LoginSignup
1
1
AUTOSAR CountdownAdvent Calendar 2022Day 9
この記事誰得？ 私しか得しないニッチな技術で記事投稿！
@kaizen_nagoya(Dr. Kiyoshi Ogawa)

Autosar Guidelines C++14, example code compile list(47)Rule A5-2-5 An array shall not be accessed beyond its range.

Last updated at Posted at 2018-06-10

Guidelines for the use of the C++14 language in critical and
safety-related systems Sample code compile list(47)
https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf

Autosar Guidelines C++14 example code compile list
https://qiita.com/kaizen_nagoya/items/8ccbf6675c3494d57a76
#目的(purpose)
AutosarのC++ GuidelineをOS, 制御のプログラムで利用するにあたって、(1)hosted, freestandingのどちらを基本にすべきか。(2)C++2014,C++2017, C++202aのどれを用いると良いか, (3)どの処理系を併用すると良いかを検討するため、-std=c++14, -std=c++17, -std=c++2aの3種類で、複数のコンパイラでコンパイルすることにより、誤(error)、警告(warning)、関数・変数連携(link)、出力(output)、にどのような影響があるかを確認する。
#成果(outcome)
複数の処理系の特徴が明確になるとともに、各標準段階, hosted, freestandingの特徴と課題を明確にする。

#A5-2-5.cpp
##算譜(source code)

A5-2-5.cpp
//Guidelines for the use of the C++14 language in critical and safety-related systems
const char* msg="Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp";
//https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf
// There is no description about Autosar declear hosted or freestanding.
// If the Autosar intended both depending on the cases, autosar.h can choose one.
// Compile with -DHOSTED work as  hosted environment, -DFREESTANDING work as freestanding.

#include "autosar.h"/// @line add header file https://qiita.com/kaizen_nagoya/items/4bde8f21ab059b96cf2a

using namespace std;/// @line add using

///start AUTOSAR: From here to the "///end AUTOSAR" is from AUTOSAR without code having /// comment in line.
// $Id: A5-2-5.cpp 271752 2017-03-23 12:07:07Z piotr.tanski $
#include <array>
#include <cstdint>
#include <iostream>
void fn1() noexcept
{
  constexpr std::int32_t arraySize = 16;
  std::int32_t array[arraySize] {0};

  std::int32_t elem1 =
    array[0]; // Compliant - access with constant literal that
// is less than ArraySize
  std::int32_t elem2 =
    array[12]; // Compliant - access with constant literal that
// is less than ArraySize
  for (std::int32_t idx = 0; idx < 20; ++idx)
  {
    std::int32_t elem3 =
      array[idx]; // Non-compliant - access beyond ArraySize
// bounds, which has 16 elements
    cout <<"elem3="<<elem3<<endl;/// @ line for output
  }

  std::int32_t shift = 25;
  std::int32_t elem4 =
    *(array + shift); // Non-compliant - access beyond ArraySize bounds

  std::int32_t index = 0;
  std::cin >> index;
  std::int32_t elem5 =
    array[index]; // Non-compliant - index may exceed the ArraySize bounds
  if (index < arraySize)
  {
    std::int32_t elem6 = array[index]; // Compliant - range check coded
  }
  cout <<"fn1:elem1="<<elem1<<" elem2="<<elem2<<" elem4="<<elem4<<" elem5="<<elem5<<endl;/// @ line for output
}
void fn2() noexcept
{
  constexpr std::int32_t arraySize = 32;
  std::array<std::int32_t, arraySize> array;
  array.fill(0);

  std::int32_t elem1 =
    array[10]; // Compliant - access with constant literal that
// is less than ArraySize
  std::int32_t index = 40;
  std::int32_t elem2 =
    array[index]; // Non-compliant - access beyond ArraySize bounds
  try
  {
    std::int32_t elem3 =
      array.at(50); // Compliant - at() method provides a
// range check, throwing an exception if
// input exceeds the bounds
  }
  catch (std::out_of_range&)
  {
// Handle an error
    cout<<"elem3="<<elem3<<endl;/// @ line for output
    return;
  }

  for (auto&& e : array) // The std::array provides a possibility to iterate
// over its elements with range-based loop
  {
// Iterate over all elements
  }
  cout <<"fn2:elem1="<<elem1<<" elem2="<<elem2<<endl;/// @ line for output
}
///end AUTOSAR
int start() { /// @{} for start
  fn1();
  fn2();
  cout<< msg << endl;
  ShutdownOS()  EXIT_SUCCESS;
/// Autosar OS 3.1.1, 2009: 7.1.2.2 Undefined Behaviour in OSEK OS
/// OS425 If ShutdownOS is called and ShutdownHook() returns then the operating system shall disable all interrupts and enter an endless loop.
}

