1 \input texinfo @c -*- texinfo -*-
3 @setfilename tcc-doc.info
4 @settitle Tiny C Compiler Reference Documentation
17 @center @titlefont{Tiny C Compiler Reference Documentation}
28 @node Top, Introduction, (dir), (dir)
29 @top Tiny C Compiler Reference Documentation
31 This manual documents version @value{VERSION} of the Tiny C Compiler.
34 * Introduction:: Introduction to tcc.
35 * Invoke:: Invocation of tcc (command line, options).
36 * Bounds:: Automatic bounds-checking of C code.
37 * Libtcc:: bla bla bla.
44 TinyCC (aka TCC) is a small but hyper fast C compiler. Unlike other C
45 compilers, it is meant to be self-relying: you do not need an
46 external assembler or linker because TCC does that for you.
48 TCC compiles so @emph{fast} that even for big projects @code{Makefile}s may
51 TCC not only supports ANSI C, but also most of the new ISO C99
52 standard and many GNUC extensions including inline assembly.
54 TCC can also be used to make @emph{C scripts}, i.e. pieces of C source
55 that you run as a Perl or Python script. Compilation is so fast that
56 your script will be as fast as if it was an executable.
58 TCC can also automatically generate memory and bound checks
59 (@pxref{Bounds}) while allowing all C pointers operations. TCC can do
60 these checks even if non patched libraries are used.
62 With @code{libtcc}, you can use TCC as a backend for dynamic code
63 generation (@pxref{Libtcc}).
66 @chapter Command line invocation
71 usage: tcc [-c] [-o outfile] [-Bdir] [-bench] [-Idir] [-Dsym[=val]] [-Usym]
72 [-g] [-b] [-bt N] [-Ldir] [-llib] [-shared] [-static]
73 [--] infile1 [infile2... --] [infile_args...]
77 TCC options are a very much like gcc options. The main difference is that TCC
78 can also execute directly the resulting program and give it runtime
81 Here are some examples to understand the logic:
85 Compile @file{a.c} and execute it directly
87 @item @samp{tcc a.c arg1}
88 Compile a.c and execute it directly. arg1 is given as first argument to
89 the @code{main()} of a.c.
91 @item @samp{tcc -- a.c b.c -- arg1}
92 Compile @file{a.c} and @file{b.c}, link them together and execute them. arg1 is given
93 as first argument to the @code{main()} of the resulting program. Because
94 multiple C files are specified, @option{--} are necessary to clearly separate the
95 program arguments from the TCC options.
97 @item @samp{tcc -o myprog a.c b.c}
98 Compile @file{a.c} and @file{b.c}, link them and generate the executable @file{myprog}.
100 @item @samp{tcc -o myprog a.o b.o}
101 link @file{a.o} and @file{b.o} together and generate the executable @file{myprog}.
103 @item @samp{tcc -c a.c}
104 Compile @file{a.c} and generate object file @file{a.o}.
106 @item @samp{tcc -c asmfile.S}
107 Preprocess with C preprocess and assemble @file{asmfile.S} and generate
108 object file @file{asmfile.o}.
110 @item @samp{tcc -c asmfile.s}
111 Assemble (but not preprocess) @file{asmfile.s} and generate object file
114 @item @samp{tcc -r -o ab.o a.c b.c}
115 Compile @file{a.c} and @file{b.c}, link them together and generate the object file @file{ab.o}.
121 TCC can be invoked from @emph{scripts}, just as shell scripts. You just
122 need to add @code{#!/usr/local/bin/tcc} at the start of your C source:
130 printf("Hello World\n");
135 @section Option summary
141 Generate an object file (@option{-o} option must also be given).
144 Put object file, executable, or dll into output file @file{outfile}.
147 Set the path where the tcc internal libraries can be found (default is
148 @file{PREFIX/lib/tcc}).
151 Output compilation statistics.
154 Preprocessor options:
158 Specify an additional include path. Include paths are searched in the
159 order they are specified.
161 System include paths are always searched after. The default system
162 include paths are: @file{/usr/local/include}, @file{/usr/include}
163 and @file{PREFIX/lib/tcc/include}. (@file{PREFIX} is usually
164 @file{/usr} or @file{/usr/local}).
