What is - in C code

Question

I bumped into this strange macro code in  usr include linux kernel h      Force a compilation error if condition is true  but also produce a    result  of value 0 and type size t   so the expression can be used    e g  in a structure initializer  or where-ever else comma expressions    aren t permitted       define BUILD BUG ON ZERO e   sizeof struct   int -   e        define BUILD BUG ON NULL e    void   sizeof struct   int -   e         What does  -   do

User · Answer

It s creating a size 0 bitfield if the condition is false  but a size -1  -  1  bitfield if the condition is true non-zero   In the former case  there is no error and the struct is initialized with an int member   In the latter case  there is a compile error  and no such thing as a size -1 bitfield is created  of course

User · Answer

Some people seem to be confusing these macros with assert     These macros implement a compile-time test  while assert   is a runtime test

User · Answer

Well  I am quite surprised that the alternatives to this syntax have not been mentioned   Another common  but older  mechanism is to call a function that isn t defined and rely on the optimizer to compile-out the function call if your assertion is correct   define MY COMPILETIME ASSERT test                     do                                                     extern void you did something bad void             if    test                                             you did something bad void                   while  0   While this mechanism works  as long as optimizations are enabled  it has the downside of not reporting an error until you link  at which time it fails to find the definition for the function you did something bad     That s why kernel developers starting using tricks like the negative sized bit-field widths and the negative-sized arrays  the later of which stopped breaking builds in GCC 4 4   In sympathy for the need for compile-time assertions  GCC 4 3 introduced the error function attribute that allows you to extend upon this older concept  but generate a compile-time error with a message of your choosing -- no more cryptic  quot negative sized array quot  error messages   define MAKE SURE THIS IS FIVE number                                 do                                                                    extern void this isnt five void    attribute    error                      quot I asked for five and you gave me  quot   number               if   number     5                                                     this isnt five                                              while  0   In fact  as of Linux 3 9  we now have a macro called compiletime assert which uses this feature and most of the macros in bug h have been updated accordingly   Still  this macro can t be used as an initializer   However  using by statement expressions  another GCC C-extension   you can   define ANY NUMBER BUT FIVE number                                                                                                      typeof number  n    number                                      extern void this number is five void    attribute                       error  quot I told you not to give me a five  quot                if  n    5                                                          this number is five                                         n                                                               This macro will evaluate its parameter exactly once  in case it has side-effects  and create a compile-time error that says  quot I told you not to give me a five  quot  if the expression evaluates to five or is not a compile-time constant  So why aren t we using this instead of negative-sized bit-fields  Alas  there are currently many restrictions of the use of statement expressions  including their use as constant initializers  for enum constants  bit-field width  etc   even if the statement expression is completely constant its self  i e   can be fully evaluated at compile-time and otherwise passes the   builtin constant p   test    Further  they cannot be used outside of a function body  Hopefully  GCC will amend these shortcomings soon and allow constant statement expressions to be used as constant initializers   The challenge here is the language specification defining what is a legal constant expression   C  11 added the constexpr keyword for just this type or thing  but no counterpart exists in C11   While C11 did get static assertions  which will solve part of this problem  it wont solve all of these shortcomings   So I hope that gcc can make a constexpr functionality available as an extension via -std gnuc99  amp  -std gnuc11 or some such and allow its use on statement expressions et  al

User · Answer

The   is a bitfield  As for     that is logical double negation and so returns 0 for false or 1 for true  And the - is a minus sign  i e  arithmetic negation   It s all just a trick to get the compiler to barf on invalid inputs   Consider BUILD BUG ON ZERO  When -   e  evaluates to a negative value  that produces a compile error  Otherwise -   e  evaluates to 0   and a 0 width bitfield has size of 0  And hence the macro evaluates to a size t with value 0   The name is weak in my view because the build in fact fails when the input is not zero   BUILD BUG ON NULL is very similar  but yields a pointer rather than an int

User · Answer

This is  in effect  a way to check whether the expression e can be evaluated to be 0  and if not  to fail the build   The macro is somewhat misnamed  it should be something more like BUILD BUG OR ZERO  rather than    ON ZERO   There have been occasional discussions about whether this is a confusing name    You should read the expression like this   sizeof struct   int  -   e           e   Compute expression e     e   Logically negate twice  0 if e    0  otherwise 1  -   e   Numerically negate the expression from step 2  0 if it was 0  otherwise -1  struct int  -   0    -- gt  struct int  0    If it was zero  then we declare a struct with an anonymous integer bitfield that has width zero  Everything is fine and we proceed as normal  struct int  -   1    -- gt  struct int  -1    On the other hand  if it isn t zero  then it will be some negative number  Declaring any bitfield with negative width is a compilation error    So we ll either wind up with a bitfield that has width 0 in a struct  which is fine  or a bitfield with negative width  which is a compilation error  Then we take sizeof that field  so we get a size t with the appropriate width  which will be zero in the case where e is zero      Some people have asked  Why not just use an assert   keithmo s answer here has a good response      These macros implement a compile-time test  while assert   is a run-time test    Exactly right  You don t want to detect problems in your kernel at runtime that could have been caught earlier  It s a critical piece of the operating system  To whatever extent problems can be detected at compile time  so much the better

[c] What is ":-!!" in C code?

Examples related to c

Examples related to linux

Examples related to macros

Examples related to linux-kernel