read-fonts 0.46.0

//! OpenType Layout common table formats

#[cfg(feature = "std")]
mod closure;

mod condition;
mod feature;
mod feature_variations;
pub(crate) mod header;
mod lookup_flag;
mod script;

use core::cmp::Ordering;

pub use condition::store_deltas;
pub use lookup_flag::LookupFlag;
pub use script::{ScriptTags, SelectedScript, UNICODE_TO_NEW_OPENTYPE_SCRIPT_TAGS};

use super::variations::DeltaSetIndex;

#[cfg(feature = "std")]
use crate::collections::IntSet;
use crate::TableProvider;

#[cfg(feature = "std")]
pub(crate) use closure::{
    ContextFormat1, ContextFormat2, ContextFormat3, LayoutLookupList, LookupClosure,
    LookupClosureCtx, SeqCache,
};

#[cfg(feature = "std")]
pub use closure::Intersect;

#[cfg(test)]
mod spec_tests;

include!("../../generated/generated_layout.rs");

pub use feature_variations::LookupVariations;
pub use header::{LayoutOffsetArray, SelectedLookupList};

impl<'a, T: FontRead<'a, Args = ()>> Lookup<'a, T> {
    pub fn get_subtable(&self, offset: Offset16) -> Result<T, ReadError> {
        self.resolve_offset(offset)
    }
}

/// A trait that abstracts the behaviour of an extension subtable
///
/// This is necessary because GPOS and GSUB have different concrete types
/// for their extension lookups.
pub trait ExtensionLookup<'a, T: FontRead<'a, Args = ()>>: FontRead<'a, Args = ()> {
    fn extension(&self) -> Result<T, ReadError>;
}

/// an array of subtables, maybe behind extension lookups
///
/// This is used to implement more ergonomic access to lookup subtables for
/// GPOS & GSUB lookup tables.
pub enum Subtables<'a, T: FontRead<'a, Args = ()>, Ext: ExtensionLookup<'a, T>> {
    Subtable(ArrayOfOffsets<'a, T>),
    Extension(ArrayOfOffsets<'a, Ext>),
}

impl<'a, T: FontRead<'a, Args = ()> + 'a, Ext: ExtensionLookup<'a, T> + 'a> Subtables<'a, T, Ext> {
    /// create a new subtables array given offsets to non-extension subtables
    pub(crate) fn new(offsets: &'a [BigEndian<Offset16>], data: FontData<'a>) -> Self {
        Subtables::Subtable(ArrayOfOffsets::new(offsets, data, ()))
    }

    /// create a new subtables array given offsets to extension subtables
    pub(crate) fn new_ext(offsets: &'a [BigEndian<Offset16>], data: FontData<'a>) -> Self {
        Subtables::Extension(ArrayOfOffsets::new(offsets, data, ()))
    }

    /// The number of subtables in this collection
    pub fn len(&self) -> usize {
        match self {
            Subtables::Subtable(inner) => inner.len(),
            Subtables::Extension(inner) => inner.len(),
        }
    }

    pub fn is_empty(&self) -> bool {
        self.len() == 0
    }

    /// Return the subtable at the given index
    pub fn get(&self, idx: usize) -> Result<T, ReadError> {
        match self {
            Subtables::Subtable(inner) => inner.get(idx),
            Subtables::Extension(inner) => inner.get(idx).and_then(|ext| ext.extension()),
        }
    }

    /// Return an iterator over all the subtables in the collection
    pub fn iter(&self) -> impl Iterator<Item = Result<T, ReadError>> + 'a {
        let (left, right) = match self {
            Subtables::Subtable(inner) => (Some(inner.iter()), None),
            Subtables::Extension(inner) => (
                None,
                Some(inner.iter().map(|ext| ext.and_then(|ext| ext.extension()))),
            ),
        };
        left.into_iter()
            .flatten()
            .chain(right.into_iter().flatten())
    }
}

/// An enum for different possible tables referenced by [Feature::feature_params_offset]
pub enum FeatureParams<'a> {
    StylisticSet(StylisticSetParams<'a>),
    Size(SizeParams<'a>),
    CharacterVariant(CharacterVariantParams<'a>),
}

impl ReadArgs for FeatureParams<'_> {
    type Args = Tag;
}

impl<'a> FontRead<'a> for FeatureParams<'a> {
    fn read_with_args(bytes: FontData<'a>, args: Tag) -> Result<FeatureParams<'a>, ReadError> {
        match args {
            t if t == Tag::new(b"size") => SizeParams::read(bytes).map(Self::Size),
            // to whoever is debugging this dumb bug I wrote: I'm sorry.
            t if &t.to_raw()[..2] == b"ss" => {
                StylisticSetParams::read(bytes).map(Self::StylisticSet)
            }
            t if &t.to_raw()[..2] == b"cv" => {
                CharacterVariantParams::read(bytes).map(Self::CharacterVariant)
            }
            // NOTE: what even is our error condition here? an offset exists but
            // we don't know the tag?
            _ => Err(ReadError::InvalidFormat(0xdead)),
        }
    }
}

impl FeatureVariations<'_> {
    /// Returns the index of the first feature variation record that matches
    /// the given coordinates. Format-2 conditions use their default values;
    /// use [`Self::index_for_coords_with_delta`] to include variation deltas.
    pub fn index_for_coords(&self, coords: &[F2Dot14]) -> Option<u32> {
        self.index_for_coords_with_delta(coords, |_| Ok::<_, core::convert::Infallible>(0.0))
    }

    /// Returns the first matching record, resolving format-2 variation deltas
    /// with the caller's variation store. Records with invalid conditions are
    /// skipped. See [`Condition::evaluate`] for evaluation behavior.
    pub fn index_for_coords_with_delta<E>(
        &self,
        coords: &[F2Dot14],
        mut delta: impl FnMut(u32) -> Result<f64, E>,
    ) -> Option<u32> {
        if self.version().major != 1 {
            return None;
        }
        for (index, rec) in self.feature_variation_records().iter().enumerate() {
            // If the ConditionSet offset is 0, this is treated as the
            // universal condition: all contexts are matched.
            if rec.condition_set_offset().is_null() {
                return Some(index as u32);
            }
            let Some(Ok(condition_set)) = rec.condition_set(self.offset_data()) else {
                continue;
            };
            let delta = |index| delta(index).map_err(|_| crate::model::Error::Malformed);
            if condition_set.evaluate(coords, delta).ok() == Some(true) {
                return Some(index as u32);
            }
        }
        None
    }
}

/// Which features variation indices were selected for a given location.
///
/// This selects feature variation records only. Lookup variations are applied
/// per feature with [`FeatureVariations::lookup_variations`].
#[derive(Copy, Clone, PartialEq, Eq, Default, Debug)]
pub struct SelectedFeatureVariations {
    /// Feature variation index for the GSUB table.
    pub gsub: Option<u32>,
    /// Feature variation index for the GPOS table.
    pub gpos: Option<u32>,
    /// True if either table has lookup variations, which then have to be
    /// resolved per feature.
    pub has_lookup_variations: bool,
}

impl SelectedFeatureVariations {
    /// Selects the feature variation indices for the given font and
    /// coordinates.
    pub fn new<'a>(tables: &impl TableProvider<'a>, coords: &[F2Dot14]) -> Self {
        let feature_var_tables = [
            tables
                .gsub()
                .ok()
                .and_then(|gsub| gsub.feature_variations()),
            tables
                .gpos()
                .ok()
                .and_then(|gpos| gpos.feature_variations()),
        ];
        let store = feature_var_tables
            .iter()
            .any(|table| matches!(table, Some(Ok(_))))
            .then(|| {
                tables
                    .gdef()
                    .ok()?
                    .item_var_store()
                    .transpose()
                    .ok()
                    .flatten()
            })
            .flatten();
        let has_lookup_variations = feature_var_tables.iter().any(|table| {
            table.as_ref().is_some_and(|table| {
                table
                    .as_ref()
                    .is_ok_and(|table| table.lookup_variations().is_some())
            })
        });
        let [gsub, gpos] = feature_var_tables.map(|feature_vars| {
            feature_vars
                .transpose()
                .ok()
                .flatten()
                .and_then(|feature_vars| {
                    feature_vars
                        .index_for_coords_with_delta(coords, store_deltas(store.as_ref(), coords))
                })
        });
        Self {
            gsub,
            gpos,
            has_lookup_variations,
        }
    }
}

