Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create rule S7172 Named methods should be used to avoid confusion between testing an optional or an expected and testing the wrapped value CPP-5929 #4545

Open
wants to merge 8 commits into
base: master
Choose a base branch
from
23 changes: 23 additions & 0 deletions rules/S7172/cfamily/metadata.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
{
"title": "Named methods should be used to avoid confusion between testing an optional or an expected and testing the wrapped value",
"type": "CODE_SMELL",
"status": "ready",
"remediation": {
"func": "Constant\/Issue",
"constantCost": "10min"
},
"tags": ["confusing"
],
"defaultSeverity": "Major",
"ruleSpecification": "RSPEC-7172",
"sqKey": "S7172",
"scope": "All",
"defaultQualityProfiles": ["Sonar way"],
"quickfix": "unknown",
"code": {
"impacts": {
"MAINTAINABILITY": "HIGH"
},
"attribute": "CLEAR"
}
}
128 changes: 128 additions & 0 deletions rules/S7172/cfamily/rule.adoc
Original file line number Diff line number Diff line change
@@ -0,0 +1,128 @@
FIXME: add a description
tomasz-kaminski-sonarsource marked this conversation as resolved.
Show resolved Hide resolved

// If you want to factorize the description uncomment the following line and create the file.
//include::../description.adoc[]

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would add a line here:

This rule raises an issue when std::optional, boost::optional, or std::expected wrap a basic type, and the conversion to bool is used to test presence of the value.

In SonarLint it is just displayed below the title and before the tabs, saying while this is an issue. So it is good place, to give tldr of the rule

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

== Why is this an issue?

`std::optional`, `boost::optional`, and `std::expected` are types that allow to represent a contained value of a certain type, and additional data that denote the absence of a value (`nullopt` for `optional`, and error values for `expected`). To check if the wrapper contains a value, it is possible to call the member function `has_value()`. It is equivalent to converting the wrapper to `bool`, which can be more concise, especially when used in a place that allows _contextual conversion to bool_ (for instance, the condition of an `if`). It means that the following syntax is valid:
tomasz-kaminski-sonarsource marked this conversation as resolved.
Show resolved Hide resolved

[source,cpp]
----
std::optional<bool> flag;
if(flag) { ... }
// Equivalent to
if(flag.has_value()) { ... }
----

When the wrapped type is also convertible to `bool`, using this concise syntax can be confusing. What is tested: The wrapper, or the wrapped value?
This rule raises an issue when `std::optional`, `boost::optional`, or `std::expected` wrap a basic type, and the presence of the value is tested with the concise syntax. However, if in a single expression, the presence of the value is tested and the value is accessed, the risk of confusion is reduced, and no violation is raised.
tomasz-kaminski-sonarsource marked this conversation as resolved.
Show resolved Hide resolved

=== What is the potential impact?

There are two possibilities, depending on the initial intent of the autor of the code:

- If the intent was actually to test the presence of the value, the code is correct, but it is not clear. When reading it, people might think that the wrapped value is tested, and not the presence of the value.

- If the intent was to test the wrapped value, the code is incorrect. This situation can especially happen when evolving code that worked directly with values to work with optional or expected values, and forgetting to update the test. This will lead to code that does not behave in the intended way, but still works in a plausible way, and the lack of clear clue on twhat is tested makes finding the issue difficult.

== How to fix it

The most direct way to fix this issue is to replace the concise syntax with a more verbose call to `has_value()`. However, both syntaxes leads to a code that is full of `if`/`else` and becomes difficult to read, especially if the program works with many `optional` or `expected` values.

In many circumstances, it is possible to write code in a more direct way, using member functions such as `value_or()` or, starting with {cpp}23, the monadic interface of `optional` and `expected` (`and_then()`, `transform()` and `or_else()`), which are especially convenient when chaining operations on those types.


//== How to fix it in FRAMEWORK NAME

=== Code examples

[source,cpp,diff-id=2,diff-type=compliant]

==== Noncompliant code example

[source,cpp]
----
void perform(Node node, optional<bool> recursive, Action action) {
action(node);
bool recurse;
if (recursive) {
recurse = *recursive;
} else {
recurse = getDefaultRecurseMode();
}
if (recurse) {
// perform recursion...
}
}
----

==== Compliant solution

The most direct solution is to replace the concise syntax by the more explicit one.

[source,cpp]
----
void perform(Node node, optional<bool> recursive, Action action) {
action(node);
bool recurse;
if (recursive.has_value()) {
recurse = recursive.value();
} else {
recurse = getDefaultRecurseMode();
}
if (recurse) {
// perform recursion...
}
}
----

Since the rule will not trigger if the value is accessed in the same expression where its presence is tested, another possibility if the following:

[source,cpp]
----
void perform(Node node, optional<bool> recursive, Action action) {
action(node);
bool recurse = recursive ? *recursive : getDefaultRecurseMode();
if (recurse) {
// perform recursion...
}
}
----

In this simple case, the use of both `recursive` and `++*recursive++` hints that recursive is more than a simple `bool`. However, it is possible to write the code with a higher level semantic:

[source,cpp]
----
void perform(Node node, optional<bool> recursive, Action action) {
action(node);
bool recurse = recursive.value_or(getDefaultRecurseMode());
if (recurse) {
// perform recursion...
}
}
----
The downside of this version is that `getDefaultRecurseMode()` is called even if `recursive` contains a value. If `getDefaultRecurseMode()` is a complex function, it can be a performance issue. In this case, it is possible to use the monadic interface of `optional`, at the cost of a more complex syntax:

[source,cpp]
----
void perform(optional<bool> recursive) {
bool recurse = recursive.or_else([]() -> optional<bool> { return getDefaultRecurseMode();}).value();
tomasz-kaminski-sonarsource marked this conversation as resolved.
Show resolved Hide resolved
if (recurse) {
// perform recursion...
}
}
----

This syntax is more complex, but it is also more flexible, especially when chaining operations on `optional` or `expected` values.

== Resources
=== Documentation

* {cpp} reference - https://en.cppreference.com/w/cpp/utility/optional[`std::optional`]
* {cpp} reference - https://en.cppreference.com/w/cpp/utility/expected[`std::expected`]
* {cpp} reference - https://en.cppreference.com/w/cpp/utility/optional[`std::optional`]

=== Articles & blog posts

* Microsoft Developper Blog - * https://devblogs.microsoft.com/oldnewthing/20211004-00/?p=105754[Some lesser-known powers of std::optional]
2 changes: 2 additions & 0 deletions rules/S7172/metadata.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,2 @@
{
}
Loading