167 Define preprocessor symbol @samp{sym} to
168 val. If val is not present, its value is @samp{1}. Function-like macros can
169 also be defined: @option{-DF(a)=a+1}
172 Undefine preprocessor symbol @samp{sym}.
179 Specify an additional static library path for the @option{-l} option. The
180 default library paths are @file{/usr/local/lib}, @file{/usr/lib} and @file{/lib}.
183 Link your program with dynamic library libxxx.so or static library
184 libxxx.a. The library is searched in the paths specified by the
188 Generate a shared library instead of an executable (@option{-o} option
192 Generate a statically linked executable (default is a shared linked
193 executable) (@option{-o} option must also be given).
196 Generate an object file combining all input files (@option{-o} option must
205 Generate run time debug information so that you get clear run time
206 error messages: @code{ test.c:68: in function 'test5()': dereferencing
207 invalid pointer} instead of the laconic @code{Segmentation
211 Generate additional support code to check
212 memory allocations and array/pointer bounds. @option{-g} is implied. Note
213 that the generated code is slower and bigger in this case.
216 Display N callers in stack traces. This is useful with @option{-g} or
221 Note: GCC options @option{-Ox}, @option{-Wx}, @option{-fx} and @option{-mx} are
224 @chapter C language support
228 TCC implements all the ANSI C standard, including structure bit fields
229 and floating point numbers (@code{long double}, @code{double}, and
230 @code{float} fully supported).
232 @section ISOC99 extensions
234 TCC implements many features of the new C standard: ISO C99. Currently
235 missing items are: complex and imaginary numbers and variable length
238 Currently implemented ISOC99 features:
242 @item 64 bit @code{long long} types are fully supported.
244 @item The boolean type @code{_Bool} is supported.
246 @item @code{__func__} is a string variable containing the current
249 @item Variadic macros: @code{__VA_ARGS__} can be used for
250 function-like macros:
252 #define dprintf(level, __VA_ARGS__) printf(__VA_ARGS__)
256 @code{dprintf} can then be used with a variable number of parameters.
258 @item Declarations can appear anywhere in a block (as in C++).
260 @item Array and struct/union elements can be initialized in any order by
263 struct @{ int x, y; @} st[10] = @{ [0].x = 1, [0].y = 2 @};
265 int tab[10] = @{ 1, 2, [5] = 5, [9] = 9@};
268 @item Compound initializers are supported:
270 int *p = (int [])@{ 1, 2, 3 @};
272 to initialize a pointer pointing to an initialized array. The same
273 works for structures and strings.
275 @item Hexadecimal floating point constants are supported:
277 double d = 0x1234p10;
281 is the same as writing
283 double d = 4771840.0;
286 @item @code{inline} keyword is ignored.
288 @item @code{restrict} keyword is ignored.
291 @section GNU C extensions
293 TCC implements some GNU C extensions:
297 @item array designators can be used without '=':
299 int a[10] = @{ [0] 1, [5] 2, 3, 4 @};
302 @item Structure field designators can be a label:
304 struct @{ int x, y; @} st = @{ x: 1, y: 1@};
308 struct @{ int x, y; @} st = @{ .x = 1, .y = 1@};
311 @item @code{\e} is ASCII character 27.
313 @item case ranges : ranges can be used in @code{case}s:
317 printf("range 1 to 9\n");
320 printf("unexpected\n");
325 @item The keyword @code{__attribute__} is handled to specify variable or
326 function attributes. The following attributes are supported:
328 @item @code{aligned(n)}: align data to n bytes (must be a power of two).
330 @item @code{section(name)}: generate function or data in assembly
331 section name (name is a string containing the section name) instead
332 of the default section.
334 @item @code{unused}: specify that the variable or the function is unused.
336 @item @code{cdecl}: use standard C calling convention.
338 @item @code{stdcall}: use Pascal-like calling convention.
342 Here are some examples:
344 int a __attribute__ ((aligned(8), section(".mysection")));
348 align variable @code{a} to 8 bytes and put it in section @code{.mysection}.
351 int my_add(int a, int b) __attribute__ ((section(".mycodesection")))
358 generate function @code{my_add} in section @code{.mycodesection}.
360 @item GNU style variadic macros:
362 #define dprintf(fmt, args@dots{}) printf(fmt, ## args)
365 dprintf("one arg %d\n", 1);
368 @item @code{__FUNCTION__} is interpreted as C99 @code{__func__}
369 (so it has not exactly the same semantics as string literal GNUC
370 where it is a string literal).