impl FeatureTableSubstitutionRecord {
    pub fn alternate_feature<'a>(&self, data: FontData<'a>) -> Result<Feature<'a>, ReadError> {
        self.alternate_feature_offset()
            .resolve_with_args(data, Tag::new(b"NULL"))
    }
}

fn bit_storage(v: u32) -> u32 {
    u32::BITS - v.leading_zeros()
}

impl<'a> CoverageTable<'a> {
    /// Iterates over the covered glyphs, in coverage order.
    pub fn iter(&self) -> impl Iterator<Item = GlyphId> + 'a {
        let (one, two, three, four) = match self {
            Self::Format1(t) => (
                Some(t.glyph_array().iter().map(|g| GlyphId::from(g.get()))),
                None,
                None,
                None,
            ),
            Self::Format2(t) => (
                None,
                Some(
                    t.range_records()
                        .iter()
                        .flat_map(|r| r.iter().map(GlyphId::from)),
                ),
                None,
                None,
            ),
            Self::Format3(t) => (
                None,
                None,
                Some(t.glyph_array().iter().map(|g| GlyphId::from(g.get()))),
                None,
            ),
            Self::Format4(t) => (
                None,
                None,
                None,
                Some(t.range_records().iter().flat_map(RangeRecord2::iter)),
            ),
        };
        one.into_iter()
            .flatten()
            .chain(two.into_iter().flatten())
            .chain(three.into_iter().flatten())
            .chain(four.into_iter().flatten())
    }

    /// If this glyph is covered, returns its index without narrowing it.
    // Always inlined: left to the heuristics, the common formats' searches
    // are folded in first and the result is then too large to inline.
    #[inline(always)]
    pub fn get(&self, gid: impl Into<GlyphId>) -> Option<u32> {
        let gid = gid.into();
        match self {
            Self::Format1(t) => t.get(gid).map(u32::from),
            Self::Format2(t) => t.get(gid).map(u32::from),
            _ => self.get_wide(gid),
        }
    }

    // Out of line so that the common formats stay small enough to inline.
    #[inline(never)]
    fn get_wide(&self, gid: GlyphId) -> Option<u32> {
        match self {
            Self::Format3(t) => t.get(gid),
            Self::Format4(t) => t.get(gid),
            _ => None,
        }
    }

    /// Returns if this table contains at least one glyph in the 'glyphs' set.
    #[cfg(feature = "std")]
    pub fn intersects(&self, glyphs: &IntSet<GlyphId>) -> bool {
        match self {
            Self::Format1(t) => t.intersects(glyphs),
            Self::Format2(t) => t.intersects(glyphs),
            Self::Format3(t) => t
                .glyph_array()
                .iter()
                .any(|g| glyphs.contains(GlyphId::from(g.get()))),
            Self::Format4(t) => t.range_records().iter().any(|r| {
                glyphs.intersects_range(
                    GlyphId::from(r.start_glyph_id())..=GlyphId::from(r.end_glyph_id()),
                )
            }),
        }
    }

    /// Returns the intersection of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    pub fn intersect_set(&self, glyphs: &IntSet<GlyphId>) -> IntSet<GlyphId> {
        match self {
            Self::Format1(t) => t.intersect_set(glyphs),
            Self::Format2(t) => t.intersect_set(glyphs),
            Self::Format3(t) => t
                .glyph_array()
                .iter()
                .map(|g| GlyphId::from(g.get()))
                .filter(|g| glyphs.contains(*g))
                .collect(),
            Self::Format4(t) => {
                let mut covered = IntSet::empty();
                for range in t.range_records() {
                    if range.start_glyph_id() <= range.end_glyph_id() {
                        covered.insert_range(
                            GlyphId::from(range.start_glyph_id())
                                ..=GlyphId::from(range.end_glyph_id()),
                        );
                    }
                }
                covered.intersect(glyphs);
                covered
            }
        }
    }

    /// Return the number of glyphs in this table
    pub fn population(&self) -> usize {
        match self {
            Self::Format1(t) => t.population(),
            Self::Format2(t) => t.population(),
            Self::Format3(t) => t.glyph_count().to_u32() as usize,
            Self::Format4(t) => t.range_records().iter().fold(0, |acc: usize, record| {
                acc.saturating_add(record.population())
            }),
        }
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        match self {
            Self::Format1(t) => t.cost(),
            Self::Format2(t) => t.cost(),
            Self::Format3(t) => bit_storage(t.glyph_count().to_u32()),
            Self::Format4(t) => bit_storage(t.range_count().to_u32()),
        }
    }
}

impl CoverageFormat1<'_> {
    /// If this glyph is in the coverage table, returns its index
    #[inline]
    pub fn get(&self, gid: impl Into<GlyphId>) -> Option<u16> {
        let gid16: GlyphId16 = gid.into().try_into().ok()?;
        let be_glyph: BigEndian<GlyphId16> = gid16.into();
        self.glyph_array()
            .binary_search(&be_glyph)
            .ok()
            .map(|idx| idx as _)
    }

    /// Returns if this table contains at least one glyph in the 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersects(&self, glyphs: &IntSet<GlyphId>) -> bool {
        let glyph_count = self.glyph_count() as u32;
        if glyph_count > (glyphs.len() as u32) * self.cost() {
            glyphs.iter().any(|g| self.get(g).is_some())
        } else {
            self.glyph_array()
                .iter()
                .any(|g| glyphs.contains(GlyphId::from(g.get())))
        }
    }

    /// Returns the intersection of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersect_set(&self, glyphs: &IntSet<GlyphId>) -> IntSet<GlyphId> {
        let glyph_count = self.glyph_count() as u32;
        if glyph_count > (glyphs.len() as u32) * self.cost() {
            glyphs
                .iter()
                .filter_map(|g| self.get(g).map(|_| g))
                .collect()
        } else {
            self.glyph_array()
                .iter()
                .filter(|g| glyphs.contains(GlyphId::from(g.get())))
                .map(|g| GlyphId::from(g.get()))
                .collect()
        }
    }

    /// Return the number of glyphs in this table
    pub fn population(&self) -> usize {
        self.glyph_count() as usize
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        bit_storage(self.glyph_count() as u32)
    }
}

impl CoverageFormat2<'_> {
    /// If this glyph is in the coverage table, returns its index
    #[inline]
    pub fn get(&self, gid: impl Into<GlyphId>) -> Option<u16> {
        let gid: GlyphId16 = gid.into().try_into().ok()?;
        self.range_records()
            .binary_search_by(|rec| {
                if rec.end_glyph_id() < gid {
                    Ordering::Less
                } else if rec.start_glyph_id() > gid {
                    Ordering::Greater
                } else {
                    Ordering::Equal
                }
            })
            .ok()
            .and_then(|idx| {
                let rec = &self.range_records()[idx];
                // subtract first to avoid u16 overflow (https://github.com/googlefonts/fontations/issues/1887)
                rec.start_coverage_index()
                    .checked_add(gid.to_u16() - rec.start_glyph_id().to_u16())
            })
    }

