From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from us-smtp-delivery-124.mimecast.com (us-smtp-delivery-124.mimecast.com [170.10.129.124]) by sourceware.org (Postfix) with ESMTPS id DC95D3858D28 for ; Fri, 7 Oct 2022 17:01:40 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.4.1 sourceware.org DC95D3858D28 Authentication-Results: sourceware.org; dmarc=pass (p=none dis=none) header.from=redhat.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=redhat.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com; s=mimecast20190719; t=1665162100; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=StFUAlbSa/9c2WiXzUnDRcjUrqsEKp8MXInDOJJNy5k=; b=i37oZ9y5unT8evOLGf9IsYLN9mB3WPlfVEZ116AvqklsKaMlZbs4cTHACJ4cka9/noE6q9 IufxFGI2wZrCe8CJyLU1eQ5xY1OFRELV3+MJ4Gf4D4un8PfbzPPP2vE/ZcyP0NCwl8FVrJ Gqg3nOPCL7wBuWmTc1pKIEZb/PnzhJg= Received: from mail-qt1-f197.google.com (mail-qt1-f197.google.com [209.85.160.197]) by relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3, cipher=TLS_AES_128_GCM_SHA256) id us-mta-93-Csqkq3Q2PG-fTZ_q6TNE-Q-1; Fri, 07 Oct 2022 13:01:39 -0400 X-MC-Unique: Csqkq3Q2PG-fTZ_q6TNE-Q-1 Received: by mail-qt1-f197.google.com with SMTP id cg13-20020a05622a408d00b0035bb2f77e7eso3407685qtb.10 for ; Fri, 07 Oct 2022 10:01:39 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:cc:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=StFUAlbSa/9c2WiXzUnDRcjUrqsEKp8MXInDOJJNy5k=; b=PUpG6fQEaPe61JJuj1PHz+6VxIDQemzQFJnGsoDKW1qRQLHhMfS87eCFumYzNLqlt8 L9MqLWVD855+zc3ARA+NfCXIzsHn8cvxYlhcrMEHR8DsdX9vQADOfOnp3ewJz50VWn1d xjAujWX117AUQUwOydw9ARqjFLWp1e8EBvSYjZznc6RHN1HPrD7lQXuDZc/nHN+V4NsQ Q9G/qcOMafSQdgEnXQePgalIyDbdHP/WsJlSTgwBbsg5m6RFVCkt35sxUVKbgtwcsfQh dy55c5HyQYE/Z37gA4L9XpLGtfyn90Z0FnH2N+G9qA0loGc/l5ihKMTGYdI0ggzUsVmp 1AfQ== X-Gm-Message-State: ACrzQf2CK77GfPWLwZ5QJhcB0QgirmU50FdZ7MMlWXc+Aj1mWja6S1Rx e5kp3WSze6aMDIYRMHiySeAhHBq8iUU7ziAOruHFvG3ErFCxSxKWCsZlE1pJCuex1Fc1rANB4Y1 ay1j1OFdVJ9nFc91ldQ== X-Received: by 2002:a05:620a:13c9:b0:6e6:1831:c5ef with SMTP id g9-20020a05620a13c900b006e61831c5efmr4273925qkl.401.1665162098474; Fri, 07 Oct 2022 10:01:38 -0700 (PDT) X-Google-Smtp-Source: AMsMyM6tLiRIB075fUDhk0DHkUQFV36ZOveY0yMuGgkz/DfE+FExU6i9yUhTd7bUjmKajhZCqdVq3Q== X-Received: by 2002:a05:620a:13c9:b0:6e6:1831:c5ef with SMTP id g9-20020a05620a13c900b006e61831c5efmr4273883qkl.401.1665162097979; Fri, 07 Oct 2022 10:01:37 -0700 (PDT) Received: from [192.168.1.101] (130-44-159-43.s15913.c3-0.arl-cbr1.sbo-arl.ma.cable.rcncustomer.com. [130.44.159.43]) by smtp.gmail.com with ESMTPSA id o21-20020a05622a009500b00394d7000941sm1597084qtw.85.2022.10.07.10.01.36 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Fri, 07 Oct 2022 10:01:37 -0700 (PDT) Message-ID: <6db89254-e4ce-90b4-6a46-267226514e3d@redhat.com> Date: Fri, 7 Oct 2022 13:01:35 -0400 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:91.0) Gecko/20100101 Thunderbird/91.13.1 Subject: Re: [PATCH v4] c++: fixes for derived-to-base reference binding [PR107085] To: Marek Polacek Cc: GCC Patches References: <20221005212744.640285-1-polacek@redhat.com> <72137424-81e9-108b-74bc-841a9ea39d2b@redhat.com> <77265139-4274-e922-62c4-2b619fa0a4b4@redhat.com> <0ff24d4e-5b8a-ea4e-7225-13d08ddac589@redhat.com> From: Jason Merrill