1. Interface conventions¶
This document describes the conventions used in the programming interface to the Memory Pool System. It also contains our policy for support for the public identifiers and definitions of general types that appear throughout the interface.
1.1. Support policy¶
We support the documented behaviour of public symbols in the MPS interface. We will only remove these symbols or change their behaviour in a new version, and not in a patch release. Normally we will give one version’s notice before removing a symbol or changing a particular documented behaviour: that is, there will be a version in which the symbol (or reliance on some of its behaviour) is deprecated.
Note
If you are relying on a feature and you see that it’s deprecated, please contact us. It makes a difference if we know that someone is using a feature.
Behaviour that is not documented in the Guide, Reference, or Pool reference is not supported and may change without notice in future releases. In particular, private identifiers may disappear or their behaviour be changed without notice in future releases.
1.2. Language¶
The MPS public interface conforms to ANSI/ISO Standard C (IEC 9899:1990).
1.3. Headers¶
The main interface is in the header
mps.h
. This header contains all the core MPS interfaces. In practice, you always need at least one arena class and one pool class header file as well.We will always prefix public header file names with
mps
to avoid clashes. We reserve the right to create new headers with names beginning withmps
in future versions.Pool class headers have names beginning with
mpsc
. For example, the header for AMC (Automatic Mostly-Copying) ismpscamc.h
.Arena class headers have names beginning with
mpsa
. For example, the header for the virtual memory arena class ismpsavm.h
.
1.4. Identifiers¶
Identifiers are in lower case, except for preprocessor constants and macros that do not behave like functions, which are in upper case. Words are joined by underscores.
All identifiers are either public or private.
The names of public types, functions, variables, and macros start with
mps_
orMPS_
. The names of public structure members start with any letter.Private identifiers start with an underscore
_
.Type names end with
_t
, except for structure and union types.The names of structure types and tags end with
_s
.The names of union types and tags end with
_u
.
1.5. Types¶
There are three kinds of types declared in the MPS interface: transparent types, opaque types, and derived types.
A transparent type is an alias defined using
typedef
, and this is documented so that the client program can rely on that fact. For example,mps_addr_t
is a transparent alias forvoid *
. Transparent types express intentions in the interface: in the case ofmps_addr_t
it represents a pointer that is under the control of the MPS.An opaque type is a pointer to an incomplete structure type. The client program must not rely on details of its implementation. For example, the type
mps_arena_t
is an alias forstruct mps_arena_s *
, but the implementation ofstruct mps_arena_s
is not public.There are a few structure types that are declared in
mps.h
but whose implementation is not public. These only exist so that code can be inlined using macros. The most important of these is the scan state structuremps_ss_s
, which is accessed by scanning macros such asMPS_SCAN_BEGIN()
andMPS_FIX12()
.A derived type is a structure or function type based on transparent and opaque types and on built-in C types. The degree to which you may or must depend upon the implementation of a derived type is covered by the documentation for the type. For example, the structure type
mps_ap_s
has a mixture of public and private members.
1.6. Functions¶
Operations that might fail return a result code, rather than a “special value” of the return type. See Error handing.
A function that needs to return a value as well as a result code returns the value via an out parameter, a parameter that points to a location to store the result.
A function that stores a result in the location pointed to by an out parameter only does so if the function is successful (that is, if the function returns
MPS_RES_OK
).The value in the location pointed to by an out parameter is not read by the function.
Out parameters have names ending with
_o
.A function that both needs to read a value stored in a location and update the value does so via an in/out parameter, which is the same as an out parameter except that the location it points to is read by the function. See for example
MPS_FIX12()
.In/out parameters have names ending with
_io
.
1.7. Type punning¶
It’s tempting to use a type cast to change the type of an in/out or out parameter, like this:
/* allocate a struct foo */
struct foo *fp;
res = mps_alloc((mps_addr_t *)&fp, pool, sizeof(struct foo));
This is known as type punning, and its behaviour is not defined in ANSI/ISO Standard C. See ISO/IEC 9899:1990 §6.3.2.3, which defines the conversion of a pointer from one type to another: the behaviour of this cast is not covered by any of the cases in the standard.
Instead, we recommend this approach:
mps_addr_t p;
struct foo *fp;
res = mps_alloc(&p, pool, sizeof(struct foo));
if(res) /* handle error case */;
fp = (struct foo *)p;
This is portable because conversion from void *
to any other
object pointer type is defined by ISO/IEC 9899:1990 §6.3.2.3.1.
1.8. Macros¶
For function-like macros, the MPS follows the same convention as the Standard C library. To quote ISO/IEC 9899:1990 §7.1.7:
Any function declared in a header may additionally be implemented as a macro defined in the header, so a library function should not be declared explicitly if its header is included. Any macro definition of a function can be suppressed locally be enclosing the name of the function in parentheses, because the name is then not followed by the left parenthesis that indicates expansion of a macro function name. […] Any invocation of a library function that is implemented as a macro shall expand to code that evaluates each of its arguments exactly once, fully protected by parentheses where necessary, so it is generally safe to use arbitrary expressions as arguments.
Some function-like macros evaluate an argument more than once, so it is not safe to have a side effect in an argument of such a method. These special cases are documented. For example,
mps_reserve()
.If you need the function rather than the macro, there are two approaches. You can undefine the macro:
#undef mps_reserve res = mps_reserve(...); /* calls function */
Or you can put the name in parentheses:
res = (mps_reserve)(...); /* calls function */
Statement-like macros have names in uppercase, for example
MPS_RESERVE_BLOCK()
. These macros behave like statements rather than expressions, so that you cannot write:(MPS_RESERVE_BLOCK(res, p, ap, size), 0)
Details of the macro expansion, although visible in the header file, are not part of the MPS interface, and might change between releases. Don’t rely on them, unless they are documented separately.
1.9. General types¶
-
mps_addr_t
¶ The type of addresses managed by the MPS, and also the type of references.
It is a transparent alias for
void *
.It is used in the MPS interface for any pointer that is under the control of the MPS. In accordance with standard C practice, null pointers of type
mps_addr_t
will never be used to represent a reference to a block.
-
mps_align_t
¶ The type of an alignment.
It is a transparent alias for
size_t
.An alignment must be a positive power of 2.
-
mps_bool_t
¶ The type of a Boolean value.
It is a transparent alias for
int
.When used as an input parameter to the MPS, a value of 0 means “false” and any other value means “true”. As an output parameter or function return from the MPS, 0 means “false”, and 1 means “true”.
-
mps_clock_t
¶ The type of a processor time.
It is a transparent alias for
mps_word_t
.This is the type returned by the plinth function
mps_clock()
.
-
mps_label_t
¶ The type of a telemetry label.
It is an unsigned integral type.
-
mps_word_t
¶ An unsigned integral type that is the same size as an object pointer, so that
sizeof(mps_word_t) == sizeof(void *)
.The exact identity of this type is platform-dependent. Typical identities are
unsigned long
andunsigned __int_64
.Topic