Development/Tutorials/Common Programming Mistakes: Difference between revisions

    From KDE TechBase
    (→‎NULL pointer issues: add note about null array deletions)
    (38 intermediate revisions by 17 users not shown)
    Line 1: Line 1:
    {{TutorialBrowser|
    {{TutorialBrowser|


    Line 4: Line 6:


    name=Common Programming Mistakes|
    name=Common Programming Mistakes|
    reading=[[Policies/API_to_Avoid|APIs to avoid]]


    }}
    }}
    Line 27: Line 31:
    First and foremost: it is fine to delete a null pointer. So constructs like this that check for null before deleting are simply redundant:  
    First and foremost: it is fine to delete a null pointer. So constructs like this that check for null before deleting are simply redundant:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    if ( ptr ) {
    if ( ptr ) {
       delete ptr;
       delete ptr;
    }
    }
    </code>
    </syntaxhighlight>


    Note however, that a null check _is_ required when you delete an array - that's because a relatively recent compiler on Solaris does not handle it properly otherwise.
    Note however, that '''a null check ''is'' required when you delete an array''' - that's because a relatively recent compiler on Solaris does not handle it properly otherwise.


    When you delete a pointer, make sure you also set it to 0 so that future attempts to delete that object will not fail in a double delete. So the complete and proper idiom is:  
    When you delete a pointer, make sure you also set it to 0 so that future attempts to delete that object will not fail in a double delete. So the complete and proper idiom is:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    delete ptr;  
    delete ptr;  
    ptr = 0;
    ptr = 0;
    </code>
    </syntaxhighlight>


    You may notice that null pointers are marked variously in one of three ways: 0, 0L and NULL. The argument against using NULL was that while C defines it as a 0 void pointer, C++ defines it to not be a 0 void pointer. All conforming C++ implementations will define NULL correctly so it is really not a problem. The argument for 0L was that it was handled correctly in variable argument functions, while 0 was not. Nowadays that is also an artifact.
    You may notice that null pointers are marked variously in one of four ways: 0, 0L, NULL and nullptr. In C, NULL is defined as a null void pointer.  In C++, more type safety is possible due to stricter type checking.  Modern C++11 implementations (and all C++14 implementations) define NULL to equal the special value nullptr. Nullptr can be automatically cast to boolean false, but a cast to an integer type will fail.  This is useful to avoid accidentally. Older C++ implementations before c++11 simply defined NULL to 0L or 0, which provides no additional type safety - one could assign it to an integer variable, which is obviously wrong. For code which does not need to support outdated compilers the best choice is nullptr.


    It is more a question of personal style and getting used to something. As far as the code in KDE's SVN goes you will see 0 used more commonly than NULL.
    In pointer context, the integer constant zero means "null pointer" - irrespective of the actual binary representation of a null pointer. Note, however, that if you want to pass a null pointer constant to a function in a variable argument list, you *must* explicitly cast it to a pointer - the compiler assumes integer context by default, which might or might not match the binary representation of a pointer.


    === Member variables ===
    === Member variables ===


    You will encounter four major styles of marking class member variables in KDE:
    You will encounter four major styles of marking class member variables in KDE, besides unmarked members:


    * '''m_variable''' lowercase m, underscore and the name of the variable starting with a lowercase letter. This is the most common style and one prefered for code in kdelibs.
    * '''m_variable''' lowercase m, underscore and the name of the variable starting with a lowercase letter. This is the most common style and one prefered for code in kdelibs.
    * '''mVariable''' lowercase m and the name of variable starting with a uppercase letter
    * '''mVariable''' lowercase m and the name of variable starting with a uppercase letter
    * '''variable_''' variable name starting with a lowercase letter and then an underscore
    * '''variable_''' variable name starting with a lowercase letter and then an underscore
    * '''_variable''' underscore and the name of variable starting with a lowercase letter. This style is actually usually frowned upon as this notation is also used in some code for function parameters instead.  
    * '''_variable''' underscore and the name of variable starting with a lowercase letter. This style is actually usually frowned upon as this notation is also used in some code for function parameters instead.
     
    Unmarked members are more common in the case of classes that use [[Policies/Library Code Policy#D-Pointers|d-pointers]].


    As it often happens there is not one correct way of doing it, so remember to always follow the syntax used by the application/library to which you are committing.
    As it often happens there is not one correct way of doing it, so remember to always follow the syntax used by the application/library to which you are committing. If you're creating a new file, you may want to follow the coding style of the library or module you're adding the file to.
     
    Note that symbols starting with undercores are reserved to the C library (underscore followed by capital or double underscore are reserved to the compiler), so if you can, avoid using the last type.


