier;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINTN, it will succeed\r
+  //\r
+  Multiplicand = 0xa122a;\r
+  Multiplier   = 0xd23;\r
+  Result       = 0;\r
+  Status       = SafeUintnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x844c9dbe, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0xa122a;\r
+  Multiplier   = 0xed23;\r
+  Status       = SafeUintnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeIntnMult) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Multiplicand;\r
+  INTN        Multiplier;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INTN and doesn't\r
+  // underflow MIN_UINTN, it will succeed\r
+  //\r
+  Multiplicand = 0x123456;\r
+  Multiplier   = 0x678;\r
+  Result       = 0;\r
+  Status       = SafeIntnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x75c28c50, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456;\r
+  Multiplier   = 0xabc;\r
+  Status       = SafeIntnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r

diff --git a/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests64.cpp b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests64.cpp
new file mode 100644 (file)
index 0000000..6fb0710
--- /dev/null
+++ b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/SafeIntLibUintnIntnUnitTests64.cpp
@@ -0,0 +1,429 @@
+/** @file\r
+  x64-specific functions for unit-testing INTN and UINTN functions in\r
+  SafeIntLib.\r
+\r
+  Copyright (c) Microsoft Corporation.<BR>\r
+  Copyright (c) 2019 - 2020, Intel Corporation. All rights reserved.<BR>\r
+  SPDX-License-Identifier: BSD-2-Clause-Patent\r
+\r
+**/\r
+\r
+#include <gtest/gtest.h>\r
+extern "C" {\r
+  #include <Base.h>\r
+  #include <Library/SafeIntLib.h>\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // For x64, INTN is same as INT64 which is a superset of INT32\r
+  // This is just a cast then, and it'll never fail\r
+  //\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToInt32) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT32 and  MAX_INT32 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-1537977259), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeIntnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeIntnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is between 0 and  MAX_UINT32 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeIntnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeIntnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToUint32) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT32, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUintnToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INTN (0x7fff_ffff_ffff_ffff), then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeUintnToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUintnToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToInt64) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INT64       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT64, then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeUintnToInt64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUintnToInt64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // INTN is same as INT64 in x64, so this is just a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5babababefefefef, Result);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToIntn) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INTN (0x7fff_ffff_ffff_ffff), then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToIntn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // UINTN is same as UINT64 in x64, so this is just a cast\r
+  //\r
+  Operand = 0xababababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xababababefefefef, Result);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUintnAdd) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Augend;\r
+  UINTN       Addend;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINTN, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a12121212;\r
+  Addend = 0x3a3a3a3a12121212;\r
+  Result = 0;\r
+  Status = SafeUintnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x7474747424242424, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xababababefefefef;\r
+  Addend = 0xbcbcbcbcdededede;\r
+  Status = SafeUintnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeIntnAdd) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Augend;\r
+  INTN        Addend;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INTN\r
+  // and doesn't underflow MIN_INTN, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a3a3a3a3a;\r
+  Addend = 0x3a3a3a3a3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7474747474747474, Result);\r
+\r
+  Augend = (-4195730024608447034);\r
+  Addend = (-4195730024608447034);\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-8391460049216894068), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a5a5a5a5a5a5a5a;\r
+  Addend = 0x5a5a5a5a5a5a5a5a;\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-6510615555426900570);\r
+  Addend = (-6510615555426900570);\r
+  Status = SafeIntnAdd (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUintnSub) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Minuend;\r
+  UINTN       Subtrahend;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x3b3b3b3b3b3b3b3b;\r
+  Result     = 0;\r
+  Status     = SafeUintnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x1f1f1f1f1f1f1f1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x6d6d6d6d6d6d6d6d;\r
+  Status     = SafeUintnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeIntnSub) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Minuend;\r
+  INTN        Subtrahend;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INTN or\r
+  // underflow MIN_INTN, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x3a3a3a3a3a3a3a3a;\r
+  Result     = 0;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x2020202020202020, Result);\r
+\r
+  Minuend    = 0x3a3a3a3a3a3a3a3a;\r
