Guidelines for the use of the C++14 language in critical and
safety-related systems Sample code compile list(168)
https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf
Autosar Guidelines C++14 example code compile list
https://qiita.com/kaizen_nagoya/items/8ccbf6675c3494d57a76
#目的(purpose)
AutosarのC++ GuidelineをOS, 制御のプログラムで利用するにあたって、以下を検討する。
(1)hosted, freestandingのどちらを基本にすべきか。(2)C++2014,C++2017, C++202aのどれを用いると良いか。
(3)どの処理系を併用すると良いか。
-std=c++14, -std=c++17, -std=c++2aの3種類で、複数のコンパイラでコンパイルすることにより、誤(error)、警告(warning)、関数・変数連携(link)、出力(output)、にどのような影響があるかを確認する。
#成果(outcome)
複数の処理系の特徴が明確になる。
各標準段階の違いを明確にする。
hostedまたはfreestandingの特徴と課題を明確にする。
AA27-0-1.cpp
算譜(source code)
//Guidelines for the use of the C++14 language in critical and safety-related systems
const char* msg0="Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp";
//https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf
// There is no description about Autosar declear hosted or freestanding.
// If the Autosar intended both depending on the cases, autosar.h can choose one.
// Compile with -DHOSTED work as hosted environment, -DFREESTANDING work as freestanding.
#include "autosar.h"/// @line add header file https://qiita.com/kaizen_nagoya/items/4bde8f21ab059b96cf2a
using namespace std;/// @line add using
/// @ start AUTOSAR: From here to the "///end AUTOSAR" are from the AUTOSAR code without some code having /// comment in line.
// $Id: A27-0-1.cpp 271687 2017-03-23 08:57:35Z piotr.tanski $
#include <string.h>
#include <cstdint>
#include <cstdio>
void f1(const char* name) // name restricted to 256 or fewer characters
{
static const char format[] = "Name: %s .";
size_t len = strlen(name) + sizeof(format);
char* msg = new char[len];
if (msg == nullptr)
{
// Handle an error
}
std::int32_t ret =
snprintf(msg,
len,
format,
name); // Non-compliant - no additional check for overflows
if (ret < 0)
{
// Handle an error
}
else if (ret >= len)
{
// Handle truncated output
}
fprintf(stderr, msg);
delete[] msg;
}
void f2(const char* name)
{
static const char format[] = "Name: %s .";
fprintf(stderr, format, name); // Compliant - untrusted input passed as one
// of the variadic arguments, not as part of
// vulnerable format string
}
/// @ end AUTOSAR
int start() { /// @{} for start
const char * name ="name";
f1(name);
f2(name);
cout<< msg0 << endl;
ShutdownOS() EXIT_SUCCESS;
/// Autosar OS 3.1.1, 2009: 7.1.2.2 Undefined Behaviour in OSEK OS
/// OS425 If ShutdownOS is called and ShutdownHook() returns then the operating system shall disable all interrupts and enter an endless loop.
}
##編纂・実行結果(compile and go)
$ ../cpa.sh a27-0-1
$ clang++ a27-0-1.cpp -I./ -std=c++14 -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
fprintf(stderr, msg);
^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
fprintf(stderr, msg);
^
"%s",
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ clang++ a27-0-1.cpp -I./ -std=c++17 -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
fprintf(stderr, msg);
^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
fprintf(stderr, msg);
^
"%s",
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ clang++ a27-0-1.cpp -I./ -std=c++2a -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
fprintf(stderr, msg);
^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
fprintf(stderr, msg);
^
"%s",
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ g++-8 a27-0-1.cpp -I./ -std=c++14 -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
else if (ret >= len)
~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ g++-8 a27-0-1.cpp -I./ -std=c++17 -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
else if (ret >= len)
~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ g++-8 a27-0-1.cpp -I./ -std=c++2a -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
else if (ret >= len)
~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
#検討事項(agenda)
###1. 自律(freestanding)環境. 接待(hosted)環境
C++N4606 1.4 Implementation compliance p.4
###2. 対応OSの水準、対応通信規約、応用機能による分類
freestanding用の関数、ライブラリ等
###3. C++2014, C++2017, C++202aの比較項目
本件なし
###4. clang++, g++の比較検討項目
本件なし
###5. 役立つまたは意味のある出力
#参考文献(reference)
###C++N4741 2018
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2018/n4741.pdf
C++N4741, 2018 Standard Working Draft on ISO/IEC 14882 sample code compile list
https://qiita.com/kaizen_nagoya/items/3294c014044550896010
###C++N4606 2016
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2016/n4606.pdf
C++N4606, 2016符号断片編纂一覧(example code compile list)
Working Draft 2016, ISO/IEC 14882(1)
https://qiita.com/kaizen_nagoya/items/df5d62c35bd6ed1c3d43/
文書履歴(document history)
ver 0.10 初稿 20180612
ver 0.11 一覧追記 20180614
最後までおよみいただきありがとうございました。
いいね 💚、フォローをお願いします。
Thank you very much for reading to the last sentence.
Please press the like icon 💚 and follow me for your happy life.