    === Static variables ===
    === Static variables ===
    Line 65: Line 73:
    Instead, use a static pointer, together with <tt>K_GLOBAL_STATIC</tt> which is defined in <tt>kglobal.h</tt> and is used like this:
    Instead, use a static pointer, together with <tt>K_GLOBAL_STATIC</tt> which is defined in <tt>kglobal.h</tt> and is used like this:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    class A { ... };
    class A { ... };


    Line 89: Line 97:
         qAddPostRoutine(globalA.destroy);
         qAddPostRoutine(globalA.destroy);
    }
    }
    </code>
    </syntaxhighlight>


    See the [http://www.englishbreakfastnetwork.org/apidocs/apidox-kde-4.0/kdelibs-apidocs/kdecore/html/kglobal_8h.html#75ca0c60b03dc5e4f9427263bf4043c7 API documentation] for <tt>K_GLOBAL_STATIC</tt> for more information.
    See the [http://api.kde.org/4.x-api/kdelibs-apidocs/kdecore/html/group__KDEMacros.html#ga75ca0c60b03dc5e4f9427263bf4043c7 API documentation] for <tt>K_GLOBAL_STATIC</tt> for more information.
     
    === Constant data ===
     
    If you need some constant data of simple data types in several places, you do good by defining it once at a central place, to avoid a mistype in one of the instances. If the data changes there is also only one place you need to edit.
     
    Even if there is only one instance you do good by defining it elsewhere, to avoid so-called "magic numbers" in the code which are unexplained (cmp. 42). Usually this is done at the top of a file to avoid searching for it.
     
    Define the constant data using the language constructs of C++, not the preprocessor instructions, like you may be used to from plain C. This way the compiler can help you to find mistakes by doing type checking.
     
    <syntaxhighlight lang="cpp-qt">
    // Correct!
    static const int AnswerToAllQuestions = 42;
    // Wrong!
    #define AnswerToAllQuestions 42
    </syntaxhighlight>
     
     
    If defining a constant array do not use a pointer as data type. Instead use the data type and append the array symbol with undefined length, <tt>[]</tt>, behind the name. Otherwise you also define a variable to some const data. That variable could mistakenly be assigned a new pointer to, without the compiler complaining about. And accessing the array would have one indirection, because first the value of the variable needs to be read.
     
    <syntaxhighlight lang="cpp-qt">
    // Correct!
    static const char SomeString[] = "Example";
    // Wrong!
    static const char* SomeString = "Example";
    // Wrong!
    #define SomeString "Example"
    </syntaxhighlight>


    === Forward Declarations ===
    === Forward Declarations ===


    You will reduce compile times by forward declaring classes when possible instead of including their respective headers. For example:
    You will reduce compile times by forward declaring classes when possible instead of including their respective headers. The rules for when a type can be used without being defined are a bit subtle, but intuitively, if the only important aspect is the name of the class, not the details of its implementation, a forward declaration is permissible. Two examples are when declaring pointers to the class or using the class as as a function argument. 


    <code cppqt>
    For example:
     
    <syntaxhighlight lang="cpp-qt">
    #include <QWidget>    // slow
    #include <QWidget>    // slow
    #include <QStringList> // slow
    #include <QStringList> // slow
    #include <QString>    // slow
    #include <QString>    // slow
    class SomeInterface
    #include <QIcon>      //slow
    class SomeClass
    {
    {
    public:
    public:
    Line 107: Line 145:
         virtual void stringAction( const QString& str ) =0;
         virtual void stringAction( const QString& str ) =0;
         virtual void stringListAction( const QStringList& strList ) =0;
         virtual void stringListAction( const QStringList& strList ) =0;
    private:
        QIcon *icon;
    };
    };
    </code>   
    </syntaxhighlight>   
        
        
    The above should instead be written like this:
    The above should instead be written like this:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    class QWidget;    // fast
    class QWidget;    // fast
    class QStringList; // fast
    class QStringList; // fast
    class QString;    // fast
    class QString;    // fast
    class SomeInterface
    class QIcon;      // fast
    class SomeClass
    {
    {
    public:
    public:
    Line 122: Line 163:
         virtual void stringAction( const QString& str ) =0;
         virtual void stringAction( const QString& str ) =0;
         virtual void stringListAction( const QStringList& strList ) =0;
         virtual void stringListAction( const QStringList& strList ) =0;
    private:
        QIcon *icon;
    };
    };
    </code>
    </syntaxhighlight>


    === Iterators ===
    === Iterators ===


    Prefer to use <tt>const_iterators</tt> over normal iterators when possible. Containers, which are being implicitly shared often detach when a call to a non-const <tt>begin()</tt> or <tt>end()</tt> methods is made ({{qt|List}} is an example of such a container). When using a const_iterator also watch out that you are really calling the const version of <tt>begin()</tt> and <tt>end()</tt>. Unless your container is actually const itself this probably will not be the case, possibly causing an unnecessary detach of your container. So basically whenever you use const_iterator initialize them using <tt>constBegin()</tt>/<tt>constEnd()</tt> instead, to be on the safe side.  
    ==== Prefer const iterators and cache end() ====
    Prefer to use <tt>const_iterators</tt> over normal iterators when possible. Containers, which are being implicitly shared often detach when a call to a non-const <tt>begin()</tt> or <tt>end()</tt> methods is made ({{qt|QList}} is an example of such a container). When using a const_iterator also watch out that you are really calling the const version of <tt>begin()</tt> and <tt>end()</tt>. Unless your container is actually const itself this probably will not be the case, possibly causing an unnecessary detach of your container. So basically whenever you use const_iterator initialize them using <tt>constBegin()</tt>/<tt>constEnd()</tt> instead, to be on the safe side.  