+  Subtrahend = 0x5a5a5a5a5a5a5a5a;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-2314885530818453536), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-8825501086245354106);\r
+  Subtrahend = 8825501086245354106;\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (8825501086245354106);\r
+  Subtrahend = (-8825501086245354106);\r
+  Status     = SafeIntnSub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeUintnMult) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Multiplicand;\r
+  UINTN       Multiplier;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINTN, it will succeed\r
+  //\r
+  Multiplicand = 0x123456789a;\r
+  Multiplier   = 0x1234567;\r
+  Result       = 0;\r
+  Status       = SafeUintnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x14b66db9745a07f6, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456789a;\r
+  Multiplier   = 0x12345678;\r
+  Status       = SafeUintnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeIntnMult) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Multiplicand;\r
+  INTN        Multiplier;\r
+  INTN        Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INTN and doesn't\r
+  // underflow MIN_UINTN, it will succeed\r
+  //\r
+  Multiplicand = 0x123456789;\r
+  Multiplier   = 0x6789abcd;\r
+  Result       = 0;\r
+  Status       = SafeIntnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x75cd9045220d6bb5, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456789;\r
+  Multiplier   = 0xa789abcd;\r
+  Status       = SafeIntnMult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r

diff --git a/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/TestBaseSafeIntLib.cpp b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/TestBaseSafeIntLib.cpp
new file mode 100644 (file)
index 0000000..1fd5106
--- /dev/null
+++ b/MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/TestBaseSafeIntLib.cpp
@@ -0,0 +1,2274 @@
+/** @file\r
+  UEFI OS based application for unit testing the SafeIntLib.\r
+\r
+  Copyright (c) Microsoft Corporation.<BR>\r
+  Copyright (c) 2018 - 2022, Intel Corporation. All rights reserved.<BR>\r
+  SPDX-License-Identifier: BSD-2-Clause-Patent\r
+**/\r
+\r
+#include <gtest/gtest.h>\r
+extern "C" {\r
+  #include <Base.h>\r
+  #include <Library/SafeIntLib.h>\r
+}\r
+\r
+//\r
+// Conversion function tests:\r
+//\r
+TEST(ConversionTestSuite, TestSafeInt8ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // Positive UINT8 should result in just a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt8ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Negative number should result in an error status\r
+  //\r
+  Operand = (-56);\r
+  Status  = SafeInt8ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt8ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // Positive UINT8 should result in just a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt8ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Negative number should result in an error status\r
+  //\r
+  Operand = (-56);\r
+  Status  = SafeInt8ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt8ToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // Positive UINT8 should result in just a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt8ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x5b, Result);\r
+\r
+  //\r
+  // Negative number should result in an error status\r
+  //\r
+  Operand = (-56);\r
+  Status  = SafeInt8ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt8ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // Positive UINT8 should result in just a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt8ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5b, Result);\r
+\r
+  //\r
+  // Negative number should result in an error status\r
+  //\r
+  Operand = (-56);\r
+  Status  = SafeInt8ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt8ToUint64) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Operand;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // Positive UINT8 should result in just a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt8ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x5b, Result);\r
+\r
+  //\r
+  // Negative number should result in an error status\r
+  //\r
+  Operand = (-56);\r
+  Status  = SafeInt8ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint8ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  UINT8       Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // Operand <= 0x7F (MAX_INT8) should result in a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint8ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Operand larger than 0x7f should result in an error status\r
+  //\r
+  Operand = 0xaf;\r
+  Status  = SafeUint8ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint8ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  UINT8       Operand;\r
+  CHAR8       Result;\r
+\r
+  //\r
+  // CHAR8 is typedefed as char, which by default is signed, thus\r
+  // CHAR8 is same as INT8, so same tests as above:\r
+  //\r
+\r
+  //\r
+  // Operand <= 0x7F (MAX_INT8) should result in a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint8ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Operand larger than 0x7f should result in an error status\r
+  //\r
+  Operand = 0xaf;\r
+  Status  = SafeUint8ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = (-35);\r
+  Status  = SafeInt16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-35), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = 0x1234;\r
+  Status  = SafeInt16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  CHAR8       Result;\r
+\r
+  //\r
+  // CHAR8 is typedefed as char, which may be signed or unsigned based\r
+  // on the compiler. Thus, for compatibility CHAR8 should be between 0 and MAX_INT8.\r
+  //\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = 0;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0, Result);\r
+\r
