1 \input texinfo @c -*- texinfo -*-
3 @settitle Tiny C Compiler Reference Documentation
6 @center @titlefont{Tiny C Compiler Reference Documentation}
12 TinyCC (aka TCC) is a small but hyper fast C compiler. Unlike other C
13 compilers, it is meant to be self-suffisant: you do not need an
14 external assembler or linker because TCC does that for you.
16 TCC compiles so @emph{fast} that even for big projects @code{Makefile}s may
19 TCC not only supports ANSI C, but also most of the new ISO C99
20 standard and many GNUC extensions.
22 TCC can also be used to make @emph{C scripts}, i.e. pieces of C source
23 that you run as a Perl or Python script. Compilation is so fast that
24 your script will be as fast as if it was an executable.
26 TCC can also automatically generate memory and bound checks
27 (@xref{bounds}) while allowing all C pointers operations. TCC can do
28 these checks even if non patched libraries are used.
30 With @code{libtcc}, you can use TCC as a backend for dynamic code
31 generation (@xref{libtcc}).
34 @chapter Command line invocation
39 usage: tcc [-c] [-o outfile] [-Bdir] [-bench] [-Idir] [-Dsym[=val]] [-Usym]
40 [-g] [-b] [-Ldir] [-llib] [-shared] [-static]
41 [--] infile1 [infile2... --] [infile_args...]
44 TCC options are a very much like gcc. The main difference is that TCC
45 can also execute directly the resulting program and give it runtime
48 Here are some examples to understand the logic:
52 Compile a.c and execute it directly
55 Compile a.c and execute it directly. arg1 is given as first argument to
56 the @code{main()} of a.c.
58 @item tcc -- a.c b.c -- arg1
59 Compile a.c and b.c, link them together and execute them. arg1 is given
60 as first argument to the @code{main()} of the resulting program. Because
61 multiple C files are specified, @code{--} are necessary to clearly separate the
62 program arguments from the TCC options.
64 @item tcc -o myprog a.c b.c
65 Compile a.c and b.c, link them and generate the executable myprog.
67 @item tcc -o myprog a.o b.o
68 link a.o and b.o together and generate the executable myprog.
70 @item tcc -c -o a.o a.c
71 Compile a.c and generate object file a.o
77 TCC can be invoked from @emph{scripts}, just as shell scripts. You just
78 need to add @code{#!/usr/local/bin/tcc} at the start of your C source:
86 printf("Hello World\n");
91 @section Option summary
97 Generate an object file (@samp{-o} option must also be given).
100 Put object file, executable, or dll into output file @file{outfile}.
103 Set the path where the tcc internal libraries can be found (default is
104 @code{prefix}@file{/lib/tcc}.
107 Output compilation statistics.
110 Preprocessor options:
114 Specify an additionnal include path. The default ones are:
115 @file{/usr/local/include}, @code{prefix}@file{/lib/tcc/include} and
116 @file{/usr/include} (@code{prefix} is usually @file{/usr} or
120 Define preprocessor symbol 'sym' to
121 val. If val is not present, its value is '1'. Function-like macros can
122 also be defined: @code{'-DF(a)=a+1'}
125 Undefine preprocessor symbol 'sym'.
132 Generate run time debug information so that you get clear run time
133 error messages: @code{ test.c:68: in function 'test5()': dereferencing
134 invalid pointer} instead of the laconic @code{Segmentation
138 Generate additionnal support code to check
139 memory allocations and array/pointer bounds. '-g' is implied. Note
140 that the generated code is slower and bigger in this case.
147 Specify an additionnal static library path for the @samp{-l} option. The
148 default library paths are @file{/usr/local/lib}, @file{/usr/lib} and @file{/lib}.
151 Link your program with dynamic library libxxx.so or static library
152 libxxx.a. The library is searched in the paths specified by the
156 Generate a shared library instead of an executable (@samp{-o} option
160 Generate a statically linked executable (default is a shared linked
161 executable) (@samp{-o} option must also be given).