    Cache the return of the <tt>end()</tt> method call before doing iteration over large containers. For example:
    Cache the return of the <tt>end()</tt> (or <tt>constEnd()</tt>) method call before doing iteration over large containers. For example:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    QValueList<SomeClass> container;
    QList<SomeClass> container;


    //code which inserts a large number of elements to the container
    //code which inserts a large number of elements to the container


    QValueListConstIterator end( container.end() );
    QList<SomeClass>::ConstIterator end = container.constEnd();
    QList<SomeClass>::ConstIterator itr = container.constBegin();


    for ( QValueListConstIterator itr( container.begin() );
    for ( ; itr != end; ++itr ) {
        itr != end; ++itr ) {
        // use *itr (or itr.value()) here
    }
    }
    </code>
    </syntaxhighlight>


    This avoids the unnecessary creation of the temporary <tt>end()</tt> return object on each loop iteration, largely speeding it up.
    This avoids the unnecessary creation of the temporary <tt>end()</tt> (or <tt>constEnd()</tt>) return object on each loop iteration, largely speeding it up.


    Prefer to use pre-increment over post-increment operators on iterators as this avoids creating an unnecessary temporary object in the process.
    When using iterators, always use pre-increment and pre-decrement operators (i.e., <tt>++itr</tt>) unless you have a specific reason not to. The use of post-increment and post-decrement operators (i.e., <tt>itr++</tt>) cause the creation of a temporary object.


    '''take care when erasing elements inside a loop'''
    ====Take care when erasing elements inside a loop====


    When you want to erase some elements from the list, you maybe would use code similar to this:
    When you want to erase some elements from the list, you maybe would use code similar to this:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    QMap<int, Job *>::iterator itEnd = m_activeTimers.end();
    QMap<int, Job *>::iterator itEnd = m_activeTimers.end();


    for( ; it!=itEnd ; ++it )
    for( ; it != itEnd ; ++it) {
    {
         if(it.value() == job) {
         if(it.value() == job)
        {
             //A timer for this job has been found. Let's stop it.
             //A timer for this job has been found. Let's stop it.
             killTimer(it.key());
             killTimer(it.key());
    Line 164: Line 207:
         }
         }
    }
    }
    </code>
    </syntaxhighlight>


    This code will potentially crash because it is a dangling iterator after the call to erase().
    This code will potentially crash because it is a dangling iterator after the call to erase().
    You have to rewrite the code this way:
    You have to rewrite the code this way:
    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    while (it != m_activeTimers.end())
    while (it != m_activeTimers.end()) {
    {
         if(it.value() == job) {
        QMap<int, Job *>::iterator prev = it;
        ++it;
         if(prev.value() == job)
        {
             //A timer for this job has been found. Let's stop it.
             //A timer for this job has been found. Let's stop it.
             killTimer(prev.key());
             killTimer(it.key());
             m_activeTimers.erase(prev);
             it = m_activeTimers.erase(it);
        } else {
            ++it;
         }
         }
    }
    }
    </code>
    </syntaxhighlight>
    This problem is also discussed in the [http://doc.trolltech.com/4.3/qmap-iterator.html#details Qt documentation for QMap::iterator] but applies to '''all''' Qt iterators
    This problem is also discussed in the [http://doc.trolltech.com/4.3/qmap-iterator.html#details Qt documentation for QMap::iterator] but applies to '''all''' Qt iterators
    === memory leaks ===
    A very "popular" programming mistake is to do a <tt>new</tt> without a <tt>delete</tt> like in this program:
    '''mem_gourmet.cpp'''
    <syntaxhighlight lang="cpp-qt">
    class t
    {
        public:
          t() {}
    };
    void pollute()
    {
        t* polluter = new t();
    }
    int main()
    {
        while (true) pollute();
    }
    </syntaxhighlight>
    You see, ''pollute()'' instanciates a new object ''polluter'' of the class ''t''. Then, the variable ''polluter'' is lost because it is local, but the content (the object) stays on the heap. I could use this program to render my computer unusable within 10 seconds.
    To solve this, there are the following approaches:
    * keep the variable on the stack instead of the heap:
    <syntaxhighlight lang="cpp-qt">
    t* polluter = new t();
    </syntaxhighlight>
    would become
    <syntaxhighlight lang="cpp-qt">
    t polluter;
    </syntaxhighlight>
    * delete polluter using the complementing function to new:
    <syntaxhighlight lang="cpp-qt">
    delete polluter;
    </syntaxhighlight>
    * stop the polluter in an [http://en.cppreference.com/w/cpp/memory/unique_ptr] (which will automatically delete the polluter when returning from the method)
    <syntaxhighlight lang="cpp-qt">
    std::unique_ptr<t> polluter = new t();
    </syntaxhighlight>
    There's also std::shared_ptr and QSharedPointer. This is the generally preferred way to do it in modern C++; explicit memory management should be avoided when possible.
    Qt code involving QObject generally uses parent/child relations to free allocated memory; when constructing a QObject (e.g. a widget) it can be given a parent, and when the parent is deleted it deletes all its children. The parent is also set when you add a widget to a layout, for example.
    A tool to detect memory leaks like this is [[Development/Tools/Valgrind|Valgrind]].
    === dynamic_cast ===
    You can only dynamic_cast to type T from type T2 provided
    that:
    * T is defined in a library you link to (you'd get a linker error if this isn't the case, since it won't find the vtable or RTTI info)
    * T is "well-anchored" in that library. By "well-anchored" I mean that the vtable is not a COMMON symbol subject to merging at run-time by the dynamic linker. In other words, the first virtual member in the class definition must exist and not be inlined: it must be in a .cpp file.
    * T and T2 are exported
    For instance, we've seen some hard-to-track problems in non-KDE C++ code we're linking with (I think NMM) because of that. It happened that:
    * libphonon loads the NMM plugin
    * NMM plugin links to NMM
    * NMM loads its own plugins
    * NMM's own plugins link to NMM
    Some classes in the NMM library did not have well-anchored vtables, so dynamic_casting failed inside the Phonon NMM plugin for objects created in the NMM's own plugins.