In-Reply-To: X-Mimecast-Spam-Score: 0 X-Mimecast-Originator: redhat.com Content-Language: en-US Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Status: No, score=-14.3 required=5.0 tests=BAYES_00,DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,GIT_PATCH_0,KAM_SHORT,NICE_REPLY_A,RCVD_IN_DNSWL_LOW,SPF_HELO_NONE,SPF_NONE,TXREP autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on server2.sourceware.org List-Id: On 10/7/22 12:10, Marek Polacek wrote: > On Thu, Oct 06, 2022 at 06:03:57PM -0400, Jason Merrill wrote: >> On 10/6/22 17:43, Marek Polacek wrote: >>> On Thu, Oct 06, 2022 at 02:00:40PM -0400, Jason Merrill wrote: >>>> On 10/6/22 13:51, Marek Polacek wrote: >>>>> On Thu, Oct 06, 2022 at 10:58:44AM -0400, Jason Merrill wrote: >>>>>> On 10/6/22 10:49, Marek Polacek wrote: >>>>>>> On Wed, Oct 05, 2022 at 08:25:29PM -0400, Jason Merrill wrote: >>>>>>>> On 10/5/22 17:27, Marek Polacek wrote: >>>>>>> --- a/gcc/cp/call.cc >>>>>>> +++ b/gcc/cp/call.cc >>>>>>> @@ -9210,6 +9210,27 @@ conv_binds_ref_to_prvalue (conversion *c) >>>>>>> return conv_is_prvalue (next_conversion (c)); >>>>>>> } >>>>>>> +/* True iff C is a conversion that binds a reference to a temporary. >>>>>>> + This is a superset of conv_binds_ref_to_prvalue: here we're also >>>>>>> + interested in xvalues. */ >>>>>>> + >>>>>>> +static bool >>>>>>> +conv_binds_ref_to_temporary (conversion *c) >>>>>>> +{ >>>>>>> + if (conv_binds_ref_to_prvalue (c)) >>>>>>> + return true; >>>>>>> + if (c->kind != ck_ref_bind) >>>>>>> + return false; >>>>>>> + c = next_conversion (c); >>>>>>> + /* This is the case for >>>>>>> + struct Base {}; >>>>>>> + struct Derived : Base {}; >>>>>>> + const Base& b(Derived{}); >>>>>>> + where we bind 'b' to the Base subobject of a temporary object of type >>>>>>> + Derived. The subobject is an xvalue; the whole object is a prvalue. */ >>>>>>> + return (c->kind == ck_base && conv_is_prvalue (next_conversion (c))); >>>>>> >>>>>> I think you also want to check for the case of c->u.expr being a >>>>>> COMPONENT_REF/ARRAY_REF around a TARGET_EXPR, as you mentioned. >>>>> >>>>> I see. So this would be achieved using e.g. >>>>> >>>>> struct B { }; >>>>> struct D : B { }; >>>>> struct C { >>>>> D d; >>>>> }; >>>>> >>>>> const B& b = C{}.d; >>>> >>>> Yes. >>>> >>>>> Except I'm not sure how to trigger this via the built-in, which takes two types. >>>>> Am I missing something obvious? >>>> >>>> Indeed, it can't be triggered by the built-in. But I see >>>> ref_conv_binds_directly is also called from warn_for_range_copy, which ought >>>> to be able to trigger it. >>> >>> Even there, I think, it's not possible to trigger it with, say (d is an >>> array of D): >>> >>> for (const B &b : C{}.d) >>> // ... >>> >>> because warn_for_range_copy gets *__for_begin as the EXPR, which means that >>> we won't get to the TARGET_EXPR. It's like >>> >>> auto&& __for_begin = C{}.d; >>> const B &b = *__for_begin; >>> >>> and the conversion warn_for_range_copy sees is D -> const B -> const B&, the >>> original .u.expr is *__for_begin. >> >> Ah, right, and so the C{} temporary gets lifetime-extended and there's no >> problem to warn about. >> >>> I could add some checking assert to conv_binds_ref_to_temporary to see if >>> we ever encounter a COMPONENT_REF/ARRAY_REF around a TARGET_EXPR... >> >> Or try to handle it properly even if we can't exercise the code yet. > > Okay, done. Thanks. >> I'm thinking again about warning for e.g. >> >> const B& b = frotz(C{}.d); >> >> where frotz passes through its reference argument, which becomes a dangling >> reference. Handling the C{}.d case seems relevant to such a warning. >> >> I wonder how many false positives there would be for warning about this for >> any function that both takes and returns a reference? > > I suppose we'd have to ask if any (or all?) of the parameters is/are > a reference, to handle std::max? I was thinking to warn if, in a context that would extend temporary lifetime, a call argument binds a reference to a temporary and the function returns a reference. >> Do you want to try that, or shall I? > > So this is like the first example in https://gcc.gnu.org/PR106393, which > is assigned to...me. Let me take a stab at the simpler example. If I > can't make any progress within, say, a week, I'll unassign so as not to > block it. > > Meanwhile, here's the updated patch: > > Bootstrapped/regtested on x86_64-pc-linux-gnu, ok for trunk? > > -- >8 -- > This PR reports that > > struct Base {}; > struct Derived : Base {}; > static_assert(__reference_constructs_from_temporary(Base const&, Derived)); > > doesn't pass, which it should: it's just like > > const Base& b(Derived{}); > > where we bind 'b' to the Base subobject of a temporary object of type > Derived. The ck_base conversion didn't have ->need_temporary_p set because > we didn't need to create a temporary object just for the base, but the whole > object is a temporary so we're still binding to a temporary. Since the > Base subobject is an xvalue, a new function is introduced. > > PR c++/107085 > > gcc/cp/ChangeLog: > > * call.cc (conv_binds_ref_to_temporary): New. > (ref_conv_binds_directly): Rename to... > (ref_conv_binds_to_temporary): ...this. Use > conv_binds_ref_to_temporary. > * cp-tree.h (ref_conv_binds_directly): Rename to... > (ref_conv_binds_to_temporary): ...this. > * method.cc (ref_xes_from_temporary): Use ref_conv_binds_to_temporary. > * parser.cc (warn_for_range_copy): Likewise. > > gcc/testsuite/ChangeLog: > > * g++.dg/ext/reference_constructs_from_temporary1.C: Adjust expected > result. > * g++.dg/ext/reference_converts_from_temporary1.C: Likewise. > * g++.dg/cpp0x/elision4.C: New test. > --- > gcc/cp/call.cc | 45 ++++++++++++++++--- > gcc/cp/cp-tree.h | 2 +- > gcc/cp/method.cc | 2 +- > gcc/cp/parser.cc | 5 ++- > gcc/testsuite/g++.dg/cpp0x/elision4.C | 15 +++++++ > .../reference_constructs_from_temporary1.C | 2 +- > .../ext/reference_converts_from_temporary1.C | 2 +- > 7 files changed, 61 insertions(+), 12 deletions(-) > create mode 100644 gcc/testsuite/g++.dg/cpp0x/elision4.C > > diff --git a/gcc/cp/call.cc b/gcc/cp/call.cc > index bd04a1d309a..833cd014b7d 100644 > --- a/gcc/cp/call.cc > +++ b/gcc/cp/call.cc > @@ -9210,15 +9210,48 @@ conv_binds_ref_to_prvalue (conversion *c) > return conv_is_prvalue (next_conversion (c)); > } > > -/* Return tristate::TS_TRUE if converting EXPR to a reference type TYPE does > - not involve creating a temporary. Return tristate::TS_FALSE if converting > - EXPR to a reference type TYPE binds the reference to a temporary. If the > - conversion is invalid or bad, return tristate::TS_UNKNOWN. DIRECT_INIT_P > +/* True iff C is a conversion that binds a reference to a temporary. > + This is a superset of conv_binds_ref_to_prvalue: here we're also > + interested in xvalues. */ > + > +static bool > +conv_binds_ref_to_temporary (conversion *c) > +{ > + if (conv_binds_ref_to_prvalue (c)) > + return true; > + if (c->kind != ck_ref_bind) > + return false; > + c = next_conversion (c); > + /* This is the case for > + struct Base {}; > + struct Derived : Base {}; > + const Base& b(Derived{}); > + where we bind 'b' to the Base subobject of a temporary object of type > + Derived. The subobject is an xvalue; the whole object is a prvalue. */ > + if (c->kind != ck_base) > + return false; > + c = next_conversion (c); > + if (c->kind == ck_identity && c->u.expr) > + { > + if (TREE_CODE (c->u.expr) == TARGET_EXPR) > + return true; > + if ((TREE_CODE (c->u.expr) == COMPONENT_REF > + || TREE_CODE (c->u.expr) == ARRAY_REF) This should be a loop. > + && TREE_CODE (TREE_OPERAND (c->u.expr, 0)) == TARGET_EXPR) > + return true; > + } > + return false; > +} > + > +/* Return tristate::TS_TRUE if converting EXPR to a reference type TYPE binds > + the reference to a temporary. Return tristate::TS_FALSE if converting > + EXPR to a reference type TYPE doesn't bind the reference to a temporary. If > + the conversion is invalid or bad, return tristate::TS_UNKNOWN. DIRECT_INIT_P > says whether the conversion should be done in direct- or copy-initialization > context. */ > > tristate > -ref_conv_binds_directly (tree type, tree expr, bool direct_init_p /*= false*/) > +ref_conv_binds_to_temporary (tree type, tree expr, bool direct_init_p/*=false*/) > { > gcc_assert (TYPE_REF_P (type)); > > @@ -9230,7 +9263,7 @@ ref_conv_binds_directly (tree type, tree expr, bool direct_init_p /*= false*/) > /*c_cast_p=*/false, flags, tf_none); > tristate ret (tristate::TS_UNKNOWN); > if (conv && !conv->bad_p) > - ret = tristate (!conv_binds_ref_to_prvalue (conv)); > + ret = tristate (conv_binds_ref_to_temporary (conv)); > > /* Free all the conversions we allocated. */ > obstack_free (&conversion_obstack, p); > diff --git a/gcc/cp/cp-tree.h b/gcc/cp/cp-tree.h > index 8bc1c2dc7fd..469eb2fdb25 100644 > --- a/gcc/cp/cp-tree.h > +++ b/gcc/cp/cp-tree.h > @@ -6534,7 +6534,7 @@ extern bool sufficient_parms_p (const_tree); > extern tree type_decays_to (tree); > extern tree extract_call_expr (tree); > extern tree build_trivial_dtor_call (tree, bool = false); > -extern tristate ref_conv_binds_directly (tree, tree, bool = false); > +extern tristate ref_conv_binds_to_temporary (tree, tree, bool = false); > extern tree build_user_type_conversion (tree, tree, int, > tsubst_flags_t); > extern tree build_new_function_call (tree, vec **, > diff --git a/gcc/cp/method.cc b/gcc/cp/method.cc > index 55af5c43c18..622e1b9802e 100644 > --- a/gcc/cp/method.cc > +++ b/gcc/cp/method.cc > @@ -2233,7 +2233,7 @@ ref_xes_from_temporary (tree to, tree from, bool direct_init_p) > tree val = build_stub_object (from); > if (!TYPE_REF_P (from) && TREE_CODE (from) != FUNCTION_TYPE) > val = CLASS_TYPE_P (from) ? force_rvalue (val, tf_none) : rvalue (val); > - return ref_conv_binds_directly (to, val, direct_init_p).is_false (); > + return ref_conv_binds_to_temporary (to, val, direct_init_p).is_true (); > } > > /* Worker for is_{,nothrow_}convertible. Attempt to perform an implicit > diff --git a/gcc/cp/parser.cc b/gcc/cp/parser.cc > index 555476e42e7..dc3d17c416c 100644 > --- a/gcc/cp/parser.cc > +++ b/gcc/cp/parser.cc > @@ -13731,7 +13731,8 @@ warn_for_range_copy (tree decl, tree expr) > > if (TYPE_REF_P (type)) > { > - if (glvalue_p (expr) && ref_conv_binds_directly (type, expr).is_false ()) > + if (glvalue_p (expr) > + && ref_conv_binds_to_temporary (type, expr).is_true ()) > { > auto_diagnostic_group d; > if (warning_at (loc, OPT_Wrange_loop_construct, > @@ -13762,7 +13763,7 @@ warn_for_range_copy (tree decl, tree expr) > /* If we can initialize a reference directly, suggest that to avoid the > copy. */ > tree rtype = cp_build_reference_type (type, /*rval*/false); > - if (ref_conv_binds_directly (rtype, expr).is_true ()) > + if (ref_conv_binds_to_temporary (rtype, expr).is_false ()) > { > auto_diagnostic_group d; > if (warning_at (loc, OPT_Wrange_loop_construct, > diff --git a/gcc/testsuite/g++.dg/cpp0x/elision4.C b/gcc/testsuite/g++.dg/cpp0x/elision4.C > new file mode 100644 > index 00000000000..3cc2e3afa5d > --- /dev/null > +++ b/gcc/testsuite/g++.dg/cpp0x/elision4.C > @@ -0,0 +1,15 @@ > +// PR c++/107085 > +// { dg-do compile { target c++11 } } > + > +struct X { > + X(); > + X(X&&); > +}; > +struct Z : X {}; > +X x1 = Z(); > +X x2 = X(Z()); > + > +struct B { }; > +struct D : B { }; > +B b1 = D(); > +B b2 = B(D()); > diff --git a/gcc/testsuite/g++.dg/ext/reference_constructs_from_temporary1.C b/gcc/testsuite/g++.dg/ext/reference_constructs_from_temporary1.C > index 76de905a35d..5354b1dc4e6 100644 > --- a/gcc/testsuite/g++.dg/ext/reference_constructs_from_temporary1.C > +++ b/gcc/testsuite/g++.dg/ext/reference_constructs_from_temporary1.C > @@ -201,7 +201,7 @@ SA(!__reference_constructs_from_temporary(const int&, H)); > SA(!__reference_constructs_from_temporary(int&&, G2)); > SA(!__reference_constructs_from_temporary(const int&, H2)); > > -SA(!__reference_constructs_from_temporary(const Base&, Der)); > +SA(__reference_constructs_from_temporary(const Base&, Der)); > > // This fails because std::is_constructible_v> is false. > SA(!__reference_constructs_from_temporary(int&&, id)); > diff --git a/gcc/testsuite/g++.dg/ext/reference_converts_from_temporary1.C b/gcc/testsuite/g++.dg/ext/reference_converts_from_temporary1.C > index 90196c38742..e6c159e9b00 100644 > --- a/gcc/testsuite/g++.dg/ext/reference_converts_from_temporary1.C > +++ b/gcc/testsuite/g++.dg/ext/reference_converts_from_temporary1.C > @@ -201,7 +201,7 @@ SA( __reference_converts_from_temporary(const int&, H)); > SA(!__reference_converts_from_temporary(int&&, G2)); > SA(!__reference_converts_from_temporary(const int&, H2)); > > -SA(!__reference_converts_from_temporary(const Base&, Der)); > +SA(__reference_converts_from_temporary(const Base&, Der)); > > // This fails because std::is_constructible_v> is false. > SA(!__reference_converts_from_temporary(int&&, id)); > > base-commit: f8ba88b6a811ca9bb4b8411d3f65c329fb480ee1