| <section xmlns="http://docbook.org/ns/docbook" version="5.0" |
| xml:id="std.util.memory.shared_ptr" xreflabel="shared_ptr"> |
| <?dbhtml filename="shared_ptr.html"?> |
| |
| <info><title>shared_ptr</title> |
| <keywordset> |
| <keyword>ISO C++</keyword> |
| <keyword>shared_ptr</keyword> |
| </keywordset> |
| </info> |
| |
| |
| |
| <para> |
| The shared_ptr class template stores a pointer, usually obtained via new, |
| and implements shared ownership semantics. |
| </para> |
| |
| <section xml:id="shared_ptr.req"><info><title>Requirements</title></info> |
| |
| |
| <para> |
| </para> |
| |
| <para> |
| The standard deliberately doesn't require a reference-counted |
| implementation, allowing other techniques such as a |
| circular-linked-list. |
| </para> |
| |
| <para> |
| </para> |
| </section> |
| |
| <section xml:id="shared_ptr.design_issues"><info><title>Design Issues</title></info> |
| |
| |
| |
| <para> |
| The <classname>shared_ptr</classname> code is kindly donated to GCC by the Boost |
| project and the original authors of the code. The basic design and |
| algorithms are from Boost, the notes below describe details specific to |
| the GCC implementation. Names have been uglified in this implementation, |
| but the design should be recognisable to anyone familiar with the Boost |
| 1.32 shared_ptr. |
| </para> |
| |
| <para> |
| The basic design is an abstract base class, <code>_Sp_counted_base</code> that |
| does the reference-counting and calls virtual functions when the count |
| drops to zero. |
| Derived classes override those functions to destroy resources in a context |
| where the correct dynamic type is known. This is an application of the |
| technique known as type erasure. |
| </para> |
| |
| </section> |
| |
| <section xml:id="shared_ptr.impl"><info><title>Implementation</title></info> |
| |
| |
| <section xml:id="shared_ptr.hier"><info><title>Class Hierarchy</title></info> |
| |
| |
| <para> |
| A <classname>shared_ptr<T></classname> contains a pointer of |
| type <type>T*</type> and an object of type |
| <classname>__shared_count</classname>. The shared_count contains a |
| pointer of type <type>_Sp_counted_base*</type> which points to the |
| object that maintains the reference-counts and destroys the managed |
| resource. |
| </para> |
| |
| <variablelist> |
| |
| <varlistentry> |
| <term><classname>_Sp_counted_base<Lp></classname></term> |
| <listitem> |
| <para> |
| The base of the hierarchy is parameterized on the lock policy (see below.) |
| _Sp_counted_base doesn't depend on the type of pointer being managed, |
| it only maintains the reference counts and calls virtual functions when |
| the counts drop to zero. The managed object is destroyed when the last |
| strong reference is dropped, but the _Sp_counted_base itself must exist |
| until the last weak reference is dropped. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><classname>_Sp_counted_base_impl<Ptr, Deleter, Lp></classname></term> |
| <listitem> |
| <para> |
| Inherits from _Sp_counted_base and stores a pointer of type <code>Ptr</code> |
| and a deleter of type <code>Deleter</code>. <classname>_Sp_deleter</classname> is |
| used when the user doesn't supply a custom deleter. Unlike Boost's, this |
| default deleter is not "checked" because GCC already issues a warning if |
| <function>delete</function> is used with an incomplete type. |
| This is the only derived type used by <classname>tr1::shared_ptr<Ptr></classname> |
| and it is never used by <classname>std::shared_ptr</classname>, which uses one of |
| the following types, depending on how the shared_ptr is constructed. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><classname>_Sp_counted_ptr<Ptr, Lp></classname></term> |
| <listitem> |
| <para> |
| Inherits from _Sp_counted_base and stores a pointer of type <type>Ptr</type>, |
| which is passed to <function>delete</function> when the last reference is dropped. |
| This is the simplest form and is used when there is no custom deleter or |
| allocator. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><classname>_Sp_counted_deleter<Ptr, Deleter, Alloc></classname></term> |
| <listitem> |
| <para> |
| Inherits from _Sp_counted_ptr and adds support for custom deleter and |
| allocator. Empty Base Optimization is used for the allocator. This class |
| is used even when the user only provides a custom deleter, in which case |
| <classname>allocator</classname> is used as the allocator. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><classname>_Sp_counted_ptr_inplace<Tp, Alloc, Lp></classname></term> |
| <listitem> |
| <para> |
| Used by <code>allocate_shared</code> and <code>make_shared</code>. |
| Contains aligned storage to hold an object of type <type>Tp</type>, |
| which is constructed in-place with placement <function>new</function>. |
| Has a variadic template constructor allowing any number of arguments to |
| be forwarded to <type>Tp</type>'s constructor. |
| Unlike the other <classname>_Sp_counted_*</classname> classes, this one is parameterized on the |
| type of object, not the type of pointer; this is purely a convenience |
| that simplifies the implementation slightly. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| </variablelist> |
| |
| <para> |
| C++11-only features are: rvalue-ref/move support, allocator support, |
| aliasing constructor, make_shared & allocate_shared. Additionally, |
| the constructors taking <classname>auto_ptr</classname> parameters are |
| deprecated in C++11 mode. |
| </para> |
| |
| |
| </section> |
| |
| <section xml:id="shared_ptr.thread"><info><title>Thread Safety</title></info> |
| |
| <para> |
| The |
| <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://www.boost.org/libs/smart_ptr/shared_ptr.htm#ThreadSafety">Thread |
| Safety</link> section of the Boost shared_ptr documentation says "shared_ptr |
| objects offer the same level of thread safety as built-in types." |
| The implementation must ensure that concurrent updates to separate shared_ptr |
| instances are correct even when those instances share a reference count e.g. |
| </para> |
| |
| <programlisting> |
| shared_ptr<A> a(new A); |
| shared_ptr<A> b(a); |
| |
| // Thread 1 // Thread 2 |
| a.reset(); b.reset(); |
| </programlisting> |
| |
| <para> |
| The dynamically-allocated object must be destroyed by exactly one of the |
| threads. Weak references make things even more interesting. |
| The shared state used to implement shared_ptr must be transparent to the |
| user and invariants must be preserved at all times. |
| The key pieces of shared state are the strong and weak reference counts. |
| Updates to these need to be atomic and visible to all threads to ensure |
| correct cleanup of the managed resource (which is, after all, shared_ptr's |
| job!) |
| On multi-processor systems memory synchronisation may be needed so that |
| reference-count updates and the destruction of the managed resource are |
| race-free. |
| </para> |
| |
| <para> |
| The function <function>_Sp_counted_base::_M_add_ref_lock()</function>, called when |
| obtaining a shared_ptr from a weak_ptr, has to test if the managed |
| resource still exists and either increment the reference count or throw |
| <classname>bad_weak_ptr</classname>. |
| In a multi-threaded program there is a potential race condition if the last |
| reference is dropped (and the managed resource destroyed) between testing |
| the reference count and incrementing it, which could result in a shared_ptr |
| pointing to invalid memory. |
| </para> |
| <para> |
| The Boost shared_ptr (as used in GCC) features a clever lock-free |
| algorithm to avoid the race condition, but this relies on the |
| processor supporting an atomic <emphasis>Compare-And-Swap</emphasis> |
| instruction. For other platforms there are fall-backs using mutex |
| locks. Boost (as of version 1.35) includes several different |
| implementations and the preprocessor selects one based on the |
| compiler, standard library, platform etc. For the version of |
| shared_ptr in libstdc++ the compiler and library are fixed, which |
| makes things much simpler: we have an atomic CAS or we don't, see Lock |
| Policy below for details. |
| </para> |
| |
| </section> |
| |
| <section xml:id="shared_ptr.policy"><info><title>Selecting Lock Policy</title></info> |
| |
| |
| <para> |
| </para> |
| |
| <para> |
| There is a single <classname>_Sp_counted_base</classname> class, |
| which is a template parameterized on the enum |
| <type>__gnu_cxx::_Lock_policy</type>. The entire family of classes is |
| parameterized on the lock policy, right up to |
| <classname>__shared_ptr</classname>, <classname>__weak_ptr</classname> and |
| <classname>__enable_shared_from_this</classname>. The actual |
| <classname>std::shared_ptr</classname> class inherits from |
| <classname>__shared_ptr</classname> with the lock policy parameter |
| selected automatically based on the thread model and platform that |
| libstdc++ is configured for, so that the best available template |
| specialization will be used. This design is necessary because it would |
| not be conforming for <classname>shared_ptr</classname> to have an |
| extra template parameter, even if it had a default value. The |
| available policies are: |
| </para> |
| |
| <orderedlist> |
| <listitem> |
| <para> |
| <constant>_S_atomic</constant> |
| </para> |
| <para> |
| Selected when GCC supports a builtin atomic compare-and-swap operation |
| on the target processor (see <link xmlns:xlink="http://www.w3.org/1999/xlink" xlink:href="http://gcc.gnu.org/onlinedocs/gcc/_005f_005fatomic-Builtins.html">Atomic |
| Builtins</link>.) The reference counts are maintained using a lock-free |
| algorithm and GCC's atomic builtins, which provide the required memory |
| synchronisation. |
| </para> |
| </listitem> |
| |
| <listitem> |
| <para> |
| <constant>_S_mutex</constant> |
| </para> |
| <para> |
| The _Sp_counted_base specialization for this policy contains a mutex, |
| which is locked in add_ref_lock(). This policy is used when GCC's atomic |
| builtins aren't available so explicit memory barriers are needed in places. |
| </para> |
| </listitem> |
| |
| <listitem> |
| <para> |
| <constant>_S_single</constant> |
| </para> |
| <para> |
| This policy uses a non-reentrant add_ref_lock() with no locking. It is |
| used when libstdc++ is built without <literal>--enable-threads</literal>. |
| </para> |
| </listitem> |
| |
| </orderedlist> |
| <para> |
| For all three policies, reference count increments and |
| decrements are done via the functions in |
| <filename>ext/atomicity.h</filename>, which detect if the program |
| is multi-threaded. If only one thread of execution exists in |
| the program then less expensive non-atomic operations are used. |
| </para> |
| </section> |
| |
| |
| <section xml:id="shared_ptr.rel"><info><title>Related functions and classes</title></info> |
| |
| |
| <variablelist> |
| |
| <varlistentry> |
| <term><code>dynamic_pointer_cast</code>, <code>static_pointer_cast</code>, |
| <code>const_pointer_cast</code></term> |
| <listitem> |
| <para> |
| As noted in N2351, these functions can be implemented non-intrusively using |
| the alias constructor. However the aliasing constructor is only available |
| in C++11 mode, so in TR1 mode these casts rely on three non-standard |
| constructors in shared_ptr and __shared_ptr. |
| In C++11 mode these constructors and the related tag types are not needed. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><code>enable_shared_from_this</code></term> |
| <listitem> |
| <para> |
| The clever overload to detect a base class of type |
| <code>enable_shared_from_this</code> comes straight from Boost. |
| There is an extra overload for <code>__enable_shared_from_this</code> to |
| work smoothly with <code>__shared_ptr<Tp, Lp></code> using any lock |
| policy. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| <varlistentry> |
| <term><code>make_shared</code>, <code>allocate_shared</code></term> |
| <listitem> |
| <para> |
| <code>make_shared</code> simply forwards to <code>allocate_shared</code> |
| with <code>std::allocator</code> as the allocator. |
| Although these functions can be implemented non-intrusively using the |
| alias constructor, if they have access to the implementation then it is |
| possible to save storage and reduce the number of heap allocations. The |
| newly constructed object and the _Sp_counted_* can be allocated in a single |
| block and the standard says implementations are "encouraged, but not required," |
| to do so. This implementation provides additional non-standard constructors |
| (selected with the type <code>_Sp_make_shared_tag</code>) which create an |
| object of type <code>_Sp_counted_ptr_inplace</code> to hold the new object. |
| The returned <code>shared_ptr<A></code> needs to know the address of the |
| new <code>A</code> object embedded in the <code>_Sp_counted_ptr_inplace</code>, |
| but it has no way to access it. |
| This implementation uses a "covert channel" to return the address of the |
| embedded object when <code>get_deleter<_Sp_make_shared_tag>()</code> |
