This HAS to be UB...

  • Thread starter Chris M. Thomasson
  • Start date
C

Chris M. Thomasson

Keep in mind that I am a C programmer; well, anyway here is the C++
program...
______________________________________________________________________
#include <cstdio>
#include <cstdlib>
#include <new>


struct custom_allocator {
static void* allocate(std::size_t size)
throw(std::bad_alloc()) {
void* const mem = ::eek:perator new(size);
std::printf("custom_allocator::allocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
return mem;
}

static void deallocate(void* const mem, std::size_t size)
throw() {
std::printf("custom_allocator::deallocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
::eek:perator delete(mem);
}
};


template<typename T>
struct allocator_base {
static void* operator new(std::size_t size)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}

static void* operator new[](std::size_t size)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}

static void operator delete(void* mem)
throw() {
if (mem) {
custom_allocator::deallocate(mem, sizeof(T));
}
}

static void operator delete [](void* mem, std::size_t size)
throw() {
if (mem) {
custom_allocator::deallocate(mem, size);
}
}
};


template<std::size_t T_size>
class buf {
char mem[T_size];
};


class buf2 : public buf<1234>, public allocator_base<buf2> {
char mem2[1000];
};


int main() {
buf2* b = new buf2;
delete b;

b = new buf2[5];
delete [] b;

return 0;
}
______________________________________________________________________



On GCC I get the following output:

custom_allocator::allocate(00246C50, 2234)
custom_allocator::deallocate(00246C50, 2234)
custom_allocator::allocate(00247760, 11174)
custom_allocator::deallocate(00247760, 11174)




On MSVC 8 I get:

custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)





Are they both right due to UB? WTF is going on? GCC seems to be accurate at
least... DAMN!




thank you all for your time.
 
C

Chris M. Thomasson

Chris M. Thomasson said:
Keep in mind that I am a C programmer; well, anyway here is the C++
program...
______________________________________________________________________ [...]

template<std::size_t T_size>
class buf {
char mem[T_size];
};


I add virtual dtor to buf1, and no change in output.
class buf2 : public buf<1234>, public allocator_base<buf2> {
char mem2[1000];
};





int main() {
buf2* b = new buf2;
delete b;

b = new buf2[5];
delete [] b;

return 0;
}
______________________________________________________________________
[...]
 
C

Chris M. Thomasson

Victor Bazarov said:
Chris said:
Keep in mind that I am a C programmer; well, anyway here is the C++
program...
[..]

On GCC I get the following output:

custom_allocator::allocate(00246C50, 2234)
custom_allocator::deallocate(00246C50, 2234)
custom_allocator::allocate(00247760, 11174)
custom_allocator::deallocate(00247760, 11174)




On MSVC 8 I get:

custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)

MSVC 9 gives the same output, BTW.
Are they both right due to UB? WTF is going on? GCC seems to be accurate
at least... DAMN!

Well, the default implementation of the operator delete[] does *not* have
the "size" argument. In fact there are two allowed declarations of the
operator delete[]:

void operator delete[](void* ptr) throw();

and

void operator delete[](void* ptr, const std::nothrow&) throw();

I'm not sure what else to tell you.

This has to be GCC extension? This is weird, well, perhaps not so weird
because it simply MUST be 100% UB. Oh well. I initially thought I could take
advantage of it; NOT!!!

;^/
 
C

Chris M. Thomasson

blargg said:
"Chris M. Thomasson" said:
Keep in mind that I am a C programmer; well, anyway here is the C++
program...
______________________________________________________________________
#include <cstdio>
#include <cstdlib>
#include <new>

struct custom_allocator {
static void* allocate(std::size_t size)
throw(std::bad_alloc()) { ***^^***

void* const mem = ::eek:perator new(size);
std::printf("custom_allocator::allocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
return mem;
}
[...]

How did this even compile?

I don't know! It did! Well, blame MSVC 8+ and GCC! ARGH... Well, if it
didn;t compile I would have NOT asked the contrived question indeed!

:^|
 
J

James Kanze

Keep in mind that I am a C programmer; well, anyway here is
the C++ program...

