## 20 23 October 01 - 06 ## +23 ## Lifetime Safety in C++: Past, Present and Future #### GABOR HORVATH Gabor.Horvath@microsoft.com ## Welcome to CppCon 2023! Come by our booth and join #visual_studio https://aka.ms/cppcon/lifetime 0  Approaches to safety ## ↑ C++ is getting safer The lifetime safety toolbox What comes comes next? 2023 ## Safety & Security: The Future of C++ JF Bastien  ## All the Safeties 2023 Safety & Security: The

## +24 ## Back To Basics Lifetime Management ## PHIL NASH ## 20 24 September 15 - 20 ## C++ is complex  mostly for historical https://www.sonarsource.com/blog/beyond-the-rules-of-three-five-and-zero/ ## +24 ## Back To Basics Lifetime Management ## PHIL NASH ## 20 24 September 15 - 20

## +23 ## Object Lifetime: From Start to Finish ## THAMARA ANDRADE ## 20 23 October 01 - 06 ## Object Lifetime ## From Start to Finish int main() { if (doSomething(Foo().getBar())) { // realizing I didn’t really understand the rules for object lifetime. ## What is object lifetime anyway? ### 6.8 Object lifetime [basic.life] The lifetime of an object or reference is a runtime property of the Initialization by a trivial copy/move constructor is non-vacuous initialization. — end note] The lifetime of an object of type T begins when: (1.1) — storage with the proper alignment and size for type

## +24 ## Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by Design ## MAX HOFFMANN ## Security Beyond Memory Safety Using Modern C++ to Avoid Vulnerabilities by Design FIFTY Stroustrup • Herb Sutter ## Smart pointers Smart pointers enable automatic, exception-safe, object lifetime management. Defined in header ## Pointer categories unique_ptr(C++11) shared_ptr(C++11) today's C++. ## Carbon Language: An experimental successor to C++ ## Memory safety Safety, and especially memory safety, remains a key challenge for C++ and something a successor language needs to address

## +24 ## Improving Our Safety With a Quantities and Units Library ## MATEUSZ PUSZ ## The future is here  ## The future Computer  ## C++ safety • A major concern in the C++ Community in the recent years • Potential improvements are being discussed library ## • Compile-time safety – correct handling of physical quantities, units, and numerical values ## mp-units: C++20/23 quantities and units library ## • Compile-time safety – correct handling of

## +21 ## Misra Parallelism Safety-critical Guidelines for C++11, 17, Then C++20, 23 ANDREAS WEIS, MICHAEL WONG & ILYA BURYLOV 20 21 October 24-29 ## Staff Engineer at Woven Planet 📸 / 🎧 ComicSansMS architect of C++ software solutions for autonomous driving market in Intel Contribution into functional safety MISRA standard Contribution into WG21 in threading, vectorization and numerics. Contribution into can't have them. ## Agenda 1. Current status of C++ safety: MISRA and C++ CG 2. Parallel Safety rules 3. Automotive Safety case ## Safety Critical API Evolution ![Image](/uploads/documents/8/d/

## Khronos APIs for Heterogeneous Compute and Safety: SYCL and SYCL SC MICHAEL WONG, NEVIN LIBER & VERENA BECKHAM ## Open Standards and Open Source implementations, community driven Open cross-company [Image](/uploads/documents/f/e/2/6/fe26ba058e18c308786b2683cbd327df/p23_1.jpg) ## 3 Pre-exasacale ## KHRONOS SAFETY CRITICAL STANDARDS EVOLUTION  OpenGL SC 1.0 - 2005 Fixed function graphics safety-critical subset 

## +24 ## LLVM's Realtime Safety Revolution: Tools for Modern Mission Critical Systems DAVID TREVELYAN & CHRISTOPHER APPLE ## Chris Apple ## David Trevelyan • 10-year veteran of the audio industry dependencies? ## What if we had a tool that could simply tell us? ## A nice tool would - Assess real-time safety - Detect a wide range of violations - ...even from third-party and pre-compiled dependencies - - Point to any problematic code - Be able to fail a Cl pipeline build unit tests real-time safety build:mac unit:mac rtsan build:win unit:mac:arm build:linux unit:win unit:linux ## LLVM 20

☐☐☐☐ FFI - . . . . .LSP ☐☐☐☐☐☐☐☐☐☐☐☐☐☐☐☐☐ - . ☐☐ C ☐☐ ++C (borrow □□ ++C ☐☐ ( memory safety) ☐ ++C ( ### Playground 4.3 ☐ ☐ ☐ ☐ □ playground ☐☐☐☐ ## 5 ☐☐☐ ## ☐☐☐☐☐☐ ☐ ☐☐☐☐☐☐ :□□□□□□ Point(10, 10) ; (let p2: Point = Point(20, 20) ?let p3 = left_most(&p1, &p2); // What is the lifetime of p3 ; ("{?:println!("p3: {p3 { p2 ☐ p1 ☐ p3 : } fn left_most<'a>(p1: &'a ☐☐☐☐ ☐☐☐☐ ☐☐☐☐☐☐☐ 30.3 :□□□ □ ;static mut COUNTER: u32 = 0 } (fn add_to_counter(inc: u32 . 'SAFETY: There are no other threads which could be accessing 'COUNTER // } unsafe ;COUNTER += inc

and talking about C++ makers.f.dev@gmail.com ## Outline • Motivation • Overview • Patterns • Lifetime • Exceptions • RAII • Synchronization ## • Conclusions ## Motivation • 40 years of • Experience /8/e20839ae14710dcbb38ddda7e6a7f799/p14_1.jpg) ## Patterns • Lifetime • Exceptions • RAII • Synchronization ## Lifetime ## Lifetime • Lots of worries • Use Structured Concurrency $ ^{[1]} $ • https://ericniebler.com/2020/11/08/structured-concurrence/ ## Lifetime Member coroutines implicitly capture this ## Lifetime Let's play a game ## Lifetime struct Bar { int data = 0; Task mul_2(Task