Files
Yukihiro "Matz" Matsumoto 4507b4a633 mruby-bigint: gate mpz_mod's Barrett path on the algorithm's precondition
Barrett reduction requires x < 2^(2*bits(m)); the gate condition only
required x->sz >= y->sz + 2, which let x.sz reach 25 limbs against a
4-limb modulus. When the precondition is violated, mpz_barrett_reduce
silently truncates high limbs and returns garbage.

Integer#remainder, which routes through mpz_mod, was affected:
(3**500).remainder((2**100)+3) returned the wrong value. Integer#%
took the udiv path via mpz_mmod and was unaffected.

Add x->sz <= 2 * y->sz to the gate so out-of-range inputs fall
through to the general udiv path.

Co-authored-by: Claude <noreply@anthropic.com>
2026-05-22 07:08:26 +09:00

225 lines
7.6 KiB
Ruby

assert 'Bigint basic' do
n = 1<<65
assert_equal 36893488147419103232, n
end
assert 'Bigint +' do
n = 1<<65
assert_equal 36893488147419103232, n + 0
assert_equal 36893488147419104229, n + 997
assert_equal 36893488147419102235, n + -997
assert_equal(-36893488147419102235, -n + 997)
assert_equal(-36893488147419104229, -n + -997)
assert_equal 73786976294838206464, n + n
assert_equal 0, n + -n
assert_equal 0, -n + n
assert_equal(-73786976294838206464, -n + -n)
assert_equal 36893488147419104229, 997 + n
assert_equal 36893488147419102235, -997 + n
end
assert 'Bigint -' do
n = 1<<65
assert_equal 36893488147419103232, n - 0
assert_equal 36893488147419102235, n - 997
assert_equal 36893488147419104229, n - -997
assert_equal(-36893488147419104229, -n - 997)
assert_equal(-36893488147419102235, -n - -997)
assert_equal 0, n - n
assert_equal(-36893488147419104229, -997 - n)
assert_equal(-36893488147419102235, 997 - n)
assert_equal(-36893488147419104229, -997 - n)
end
assert 'Bigint *' do
n = 1<<65
assert_equal 0, n * 0
assert_equal 36782807682976845922304, n * 997
assert_equal(-36782807682976845922304, n * -997)
assert_equal 36782807682976845922304, 997 * n
assert_equal(-36782807682976845922304, -997 * n)
assert_equal 1361129467683753853853498429727072845824, n * n
assert_equal(-1361129467683753853853498429727072845824, -n * n)
assert_equal(-1361129467683753853853498429727072845824, n * -n)
assert_equal 1361129467683753853853498429727072845824, -n * -n
# Test multiplication commutativity for large numbers with different limb counts
# This test specifically targets the bug where operands with different
# limb counts would produce different results based on order
a = (2**512) - 1 # 16 limbs
b = 26815615859885194199148049996411692254958731641184786755447122887443528060147093953603748596333806855380063716372972101707507765623893139892867298012168194 # 17 limbs
assert_equal(a * b, b * a)
end
assert 'Bigint /' do
n = 1<<65
assert_equal 37004501652376231, n / 997
assert_equal(-37004501652376232, n / -997)
assert_equal(-37004501652376232, -n / 997)
assert_equal 0, 997 / n
assert_equal 2, 73786976294838206464 / n
assert_equal 1, n / n
assert_equal(-1, -n / n)
assert_equal(-1, n / -n)
assert_equal 1, -n / -n
end
assert 'Bigint mod' do
n = 1<<65
assert_equal 925, n % 997
assert_equal(-72, n % -997)
assert_equal 72, -n % 997
assert_equal(-925, -n % -997)
assert_equal 0, n % n
assert_equal 997, 997 % n
assert_equal 36893488147419102235, -997 % n
assert_equal(-36893488147419102235, 997 % -n)
assert_equal(-997, -997 % -n)
assert_equal 18446744073709551616, (n / 2) % n
end
assert 'Bigint divmod' do
n = 1<<65
assert_equal [37004501652376231, 925], n.divmod(997)
assert_equal [-37004501652376232, -72], n.divmod(-997)
assert_equal [-37004501652376232, 72], (-n).divmod(997)
assert_equal [37004501652376231, -925], (-n).divmod(-997)
assert_equal [1, 0], n.divmod(n)
assert_equal [0, 997], 997.divmod(n)
assert_equal [-1, 36893488147419102235], (-997).divmod(n)
assert_equal [-1, -36893488147419102235], 997.divmod(-n)
assert_equal [0, -997], (-997).divmod(-n)
assert_equal [0, 18446744073709551616], (n / 2).divmod(n)
end
assert 'Bigint &' do
n = 1<<65
assert_equal 0, n & 0
assert_equal 0, 0 & n
assert_equal 0, n & 1
assert_equal 1, (n + 3) & 1
assert_equal 2, (n + 3) & 2
assert_equal 3, (n + 3) & 3
