Shallow copying
Because C++ does not know much about your class, the default copy constructor and default assignment operators it provides use a copying method known as a memberwise copy (also known as a shallow copy). This means that C++ copies each member of the class individually (using the assignment operator for overloaded operator=, and direct initialization for the copy constructor). When classes are simple (e.g. do not contain any dynamically allocated memory), this works very well.
For example, let’s take a look at our Fraction class:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 |
#include <cassert> #include <iostream> class Fraction { private: int m_numerator; int m_denominator; public: // Default constructor Fraction(int numerator=0, int denominator=1) : m_numerator(numerator), m_denominator(denominator) { assert(denominator != 0); } friend std::ostream& operator<<(std::ostream& out, const Fraction &f1); }; std::ostream& operator<<(std::ostream& out, const Fraction &f1) { out << f1.m_numerator << "/" << f1.m_denominator; return out; } |
The default copy constructor and assignment operator provided by the compiler for this class look something like this:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 |
#include <cassert> #include <iostream> class Fraction { private: int m_numerator; int m_denominator; public: // Default constructor Fraction(int numerator=0, int denominator=1) : m_numerator(numerator), m_denominator(denominator) { assert(denominator != 0); } // Copy constructor Fraction(const Fraction &f) : m_numerator(f.m_numerator), m_denominator(f.m_denominator) { } Fraction& operator= (const Fraction &fraction); friend std::ostream& operator<<(std::ostream& out, const Fraction &f1); }; std::ostream& operator<<(std::ostream& out, const Fraction &f1) { out << f1.m_numerator << "/" << f1.m_denominator; return out; } // A better implementation of operator= Fraction& Fraction::operator= (const Fraction &fraction) { // self-assignment guard if (this == &fraction) return *this; // do the copy m_numerator = fraction.m_numerator; m_denominator = fraction.m_denominator; // return the existing object so we can chain this operator return *this; } |
Note that because these default versions work just fine for copying this class, there’s really no reason to write our own version of these functions in this case.
However, when designing classes that handle dynamically allocated memory, memberwise (shallow) copying can get us in a lot of trouble! This is because shallow copies of a pointer just copy the address of the pointer -- it does not allocate any memory or copy the contents being pointed to!
Let’s take a look at an example of this:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 |
#include <cstring> // for strlen() #include <cassert> // for assert() class MyString { private: char *m_data; int m_length; public: MyString(const char *source="") { assert(source); // make sure source isn't a null string // Find the length of the string // Plus one character for a terminator m_length = std::strlen(source) + 1; // Allocate a buffer equal to this length m_data = new char[m_length]; // Copy the parameter string into our internal buffer for (int i=0; i < m_length; ++i) m_data[i] = source[i]; // Make sure the string is terminated m_data[m_length-1] = '\0'; } ~MyString() // destructor { // We need to deallocate our string delete[] m_data; } char* getString() { return m_data; } int getLength() { return m_length; } }; |
The above is a simple string class that allocates memory to hold a string that we pass in. Note that we have not defined a copy constructor or overloaded assignment operator. Consequently, C++ will provide a default copy constructor and default assignment operator that do a shallow copy. The copy constructor will look something like this:
|
1 2 3 4 |
MyString::MyString(const MyString &source) : m_length(source.m_length), m_data(source.m_data) { } |
Note that m_data is just a shallow pointer copy of source.m_data, meaning they now both point to the same thing.
Now, consider the following snippet of code:
|
1 2 3 4 5 6 7 8 9 10 11 |
int main() { MyString hello("Hello, world!"); { MyString copy = hello; // use default copy constructor } // copy is a local variable, so it gets destroyed here. The destructor deletes copy's string, which leaves hello with a dangling pointer std::cout << hello.getString() << '\n'; // this will have undefined behavior return 0; } |
While this code looks harmless enough, it contains an insidious problem that will cause the program to crash! Can you spot it? Don’t worry if you can’t, it’s rather subtle.