    == Program Design ==
    == Program Design ==
    Line 190: Line 296:
    === Delayed Initialization ===
    === Delayed Initialization ===


    Although the design of modern C++ applications can be very complex, one recurring problem, which is generally easy to fix, is not using the technique of [http://www.kdedevelopers.org/node/view/509 delayed initialization].  
    Although the design of modern C++ applications can be very complex, application windows can be loaded and displayed to the user very quickly through the technique of [http://www.kdedevelopers.org/node/509 delayed initialization].  This technique is relatively straightforward and useful at all stages of an interactive program.


    First, let us look at the standard way of initializing a KDE application:  
    First, let us look at the standard way of initializing a KDE application:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    int main( int argc, char **argv )
    int main( int argc, char **argv )
    {
    {
    Line 209: Line 315:
         return a.exec();
         return a.exec();
    }
    }
    </code>
    </syntaxhighlight>
          
          
    Notice that <tt>window</tt> is created before the <tt>a.exec()</tt> call that starts the event loop. This implies that we want to avoid doing anything non-trivial in the top-level constructor, since it runs before we can even show the window.
    Notice that <tt>window</tt> is created before the <tt>a.exec()</tt> call that starts the event loop. This implies that we want to avoid doing anything non-trivial in the top-level constructor, since it runs before we can even show the window.
    Line 215: Line 321:
    The solution is simple: we need to delay the construction of anything besides the GUI until after the event loop has started. Here is how the example class MainWindow's constructor could look to achieve this:
    The solution is simple: we need to delay the construction of anything besides the GUI until after the event loop has started. Here is how the example class MainWindow's constructor could look to achieve this:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    MainWindow::MainWindow()
    MainWindow::MainWindow()
    {
    {
    Line 242: Line 348:
         */
         */
    }
    }
    </code>
    </syntaxhighlight>
        
        
    Using this technique may not buy you any overall time, but it makes your app ''seem'' quicker to the user who is starting it. This increased perceived responsiveness is reassuring for the user as they get quick feedback that the action of launching the app has succeeded.
    Using this technique may not buy you any overall time, but it makes your app ''seem'' quicker to the user who is starting it. This increased perceived responsiveness is reassuring for the user as they get quick feedback that the action of launching the app has succeeded.
    Line 260: Line 366:
    So the canonical signature of a method taking QString arguments is:
    So the canonical signature of a method taking QString arguments is:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    void myMethod( const QString & foo, const QString & bar );
    void myMethod( const QString & foo, const QString & bar );
    </code>
    </syntaxhighlight>


    === QObject ===
    === QObject ===
    Line 268: Line 374:
    If you ever need to delete a QObject derived class from within one of its own methods, do not ever delete it this way:  
    If you ever need to delete a QObject derived class from within one of its own methods, do not ever delete it this way:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
      delete this;
    delete this;
    </code>
    </syntaxhighlight>


    This will sooner or later cause a crash because a method on that object might be invoked from the Qt event loop via slots/signals after you deleted it.
    This will sooner or later cause a crash because a method on that object might be invoked from the Qt event loop via slots/signals after you deleted it.


    Instead always use <tt>{{qt|QObject}}::deleteLater()</tt> which tries to do the same thing as <tt>delete this</tt> but in a safer way.
    Instead always use <tt>{{QtMethod|QObject|deleteLater}}</tt> which tries to do the same thing as <tt>delete this</tt> but in a safer way.


    === Empty QStrings ===
    === Empty QStrings ===
    Line 280: Line 386:
    It is common to want to see if a {{qt|QString}} is empty. Here are three ways of doing it, the first two of which are correct:
    It is common to want to see if a {{qt|QString}} is empty. Here are three ways of doing it, the first two of which are correct:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    // Correct
    // Correct
    if ( mystring.isEmpty() ) {
    if ( mystring.isEmpty() ) {
    Line 292: Line 398:
    if ( mystring == "" ) {
    if ( mystring == "" ) {
    }
    }
    </code>
    </syntaxhighlight>


    While there is a distinction between "null" {{qt|QString}}s and empty ones, this is a purely historical artifact and new code is discouraged from making use of it.
    While there is a distinction between "null" {{qt|QString}}s and empty ones, this is a purely historical artifact and new code is discouraged from making use of it.
    Line 303: Line 409:


