git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: Git compile warnings (under mac/clang)

From
Jeff King <peff@peff.net>
Date
Jan 23, 2015, 12:23 UTC
Message-ID
<20150123122317.GA12517@peff.net>
In-Reply-To
<315bf23981813799d16fdd9b533444f3@www.dscho.org>
On Fri, Jan 23, 2015 at 12:48:29PM +0100, Johannes Schindelin wrote:
> This is what I have currently in the way of attempting to "fix" it (I
> still believe that Clang is wrong to make this a warning, and causes
> more trouble than it solves):

I agree. It is something we as the programmers cannot possibly know (the compiler is free to decide which type however it likes) and its decision does not impact the correctness of the code (the check is either useful or tautological, and we cannot know which, so we are being warned about being too careful!).

I guess you could argue that the standard defines enum-numbering to start at 0, and increment by 1. Therefore we should know that no valid enum value is less than 0. IOW, "msg_id < 0" being true must be the result of a bug somewhere else in the program, where we assigned a value outside of the enum range to the enum.

>     Pointed out by Michael Blume. Jeff King provided the pointer to a commit
>     fixing the same issue elsewhere in the Git source code.

It may be useful to reference the exact commit (3ce3ffb8) to help people digging in the history (e.g., if we decide there is a better way to shut up this warning and we need to find all the places to undo the brain-damage).

> -	for (i = 0; i < FSCK_MSG_MAX; i++) {
> +	for (i = FSCK_MSG_MIN + 1; i < FSCK_MSG_MAX; i++) {

Ugh. It is really a shame how covering up this warning requires polluting so many places. I don't think we have a better way, though, aside from telling people to use -Wno-tautological-compare (and I can believe that it _is_ a useful warning in some other circumstances, so it seems a shame to lose it).

Unless we are willing to drop the ">= 0" check completely. I think it is valid to do so regardless of the compiler's representation decision due to the numbering rules I mentioned above. It kind-of serves as a cross-check that we haven't cast some random int into the enum, but I think we would do better to find those callsites (since they are not guaranteed to work, anyway; in addition to signedness, it might choose a much smaller representation).

I do not see either side of the bounds check here:
> +	if (options->msg_severity &&
> +			msg_id > FSCK_MSG_MIN && msg_id < FSCK_MSG_MAX)

as really doing anything. Any code which triggers it must already cause undefined behavior, I think (with the exception of "msg_id == FSCK_MSG_MAX", but presumably that is something we never expect to happen, either).

-Peff
Previous: Johannes SchindelinNext: Johannes Schindelin
Message 7 of 15 in “Git compile warnings (under mac/clang)”
  1. Michael BlumeJan 22, 2015
  2. Stefan BellerJan 22, 2015
  3. Peter WuJan 22, 2015
  4. Johannes SchindelinJan 22, 2015
  5. Jeff KingJan 22, 2015
  6. Johannes SchindelinJan 23, 2015
  7. Jeff KingJan 23, 2015
  8. Johannes SchindelinJan 23, 2015
  9. Jeff KingJan 23, 2015
  10. Junio C HamanoJan 23, 2015
  11. Jeff KingJan 23, 2015
  12. Johannes SchindelinJan 23, 2015
  13. Jeff KingJan 23, 2015
  14. Johannes SchindelinJan 23, 2015
  15. Junio C HamanoJan 23, 2015

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.