lamzfs 0.1.1

// SPDX-License-Identifier: MIT
// Adapted from rzfs @ea41cf0b5b29 (dual GPL-2.0 OR MIT; MIT elected); see NOTICE.

use core::fmt;

#[cfg(feature = "std")]
use std::error;

use crate::checksum::{label_checksum, label_verify, LabelChecksumError, LabelVerifyError, Sha256};
use crate::phys::{
    BigLittleEndianDecoder, BigLittleEndianEncoder, BinaryDecodeError, BinaryDecoder,
    BinaryEncodeError, BinaryEncoder, BlockPointer, BlockPointerDecodeError,
    BlockPointerEncodeError, ChecksumTail, EndianOrder, LabelNvPairs, LittleEndianDecoder,
    SpaVersion, SpaVersionError, SECTOR_SHIFT,
};

////////////////////////////////////////////////////////////////////////////////

/** Uberblock.
 *
 * ### Byte layout.
 *
 * - Bytes: power of two from 1024 to 131072
 * - ZFS OpenSolaris added `ashift` between V1 and V2, changing the
 *   [`UberBlock`] size to be the same as `ashift`. However, this
 *   was not user configurable, and used the logical block size of the media.
 *   OpenZFS added the the `ashift` attribute to zpool create in a 0.6.0 release
 *   candidate. Between 0.6.3 and 0.6.4, they realized that setting `ashift` to
 *   larger values will break at least zdb, and so they limited it to 8192.
 * - It is not clear if there exist any filesystems out there that actually have
 *   an [`UberBlock`] larger than 8192. The [`UberBlock`] code itself will work
 *   with any size, and the caller has to handle figuring out the size based
 *   on the [`LabelNvPairs`] tuples.
 * - It looks like MMP was added without a version flag.
 *
 * ```text
 * +------------------+------+-------------+------------------------------+
 * | Field            | Size | SPA Version | Feature                      |
 * +------------------+------+-------------+------------------------------+
 * | magic            |   8  |           1 |                              |
 * | version          |   8  |           1 |                              |
 * | txg              |   8  |           1 |                              |
 * | guid sum         |   8  |           1 |                              |
 * | timestamp        |   8  |           1 |                              |
 * | block pointer    | 128  |           1 |                              |
 * | software version |   8  |          26 |                              |
 * | mmp              |  24  |        5000 |                              |
 * | checkpoint txg   |   8  |        5000 | com.delphix:zpool_checkpoint |
 * | padding          |   X  |             |                              |
 * | checksum tail    |  40  |           1 |                              |
 * +------------------+------+-------------+------------------------------+
 *
 * X: power of two from 1024 to 131072, minus 248 bytes
 * ```
 *
 * ### order
 *
 * The `magic` field must match [`UberBlock::MAGIC`], and its byte order
 * determines the value of `order`.
 *
 * ### other fields
 *
 * TODO: Document.
 */
#[derive(Debug)]
pub struct UberBlock {
    /// Zpool checkpoint transaction group.
    pub checkpoint_txg: u64,

    /// Endian order.
    pub order: EndianOrder,

    /// Sum of all leaf vdev GUIDs.
    pub guid_sum: u64,

    /// Multi-Modifier protection.
    pub mmp: Option<UberBlockMmp>,

    /// [`BlockPointer`] to [`crate::phys::ObjectSetType::Meta`] [`crate::phys::ObjectSet`].
    pub ptr: BlockPointer,

    /// Maximum [`SpaVersion`] supported by software that wrote out this txg.
    pub software_version: Option<SpaVersion>,

    /** UTC timestamp of this [`UberBlock`] being written out.
     *
     * In seconds since January 1st 1970 (GMT).
     */
    pub timestamp: u64,

    /// Transaction group number for this [`UberBlock`].
    pub txg: u64,

    /// Format of on disk data.
    pub version: SpaVersion,
}

impl UberBlock {
    /// Total byte size of all encoded [`UberBlock`] in a [`crate::phys::Label`].
    pub const TOTAL_SIZE: usize = 131072;

