1 ------------------------------------------------------------------------------
3 -- GNAT RUN-TIME LIBRARY (GNARL) COMPONENTS --
5 -- A D A . R E A L _ T I M E --
9 -- Copyright (C) 1991-1994, Florida State University --
10 -- Copyright (C) 1995-2015, AdaCore --
12 -- GNAT is free software; you can redistribute it and/or modify it under --
13 -- terms of the GNU General Public License as published by the Free Soft- --
14 -- ware Foundation; either version 3, or (at your option) any later ver- --
15 -- sion. GNAT is distributed in the hope that it will be useful, but WITH- --
16 -- OUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY --
17 -- or FITNESS FOR A PARTICULAR PURPOSE. --
19 -- As a special exception under Section 7 of GPL version 3, you are granted --
20 -- additional permissions described in the GCC Runtime Library Exception, --
21 -- version 3.1, as published by the Free Software Foundation. --
23 -- You should have received a copy of the GNU General Public License and --
24 -- a copy of the GCC Runtime Library Exception along with this program; --
25 -- see the files COPYING3 and COPYING.RUNTIME respectively. If not, see --
26 -- <http://www.gnu.org/licenses/>. --
28 -- GNARL was developed by the GNARL team at Florida State University. --
29 -- Extensive contributions were provided by Ada Core Technologies, Inc. --
31 ------------------------------------------------------------------------------
35 package body Ada
.Real_Time
is
41 -- Note that Constraint_Error may be propagated
43 function "*" (Left
: Time_Span
; Right
: Integer) return Time_Span
is
44 pragma Unsuppress
(Overflow_Check
);
46 return Time_Span
(Duration (Left
) * Right
);
49 function "*" (Left
: Integer; Right
: Time_Span
) return Time_Span
is
50 pragma Unsuppress
(Overflow_Check
);
52 return Time_Span
(Left
* Duration (Right
));
59 -- Note that Constraint_Error may be propagated
61 function "+" (Left
: Time
; Right
: Time_Span
) return Time
is
62 pragma Unsuppress
(Overflow_Check
);
64 return Time
(Duration (Left
) + Duration (Right
));
67 function "+" (Left
: Time_Span
; Right
: Time
) return Time
is
68 pragma Unsuppress
(Overflow_Check
);
70 return Time
(Duration (Left
) + Duration (Right
));
73 function "+" (Left
, Right
: Time_Span
) return Time_Span
is
74 pragma Unsuppress
(Overflow_Check
);
76 return Time_Span
(Duration (Left
) + Duration (Right
));
83 -- Note that Constraint_Error may be propagated
85 function "-" (Left
: Time
; Right
: Time_Span
) return Time
is
86 pragma Unsuppress
(Overflow_Check
);
88 return Time
(Duration (Left
) - Duration (Right
));
91 function "-" (Left
, Right
: Time
) return Time_Span
is
92 pragma Unsuppress
(Overflow_Check
);
94 return Time_Span
(Duration (Left
) - Duration (Right
));
97 function "-" (Left
, Right
: Time_Span
) return Time_Span
is
98 pragma Unsuppress
(Overflow_Check
);
100 return Time_Span
(Duration (Left
) - Duration (Right
));
103 function "-" (Right
: Time_Span
) return Time_Span
is
104 pragma Unsuppress
(Overflow_Check
);
106 return Time_Span_Zero
- Right
;
113 -- Note that Constraint_Error may be propagated
115 function "/" (Left
, Right
: Time_Span
) return Integer is
116 pragma Unsuppress
(Overflow_Check
);
117 pragma Unsuppress
(Division_Check
);
119 return Integer (Duration (Left
) / Duration (Right
));
122 function "/" (Left
: Time_Span
; Right
: Integer) return Time_Span
is
123 pragma Unsuppress
(Overflow_Check
);
124 pragma Unsuppress
(Division_Check
);
126 -- Even though checks are unsuppressed, we need an explicit check for
127 -- the case of largest negative integer divided by minus one, since
128 -- some library routines we use fail to catch this case. This will be
129 -- fixed at the compiler level in the future, at which point this test
132 if Left
= Time_Span_First
and then Right
= -1 then
133 raise Constraint_Error
with "overflow";
136 return Time_Span
(Duration (Left
) / Right
);
143 function Clock
return Time
is
145 return Time
(System
.Task_Primitives
.Operations
.Monotonic_Clock
);
152 function Microseconds
(US
: Integer) return Time_Span
is
154 return Time_Span_Unit
* US
* 1_000
;
161 function Milliseconds
(MS
: Integer) return Time_Span
is
163 return Time_Span_Unit
* MS
* 1_000_000
;
170 function Minutes
(M
: Integer) return Time_Span
is
172 return Milliseconds
(M
) * Integer'(60_000);
179 function Nanoseconds (NS : Integer) return Time_Span is
181 return Time_Span_Unit * NS;
188 function Seconds (S : Integer) return Time_Span is
190 return Milliseconds (S) * Integer'(1000);
197 procedure Split
(T
: Time
; SC
: out Seconds_Count
; TS
: out Time_Span
) is
201 -- Special-case for Time_First, whose absolute value is anomalous,
202 -- courtesy of two's complement.
