public inbox for gdb-patches@sourceware.org
 help / color / mirror / Atom feed
From: Andrew Burgess <aburgess@redhat.com>
To: Tom de Vries <tdevries@suse.de>, gdb-patches@sourceware.org
Cc: Simon Marchi <simon.marchi@polymtl.ca>
Subject: Re: [PATCH] [gdb/build] Fix static cast of virtual base
Date: Wed, 06 Mar 2024 17:39:56 +0000	[thread overview]
Message-ID: <87frx39s43.fsf@redhat.com> (raw)
In-Reply-To: <20240222161804.1134-1-tdevries@suse.de>

Tom de Vries <tdevries@suse.de> writes:

> With this change in bfd/development.sh:
> ...
> -development=true
> +development=false
> ...
> we run into:
> ...
> In file included from tui-data.h:28:0,
>                  from tui-command.c:24:
> gdb-checked-static-cast.h: In instantiation of \
>   ‘T gdb::checked_static_cast(V*) [with T = tui_cmd_window*; V = tui_win_info]’:
> tui-command.c:65:15:   required from here
> gdb-checked-static-cast.h:63:14: error: cannot convert from pointer to base \
>   class ‘tui_win_info’ to pointer to derived class ‘tui_cmd_window’ because \
>   the base is virtual
>    T result = static_cast<T> (v);
>               ^~~~~~~~~~~~~~~~~~

Issues like there were supposed to be spotted by the static_asserts in
gdb::checked_static_cast.  Clearly the existing asserts are not good
enough.

I'd like to propose the patch below which would have prevented this
issue sneaking in unseen.  Thoughts?

Thanks,
Andrew

---

commit 9d7cb56af0361a2276621203e0e508b6fda780f9
Author: Andrew Burgess <aburgess@redhat.com>
Date:   Wed Mar 6 17:28:48 2024 +0000

    gdb: use static_cast in gdb::checked_static_cast
    
    This commit:
    
      commit 6fe4779ac4b1874c995345e3eabd89cb1a05fbdf
      Date:   Sat Feb 24 11:00:20 2024 +0100
    
          [gdb/build] Fix static cast of virtual base
    
    addressed an issue where GDB would not compile in production mode due
    to a use of gdb::checked_static_cast.  The problem was that we were
    asking GDB to cast from a virtual base class to a sub-class, this
    works fine when using dynamic_cast, but does not work with
    static_cast.
    
    The gdb::checked_static_cast actually uses dynamic_cast under the hood
    in development mode in order to ensure that the cast is valid, while
    in a production build we use static_cast as this is more efficient.
    
    What this meant however, was that when gdb::checked_static_cast was
    used to cast from a virtual base class, the dynamic_cast of a
    non-production build worked fine, while the production build's
    static_cast caused a build failure.
    
    However, the gdb::checked_static_cast function already contains some
    static_assert calls that are intended to catch any issues with invalid
    type casting, the goal of these asserts was to prevent issues like
    this: the build only failing in production mode.  Clearly the current
    asserts are not enough.
    
    I don't think there is a std::is_virtual_base type trait check, so
    what I propose instead is that in non-production mode we also make use
    of static_cast.  This will ensure that any errors that crop up in
    production mode should also be revealed in non-production mode, and
    should catch issues like this in the future.
    
    There should be no user visible changes after this commit.
    
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=31399

diff --git a/gdbsupport/gdb-checked-static-cast.h b/gdbsupport/gdb-checked-static-cast.h
index 227010e46ea..33cab48cd9b 100644
--- a/gdbsupport/gdb-checked-static-cast.h
+++ b/gdbsupport/gdb-checked-static-cast.h
@@ -57,8 +57,14 @@ checked_static_cast (V *v)
   if (v == nullptr)
     return nullptr;
 
-  T result = dynamic_cast<T> (v);
-  gdb_assert (result != nullptr);
+  gdb_assert (dynamic_cast<T> (v) != nullptr);
+
+  /* If a base class of V is virtual then the dynamic_cast will succeed,
+     but the production mode static_cast will fail.  So having checked with
+     the dynamic_cast that we didn't get nullptr, now use static_cast to
+     catch the virtual base case.  This has the side effect of guaranteeing
+     that GDB will compile in production mode.  */
+  T result = static_cast<T> (v);
 #else
   T result = static_cast<T> (v);
 #endif


  parent reply	other threads:[~2024-03-06 17:40 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2024-02-22 16:18 Tom de Vries
2024-02-23 13:56 ` Tom Tromey
2024-03-06 17:39 ` Andrew Burgess [this message]
2024-03-06 18:27   ` Simon Marchi
2024-03-08 16:18     ` Tom Tromey
2024-03-11 10:25     ` Andrew Burgess
2024-03-11 16:22       ` Simon Marchi
2024-03-19 14:58         ` Andrew Burgess

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=87frx39s43.fsf@redhat.com \
    --to=aburgess@redhat.com \
    --cc=gdb-patches@sourceware.org \
    --cc=simon.marchi@polymtl.ca \
    --cc=tdevries@suse.de \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).