+  Operand = MAX_INT8;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (MAX_INT8, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-35);\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = 0x1234;\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = 0x1234;\r
+  Status  = SafeInt16ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand = 0x5b5b;\r
+  UINT16      Result  = 0;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Status = SafeInt16ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5b5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x5b5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5b5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5b5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt16ToUint64) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Operand;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5b5b;\r
+  Result  = 0;\r
+  Status  = SafeInt16ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x5b5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-17835);\r
+  Status  = SafeInt16ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint16ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5b5b);\r
+  Status  = SafeUint16ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint16ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Operand;\r
+  CHAR8       Result;\r
+\r
+  // CHAR8 is typedefed as char, which by default is signed, thus\r
+  // CHAR8 is same as INT8, so same tests as above:\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5b5b);\r
+  Status  = SafeUint16ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint16ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT8 (0xff), it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeUint16ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5b5b);\r
+  Status  = SafeUint16ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint16ToInt16) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT16 (0x7fff), it's a cast\r
+  //\r
+  Operand = 0x5b5b;\r
+  Result  = 0;\r
+  Status  = SafeUint16ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabab);\r
+  Status  = SafeUint16ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = (-57);\r
+  Status  = SafeInt32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-57), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeInt32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  CHAR8       Result;\r
+\r
+  //\r
+  // CHAR8 is typedefed as char, which may be signed or unsigned based\r
+  // on the compiler. Thus, for compatibility CHAR8 should be between 0 and MAX_INT8.\r
+  //\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = 0;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0, Result);\r
+\r
+  Operand = MAX_INT8;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (MAX_INT8, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-57);\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (0x5bababab);\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-57);\r
+  Status  = SafeInt32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (0x5bababab);\r
+  Status  = SafeInt32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToInt16) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT16 and MAX_INT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b5b;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b5b, Result);\r
+\r
+  Operand = (-17857);\r
+  Status  = SafeInt32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-17857), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeInt32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_UINT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-17857);\r
+  Status  = SafeInt32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (0x5bababab);\r
+  Status  = SafeInt32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt32ToUint64) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Operand;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt32ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt32ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeUint32ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  CHAR8       Result;\r
+\r
+  // CHAR8 is typedefed as char, which by default is signed, thus\r
+  // CHAR8 is same as INT8, so same tests as above:\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeUint32ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT8, then it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUint32ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToInt16) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT16, then it's a cast\r
+  //\r
+  Operand = 0x5bab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUint32ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT16, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUint32ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint32ToInt32) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT32, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUint32ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUint32ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToInt8) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeIntnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = (-53);\r
+  Status  = SafeIntnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-53), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeIntnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToChar8) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  CHAR8       Result;\r
+\r
+  //\r
+  // CHAR8 is typedefed as char, which may be signed or unsigned based\r
+  // on the compiler. Thus, for compatibility CHAR8 should be between 0 and MAX_INT8.\r
+  //\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = 0;\r
+  Result  = 0;\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0, Result);\r
+\r
+  Operand = MAX_INT8;\r