    /// Returns if this table contains at least one glyph in the 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersects(&self, glyphs: &IntSet<GlyphId>) -> bool {
        let range_count = self.range_count() as u32;
        if range_count > (glyphs.len() as u32) * self.cost() {
            glyphs.iter().any(|g| self.get(g).is_some())
        } else {
            self.range_records()
                .iter()
                .any(|record| record.intersects(glyphs))
        }
    }

    /// Returns the intersection of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersect_set(&self, glyphs: &IntSet<GlyphId>) -> IntSet<GlyphId> {
        let range_count = self.range_count() as u32;
        if range_count > (glyphs.len() as u32) * self.cost() {
            glyphs
                .iter()
                .filter_map(|g| self.get(g).map(|_| g))
                .collect()
        } else {
            let mut out = IntSet::empty();
            let mut last = GlyphId16::from(0);
            for record in self.range_records() {
                // break out of loop for overlapping/broken tables
                let start_glyph = record.start_glyph_id();
                if start_glyph < last {
                    break;
                }
                let end = record.end_glyph_id();
                last = end;

                let start = GlyphId::from(start_glyph);
                if glyphs.contains(start) {
                    out.insert(start);
                }

                for g in glyphs.iter_after(start) {
                    if g.to_u32() > end.to_u32() {
                        break;
                    }
                    out.insert(g);
                }
            }
            out
        }
    }

    /// Return the number of glyphs in this table
    pub fn population(&self) -> usize {
        self.range_records().iter().fold(0, |acc: usize, record| {
            acc.saturating_add(record.population())
        })
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        bit_storage(self.range_count() as u32)
    }
}

impl RangeRecord {
    pub fn iter(&self) -> impl Iterator<Item = GlyphId16> + '_ {
        (self.start_glyph_id().to_u16()..=self.end_glyph_id().to_u16()).map(GlyphId16::new)
    }

    /// Returns if this table contains at least one glyph in the 'glyphs' set.
    #[cfg(feature = "std")]
    pub fn intersects(&self, glyphs: &IntSet<GlyphId>) -> bool {
        glyphs.intersects_range(
            GlyphId::from(self.start_glyph_id())..=GlyphId::from(self.end_glyph_id()),
        )
    }

    /// Return the number of glyphs in this record
    pub fn population(&self) -> usize {
        let start = self.start_glyph_id().to_u32() as usize;
        let end = self.end_glyph_id().to_u32() as usize;
        if start > end {
            0
        } else {
            end - start + 1
        }
    }
}

impl CoverageFormat3<'_> {
    /// If this glyph is in the coverage table, returns its index
    pub fn get(&self, gid: impl Into<GlyphId>) -> Option<u32> {
        let gid = GlyphId24::checked_new(gid.into().to_u32())?;
        self.glyph_array()
            .binary_search(&BigEndian::from(gid))
            .ok()
            .map(|index| index as u32)
    }
}

impl CoverageFormat4<'_> {
    /// If this glyph is in the coverage table, returns its index
    pub fn get(&self, gid: impl Into<GlyphId>) -> Option<u32> {
        let gid = gid.into().to_u32();
        let records = self.range_records();
        let index = records
            .binary_search_by(|r| {
                if r.end_glyph_id().to_u32() < gid {
                    Ordering::Less
                } else if r.start_glyph_id().to_u32() > gid {
                    Ordering::Greater
                } else {
                    Ordering::Equal
                }
            })
            .ok()?;
        let record = &records[index];
        record
            .start_coverage_index()
            .to_u32()
            .checked_add(gid.checked_sub(record.start_glyph_id().to_u32())?)
            .filter(|index| *index <= Uint24::MAX.to_u32())
    }
}

impl RangeRecord2 {
    /// Iterates over the glyphs in this range.
    pub fn iter(&self) -> impl Iterator<Item = GlyphId> + '_ {
        (self.start_glyph_id().to_u32()..=self.end_glyph_id().to_u32()).map(GlyphId::new)
    }

    /// Return the number of glyphs in this record
    pub fn population(&self) -> usize {
        self.end_glyph_id()
            .to_u32()
            .checked_sub(self.start_glyph_id().to_u32())
            .map_or(0, |n| n as usize + 1)
    }
}

impl DeltaFormat {
    pub(crate) fn value_count(self, start_size: u16, end_size: u16) -> usize {
        let range_len = end_size.saturating_add(1).saturating_sub(start_size) as usize;
        let val_per_word = match self {
            DeltaFormat::Local2BitDeltas => 8,
            DeltaFormat::Local4BitDeltas => 4,
            DeltaFormat::Local8BitDeltas => 2,
            _ => return 0,
        };

        let count = range_len / val_per_word;
        let extra = (range_len % val_per_word).min(1);
        count + extra
    }
}

// we as a 'format' in codegen, and the generic error type for an invalid format
// stores the value as an i64, so we need this conversion.
impl From<DeltaFormat> for i64 {
    fn from(value: DeltaFormat) -> Self {
        value as u16 as _
    }
}

impl<'a> ClassDefFormat1<'a> {
    /// Get the class for this glyph id
    #[inline]
    pub fn get(&self, gid: impl Into<GlyphId>) -> u16 {
        let Some(idx) = gid
            .into()
            .to_u32()
            .checked_sub(self.start_glyph_id().to_u32())
        else {
            return 0;
        };
        self.class_value_array()
            .get(idx as usize)
            .map(|x| x.get())
            .unwrap_or(0)
    }

    /// Iterate over each glyph and its class.
    pub fn iter(&self) -> impl Iterator<Item = (GlyphId16, u16)> + 'a {
        let start = self.start_glyph_id();
        self.class_value_array()
            .iter()
            .enumerate()
            .map(move |(i, val)| {
                let gid = start.to_u16().saturating_add(i as u16);
                (GlyphId16::new(gid), val.get())
            })
    }

    /// Return the number of glyphs explicitly assigned to a class in this table
    pub fn population(&self) -> usize {
        self.glyph_count() as usize
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        1
    }

    /// Returns class values for the intersected glyphs of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersect_classes(&self, glyphs: &IntSet<GlyphId>) -> IntSet<u16> {
        let mut out = IntSet::empty();
        if glyphs.is_empty() {
            return out;
        }

        let start_glyph = self.start_glyph_id().to_u32();
        let class_values = self.class_value_array();
        if class_values.is_empty() {
            out.insert(0);
            return out;
        }
        let end_glyph = start_glyph + class_values.len() as u32 - 1;
        if glyphs.first().unwrap().to_u32() < start_glyph
            || glyphs.last().unwrap().to_u32() > end_glyph
        {
            out.insert(0);
        }

        if glyphs.contains(GlyphId::from(start_glyph)) {
            let Some(start_glyph_class) = class_values.first() else {
                return out;
            };
            out.insert(start_glyph_class.get());
        }

        for g in glyphs.iter_after(GlyphId::from(start_glyph)) {
            let g = g.to_u32();
            if g > end_glyph {
                break;
            }

            let idx = g - start_glyph;
            let Some(class) = class_values.get(idx as usize) else {
                break;
            };
            out.insert(class.get());
        }
        out
    }

