Skip to content

Nullness issue - Downcasting should preserve nullness information #17532

Closed

Description

@kerams

Issue description

Downcasting is an operation that returns null when input is null. However, when the explicit coercion type is not nullable, the downcasting result currently won't be nullable either. Either a nullable type should be required (:?> string | null) or the downcasting operator should automatically adjust nullness based on the input type.

Choose one or more from the following categories of impact

  • Unexpected nullness warning (false positive in nullness checking, code uses --checknulls and langversion:preview).
  • Missing nullness warning in a case which can produce nulls (false negative, code uses --checknulls and langversion:preview).
  • Breaking change related to older null constructs in code not using the checknulls switch.
  • Breaking change related to generic code and explicit type constraints (null, not null).
  • Type inference issue (i.e. code worked without type annotations before, and applying the --checknulls enforces type annotations).
  • C#/F# interop issue related to nullness metadata.
  • Other (none of the categories above apply).

Operating System

Windows (Default)

What .NET runtime/SDK kind are you seeing the issue on

.NET SDK (.NET Core, .NET 5+)

.NET Runtime/SDK version

9.0.0-preview.7.24405.7

Reproducible code snippet and actual behavior

((null: obj | null) :?> string).Length

No warning, throws NRE.

Possible workarounds

No response

Activity

  1. added this to the Backlog milestone on Aug 14, 2024
  2. kerams commented on Aug 14, 2024

    @kerams
    ContributorAuthor
  3. T-Gro commented on Aug 14, 2024

    @T-Gro
    Member

    I think there are two perspectives:

    1. Admit that with downcasting, the code is inherently dangerous at runtime. i.e. allow downcasting e.g. a nullable obj into a DU
    2. Try to maintain nullness (similar to [NotNullIfNotNull] in C# flow analysis), even though this might complicate downcasting-heavy code.

    This is further complicated by the fslib Unboxing functions doing a runtime lookup, where nullness information is no longer known.

    A solution which would insist on downcasting a nullable source into a nullable target ( :?> string | null) would only work on target types which can carry nullness, which is not equal to all types that can be downcasted to (tuples, anon records).

  4. T-Gro commented on Aug 14, 2024

    @T-Gro
    Member

    A safe but not all-scenarios-covering change would be:

    • If source is nullable
    • Target can be enhanced to be nullable
    • Insist on the downcasting target to be decorated | null, report a nullness warning if it isn't

    Would that meet the expectations here?

  5. modified the milestones: Backlog, September-2024 on Sep 5, 2024
  6. charlesroddie commented on Oct 2, 2024

    @charlesroddie
    Contributor
    ((null: obj | null) :?> string).Length

    This shouldn't throw an NRE but should throw an exception during the :?> string cast.

    f(x: string | null) = x :?> string should succeed if x is a string, and fail if x is null (since, post NRTs, null is not a string).

    No separate warning should be given since now new danger is introduced: :?> is known to throw if the LHS is not of the type on the RHS.

    If there is a warning it should apply to all uses of :?> ("don't use this").

  7. kerams commented on Oct 2, 2024

    @kerams
    ContributorAuthor

    but should throw an exception during the :?> string cast

    Feel free to take up that breaking change (which is what a different exception constitutes, I think) with the runtime team (unless you're suggesting F# should start injecting extra null checks before the unbox.any instruction).

  8. moved this from New to Done in F# Compiler and Toolingon Nov 7, 2024
  9. T-Gro commented on Nov 25, 2024

    @T-Gro
    Member

    Fixed by #17965

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions