{"id":3273,"date":"2011-03-22T09:00:00","date_gmt":"2011-03-22T09:00:00","guid":{"rendered":"https:\/\/blogs.msdn.microsoft.com\/vcblog\/2011\/03\/22\/exception-boundaries-working-with-multiple-error-handling-mechanisms\/"},"modified":"2021-10-05T15:55:28","modified_gmt":"2021-10-05T15:55:28","slug":"exception-boundaries-working-with-multiple-error-handling-mechanisms","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/cppblog\/exception-boundaries-working-with-multiple-error-handling-mechanisms\/","title":{"rendered":"Exception Boundaries: Working With Multiple Error Handling Mechanisms"},"content":{"rendered":"

\n\"David<\/a>\n<\/p>\n

Greetings! I’m David Blaikie<\/strong>, Software Design Engineer at Microsoft and guest blogger here on VCBlog<\/a>. I work in the Windows product group<\/strong>, writing test infrastructure tools in C++. One of the luxuries of the codebases I work in is that they are relatively modern and flexible. We use the full gamut of C++0x features implemented in Visual Studio 2010<\/strong> including lambdas<\/a> and rvalue references\/move construction<\/a> where possible. At a more fundamental level, we also choose to use exceptions<\/strong>. <\/p>\n

Though I won’t get into a debate on the pros and cons of different error handling techniques in this post, it suffices to say that we use exceptions but both our dependencies in some cases (WinAPIs, etc) and some of our users (we have API level exposure to Windows test code sources) don’t expose exceptional APIs or build their code with exceptions enabled. To that end, we, like many other developers, need to live our exceptional lives within a possibly unexceptional world. Perhaps you’ve encountered similar situations and thought that because the rest of your code base (or your dependencies\/consumers) weren’t using exceptions that your own code was just going to have to inherit that design choice.<\/p>\n

In fact, there are a variety of simple techniques, reusable code snippets and small library classes you can write to happily insulate your exceptional code from unexceptional consumers and dependencies. <\/p>\n

 <\/p>\n

Unexceptional Dependencies<\/h3>\n

Dealing with dependencies (API functions, classes) that do not use exceptions is fairly simple. Let’s first take an example of some simple unexceptional code and see how it might be transformed:<\/p>\n

\n
\n
\n
    \n
  1. BOOL DiffHandles(HANDLE file1, HANDLE file2); <\/li>\n
  2. <\/li>\n
  3. BOOL DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
  4. { <\/li>\n
  5.     HANDLE file1Handle = CreateFile(file1, GENERIC_READ, …); <\/li>\n
  6.     BOOL result = FALSE; <\/li>\n
  7.   <\/li>\n
  8.     if<\/span> (file1Handle != INVALID_HANDLE_VALUE) <\/li>\n
  9.     { <\/li>\n
  10.         HANDLE file2Handle = CreateFile(file2, GENERIC_READ, …); <\/li>\n
  11.         if<\/span> (file2Handle != INVALID_HANDLE_VALUE) <\/li>\n
  12.         { <\/li>\n
  13.             result = DiffHandles(file1Handle, file2Handle); <\/li>\n
  14.             CloseHandle(file2Handle); <\/li>\n
  15.         } <\/li>\n
  16.         CloseHandle(file1Handle); <\/li>\n
  17.     } <\/li>\n
  18.     return<\/span> result; <\/li>\n
  19. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

    First things first: Don’t use this function. It’s good as a demonstration, but as real code it has a bunch of things wrong with it (not to mention it’s incomplete anyway).<\/p>\n

    While this code doesn’t seem to have a lot of error handling problems, that’s only because the error message handling is done off to the side. CreateFile<\/span><\/a>, for example, specifies that if it returns INVALID_HANDLE_VALUE<\/span> it will provide additional error information through GetLastError<\/span><\/a> and we could imagine that DiffHandles<\/span> would have to do the same thing, seeing similar failures from reading from the file (if a network share went away, for example) and would heap those all under a FALSE return value. Users of DiffFiles<\/span> would have to ensure they check GetLastError<\/span> any time that FALSE is returned to them. Not only would it be easy for them to forget and just assume the files were different, rather than that the comparison itself failed (perhaps it’s a transient network issue – the file comparison failed and then the network connection came up again and the files happen to have matching contents. This could cause problems) but also the failures the user of this API receives are vague and any messages shown to the user would be hard for the user to understand or address. While the error value from the function might say that a file was [not found, unable to be read because of permissions, or any other reason] it might not say \/which\/ of the two files had the problem.<\/p>\n