    While one can also use <tt>qApp->processEvents()</tt>, it is discouraged as it easily leads to subtle yet often fatal problems.
    While one can also use <tt>qApp->processEvents()</tt>, it is discouraged as it easily leads to subtle yet often fatal problems.
    === Reading QString from a KProcess ===
    {{class|KProcess}} emits the signals <tt>readyReadStandard{Output|Error}</tt> as data comes in.
    A common mistake is reading all available data in the connected slot and converting it to {{qt|QString}} right away: the data comes in arbitrarily segmented chunks, so multi-byte characters might be cut into pieces and thus invalidated. Several approaches to this problem exist:
    * Do you really need to process the data as it comes in? If not, just use <tt>readAllStandard{Output|Error}</tt> after the process has exited. Unlike in KDE3, KProcess is now able to accumulate the data for you.
    * Wrap the process into a {{qt|QTextStream}} and read line-wise. This should work starting with Qt 4.4.
    * Accumulate data chunks in the slots and process them each time a newline arrives or after some timeout passes. [http://websvn.kde.org/trunk/KDE/kdevplatform/util/processlinemaker.cpp?view=markup Example code]


    === QString and QByteArray ===
    === QString and QByteArray ===
    Line 310: Line 425:
    For example:  
    For example:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    QCString myData;
    QByteArray myData;
    QString myNewData = mangleData( myData );
    QString myNewData = mangleData( myData );


    QString mangleData( const QString data ) {
    QString mangleData( const QString& data ) {
         QCString str = data.toLatin1();
         QByteArray str = data.toLatin1();
         // mangle  
         // mangle  
         return QString(str);
         return QString(str);
    }
    }
    </code>
    </syntaxhighlight>
          
          
    The expensive thing happening here is the conversion to {{qt|QString}}, which does a conversion to Unicode internally. This is unnecessary because, the first thing the method does is convert it back using <tt>toLatin1()</tt>. So if you are sure that the Unicode conversion is not needed, try to avoid inadvertently using QString along the way.  
    The expensive thing happening here is the conversion to {{qt|QString}}, which does a conversion to Unicode internally. This is unnecessary because, the first thing the method does is convert it back using <tt>toLatin1()</tt>. So if you are sure that the Unicode conversion is not needed, try to avoid inadvertently using QString along the way.  
    Line 325: Line 440:
    The above example should instead be written as:
    The above example should instead be written as:


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    QCString myData;
    QByteArray myData;
    QCString myNewData = mangleData( myData );
    QByteArray myNewData = mangleData( myData );


    QCString mangleData( const QCString& data )
    QByteArray mangleData( const QByteArray& data )
    </code>
    </syntaxhighlight>


    === QDomElement ===
    === QDomElement ===
    Line 336: Line 451:
    When parsing XML documents, one often needs to iterate over all the elements. You may be tempted to use the following code for that:  
    When parsing XML documents, one often needs to iterate over all the elements. You may be tempted to use the following code for that:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    for ( QDomElement e = baseElement.firstChild().toElement();
    for ( QDomElement e = baseElement.firstChild().toElement();
           !e.isNull();
           !e.isNull();
    Line 342: Line 457:
           ...
           ...
    }
    }
    </code>
    </syntaxhighlight>
        
        
    That is not correct though: the above loop will stop prematurely when it encounters a {{qt|QDomNode}} that is something other than an element such as a comment.
    That is not correct though: the above loop will stop prematurely when it encounters a {{qt|QDomNode}} that is something other than an element such as a comment.
    Line 348: Line 463:
    The correct loop looks like:  
    The correct loop looks like:  


    <code cppqt>
    <syntaxhighlight lang="cpp-qt">
    for ( QDomNode n = baseElement.firstChild(); !n.isNull();
    for ( QDomNode n = baseElement.firstChild(); !n.isNull();
           n = n.nextSibling() ) {
           n = n.nextSibling() ) {
    Line 357: Line 472:
         ...
         ...
    }
    }
    </code>
    </syntaxhighlight>

    Revision as of 10:21, 27 July 2015


    Common Programming Mistakes
    Tutorial Series   Getting Started
    Previous   None
    What's Next   n/a
    Further Reading   APIs to avoid

    Abstract

    This tutorial aims to combine the experience of KDE developers regarding Qt and KDE frameworks dos and don'ts. Besides actual mistakes, it also covers things which are not necessarily "bugs" but which make the code either slower or less readable.

    General C++

    This section guides you through some of the more dusty corners of C++ which either tend to be misused or which people often simply get wrong.

    Anonymous namespaces vs statics

    If you have a method in a class that does not access any members and therefore does not need an object to operate, make it static. If additionally it is a private helper function that is not needed outside of the file, make it a file-static function. That hides the symbol completely.

    Symbols defined in a C++ anonymous namespace do not have internal linkage. Anonymous namespaces only give a unique name for that translation unit and that is it; they do not change the linkage of the symbol at all. Linkage is not changed on those because the second phase of two-phase name lookup ignores functions with internal linkages. Also, entities with internal linkage cannot be used as template arguments.

    So for now instead of using anonymous namespaces use static if you do not want a symbol to be exported.

    NULL pointer issues

    First and foremost: it is fine to delete a null pointer. So constructs like this that check for null before deleting are simply redundant:

    if ( ptr ) {
       delete ptr;
    }
    

    Note however, that a null check is required when you delete an array - that's because a relatively recent compiler on Solaris does not handle it properly otherwise.