372 @item The @code{__alignof__} keyword can be used as @code{sizeof}
373 to get the alignment of a type or an expression.
375 @item The @code{typeof(x)} returns the type of @code{x}.
376 @code{x} is an expression or a type.
378 @item Computed gotos: @code{&&label} returns a pointer of type
379 @code{void *} on the goto label @code{label}. @code{goto *expr} can be
380 used to jump on the pointer resulting from @code{expr}.
382 @item Inline assembly with asm instruction:
383 @cindex inline assembly
384 @cindex assembly, inline
387 static inline void * my_memcpy(void * to, const void * from, size_t n)
390 __asm__ __volatile__(
395 "1:\ttestb $1,%b4\n\t"
399 : "=&c" (d0), "=&D" (d1), "=&S" (d2)
400 :"0" (n/4), "q" (n),"1" ((long) to),"2" ((long) from)
408 TCC includes its own x86 inline assembler with a @code{gas}-like (GNU
409 assembler) syntax. No intermediate files are generated. GCC 3.x named
410 operands are supported.
414 @section TinyCC extensions
418 @item @code{__TINYC__} is a predefined macro to @code{1} to
419 indicate that you use TCC.
421 @item @code{#!} at the start of a line is ignored to allow scripting.
423 @item Binary digits can be entered (@code{0b101} instead of
426 @item @code{__BOUNDS_CHECKING_ON} is defined if bound checking is activated.
430 @chapter TinyCC Assembler
432 Since version 0.9.16, TinyCC integrates its own assembler. TinyCC
433 assembler supports a gas-like syntax (GNU assembler). You can
434 desactivate assembler support if you want a smaller TinyCC executable
435 (the C compiler does not rely on the assembler).
437 TinyCC Assembler is used to handle files with @file{.S} (C
438 preprocessed assembler) and @file{.s} extensions. It is also used to
439 handle the GNU inline assembler with the @code{asm} keyword.
443 TinyCC Assembler supports most of the gas syntax. The tokens are the
448 @item C and C++ comments are supported.
450 @item Identifiers are the same as C, so you cannot use '.' or '$'.
452 @item Only 32 bit integer numbers are supported.
460 @item Integers in decimal, octal and hexa are supported.
462 @item Unary operators: +, -, ~.
464 @item Binary operators in decreasing priority order:
472 @item A value is either an absolute number or a label plus an offset.
473 All operators accept absolute values except '+' and '-'. '+' or '-' can be
474 used to add an offset to a label. '-' supports two labels only if they
475 are the same or if they are both defined and in the same section.
483 @item All labels are considered as local, except undefined ones.
485 @item Numeric labels can be used as local @code{gas}-like labels.
486 They can be defined several times in the same source. Use 'b'
487 (backward) or 'f' (forward) as suffix to reference them:
491 jmp 1b /* jump to '1' label before */
492 jmp 1f /* jump to '1' label after */
499 @cindex assembler directives
500 @cindex directives, assembler
510 All directives are preceeded by a '.'. The following directives are
514 @item .align n[,value]
515 @item .skip n[,value]
516 @item .space n[,value]
517 @item .byte value1[,value2...]
518 @item .word value1[,value2...]
519 @item .short value1[,value2...]
520 @item .int value1[,value2...]
521 @item .long value1[,value2...]
524 @section X86 Assembler
527 All X86 opcodes are supported. Only ATT syntax is supported (source
528 then destination operand order). If no size suffix is given, TinyCC
529 tries to guess it from the operand sizes.
531 Currently, MMX opcodes are supported but not SSE ones.
533 @chapter TinyCC Linker
536 @section ELF file generation
539 TCC can directly output relocatable ELF files (object files),
540 executable ELF files and dynamic ELF libraries without relying on an
543 Dynamic ELF libraries can be output but the C compiler does not generate
544 position independent code (PIC). It means that the dynamic librairy
545 code generated by TCC cannot be factorized among processes yet.
547 TCC linker cannot currently eliminate unused object code. But TCC
548 will soon integrate a novel feature not found in GNU tools: unused code
549 will be eliminated at the function or variable level, provided you only
550 use TCC to compile your files.