    So our first step might be to ensure actual failures produce exceptions while the test (are the file contents different) returns false. This will distinguish between the legitimate cases and runtime failures that occurred while attempting to execute the function. In this case our function’s type remains the same (though I’ll switch to “bool” now that we don’t have a Win32 legacy to interact so directly with) though the contract is different: Return true if the files match, false if the files differ, throw an exception if we couldn’t determine whether the files match or not. <\/p>\n

    We’ll introduce a simple helper function to that end:<\/p>\n

    \n
    \n
    \n
      \n
    1. void<\/span> ThrowLastErrorIf(bool<\/span> expression, const<\/span> wchar_t<\/span>* message) <\/li>\n
    2. { <\/li>\n
    3.     if<\/span> (!expression) <\/li>\n
    4.     { <\/li>\n
    5.         throw<\/span> Win32Exception(GetLastError(), message); <\/li>\n
    6.     } <\/li>\n
    7. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

      This isn’t the most advanced form of such a function. We could do much more to create more informative\/human readable error messages. Perhaps Win32Exception<\/span> type could use FormatMessage<\/span><\/a> to produce a human readable message from the error code and append our message string on to that in some manner. In any case, our function can now be rewritten as follows:<\/p>\n

      \n
      \n
      \n
        \n
      1. bool<\/span> DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
      2. { <\/li>\n
      3.     HANDLE file1Handle = CreateFile(file1, GENERIC_READ, ?); <\/li>\n
      4.     ThrowLastErrorIf(file1Handle != INVALID_HANDLE_VALUE, file1); <\/li>\n
      5.     HANDLE file2Handle = CreateFile(file2, GENERIC_READ, …); <\/li>\n
      6.     ThrowLastErrorIf(file2Handle != INVALID_HANDLE_VALUE, file2); <\/li>\n
      7.     BOOL result = DiffHandles(file1Handle, file2Handle); <\/li>\n
      8.     ThrowLastErrorIf(result == FALSE && (GetLastError() != MY_APPLICATION_ERROR_FILE_MISMATCH), L“Could not compare file contents”<\/span>); <\/li>\n
      9.     CloseHandle(file1Handle); <\/li>\n
      10.     CloseHandle(file2Handle); <\/li>\n
      11.     return<\/span> result; <\/li>\n
      12. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

        But wait, I (hope I) hear you cry, wouldn’t this leak file handles if we throw exceptions? Right you are. While I could’ve written this modified version to handle that leak it would’ve been somewhat convoluted so instead I’m going to demonstrate a better way.<\/p>\n

        By wrapping up these HANDLEs in a type that can handle their destruction in a more C++, RAII<\/a> manner we can not only make this code more readable but also correct (non-leaking)<\/p>\n

        \n
        \n
        \n
          \n
        1. class<\/span> File<\/li>\n
        2.     {<\/li>\n
        3. private<\/span>:<\/li>\n
        4.     HANDLE handle;<\/li>\n
        5.  <\/li>\n
        6.     \/\/declared but not defined to avoid double closing<\/span><\/li>\n
        7.     File& operator<\/span>=(const<\/span> File&);<\/li>\n
        8.     File(File&);<\/li>\n
        9. public<\/span>:<\/li>\n
        10.     File(const<\/span> wchar_t<\/span>* file)<\/li>\n
        11.     {<\/li>\n
        12.         handle = CreateFile(file, GENERIC_READ, …);<\/li>\n
        13.         ThrowLastErrorIf(handle, file);<\/li>\n
        14.     }<\/li>\n
        15.  <\/li>\n
        16.     HANDLE Get()<\/li>\n
        17.     {<\/li>\n
        18.         return<\/span> handle;<\/li>\n
        19.     }<\/li>\n
        20.  <\/li>\n
        21.     ~File()<\/li>\n
        22.     {<\/li>\n
        23.         CloseHandle(handle);<\/li>\n
        24.     }<\/li>\n
        25. };<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

          And rewriting the original function again, we get: <\/p>\n

          \n
          \n
          \n
            \n
          1. bool<\/span> DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
          2. { <\/li>\n
          3.     File f1(file1); <\/li>\n
          4.     File f2(file2); <\/li>\n
          5.     result = DiffHandles(f1.Get(), f2.Get()); <\/li>\n
          6.     ThrowLastErrorIf(result == FALSE && (GetLastError() != MY_APPLICATION_ERROR_FILE_MISMATCH), L“Could not compare file contents”<\/span>); <\/li>\n
          7.     return<\/span> result; <\/li>\n
          8. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

            All without leaks and the need to pay close attention to code paths to ensure resource destruction.<\/p>\n

            It’s not quite the same as it would be if DiffHandles<\/span> was an exception-aware API, but it tidies up the function a bit and means that unexceptional dependencies don’t pollute our exception-aware codebase.<\/p>\n

