Re:Re: C as used/implemented in practice
by stephencanon on Monday July 13, 2015 @09:54PM
(#9882385)
> uint32_t gets converted to a 64-bit signed value before any arithmetic operator is applied.
Only if int is > 32 bits on your platform, which is quite rare these days.
Aren't numeric promotions only applied in mixed expressions? (However, I'm not a C language-lawyer, so I could very easily be incorrect.)
All smaller than int types are promoted to int before calculations are done. I was wrong that uint32_t is smaller than int though.
For an actual example:
uint32_t combineTwoUint16(uint16_t x, uint16_t y)
{
return x<<16 | y;
}
Well the solution is simple:
return (x+0U)<<16 | (y+0U);
The intersection of people who are willing to rewrite all their arithmetic to use such a library with people who are not willing to switch to a non-C language is rather small.
Keep the old code, instead just start using it for new one.
Most projects still written in C are those that make extensive use of C libraries. Making the application code immune doesn't actually reduce the vulnerability surface much - much of the vulnerability comes in the libraries the application calls.
Use it for new code. Libraries are written too.
Libraries are usually older than the applications that use them. New libraries can be, and often are, written in new languages.
https://news.ycombinator.com/item?id=9885478
Looks like you hit an infinite loop. Better luck next time.
No, sadly. In some cases (floating point) what happens is even implementation-dependent (though queryable with FLT_EVAL_METHOD).
What pitfalls do you mean (assuming 32-bit wide int and uint32_t is unsigned int as both are very common)?
uint32_t is promoted to a signed 64-bit value only if int is 64 bits. Even on 64-bit systems, int is typically 32 bits.
Does TBAA mean type-based alias analysis?
https://en.wikipedia.org/wiki/Alias_analysis#Type-based_alia...
(EDIT: I keep forgetting HN doesn't support markdown.)
Do you turn off the TBAA in your compiler? In my experience most systems programmers either turn it off, or don't know the rules.
[edit] I forgot int is typically 32-bits on 64-bit targets. The same argument would still apply for uint16_t and smaller though.