18 lines
1.9 KiB
Plaintext
18 lines
1.9 KiB
Plaintext
|
This rule refers to the technique of using memory to store some data, and then using the same memory to store unrelated data at some other time during the execution of the program. Clearly it relies on the two different pieces of data existing at disjoint periods of the program’s execution, and never being required simultaneously.
|
|||
|
|
|
|||
|
|
This practice is not recommended for safety-related systems as it brings with it a number of dangers. For example: a program might try to access data of one type from the location when actually it is storing a value of the other type (e.g. due to an interrupt). The two types of data may align differently in the storage, and encroach upon other data. Therefore the data may not be correctly initialised every time the usage switches. The practice is particularly dangerous in concurrent systems.
|
|||
|
|
|
|||
|
|
However it is recognised that sometimes such storage sharing may be required for reasons of efficiency.
|
|||
|
|
|
|||
|
|
Where this is the case it is essential that measures are taken to ensure that the wrong type of data can never be accessed, that data is always properly initialised and that it is not possible to access parts of other data (e.g. due to alignment differences). The measures taken shall be documented and justified in the deviation that is raised against this rule.
|
|||
|
|
|
|||
|
|
This might be achieved by the use of unions, or various other means.
|
|||
|
|
|
|||
|
|
Note that there is no intention in the MISRA-C guidelines to place restrictions on how a compiler actually translates source code as the user generally has no effective control over this. So for example, memory allocation within the compiler whether dynamic heap, dynamic stack or static, may vary significantly with only slight code changes even at the same level of optimisation. Note also that some optimisation may legitimately take place even when the user makes no specific request for this.
|
|||
|
|
|
|||
|
|
|
|||
|
|
== See
|
|||
|
|
|
|||
|
|
* MISRA C:2004, 18.3
|
|||
|
|
|