    /// Returns intersected glyphs of this table and input 'glyphs' set that are assigned to input class value.
    #[cfg(feature = "std")]
    fn intersected_class_glyphs(&self, glyphs: &IntSet<GlyphId>, class: u16) -> IntSet<GlyphId> {
        let mut out = IntSet::empty();
        if glyphs.is_empty() {
            return out;
        }

        let start_glyph = self.start_glyph_id().to_u32();
        let glyph_count = self.glyph_count();
        // An empty ClassDef assigns class 0 to every glyph. This needs to be
        // handled up front: the `end_glyph` computation below underflows when
        // `start_glyph` is 0 and glyph_count is 0.
        if glyph_count == 0 {
            if class == 0 {
                out.extend(glyphs.iter());
            }
            return out;
        }
        let end_glyph = start_glyph + glyph_count as u32 - 1;
        if class == 0 {
            let first = glyphs.first().unwrap();
            if first.to_u32() < start_glyph {
                out.extend(glyphs.range(first..GlyphId::from(start_glyph)));
            }

            let last = glyphs.last().unwrap();
            if last.to_u32() > end_glyph {
                out.extend(glyphs.range(GlyphId::from(end_glyph + 1)..=last));
            }
            return out;
        }

        let class_values = self.class_value_array();
        for g in glyphs.range(GlyphId::from(start_glyph)..=GlyphId::from(end_glyph)) {
            let idx = g.to_u32() - start_glyph;
            let Some(c) = class_values.get(idx as usize) else {
                break;
            };
            if c.get() == class {
                out.insert(g);
            }
        }
        out
    }

    /// Checks whether any glyph in the given glyphs set intersects with this table and is assigned to the specified class value.
    #[cfg(feature = "std")]
    fn intersects_class_glyphs(&self, glyphs: &IntSet<GlyphId>, class: u16) -> bool {
        if glyphs.is_empty() {
            return false;
        }

        let start_glyph = self.start_glyph_id().to_u32();
        let glyph_count = self.glyph_count();
        // An empty ClassDef assigns class 0 to every glyph. This needs to be
        // handled up front: the `end_glyph` computation below underflows when
        // `start_glyph` is 0.
        if glyph_count == 0 {
            return class == 0;
        }
        let end_glyph = start_glyph + glyph_count as u32 - 1;
        if class == 0 {
            let first = glyphs.first().unwrap();
            if first.to_u32() < start_glyph {
                return true;
            }

            let last = glyphs.last().unwrap();
            if last.to_u32() > end_glyph {
                return true;
            }
        }

        let class_values = self.class_value_array();
        for g in glyphs.range(GlyphId::from(start_glyph)..=GlyphId::from(end_glyph)) {
            let idx = g.to_u32() - start_glyph;
            let Some(c) = class_values.get(idx as usize) else {
                return false;
            };
            if c.get() == class {
                return true;
            }
        }
        false
    }
}

impl<'a> ClassDefFormat2<'a> {
    /// Get the class for this glyph id
    #[inline]
    pub fn get(&self, gid: impl Into<GlyphId>) -> u16 {
        let gid = gid.into().to_u32();
        let records = self.class_range_records();
        let ix = match records.binary_search_by(|rec| rec.start_glyph_id().to_u32().cmp(&gid)) {
            Ok(ix) => ix,
            Err(ix) => ix.saturating_sub(1),
        };
        if let Some(record) = records.get(ix) {
            if (record.start_glyph_id().to_u32()..=record.end_glyph_id().to_u32()).contains(&gid) {
                return record.class();
            }
        }
        0
    }

    /// Iterate over each glyph and its class.
    pub fn iter(&self) -> impl Iterator<Item = (GlyphId16, u16)> + 'a {
        self.class_range_records().iter().flat_map(|range| {
            let start = range.start_glyph_id().to_u16();
            let end = range.end_glyph_id().to_u16();
            (start..=end).map(|gid| (GlyphId16::new(gid), range.class()))
        })
    }

    /// Return the number of glyphs explicitly assigned to a class in this table
    pub fn population(&self) -> usize {
        self.class_range_records()
            .iter()
            .fold(0, |acc: usize, record| {
                acc.saturating_add(record.population())
            })
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        bit_storage(self.class_range_count() as u32)
    }

    /// Returns class values for the intersected glyphs of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    fn intersect_classes(&self, glyphs: &IntSet<GlyphId>) -> IntSet<u16> {
        let mut out = IntSet::empty();
        if glyphs.is_empty() {
            return out;
        }

        let range_records = self.class_range_records();
        let Some(first_record) = range_records.first() else {
            out.insert(0);
            return out;
        };

        if glyphs.first().unwrap() < first_record.start_glyph_id() {
            out.insert(0);
        } else {
            let mut glyph = GlyphId::from(first_record.end_glyph_id());
            for record in range_records.iter().skip(1) {
                let Some(g) = glyphs.iter_after(glyph).next() else {
                    break;
                };

                if g < record.start_glyph_id() {
                    out.insert(0);
                    break;
                }
                glyph = GlyphId::from(record.end_glyph_id());
            }
            if glyphs.iter_after(glyph).next().is_some() {
                out.insert(0);
            }
        }

        let num_ranges = self.class_range_count();
        if num_ranges as u64 > glyphs.len() * self.cost() as u64 {
            for g in glyphs.iter() {
                let class = self.get(g);
                if class != 0 {
                    out.insert(class);
                }
            }
        } else {
            for record in range_records {
                if glyphs.intersects_range(
                    GlyphId::from(record.start_glyph_id())..=GlyphId::from(record.end_glyph_id()),
                ) {
                    out.insert(record.class());
                }
            }
        }
        out
    }

    /// Returns intersected glyphs of this table and input 'glyphs' set that are assgiend to input class value.
    #[cfg(feature = "std")]
    fn intersected_class_glyphs(&self, glyphs: &IntSet<GlyphId>, class: u16) -> IntSet<GlyphId> {
        let mut out = IntSet::empty();
        if glyphs.is_empty() {
            return out;
        }

        let first = glyphs.first().unwrap().to_u32();
        let last = glyphs.last().unwrap().to_u32();
        if class == 0 {
            let mut start = first;
            for range in self.class_range_records() {
                let range_start = range.start_glyph_id().to_u32();
                if start < range_start {
                    out.extend(glyphs.range(GlyphId::from(start)..GlyphId::from(range_start)));
                }

                let range_end = range.end_glyph_id().to_u32();
                if range_end >= last {
                    break;
                }
                start = range_end + 1;
            }

            if start <= last {
                out.extend(glyphs.range(GlyphId::from(start)..=GlyphId::from(last)));
            }
            return out;
        }

        let num_ranges = self.class_range_count();
        if num_ranges as u64 > glyphs.len() * self.cost() as u64 {
            for g in glyphs.iter() {
                let c = self.get(g);
                if c == class {
                    out.insert(g);
                }
            }
        } else {
            for range in self.class_range_records() {
                let range_start = range.start_glyph_id().to_u32();
                let range_end = range.end_glyph_id().to_u32();
                if range_start > last {
                    break;
                }
                if range.class() != class || range.end_glyph_id().to_u32() < first {
                    continue;
                }
                out.extend(glyphs.range(GlyphId::from(range_start)..=GlyphId::from(range_end)));
            }
        }
        out
    }

    /// Checks whether any glyph in the given glyphs set intersects with this table and is assigned to the specified class value.
    #[cfg(feature = "std")]
    fn intersects_class_glyphs(&self, glyphs: &IntSet<GlyphId>, class: u16) -> bool {
        if glyphs.is_empty() {
            return false;
        }

