On Tue, Dec 18, 2018 at 08:25:26AM +0100, Martin Ågren wrote:
> No-one looks at the return value, so we might as well drop it. It's
> still available as `format->version`.
>
> In v1 of what became commit 2cc7c2c737 ("setup: refactor repo format
> reading and verification", 2016-03-11), this function actually had
> return type "void", but that was changed in v2. Almost three years
> later, no-one has used this return value.
Hmm. If we have to pick one, I'd say that just returning a sane exit
value would be the more conventional thing to do. But looking at the
callers, many of them want to just pass the struct on to the verify
function.
That said, there is a long-standing curiosity here that we may want to
consider: read_repository_format() does not distinguish between these
three cases:
1. the config file is missing
2. the config file is present, but does not have a version field
3. the config file is malformed, or we experience an I/O error
(although I think there are still some cases that cause the config
parser to die(), which may be sufficient)
The comment in check_repository_format_gently() implies that git-init
needs (1) to be a non-error for historical reasons. We could probably
tighten this up for other callers.
I think (2) probably should be an error, but note that it makes t1300
very unhappy, since it stomps all over .git/config. I'm not sure if any
real-world cases would be affected.
Case (3) I think we probably ought to do a better job of diagnosing. So
I wonder if the rule should be:
- if we encounter a real error reading the config,
read_repository_format() should return -1. Most callers should
detect this and complain.
- otherwise, a missing config returns 0 but puts "-1" into the version
field
- possibly verify_repository_format() should issue a warning when it
sees "version == -1" and then rewrite the result into "0"
I dunno. This is one of those dark corners of the code where we appear
to do the wrong thing, but nobody seems to have noticed or cared much,
and changing it runs the risk of breaking some obscure cases. I'm not
sure if we should bite the bullet and try to address that, or just back
away slowly and pretend we never looked at it. ;)
> Signed-off-by: Martin Ågren <martin.agren@xxxxxxxxx>
> ---
> I only discovered the full history after writing the patch. Had I known
> it from the beginning, maybe I'd have just skipped this step, but I was
> sufficiently disturbed by the redundant and unused return value that I
> dropped it before working on the actual meat of this series.
>
> cache.h | 7 +++----
> setup.c | 3 +--
> 2 files changed, 4 insertions(+), 6 deletions(-)
FWIW, the patch itself seems fine, and obviously doesn't make anything
worse on its own. The question is just whether we want to do more
cleanup here.
-Peff
