Michael Hicks comments

Results 13 comments of


                                            Michael Hicks

Joining operation throws overflow exception for small coefficients/dimensions

Hi Gagan. Your answer seems to suggest that you think there's nothing to do. Even if the algorithm is "standard," isn't it a problem if its use can easily produce...

Field access to structs with bounded and NT char arrays

So far I have skirted the initialization issue because all strings in my porting project are allocated in unchecked files. I'm nearly to the point where I can attempt to...

Field access to structs with bounded and NT char arrays

(Didn't mean to close it.) One way to allocate and initialize a `_Nt_array_ptr` is to use `calloc()` rather than `malloc()`. Perhaps we can/should do this in the short term? I.e.,...

Conversions from nt_array_ptr to const array_ptr

Seems reasonable to me. I have seen a few cases where `const` is cast away in `vsftpd` but I think we could fix those.

Provide way to declare bounds-safe interfaces for members of existing structure types.

Would you only allow redundant structs if the second one had bounds information? This would be more restrictive, perhaps avoiding problems the current spec had in mind?

Issue to track comments and updates to the proposed Checked C extension changes.

Overall this looks good! Here are a few comments. ### Including an extra header The proposal states > You would modify your C files to include a header file that...

type of calloc in stdlib_checked.h

I can't think of a better solution. What will you call it? `nt_calloc` maybe?

Casts should be excluded from checked region?

I'm not sure why the dynamic bounds cast to `ptr` is allowed. We can tell that `ptr` and `ptr` (the type of `&temp[20]`) are not compatible. If it fails at...

Fix mistakes in the "Variables at external scope" example in the spec.

David, while I think of it: Is it possible to forward from the longer link to this one? We reference the longer address in the most recent Checked C papers...

How to use `Arbitrary` generators?

Thanks! I got that to work. But: using `Arbitrary` for my recursive data type seems to be _way_ slower than using a `TypeGenerator`. Support for the latter was added with...