| is called. Users should not try to use this. |
| As well as the extra constructors, this implementation also needs some |
| members of _Sp_counted_deleter to be protected where they could otherwise |
| be private. |
| </para> |
| </listitem> |
| </varlistentry> |
| |
| </variablelist> |
| |
| </section> |
| |
| </section> |
| |
| <section xml:id="shared_ptr.using"><info><title>Use</title></info> |
| |
| |
| <section xml:id="shared_ptr.examples"><info><title>Examples</title></info> |
| |
| <para> |
| Examples of use can be found in the testsuite, under |
| <filename class="directory">testsuite/tr1/2_general_utilities/shared_ptr</filename>, |
| <filename class="directory">testsuite/20_util/shared_ptr</filename> |
| and |
| <filename class="directory">testsuite/20_util/weak_ptr</filename>. |
| </para> |
| </section> |
| |
| <section xml:id="shared_ptr.issues"><info><title>Unresolved Issues</title></info> |
| |
| <para> |
| The <emphasis><classname>shared_ptr</classname> atomic access</emphasis> |
| clause in the C++11 standard is not implemented in GCC. |
| </para> |
| |
| <para> |
| Unlike Boost, this implementation does not use separate classes |
| for the pointer+deleter and pointer+deleter+allocator cases in |
| C++11 mode, combining both into _Sp_counted_deleter and using |
| <classname>allocator</classname> when the user doesn't specify |
| an allocator. If it was found to be beneficial an additional |
| class could easily be added. With the current implementation, |
| the _Sp_counted_deleter and __shared_count constructors taking a |
| custom deleter but no allocator are technically redundant and |
| could be removed, changing callers to always specify an |
| allocator. If a separate pointer+deleter class was added the |
| __shared_count constructor would be needed, so it has been kept |
| for now. |
| </para> |
| |
| <para> |
| The hack used to get the address of the managed object from |
| <function>_Sp_counted_ptr_inplace::_M_get_deleter()</function> |
| is accessible to users. This could be prevented if |
| <function>get_deleter<_Sp_make_shared_tag>()</function> |
| always returned NULL, since the hack only needs to work at a |
| lower level, not in the public API. This wouldn't be difficult, |
| but hasn't been done since there is no danger of accidental |
| misuse: users already know they are relying on unsupported |
| features if they refer to implementation details such as |
| _Sp_make_shared_tag. |
| </para> |
| |
| <para> |
| tr1::_Sp_deleter could be a private member of tr1::__shared_count but it |
| would alter the ABI. |
| </para> |
| |
| </section> |
| |
| </section> |
| |
| <section xml:id="shared_ptr.ack"><info><title>Acknowledgments</title></info> |
| |
| |
| <para> |
| The original authors of the Boost shared_ptr, which is really nice |
| code to work with, Peter Dimov in particular for his help and |
| invaluable advice on thread safety. Phillip Jordan and Paolo |
| Carlini for the lock policy implementation. |
| </para> |
| |
| </section> |
| |
| <bibliography xml:id="shared_ptr.biblio"><info><title>Bibliography</title></info> |
| |
| |
| <biblioentry> |
| <title> |
| <link xmlns:xlink="http://www.w3.org/1999/xlink" |
| xlink:href="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2007/n2351.htm"> |
| Improving shared_ptr for C++0x, Revision 2 |
| </link> |
| </title> |
| |
| <subtitle> |
| N2351 |
| </subtitle> |
| </biblioentry> |
| |
| <biblioentry> |
| <title> |
| <link xmlns:xlink="http://www.w3.org/1999/xlink" |
| xlink:href="http://open-std.org/jtc1/sc22/wg21/docs/papers/2007/n2456.html"> |
| C++ Standard Library Active Issues List |
| </link> |
| </title> |
| |
| <subtitle> |
| N2456 |
| </subtitle> |
| </biblioentry> |
| |
| <biblioentry> |
| <title> |
| <link xmlns:xlink="http://www.w3.org/1999/xlink" |
| xlink:href="http://www.open-std.org/jtc1/sc22/wg21/docs/papers/2007/n2461.pdf"> |
| Working Draft, Standard for Programming Language C++ |
| </link> |
| </title> |
| <subtitle> |
| N2461 |
| </subtitle> |
| </biblioentry> |
| |
| <biblioentry> |
| <title> |
| <link xmlns:xlink="http://www.w3.org/1999/xlink" |
| xlink:href="http://www.boost.org/libs/smart_ptr/shared_ptr.htm"> |
| Boost C++ Libraries documentation, shared_ptr |
| </link> |
| </title> |
| |
| <subtitle> |
| N2461 |
| </subtitle> |
| </biblioentry> |
| |
| </bibliography> |
| |
| </section> |