    When you delete a pointer, make sure you also set it to 0 so that future attempts to delete that object will not fail in a double delete. So the complete and proper idiom is:

    delete ptr; 
    ptr = 0;
    

    You may notice that null pointers are marked variously in one of four ways: 0, 0L, NULL and nullptr. In C, NULL is defined as a null void pointer. In C++, more type safety is possible due to stricter type checking. Modern C++11 implementations (and all C++14 implementations) define NULL to equal the special value nullptr. Nullptr can be automatically cast to boolean false, but a cast to an integer type will fail. This is useful to avoid accidentally. Older C++ implementations before c++11 simply defined NULL to 0L or 0, which provides no additional type safety - one could assign it to an integer variable, which is obviously wrong. For code which does not need to support outdated compilers the best choice is nullptr.

    In pointer context, the integer constant zero means "null pointer" - irrespective of the actual binary representation of a null pointer. Note, however, that if you want to pass a null pointer constant to a function in a variable argument list, you *must* explicitly cast it to a pointer - the compiler assumes integer context by default, which might or might not match the binary representation of a pointer.

    Member variables

    You will encounter four major styles of marking class member variables in KDE, besides unmarked members:

    • m_variable lowercase m, underscore and the name of the variable starting with a lowercase letter. This is the most common style and one prefered for code in kdelibs.
    • mVariable lowercase m and the name of variable starting with a uppercase letter
    • variable_ variable name starting with a lowercase letter and then an underscore
    • _variable underscore and the name of variable starting with a lowercase letter. This style is actually usually frowned upon as this notation is also used in some code for function parameters instead.

    Unmarked members are more common in the case of classes that use d-pointers.

    As it often happens there is not one correct way of doing it, so remember to always follow the syntax used by the application/library to which you are committing. If you're creating a new file, you may want to follow the coding style of the library or module you're adding the file to.

    Note that symbols starting with undercores are reserved to the C library (underscore followed by capital or double underscore are reserved to the compiler), so if you can, avoid using the last type.

    Static variables

    Try to limit the number of static variables used in your code, especially when committing to a library. Construction and initialization of large number of static variables really hurts the startup times.

    Do not use class-static variables, especially not in libraries and loadable modules though it is even discouraged in applications. Static objects lead to lots of problems such as hard to debug crashes due to undefined order of construction/destruction.

    Instead, use a static pointer, together with K_GLOBAL_STATIC which is defined in kglobal.h and is used like this:

    class A { ... };
    
    K_GLOBAL_STATIC(A, globalA)
    
    void doSomething()
    {
         A *a = globalA;
         ...
    }
    
    void doSomethingElse()
    {
        if (globalA.isDestroyed()) {
            return;
        }
        A *a = globalA;
        ...
    }
    
    void installPostRoutine()
    {
        qAddPostRoutine(globalA.destroy);
    }
    

    See the API documentation for K_GLOBAL_STATIC for more information.

    Constant data

    If you need some constant data of simple data types in several places, you do good by defining it once at a central place, to avoid a mistype in one of the instances. If the data changes there is also only one place you need to edit.

    Even if there is only one instance you do good by defining it elsewhere, to avoid so-called "magic numbers" in the code which are unexplained (cmp. 42). Usually this is done at the top of a file to avoid searching for it.

    Define the constant data using the language constructs of C++, not the preprocessor instructions, like you may be used to from plain C. This way the compiler can help you to find mistakes by doing type checking.

    // Correct!
    static const int AnswerToAllQuestions = 42;
    // Wrong!
    #define AnswerToAllQuestions 42
    


    If defining a constant array do not use a pointer as data type. Instead use the data type and append the array symbol with undefined length, [], behind the name. Otherwise you also define a variable to some const data. That variable could mistakenly be assigned a new pointer to, without the compiler complaining about. And accessing the array would have one indirection, because first the value of the variable needs to be read.

    // Correct!
    static const char SomeString[] = "Example";
    // Wrong!
    static const char* SomeString = "Example";
    // Wrong!
    #define SomeString "Example"
    

    Forward Declarations

    You will reduce compile times by forward declaring classes when possible instead of including their respective headers. The rules for when a type can be used without being defined are a bit subtle, but intuitively, if the only important aspect is the name of the class, not the details of its implementation, a forward declaration is permissible. Two examples are when declaring pointers to the class or using the class as as a function argument.

    For example:

    #include <QWidget>     // slow
    #include <QStringList> // slow
    #include <QString>     // slow
    #include <QIcon>      //slow
    class SomeClass
    {
    public:
        virtual void widgetAction( QWidget *widget ) =0;
        virtual void stringAction( const QString& str ) =0;
        virtual void stringListAction( const QStringList& strList ) =0;
    private: 
        QIcon *icon;
    };
    

    The above should instead be written like this:

    class QWidget;     // fast
    class QStringList; // fast
    class QString;     // fast
    class QIcon;      // fast
    class SomeClass
    {
    public:
        virtual void widgetAction( QWidget *widget ) =0;
        virtual void stringAction( const QString& str ) =0;
        virtual void stringListAction( const QStringList& strList ) =0;
    private: 
        QIcon *icon;
    };
    

    Iterators

    Prefer const iterators and cache end()

    Prefer to use const_iterators over normal iterators when possible. Containers, which are being implicitly shared often detach when a call to a non-const begin() or end() methods is made (QList is an example of such a container). When using a const_iterator also watch out that you are really calling the const version of begin() and end(). Unless your container is actually const itself this probably will not be the case, possibly causing an unnecessary detach of your container. So basically whenever you use const_iterator initialize them using constBegin()/constEnd() instead, to be on the safe side.