    /// Total number of secotrs of all encoded [`UberBlock`] in a [`crate::phys::Label`].
    pub const TOTAL_SECTORS: u32 = (UberBlock::TOTAL_SIZE >> SECTOR_SHIFT) as u32;

    /// Offset in sectors from the start of a [`crate::phys::Label`] of first [`UberBlock`].
    pub const LABEL_OFFSET: u64 =
        LabelNvPairs::LABEL_OFFSET + ((LabelNvPairs::SIZE >> SECTOR_SHIFT) as u64);

    /// Magic value for an encoded [`UberBlock`].
    pub const MAGIC: u64 = 0x0000000000bab10c;

    /** Is the current [`UberBlock`] newer than the other [`UberBlock`].
     *
     * The [`UberBlock`] is newer, if it has a larger `txg`, or if it has the
     * same `txg`, but a larger (more recent) `timestamp`.
     *
     * The `txg` may be the same, in the event of the first transaction group
     * after an unexpected shutdown occurs. To resolve conflicts, use the timestamp.
     */
    pub fn is_newer_than(&self, other: &UberBlock) -> bool {
        self.txg > other.txg || (self.txg == other.txg && self.timestamp > other.timestamp)
    }

    /** Gets the shift of an [`UberBlock`], depending on the `version` and
     * [`crate::phys::VdevTreeKey::AllocateShift`] values.
     *
     * The byte size is `1 << shift`.
     */
    pub fn get_shift_from_version_ashift(version: SpaVersion, ashift: u64) -> u32 {
        // Minimum shift is 10 (for 1024 bytes).
        let min_shift = 10;

        // Maximum shift depends on version.
        let max_shift = match version {
            // Maximum and minimum for V1 are the same.
            SpaVersion::V1 => 10,
            // Maximum is 17, because that is the size of the entire UberBlock
            // region in the label.
            SpaVersion::V2
            | SpaVersion::V3
            | SpaVersion::V4
            | SpaVersion::V5
            | SpaVersion::V6
            | SpaVersion::V7
            | SpaVersion::V8
            | SpaVersion::V9
            | SpaVersion::V10
            | SpaVersion::V11
            | SpaVersion::V12
            | SpaVersion::V13
            | SpaVersion::V14
            | SpaVersion::V15
            | SpaVersion::V16
            | SpaVersion::V17
            | SpaVersion::V18
            | SpaVersion::V19
            | SpaVersion::V20
            | SpaVersion::V21
            | SpaVersion::V22
            | SpaVersion::V23
            | SpaVersion::V24
            | SpaVersion::V25
            | SpaVersion::V26
            | SpaVersion::V27
            | SpaVersion::V28 => 17,
            // Maximum is 13.
            SpaVersion::V5000 => 13,
        };

        // Clamp the value.
        ashift.clamp(min_shift, max_shift) as u32
    }

    /** Checks if the bytes match an empty [`UberBlock`] pattern.
     *
     * If `exclude_checksum` is [true], then the [`ChecksumTail`] of `bytes`
     * is excluded from checking if they are zero.
     */
    fn bytes_are_empty(bytes: &[u8], exclude_checksum: bool) -> bool {
        // NOTE: It looks like some ZFS implementations write an empty
        //       UberBlock as all zero, except for the version.
        //       Others, write out all zero, except for the version, and
        //       checksum.
        let mut decoder = LittleEndianDecoder::from_bytes(bytes);

        // If magic is zero.
        if decoder.skip_zeros(8).is_ok() {
            // Skip version.
            if decoder.skip(8).is_ok() {
                // Exclude checksum.
                let excluded_length = if exclude_checksum {
                    ChecksumTail::SIZE
                } else {
                    0
                };

                if let Some(rest_size) = decoder.len().checked_sub(excluded_length) {
                    // If the rest is zero.
                    if decoder.skip_zeros(rest_size).is_ok() {
                        return true;
                    }
                }
            }
        }

        false
    }

    /** Decodes an [`UberBlock`]. Returns [`None`] if [`UberBlock`] is empty.
     *
     * # Errors
     *
     * Returns [`UberBlockDecodeError`] on error.
     */
    pub fn from_bytes(
        bytes: &[u8],
        offset: u64,
        sha256: &mut Sha256,
    ) -> Result<Option<UberBlock>, UberBlockDecodeError> {
        ////////////////////////////////
        // Verify checksum.
        if let Err(err) = label_verify(bytes, offset, sha256) {
            // Check if the UberBlock is empty (including checksum).
            if UberBlock::bytes_are_empty(bytes, false) {
                return Ok(None);
            }

