Precondition
Computer programming concept
- 3 min read
- 2 chapters
Related on Lably
Through Computer programming, Code and Computer security
If a precondition is violated, the effect of the section of code becomes undefined and thus may or may not carry out its intended work. Preconditions that are missing, insufficient, or not formally proved (or have an incorrect attempted proof), or are not checked statically or dynamically, can give rise to Security problems, particularly in unsafe languages that are not strongly typed.
Often, preconditions are simply included in the documentation of the affected section of code. Preconditions are sometimes tested using guards or assertions within the code itself, and some languages have specific syntactic constructions for doing so.
Example
The factorial function is only defined where its parameter is an integer greater than or equal to zero. So an implementation of the factorial function would have a precondition that its parameter be an integer and that the parameter be greater than or equal to zero. Alternatively the type system of the language may be used to specify that the parameter of the factorial function is a natural number (unsigned integer), which can be formally verified automatically by a compiler's type checker.
In addition where numeric types have a limited range (as they do in most programming languages) the precondition must also specify the maximum value that the parameter may have if overflow is not to occur. (e.g. if an implementation of factorial returns the result in a 64-bit unsigned integer then the parameter must be less than 21 because factorial(21) is larger than the maximum unsigned integer that can be stored in 64 bits). Where the language supports range sub-types (e.g. Ada) such constraints can be automatically verified by the type system. More complex constraints can be formally verified interactively with a proof assistant.
Sign in to keep reading
One more chapter is free with a Lably account.
In object-oriented programming
Preconditions in object-oriented software development are an essential part of design by contract. Design by contract also includes notions of postcondition and class invariant.
The precondition for any routine defines any constraints on object state which are necessary for successful execution. From the program developer's viewpoint, this constitutes the routine caller's portion of the contract. The caller then is obliged to ensure that the precondition holds prior to calling the routine. The reward for the caller's effort is expressed in the called routine's postcondition.
Eiffel example
The routine in the following example written in Eiffel takes as an argument an integer which must be a valid value for an hour of the day, i. e., 0 through 23, inclusively. The precondition follows the keyword require. It specifies that the argument must be greater than or equal to zero and less than 24. The tag valid_argument describes this precondition clause and serves to identify it in case of a runtime precondition violation.
<span id="mwLQ"></span><span class="w" id="mwLg"> </span><span class="n" id="mwLw">set_hour</span><span class="w" id="mwMA"> </span><span class="p" id="mwMQ">(</span><span class="n" id="mwMg">a_hour</span><span class="p" id="mwMw">:</span><span class="w" id="mwNA"> </span><span class="nc" id="mwNQ">INTEGER</span><span class="p" id="mwNg">)</span> <span class="w" id="mwNw"> </span><span class="c1" id="mwOA">-- Set `hour' to `a_hour'</span> <span class="w" id="mwOQ"> </span><span class="kr" id="mwOg">require</span> <span class="w" id="mwOw"> </span><span class="n" id="mwPA">valid_argument</span><span class="p" id="mwPQ">:</span><span class="w" id="mwPg"> </span><span class="mi" id="mwPw">0</span><span class="w" id="mwQA"> </span><span class="o" id="mwQQ"><=</span><span class="w" id="mwQg"> </span><span class="n" id="mwQw">a_hour</span><span class="w" id="mwRA"> </span><span class="ow" id="mwRQ">and</span><span class="w" id="mwRg"> </span><span class="n" id="mwRw">a_hour</span><span class="w" id="mwSA"> </span><span class="o" id="mwSQ"><</span><span class="w" id="mwSg"> </span><span class="mi" id="mwSw">24</span> <span class="w" id="mwTA"> </span><span class="kr" id="mwTQ">do</span> <span class="w" id="mwTg"> </span><span class="n" id="mwTw">hour</span><span class="w" id="mwUA"> </span><span class="o" id="mwUQ">:=</span><span class="w" id="mwUg"> </span><span class="n" id="mwUw">a_hour</span> <span class="w" id="mwVA"> </span><span class="kr" id="mwVQ">ensure</span> <span class="w" id="mwVg"> </span><span class="n" id="mwVw">hour_set</span><span class="p" id="mwWA">:</span><span class="w" id="mwWQ"> </span><span class="n" id="mwWg">hour</span><span class="w" id="mwWw"> </span><span class="o" id="mwXA">=</span><span class="w" id="mwXQ"> </span><span class="n" id="mwXg">a_hour</span> <span class="w" id="mwXw"> </span><span class="kr" id="mwYA">end</span>
Preconditions and inheritance
In the presence of inheritance, the routines inherited by descendant classes (subclasses) do so with their preconditions in force. This means that any implementations or redefinitions of inherited routines also have to be written to comply with their inherited contract. Preconditions can be modified in redefined routines, but they may only be weakened. That is, the redefined routine may lessen the obligation of the client, but not increase it.