Nullability: между добром и злом

Transcript

1. Nullability — между добром и злом Тагир Валеев 1
3. Nullability — между добром и злом Тагир Валеев 3
7. 7 http://geek-and-poke.com/
14. Динамическая типизация А нам особо-то без разницы http://www.fowllanguagecomics.com/ 14
15. Типизация Динамическая Статическая Явная Неявная Сильная Слабая 15
26. lan@box:/test$ gcc test.c -o test lan@box:/test$ ./test Segmentation fault (core dumped) lan@box:/test$ 26
27. §6.5.3.3 The unary * operator denotes indirection. If the operand points to a function, the result is a function designator; if it points to an object, the result is an lvalue designating the object. If the operand has type ‘‘pointer to type’’, the result has type ‘‘type’’. If an invalid value has been assigned to the pointer, the behavior of the unary * operator is undefined. 84) 84) ... Among the invalid values for dereferencing a pointer by the unary * operator are a null pointer, an address inappropriately aligned for the type of object pointed to, and the address of an object after the end of its lifetime. ISO/IEC 9899 International Standard – Programming Languages – C 27
28. §6.5.3.3 The unary * operator denotes indirection. If the operand points to a function, the result is a function designator; if it points to an object, the result is an lvalue designating the object. If the operand has type ‘‘pointer to type’’, the result has type ‘‘type’’. If an invalid value has been assigned to the pointer, the behavior of the unary * operator is undefined. 84) 84) ... Among the invalid values for dereferencing a pointer by the unary * operator are a null pointer, an address inappropriately aligned for the type of object pointed to, and the address of an object after the end of its lifetime. ISO/IEC 9899 International Standard – Programming Languages – C 28
29. 29 lan@box:/test$ clang-3.5 –O3 test.c -o test lan@box:/test$ ./test 0 lan@box:/test$
30. http://copy1cat.deviantart.com/art/lol-i-dunno-base-255335342 30
32. I call it my billion-dollar mistake. It was the invention of the null reference in 1965. At that time, I was designing the first comprehensive type system for references in an object oriented language (ALGOL W). My goal was to ensure that all use of references should be absolutely safe, with checking performed automatically by the compiler. But I couldn't resist the temptation to put in a null reference, simply because it was so easy to implement. This has led to innumerable errors, vulnerabilities, and system crashes, which have probably caused a billion dollars of pain and damage in the last forty years. Tony Hoare, 2009 32
37. 37 http://geek-and-poke.com/
56. public class Person { private String name; private String surname; public Person(Company company) :name(""), surname("") { company.chief = this; } ... } 56
57. 57 Вас здесь не стояло! Я вчера ещё занимала!
103. GHCi, version 8.0.2: http://www.haskell.org/ghc/ :? for help Prelude> :l ParentChild.hs [1 of 1] Compiling ParentChild (ParentChild.hs, interpreted ) Ok, modules loaded: ParentChild. *ParentChild> (p, c) = create "Курица" "Яйцо" *ParentChild> p Parent named Курица *ParentChild> c Child named Яйцо *ParentChild> child p Child named Яйцо *ParentChild> parent c Parent named Курица *ParentChild> child (parent (child p)) Child named Яйцо 103
104. Выводы • Используйте статическую типизацию • Прорабатывайте систему типов • Используйте статический анализ • Верьте спецификации, а не реализации • Учитесь пользоваться и не пользоваться новыми API • Изучайте языки программирования • Расширяйте кругозор 104
105. https://twitter.com/tagir_valeev https://habrahabr.ru/users/lany https://github.com/amaembo tagir.valeev@jetbrains.com Спасибо за внимание — jetbrains.com 105