            // Else, return the error.
            return Err(UberBlockDecodeError::LabelVerify { err });
        }

        ////////////////////////////////
        // Create decoder.
        let mut bele_decoder = match BigLittleEndianDecoder::from_u64_magic(bytes, UberBlock::MAGIC)
        {
            Ok(v) => v,
            Err(
                err @ BinaryDecodeError::InvalidU64Magic {
                    expected: _,
                    actual: _,
                },
            ) => {
                // Check if the UberBlock is empty (excluding checksum).
                if UberBlock::bytes_are_empty(bytes, true) {
                    return Ok(None);
                }

                // Else, re-raise error.
                return Err(UberBlockDecodeError::Binary { err });
            }
            // Else, re-raise error.
            Err(err) => return Err(UberBlockDecodeError::Binary { err }),
        };
        let decoder = bele_decoder.decoder_as_mut();

        ////////////////////////////////
        // Decode fields.
        let version = SpaVersion::try_from(decoder.get_u64()?)?;
        let txg = decoder.get_u64()?;
        let guid_sum = decoder.get_u64()?;
        let timestamp = decoder.get_u64()?;

        ////////////////////////////////
        // Decode block pointer.
        let block_ptr = match BlockPointer::from_decoder(decoder)? {
            Some(ptr) => ptr,
            None => return Err(UberBlockDecodeError::EmptyBlockPointer {}),
        };

        ////////////////////////////////
        // Decode software version.
        let software_version = match decoder.get_u64()? {
            0 => None,
            v => Some(SpaVersion::try_from(v)?),
        };

        ////////////////////////////////
        // Decode MMP.
        let mmp = UberBlockMmp::from_decoder(decoder)?;

        ////////////////////////////////
        // Decode checkpoint transaction group.
        let checkpoint_txg = decoder.get_u64()?;

        ////////////////////////////////
        // Check that the rest of the uber block (up to the checksum at the
        // tail) is all zeroes.
        let rest_size = match decoder.len().checked_sub(ChecksumTail::SIZE) {
            Some(v) => v,
            None => {
                return Err(UberBlockDecodeError::Binary {
                    err: BinaryDecodeError::EndOfInput {
                        offset: decoder.offset(),
                        max_offset: bytes.len(),
                        capacity: decoder.capacity(),
                        count: ChecksumTail::SIZE,
                    },
                })
            }
        };
        decoder.skip_zeros(rest_size)?;

        ////////////////////////////////
        // Success.
        Ok(Some(UberBlock {
            checkpoint_txg,
            order: decoder.order(),
            guid_sum,
            mmp,
            ptr: block_ptr,
            software_version,
            timestamp,
            txg,
            version,
        }))
    }

    /** Encodes an [`UberBlock`].
     *
     * # Errors
     *
     * Returns [`UberBlockEncodeError`] on error.
     */
    pub fn to_bytes(
        &self,
        bytes: &mut [u8],
        offset: u64,
        sha256: &mut Sha256,
    ) -> Result<(), UberBlockEncodeError> {
        ////////////////////////////////
        // Create encoder.
        let mut bl_encoder = BigLittleEndianEncoder::to_bytes(bytes, self.order);
        let encoder = bl_encoder.encoder();
        encoder.put_u64(UberBlock::MAGIC)?;

        ////////////////////////////////
        // Encode fields.
        encoder.put_u64(self.version.into())?;
        encoder.put_u64(self.txg)?;
        encoder.put_u64(self.guid_sum)?;
        encoder.put_u64(self.timestamp)?;