165 @chapter C language support
169 TCC implements all the ANSI C standard, including structure bit fields
170 and floating point numbers (@code{long double}, @code{double}, and
171 @code{float} fully supported). The following limitations are known:
174 @item The preprocessor tokens are the same as C. It means that in some
175 rare cases, preprocessed numbers are not handled exactly as in ANSI
176 C. This approach has the advantage of being simpler and FAST!
179 @section ISOC99 extensions
181 TCC implements many features of the new C standard: ISO C99. Currently
182 missing items are: complex and imaginary numbers and variable length
185 Currently implemented ISOC99 features:
189 @item 64 bit @code{'long long'} types are fully supported.
191 @item The boolean type @code{'_Bool'} is supported.
193 @item @code{'__func__'} is a string variable containing the current
196 @item Variadic macros: @code{__VA_ARGS__} can be used for
197 function-like macros:
199 #define dprintf(level, __VA_ARGS__) printf(__VA_ARGS__)
201 @code{dprintf} can then be used with a variable number of parameters.
203 @item Declarations can appear anywhere in a block (as in C++).
205 @item Array and struct/union elements can be initialized in any order by
208 struct { int x, y; } st[10] = { [0].x = 1, [0].y = 2 };
210 int tab[10] = { 1, 2, [5] = 5, [9] = 9};
213 @item Compound initializers are supported:
215 int *p = (int []){ 1, 2, 3 };
217 to initialize a pointer pointing to an initialized array. The same
218 works for structures and strings.
220 @item Hexadecimal floating point constants are supported:
222 double d = 0x1234p10;
224 is the same as writing
226 double d = 4771840.0;
229 @item @code{'inline'} keyword is ignored.
231 @item @code{'restrict'} keyword is ignored.
234 @section GNU C extensions
236 TCC implements some GNU C extensions:
240 @item array designators can be used without '=':
242 int a[10] = { [0] 1, [5] 2, 3, 4 };
245 @item Structure field designators can be a label:
247 struct { int x, y; } st = { x: 1, y: 1};
251 struct { int x, y; } st = { .x = 1, .y = 1};
254 @item @code{'\e'} is ASCII character 27.
256 @item case ranges : ranges can be used in @code{case}s:
260 printf("range 1 to 9\n");
263 printf("unexpected\n");
268 @item The keyword @code{__attribute__} is handled to specify variable or
269 function attributes. The following attributes are supported:
271 @item @code{aligned(n)}: align data to n bytes (must be a power of two).
273 @item @code{section(name)}: generate function or data in assembly
274 section name (name is a string containing the section name) instead
275 of the default section.
277 @item @code{unused}: specify that the variable or the function is unused.
279 @item @code{cdecl}: use standard C calling convention.
281 @item @code{stdcall}: use Pascal-like calling convention.
285 Here are some examples:
287 int a __attribute__ ((aligned(8), section(".mysection")));
290 align variable @code{'a'} to 8 bytes and put it in section @code{.mysection}.
293 int my_add(int a, int b) __attribute__ ((section(".mycodesection")))
299 generate function @code{'my_add'} in section @code{.mycodesection}.
301 @item GNU style variadic macros:
303 #define dprintf(fmt, args...) printf(fmt, ## args)
306 dprintf("one arg %d\n", 1);
311 @section TinyCC extensions
315 @item @code{__TINYC__} is a predefined macro to @code{'1'} to
316 indicate that you use TCC.
318 @item @code{'#!'} at the start of a line is ignored to allow scripting.
320 @item Binary digits can be entered (@code{'0b101'} instead of
323 @item @code{__BOUNDS_CHECKING_ON} is defined if bound checking is activated.
327 @chapter TinyCC Linker
329 @section ELF file generation
331 TCC can directly output relocatable ELF files (object files),
332 executable ELF files and dynamic ELF libraries without relying on an
335 Dynamic ELF libraries are not working correctly yet because the C
336 compiler does not generate position independant code (PIC) code.
338 TCC linker cannot currently suppress unused object code. But TCC
339 will soon integrate a novel feature not found in GNU tools: unused code
340 will be suppressed at the function or variable level, provided you only
341 use TCC to compile your files.
