diff options
author | Paul Eggert <eggert@Penguin.CS.UCLA.EDU> | 2017-04-15 14:27:11 -0700 |
---|---|---|
committer | Paul Eggert <eggert@cs.ucla.edu> | 2017-04-15 14:30:43 -0700 |
commit | 5ea3e3a16120bbac604fa9fcfdaa94126c9ead53 (patch) | |
tree | e0cf404f15496c4e1376556f8762b1cf08b06cb4 /lib/intprops.h | |
parent | f05e6ea8927664df6fa55d2f11a60f1b5ca4e399 (diff) | |
download | gnulib-5ea3e3a16120bbac604fa9fcfdaa94126c9ead53.tar.gz |
intprops: improve comments
* lib/intprops.h: Improve and shorten commentary.
For the record, if we ever run into a pedantic compiler that
behaves differently from GCC when converting an out-of-range value
to a signed integer, we can work around the problem with something
like the following code, where UCT is the signed counterpart of T
(UCT is sometimes narrower than UT) and all callers are changed
accordingly:
((t) ((ut) (a) op (ut) (b)))
(TYPE_MINIMUM (t) <= (uct) ((ut) (a) op (ut) (b)) \
? ((t) (uct) (((ut) (a) op (ut) (b)) - TYPE_MINIMUM (t)) \
+ TYPE_MINIMUM (t)) \
: (t) (uct) ((ut) (a) op (ut) (b)))
Diffstat (limited to 'lib/intprops.h')
-rw-r--r-- | lib/intprops.h | 33 |
1 files changed, 13 insertions, 20 deletions
diff --git a/lib/intprops.h b/lib/intprops.h index e2ed277f97..c31a455e4a 100644 --- a/lib/intprops.h +++ b/lib/intprops.h @@ -444,29 +444,22 @@ verify (TYPE_WIDTH (unsigned int) == UINT_WIDTH); ? (*(r) = _GL_INT_OP_WRAPV_VIA_UNSIGNED (a, b, op, ut, t), 1) \ : (*(r) = _GL_INT_OP_WRAPV_VIA_UNSIGNED (a, b, op, ut, t), 0)) -/* Return A <op> B, where the operation is given by OP. Return the - low-order bits of the mathematically-correct answer. Use the - unsigned type UT for calculation to avoid undefined behavior on - signed integer overflow. Assume that conversion to the result type - T yields the low-order bits in the usual way. UT is at least as - wide as T and is no narrower than unsigned int, T is two's - complement, and there is no padding or trap representations. +/* Return the low-order bits of A <op> B, where the operation is given + by OP. Use the unsigned type UT for calculation to avoid undefined + behavior on signed integer overflow, and convert the result to type T. + UT is at least as wide as T and is no narrower than unsigned int, + T is two's complement, and there is no padding or trap representations. + Assume that converting UT to T yields the low-order bits, as is + done in all known two's-complement C compilers. E.g., see: + https://gcc.gnu.org/onlinedocs/gcc/Integers-implementation.html According to the C standard, converting UT to T yields an - implementation-defined result or signal for values outside T's range. - So, the standard way to convert UT to T is to subtract TMIN from - greater-than-TMAX values before converting them to T, and to add - TMIN afterwards, where TMIN and TMAX are T's extrema. - However, in practice there is no need to subtract and add TMIN. - E.g., GCC converts to signed integers in the usual way; see: - https://gcc.gnu.org/onlinedocs/gcc/Integers-implementation.html - All other known C compilers are similar to GCC in this respect. - Furthermore, Oracle Studio 12.3 x86 has a bug when implementing the - standard way; see: + implementation-defined result or signal for values outside T's + range. However, code that works around this theoretical problem + runs afoul of a compiler bug in Oracle Studio 12.3 x86. See: http://lists.gnu.org/archive/html/bug-gnulib/2017-04/msg00049.html - - So, implement this operation in the usual way rather than in - the standard way. */ + As the compiler bug is real, don't try to work around the + theoretical problem. */ #define _GL_INT_OP_WRAPV_VIA_UNSIGNED(a, b, op, ut, t) \ ((t) ((ut) (a) op (ut) (b))) |