        ////////////////////////////////
        // Encode block pointer.
        self.ptr.to_encoder(encoder)?;

        ////////////////////////////////
        // Encode software version (conditionally).
        match self.software_version {
            Some(v) => encoder.put_u64(v.into())?,
            None => encoder.put_u64(0)?,
        };

        ////////////////////////////////
        // Encode MMP (conditionally).
        match &self.mmp {
            Some(mmp) => mmp.to_encoder(encoder)?,
            None => {
                encoder.put_zeros(UberBlockMmp::SIZE)?;
            }
        }

        ////////////////////////////////
        // Encode checkpoint transaction group.
        encoder.put_u64(self.checkpoint_txg)?;

        ////////////////////////////////
        // Encode padding.
        let rest_size = match encoder.available().checked_sub(ChecksumTail::SIZE) {
            Some(v) => v,
            None => {
                return Err(UberBlockEncodeError::Binary {
                    err: BinaryEncodeError::EndOfOutput {
                        offset: encoder.offset(),
                        capacity: encoder.capacity(),
                        count: ChecksumTail::SIZE,
                    },
                })
            }
        };

        encoder.put_zeros(rest_size)?;

        ////////////////////////////////
        // Compute checksum.
        label_checksum(bytes, offset, sha256, self.order)?;

        ////////////////////////////////
        // Success.
        Ok(())
    }
}

/// [`UberBlock`] decode error.
#[derive(Debug)]
pub enum UberBlockDecodeError {
    /// [`BinaryDecoder`] error.
    Binary {
        /// Error.
        err: BinaryDecodeError,
    },

    /// [`BlockPointer`] decode error.
    BlockPointer {
        /// Error.
        err: BlockPointerDecodeError,
    },

    /// [`BlockPointer`] is empty. */
    EmptyBlockPointer {},

    /// Label checksum verification error.
    LabelVerify {
        /// Error.
        err: LabelVerifyError,
    },

    /// [`SpaVersion`] decode error.
    SpaVersion {
        /// Error.
        err: SpaVersionError,
    },

    /// [`UberBlockMmp`] decode error.
    UberBlockMmp {
        /// Error.
        err: UberBlockMmpDecodeError,
    },
}

impl From<BinaryDecodeError> for UberBlockDecodeError {
    fn from(err: BinaryDecodeError) -> Self {
        UberBlockDecodeError::Binary { err }
    }
}

impl From<BlockPointerDecodeError> for UberBlockDecodeError {
    fn from(err: BlockPointerDecodeError) -> Self {
        UberBlockDecodeError::BlockPointer { err }
    }
}

impl From<LabelVerifyError> for UberBlockDecodeError {
    fn from(err: LabelVerifyError) -> Self {
        UberBlockDecodeError::LabelVerify { err }
    }
}

impl From<SpaVersionError> for UberBlockDecodeError {
    fn from(err: SpaVersionError) -> Self {
        UberBlockDecodeError::SpaVersion { err }
    }
}

impl From<UberBlockMmpDecodeError> for UberBlockDecodeError {
    fn from(err: UberBlockMmpDecodeError) -> Self {
        UberBlockDecodeError::UberBlockMmp { err }
    }
}

impl fmt::Display for UberBlockDecodeError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            UberBlockDecodeError::Binary { err } => {
                write!(f, "UberBlock decode error | {err}")
            }
            UberBlockDecodeError::BlockPointer { err } => {
                write!(f, "UberBlock decode error | {err}")
            }
            UberBlockDecodeError::EmptyBlockPointer {} => {
                write!(f, "UberBlock decode error, empty block pointer")
            }
            UberBlockDecodeError::LabelVerify { err } => {
                write!(f, "UberBlock decode error | {err}")
            }
            UberBlockDecodeError::SpaVersion { err } => {
                write!(f, "UberBlock decode error | {err}")
            }
            UberBlockDecodeError::UberBlockMmp { err } => {
                write!(f, "UberBlock decode error | {err}")
            }
        }
    }
}