343 ELF symbol hash table is currently fixed.
345 @section ELF file loader
347 TCC can load ELF object files, archives (.a files) and dynamic
350 Currently, the @code{stabs} debug information is not relocated.
352 @section GNU Linker Scripts
354 Because on many Linux systems some dynamic libraries (such as
355 @file{/usr/lib/libc.so}) are in fact GNU ld link scripts (horrible!),
356 TCC linker also support a subset of GNU ld scripts.
358 The @code{GROUP} and @code{FILE} commands are supported.
360 Example from @file{/usr/lib/libc.so}:
363 Use the shared library, but some functions are only in
364 the static library, so try that secondarily. */
365 GROUP ( /lib/libc.so.6 /usr/lib/libc_nonshared.a )
369 @chapter TinyCC Memory and Bound checks
371 This feature is activated with the @code{'-b'} (@xref{invoke}).
373 Note that pointer size is @emph{unchanged} and that code generated
374 with bound checks is @emph{fully compatible} with unchecked
375 code. When a pointer comes from unchecked code, it is assumed to be
376 valid. Even very obscure C code with casts should work correctly.
378 To have more information about the ideas behind this method, check at
379 @url{http://www.doc.ic.ac.uk/~phjk/BoundsChecking.html}.
381 Here are some examples of catched errors:
385 @item Invalid range with standard string function:
393 @item Bound error in global or local arrays:
403 @item Bound error in allocated data:
407 tab = malloc(20 * sizeof(int));
415 @item Access to a freed region:
419 tab = malloc(20 * sizeof(int));
427 @item Freeing an already freed region:
431 tab = malloc(20 * sizeof(int));
440 @chapter The @code{libtcc} library
442 The @code{libtcc} library enables you to use TCC as a backend for
443 dynamic code generation.
445 Read the @file{libtcc.h} to have an overview of the API. Read
446 @file{libtcc_test.c} to have a very simple example.
448 The idea consists in giving a C string containing the program you want
449 to compile directly to @code{libtcc}. Then the @code{main()} function of
450 the compiled string can be launched.
452 @chapter Developper's guide
454 This chapter gives some hints to understand how TCC works. You can skip
455 it if you do not intend to modify the TCC code.
457 @section File reading
459 The @code{BufferedFile} structure contains the context needed to read a
460 file, including the current line number. @code{tcc_open()} opens a new
461 file and @code{tcc_close()} closes it. @code{inp()} returns the next
466 @code{next()} reads the next token in the current
467 file. @code{next_nomacro()} reads the next token without macro
470 @code{tok} contains the current token (see @code{TOK_xxx})
471 constants. Identifiers and keywords are also keywords. @code{tokc}
472 contains additionnal infos about the token (for example a constant value
473 if number or string token).
477 The parser is hardcoded (yacc is not necessary). It does only one pass,
482 @item For initialized arrays with unknown size, a first pass
483 is done to count the number of elements.
485 @item For architectures where arguments are evaluated in
486 reverse order, a first pass is done to reverse the argument order.
492 The types are stored in a single 'int' variable. It was choosen in the
493 first stages of development when tcc was much simpler. Now, it may not
494 be the best solution.
497 #define VT_INT 0 /* integer type */
498 #define VT_BYTE 1 /* signed byte type */
499 #define VT_SHORT 2 /* short type */
500 #define VT_VOID 3 /* void type */
501 #define VT_PTR 4 /* pointer */
502 #define VT_ENUM 5 /* enum definition */
503 #define VT_FUNC 6 /* function type */
504 #define VT_STRUCT 7 /* struct/union definition */
505 #define VT_FLOAT 8 /* IEEE float */
506 #define VT_DOUBLE 9 /* IEEE double */
507 #define VT_LDOUBLE 10 /* IEEE long double */
508 #define VT_BOOL 11 /* ISOC99 boolean type */
509 #define VT_LLONG 12 /* 64 bit integer */
510 #define VT_LONG 13 /* long integer (NEVER USED as type, only
512 #define VT_BTYPE 0x000f /* mask for basic type */
513 #define VT_UNSIGNED 0x0010 /* unsigned type */
514 #define VT_ARRAY 0x0020 /* array type (also has VT_PTR) */
515 #define VT_BITFIELD 0x0040 /* bitfield modifier */
517 #define VT_STRUCT_SHIFT 16 /* structure/enum name shift (16 bits left) */
520 When a reference to another type is needed (for pointers, functions and
521 structures), the @code{32 - VT_STRUCT_SHIFT} high order bits are used to
522 store an identifier reference.