+  Result  = 0;\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (MAX_INT8, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-53);\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (0x5bababab);\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUint8) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_UINT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeIntnToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToInt16) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT16 and MAX_INT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5bab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bab, Result);\r
+\r
+  Operand = (-23467);\r
+  Status  = SafeIntnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-23467), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeIntnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUint16) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is between 0 and MAX_UINT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5bababab);\r
+  Status  = SafeIntnToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUintn) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINTN       Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUintn (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINTN)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToUintn (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeIntnToUint64) {\r
+  RETURN_STATUS  Status;\r
+  INTN        Operand;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeIntnToUint64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-1537977259);\r
+  Status  = SafeIntnToUint64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToInt8) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUintnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabab);\r
+  Status  = SafeUintnToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToChar8) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  CHAR8       Result;\r
+\r
+  // CHAR8 is typedefed as char, which by default is signed, thus\r
+  // CHAR8 is same as INT8, so same tests as above:\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUintnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabab);\r
+  Status  = SafeUintnToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToUint8) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT8, then it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabab);\r
+  Status  = SafeUintnToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToInt16) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT16, then it's a cast\r
+  //\r
+  Operand = 0x5bab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabab);\r
+  Status  = SafeUintnToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToUint16) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT16, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUintnToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUintnToInt32) {\r
+  RETURN_STATUS  Status;\r
+  UINTN       Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT32, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUintnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xabababab);\r
+  Status  = SafeUintnToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and  MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = (-37);\r
+  Status  = SafeInt64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-37), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  CHAR8       Result;\r
+\r
+  //\r
+  // CHAR8 is typedefed as char, which may be signed or unsigned based\r
+  // on the compiler. Thus, for compatibility CHAR8 should be between 0 and MAX_INT8.\r
+  //\r
+\r
+  //\r
+  // If Operand is between MIN_INT8 and  MAX_INT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  Operand = 0;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0, Result);\r
+\r
+  Operand = MAX_INT8;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (MAX_INT8, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (-37);\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is between 0 and  MAX_UINT8 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToInt16) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT16 and  MAX_INT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5bab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bab, Result);\r
+\r
+  Operand = (-23467);\r
+  Status  = SafeInt64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-23467), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is between 0 and  MAX_UINT16 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToInt32) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If Operand is between MIN_INT32 and  MAX_INT32 inclusive, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  Operand = (-1537977259);\r
+  Status  = SafeInt64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-1537977259), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUint32) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is between 0 and  MAX_UINT32 inclusive, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0x5babababefefefef);\r
+  Status  = SafeInt64ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeInt64ToUint64) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Operand;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If Operand is non-negative, then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeInt64ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand =  (-6605562033422200815);\r
+  Status  = SafeInt64ToUint64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToInt8) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToInt8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToChar8) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  CHAR8       Result;\r
+\r
+  // CHAR8 is typedefed as char, which by default is signed, thus\r
+  // CHAR8 is same as INT8, so same tests as above:\r
+\r
+  //\r
+  // If Operand is <= MAX_INT8, then it's a cast\r
+  //\r
+  Operand = 0x5b;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5b, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToChar8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToUint8) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT8, then it's a cast\r
+  //\r