#[cfg(feature = "std")]
impl error::Error for UberBlockDecodeError {
    fn source(&self) -> Option<&(dyn error::Error + 'static)> {
        match self {
            UberBlockDecodeError::Binary { err } => Some(err),
            UberBlockDecodeError::BlockPointer { err } => Some(err),
            UberBlockDecodeError::EmptyBlockPointer {} => None,
            UberBlockDecodeError::LabelVerify { err } => Some(err),
            UberBlockDecodeError::SpaVersion { err } => Some(err),
            UberBlockDecodeError::UberBlockMmp { err } => Some(err),
        }
    }
}

/// [`UberBlock`] encode error.
#[derive(Debug)]
pub enum UberBlockEncodeError {
    /// Binary encode error.
    Binary {
        /// Error.
        err: BinaryEncodeError,
    },

    /// [`BlockPointer`] encode error.
    BlockPointer {
        /// Error.
        err: BlockPointerEncodeError,
    },

    /// Label checksum error.
    LabelChecksum {
        /// Error.
        err: LabelChecksumError,
    },

    /// [`UberBlockMmp`] encode error.
    UberBlockMmp {
        /// Error.
        err: UberBlockMmpEncodeError,
    },
}

impl From<BinaryEncodeError> for UberBlockEncodeError {
    fn from(err: BinaryEncodeError) -> Self {
        UberBlockEncodeError::Binary { err }
    }
}

impl From<BlockPointerEncodeError> for UberBlockEncodeError {
    fn from(err: BlockPointerEncodeError) -> Self {
        UberBlockEncodeError::BlockPointer { err }
    }
}

impl From<LabelChecksumError> for UberBlockEncodeError {
    fn from(err: LabelChecksumError) -> Self {
        UberBlockEncodeError::LabelChecksum { err }
    }
}

impl From<UberBlockMmpEncodeError> for UberBlockEncodeError {
    fn from(err: UberBlockMmpEncodeError) -> Self {
        UberBlockEncodeError::UberBlockMmp { err }
    }
}

impl fmt::Display for UberBlockEncodeError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            UberBlockEncodeError::Binary { err } => {
                write!(f, "UberBlock encode error | {err}")
            }
            UberBlockEncodeError::BlockPointer { err } => {
                write!(f, "UberBlock encode error | {err}")
            }
            UberBlockEncodeError::LabelChecksum { err } => {
                write!(f, "UberBlock encode error | {err}")
            }
            UberBlockEncodeError::UberBlockMmp { err } => {
                write!(f, "UberBlock encode error | {err}")
            }
        }
    }
}

#[cfg(feature = "std")]
impl error::Error for UberBlockEncodeError {
    fn source(&self) -> Option<&(dyn error::Error + 'static)> {
        match self {
            UberBlockEncodeError::Binary { err } => Some(err),
            UberBlockEncodeError::BlockPointer { err } => Some(err),
            UberBlockEncodeError::LabelChecksum { err } => Some(err),
            UberBlockEncodeError::UberBlockMmp { err } => Some(err),
        }
    }
}