It looks to me like you're attacking some fairly tricky stuff.
You'd probably be better of starting with something simpler if
you're still learning C++. However...
______________________________________________________________________
#include <cstdio>
#include <cstdlib>
#include <new>
struct custom_allocator {
static void* allocate(std::size_t size)
throw(std::bad_alloc()) {

That should doubtlessly be:
throw( std::bad_alloc )
What you've said is that the only exception type which will
escape from your function is a pointer to a function returning
an std::bad_alloc and taking no arguments. I really don't think
you meant to say that you're going to throw pointers to
functions.

In practice, exception specifications are not really that
useful, except when they're empty. (It's very important in
certain cases to know that a function cannot throw any
exceptions, but it's rarely useful to know that it can't throw
certain types of exceptions.)
void* const mem = ::eek:perator new(size);
std::printf("custom_allocator::allocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
return mem;
}
static void deallocate(void* const mem, std::size_t size)
throw() {
std::printf("custom_allocator::deallocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
::eek:perator delete(mem);
}
};
template<typename T>
struct allocator_base {
static void* operator new(std::size_t size)

The static isn't really necessary: allocation and deallocation
member functions (operator new and operator delete) are always
static, whether you declare them so or not. (On the other hand,
it doesn't hurt.)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void* operator new[](std::size_t size)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void operator delete(void* mem)

Just curious: since you require the size in delete[], why don't
you require it here? Derivation can mean that the size isn't a
constant, e.g.:

class Base : public allocator_base< Base >
{
// ...
} ;

class Derived : public Base
{
// ...
} ;

Base* p = new Derived ;
// ...
delete p ;

(This supposes, of course, that Base has a virtual destructor.)
throw() {
if (mem) {
custom_allocator::deallocate(mem, sizeof(T));
}
}
static void operator delete [](void* mem, std::size_t size)
throw() {
if (mem) {
custom_allocator::deallocate(mem, size);
}
}
};
template<std::size_t T_size>
class buf {
char mem[T_size];
};
class buf2 : public buf<1234>, public allocator_base<buf2> {
char mem2[1000];
};
int main() {
buf2* b = new buf2;
delete b;
b = new buf2[5];
delete [] b;
return 0;
}
______________________________________________________________________

On GCC I get the following output:
custom_allocator::allocate(00246C50, 2234)
custom_allocator::deallocate(00246C50, 2234)
custom_allocator::allocate(00247760, 11174)
custom_allocator::deallocate(00247760, 11174)
On MSVC 8 I get:
custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)
Are they both right due to UB? WTF is going on? GCC seems to
be accurate at least... DAMN!

Well, there's no undefined behavior. You're program seems
perfectly legal and well defined to me. It looks like a bug in
VC++, see §12.5/5:

When a delete-expression is executed, the selected
deallocation function shall be called with the address
of the block of storage to be reclaimed as its first
argument and (if the two-parameter style is used) the
size of the block as its second argument.

And I can't think of any way of interpreting "the size of the
block" to mean anything other than the size requested in the
call to operator new.
 
H

Hendrik Schober

Victor said:

Well, the default implementation of the operator delete[] does *not*
have the "size" argument. In fact there are two allowed declarations of
the operator delete[]:

void operator delete[](void* ptr) throw();

and

void operator delete[](void* ptr, const std::nothrow&) throw();

While that's true for global 'operator delete', my reading of
3.7.3.2/2 seems to indicate that class-specific versions can
indeed have a second argument of type 'std::size_t'. ICBWT.
I'm not sure what else to tell you.

V

Schobi
 
H

Hendrik Schober

Chris said:
[...]
On MSVC 8 I get:

custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)

That code can be simplified further. Using VC9, this

#include <cstdio>
#include <cstdlib>
#include <new>

void* allocate(std::size_t size) throw(std::bad_alloc) {
void* const mem = ::eek:perator new(size);
std::printf("allocate(%p, %lu)\n", (void*)mem, (unsigned long)size);
return mem;
}

void deallocate(void* const mem, std::size_t size) throw() {
std::printf("deallocate(%p, %lu)\n", (void*)mem, (unsigned long)size);
if (mem) ::eek:perator delete(mem);
}

struct buf2 {
char mem[1024];
void* operator new(std::size_t size) throw(std::bad_alloc) {
return allocate(size);
}

void* operator new[](std::size_t size) throw(std::bad_alloc) {
return allocate(size);
}

void operator delete(void* mem, std::size_t size) throw() {
deallocate(mem, size);
}

void operator delete [](void* mem, std::size_t size) throw() {
deallocate(mem, size);
}
};

int main() {
buf2* b = new buf2;
delete b;

b = new buf2[5];
delete [] b;

return 0;
}

shows the same behavior for me.