Let’s break down this example line by line:
|
1 |
MyString hello("Hello, world!"); |
This line is harmless enough. This calls the MyString constructor, which allocates some memory, sets hello.m_data to point to it, and then copies the string “Hello, world!” into it.
|
1 |
MyString copy = hello; // use default copy constructor |
This line seems harmless enough as well, but it’s actually the source of our problem! When this line is evaluated, C++ will use the default copy constructor (because we haven’t provided our own). This copy constructor will do a shallow copy, initializing copy.m_data to the same address of hello.m_data. As a result, copy.m_data and hello.m_data are now both pointing to the same piece of memory!
|
1 |
} // copy gets destroyed here |
When copy goes out of scope, the MyString destructor is called on copy. The destructor deletes the dynamically allocated memory that both copy.m_data and hello.m_data are pointing to! Consequently, by deleting copy, we’ve also (inadvertently) affected hello. Variable copy then gets destroyed, but hello.m_data is left pointing to the deleted (invalid) memory!
|
1 |
std::cout << hello.getString() << '\n'; // this will have undefined behavior |
Now you can see why this program has undefined behavior. We deleted the string that hello was pointing to, and now we are trying to print the value of memory that is no longer allocated.
The root of this problem is the shallow copy done by the copy constructor -- doing a shallow copy on pointer values in a copy constructor or overloaded assignment operator is almost always asking for trouble.
Deep copying
One answer to this problem is to do a deep copy on any non-null pointers being copied. A deep copy allocates memory for the copy and then copies the actual value, so that the copy lives in distinct memory from the source. This way, the copy and source are distinct and will not affect each other in any way. Doing deep copies requires that we write our own copy constructors and overloaded assignment operators.
Let’s go ahead and show how this is done for our MyString class:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 |
// Copy constructor MyString::MyString(const MyString& source) { // because m_length is not a pointer, we can shallow copy it m_length = source.m_length; // m_data is a pointer, so we need to deep copy it if it is non-null if (source.m_data) { // allocate memory for our copy m_data = new char[m_length]; // do the copy for (int i=0; i < m_length; ++i) m_data[i] = source.m_data[i]; } else m_data = nullptr; } |
As you can see, this is quite a bit more involved than a simple shallow copy! First, we have to check to make sure source even has a string (line 8). If it does, then we allocate enough memory to hold a copy of that string (line 11). Finally, we have to manually copy the string (lines 14 and 15).
Now let’s do the overloaded assignment operator. The overloaded assignment operator is slightly trickier:
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 |
// Assignment operator MyString& MyString::operator=(const MyString & source) { // check for self-assignment if (this == &source) return *this; // first we need to deallocate any value that this string is holding! delete[] m_data; // because m_length is not a pointer, we can shallow copy it m_length = source.m_length; // m_data is a pointer, so we need to deep copy it if it is non-null if (source.m_data) { // allocate memory for our copy m_data = new char[m_length]; // do the copy for (int i=0; i < m_length; ++i) m_data[i] = source.m_data[i]; } else m_data = nullptr; return *this; } |
Note that our assignment operator is very similar to our copy constructor, but there are three major differences:
- We added a self-assignment check.
- We return *this so we can chain the assignment operator.
- We need to explicitly deallocate any value that the string is already holding (so we don’t have a memory leak when m_data is reallocated later).
When the overloaded assignment operator is called, the item being assigned to may already contain a previous value, which we need to make sure we clean up before we assign memory for new values. For non-dynamically allocated variables (which are a fixed size), we don’t have to bother because the new value just overwrite the old one. However, for dynamically allocated variables, we need to explicitly deallocate any old memory before we allocate any new memory. If we don’t, the code will not crash, but we will have a memory leak that will eat away our free memory every time we do an assignment!
A better solution
Classes in the standard library that deal with dynamic memory, such as std::string and std::vector, handle all of their memory management, and have overloaded copy constructors and assignment operators that do proper deep copying. So instead of doing your own memory management, you can just initialize or assign them like normal fundamental variables! That makes these classes simpler to use, less error-prone, and you don’t have to spend time writing your own overloaded functions!
Summary
- The default copy constructor and default assignment operators do shallow copies, which is fine for classes that contain no dynamically allocated variables.
- Classes with dynamically allocated variables need to have a copy constructor and assignment operator that do a deep copy.
- Favor using classes in the standard library over doing your own memory management.
 9.x -- Chapter 9 comprehensive quiz
|
 Index
|
 9.14 -- Overloading the assignment operator
|
In this code snippet present above in this lesson:
Shouldn't line 18 be:
instead?