552 @section ELF file loader
554 TCC can load ELF object files, archives (.a files) and dynamic
557 @section GNU Linker Scripts
558 @cindex scripts, linker
559 @cindex linker scripts
560 @cindex GROUP, linker command
561 @cindex FILE, linker command
563 Because on many Linux systems some dynamic libraries (such as
564 @file{/usr/lib/libc.so}) are in fact GNU ld link scripts (horrible!),
565 the TCC linker also supports a subset of GNU ld scripts.
567 The @code{GROUP} and @code{FILE} commands are supported.
569 Example from @file{/usr/lib/libc.so}:
572 Use the shared library, but some functions are only in
573 the static library, so try that secondarily. */
574 GROUP ( /lib/libc.so.6 /usr/lib/libc_nonshared.a )
578 @chapter TinyCC Memory and Bound checks
580 @cindex memory checks
582 This feature is activated with the @option{-b} (@pxref{Invoke}).
584 Note that pointer size is @emph{unchanged} and that code generated
585 with bound checks is @emph{fully compatible} with unchecked
586 code. When a pointer comes from unchecked code, it is assumed to be
587 valid. Even very obscure C code with casts should work correctly.
589 For more information about the ideas behind this method, see
590 @url{http://www.doc.ic.ac.uk/~phjk/BoundsChecking.html}.
592 Here are some examples of caught errors:
596 @item Invalid range with standard string function:
604 @item Out of bounds-error in global or local arrays:
614 @item Out of bounds-error in malloc'ed data:
618 tab = malloc(20 * sizeof(int));
626 @item Access of freed memory:
630 tab = malloc(20 * sizeof(int));
642 tab = malloc(20 * sizeof(int));
651 @chapter The @code{libtcc} library
653 The @code{libtcc} library enables you to use TCC as a backend for
654 dynamic code generation.
656 Read the @file{libtcc.h} to have an overview of the API. Read
657 @file{libtcc_test.c} to have a very simple example.
659 The idea consists in giving a C string containing the program you want
660 to compile directly to @code{libtcc}. Then you can access to any global
661 symbol (function or variable) defined.
663 @chapter Developer's guide
665 This chapter gives some hints to understand how TCC works. You can skip
666 it if you do not intend to modify the TCC code.
668 @section File reading
670 The @code{BufferedFile} structure contains the context needed to read a
671 file, including the current line number. @code{tcc_open()} opens a new
672 file and @code{tcc_close()} closes it. @code{inp()} returns the next
677 @code{next()} reads the next token in the current
678 file. @code{next_nomacro()} reads the next token without macro
681 @code{tok} contains the current token (see @code{TOK_xxx})
682 constants. Identifiers and keywords are also keywords. @code{tokc}
683 contains additional infos about the token (for example a constant value
684 if number or string token).
688 The parser is hardcoded (yacc is not necessary). It does only one pass,
693 @item For initialized arrays with unknown size, a first pass
694 is done to count the number of elements.
696 @item For architectures where arguments are evaluated in
697 reverse order, a first pass is done to reverse the argument order.
703 The types are stored in a single 'int' variable. It was choosen in the
704 first stages of development when tcc was much simpler. Now, it may not
705 be the best solution.
708 #define VT_INT 0 /* integer type */
709 #define VT_BYTE 1 /* signed byte type */
710 #define VT_SHORT 2 /* short type */
711 #define VT_VOID 3 /* void type */
712 #define VT_PTR 4 /* pointer */
713 #define VT_ENUM 5 /* enum definition */
714 #define VT_FUNC 6 /* function type */
715 #define VT_STRUCT 7 /* struct/union definition */
716 #define VT_FLOAT 8 /* IEEE float */
717 #define VT_DOUBLE 9 /* IEEE double */
718 #define VT_LDOUBLE 10 /* IEEE long double */
719 #define VT_BOOL 11 /* ISOC99 boolean type */
720 #define VT_LLONG 12 /* 64 bit integer */
721 #define VT_LONG 13 /* long integer (NEVER USED as type, only
723 #define VT_BTYPE 0x000f /* mask for basic type */
724 #define VT_UNSIGNED 0x0010 /* unsigned type */
725 #define VT_ARRAY 0x0020 /* array type (also has VT_PTR) */
726 #define VT_BITFIELD 0x0040 /* bitfield modifier */
728 #define VT_STRUCT_SHIFT 16 /* structure/enum name shift (16 bits left) */
731 When a reference to another type is needed (for pointers, functions and
732 structures), the @code{32 - VT_STRUCT_SHIFT} high order bits are used to
733 store an identifier reference.
