![]() |
Safe Numerics |
A simple assignment or arithmetic expression will convert all the
terms to the same type. Sometimes this can silently change values. For
example, when a signed data variable contains a negative type, assigning
to a unsigned type will be permitted by any C/C++ compiler but will be
treated as large unsigned value. Most modern compilers will emit a compile
time warning when this conversion is performed. The user may then decide
to change some data types or apply a static_cast. This is
less than satisfactory for two reasons:
It may be unwieldy to change all the types to signed or unsigned.
We may believe that our signed type will never contain a
negative value. static_cast changes the data type - not
the data value. If we ignore the any compiler warnings or use a
static_cast to suppress them, we'll fail to detect a
program error when it is committed. This is aways a risk with
casts.
This solution is simple, Just replace instances of the int
with safe<int>.
#include <exception>
#include <iostream>
#include "../include/safe_integer.hpp"
int main(int argc, const char * argv[]){
std::cout << "example 4: ";
std::cout << "implicit conversions change data values" << std::endl;
std::cout << "Not using safe numerics" << std::endl;
// problem: implicit conversions change data values
try{
int x = -1000;
// the following silently produces an incorrect result
char y = x;
std::cout << x << " != " << (int)y << std::endl;
std::cout << "error NOT detected!" << std::endl;
}
catch(std::exception){
std::cout << "error detected!" << std::endl; // never arrive here
}
// solution: replace int with safe<int> and char with safe<char>
std::cout << "Using safe numerics" << std::endl;
try{
using namespace boost::numeric;
safe<int> x = -1000;
// throws exception when conversion change data value
safe<char> y1(x);
safe<char> y2 = x;
safe<char> y3 = {x};
std::cout << "error NOT detected!" << std::endl;
}
catch(std::exception & e){
std::cout << e.what() << std::endl;
std::cout << "error detected!" << std::endl;
}
return 0;
}