////////////////////////////////////////////////////////////////////////////////

/** UberBlock MMP configuration.
 *
 * ### Byte layout.
 *
 * - Bytes: 24
 *
 * ```text
 * +--------+------+
 * | Field  | Size |
 * +--------+------+
 * | magic  |    8 |
 * | delay  |    8 |
 * | config |    8 |
 * +--------+------+
 * ```
 *
 * ### Bit layout.
 *
 * ```text
 *        6                   5                   4                   3                   2                   1                   0
 *  3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0 9 8 7 6 5 4 3 2 1 0
 * +-------------------------------------------------------------------------------------------------------------------------------+
 * |                                                           magic (64)                                                          |
 * +-------------------------------------------------------------------------------------------------------------------------------+
 * |                                                           delay (64)                                                          |
 * +-------------------------------------------------------------------------------------------------------------------------------+
 * |      fail intervals (16)     |         sequence (16)         |             write interval ms (24)            |   xxxx x f s w |
 * +-------------------------------------------------------------------------------------------------------------------------------+
 *
 * w: write interval is valid
 * s: sequence is valid
 * f: fail intervals is valid
 * x: reserved
 * ```
 *
 * ### magic
 *
 * The `magic` field must match [`UberBlockMmp::MAGIC`], and its byte order is
 * determined by the parent [`UberBlock`].
 *
 * ### delay
 *
 * Nanoseconds since last MMP write. (TODO: explain)
 *
 * ### f s w
 *
 * Bits that determine if fail intervals, sequnce, and write interval are set.
 *
 * ### write interval
 *
 * Milliseconds between writing out successive [`UberBlockMmp`].
 *
 * ### sequence
 *
 * Sequence counter to distinguish writes, when two [`UberBlock`] have the same
 * timestamp. Reset back to 1 (TODO: or 2?) when [`UberBlock`] timestamp changes.
 *
 * ### fail intervals
 *
 * When `fail_intervals == 0`, MMP write failures are ignored.
 *
 * When `fail_intervals > 0`, pool will be suspended if
 * `fail_intervals * write_interval` amount of time passes between
 * [`UberBlockMmp`] writes.
 */
#[derive(Debug)]
pub struct UberBlockMmp {
    /// Nanoseconds since last MMP write.
    pub delay: u64,

    /// Number of allowed failed write intervals.
    pub fail_intervals: Option<u16>,

    /// Sequence counter for matching uberblock timestamp.
    pub sequence: Option<u16>,

    /// MMP write interval in milliseconds.
    pub write_interval: Option<u32>,
}

impl UberBlockMmp {
    /// Byte size of an encoded [`UberBlockMmp`].
    pub const SIZE: usize = 24;

    /// Magic value for an encoded [`UberBlockMmp`].
    pub const MAGIC: u64 = 0x00000000a11cea11;

    /// Maximum write interval.
    pub const WRITE_INTERVAL_MAX: u32 =
        (UberBlockMmp::CONFIG_WRITE_INTERVAL_MASK_DOWN_SHIFTED as u32);

    /// Write interval is valid bit of config.
    const CONFIG_WRITE_INTERVAL_BIT_FLAG: u64 = 1 << 0;

    /// Sequence is valid bit of config.
    const CONFIG_SEQUENCE_BIT_FLAG: u64 = 1 << 1;

    /// Fail intervals is valid bit of config.
    const CONFIG_FAIL_INTERVALS_BIT_FLAG: u64 = 1 << 2;

    /// Reserved bits of config.
    const CONFIG_RESERVED_MASK: u64 = 0xff
        ^ UberBlockMmp::CONFIG_FAIL_INTERVALS_BIT_FLAG
        ^ UberBlockMmp::CONFIG_SEQUENCE_BIT_FLAG
        ^ UberBlockMmp::CONFIG_WRITE_INTERVAL_BIT_FLAG;

    /// Write interval shift of config.
    const CONFIG_WRITE_INTERVAL_SHIFT: u64 = 8;

    /// Shifted write interval mask of config.
    const CONFIG_WRITE_INTERVAL_MASK_DOWN_SHIFTED: u64 = (1 << 24) - 1;

    /// Sequence shift of config.
    const CONFIG_SEQUENCE_SHIFT: u64 = 32;

    /// Fail intervals shift of config.
    const CONFIG_FAIL_INTERVALS_SHIFT: u64 = 48;

    /** Decodes an [`UberBlockMmp`].
     *
     * # Errors
     *
     * Returns [`UberBlockMmpDecodeError`] on error.
     */
    pub fn from_decoder(
        decoder: &mut dyn BinaryDecoder<'_>,
    ) -> Result<Option<UberBlockMmp>, UberBlockMmpDecodeError> {
        ////////////////////////////////
        // Decode values.
        let magic = decoder.get_u64()?;
        let delay = decoder.get_u64()?;
        let config = decoder.get_u64()?;