204 T_Val
:= (if T
= Time_First
then abs (Time_Last
) else abs (T
));
206 -- Extract the integer part of T, truncating towards zero
209 (if T_Val
< 0.5 then 0 else Seconds_Count
(Time_Span
'(T_Val - 0.5)));
215 -- If original time is negative, need to truncate towards negative
216 -- infinity, to make TS non-negative, as per ARM.
218 if Time (SC) > T then
222 TS := Time_Span (Duration (T) - Duration (SC));
229 function Time_Of (SC : Seconds_Count; TS : Time_Span) return Time is
230 pragma Suppress (Overflow_Check);
231 pragma Suppress (Range_Check);
232 -- We do all our own checks for this function
234 -- This is not such a simple case, since TS is already 64 bits, and
235 -- so we can't just promote everything to a wider type to ensure proper
236 -- testing for overflow. The situation is that Seconds_Count is a MUCH
237 -- wider type than Time_Span and Time (both of which have the underlying
240 -- <------------------- Seconds_Count -------------------->
243 -- Now it is possible for an SC value outside the Duration range to
244 -- be "brought back into range" by an appropriate TS value, but there
245 -- are also clearly SC values that are completely out of range. Note
246 -- that the above diagram is wildly out of scale, the difference in
247 -- ranges is much greater than shown.
249 -- We can't just go generating out of range Duration values to test for
250 -- overflow, since Duration is a full range type, so we follow the steps
253 SC_Lo : constant Seconds_Count :=
254 Seconds_Count (Duration (Time_Span_First) + Duration'(0.5));
255 SC_Hi
: constant Seconds_Count
:=
256 Seconds_Count
(Duration (Time_Span_Last
) - Duration'(0.5));
257 -- These are the maximum values of the seconds (integer) part of the
258 -- Duration range. Used to compute and check the seconds in the result.
260 TS_SC : Seconds_Count;
261 -- Seconds part of input value
263 TS_Fraction : Duration;
264 -- Fractional part of input value, may be negative
266 Result_SC : Seconds_Count;
267 -- Seconds value for result
269 Fudge : constant Seconds_Count := 10;
270 -- Fudge value used to do end point checks far from end point
272 FudgeD : constant Duration := Duration (Fudge);
273 -- Fudge value as Duration
275 Fudged_Result : Duration;
276 -- Result fudged up or down by FudgeD
278 procedure Out_Of_Range;
279 pragma No_Return (Out_Of_Range);
280 -- Raise exception for result out of range
286 procedure Out_Of_Range is
288 raise Constraint_Error with
289 "result for Ada.Real_Time.Time_Of is out of range";
292 -- Start of processing for Time_Of
295 -- If SC is so far out of range that there is no possibility of the
296 -- addition of TS getting it back in range, raise an exception right
297 -- away. That way we don't have to worry about SC values overflowing.
299 if SC < 3 * SC_Lo or else SC > 3 * SC_Hi then
303 -- Decompose input TS value
305 TS_SC := Seconds_Count (Duration (TS));
306 TS_Fraction := Duration (TS) - Duration (TS_SC);
308 -- Compute result seconds. If clearly out of range, raise error now
310 Result_SC := SC + TS_SC;
312 if Result_SC < (SC_Lo - 1) or else Result_SC > (SC_Hi + 1) then
316 -- Now the result is simply Result_SC + TS_Fraction, but we can't just
317 -- go computing that since it might be out of range. So what we do is
318 -- to compute a value fudged down or up by 10.0 (arbitrary value, but
319 -- that will do fine), and check that fudged value, and if in range
320 -- unfudge it and return the result.
322 -- Fudge positive result down, and check high bound
324 if Result_SC > 0 then
325 Fudged_Result := Duration (Result_SC - Fudge) + TS_Fraction;
327 if Fudged_Result <= Duration'Last - FudgeD then
328 return Time (Fudged_Result + FudgeD);
333 -- Same for negative values of seconds, fudge up and check low bound
336 Fudged_Result := Duration (Result_SC + Fudge) + TS_Fraction;
338 if Fudged_Result >= Duration'First + FudgeD then
339 return Time (Fudged_Result - FudgeD);
350 function To_Duration (TS : Time_Span) return Duration is
352 return Duration (TS);
359 function To_Time_Span (D : Duration) return Time_Span is
361 -- Note regarding AI-00432 requiring range checking on this conversion.
362 -- In almost all versions of GNAT (and all to which this version of the
363 -- Ada.Real_Time package apply), the range of Time_Span and Duration are
364 -- the same, so there is no issue of overflow.
366 return Time_Span (D);
370 -- Ensure that the tasking run time is initialized when using clock and/or
371 -- delay operations. The initialization routine has the required machinery
372 -- to prevent multiple calls to Initialize.
374 System.Tasking.Initialize;