            The implementation of the Win32Exception type and enhancements to the ThrowLastErrorIf<\/span> function (to include mapping specific result values to already well known exception types such as std::bad_alloc<\/span>) is left as an exercise for the reader.<\/p>\n

             <\/p>\n

            Unexceptional Consumers<\/h3>\n

            Types of Unexceptional Consumers<\/h4>\n

            We’ve seen that Win32 “invalid return (FALSE, INVALID_HANDLE_VALUE, etc) + GetLastError” is one kind of unexceptional error message scheme. Other APIs you might run into that have an unexceptional boundary include C code (indeed Win32’s API is a specific case of this, but POSIX uses int return values and errno to similar effect) or HRESULT returning COM APIs. <\/p>\n

            [While it might not be immediately obvious why it’s worth considering C code as an unexceptional consumer (“my users will be writing in C, so my library must be in C” I hear you cry) it’s actually quite possible to write a C API in C++. By declaring your functions with extern “C”<\/a> you can have C linkage functions in a C++ compilation unit using the full functionality of the C++ programming language in your implementation]<\/p>\n

             <\/p>\n

            Dealing with Unexceptional Consumers<\/h4>\n

            Dealing with unexceptional consumers is perhaps a little trickier, though the most basic implementation is not terribly difficult, if a little verbose and lossy. Let’s invert the above example. Imagine we had the original DiffFiles<\/span>, but we wanted to keep the interface (BOOL do_things + GetLastError<\/span>) but we had updated our dependencies (File handling using RAII resource wrappers as shown, as well as updating DiffHandles<\/span>, or using the STL) to be exception-aware themselves. As such they no longer return failures through GetLastError<\/span>, instead returning bool and throwing exceptions for their failures. Perhaps not even Win32Exception<\/span> failures (this particular exception type wouldn’t be used pervasively, but only when interacting with unexceptional APIs where no more accurate exception type was available to represent the failure).  We could simply rewrite the DiffFiles<\/span> function as follows:<\/p>\n

            \n
            \n
            \n
              \n
            1. BOOL DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
            2. { <\/li>\n
            3.     try<\/span> <\/li>\n
            4.     { <\/li>\n
            5.         File f1(file1); <\/li>\n
            6.         File f2(file2); <\/li>\n
            7.         if<\/span> (!DiffHandles(f1, f2)) <\/li>\n
            8.         { <\/li>\n
            9.             SetLastError(MY_APPLICATION_ERROR_FILE_MISMATCH); <\/li>\n
            10.             return<\/span> FALSE; <\/li>\n
            11.         } <\/li>\n
            12.         return<\/span> TRUE; <\/li>\n
            13.     } <\/li>\n
            14.     catch<\/span>(const<\/span> Win32Exception& e) <\/li>\n
            15.     { <\/li>\n
            16.         SetLastError(e.GetErrorCode()); <\/li>\n
            17.     } <\/li>\n
            18.     catch<\/span>(const<\/span> std::exception& e) <\/li>\n
            19.     { <\/li>\n
            20.         SetLastError(MY_APPLICATION_GENERAL_ERROR); <\/li>\n
            21.     } <\/li>\n
            22.     return<\/span> FALSE; <\/li>\n
            23. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

              You should be sure to catch any\/all exceptions which could be produced by the code in the try block. In this case we know that the File class and DiffHandles<\/span> function can only throw Win32Exceptions<\/span> so we can just handle that.<\/p>\n

              With this basic implementation we lose all exception detail, even those details we could map to interesting results (perhaps std::bad_alloc<\/span> could be mapped to an out of memory Win32 error code for example), so it’s not ideal. Again, we could imagine putting a variety of catch blocks in to map different exception types to various failures, adding logging to record the full details of the exception (since we’ll be compressing entire exception objects including strings of context, stack traces, etc, into a single win32 error code) before it is coalesced into a single value for return, etc. In doing so every one of the functions on our unexceptional public interface is going to get long and unwieldy. <\/p>\n

               <\/p>\n

              Macros as an Exception Consuming Boundary<\/h4>\n

              To reduce the syntactic overhead in this case we can use macros to implement a convenient wrapper to hide all that possible complexity and repeated logic: <\/p>\n

              \n
              \n
              \n
                \n
              1. #define<\/span> WIN32_START try<\/span> { <\/li>\n
              2. #define<\/span> WIN32_END } catch<\/span> (const<\/span> Win32Exception& e) { SetLastError(e.GetErrorCode()); } catch<\/span> (const<\/span> std::exception& e) { SetLastError(MY_APPLICATION_GENERAL_ERROR); } return<\/span> FALSE; <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

