2012-05-30 20:13:09 +02:00
|
|
|
/*
|
|
|
|
* \brief Assertion macro
|
|
|
|
* \author Martin Stein
|
|
|
|
* \date 2012-04-04
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
2013-01-10 21:44:47 +01:00
|
|
|
* Copyright (C) 2012-2013 Genode Labs GmbH
|
2012-05-30 20:13:09 +02:00
|
|
|
*
|
|
|
|
* This file is part of the Genode OS framework, which is distributed
|
|
|
|
* under the terms of the GNU General Public License version 2.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef _CORE__INCLUDE__ASSERT_H_
|
|
|
|
#define _CORE__INCLUDE__ASSERT_H_
|
|
|
|
|
|
|
|
/* Genode includes */
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
#include <base/log.h>
|
2012-05-30 20:13:09 +02:00
|
|
|
|
2014-02-26 11:18:22 +01:00
|
|
|
/**
|
|
|
|
* Suppress assertions in release version
|
|
|
|
*/
|
|
|
|
#ifdef GENODE_RELEASE
|
|
|
|
#define DO_ASSERT false
|
|
|
|
#else
|
|
|
|
#define DO_ASSERT true
|
|
|
|
#endif /* GENODE_RELEASE */
|
2013-09-06 10:29:06 +02:00
|
|
|
|
2012-05-30 20:13:09 +02:00
|
|
|
/**
|
2013-09-06 10:29:06 +02:00
|
|
|
* Make an assertion
|
|
|
|
*
|
|
|
|
* \param expression statement that must be true
|
2012-05-30 20:13:09 +02:00
|
|
|
*
|
2013-09-06 10:29:06 +02:00
|
|
|
* Use this macro as if it could always be empty as well.
|
|
|
|
* I.e. it should not be used with expressions that are relevant
|
|
|
|
* to the protection against another, untrusted PD or expressions
|
|
|
|
* that contain mandatory function calls! A good rule of thumb
|
|
|
|
* is to use it only for the protection of a component against
|
|
|
|
* a PD-local interface misuse that can't be avoided due to language
|
|
|
|
* constraints (e.g. inaccuracy of integer ranges).
|
2012-05-30 20:13:09 +02:00
|
|
|
*/
|
|
|
|
#define assert(expression) \
|
|
|
|
do { \
|
2014-02-26 11:18:22 +01:00
|
|
|
if (DO_ASSERT) { \
|
2013-09-06 10:29:06 +02:00
|
|
|
if (!(expression)) { \
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
Genode::error("Assertion failed: "#expression""); \
|
|
|
|
Genode::error(" File: ", __FILE__, ":", __LINE__); \
|
|
|
|
Genode::error(" Function: ", __PRETTY_FUNCTION__); \
|
2013-09-06 10:29:06 +02:00
|
|
|
while (1) ; \
|
|
|
|
} \
|
2012-05-30 20:13:09 +02:00
|
|
|
} \
|
|
|
|
} while (0) ;
|
|
|
|
|
|
|
|
#endif /* _CORE__INCLUDE__ASSERT_H_ */
|