assert_equal n, n & n
assert_equal 36893488147419103232, n & -1
assert_equal 36893488147419103232, -1 & n
end
assert 'Bigint |' do
n = 1<<65
assert_equal 36893488147419103232, n | 0
assert_equal 36893488147419103232, 0 | n
assert_equal 36893488147419103233, n | 1
assert_equal 36893488147419103233, 1 | n
assert_equal 36893488147419103235, n | 3
assert_equal 36893488147419103232, n | n
assert_equal(-1, n | -1)
end
assert 'Bigint ^' do
n = 1<<65
assert_equal 36893488147419103232, n ^ 0
assert_equal 36893488147419103233, n ^ 1
assert_equal 36893488147419103235, 3 ^ n
assert_equal 0, n ^ n
assert_equal(-36893488147419103233, n ^ -1)
assert_equal(-36893488147419103231, -n ^ 1)
end
assert 'Bigint to_s' do
n = 1197857166996989179607278372168909873645893814254642585755536286462800958278984531968
assert_equal n, "11978_571669_96989179607278372168909873645893814254642585755536286462800958278984531968".to_i
assert_equal(-n, "-11978_571669_96989179607278372168909873645893814254642585755536286462800958278984531968".to_i)
n = 0x1197857166996989179607278372168909873645893814254642585755536286462800958278984531968
assert_equal n, "1197857166996989179607278372168909873645893814254642585755536286462800958278984531968".to_i(16)
n = 10 ** 20
assert_equal "100000000000000000000", n.to_s
end
assert 'Bigint pow' do
n = 18446744073709551616
assert_equal n, 2 ** 64
assert_equal n, 1 << 64
assert_equal 2, n >> 63
n = 1<<65
assert_equal n, n ** 1
assert_equal 1, n ** 0
assert_equal 1361129467683753853853498429727072845824, n ** 2
# assert_equal 193128586, n.pow(n, 1234567890)
# assert_equal(-1041439304, n.pow(n, -1234567890))
end
assert 'Bigint Integer#pow(e, m) - Montgomery path' do
# Regression: mpz_powm_montgomery() failed to pre-reduce base mod n,
# producing wrong results when base >= n. Also trim() must restore
# the canonical sn=0 when sz becomes 0, otherwise an inconsistent
# zero bignum (sn!=0, sz=0) propagates through the squaring loop.
m = (2**40) + 1
assert_equal 1, (2**160).pow(2, m)
assert_equal 1, (2**320).pow(2, m)
assert_equal 8, ((2**160) + 1).pow(3, m)
m2 = (2**100) + 3
assert_equal (3**500) % m2, (3**500).pow(1, m2)
assert_equal ((5**300) ** 7) % m2, (5**300).pow(7, m2)
end
assert 'Bigint Integer#remainder large operand' do
# Regression: mpz_mod's Barrett path didn't enforce its precondition
# x < 2^(2*bits(m)), so it silently truncated high limbs when x was
# much larger than m^2, producing the wrong remainder. Integer#%
# took the udiv path and worked, but Integer#remainder went through
# mpz_mod and was broken.
m = (2**100) + 3
assert_equal (3**500) % m, (3**500).remainder(m)
assert_equal (5**500) % ((2**150) + 1), (5**500).remainder((2**150) + 1)
assert_equal (2**400) % ((2**130) + 1), (2**400).remainder((2**130) + 1)
end
assert 'Bigint abs' do
n = 1<<65
assert_equal 36893488147419103232, n.abs
assert_equal 36893488147419103232, (-n).abs
end
assert 'Bigint gcd' do
# zero cases
assert_equal 0, 0.gcd(0)
n = 1 << 200
assert_equal n, n.gcd(0)
assert_equal n, 0.gcd(n)
# power-of-2 fast path
assert_equal 1 << 100, (1 << 200).gcd(1 << 100)
assert_equal 1 << 100, (1 << 100).gcd(1 << 200)
assert_equal 1 << 40, (10 ** 50).gcd(1 << 40)
# negative operands: result is the positive GCD
a = 1 << 200
b = 3 << 200
assert_equal a, a.gcd(b)
assert_equal a, (-a).gcd(b)
assert_equal a, a.gcd(-b)
assert_equal a, (-a).gcd(-b)
# balanced multi-limb with known common factor
fib1000 = (1..1000).inject([0, 1]) { |(x, y), _| [y, x + y] }[0]
common = fib1000
k, m = 1_000_003, 1_000_033 # small coprime primes
assert_equal common, (common * k).gcd(common * m)
assert_equal common, (common * m).gcd(common * k)
# unbalanced: small coprime vs large
big = common * k
assert_equal 1, big.gcd(m)
assert_equal 1, m.gcd(big)
# Fibonacci neighbors are always coprime
f100 = (1..100).inject([0, 1]) { |(x, y), _| [y, x + y] }[0]
f101 = (1..101).inject([0, 1]) { |(x, y), _| [y, x + y] }[0]
assert_equal 1, f100.gcd(f101)
# Euclidean fallback path: operand sizes differ by several limbs
assert_equal 7, (7 * (1 << 4000)).gcd(7 * 13)
end