        // An empty ClassDef assigns class 0 to every glyph. This needs to be
        // handled up front: with no ranges the class 0 walk below starts from
        // `first + 1` and so misses `first` itself.
        if self.class_range_count() == 0 {
            return class == 0;
        }

        let first = glyphs.first().unwrap().to_u32();
        if class == 0 {
            let mut last_end = first;
            for (i, range) in self.class_range_records().iter().enumerate() {
                let range_start = range.start_glyph_id().to_u32();
                let range_end = range.end_glyph_id().to_u32();
                if i == 0 {
                    if first < range_start {
                        return true;
                    }
                    last_end = range_end;
                    continue;
                }

                if range_start == last_end + 1 {
                    last_end = range_end;
                    continue;
                }

                if glyphs
                    .intersects_range(GlyphId::from(last_end + 1)..=GlyphId::from(range_start - 1))
                {
                    return true;
                };
                last_end = range_end + 1;
            }
            if glyphs
                .iter_after(GlyphId::from(last_end + 1))
                .next()
                .is_some()
            {
                return true;
            }
        }

        let num_ranges = self.class_range_count();
        if num_ranges as u64 > glyphs.len() * self.cost() as u64 {
            for g in glyphs.iter() {
                let c = self.get(g);
                if c == class {
                    return true;
                }
            }
        } else {
            let last = glyphs.last().unwrap().to_u32();
            for range in self.class_range_records() {
                let range_start = range.start_glyph_id().to_u32();
                let range_end = range.end_glyph_id().to_u32();
                if range_start > last {
                    break;
                }
                if range_end < first {
                    continue;
                }
                if range.class() == class
                    && glyphs
                        .intersects_range(GlyphId::from(range_start)..=GlyphId::from(range_end))
                {
                    return true;
                }
            }
        }
        false
    }
}

impl ClassRangeRecord {
    /// Return the number of glyphs explicitly assigned to a class in this table
    pub fn population(&self) -> usize {
        let start = self.start_glyph_id().to_u32() as usize;
        let end = self.end_glyph_id().to_u32() as usize;
        if start > end {
            0
        } else {
            end - start + 1
        }
    }
}

impl ClassDefFormat3<'_> {
    /// Get the class for this glyph id
    pub fn get(&self, gid: impl Into<GlyphId>) -> u32 {
        let gid = gid.into().to_u32();
        if gid > Uint24::MAX.to_u32() {
            return 0;
        }
        gid.checked_sub(self.start_glyph_id().to_u32())
            .and_then(|index| self.class_value_array().get(index as usize))
            .map_or(0, |class| class.get().to_u32())
    }
}

impl ClassDefFormat4<'_> {
    /// Get the class for this glyph id
    pub fn get(&self, gid: impl Into<GlyphId>) -> u32 {
        let gid = gid.into().to_u32();
        let records = self.class_range_records();
        let index = records
            .binary_search_by(|r| r.start_glyph_id().to_u32().cmp(&gid))
            .unwrap_or_else(|i| i.saturating_sub(1));
        records
            .get(index)
            .filter(|r| (r.start_glyph_id().to_u32()..=r.end_glyph_id().to_u32()).contains(&gid))
            .map_or(0, |r| u32::from(r.class()))
    }
}

impl ClassRangeRecord2 {
    /// Return the number of glyphs explicitly assigned to a class in this record
    pub fn population(&self) -> usize {
        self.end_glyph_id()
            .to_u32()
            .checked_sub(self.start_glyph_id().to_u32())
            .map_or(0, |n| n as usize + 1)
    }
}

impl ClassDef<'_> {
    /// Gets the class without narrowing 24-bit class values.
    // Always inlined, for the reason given on CoverageTable::get.
    #[inline(always)]
    pub fn get(&self, gid: impl Into<GlyphId>) -> u32 {
        let gid = gid.into();
        match self {
            Self::Format1(t) => u32::from(t.get(gid)),
            Self::Format2(t) => u32::from(t.get(gid)),
            _ => self.get_wide(gid),
        }
    }

    // Out of line so that the common formats stay small enough to inline.
    #[inline(never)]
    fn get_wide(&self, gid: GlyphId) -> u32 {
        match self {
            Self::Format3(t) => t.get(gid),
            Self::Format4(t) => t.get(gid),
            _ => 0,
        }
    }

    /// Iterates over explicitly assigned glyphs and classes.
    pub fn iter(&self) -> impl Iterator<Item = (GlyphId, u32)> + '_ {
        let (one, two) = match self {
            Self::Format1(t) => (
                Some(t.iter().map(|(g, c)| (GlyphId::from(g), u32::from(c)))),
                None,
            ),
            Self::Format2(t) => (
                None,
                Some(t.iter().map(|(g, c)| (GlyphId::from(g), u32::from(c)))),
            ),
            _ => (None, None),
        };
        one.into_iter()
            .flatten()
            .chain(two.into_iter().flatten())
            .chain(self.wide_class_ranges().flat_map(|(r, c)| {
                (r.start().to_u32()..=r.end().to_u32()).map(move |g| (GlyphId::new(g), c))
            }))
    }

    /// Return the number of glyphs explicitly assigned to a class in this table
    pub fn population(&self) -> usize {
        match self {
            Self::Format1(t) => t.population(),
            Self::Format2(t) => t.population(),
            Self::Format3(t) => t.glyph_count().to_u32() as usize,
            Self::Format4(t) => t
                .class_range_records()
                .iter()
                .fold(0, |acc: usize, record| {
                    acc.saturating_add(record.population())
                }),
        }
    }

    /// Return the cost of looking up a glyph in this table
    pub fn cost(&self) -> u32 {
        match self {
            Self::Format1(t) => t.cost(),
            Self::Format2(t) => t.cost(),
            Self::Format3(_) => 1,
            Self::Format4(t) => bit_storage(t.class_range_count().to_u32()),
        }
    }

    /// Returns class values for the intersected glyphs of this table and input 'glyphs' set.
    #[cfg(feature = "std")]
    pub fn intersect_classes(&self, glyphs: &IntSet<GlyphId>) -> IntSet<u32> {
        match self {
            Self::Format1(t) => t.intersect_classes(glyphs).iter().map(u32::from).collect(),
            Self::Format2(t) => t.intersect_classes(glyphs).iter().map(u32::from).collect(),
            _ => {
                let mut classes = IntSet::empty();
                let mut assigned = IntSet::empty();
                for (range, class) in self.wide_class_ranges() {
                    if glyphs.intersects_range(range.clone()) {
                        classes.insert(class);
                    }
                    assigned.insert_range(range);
                }
                if !glyphs.is_subset(&assigned) {
                    classes.insert(0);
                }
                classes
            }
        }
    }

    /// Returns intersected glyphs of this table and input 'glyphs' set that are assigned to input class value.
    #[cfg(feature = "std")]
    pub fn intersected_class_glyphs(
        &self,
        glyphs: &IntSet<GlyphId>,
        class: u32,
    ) -> IntSet<GlyphId> {
        match self {
            Self::Format1(t) => u16::try_from(class)
                .map(|c| t.intersected_class_glyphs(glyphs, c))
                .unwrap_or_default(),
            Self::Format2(t) => u16::try_from(class)
                .map(|c| t.intersected_class_glyphs(glyphs, c))
                .unwrap_or_default(),
            _ => {
                let mut out = IntSet::empty();
                let mut assigned = IntSet::empty();
                for (range, c) in self.wide_class_ranges() {
                    if c == class {
                        out.insert_range(range.clone());
                    }
                    if class == 0 {
                        assigned.insert_range(range);
                    }
                }
                if class == 0 {
                    assigned.invert();
                    out.union(&assigned);
                }
                out.intersect(glyphs);
                out
            }
        }
    }