524 The @code{VT_UNSIGNED} flag can be set for chars, shorts, ints and long
527 Arrays are considered as pointers @code{VT_PTR} with the flag
530 The @code{VT_BITFIELD} flag can be set for chars, shorts, ints and long
531 longs. If it is set, then the bitfield position is stored from bits
532 VT_STRUCT_SHIFT to VT_STRUCT_SHIFT + 5 and the bit field size is stored
533 from bits VT_STRUCT_SHIFT + 6 to VT_STRUCT_SHIFT + 11.
535 @code{VT_LONG} is never used except during parsing.
537 During parsing, the storage of an object is also stored in the type
541 #define VT_EXTERN 0x00000080 /* extern definition */
542 #define VT_STATIC 0x00000100 /* static variable */
543 #define VT_TYPEDEF 0x00000200 /* typedef definition */
548 All symbols are stored in hashed symbol stacks. Each symbol stack
549 contains @code{Sym} structures.
551 @code{Sym.v} contains the symbol name (remember
552 an idenfier is also a token, so a string is never necessary to store
553 it). @code{Sym.t} gives the type of the symbol. @code{Sym.r} is usually
554 the register in which the corresponding variable is stored. @code{Sym.c} is
555 usually a constant associated to the symbol.
557 Four main symbol stacks are defined:
562 for the macros (@code{#define}s).
565 for the global variables, functions and types.
568 for the external symbols shared between files.
571 for the local variables, functions and types.
574 for the local labels (for @code{goto}).
578 @code{sym_push()} is used to add a new symbol in the local symbol
579 stack. If no local symbol stack is active, it is added in the global
582 @code{sym_pop(st,b)} pops symbols from the symbol stack @var{st} until
583 the symbol @var{b} is on the top of stack. If @var{b} is NULL, the stack
586 @code{sym_find(v)} return the symbol associated to the identifier
587 @var{v}. The local stack is searched first from top to bottom, then the
592 The generated code and datas are written in sections. The structure
593 @code{Section} contains all the necessary information for a given
594 section. @code{new_section()} creates a new section. ELF file semantics
595 is assumed for each section.
597 The following sections are predefined:
602 is the section containing the generated code. @var{ind} contains the
603 current position in the code section.
606 contains initialized data
609 contains uninitialized data
612 @itemx lbounds_section
613 are used when bound checking is activated
616 @itemx stabstr_section
617 are used when debugging is actived to store debug information
620 @itemx strtab_section
621 contain the exported symbols (currently only used for debugging).
625 @section Code generation
627 @subsection Introduction
629 The TCC code generator directly generates linked binary code in one
630 pass. It is rather unusual these days (see gcc for example which
631 generates text assembly), but it allows to be very fast and surprisingly
634 The TCC code generator is register based. Optimization is only done at
635 the expression level. No intermediate representation of expression is
636 kept except the current values stored in the @emph{value stack}.
638 On x86, three temporary registers are used. When more registers are
639 needed, one register is flushed in a new local variable.
641 @subsection The value stack
643 When an expression is parsed, its value is pushed on the value stack
644 (@var{vstack}). The top of the value stack is @var{vtop}. Each value
645 stack entry is the structure @code{SValue}.