735 The @code{VT_UNSIGNED} flag can be set for chars, shorts, ints and long
738 Arrays are considered as pointers @code{VT_PTR} with the flag
741 The @code{VT_BITFIELD} flag can be set for chars, shorts, ints and long
742 longs. If it is set, then the bitfield position is stored from bits
743 VT_STRUCT_SHIFT to VT_STRUCT_SHIFT + 5 and the bit field size is stored
744 from bits VT_STRUCT_SHIFT + 6 to VT_STRUCT_SHIFT + 11.
746 @code{VT_LONG} is never used except during parsing.
748 During parsing, the storage of an object is also stored in the type
752 #define VT_EXTERN 0x00000080 /* extern definition */
753 #define VT_STATIC 0x00000100 /* static variable */
754 #define VT_TYPEDEF 0x00000200 /* typedef definition */
759 All symbols are stored in hashed symbol stacks. Each symbol stack
760 contains @code{Sym} structures.
762 @code{Sym.v} contains the symbol name (remember
763 an idenfier is also a token, so a string is never necessary to store
764 it). @code{Sym.t} gives the type of the symbol. @code{Sym.r} is usually
765 the register in which the corresponding variable is stored. @code{Sym.c} is
766 usually a constant associated to the symbol.
768 Four main symbol stacks are defined:
773 for the macros (@code{#define}s).
776 for the global variables, functions and types.
779 for the local variables, functions and types.
781 @item global_label_stack
782 for the local labels (for @code{goto}).
785 for GCC block local labels (see the @code{__label__} keyword).
789 @code{sym_push()} is used to add a new symbol in the local symbol
790 stack. If no local symbol stack is active, it is added in the global
793 @code{sym_pop(st,b)} pops symbols from the symbol stack @var{st} until
794 the symbol @var{b} is on the top of stack. If @var{b} is NULL, the stack
797 @code{sym_find(v)} return the symbol associated to the identifier
798 @var{v}. The local stack is searched first from top to bottom, then the
803 The generated code and datas are written in sections. The structure
804 @code{Section} contains all the necessary information for a given
805 section. @code{new_section()} creates a new section. ELF file semantics
806 is assumed for each section.
808 The following sections are predefined:
813 is the section containing the generated code. @var{ind} contains the
814 current position in the code section.
817 contains initialized data
820 contains uninitialized data
823 @itemx lbounds_section
824 are used when bound checking is activated
827 @itemx stabstr_section
828 are used when debugging is actived to store debug information
831 @itemx strtab_section
832 contain the exported symbols (currently only used for debugging).
836 @section Code generation
837 @cindex code generation
839 @subsection Introduction
841 The TCC code generator directly generates linked binary code in one
842 pass. It is rather unusual these days (see gcc for example which
843 generates text assembly), but it can be very fast and surprisingly
846 The TCC code generator is register based. Optimization is only done at
847 the expression level. No intermediate representation of expression is
848 kept except the current values stored in the @emph{value stack}.
850 On x86, three temporary registers are used. When more registers are
851 needed, one register is spilled into a new temporary variable on the stack.
853 @subsection The value stack
854 @cindex value stack, introduction
856 When an expression is parsed, its value is pushed on the value stack
857 (@var{vstack}). The top of the value stack is @var{vtop}. Each value
858 stack entry is the structure @code{SValue}.
860 @code{SValue.t} is the type. @code{SValue.r} indicates how the value is
861 currently stored in the generated code. It is usually a CPU register
862 index (@code{REG_xxx} constants), but additional values and flags are
866 #define VT_CONST 0x00f0
867 #define VT_LLOCAL 0x00f1
868 #define VT_LOCAL 0x00f2
869 #define VT_CMP 0x00f3
870 #define VT_JMP 0x00f4
871 #define VT_JMPI 0x00f5
872 #define VT_LVAL 0x0100
873 #define VT_SYM 0x0200
874 #define VT_MUSTCAST 0x0400
875 #define VT_MUSTBOUND 0x0800
876 #define VT_BOUNDED 0x8000
877 #define VT_LVAL_BYTE 0x1000
878 #define VT_LVAL_SHORT 0x2000
879 #define VT_LVAL_UNSIGNED 0x4000
880 #define VT_LVAL_TYPE (VT_LVAL_BYTE | VT_LVAL_SHORT | VT_LVAL_UNSIGNED)
886 indicates that the value is a constant. It is stored in the union
887 @code{SValue.c}, depending on its type.
