Guidelines for the use of the C++14 language in critical and
safety-related systems Sample code compile list(168)
https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf

Autosar Guidelines C++14 example code compile list
https://qiita.com/kaizen_nagoya/items/8ccbf6675c3494d57a76
#目的(purpose)
AutosarのC++ GuidelineをOS, 制御のプログラムで利用するにあたって、以下を検討する。
(1)hosted, freestandingのどちらを基本にすべきか。(2)C++2014,C++2017, C++202aのどれを用いると良いか。
(3)どの処理系を併用すると良いか。
-std=c++14, -std=c++17, -std=c++2aの3種類で、複数のコンパイラでコンパイルすることにより、誤(error)、警告(warning)、関数・変数連携(link)、出力(output)、にどのような影響があるかを確認する。
#成果(outcome)
複数の処理系の特徴が明確になる。
各標準段階の違いを明確にする。
hostedまたはfreestandingの特徴と課題を明確にする。

AA27-0-1.cpp

算譜(source code)

A27-0-1.cpp

//Guidelines for the use of the C++14 language in critical and safety-related systems
const char* msg0="Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp";
//https://www.autosar.org/fileadmin/user_upload/standards/adaptive/17-03/AUTOSAR_RS_CPP14Guidelines.pdf
// There is no description about Autosar declear hosted or freestanding.
// If the Autosar intended both depending on the cases, autosar.h can choose one.
// Compile with -DHOSTED work as  hosted environment, -DFREESTANDING work as freestanding.

#include "autosar.h"/// @line add header file https://qiita.com/kaizen_nagoya/items/4bde8f21ab059b96cf2a

using namespace std;/// @line add using

/// @ start AUTOSAR: From here to the "///end AUTOSAR" are from the AUTOSAR code without some code having /// comment in line.
// $Id: A27-0-1.cpp 271687 2017-03-23 08:57:35Z piotr.tanski $
#include <string.h>
#include <cstdint>
#include <cstdio>
void f1(const char* name) // name restricted to 256 or fewer characters
{
  static const char format[] = "Name: %s .";
  size_t len = strlen(name) + sizeof(format);
  char* msg = new char[len];

  if (msg == nullptr)
  {
// Handle an error
  }

  std::int32_t ret =
    snprintf(msg,
             len,
             format,
             name); // Non-compliant - no additional check for overflows

  if (ret < 0)
  {
// Handle an error
  }
  else if (ret >= len)
  {
// Handle truncated output
  }

  fprintf(stderr, msg);
  delete[] msg;
}
void f2(const char* name)
{
  static const char format[] = "Name: %s .";
  fprintf(stderr, format, name); // Compliant - untrusted input passed as one
// of the variadic arguments, not as part of
// vulnerable format string
}
/// @ end AUTOSAR
int start() { /// @{} for start
  const char * name ="name";
  f1(name);
  f2(name);
  cout<< msg0 << endl;
  ShutdownOS()  EXIT_SUCCESS;
/// Autosar OS 3.1.1, 2009: 7.1.2.2 Undefined Behaviour in OSEK OS
/// OS425 If ShutdownOS is called and ShutdownHook() returns then the operating system shall disable all interrupts and enter an endless loop.
}

##編纂・実行結果(compile and go)

cpa.sh

$ ../cpa.sh a27-0-1
$ clang++ a27-0-1.cpp -I./ -std=c++14 -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
 fprintf(stderr, msg);
                 ^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
 fprintf(stderr, msg);
                 ^
                 "%s", 
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ clang++ a27-0-1.cpp  -I./ -std=c++17 -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
 fprintf(stderr, msg);
                 ^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
 fprintf(stderr, msg);
                 ^
                 "%s", 
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ clang++ a27-0-1.cpp  -I./ -std=c++2a -Wall
a27-0-1.cpp:43:18: warning: format string is not a string literal (potentially insecure) [-Wformat-security]
 fprintf(stderr, msg);
                 ^~~
a27-0-1.cpp:43:18: note: treat the string as an argument to avoid this
 fprintf(stderr, msg);
                 ^
                 "%s", 
1 warning generated.
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp

$ g++-8 a27-0-1.cpp  -I./ -std=c++14  -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
  else if (ret >= len)
           ~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ g++-8 a27-0-1.cpp  -I./ -std=c++17  -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
  else if (ret >= len)
           ~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp
$ g++-8 a27-0-1.cpp  -I./ -std=c++2a  -Wall
a27-0-1.cpp: In function 'void f1(const char*)':
a27-0-1.cpp:38:15: warning: comparison of integer expressions of different signedness: 'int32_t' {aka 'int'} and 'size_t' {aka 'long unsigned int'} [-Wsign-compare]
  else if (ret >= len)
           ~~~~^~~~~~
Name: name .Name: name .Rule A27-0-1 (required, implementation, non-automated) Inputs from independent components shall be validated.(168)A27-0-1.cpp

#検討事項(agenda)
###1. 自律(freestanding)環境. 接待(hosted)環境

C++N4606 1.4 Implementation compliance p.4

###2. 対応OSの水準、対応通信規約、応用機能による分類
freestanding用の関数、ライブラリ等
###3. C++2014, C++2017, C++202aの比較項目
本件なし
###4. clang++, g++の比較検討項目
本件なし

###5. 役立つまたは意味のある出力

#参考文献(reference)
###C++N4741 2018
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2018/n4741.pdf

C++N4741, 2018 Standard Working Draft on ISO/IEC 14882 sample code compile list
https://qiita.com/kaizen_nagoya/items/3294c014044550896010

###C++N4606 2016
Working Draft, Standard for Programming Language C++
http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2016/n4606.pdf

C++N4606, 2016符号断片編纂一覧(example code compile list)
Working Draft 2016, ISO/IEC 14882(1)
https://qiita.com/kaizen_nagoya/items/df5d62c35bd6ed1c3d43/

文書履歴(document history)

ver 0.10 初稿 20180612
ver 0.11 一覧追記 20180614

最後までおよみいただきありがとうございました。

いいね　💚、フォローをお願いします。

Thank you very much for reading to the last sentence.

Please press the like icon 💚　and follow me for your happy life.