Debugging shows that VC9 doesn't call 'operator new[]' for 'new buf2[5]'
(it calls 'operator new' instead), but calls 'operator delete[]' for
'delete[] b'.
Either I'm missing something really obvious, or that's a plain bug.

Schobi
 
C

Chris M. Thomasson

It looks to me like you're attacking some fairly tricky stuff.
You'd probably be better of starting with something simpler if
you're still learning C++. However...

I was exploring the feature in C++ delete operator in which the size of the
allocation is returned along with the pointer to allocated memory. One could
create heavily optimized custom memory allocator using that important piece
of information.



That should doubtlessly be:
throw( std::bad_alloc )
What you've said is that the only exception type which will
escape from your function is a pointer to a function returning
an std::bad_alloc and taking no arguments. I really don't think
you meant to say that you're going to throw pointers to
functions.

That was definitely a typo/error on my part.



In practice, exception specifications are not really that
useful, except when they're empty. (It's very important in
certain cases to know that a function cannot throw any
exceptions, but it's rarely useful to know that it can't throw
certain types of exceptions.)

I thought it would be prudent to give the overloaded operator new an
exception specification of `std::bad_alloc'. Also, I wanted to give an empty
specification to the overload of operator delete. As to how useful it is...
Well, I don't quite know.



The static isn't really necessary: allocation and deallocation
member functions (operator new and operator delete) are always
static, whether you declare them so or not. (On the other hand,
it doesn't hurt.)

Its a habit of mine. Also, using printf in C++ is another habit.



throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void* operator new[](std::size_t size)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void operator delete(void* mem)
Just curious: since you require the size in delete[], why don't
you require it here? Derivation can mean that the size isn't a
constant, e.g.:

class Base : public allocator_base< Base >
{
// ...
} ;

class Derived : public Base
{
// ...
} ;

Base* p = new Derived ;
// ...
delete p ;
(This supposes, of course, that Base has a virtual destructor.)



[...]
______________________________________________________________________
On GCC I get the following output:
custom_allocator::allocate(00246C50, 2234)
custom_allocator::deallocate(00246C50, 2234)
custom_allocator::allocate(00247760, 11174)
custom_allocator::deallocate(00247760, 11174)
On MSVC 8 I get:
custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)
Are they both right due to UB? WTF is going on? GCC seems to
be accurate at least... DAMN!
Well, there's no undefined behavior. You're program seems
perfectly legal and well defined to me. It looks like a bug in
VC++, see §12.5/5:

It definitely looks like a bug is MSVC++. I get erroneous behavior on
versions 6 through 9.



When a delete-expression is executed, the selected
deallocation function shall be called with the address
of the block of storage to be reclaimed as its first
argument and (if the two-parameter style is used) the
size of the block as its second argument.
And I can't think of any way of interpreting "the size of the
block" to mean anything other than the size requested in the
call to operator new.

I thought that MSVC was crapping out because `allocator_base' was a
template. So I created another little test which hopefully has all the bugs
fixed:
__________________________________________________________________________
#include <cstdio>
#include <cstdlib>
#include <new>


struct custom_allocator {
static void* allocate(std::size_t size)
throw(std::bad_alloc) {
void* const mem = std::malloc(size);
if (! mem) {
throw std::bad_alloc();
}
std::printf("custom_allocator::allocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
return mem;
}

static void deallocate(void* const mem, std::size_t size)
throw() {
if (mem) {
std::printf("custom_allocator::deallocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
std::free(mem);
}
}
};


struct allocator_base {
void* operator new(std::size_t size)
throw(std::bad_alloc) {
return custom_allocator::allocate(size);
}

void* operator new [](std::size_t size)
throw(std::bad_alloc) {
return custom_allocator::allocate(size);
}

void operator delete(void* mem, std::size_t size)
throw() {
custom_allocator::deallocate(mem, size);
}

