git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH 2/2] remove NORETURN from function pointers

From
Erik Faye-Lund <kusmabite@googlemail.com>
Date
Sep 14, 2009, 11:40 UTC
Message-ID
<40aa078e0909140440x2e189957uf66f36ff29bef302@mail.gmail.com>
In-Reply-To
<20090914105750.GB9216@sigill.intra.peff.net>
On Mon, Sep 14, 2009 at 12:57 PM, Jeff King <peff@peff.net> wrote:
>
> I didn't see a patch 1/2, so maybe it impacts this in some way, but by
> itself, I don't think this patch is a good idea. See below.

That's odd. It's listed in my git-folder on GMail as sent to the mailing-list, but I can't find it in any of the list-archives. They were both sent through the same instance of "git send-email". I guess I'll just re-send it. It shouldn't affect this patch directly, though.

The patch basically moved the NORETURN before the function-name, as this is a placement where more compilers supports declaration-specifications.

Show 12 quoted lines
>> ---
>>
>> __attribute__((noreturn)) is, according to the GCC documentation, about
>> two things: code generation (performance, really) and warnings.
>>
>> On the warnings-side, we need to keep the code warning-free for
>> compilers who doesn't support noreturn anyway, so hiding potential
>> warnings through this mechanism is probably not a good idea in the
>> first place.
>
> [Your justification text would almost certainly be useful as part of the
> commit message itself, and should go there.]
OK, I'll include it in the next round.
> Unfortunately, this patch _introduces_ warnings when running with gcc,
> as it now thinks those function pointers return (which means it thinks
> die() returns). So simply removing the NORETURN is not a good idea.
Yeah, this is unacceptable. I can't believe I missed this - sorry about that!
Show 18 quoted lines
> If I understand you correctly, the problem is that there are actually
> three classes of compilers:
>
>  1. Ones which understand some NORETURN syntax for both functions and
>     function pointers, and correctly trace returns through both (e.g.,
>     gcc).
>
>  2. Ones which understand some NORETURN syntax for just functions, and
>     complain about it on function pointers. We currently turn off
>     NORETURN for these compilers (from your commit message, MSVC,
>     for example).
>
>  3. Ones which have no concept of NORETURN at all.
>
> I think the right solution to turn on NORETURN for (2) is to split it
> into two cases: NORETURN and NORETURN_PTR. Gcc platforms can define both
> identically, platforms under (2) above can define NORETURN_PTR as empty,
> and (3) will keep both off.

Yeah, this could work. I initially suggested doing this, but Junio suggested removing NORETURN all together. I didn't think that was a good idea for die() etc, thus this patch.

Show 12 quoted lines
> I do have to wonder, though. What do compilers that fall under (2) do
> with calls to function pointers from NORETURN functions? Do they assume
> they don't return, or that they do? Or do they not check that NORETURN
> functions actually don't return?
>
> I.e., what does this program do under MSVC:
>
> #include <stdlib.h>
> void (*exit_fun)(int) = exit;
> static void die(void) __attribute__((__noreturn__));
> static void die(void) { exit_fun(1); }
> int main(void) { die(); }
Well, it fails to compile ;)

If your change it around this way (which is basically what 1/2 + a separate patch that is cooking in msysgit for a litte while longer is supposed to do), it does compiles without warnings even on the highest warning level:

-static void die(void) __attribute__((__noreturn__)); +static void __declspec(noreturn) die(void);

> In gcc, it rightly complains:
>
>  foo.c: In function ‘die’:
>  foo.c:4: warning: ‘noreturn’ function does return

Yeah. So we need a portable (enough) way of showing it that it does die. How about abort()?

-static void die(void) { exit_fun(1); } +static void die(void) { exit_fun(1); abort(); }

Adding abort() makes the warning go away here, at least. And reaching this point is an error anyway, it means that one of the functions passed to set_die_routine() does not hold up it's guarantees. Your suggestion (double defines) would make this a compile-time warning instead of a run-time error, which I find much more elegant. However, it's questionable how much this means in reality - there's only two call-sites for set_die_routine() ATM. Do we expect it to grow a lot?

-- 
Erik "kusma" Faye-Lund
kusmabite@gmail.com
(+47) 986 59 656
Previous: Jeff KingNext: Erik Faye-Lund
Message 3 of 17 in “remove NORETURN from function pointers”
  1. 2/2 remove NORETURN from function pointersErik Faye-Lund, Sep 14, 2009
  2. Jeff KingSep 14, 2009
  3. Erik Faye-LundSep 14, 2009
  4. Erik Faye-LundSep 14, 2009
  5. Jeff KingSep 14, 2009
  6. Jeff KingSep 14, 2009
  7. Erik Faye-LundSep 14, 2009
  8. Jeff KingSep 14, 2009
  9. Erik Faye-LundSep 14, 2009
  10. Johannes SixtSep 14, 2009
  11. Erik Faye-LundSep 14, 2009
  12. Johannes SixtSep 14, 2009
  13. Erik Faye-LundSep 14, 2009
  14. Johannes SixtSep 14, 2009
  15. Junio C HamanoSep 22, 2009
  16. Erik Faye-LundSep 25, 2009
  17. Erik Faye-LundSep 30, 2009

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.