+  Operand = 0xab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToUint8 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToInt16) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT16, then it's a cast\r
+  //\r
+  Operand = 0x5bab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToInt16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToUint16) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT16, then it's a cast\r
+  //\r
+  Operand = 0xabab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToUint16 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToInt32) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT32, then it's a cast\r
+  //\r
+  Operand = 0x5bababab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5bababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToInt32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToUint32) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_UINT32, then it's a cast\r
+  //\r
+  Operand = 0xabababab;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xabababab, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToUint32 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(ConversionTestSuite, TestSafeUint64ToInt64) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Operand;\r
+  INT64       Result;\r
+\r
+  //\r
+  // If Operand is <= MAX_INT64, then it's a cast\r
+  //\r
+  Operand = 0x5babababefefefef;\r
+  Result  = 0;\r
+  Status  = SafeUint64ToInt64 (Operand, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x5babababefefefef, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Operand = (0xababababefefefef);\r
+  Status  = SafeUint64ToInt64 (Operand, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+//\r
+// Addition function tests:\r
+//\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint8Add) {\r
+  RETURN_STATUS  Status;\r
+  UINT8       Augend;\r
+  UINT8       Addend;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINT8, then it's addition\r
+  //\r
+  Augend = 0x3a;\r
+  Addend = 0x3a;\r
+  Result = 0;\r
+  Status = SafeUint8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x74, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xab;\r
+  Addend = 0xbc;\r
+  Status = SafeUint8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint16Add) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Augend = 0x3a3a;\r
+  UINT16      Addend = 0x3a3a;\r
+  UINT16      Result = 0;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINT16, then it's addition\r
+  //\r
+  Status = SafeUint16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7474, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xabab;\r
+  Addend = 0xbcbc;\r
+  Status = SafeUint16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint32Add) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Augend;\r
+  UINT32      Addend;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINT32, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a;\r
+  Addend = 0x3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeUint32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x74747474, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xabababab;\r
+  Addend = 0xbcbcbcbc;\r
+  Status = SafeUint32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint64Add) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Augend;\r
+  UINT64      Addend;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_UINT64, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a12121212;\r
+  Addend = 0x3a3a3a3a12121212;\r
+  Result = 0;\r
+  Status = SafeUint64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x7474747424242424, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0xababababefefefef;\r
+  Addend = 0xbcbcbcbcdededede;\r
+  Status = SafeUint64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt8Add) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Augend;\r
+  INT8        Addend;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INT8\r
+  // and doesn't underflow MIN_INT8, then it's addition\r
+  //\r
+  Augend = 0x3a;\r
+  Addend = 0x3a;\r
+  Result = 0;\r
+  Status = SafeInt8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x74, Result);\r
+\r
+  Augend = (-58);\r
+  Addend = (-58);\r
+  Status = SafeInt8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-116), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a;\r
+  Addend = 0x5a;\r
+  Status = SafeInt8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-90);\r
+  Addend = (-90);\r
+  Status = SafeInt8Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt16Add) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Augend;\r
+  INT16       Addend;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INT16\r
+  // and doesn't underflow MIN_INT16, then it's addition\r
+  //\r
+  Augend = 0x3a3a;\r
+  Addend = 0x3a3a;\r
+  Result = 0;\r
+  Status = SafeInt16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7474, Result);\r
+\r
+  Augend = (-14906);\r
+  Addend = (-14906);\r
+  Status = SafeInt16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-29812), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a5a;\r
+  Addend = 0x5a5a;\r
+  Status = SafeInt16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-23130);\r
+  Addend = (-23130);\r
+  Status = SafeInt16Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt32Add) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Augend;\r
+  INT32       Addend;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INT32\r
+  // and doesn't underflow MIN_INT32, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a;\r
+  Addend = 0x3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeInt32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x74747474, Result);\r
+\r
+  Augend = (-976894522);\r
+  Addend = (-976894522);\r
+  Status = SafeInt32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-1953789044), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a5a5a5a;\r
+  Addend = 0x5a5a5a5a;\r
+  Status = SafeInt32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-1515870810);\r