    /// Checks whether any glyph in the given glyphs set intersects with this table and is assigned to the specified class value.
    #[cfg(feature = "std")]
    pub fn intersects_class_glyphs(&self, glyphs: &IntSet<GlyphId>, class: u32) -> bool {
        match self {
            Self::Format1(t) => {
                u16::try_from(class).is_ok_and(|c| t.intersects_class_glyphs(glyphs, c))
            }
            Self::Format2(t) => {
                u16::try_from(class).is_ok_and(|c| t.intersects_class_glyphs(glyphs, c))
            }
            _ => !self.intersected_class_glyphs(glyphs, class).is_empty(),
        }
    }

    fn wide_class_ranges(
        &self,
    ) -> impl Iterator<Item = (core::ops::RangeInclusive<GlyphId>, u32)> + '_ {
        let (one, two) = match self {
            Self::Format3(t) => (
                Some(
                    t.class_value_array()
                        .iter()
                        .enumerate()
                        .filter_map(move |(i, c)| {
                            let g = t.start_glyph_id().to_u32().checked_add(i as u32)?;
                            (g <= Uint24::MAX.to_u32())
                                .then_some((GlyphId::new(g)..=GlyphId::new(g), c.get().to_u32()))
                        }),
                ),
                None,
            ),
            Self::Format4(t) => (
                None,
                Some(t.class_range_records().iter().filter_map(|r| {
                    (r.start_glyph_id() <= r.end_glyph_id()).then_some((
                        GlyphId::from(r.start_glyph_id())..=GlyphId::from(r.end_glyph_id()),
                        u32::from(r.class()),
                    ))
                })),
            ),
            _ => (None, None),
        };
        one.into_iter().flatten().chain(two.into_iter().flatten())
    }
}

impl<'a> Device<'a> {
    /// The adjustment this table makes at a size, in pixels.
    ///
    /// A device table gives a whole pixel correction for each size in the
    /// range it covers. Sizes outside that range, and a `ppem` of zero, are
    /// adjusted by nothing.
    pub fn delta_for_ppem(&self, ppem: u16) -> i32 {
        let start = self.start_size();
        if ppem == 0 || ppem < start || ppem > self.end_size() {
            return 0;
        }
        self.iter()
            .nth((ppem - start) as usize)
            .map_or(0, |delta| delta as i32)
    }

    /// Iterate over the decoded values for this device
    pub fn iter(&self) -> impl Iterator<Item = i8> + 'a {
        let format = self.delta_format();
        let mut n = self
            .end_size()
            .checked_sub(self.start_size())
            .map(|x| x as usize + 1)
            .unwrap_or(0);
        let deltas_per_word = match format {
            DeltaFormat::Local2BitDeltas => 8,
            DeltaFormat::Local4BitDeltas => 4,
            DeltaFormat::Local8BitDeltas => 2,
            _ => 0,
        };

        self.delta_value().iter().flat_map(move |val| {
            let iter = iter_packed_values(val.get(), format, n);
            n = n.saturating_sub(deltas_per_word);
            iter
        })
    }
}

fn iter_packed_values(raw: u16, format: DeltaFormat, n: usize) -> impl Iterator<Item = i8> {
    let mut decoded = [None; 8];
    let (mask, sign_mask, bits) = match format {
        DeltaFormat::Local2BitDeltas => (0b11, 0b10, 2usize),
        DeltaFormat::Local4BitDeltas => (0b1111, 0b1000, 4),
        DeltaFormat::Local8BitDeltas => (0b1111_1111, 0b1000_0000, 8),
        _ => (0, 0, 0),
    };

    let max_per_word = 16 / bits;
    #[allow(clippy::needless_range_loop)] // enumerate() feels weird here
    for i in 0..n.min(max_per_word) {
        let shift = (16 - bits) - i * bits;
        // pull the n-bit field down to the low bits before decoding, so the
        // sign handling below always works on a low-aligned value
        let val = (raw >> shift) & mask;
        let val = if val & sign_mask != 0 {
            // sign extend the n-bit value to a full i8
            (val | !mask) as i8
        } else {
            val as i8
        };
        decoded[i] = Some(val)
    }
    decoded.into_iter().flatten()
}

impl From<VariationIndex<'_>> for DeltaSetIndex {
    fn from(src: VariationIndex) -> DeltaSetIndex {
        DeltaSetIndex {
            outer: src.delta_set_outer_index(),
            inner: src.delta_set_inner_index(),
        }
    }
}

/// Combination of a tag and a child table.
///
/// Used in script and feature lists where a data structure has an array
/// of records with each containing a tag and an offset to a table. This
/// allows us to provide convenience methods that return both values.
#[derive(Clone)]
pub struct TaggedElement<T> {
    pub tag: Tag,
    pub element: T,
}

impl<T> TaggedElement<T> {
    pub fn new(tag: Tag, element: T) -> Self {
        Self { tag, element }
    }
}

impl<T> std::ops::Deref for TaggedElement<T> {
    type Target = T;

    fn deref(&self) -> &Self::Target {
        &self.element
    }
}

#[cfg(test)]
mod tests {
    use super::*;
    use crate::FontRef;
    use types::Fixed;

    #[test]
    fn coverage_24bit_glyphs_and_indices() {
        // Format 3: three 24-bit glyph IDs, including both width boundaries.
        let bytes = [0, 3, 0, 0, 3, 0, 0xFF, 0xFF, 1, 0, 0, 0xFF, 0xFF, 0xFF];
        let coverage = CoverageTable::read(FontData::new(&bytes)).unwrap();
        assert_eq!(
            coverage.iter().map(GlyphId::to_u32).collect::<Vec<_>>(),
            [65535, 65536, 0xFFFFFF]
        );
        assert_eq!(coverage.get(GlyphId::new(65536)), Some(1));
        assert_eq!(coverage.get(GlyphId::new(0x1000000)), None);

        // Format 4: a range with a coverage index above 65535.
        let bytes = [0, 4, 0, 0, 1, 1, 0, 0, 1, 0, 2, 1, 0, 0];
        let coverage = CoverageTable::read(FontData::new(&bytes)).unwrap();
        assert_eq!(coverage.get(GlyphId::new(65538)), Some(65538));
        assert_eq!(coverage.get(GlyphId::new(65539)), None);
        assert_eq!(coverage.population(), 3);
    }

    #[test]
    fn class_widths_follow_the_format() {
        // Format 3 uses 24-bit class values, not just 24-bit glyph IDs.
        let bytes = [0, 3, 1, 0, 0, 0, 0, 2, 1, 0, 0, 0xFF, 0xFF, 0xFF];
        let class = ClassDef::read(FontData::new(&bytes)).unwrap();
        assert_eq!(class.get(GlyphId::new(65536)), 65536);
        assert_eq!(class.get(GlyphId::new(65537)), 0xFFFFFF);
        assert_eq!(class.get(GlyphId::new(65538)), 0);

        // Format 4's range records still store a 16-bit class value.
        let bytes = [0, 4, 0, 0, 1, 1, 0, 0, 1, 0, 2, 0xFF, 0xFF];
        let class = ClassDef::read(FontData::new(&bytes)).unwrap();
        assert_eq!(class.get(GlyphId::new(65538)), 65535);
        assert_eq!(class.get(GlyphId::new(65539)), 0);
        assert_eq!(class.iter().count(), 3);
    }

    #[test]
    fn truncated_wide_arrays_do_not_match() {
        for bytes in [&[0, 3, 0, 0, 1][..], &[0, 4, 0, 0, 1][..]] {
            let coverage = CoverageTable::read(FontData::new(bytes)).unwrap();
            assert_eq!(coverage.get(GlyphId::new(0)), None);
        }
        for bytes in [&[0, 3, 1, 0, 0, 0, 0, 1][..], &[0, 4, 0, 0, 1][..]] {
            let class = ClassDef::read(FontData::new(bytes)).unwrap();
            assert_eq!(class.get(GlyphId::new(65536)), 0);
        }
    }

    #[cfg(feature = "std")]
    #[test]
    fn wide_class_zero_includes_unassigned_glyphs() {
        let bytes = [0, 4, 0, 0, 1, 1, 0, 0, 1, 0, 2, 0, 1];
        let class = ClassDef::read(FontData::new(&bytes)).unwrap();
        let glyphs: IntSet<GlyphId> = [65535, 65536, 65538, 65539]
            .map(GlyphId::new)
            .into_iter()
            .collect();
        assert_eq!(
            class.intersect_classes(&glyphs).iter().collect::<Vec<_>>(),
            [0, 1]
        );
        assert_eq!(
            class
                .intersected_class_glyphs(&glyphs, 0)
                .iter()
                .map(GlyphId::to_u32)
                .collect::<Vec<_>>(),
            [65535, 65539]
        );
    }