##編纂・実行結果(compile and go)

cpa.sh
$ ../cpa.sh a5-2-5
$ clang++ a5-2-5.cpp -I./ -std=c++14 -Wall
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
 for (auto&& e : array) // The std::array provides a possibility to iterate
             ^
1 warning generated.
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=198410824
elem3=1
elem3=-1347223395
elem3=1471818874
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp
$ clang++ a5-2-5.cpp  -I./ -std=c++17 -Wall
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
 for (auto&& e : array) // The std::array provides a possibility to iterate
             ^
1 warning generated.
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=383763016
elem3=1
elem3=254214238
elem3=568582773
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp
$ clang++ a5-2-5.cpp  -I./ -std=c++2a -Wall
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
 for (auto&& e : array) // The std::array provides a possibility to iterate
             ^
1 warning generated.
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=436560456
elem3=1
elem3=-1006763999
elem3=1199771141
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp

$ g++-8 a5-2-5.cpp  -I./ -std=c++14  -Wall
a5-2-5.cpp: In function 'void fn2()':
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
  for (auto&& e : array) // The std::array provides a possibility to iterate
              ^
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=367039048
elem3=1
elem3=0
elem3=0
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp
$ g++-8 a5-2-5.cpp  -I./ -std=c++17  -Wall
a5-2-5.cpp: In function 'void fn2()':
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
  for (auto&& e : array) // The std::array provides a possibility to iterate
              ^
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=146989640
elem3=1
elem3=0
elem3=0
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp
$ g++-8 a5-2-5.cpp  -I./ -std=c++2a  -Wall
a5-2-5.cpp: In function 'void fn2()':
a5-2-5.cpp:77:14: warning: unused variable 'e' [-Wunused-variable]
  for (auto&& e : array) // The std::array provides a possibility to iterate
              ^
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=0
elem3=345535048
elem3=1
elem3=0
elem3=0
3
elem6=0
fn1:elem1=0 elem2=0 elem4=0 elem5=0
Rule A5-2-5 (required, implementation, automated)An array shall not be accessed beyond its range.(47)A5-2-5.cpp

#検討事項(agenda)
###1. 自律(freestanding)環境. 接待(hosted)環境

C++N4606 1.4 Implementation compliance p.4

###2. 対応OSの水準、対応通信規約、応用機能による分類
freestanding用の関数、ライブラリ等
###3. C++2014, C++2017, C++202aの比較項目
本件なし
###4. clang++, g++の比較検討項目
本件なし

###5 役立つまたは意味のある出力
今回はconsole入力値を3にした。どういう値だと試験になるか要確認。

#参考文献(reference)

###プログラミング言語教育のXYZ
https://qiita.com/kaizen_nagoya/items/1950c5810fb5c0b07be4
プログラミング言語教育のXYZ(youtube)
https://www.youtube.com/watch?v=He1_tg4px-w&t=486s

###C++N4741 2018
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2018/n4741.pdf

C++N4741, 2018 Standard Working Draft on ISO/IEC 14882 sample code compile list
https://qiita.com/kaizen_nagoya/items/3294c014044550896010

###C++N4606 2016
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2016/n4606.pdf

C++N4606, 2016符号断片編纂一覧(example code compile list)
Working Draft 2016, ISO/IEC 14882(1)
https://qiita.com/kaizen_nagoya/items/df5d62c35bd6ed1c3d43/

###　CEDD(Compile Error Driven Design)
初めての　CEDD(Compile Error Driven Design) ８回直してコンパイル。
https://qiita.com/kaizen_nagoya/items/9494236aa1753f3fd1e1

コンパイルエラーを記録するとよい理由7つ
https://qiita.com/kaizen_nagoya/items/85c0e92b206883140e89

C Puzzle Bookの有り難み5つ、C言語規格及びCコンパイラの特性を認識
https://qiita.com/kaizen_nagoya/items/d89a48c1536a02ecdec9

C言語（C++)に対する誤解、曲解、無理解、爽快。
https://qiita.com/kaizen_nagoya/items/3f3992c9722c1cee2e3a

Qiitaに投稿するCのStyle例(暫定)
https://qiita.com/kaizen_nagoya/items/946df1528a6a1ef2bc0d

C++N4606 Working Draft 2016, ISO/IEC 14882, C++ standardのコード断片をコンパイルするためにしていること
https://qiita.com/kaizen_nagoya/items/a8d7ee2f2e29e76c19c1

コンパイル用shell script C版(clangとgcc)とC++版(clang++とg++)
https://qiita.com/kaizen_nagoya/items/74220c0577a512c2d7da

[C][C++]の国際規格案の例題をコンパイルするときの課題７つ。
https://qiita.com/kaizen_nagoya/items/5f4b155030259497c4de

docker gnu(gcc/g++) and llvm(clang/clang++)
https://qiita.com/drafts/059874ea39c4de64c0f7

#文書履歴(document history)
ver 0.10 初稿 20180610
ver 0.12 一覧追記 参考文献欄追記 20180616
ver 0.11 一覧追記 20180613

最後までおよみいただきありがとうございました。

いいね　💚、フォローをお願いします。

Thank you very much for reading to the last sentence.

Please press the like icon 💚　and follow me for your happy life.

1
1
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
Sign upLogin
1
1