Yes. Updated. Thanks!
MyString::MyString(const MyString& source)
{
// because m_length is not a pointer, we can shallow copy it
m_length = source.m_length;
// m_data is a pointer, so we need to deep copy it if it is non-null
if (source.m_data)
{
// allocate memory for our copy
m_data = new char[m_length];
// do the copy
for (int i=0; i < m_length; ++i)
m_data[i] = source.m_data[i];
}
else
m_data = 0;
}
In the above code for deep copy
The m_length = source.m_length should have been m_length = source.m_length+1 to allocate one extra bit to store the bull character '\0' Right????
No, @source.m_length includes the 0-terminator already.
Std::vector tends to be a little slow and std::array has some of the limitations of C-style arrays. While C++ standard library provides tools of first choice, occasionally a class needs to perform its own dynamic memory management.
Here's the skeleton of a container class that encapsulates a dynamic array and defines its special member functions: an all-in-one illustration of tutorial concepts up to "Inheritance". To keep it simple, I've substituted a global const MAX for a potential member variable, m_length. The latter would be required for flexible-sized arrays.
To demonstrate how the compiler handles the move constructor and move assignment class functions, I've inserted calls to a function printAp(), which display the addresses of selected objects. Calls to printAp are bracketed in the class functions to mark them for later removal. To force the creation of an anonymous (temporary) object, a member function reverse() returns an object of the class. Main() serves as a test program as discussed below:
Main does 2 things. Superficially, it creates objects A, B, C, and D. These objects encapsulate unsigned char arrays. Main sets and retrieves values of the first or last elements of the arrays during the test of each class member function. On a deeper level, main shows the behavior of the move constructor and move assignment member functions using the "print a pointer" function, printAp(). The console output on my machine using Visual Studio 2017 in DEBUG mode:
Default Construc, 0
Copy Construc, 1
First Assign, 3
Chain Assign, 3
in reverse, Temp address = 0041F5E4
in move construc, rhs address = 0041F5E4
in move construc, this address = 0041F774
Move Construc, 5
in reverse, Temp address = 0041F5E4
in move construc, rhs address = 0041F5E4
in move construc, this address = 0041F66C
in move assign, rhs address = 0041F66C
in move assign, this address = 0041F78C
Move Assign, 3
object B address = 0041F78C
object C address = 0041F780
object D address = 0041F774
This output is far simpler than it first appears. There's text to show the purpose of each test, and to print an element of the encapsulated array to verify the result. So far so dull.
The rest is interesting. The third-to-last block of text shows a call to my move constructor for the statement D = C.reverse(). What I want to do is create D and move the result of reverse() into it. To accomplish this, the compiler calls my move constructor for D and hands me an r-value reference to the object "Temp", which I created in reverse() for a return value. Smart! Within the move constructor, "this" contains the address of D, and &rhs contains the address of "Temp". As Temp is already constructed, all I really need to do is "capture" its data. My move constructor accomplishes this task by first assigning Temp's m_ptr to D's, then assigning NULL to Temp's m_ptr (effectively marking the latter unusable upon its release to the heap). Voila! So far so good.
But what's all this mess for B = D.reverse()? B already exists, so what I want to do is move the result of reverse() directly to it. The compiler does this in 2 steps. First, it creates an anonymous object, then it calls my move constructor to capture Temp's data to it. Just like it did for D above. What? Alright, we get it: move constructor is named a "constructor" for a reason. After capturing "Temp" as an anonymous object, the compiler calls my move assignment function, for the purpose of moving the contents of its anonymous object into my preexisting variable B. Notice in the move assignment function, the anonymous object is passed as an r-value reference, and you can trace its address from "this" (in the move constructor) to &rhs (a parameter in move assignment). Now, within move assignment, "this" points to my existing object, B. The contents of object B will be replaced, so I delete[] its dynamic memory. Then another rehash: I "capture" the anonymous object's data by first assigning the memory ptr of the anonymous object to B's m_ptr, followed by assigning NULL to rhs.m_ptr (marking the latter as unusable upon its release to the heap).
