Re: type safe lists (was Re: PATCH: type safe(r) list_entry repacement: generic_out_cast)

[Joshua MacDonald <jmacd@namesys.com>]

On Wed, Jul 24, 2002 at 09:39:53AM +0200, Martin Brulisauer wrote:
> On 24 Jul 2002, at 2:07, Joshua MacDonald wrote:
> > 
> > This may interest you.  We have written a type-safe doubly-linked list
> > template which is used extensively in reiser4.  This is the kind of thing that
> > some people like very much and some people hate, so I'll spare you the
> > advocacy.
> > 
> > Comments are welcome.
> 
> Hi,
> 
> In my oppinion the attached template is a very good school 
> example of how to excessively use C-style macros. But macros 
> tend to make debugging difficult and as you know every new code 
> has bugs (if it seems not to have one, then it has at least two 
> which "correct" each other until you fix one of them ...), and finding 
> the bugs is mainly done by others. 
>
> And who needs a "type-save" template for such a trivial thing like a 
> dubbly-linked-list? If this is not buttom-line knowledge one should 
> not try to do kernel level programming. By the way: Multiline C 
> Macros are depreached and will not be supported by a future 
> version of gcc and as for today will generate a bunch of warnings.

The list code is trivial, but when you have 10 classes of list and no type
safety between independent list classes or even between the list head and list
item types, there is a strong possibility you will pass the wrong argument to
some list routine because there is nothing to stop you.

The list code is trivial.  It doesn't make debugging difficult.  It is
bottom-line knowledge.  But why make things difficult for yourself -- just to
prove you can?

I can say a lot of good and bad things about C++, but at least it lets you do
this kind of thing with type safety and without ugly macros.

> I have one additional comment to the current implementation:
> > 
> > #define TS_LINK_TO_ITEM(ITEM_TYPE,LINK_NAME,LINK) \
> > 	((ITEM_TYPE *)((char *)(LINK)-(unsigned long)(&((ITEM_TYPE *)0)->LINK_NAME)))
> 
> As long as your pointers are 32bit this seems to be ok. But on 
> 64bit implementations pointers are not (unsigned long) so this cast 
> seems to be wrong.

-josh