                The do_things function then becomes:<\/p>\n

                \n
                \n
                \n
                  \n
                1. BOOL DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
                2. { <\/li>\n
                3.     WIN32_START <\/li>\n
                4.         File f1(file1); <\/li>\n
                5.         File f2(file2); <\/li>\n
                6.         if<\/span> (!DiffHandles(f1, f2)) <\/li>\n
                7.         { <\/li>\n
                8.             SetLastError(MY_APPLICATION_ERROR_FILE_MISMATCH); <\/li>\n
                9.             return<\/span> FALSE; <\/li>\n
                10.         } <\/li>\n
                11.         return<\/span> TRUE; <\/li>\n
                12.     WIN32_END <\/li>\n
                13. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

                  While macros provide an obvious way to implement this functionality they can make code hard to debug and analyze.<\/p>\n

                   <\/p>\n

                  Lambdas as an Exception Consuming Boundary<\/h4>\n

                  We can tidy this up a little further, replacing macros with lambdas as follows:<\/p>\n

                  \n
                  \n
                  \n
                    \n
                  1. template<\/span><typename<\/span> Func> <\/li>\n
                  2. BOOL Win32ExceptionBoundary(Func&& f) <\/li>\n
                  3. { <\/li>\n
                  4.     try<\/span> <\/li>\n
                  5.     { <\/li>\n
                  6.         return<\/span> f(); <\/li>\n
                  7.     } <\/li>\n
                  8.     catch<\/span>(const<\/span> Win32Exception& e) <\/li>\n
                  9.     { <\/li>\n
                  10.         SetLastError(e.GetErrorCode()); <\/li>\n
                  11.     } <\/li>\n
                  12.     catch<\/span>(const<\/span> std::exception& e) <\/li>\n
                  13.     { <\/li>\n
                  14.         SetLastError(MY_APPLICATION_GENERAL_ERROR); <\/li>\n
                  15.     } <\/li>\n
                  16.     return<\/span> FALSE; <\/li>\n
                  17. } <\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

                    With this function, we can now reduce our do_things() function to:<\/p>\n

                    \n
                    \n
                    \n
                      \n
                    1. BOOL DiffFiles(const<\/span> wchar_t<\/span>* file1, const<\/span> wchar_t<\/span>* file2) <\/li>\n
                    2. { <\/li>\n
                    3.     return<\/span> Win32ExceptionBoundary([&]() -> BOOL<\/li>\n
                    4.     { <\/li>\n
                    5.         File f1(file1); <\/li>\n
                    6.         File f2(file2); <\/li>\n
                    7.         if<\/span> (!DiffHandles(f1, f2)) <\/li>\n
                    8.         { <\/li>\n
                    9.             SetLastError(MY_APPLICATION_ERROR_FILE_MISMATCH); <\/li>\n
                    10.             return<\/span> FALSE; <\/li>\n
                    11.         } <\/li>\n
                    12.         return<\/span> TRUE; <\/li>\n
                    13.     }); <\/li>\n
                    14. }<\/li>\n<\/ol>\n<\/div>\n<\/div>\n<\/div>\n

                      The Win32ExceptionBoundary<\/span> could be generalized (so it could be used with, say, HANDLE<\/span> returning functions) by taking the error result as an extra parameter and using that to infer the return type of the template function, for example.<\/p>\n

                       <\/p>\n

                      Summary<\/h3>\n

                      With tools such as these you can introduce exception-aware code into your code base, enabling you to take advantage of the myriad of carefully implemented and tested standard libraries such as containers, smart pointers, and algorithms without having to revamp your entire codebase. Your exception-aware walled garden can grow as time and business justification permits, converting single functions\/libraries at a time.<\/p>\n","protected":false},"excerpt":{"rendered":"

                      Greetings! I’m David Blaikie, Software Design Engineer at Microsoft and guest blogger here on VCBlog. I work in the Windows product group, writing test infrastructure tools in C++. One of the luxuries of the codebases I work in is that they are relatively modern and flexible. We use the full gamut of C++0x features implemented […]<\/p>\n","protected":false},"author":289,"featured_media":35994,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[84],"class_list":["post-3273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cplusplus","tag-exception-handling"],"acf":[],"blog_post_summary":"

                      Greetings! I’m David Blaikie, Software Design Engineer at Microsoft and guest blogger here on VCBlog. I work in the Windows product group, writing test infrastructure tools in C++. One of the luxuries of the codebases I work in is that they are relatively modern and flexible. We use the full gamut of C++0x features implemented […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/posts\/3273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/users\/289"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/comments?post=3273"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/posts\/3273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/media\/35994"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/media?parent=3273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/categories?post=3273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/cppblog\/wp-json\/wp\/v2\/tags?post=3273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}