    #[test]
    fn coverage_get_format1() {
        // manually generated, corresponding to the glyphs (1, 7, 13, 27, 44);
        const COV1_DATA: FontData = FontData::new(&[0, 1, 0, 5, 0, 1, 0, 7, 0, 13, 0, 27, 0, 44]);

        let coverage = CoverageFormat1::read(COV1_DATA).unwrap();
        assert_eq!(coverage.get(GlyphId::new(1)), Some(0));
        assert_eq!(coverage.get(GlyphId::new(2)), None);
        assert_eq!(coverage.get(GlyphId::new(7)), Some(1));
        assert_eq!(coverage.get(GlyphId::new(27)), Some(3));
        assert_eq!(coverage.get(GlyphId::new(45)), None);
    }

    #[test]
    fn coverage_get_format2() {
        // manually generated, corresponding to glyphs (5..10) and (30..40).
        const COV2_DATA: FontData =
            FontData::new(&[0, 2, 0, 2, 0, 5, 0, 9, 0, 0, 0, 30, 0, 39, 0, 5]);
        let coverage = CoverageFormat2::read(COV2_DATA).unwrap();
        assert_eq!(coverage.get(GlyphId::new(2)), None);
        assert_eq!(coverage.get(GlyphId::new(7)), Some(2));
        assert_eq!(coverage.get(GlyphId::new(9)), Some(4));
        assert_eq!(coverage.get(GlyphId::new(10)), None);
        assert_eq!(coverage.get(GlyphId::new(32)), Some(7));
        assert_eq!(coverage.get(GlyphId::new(39)), Some(14));
        assert_eq!(coverage.get(GlyphId::new(40)), None);
    }

    // <https://github.com/googlefonts/fontations/issues/1887>
    #[test]
    fn coverage_get_format2_no_u16_overflow() {
        // A single range covering glyphs 40000..=40010 with a high
        // start_coverage_index, as occurs in large CJK fonts, and which
        // was causing an overflow.
        const COV2_DATA: FontData =
            FontData::new(&[0, 2, 0, 1, 0x9c, 0x40, 0x9c, 0x4a, 0x9c, 0x40]);
        let coverage = CoverageFormat2::read(COV2_DATA).unwrap();
        assert_eq!(coverage.get(GlyphId::new(40000)), Some(40000));
        assert_eq!(coverage.get(GlyphId::new(40005)), Some(40005));
        assert_eq!(coverage.get(GlyphId::new(40010)), Some(40010));
        assert_eq!(coverage.get(GlyphId::new(40011)), None);
    }

    #[test]
    fn coverage_get_format2_rejects_overflowing_coverage_index() {
        // The start_coverage_index plus offset to glyph 2 would overflow u16.
        const COV2_DATA: FontData = FontData::new(&[0, 2, 0, 1, 0, 1, 0, 2, 0xff, 0xff]);
        let coverage = CoverageFormat2::read(COV2_DATA).unwrap();
        assert_eq!(coverage.get(GlyphId::new(1)), Some(u16::MAX));
        assert_eq!(coverage.get(GlyphId::new(2)), None);
    }

    #[test]
    fn classdef_get_format2() {
        let classdef = ClassDef::read(FontData::new(
            font_test_data::gdef::MARKATTACHCLASSDEF_TABLE,
        ))
        .unwrap();
        assert!(matches!(classdef, ClassDef::Format2(..)));
        let gid_class_pairs = [
            (616, 1),
            (617, 1),
            (618, 1),
            (624, 1),
            (625, 1),
            (626, 1),
            (652, 2),
            (653, 2),
            (654, 2),
            (655, 2),
            (661, 2),
        ];
        for (gid, class) in gid_class_pairs {
            assert_eq!(classdef.get(GlyphId16::new(gid)), class);
        }
        for (gid, class) in classdef.iter() {
            assert_eq!(classdef.get(gid), class);
        }
    }

    #[test]
    fn classdef_format1_short_read_no_panic() {
        // glyph_count is 5, but only one class value is present.
        let classdef = ClassDefFormat1::read(FontData::new(&[0, 1, 0, 10, 0, 5, 0, 1])).unwrap();
        let glyphs: IntSet<GlyphId> = [GlyphId::new(10), GlyphId::new(11), GlyphId::new(14)]
            .into_iter()
            .collect();

        assert_eq!(classdef.get(GlyphId::new(10)), 0);
        assert_eq!(classdef.get(GlyphId::new(11)), 0);
        assert!(!classdef.intersects_class_glyphs(&glyphs, 2));

        let class_ones = classdef.intersected_class_glyphs(&glyphs, 1);
        assert!(class_ones.is_empty());
    }

    // An empty ClassDef assigns class 0 to every glyph.
    #[test]
    fn classdef_format1_empty() {
        // start_glyph_id = 0, glyph_count = 0. The zero start glyph is what
        // made `start_glyph + glyph_count - 1` underflow.
        let classdef = ClassDefFormat1::read(FontData::new(&[0, 1, 0, 0, 0, 0])).unwrap();
        let glyphs: IntSet<GlyphId> = [GlyphId::new(48), GlyphId::new(49), GlyphId::new(50)]
            .into_iter()
            .collect();

        assert!(classdef.intersects_class_glyphs(&glyphs, 0));
        assert!(!classdef.intersects_class_glyphs(&glyphs, 1));

        assert!(classdef
            .intersected_class_glyphs(&glyphs, 0)
            .iter()
            .eq(glyphs.iter()));
        assert!(classdef.intersected_class_glyphs(&glyphs, 1).is_empty());

        assert_eq!(
            classdef
                .intersect_classes(&glyphs)
                .iter()
                .collect::<Vec<_>>(),
            vec![0]
        );

        // a single glyph must still be reported as class 0
        let one: IntSet<GlyphId> = [GlyphId::new(48)].into_iter().collect();
        assert!(classdef.intersects_class_glyphs(&one, 0));

        // and nothing intersects an empty glyph set
        let none = IntSet::<GlyphId>::empty();
        assert!(!classdef.intersects_class_glyphs(&none, 0));
        assert!(classdef.intersected_class_glyphs(&none, 0).is_empty());
    }

    // Same as above but with a non-zero start_glyph_id, which did not overflow
    // but must give the same answers.
    #[test]
    fn classdef_format1_empty_nonzero_start_glyph() {
        let classdef = ClassDefFormat1::read(FontData::new(&[0, 1, 0, 60, 0, 0])).unwrap();

        // glyphs before, after, and straddling the start glyph
        for gids in [vec![48u16, 49], vec![70, 71], vec![48, 70]] {
            let glyphs: IntSet<GlyphId> = gids.iter().map(|g| GlyphId::new(*g as u32)).collect();
            assert!(classdef.intersects_class_glyphs(&glyphs, 0), "{gids:?}");
            assert!(!classdef.intersects_class_glyphs(&glyphs, 1), "{gids:?}");
            assert_eq!(
                classdef
                    .intersected_class_glyphs(&glyphs, 0)
                    .iter()
                    .collect::<Vec<_>>(),
                glyphs.iter().collect::<Vec<_>>(),
                "{gids:?}"
            );
        }
    }

    #[test]
    fn classdef_format2_empty() {
        // class_range_count = 0
        let classdef = ClassDefFormat2::read(FontData::new(&[0, 2, 0, 0])).unwrap();
        let glyphs: IntSet<GlyphId> = [GlyphId::new(48), GlyphId::new(49), GlyphId::new(50)]
            .into_iter()
            .collect();

        assert!(classdef.intersects_class_glyphs(&glyphs, 0));
        assert!(!classdef.intersects_class_glyphs(&glyphs, 1));

