Both of these compile fine for me. The first error is common when you forget to #include <stdlib.h>
prior to using functions declared within said-same (such as malloc(size_t)
), which I did not forget to do.
C has some interesting compile-time behaviors, among them the ability to invoke a function that has never been seen before (neither prototype definition nor implementation). Upon encountering such a call, C assumes the function is:
- Something that returns
int
- Takes an unknown number of arguments, so the caller can pass whatever it wants (including the wrong things).
Eg., the function is implicitly assumed to be of the form:
int func();
Often you won't even notice, save for warnings from your compiler that report something to the effect of:
Warning: implicit declaration of `func` assumed to return `int`
and if you're on-the-ball, you have your warning levels turned up with warnings-as-errors enabled and will catch this.
But what if you don't? And what if the "thing" returned from the function cannot be content-represented by the data size in an implementation int
? What if, for example, int
were 32-bit, but data pointers were 64-bit? For example, lets assume char *get_str()
is declared in some header file you're not including, and implemented in a .c file you compile and link with your program, that looks like this:
#include <stdio.h>
// Note: NO prototype for get_str
int main()
{
char *s = get_str();
printf("String: %s\n", s);
return 0;
}
Well, the compiler should puke, telling you that int
and char*
are not compatible (shortly after it warns you get_str
is assumed to return int
). But what if you force the compiler's hand by telling it to make a char*
one way or another:
#include <stdio.h>
// Note: NO prototype for get_str
int main()
{
char *s = (char*)get_str(); // NOTE: added cast
printf("String: %s\n", s);
return 0;
}
Now, without warnings-as-errors enabled, you'll get a implicit declaration warning, and thats it. The code will compile. But will it run ? If sizeof(int)
!= sizeof(char*)
, (32-bit vs 64-bit) likely not. The value returned from get_str
is a 64-bit pointer, but the caller is assuming only 32-bits is returned, then forcing it to a 64-bit pointer. In short, the cast has hidden the error and opened pandora's box of undefined behavior.
So how does all of this relate to your code? By not including <stdlib.h>
the compiler doesn't know what malloc
is. So it assumes it is of the form:
int malloc();
Then, by casting the result to (int**)
you're telling the compiler "whatever comes out of this, make it a int**
". At link time, _malloc
is found (no parameter signature via name mangling like C++), wired up, and your program is ready to party. But on your platform int
and data pointers are not the same size, thus you end up with several undesirable consequences:
- The cast hides the real error.
- A bogus pointer is manufactured from half the bits of the real returned pointer.
- As a cruel dose of salt to the wound, the allocated memory is leaked, as there are no valid pointers anywhere that reference it (you just destroyed the only one by only keeping half of it).
- Probably the most undesirable, the code will exhibit normal behavior if compiled on an implementation where
sizeof(int) == sizeof(int**)
.
So you build this on your 32-bit Debian box, all looks well. You turn in your homework to the professor who builds it on his 64bit Mac and it crashes, you fail the assignment, fail the class, drop out of college, and spend the next ten years petting the cat while watching Seinfeld reruns in your mom's basement wonder what went wrong. Ouch.
Don't treat casting like some silver bullet. It isn't. In C, it is needed far less often than people use it, and if used in the wrong place, can hide catastrophic errors. If you find a point in your code where something won't compile without a hard cast, look again. Unless you're absolutely, positively sure the cast is the right thing to do, odds are its wrong.
In this case it hid the real error, that you neglected to give enough info to your compiler to know what malloc
really does.