        ////////////////////////////////
        // Check MMP magic.
        match magic {
            0 => {
                ////////////////////////
                // If magic is 0, then MMP should not be configured, and the
                // following two values should be zero.
                if delay != 0 || config != 0 {
                    return Err(UberBlockMmpDecodeError::NonZeroValues {
                        magic,
                        delay,
                        config,
                    });
                }
                Ok(None)
            }
            UberBlockMmp::MAGIC => {
                ////////////////////////
                // Check that reserved bits are not set.
                if (config & UberBlockMmp::CONFIG_RESERVED_MASK) != 0 {
                    return Err(UberBlockMmpDecodeError::NonZeroReservedConfigBits { config });
                }

                ////////////////////////
                // Decode config.
                let fail_intervals = (config >> UberBlockMmp::CONFIG_FAIL_INTERVALS_SHIFT) as u16;
                let sequence = (config >> UberBlockMmp::CONFIG_SEQUENCE_SHIFT) as u16;
                let write_interval = ((config >> UberBlockMmp::CONFIG_WRITE_INTERVAL_SHIFT)
                    & UberBlockMmp::CONFIG_WRITE_INTERVAL_MASK_DOWN_SHIFTED)
                    as u32;

                let fail_intervals = if (config & UberBlockMmp::CONFIG_FAIL_INTERVALS_BIT_FLAG) != 0
                {
                    Some(fail_intervals)
                } else if fail_intervals != 0 {
                    // The fail intervals bit is not set, and the fail
                    // intervals value is not 0.
                    return Err(UberBlockMmpDecodeError::NonZeroValues {
                        magic,
                        delay,
                        config,
                    });
                } else {
                    None
                };

                let sequence = if (config & UberBlockMmp::CONFIG_SEQUENCE_BIT_FLAG) != 0 {
                    Some(sequence)
                } else if sequence != 0 {
                    // The sequence bit is not set, and the sequence value
                    // is not 0.
                    return Err(UberBlockMmpDecodeError::NonZeroValues {
                        magic,
                        delay,
                        config,
                    });
                } else {
                    None
                };

                let write_interval = if (config & UberBlockMmp::CONFIG_WRITE_INTERVAL_BIT_FLAG) != 0
                {
                    Some(write_interval)
                } else if write_interval != 0 {
                    // The write interval bit is not set, and the write
                    // interval value is not 0.
                    return Err(UberBlockMmpDecodeError::NonZeroValues {
                        magic,
                        delay,
                        config,
                    });
                } else {
                    None
                };

                Ok(Some(UberBlockMmp {
                    delay,
                    fail_intervals,
                    sequence,
                    write_interval,
                }))
            }
            _ => Err(UberBlockMmpDecodeError::InvalidMagic { magic }),
        }
    }

    /** Encodes an [`UberBlockMmp`].
     *
     * # Errors
     *
     * Returns [`UberBlockMmpEncodeError`] on error.
     */
    pub fn to_encoder(
        &self,
        encoder: &mut dyn BinaryEncoder<'_>,
    ) -> Result<(), UberBlockMmpEncodeError> {
        ////////////////////////////////
        // Encode magic.
        encoder.put_u64(UberBlockMmp::MAGIC)?;

        ////////////////////////////////
        // Encode delay.
        encoder.put_u64(self.delay)?;

        ////////////////////////////////
        // Encode config.
        let config: u64 = (match self.fail_intervals {
            Some(v) => {
                (u64::from(v) << UberBlockMmp::CONFIG_FAIL_INTERVALS_SHIFT)
                    | UberBlockMmp::CONFIG_FAIL_INTERVALS_BIT_FLAG
            }
            None => 0,
        } | match self.sequence {
            Some(v) => {
                (u64::from(v) << UberBlockMmp::CONFIG_SEQUENCE_SHIFT)
                    | UberBlockMmp::CONFIG_SEQUENCE_BIT_FLAG
            }
            None => 0,
        } | match self.write_interval {
            Some(v) => {
                if u64::from(v) > UberBlockMmp::CONFIG_WRITE_INTERVAL_MASK_DOWN_SHIFTED {
                    return Err(UberBlockMmpEncodeError::WriteIntervalTooLarge {
                        write_interval: v,
                    });
                }
                (u64::from(v) << UberBlockMmp::CONFIG_WRITE_INTERVAL_SHIFT)
                    | UberBlockMmp::CONFIG_WRITE_INTERVAL_BIT_FLAG
            }
            None => 0,
        });

        encoder.put_u64(config)?;