        // regression: the class 0 walk used to start at `first + 1`, so a
        // single glyph was missed and this returned false.
        let one: IntSet<GlyphId> = [GlyphId::new(48)].into_iter().collect();
        assert!(classdef.intersects_class_glyphs(&one, 0));

        assert_eq!(
            classdef
                .intersected_class_glyphs(&glyphs, 0)
                .iter()
                .collect::<Vec<_>>(),
            glyphs.iter().collect::<Vec<_>>()
        );
        assert!(classdef.intersected_class_glyphs(&glyphs, 1).is_empty());

        assert_eq!(
            classdef
                .intersect_classes(&glyphs)
                .iter()
                .collect::<Vec<_>>(),
            vec![0]
        );
    }

    // Both spellings of an empty ClassDef must behave identically.
    #[test]
    fn classdef_empty_formats_agree() {
        let f1 = ClassDef::read(FontData::new(&[0, 1, 0, 0, 0, 0])).unwrap();
        let f2 = ClassDef::read(FontData::new(&[0, 2, 0, 0])).unwrap();
        assert!(matches!(f1, ClassDef::Format1(..)));
        assert!(matches!(f2, ClassDef::Format2(..)));

        for gids in [vec![0u32], vec![48], vec![48, 49, 50]] {
            let glyphs: IntSet<GlyphId> = gids.iter().copied().map(GlyphId::new).collect();
            for class in [0u32, 1] {
                assert_eq!(
                    f1.intersects_class_glyphs(&glyphs, class),
                    f2.intersects_class_glyphs(&glyphs, class),
                    "{gids:?} class {class}"
                );
                assert_eq!(
                    f1.intersected_class_glyphs(&glyphs, class)
                        .iter()
                        .collect::<Vec<_>>(),
                    f2.intersected_class_glyphs(&glyphs, class)
                        .iter()
                        .collect::<Vec<_>>(),
                    "{gids:?} class {class}"
                );
            }
            assert_eq!(
                f1.intersect_classes(&glyphs).iter().collect::<Vec<_>>(),
                f2.intersect_classes(&glyphs).iter().collect::<Vec<_>>(),
                "{gids:?}"
            );
        }
    }

    #[test]
    fn delta_decode() {
        // these examples come from the spec
        assert_eq!(
            iter_packed_values(0x123f, DeltaFormat::Local4BitDeltas, 4).collect::<Vec<_>>(),
            &[1, 2, 3, -1]
        );

        assert_eq!(
            iter_packed_values(0x5540, DeltaFormat::Local2BitDeltas, 5).collect::<Vec<_>>(),
            &[1, 1, 1, 1, 1]
        );
    }

    #[test]
    fn delta_decode_negative_not_in_last_slot() {
        // A negative delta must decode correctly regardless of its position
        // within the word, not only in the least significant slot.
        // 8-bit: bytes 0xf4, 0x01 -> -12, 1
        assert_eq!(
            iter_packed_values(0xf401, DeltaFormat::Local8BitDeltas, 2).collect::<Vec<_>>(),
            &[-12, 1]
        );
        // 4-bit: nibbles 0x8, 0x1, 0x2, 0x3 -> -8, 1, 2, 3
        assert_eq!(
            iter_packed_values(0x8123, DeltaFormat::Local4BitDeltas, 4).collect::<Vec<_>>(),
            &[-8, 1, 2, 3]
        );
        // 2-bit: 10 01 01 01 -> -2, 1, 1, 1
        assert_eq!(
            iter_packed_values(0x9540, DeltaFormat::Local2BitDeltas, 4).collect::<Vec<_>>(),
            &[-2, 1, 1, 1]
        );
        // the smallest 8-bit value in a leading slot must not overflow
        assert_eq!(
            iter_packed_values(0x8000, DeltaFormat::Local8BitDeltas, 2).collect::<Vec<_>>(),
            &[-128, 0]
        );
    }

    #[test]
    fn delta_decode_all() {
        // manually generated with write-fonts
        let bytes: &[u8] = &[0, 7, 0, 13, 0, 3, 1, 244, 30, 245, 101, 8, 42, 0];
        let device = Device::read(bytes.into()).unwrap();
        assert_eq!(
            device.iter().collect::<Vec<_>>(),
            &[1i8, -12, 30, -11, 101, 8, 42]
        );
    }

    #[test]
    fn device_decode_does_not_overflow() {
        // manually generated with write-fonts
        let bytes: &[u8] = &[0, 0xA, 0, 1, 0, 1];
        // Don't panic with overflow
        Device::read(bytes.into()).unwrap().iter().count();
    }

    #[test]
    fn bit_storage_tests() {
        assert_eq!(bit_storage(0), 0);
        assert_eq!(bit_storage(1), 1);
        assert_eq!(bit_storage(2), 2);
        assert_eq!(bit_storage(4), 3);
        assert_eq!(bit_storage(9), 4);
        assert_eq!(bit_storage(0x123), 9);
        assert_eq!(bit_storage(0x1234), 13);
        assert_eq!(bit_storage(0xffff), 16);
        assert_eq!(bit_storage(0xffff_ffff), 32);
    }

    #[test]
    fn default_coverage() {
        let coverage = CoverageTable::default();
        assert_eq!(coverage.iter().count(), 0)
    }

    /// Normalized coordinates for the font at one value on one axis.
    fn coords_at(font: &FontRef, tag: Tag, value: f32) -> Vec<F2Dot14> {
        let fvar = font.fvar().unwrap();
        let mut coords = vec![F2Dot14::ZERO; fvar.axis_count() as usize];
        fvar.user_to_normalized(
            font.avar().ok().as_ref(),
            [(tag, Fixed::from_f64(value as f64))],
            &mut coords,
        );
        coords
    }

    #[test]
    fn index_for_coords_honors_the_condition_set() {
        let font = FontRef::new(font_test_data::MATERIAL_SYMBOLS_SUBSET).unwrap();
        let feature_vars = font.gsub().unwrap().feature_variations().unwrap().unwrap();
        let fill = Tag::new(b"FILL");
        assert_eq!(
            feature_vars.index_for_coords(&coords_at(&font, fill, 1.0)),
            Some(0)
        );
        assert_eq!(
            feature_vars.index_for_coords(&coords_at(&font, fill, 0.5)),
            None
        );
        // A short slice reads as the default location: an axis it omits
        // takes its default value.
        assert_eq!(feature_vars.index_for_coords(&[]), None);
    }

    #[test]
    fn selected_feature_variations() {
        let font = FontRef::new(font_test_data::MATERIAL_SYMBOLS_SUBSET).unwrap();
        let cases = [
            // (FILL value, [GSUB feature variation index, GPOS feature variation index])
            (0.0, [None, None]),
            (0.5, [None, None]),
            (0.98, [None, None]),
            (0.99, [Some(0), None]),
            (1.0, [Some(0), None]),
        ];
        for (fill, expected) in cases {
            let coords = coords_at(&font, Tag::new(b"FILL"), fill);
            let selected = SelectedFeatureVariations::new(&font, &coords);
            assert_eq!([selected.gsub, selected.gpos], expected, "fill={fill}");
        }
    }

    #[test]
    fn a_font_without_the_layout_tables_selects_nothing() {
        let font = FontRef::new(font_test_data::NAMES_ONLY).unwrap();
        assert_eq!(
            SelectedFeatureVariations::new(&font, &[]),
            SelectedFeatureVariations::default()
        );
    }

    #[test]
    fn default_classdef() {
        let classdef = ClassDef::default();
        assert_eq!(classdef.population(), 0);
        assert_eq!(classdef.iter().count(), 0);
    }
}