+  Addend = (-1515870810);\r
+  Status = SafeInt32Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt64Add) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Augend;\r
+  INT64       Addend;\r
+  INT64       Result;\r
+\r
+  //\r
+  // If the result of addition doesn't overflow MAX_INT64\r
+  // and doesn't underflow MIN_INT64, then it's addition\r
+  //\r
+  Augend = 0x3a3a3a3a3a3a3a3a;\r
+  Addend = 0x3a3a3a3a3a3a3a3a;\r
+  Result = 0;\r
+  Status = SafeInt64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7474747474747474, Result);\r
+\r
+  Augend = (-4195730024608447034);\r
+  Addend = (-4195730024608447034);\r
+  Status = SafeInt64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-8391460049216894068), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Augend = 0x5a5a5a5a5a5a5a5a;\r
+  Addend = 0x5a5a5a5a5a5a5a5a;\r
+  Status = SafeInt64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Augend = (-6510615555426900570);\r
+  Addend = (-6510615555426900570);\r
+  Status = SafeInt64Add (Augend, Addend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+//\r
+// Subtraction function tests:\r
+//\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint8Sub) {\r
+  RETURN_STATUS  Status;\r
+  UINT8       Minuend;\r
+  UINT8       Subtrahend;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a;\r
+  Subtrahend = 0x3b;\r
+  Result     = 0;\r
+  Status     = SafeUint8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a;\r
+  Subtrahend = 0x6d;\r
+  Status     = SafeUint8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint16Sub) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Minuend;\r
+  UINT16      Subtrahend;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a;\r
+  Subtrahend = 0x3b3b;\r
+  Result     = 0;\r
+  Status     = SafeUint16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x1f1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a5a;\r
+  Subtrahend = 0x6d6d;\r
+  Status     = SafeUint16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint32Sub) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Minuend;\r
+  UINT32      Subtrahend;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x3b3b3b3b;\r
+  Result     = 0;\r
+  Status     = SafeUint32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT32)0x1f1f1f1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x6d6d6d6d;\r
+  Status     = SafeUint32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeUint64Sub) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Minuend;\r
+  UINT64      Subtrahend;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If Minuend >= Subtrahend, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x3b3b3b3b3b3b3b3b;\r
+  Result     = 0;\r
+  Status     = SafeUint64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x1f1f1f1f1f1f1f1f, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x6d6d6d6d6d6d6d6d;\r
+  Status     = SafeUint64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt8Sub) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Minuend;\r
+  INT8        Subtrahend;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INT8 or\r
+  // underflow MIN_INT8, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a;\r
+  Subtrahend = 0x3a;\r
+  Result     = 0;\r
+  Status     = SafeInt8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x20, Result);\r
+\r
+  Minuend    = 58;\r
+  Subtrahend = 78;\r
+  Status     = SafeInt8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-20), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-80);\r
+  Subtrahend = 80;\r
+  Status     = SafeInt8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (80);\r
+  Subtrahend = (-80);\r
+  Status     = SafeInt8Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt16Sub) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Minuend;\r
+  INT16       Subtrahend;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INT16 or\r
+  // underflow MIN_INT16, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a;\r
+  Subtrahend = 0x3a3a;\r
+  Result     = 0;\r
+  Status     = SafeInt16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x2020, Result);\r
+\r
+  Minuend    = 0x3a3a;\r
+  Subtrahend = 0x5a5a;\r
+  Status     = SafeInt16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-8224), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-31354);\r
+  Subtrahend = 31354;\r
+  Status     = SafeInt16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (31354);\r
+  Subtrahend = (-31354);\r
+  Status     = SafeInt16Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt32Sub) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Minuend;\r
+  INT32       Subtrahend;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INT32 or\r
+  // underflow MIN_INT32, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a;\r
+  Subtrahend = 0x3a3a3a3a;\r
+  Result     = 0;\r
+  Status     = SafeInt32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x20202020, Result);\r
+\r
+  Minuend    = 0x3a3a3a3a;\r
+  Subtrahend = 0x5a5a5a5a;\r
+  Status     = SafeInt32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-538976288), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-2054847098);\r
+  Subtrahend = 2054847098;\r
+  Status     = SafeInt32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (2054847098);\r
+  Subtrahend = (-2054847098);\r
+  Status     = SafeInt32Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(AdditionSubtractionTestSuite, TestSafeInt64Sub) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Minuend;\r
+  INT64       Subtrahend;\r
+  INT64       Result;\r
+\r
+  //\r
+  // If the result of subtractions doesn't overflow MAX_INT64 or\r
+  // underflow MIN_INT64, then it's subtraction\r
+  //\r
+  Minuend    = 0x5a5a5a5a5a5a5a5a;\r
+  Subtrahend = 0x3a3a3a3a3a3a3a3a;\r
+  Result     = 0;\r
+  Status     = SafeInt64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x2020202020202020, Result);\r
+\r
+  Minuend    = 0x3a3a3a3a3a3a3a3a;\r
+  Subtrahend = 0x5a5a5a5a5a5a5a5a;\r