890 indicates a local variable pointer at offset @code{SValue.c.i} in the
894 indicates that the value is actually stored in the CPU flags (i.e. the
895 value is the consequence of a test). The value is either 0 or 1. The
896 actual CPU flags used is indicated in @code{SValue.c.i}.
898 If any code is generated which destroys the CPU flags, this value MUST be
899 put in a normal register.
903 indicates that the value is the consequence of a conditional jump. For VT_JMP,
904 it is 1 if the jump is taken, 0 otherwise. For VT_JMPI it is inverted.
906 These values are used to compile the @code{||} and @code{&&} logical
909 If any code is generated, this value MUST be put in a normal
910 register. Otherwise, the generated code won't be executed if the jump is
914 is a flag indicating that the value is actually an lvalue (left value of
915 an assignment). It means that the value stored is actually a pointer to
918 Understanding the use @code{VT_LVAL} is very important if you want to
919 understand how TCC works.
923 @itemx VT_LVAL_UNSIGNED
924 if the lvalue has an integer type, then these flags give its real
925 type. The type alone is not enough in case of cast optimisations.
928 is a saved lvalue on the stack. @code{VT_LLOCAL} should be eliminated
929 ASAP because its semantics are rather complicated.
932 indicates that a cast to the value type must be performed if the value
933 is used (lazy casting).
936 indicates that the symbol @code{SValue.sym} must be added to the constant.
940 are only used for optional bound checking.
944 @subsection Manipulating the value stack
947 @code{vsetc()} and @code{vset()} pushes a new value on the value
948 stack. If the previous @var{vtop} was stored in a very unsafe place(for
949 example in the CPU flags), then some code is generated to put the
950 previous @var{vtop} in a safe storage.
952 @code{vpop()} pops @var{vtop}. In some cases, it also generates cleanup
953 code (for example if stacked floating point registers are used as on
956 The @code{gv(rc)} function generates code to evaluate @var{vtop} (the
957 top value of the stack) into registers. @var{rc} selects in which
958 register class the value should be put. @code{gv()} is the @emph{most
959 important function} of the code generator.
961 @code{gv2()} is the same as @code{gv()} but for the top two stack
964 @subsection CPU dependent code generation
965 @cindex CPU dependent
966 See the @file{i386-gen.c} file to have an example.
971 must generate the code needed to load a stack value into a register.
974 must generate the code needed to store a register into a stack value
980 should generate a function call
983 @itemx gfunc_epilog()
984 should generate a function prolog/epilog.
987 must generate the binary integer operation @var{op} on the two top
988 entries of the stack which are guaranted to contain integer types.
990 The result value should be put on the stack.
993 same as @code{gen_opi()} for floating point operations. The two top
994 entries of the stack are guaranted to contain floating point values of
998 integer to floating point conversion.
1000 @item gen_cvt_ftoi()
1001 floating point to integer conversion.
1003 @item gen_cvt_ftof()
1004 floating point to floating point of different size conversion.
1006 @item gen_bounded_ptr_add()
1007 @item gen_bounded_ptr_deref()
1008 are only used for bounds checking.
1012 @section Optimizations done
1013 @cindex optimizations
1014 @cindex constant propagation
1015 @cindex strength reduction
1016 @cindex comparison operators
1017 @cindex caching processor flags
1018 @cindex flags, caching
1019 @cindex jump optimization
1020 Constant propagation is done for all operations. Multiplications and
1021 divisions are optimized to shifts when appropriate. Comparison
1022 operators are optimized by maintaining a special cache for the
1023 processor flags. &&, || and ! are optimized by maintaining a special
1024 'jump target' value. No other jump optimization is currently performed
1025 because it would require to store the code in a more abstract fashion.
1027 @unnumbered Concept Index
1034 @c texinfo-column-for-description: 32