void operator delete [](void* mem, std::size_t size)
throw() {
custom_allocator::deallocate(mem, size);
}
};




template<std::size_t T_size>
class buf : public allocator_base {
char mem[T_size];
public:
virtual ~buf() throw() {}
};


class buf2 : public buf<1234> {
char mem2[1000];
};


int main() {
buf<1024>* b1 = new buf<1024>;
delete b1;

buf2* b2 = new buf2;
delete b2;

b2 = new buf2[5];
delete [] b2;

return 0;
}

__________________________________________________________________________




On every version of GCC I have, I get the following output on a 32-bit
machine:

custom_allocator::allocate(00246C50, 1028)
custom_allocator::deallocate(00246C50, 1028)
custom_allocator::allocate(002472A8, 2240)
custom_allocator::deallocate(002472A8, 2240)
custom_allocator::allocate(002472A8, 11204)
custom_allocator::deallocate(002472A8, 11204)




On every version of MSVC, I get:

custom_allocator::allocate(00365B28, 1028)
custom_allocator::deallocate(00365B28, 1028)
custom_allocator::allocate(00362850, 2240)
custom_allocator::deallocate(00362850, 2240)
custom_allocator::allocate(00366FA8, 11204)
custom_allocator::deallocate(00366FA8, 2240)



Well, MSVC has a fairly nasty bug indeed. Anyway, what do you think James?
 
C

Chris M. Thomasson

Victor Bazarov said:
Chris said:
Keep in mind that I am a C programmer; well, anyway here is the C++
program...
[...]

Well, the default implementation of the operator delete[] does *not* have
the "size" argument. In fact there are two allowed declarations of the
operator delete[]:

void operator delete[](void* ptr) throw();

and

void operator delete[](void* ptr, const std::nothrow&) throw();

I'm not sure what else to tell you.

I think that

void operator delete [](void*, std::size_t) throw();

is a valid declaration. I mean, even Comeau compiles the following program
without any warnings:
____________________________________________________________________
#include <cstdio>
#include <cstdlib>
#include <new>


struct custom_allocator {
static void* allocate(std::size_t size)
throw(std::bad_alloc) {
void* const mem = std::malloc(size);
if (! mem) {
throw std::bad_alloc();
}
std::printf("custom_allocator::allocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
return mem;
}

static void deallocate(void* const mem, std::size_t size)
throw() {
if (mem) {
std::printf("custom_allocator::deallocate(%p, %lu)\n",
(void*)mem, (unsigned long)size);
std::free(mem);
}
}
};


struct allocator_base {
void* operator new(std::size_t size)
throw(std::bad_alloc) {
return custom_allocator::allocate(size);
}

void* operator new [](std::size_t size)
throw(std::bad_alloc) {
return custom_allocator::allocate(size);
}

void operator delete(void* mem, std::size_t size)
throw() {
custom_allocator::deallocate(mem, size);
}

void operator delete [](void* mem, std::size_t size)
throw() {
custom_allocator::deallocate(mem, size);
}
};




template<std::size_t T_size>
class buf : public allocator_base {
char mem[T_size];
public:
virtual ~buf() throw() {}
};


class buf2 : public buf<1234> {
char mem2[1000];
};


int main() {
buf<1024>* b1 = new buf<1024>;
delete b1;

buf2* b2 = new buf2;
delete b2;

b2 = new buf2[5];
delete [] b2;

return 0;
}
____________________________________________________________________



Humm... Is Comeau screwing up and compiling non-compliant code without so
much as a warning?
 
J

James Kanze

Victor said:
Well, the default implementation of the operator delete[]
does *not* have the "size" argument. In fact there are two
allowed declarations of the operator delete[]:
void operator delete[](void* ptr) throw();
and
void operator delete[](void* ptr, const std::nothrow&) throw();
While that's true for global 'operator delete', my reading of
3.7.3.2/2 seems to indicate that class-specific versions can
indeed have a second argument of type 'std::size_t'. ICBWT.

Actually, the only requirement for defining an operator delete
function is that the first argument have type void*. You can
declare and define delete functions with any other arguments you
want. What is relevant here is the fact that *IF* there is no
operator delete[]( void* ) in the class, but there is a operator
delete[]( void*, std::size_t ), the latter will be used as the
"usual" deallocator, and not only for placement delete.