+  Status     = SafeInt64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((-2314885530818453536), Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Minuend    = (-8825501086245354106);\r
+  Subtrahend = 8825501086245354106;\r
+  Status     = SafeInt64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+\r
+  Minuend    = (8825501086245354106);\r
+  Subtrahend = (-8825501086245354106);\r
+  Status     = SafeInt64Sub (Minuend, Subtrahend, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+//\r
+// Multiplication function tests:\r
+//\r
+TEST(MultiplicationTestSuite, TestSafeUint8Mult) {\r
+  RETURN_STATUS  Status;\r
+  UINT8       Multiplicand;\r
+  UINT8       Multiplier;\r
+  UINT8       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINT8, it will succeed\r
+  //\r
+  Multiplicand = 0x12;\r
+  Multiplier   = 0xa;\r
+  Result       = 0;\r
+  Status       = SafeUint8Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xb4, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x12;\r
+  Multiplier   = 0x23;\r
+  Status       = SafeUint8Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeUint16Mult) {\r
+  RETURN_STATUS  Status;\r
+  UINT16      Multiplicand;\r
+  UINT16      Multiplier;\r
+  UINT16      Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINT16, it will succeed\r
+  //\r
+  Multiplicand = 0x212;\r
+  Multiplier   = 0x7a;\r
+  Result       = 0;\r
+  Status       = SafeUint16Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0xfc94, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x1234;\r
+  Multiplier   = 0x213;\r
+  Status       = SafeUint16Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeUint32Mult) {\r
+  RETURN_STATUS  Status;\r
+  UINT32      Multiplicand;\r
+  UINT32      Multiplier;\r
+  UINT32      Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINT32, it will succeed\r
+  //\r
+  Multiplicand = 0xa122a;\r
+  Multiplier   = 0xd23;\r
+  Result       = 0;\r
+  Status       = SafeUint32Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x844c9dbe, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0xa122a;\r
+  Multiplier   = 0xed23;\r
+  Status       = SafeUint32Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeUint64Mult) {\r
+  RETURN_STATUS  Status;\r
+  UINT64      Multiplicand;\r
+  UINT64      Multiplier;\r
+  UINT64      Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_UINT64, it will succeed\r
+  //\r
+  Multiplicand = 0x123456789a;\r
+  Multiplier   = 0x1234567;\r
+  Result       = 0;\r
+  Status       = SafeUint64Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ ((UINT64)0x14b66db9745a07f6, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456789a;\r
+  Multiplier   = 0x12345678;\r
+  Status       = SafeUint64Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeInt8Mult) {\r
+  RETURN_STATUS  Status;\r
+  INT8        Multiplicand;\r
+  INT8        Multiplier;\r
+  INT8        Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INT8 and doesn't\r
+  // underflow MIN_UINT8, it will succeed\r
+  //\r
+  Multiplicand = 0x12;\r
+  Multiplier   = 0x7;\r
+  Result       = 0;\r
+  Status       = SafeInt8Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7e, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x12;\r
+  Multiplier   = 0xa;\r
+  Status       = SafeInt8Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeInt16Mult) {\r
+  RETURN_STATUS  Status;\r
+  INT16       Multiplicand;\r
+  INT16       Multiplier;\r
+  INT16       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INT16 and doesn't\r
+  // underflow MIN_UINT16, it will succeed\r
+  //\r
+  Multiplicand = 0x123;\r
+  Multiplier   = 0x67;\r
+  Result       = 0;\r
+  Status       = SafeInt16Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x7515, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123;\r
+  Multiplier   = 0xab;\r
+  Status       = SafeInt16Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeInt32Mult) {\r
+  RETURN_STATUS  Status;\r
+  INT32       Multiplicand;\r
+  INT32       Multiplier;\r
+  INT32       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INT32 and doesn't\r
+  // underflow MIN_UINT32, it will succeed\r
+  //\r
+  Multiplicand = 0x123456;\r
+  Multiplier   = 0x678;\r
+  Result       = 0;\r
+  Status       = SafeInt32Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x75c28c50, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456;\r
+  Multiplier   = 0xabc;\r
+  Status       = SafeInt32Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+TEST(MultiplicationTestSuite, TestSafeInt64Mult) {\r
+  RETURN_STATUS  Status;\r
+  INT64       Multiplicand;\r
+  INT64       Multiplier;\r
+  INT64       Result;\r
+\r
+  //\r
+  // If the result of multiplication doesn't overflow MAX_INT64 and doesn't\r
+  // underflow MIN_UINT64, it will succeed\r
+  //\r
+  Multiplicand = 0x123456789;\r
+  Multiplier   = 0x6789abcd;\r
+  Result       = 0;\r
+  Status       = SafeInt64Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (Status, RETURN_SUCCESS);\r
+  ASSERT_EQ (0x75cd9045220d6bb5, Result);\r
+\r
+  //\r
+  // Otherwise should result in an error status\r
+  //\r
+  Multiplicand = 0x123456789;\r
+  Multiplier   = 0xa789abcd;\r
+  Status       = SafeInt64Mult (Multiplicand, Multiplier, &Result);\r
+  ASSERT_EQ (RETURN_BUFFER_TOO_SMALL, Status);\r
+}\r
+\r
+int main(int argc, char* argv[]) {\r
+  testing::InitGoogleTest(&argc, argv);\r
+  return RUN_ALL_TESTS();\r
+}\r

diff --git a/MdePkg/Test/MdePkgHostTest.dsc b/MdePkg/Test/MdePkgHostTest.dsc
index 0cac14f0e557b7e6f192558ba905205bbb13ccdb..b8b186dd8b17c11813aaf74062a1afca020b0a55 100644 (file)
--- a/MdePkg/Test/MdePkgHostTest.dsc
+++ b/MdePkg/Test/MdePkgHostTest.dsc
@@ -28,6 +28,7 @@
   #\r
   MdePkg/Test/UnitTest/Library/BaseSafeIntLib/TestBaseSafeIntLibHost.inf\r
   MdePkg/Test/UnitTest/Library/BaseLib/BaseLibUnitTestsHost.inf\r
+  MdePkg/Test/GoogleTest/Library/BaseSafeIntLib/GoogleTestBaseSafeIntLib.inf\r
 \r
   #\r
   # Build HOST_APPLICATION Libraries\r