    Cache the return of the end() (or constEnd()) method call before doing iteration over large containers. For example:

    QList<SomeClass> container;
    
    //code which inserts a large number of elements to the container
    
    QList<SomeClass>::ConstIterator end = container.constEnd();
    QList<SomeClass>::ConstIterator itr = container.constBegin();
    
    for ( ; itr != end; ++itr ) {
        // use *itr (or itr.value()) here
    }
    

    This avoids the unnecessary creation of the temporary end() (or constEnd()) return object on each loop iteration, largely speeding it up.

    When using iterators, always use pre-increment and pre-decrement operators (i.e., ++itr) unless you have a specific reason not to. The use of post-increment and post-decrement operators (i.e., itr++) cause the creation of a temporary object.

    Take care when erasing elements inside a loop

    When you want to erase some elements from the list, you maybe would use code similar to this:

    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    QMap<int, Job *>::iterator itEnd = m_activeTimers.end();
    
    for( ; it != itEnd ; ++it) {
        if(it.value() == job) {
            //A timer for this job has been found. Let's stop it.
            killTimer(it.key());
            m_activeTimers.erase(it);
        }
    }
    

    This code will potentially crash because it is a dangling iterator after the call to erase(). You have to rewrite the code this way:

    QMap<int, Job *>::iterator it = m_activeTimers.begin();
    while (it != m_activeTimers.end()) {
        if(it.value() == job) {
            //A timer for this job has been found. Let's stop it.
            killTimer(it.key());
            it = m_activeTimers.erase(it);
        } else {
            ++it;
        }
    }
    

    This problem is also discussed in the Qt documentation for QMap::iterator but applies to all Qt iterators

    memory leaks

    A very "popular" programming mistake is to do a new without a delete like in this program:

    mem_gourmet.cpp

    class t
    {
        public:
          t() {}
    };
    
    void pollute()
    {
        t* polluter = new t();
    }
    
    int main()
    {
        while (true) pollute();
    }
    

    You see, pollute() instanciates a new object polluter of the class t. Then, the variable polluter is lost because it is local, but the content (the object) stays on the heap. I could use this program to render my computer unusable within 10 seconds.

    To solve this, there are the following approaches:

    • keep the variable on the stack instead of the heap:
    t* polluter = new t();
    

    would become

     
    t polluter;
    
    • delete polluter using the complementing function to new:
     
    delete polluter;
    
    • stop the polluter in an [1] (which will automatically delete the polluter when returning from the method)
     std::unique_ptr<t> polluter = new t();
    

    There's also std::shared_ptr and QSharedPointer. This is the generally preferred way to do it in modern C++; explicit memory management should be avoided when possible.

    Qt code involving QObject generally uses parent/child relations to free allocated memory; when constructing a QObject (e.g. a widget) it can be given a parent, and when the parent is deleted it deletes all its children. The parent is also set when you add a widget to a layout, for example.

    A tool to detect memory leaks like this is Valgrind.

    dynamic_cast

    You can only dynamic_cast to type T from type T2 provided that:

    • T is defined in a library you link to (you'd get a linker error if this isn't the case, since it won't find the vtable or RTTI info)
    • T is "well-anchored" in that library. By "well-anchored" I mean that the vtable is not a COMMON symbol subject to merging at run-time by the dynamic linker. In other words, the first virtual member in the class definition must exist and not be inlined: it must be in a .cpp file.
    • T and T2 are exported

    For instance, we've seen some hard-to-track problems in non-KDE C++ code we're linking with (I think NMM) because of that. It happened that:

    • libphonon loads the NMM plugin
    • NMM plugin links to NMM
    • NMM loads its own plugins
    • NMM's own plugins link to NMM

    Some classes in the NMM library did not have well-anchored vtables, so dynamic_casting failed inside the Phonon NMM plugin for objects created in the NMM's own plugins.

    Program Design

    In this section we will go over some common problems related to the design of Qt/KDE applications.

    Delayed Initialization

    Although the design of modern C++ applications can be very complex, application windows can be loaded and displayed to the user very quickly through the technique of delayed initialization. This technique is relatively straightforward and useful at all stages of an interactive program.

    First, let us look at the standard way of initializing a KDE application:

    int main( int argc, char **argv )
    {
        ....
        KApplication a;
    
        KCmdLineArgs *args = KCmdLineArgs::parsedArgs();
    
        MainWindow *window = new MainWindow( args );
    
        a.setMainWidget( window );
        window->show();
    
        return a.exec();
    }
    

    Notice that window is created before the a.exec() call that starts the event loop. This implies that we want to avoid doing anything non-trivial in the top-level constructor, since it runs before we can even show the window.