        ////////////////////////////////
        // Success.
        Ok(())
    }
}

/// [`UberBlockMmp`] encode error.
#[derive(Debug)]
pub enum UberBlockMmpDecodeError {
    /// [`BinaryDecoder`] error.
    Endian {
        /// Error.
        err: BinaryDecodeError,
    },

    /// Invalid magic.
    InvalidMagic {
        /// Invalid magic value.
        magic: u64,
    },

    /// Non-zero reserved config bits.
    NonZeroReservedConfigBits {
        /// Invalid config value.
        config: u64,
    },

    /// Non-zero MMP values.
    NonZeroValues {
        /// Magic value.
        magic: u64,
        /// Delay value.
        delay: u64,
        /// Config value.
        config: u64,
    },
}

impl From<BinaryDecodeError> for UberBlockMmpDecodeError {
    fn from(err: BinaryDecodeError) -> Self {
        UberBlockMmpDecodeError::Endian { err }
    }
}

impl fmt::Display for UberBlockMmpDecodeError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            UberBlockMmpDecodeError::Endian { err } => {
                write!(f, "UberBlockMmp decode error | {err}")
            }
            UberBlockMmpDecodeError::InvalidMagic { magic } => {
                write!(f, "UberBlockMmp decode error, invalid magic {magic:#016x}")
            }
            UberBlockMmpDecodeError::NonZeroReservedConfigBits { config } => {
                write!(
                    f,
                    "UberBlockMmp decode error, non-zero reserved config bits config {config:#016x}"
                )
            }
            UberBlockMmpDecodeError::NonZeroValues {
                magic,
                delay,
                config,
            } => {
                write!(
                    f,
                    "UberBlockMmp decode error, non-zero values delay {delay:#016x} config {config:#016x} for magic {magic:#016x}"
                )
            }
        }
    }
}

#[cfg(feature = "std")]
impl error::Error for UberBlockMmpDecodeError {
    fn source(&self) -> Option<&(dyn error::Error + 'static)> {
        match self {
            UberBlockMmpDecodeError::Endian { err } => Some(err),
            _ => None,
        }
    }
}

/// [`UberBlockMmp`] decode error.
#[derive(Debug)]
pub enum UberBlockMmpEncodeError {
    /// [`BinaryEncoder`] error.
    Binary {
        /// Error.
        err: BinaryEncodeError,
    },

    /// Write interval is too large.
    WriteIntervalTooLarge {
        /// Invalid write interval.
        write_interval: u32,
    },
}

impl From<BinaryEncodeError> for UberBlockMmpEncodeError {
    fn from(err: BinaryEncodeError) -> Self {
        UberBlockMmpEncodeError::Binary { err }
    }
}

impl fmt::Display for UberBlockMmpEncodeError {
    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
        match self {
            UberBlockMmpEncodeError::Binary { err } => {
                write!(f, "UberBlockMmp encode error | {err}")
            }
            UberBlockMmpEncodeError::WriteIntervalTooLarge { write_interval } => {
                write!(
                    f,
                    "UberBlockMmp encode error, write interval is too large {write_interval} > {}",
                    UberBlockMmp::CONFIG_WRITE_INTERVAL_MASK_DOWN_SHIFTED
                )
            }
        }
    }
}

#[cfg(feature = "std")]
impl error::Error for UberBlockMmpEncodeError {
    fn source(&self) -> Option<&(dyn error::Error + 'static)> {
        match self {
            UberBlockMmpEncodeError::Binary { err } => Some(err),
            UberBlockMmpEncodeError::WriteIntervalTooLarge { write_interval: _ } => None,
        }
    }
}