Currently std::expected can have some padding bytes in its tail due to
[[no_unique_address]]. Those padding bytes can be used by other objects.
For example, in the current implementation:
sizeof(std::expected<std::optional<int>, bool>) ==
sizeof(std::expected<std::expected<std::optional<int>, bool>, bool>)
As a result, the data layout of an
std::expected<std::expected<std::optional<int>, bool>, bool>
can look like this:
+-- optional "has value" flag
| +--padding
/---int---\ | |
00 00 00 00 01 00 00 00
| |
| +- "outer" expected "has value" flag
|
+- expected "has value" flag
This is problematic because `emplace()`ing the "inner" expected can not
only overwrite the "inner" expected "has value" flag (issue #68552) but
also the tail padding where other objects might live.
This patch fixes the problem by ensuring that std::expected has no tail
padding, which is achieved by conditional usage of [[no_unique_address]]
based on the tail padding that this would create.
This is an ABI breaking change because the following property changes:
sizeof(std::expected<std::optional<int>, bool>) <
sizeof(std::expected<std::expected<std::optional<int>, bool>, bool>)
Before the change, this relation didn't hold. After the change, the relation
does hold, which means that the size of std::expected in these cases increases
after this patch. The data layout will change in the following cases where
tail padding can be reused by other objects:
class foo : std::expected<std::optional<int>, bool> {
bool b;
};
or using [[no_unique_address]]:
struct foo {
[[no_unique_address]] std::expected<std::optional<int>, bool> e;
bool b;
};
The vendor communication is handled in #70820.
Fixes: #70494
Co-authored-by: philnik777 <nikolasklauser@berlin.de>
Co-authored-by: Louis Dionne <ldionne.2@gmail.com>
132 lines
3.7 KiB
C++
132 lines
3.7 KiB
C++
//===----------------------------------------------------------------------===//
|
|
// Part of the LLVM Project, under the Apache License v2.0 with LLVM Exceptions.
|
|
// See https://llvm.org/LICENSE.txt for license information.
|
|
// SPDX-License-Identifier: Apache-2.0 WITH LLVM-exception
|
|
//
|
|
//===----------------------------------------------------------------------===//
|
|
|
|
// UNSUPPORTED: c++03, c++11, c++14, c++17, c++20
|
|
|
|
// template<class G>
|
|
// constexpr expected& operator=(const unexpected<G>& e);
|
|
//
|
|
// Let GF be const G&
|
|
//
|
|
// Constraints: is_constructible_v<E, GF> is true and is_assignable_v<E&, GF> is true.
|
|
//
|
|
// Effects:
|
|
// - If has_value() is true, equivalent to:
|
|
// construct_at(addressof(unex), std::forward<GF>(e.error()));
|
|
// has_val = false;
|
|
// - Otherwise, equivalent to: unex = std::forward<GF>(e.error());
|
|
//
|
|
// Returns: *this.
|
|
|
|
#include <cassert>
|
|
#include <concepts>
|
|
#include <expected>
|
|
#include <type_traits>
|
|
#include <utility>
|
|
|
|
#include "../../types.h"
|
|
#include "test_macros.h"
|
|
|
|
struct NotCopyConstructible {
|
|
NotCopyConstructible(const NotCopyConstructible&) = delete;
|
|
NotCopyConstructible& operator=(const NotCopyConstructible&) = default;
|
|
};
|
|
|
|
struct NotCopyAssignable {
|
|
NotCopyAssignable(const NotCopyAssignable&) = default;
|
|
NotCopyAssignable& operator=(const NotCopyAssignable&) = delete;
|
|
};
|
|
|
|
struct MoveMayThrow {
|
|
MoveMayThrow(MoveMayThrow const&) = default;
|
|
MoveMayThrow& operator=(const MoveMayThrow&) = default;
|
|
MoveMayThrow(MoveMayThrow&&) noexcept(false) {}
|
|
MoveMayThrow& operator=(MoveMayThrow&&) noexcept(false) { return *this; }
|
|
};
|
|
|
|
// Test constraints
|
|
static_assert(std::is_assignable_v<std::expected<void, int>&, const std::unexpected<int>&>);
|
|
|
|
// !is_constructible_v<E, GF>
|
|
static_assert(
|
|
!std::is_assignable_v<std::expected<void, NotCopyConstructible>&, const std::unexpected<NotCopyConstructible>&>);
|
|
|
|
// !is_assignable_v<E&, GF>
|
|
static_assert(
|
|
!std::is_assignable_v<std::expected<void, NotCopyAssignable>&, const std::unexpected<NotCopyAssignable>&>);
|
|
|
|
constexpr bool test() {
|
|
// - If has_value() is true, equivalent to:
|
|
// construct_at(addressof(unex), std::forward<GF>(e.error()));
|
|
// has_val = false;
|
|
{
|
|
Traced::state state{};
|
|
std::expected<void, Traced> e;
|
|
std::unexpected<Traced> un(std::in_place, state, 5);
|
|
decltype(auto) x = (e = un);
|
|
static_assert(std::same_as<decltype(x), std::expected<void, Traced>&>);
|
|
assert(&x == &e);
|
|
assert(!e.has_value());
|
|
assert(e.error().data_ == 5);
|
|
|
|
assert(state.copyCtorCalled);
|
|
}
|
|
|
|
// - Otherwise, equivalent to: unex = std::forward<GF>(e.error());
|
|
{
|
|
Traced::state state1{};
|
|
Traced::state state2{};
|
|
std::expected<void, Traced> e(std::unexpect, state1, 5);
|
|
std::unexpected<Traced> un(std::in_place, state2, 10);
|
|
decltype(auto) x = (e = un);
|
|
static_assert(std::same_as<decltype(x), std::expected<void, Traced>&>);
|
|
assert(&x == &e);
|
|
assert(!e.has_value());
|
|
assert(e.error().data_ == 10);
|
|
|
|
assert(state1.copyAssignCalled);
|
|
}
|
|
|
|
// CheckForInvalidWrites
|
|
{
|
|
{
|
|
CheckForInvalidWrites<true, true> e;
|
|
std::unexpected<int> un(std::in_place, 42);
|
|
e = un;
|
|
assert(e.check());
|
|
}
|
|
{
|
|
CheckForInvalidWrites<false, true> e;
|
|
std::unexpected<bool> un(std::in_place, true);
|
|
e = un;
|
|
assert(e.check());
|
|
}
|
|
}
|
|
|
|
return true;
|
|
}
|
|
|
|
void testException() {
|
|
#ifndef TEST_HAS_NO_EXCEPTIONS
|
|
std::expected<void, ThrowOnCopyConstruct> e1(std::in_place);
|
|
std::unexpected<ThrowOnCopyConstruct> un(std::in_place);
|
|
try {
|
|
e1 = un;
|
|
assert(false);
|
|
} catch (Except) {
|
|
assert(e1.has_value());
|
|
}
|
|
#endif // TEST_HAS_NO_EXCEPTIONS
|
|
}
|
|
|
|
int main(int, char**) {
|
|
test();
|
|
static_assert(test());
|
|
testException();
|
|
return 0;
|
|
}
|