Hello! On Fri, Nov 04, 2022 at 04:24:14PM +0100, Alejandro Colomar wrote:
> The casts are unnecessary, since memcmp(3)'s arguments are > 'const void *', which allows implicit conversion from any pointer type. > It might have been necessary in the times of K&R C, where 'void *' > didn't exist yet, up until the early 2000s, because some old systems > still had limited or no support for ISO C89. Those systems passed away > a long time ago, and current systems, even the oldest living ones, have > support for ISO C89. > > The changes, apart from the removal of the macro itself, were scripted: > > $ find src/ -type f \ > | grep '\.[ch]$' \ > | xargs sed -i 's/ngx_memcmp/memcmp/'; > > The cast in this case is (almost) innocuous, because it only hides > warnings for conversions from integer to pointer such as: > > nxt_memcmp(n, "foo", 3); // no warnings > memcmp(n, "foo", 3); // warning: integer to pointer conversion > > which is a difficult bug to write, since it's too obvious. Such code > will probably be caught in a code review, but there's always a small > risk. Since there's no reason to keep the small risk around, when we > can just avoid it by removing the cast. > > In general, it's better to avoid a cast if possible, since casts will > disable many compiler warnings regarding type safety. Thanks for the patch. The ngx_memcpy() macro was introduced in 107:b5be4b0448d3 (nginx-0.0.1-2003-07-01-19:00:03 import) as an alias to memcmp(), with the following explanation why it's just an alias: +/* msvc and icc compile memcmp() to inline loop */ +#define ngx_memcmp memcmp This was along with the first use of memcmp in nginx, so clearly the "ngx_" prefix is not an accident. Indeed, the prefix is used in multiple places to provide optimized or instrumented functions, even if normally they map to generally available functions such as memcmp(). For example, ngx_memcpy() usually maps to memcpy(), but instrumented to detect large copies if NGX_MEMCPY_LIMIT is defined. Even if the particular function is not instrumented, the prefix is important to make it possible to change things without huge modifications of the code, like the one in your patch. Further, the prefix is also important for code consistency. And, last but not least, it makes it possible to add casts if needed on some platforms (or remove them if they are considered wrong). In particular, casts to (const char *) for ngx_memcmp() were added in 2007 by this commit (nginx 0.6.18): changeset: 1648:89a47f19b9ec user: Igor Sysoev <i...@sysoev.ru> date: Fri Nov 23 17:00:11 2007 +0000 summary: update ngx_memcmp() Unfortunately, this commit contains no details about the particular system which needed the cast, though it looks like there were some at least at that time. Similar casts are used by almost all nginx string macro definitions, since most C library functions accept "char *", while nginx uses "u_char *" for strings, and this results in useless warnings. While it might be seen as something better to avoid, the only alternative would be to provide wrapper functions, which might not be a good idea for performance and readability reasons. On the other hand, macro definitions with casts are easily readable, have no impact on performance, and provide limited to no effect on the code quality as long as proper coding, testing and review process is implemented. Summing the above, certainly removing the "ngx_" prefix is a bad idea. Removing casts from the particular macro might be considered, though in general it looks like a quest to prove these are not needed (or no longer needed) given the wide range of platforms nginx supports. Hope this helps. [...] -- Maxim Dounin http://mdounin.ru/ _______________________________________________ nginx-devel mailing list -- nginx-devel@nginx.org To unsubscribe send an email to nginx-devel-le...@nginx.org
