Sujet : Re: Two questions on arrays with size defined by variables
De : ifonly (at) *nospam* youknew.org (Opus)
Groupes : comp.lang.cDate : 10. Feb 2025, 23:08:35
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <vodtd3$1d8fj$1@dont-email.me>
References : 1 2 3 4 5 6 7 8 9 10
User-Agent : Mozilla Thunderbird
On 10/02/2025 11:38, Michael S wrote:
On Mon, 10 Feb 2025 02:44:26 +0100
Opus <ifonly@youknew.org> wrote:
On 09/02/2025 19:19, Michael S wrote:
On Sun, 9 Feb 2025 18:46:44 +0100
Janis Papanagnou <janis_papanagnou+ng@hotmail.com> wrote:
wrong! - assignment to 'a[99]' produced also no compiler
complaints,
>
gcc produces warning in this case, but only at optimization level
of 2 or higher.
>
Which version of gcc?
14.1
My test code is:
void bar(char*[]);
int foo(void)
{
int n = 10;
char *a[n];
bar(a);
a[99] = "42";
return a[3][2];
}
Tried with gcc 14.2 (x86-64) with -Wall -O3 (or -O2, same), it
doesn't give any warning whatsoever. (And yes, same with clang.)
>
May be, in your test arr[] is not used later, so compiler silently
optimizes away all accesses?
You're right. I was actually using arr[] to avoid this pitfall, but the way I used it was not 'reading' arr[99], and so the compiler did what you say.
Note that with your example, if you comment out the bar() call, you won't get the warning (but you'll get another one about a[3][2] being used uninitialized). And as you did, declaring an external function bar() guarantees that the compiler can't guess what it does, so that prevents any further optimization on the array access.
The underlying "issue" is that gcc analyzes code after the optimization pass (or it does remove warnings that it detected before optimization on 'dead code'). This may be defended. There are quite a few tickets on their bugzilla about this though, because it tends to surprise many people, and while the example above is relatively simple, there are tons of potential cases where it's way less trivial to understand.
I would personally favor giving a warning even if the code is optimized away during optimization, and actually mentioning that the statement has no effect (after optimization). I'm not sure the GCC team either cares, or that it's even doable considering the architecture of the compiler. Just a thought.
As I said, don't hesitate to use a third-party static analyzer to complement compiler warnings.