I'd prefer doing the B = D.reverse() in one move-assignment step. Here's the output from the RELEASE build with optimization, skipping up to "Chain Assign":
Chain Assign, 3
in reverse, Temp address = 003AF9DC
Move Construc, 5
in reverse, Temp address = 003AF9D8
in move assign, rhs address = 003AF9D8
in move assign, this address = 003AF9E8
Move Assign, 3
object B address = 003AF9E8
object C address = 003AF9E4
object D address = 003AF9DC
The optimized .exe fulfills my wish: it calls my move assignment function with "this" pointing to B, while passing an r-value reference to "Temp" directly. What about my D = C.reverse()? My move constructor isn't even called! D is simply given Temp's address. Hurray for elision!
The reason for looking "under-the-hood" of this process is to know what demands Array objects place on the heap. reverse() passes its return "by-value", but it does not consume any significant heap storage beyond what is required to generate an object for the return (in my case, "Temp"). This understanding is important when MAX is expanded to the thousands.
Alex makes this clear: as a member variable of Array class, m_ptr keeps the code RAII compliant, so (hopefully) no dangling pointer runs amuck. The big disadvantage of doing one's own memory management is that less-than-meticulous code (like not checking ranges) can corrupt the heap.
Hi.
About this line in the first paragraphs:
"... C++ copies each member of the class individually (using the assignment operator for overloaded operator=, and direct initialization for the copy constructor)."
Did you mean to say "initialization" rather than "direct initialization"? As I understand, a copy constructor is invoked during any of the 3 kinds of initialization:
1. copy initialization,
2. direct initialization, and
3. uniform initialization
In this context, we're talking about copying the _members_ of a class. These members are initialized using direct initialization (as opposed to copy initialization).
Hello again, I can't quite figure something out - for the following code snippet you wrote:
If I delete the brackets on lines 4 and 6, the program compiles, but I get the runtime error: Test(50460,0x10039b380) malloc: *** error for object 0x100403700: pointer being freed was not allocated.
I was under the impression that this would run OK because the variables would all stay in scope until the end of the program and because deleting a null pointer has no effect (is that not what this error message is pointing to?) but it looks like I'm missing something. It does print out "Hello World!" but something is not quite right...
Think I've got it, I believe I conflated null pointer and uninitialized pointer?
All pointers in this example have been initialized, neither is a nullptr.
Both @hello and @copy point to the same char array. Once one of @hello or @copy goes out of scope, the char array will be deleted. The other variable will still point to were the char array used to be. When the other variable goes out of scope, the char array will be deleted again, but it doesn't exist. Behavior is undefined.
Hi Alex!
Third code block, line 17 should use @std::strlen
Fixed! Thanks!
Hi!
1) Since
aren't we sure that we will never be copying / assigning a non-null string (if the allocation was successful)?
2) Shouldn't we assign @m_length after allocating new memory and checking @m_data is non-null?
3) Is there a reason not to use strcpy() and use a for loop?
Hi!
1)
2)
The order doesn't matter
3)
No
Thank you for the quick reply.
1) If we do that, wouldn't the assertion fail and we wouldn't be able to copy / assign a null source.m_data field - because (unless memory allocation failed) no object with a null m_data field would be created? Shouldn't we check instead that new didn't fail?
2) But if @source.m_data is null because the memory allocation of the source object failed, we are assigning whatever length the source believes it successfully allocated when the source object was created while we assign a nullptr to @m_data.
1) There is not @source object, @source is a const char*. I might have misunderstood your question. Can you elaborate on (1)?
> Shouldn't we check instead that new didn't fail?
All we can do is check for nullptr. If allocation fails without the noexcept version of @new, an exception is thrown and this constructor won't be reached anyway.
2) If @source failed to allocate memory, it will have thrown an exception and you shouldn't be able to use the source object anymore. But I agree with you, setting the length after verifying that there actually is data is better.
1) I think I wasn't too clear in the beginning (sorry for my English). What I meant was: every MyString object seems to have a non-null m_data field because we either assert that in the const char* constructor or, as you just explained, if new fails, the constructor won't be reached anyway. If that's true, why do we then check
in the copy constructor and assignment operator overload?
2) This question doesn't make much sense because I forgot new would throw an exception and then we would have to handle that. Thanks for the explanation!
> why do we then check
Seems redundant. But if you were to add another constructor or function that allows @m_data to be a nullptr, this constructor wouldn't break because of that update.