And at global scope, the standard defines three operator
delete[]: (void*), (void*, std::nothrow const&) and (void*,
void*).
 
J

James Kanze

I was exploring the feature in C++ delete operator in which
the size of the allocation is returned along with the pointer
to allocated memory. One could create heavily optimized custom
memory allocator using that important piece of information.

Certainly. It could be, in certain cases. But you're using a
fairly advanced feature of C++, one that many experienced C++
programmers aren't too familiar with. *IF* you're basically a C
programmer, and not too familiar with C++, you should probably
gain that familiarity first.

[...]
I thought it would be prudent to give the overloaded operator
new an exception specification of `std::bad_alloc'. Also, I
wanted to give an empty specification to the overload of
operator delete. As to how useful it is... Well, I don't
quite know.

Given that the standard does use that exception specifier for
the global operator new, it's probably a good idea to follow
suite. But I don't think that it's really that useful, and in
general, I wouldn't bother unless the specifier were empty.
(Note that the contract of the operator new function is slightly
different if it has an empty exception specifier. Unless it has
an empty specifier, operator new() and operator new[] may not
return a null pointer; if the version chosen has an empty
specifier, they can.)
Its a habit of mine. Also, using printf in C++ is another habit.

The static doesn't hurt. Using printf is a very bad habit,
however.
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void* operator new[](std::size_t size)
throw(std::bad_alloc()) {
return custom_allocator::allocate(size);
}
static void operator delete(void* mem)
Just curious: since you require the size in delete[], why don't
you require it here? Derivation can mean that the size isn't a
constant, e.g.:
class Base : public allocator_base< Base >
{
// ...
} ;
class Derived : public Base
{
// ...
} ;
Base* p = new Derived ;
// ...
delete p ;
(This supposes, of course, that Base has a virtual destructor.)
[...]
______________________________________________________________________
On GCC I get the following output:
custom_allocator::allocate(00246C50, 2234)
custom_allocator::deallocate(00246C50, 2234)
custom_allocator::allocate(00247760, 11174)
custom_allocator::deallocate(00247760, 11174)
On MSVC 8 I get:
custom_allocator::allocate(00362850, 2234)
custom_allocator::deallocate(00362850, 2234)
custom_allocator::allocate(00366B68, 11170)
custom_allocator::deallocate(00366B68, 2234)
Are they both right due to UB? WTF is going on? GCC seems to
be accurate at least... DAMN!
Well, there's no undefined behavior. You're program seems
perfectly legal and well defined to me. It looks like a bug in
VC++, see §12.5/5:
It definitely looks like a bug is MSVC++. I get erroneous
behavior on versions 6 through 9.

It's quite possible. This is such a rarely used feature, I
doubt that it gets much testing. (In practice, I don't think
I've ever used new[]/delete[] in over 15 years of C++.)
I thought that MSVC was crapping out because `allocator_base'
was a template. So I created another little test which
hopefully has all the bugs fixed:
__________________________________________________________________________ [...[
__________________________________________________________________________

On every version of GCC I have, I get the following output on
a 32-bit machine:
custom_allocator::allocate(00246C50, 1028)
custom_allocator::deallocate(00246C50, 1028)
custom_allocator::allocate(002472A8, 2240)
custom_allocator::deallocate(002472A8, 2240)
custom_allocator::allocate(002472A8, 11204)
custom_allocator::deallocate(002472A8, 11204)
On every version of MSVC, I get:
custom_allocator::allocate(00365B28, 1028)
custom_allocator::deallocate(00365B28, 1028)
custom_allocator::allocate(00362850, 2240)
custom_allocator::deallocate(00362850, 2240)
custom_allocator::allocate(00366FA8, 11204)
custom_allocator::deallocate(00366FA8, 2240)
Well, MSVC has a fairly nasty bug indeed. Anyway, what do you
think James?

It looks like an error in the compiler, but it's certainly a
minor one, since it concerns a feature that has no real use in
practice.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Members online

Forum statistics

Threads
473,770
Messages
2,569,583
Members
45,075
Latest member
MakersCBDBloodSupport

Latest Threads

Top