    The solution is simple: we need to delay the construction of anything besides the GUI until after the event loop has started. Here is how the example class MainWindow's constructor could look to achieve this:

    MainWindow::MainWindow()
    {
        initGUI();
        QTimer::singleShot( 0, this, SLOT(initObject()) );
    }
    
    void MainWindow::initGUI()
    {
        /* Construct your widgets here.  Note that the widgets you
         * construct here shouldn't require complex initialization
         * either, or you've defeated the purpose.
         * All you want to do is create your GUI objects and
         * QObject::connect
         * the appropriate signals to their slots.
         */
    }
    
    void MainWindow::initObject()
    {
        /* This slot will be called as soon as the event loop starts.
         * Put everything else that needs to be done, including
         * restoring values, reading files, session restoring, etc here.
         * It will still take time, but at least your window will be
         * on the screen, making your app look active.
         */
    }
    

    Using this technique may not buy you any overall time, but it makes your app seem quicker to the user who is starting it. This increased perceived responsiveness is reassuring for the user as they get quick feedback that the action of launching the app has succeeded.

    When (and only when) the start up can not be made reasonably fast enough, consider using a KSplashScreen.

    Data Structures

    In this section we will go over some of our most common pet-peeves which affect data structures very commonly seen in Qt/KDE applications.

    Passing non-POD types

    Non-POD ("plain old data") types should be passed by const reference if at all possible. This includes anything other than the basic types such as char and int.

    Take, for instance, QString. They should always be passed into methods as const QString&. Even though QString is implicitly shared it is still more efficient (and safer) to pass const references as opposed to objects by value.

    So the canonical signature of a method taking QString arguments is:

    void myMethod( const QString & foo, const QString & bar );
    

    QObject

    If you ever need to delete a QObject derived class from within one of its own methods, do not ever delete it this way:

    delete this;
    

    This will sooner or later cause a crash because a method on that object might be invoked from the Qt event loop via slots/signals after you deleted it.

    Instead always use QObject::deleteLater() which tries to do the same thing as delete this but in a safer way.

    Empty QStrings

    It is common to want to see if a QString is empty. Here are three ways of doing it, the first two of which are correct:

    // Correct
    if ( mystring.isEmpty() ) {
    }
    
    // Correct
    if ( mystring == QString() ) {
    }
    
    // Wrong! ""
    if ( mystring == "" ) {
    }
    

    While there is a distinction between "null" QStrings and empty ones, this is a purely historical artifact and new code is discouraged from making use of it.

    QString and reading files

    If you are reading in a file, it is faster to convert it from the local encoding to Unicode (QString) in one go, rather than line by line. This means that methods like QIODevice::readAll() are often a good solution, followed by a single QString instantiation.

    For larger files, consider reading a block of lines and then performing the conversion. That way you get the opportunity to update your GUI. This can be accomplished by reentering the event loop normally, along with using a timer to read in the blocks in the background, or by creating a local event loop.

    While one can also use qApp->processEvents(), it is discouraged as it easily leads to subtle yet often fatal problems.

    Reading QString from a KProcess

    KProcess emits the signals readyReadStandard{Output|Error} as data comes in. A common mistake is reading all available data in the connected slot and converting it to QString right away: the data comes in arbitrarily segmented chunks, so multi-byte characters might be cut into pieces and thus invalidated. Several approaches to this problem exist:

    • Do you really need to process the data as it comes in? If not, just use readAllStandard{Output|Error} after the process has exited. Unlike in KDE3, KProcess is now able to accumulate the data for you.
    • Wrap the process into a QTextStream and read line-wise. This should work starting with Qt 4.4.
    • Accumulate data chunks in the slots and process them each time a newline arrives or after some timeout passes. Example code

    QString and QByteArray

    While QString is the tool of choice for many string handling situations, there is one where it is particularly inefficient. If you are pushing about and working on data in QByteArrays, take care not to pass it through methods which take QString parameters; then make QByteArrays from them again.

    For example:

    QByteArray myData;
    QString myNewData = mangleData( myData );
    
    QString mangleData( const QString& data ) {
        QByteArray str = data.toLatin1();
        // mangle 
        return QString(str);
    }
    

    The expensive thing happening here is the conversion to QString, which does a conversion to Unicode internally. This is unnecessary because, the first thing the method does is convert it back using toLatin1(). So if you are sure that the Unicode conversion is not needed, try to avoid inadvertently using QString along the way.

    The above example should instead be written as:

    QByteArray myData;
    QByteArray myNewData = mangleData( myData );
    
    QByteArray mangleData( const QByteArray& data )
    

    QDomElement

    When parsing XML documents, one often needs to iterate over all the elements. You may be tempted to use the following code for that:

    for ( QDomElement e = baseElement.firstChild().toElement();
          !e.isNull();
          e = e.nextSibling().toElement() ) {
           ...
    }
    

    That is not correct though: the above loop will stop prematurely when it encounters a QDomNode that is something other than an element such as a comment.

    The correct loop looks like:

    for ( QDomNode n = baseElement.firstChild(); !n.isNull();
          n = n.nextSibling() ) {
        QDomElement e = n.toElement();
        if ( e.isNull() ) {
            continue;
        }
        ...
    }