647 @code{SValue.t} is the type. @code{SValue.r} indicates how the value is
648 currently stored in the generated code. It is usually a CPU register
649 index (@code{REG_xxx} constants), but additionnal values and flags are
653 #define VT_CONST 0x00f0 /* constant in vc
654 (must be first non register value) */
655 #define VT_LLOCAL 0x00f1 /* lvalue, offset on stack */
656 #define VT_LOCAL 0x00f2 /* offset on stack */
657 #define VT_CMP 0x00f3 /* the value is stored in processor flags (in vc) */
658 #define VT_JMP 0x00f4 /* value is the consequence of jmp true (even) */
659 #define VT_JMPI 0x00f5 /* value is the consequence of jmp false (odd) */
660 #define VT_LVAL 0x0100 /* var is an lvalue */
661 #define VT_FORWARD 0x0200 /* value is forward reference */
662 #define VT_MUSTCAST 0x0400 /* value must be casted to be correct (used for
663 char/short stored in integer registers) */
664 #define VT_MUSTBOUND 0x0800 /* bound checking must be done before
665 dereferencing value */
666 #define VT_BOUNDED 0x8000 /* value is bounded. The address of the
667 bounding function call point is in vc */
668 #define VT_LVAL_BYTE 0x1000 /* lvalue is a byte */
669 #define VT_LVAL_SHORT 0x2000 /* lvalue is a short */
670 #define VT_LVAL_UNSIGNED 0x4000 /* lvalue is unsigned */
671 #define VT_LVAL_TYPE (VT_LVAL_BYTE | VT_LVAL_SHORT | VT_LVAL_UNSIGNED)
677 indicates that the value is a constant. It is stored in the union
678 @code{SValue.c}, depending on its type.
681 indicates a local variable pointer at offset @code{SValue.c.i} in the
685 indicates that the value is actually stored in the CPU flags (i.e. the
686 value is the consequence of a test). The value is either 0 or 1. The
687 actual CPU flags used is indicated in @code{SValue.c.i}.
691 indicates that the value is the consequence of a jmp. For VT_JMP, it is
692 1 if the jump is taken, 0 otherwise. For VT_JMPI it is inverted.
694 These values are used to compile the @code{||} and @code{&&} logical
698 is a flag indicating that the value is actually an lvalue (left value of
699 an assignment). It means that the value stored is actually a pointer to
702 Understanding the use @code{VT_LVAL} is very important if you want to
703 understand how TCC works.
707 @itemx VT_LVAL_UNSIGNED
708 if the lvalue has an integer type, then these flags give its real
709 type. The type alone is not suffisant in case of cast optimisations.
712 is a saved lvalue on the stack. @code{VT_LLOCAL} should be suppressed
713 ASAP because its semantics are rather complicated.
716 indicates that a cast to the value type must be performed if the value
717 is used (lazy casting).
720 indicates that the value is a forward reference to a variable or a function.
724 are only used for optional bound checking.
728 @subsection Manipulating the value stack
730 @code{vsetc()} and @code{vset()} pushes a new value on the value
731 stack. If the previous @code{vtop} was stored in a very unsafe place(for
732 example in the CPU flags), then some code is generated to put the
733 previous @code{vtop} in a safe storage.
735 @code{vpop()} pops @code{vtop}. In some cases, it also generates cleanup
736 code (for example if stacked floating point registers are used as on
739 The @code{gv(rc)} function generates code to evaluate @code{vtop} (the
740 top value of the stack) into registers. @var{rc} selects in which
741 register class the value should be put. @code{gv()} is the @emph{most
742 important function} of the code generator.
744 @code{gv2()} is the same as @code{gv()} but for the top two stack
747 @subsection CPU dependent code generation
749 See the @file{i386-gen.c} file to have an example.
754 must generate the code needed to load a stack value into a register.
757 must generate the code needed to store a register into a stack value
763 should generate a function call
766 @itemx gfunc_epilog()
767 should generate a function prolog/epilog.
770 must generate the binary integer operation @var{op} on the two top
771 entries of the stack which are guaranted to contain integer types.
773 The result value should be put on the stack.
776 same as @code{gen_opi()} for floating point operations. The two top
777 entries of the stack are guaranted to contain floating point values of
781 integer to floating point conversion.
784 floating point to integer conversion.
787 floating point to floating point of different size conversion.
789 @item gen_bounded_ptr_add()
790 @item gen_bounded_ptr_deref()
791 are only used for bound checking.
795 @section Optimizations done
797 Constant propagation is done for all operations. Multiplications and
798 divisions are optimized to shifts when appropriate. Comparison
799 operators are optimized by maintaining a special cache for the
800 processor flags. &&, || and ! are optimized by maintaining a special
801 'jump target' value. No other jump optimization is currently performed
802 because it would require to store the code in a more abstract fashion.