summaryrefslogtreecommitdiff
path: root/lib/intprops.h
diff options
context:
space:
mode:
authorPaul Eggert <eggert@Penguin.CS.UCLA.EDU>2017-04-15 14:27:11 -0700
committerPaul Eggert <eggert@cs.ucla.edu>2017-04-15 14:30:43 -0700
commit5ea3e3a16120bbac604fa9fcfdaa94126c9ead53 (patch)
treee0cf404f15496c4e1376556f8762b1cf08b06cb4 /lib/intprops.h
parentf05e6ea8927664df6fa55d2f11a60f1b5ca4e399 (diff)
downloadgnulib-5ea3e3a16120bbac604fa9fcfdaa94126c9ead53.tar.gz
intprops: improve comments
* lib/intprops.h: Improve and shorten commentary. For the record, if we ever run into a pedantic compiler that behaves differently from GCC when converting an out-of-range value to a signed integer, we can work around the problem with something like the following code, where UCT is the signed counterpart of T (UCT is sometimes narrower than UT) and all callers are changed accordingly: ((t) ((ut) (a) op (ut) (b))) (TYPE_MINIMUM (t) <= (uct) ((ut) (a) op (ut) (b)) \ ? ((t) (uct) (((ut) (a) op (ut) (b)) - TYPE_MINIMUM (t)) \ + TYPE_MINIMUM (t)) \ : (t) (uct) ((ut) (a) op (ut) (b)))
Diffstat (limited to 'lib/intprops.h')
-rw-r--r--lib/intprops.h33
1 files changed, 13 insertions, 20 deletions
diff --git a/lib/intprops.h b/lib/intprops.h
index e2ed277f97..c31a455e4a 100644
--- a/lib/intprops.h
+++ b/lib/intprops.h
@@ -444,29 +444,22 @@ verify (TYPE_WIDTH (unsigned int) == UINT_WIDTH);
? (*(r) = _GL_INT_OP_WRAPV_VIA_UNSIGNED (a, b, op, ut, t), 1) \
: (*(r) = _GL_INT_OP_WRAPV_VIA_UNSIGNED (a, b, op, ut, t), 0))
-/* Return A <op> B, where the operation is given by OP. Return the
- low-order bits of the mathematically-correct answer. Use the
- unsigned type UT for calculation to avoid undefined behavior on
- signed integer overflow. Assume that conversion to the result type
- T yields the low-order bits in the usual way. UT is at least as
- wide as T and is no narrower than unsigned int, T is two's
- complement, and there is no padding or trap representations.
+/* Return the low-order bits of A <op> B, where the operation is given
+ by OP. Use the unsigned type UT for calculation to avoid undefined
+ behavior on signed integer overflow, and convert the result to type T.
+ UT is at least as wide as T and is no narrower than unsigned int,
+ T is two's complement, and there is no padding or trap representations.
+ Assume that converting UT to T yields the low-order bits, as is
+ done in all known two's-complement C compilers. E.g., see:
+ https://gcc.gnu.org/onlinedocs/gcc/Integers-implementation.html
According to the C standard, converting UT to T yields an
- implementation-defined result or signal for values outside T's range.
- So, the standard way to convert UT to T is to subtract TMIN from
- greater-than-TMAX values before converting them to T, and to add
- TMIN afterwards, where TMIN and TMAX are T's extrema.
- However, in practice there is no need to subtract and add TMIN.
- E.g., GCC converts to signed integers in the usual way; see:
- https://gcc.gnu.org/onlinedocs/gcc/Integers-implementation.html
- All other known C compilers are similar to GCC in this respect.
- Furthermore, Oracle Studio 12.3 x86 has a bug when implementing the
- standard way; see:
+ implementation-defined result or signal for values outside T's
+ range. However, code that works around this theoretical problem
+ runs afoul of a compiler bug in Oracle Studio 12.3 x86. See:
http://lists.gnu.org/archive/html/bug-gnulib/2017-04/msg00049.html
-
- So, implement this operation in the usual way rather than in
- the standard way. */
+ As the compiler bug is real, don't try to work around the
+ theoretical problem. */
#define _GL_INT_OP_WRAPV_VIA_UNSIGNED(a, b, op, ut, t) \
((t) ((ut) (a) op (ut) (b)))