62

switch statements can be super useful, but lead to a common bug where a programmer forgot a break statement:

switch(val) {
    case 0:
        foo();
        break;
    case 1:
        bar();
        // oops
    case 2:
        baz();
        break;
    default:
        roomba();
}

You won't get a warning obviously since sometimes fall-through is explicitly desired. Good coding style suggests to comment when your fall-through is deliberate, but sometimes that is insufficient.

I'm pretty sure the answer to this question is no, but: is there any way currently (or proposed in the future) to be able to ask the compiler to throw an error (or at least a warning!) if your case does not have at least one of break; or something to the effect of // fallthru? It would be nice to have a defensive programming option for using switch statements.

8
  • 1
    Which compiler are you using? I know I've seen discussion of adding such an optional warning to gcc. Not sure what's come of that yet though. Commented Jan 15, 2015 at 14:34
  • sounds like a change that could potentially break legacy code if it is anything other than a warning.
    – AndersK
    Commented Jan 15, 2015 at 14:35
  • @Cyber I'm using gcc 4.7
    – Barry
    Commented Jan 15, 2015 at 14:36
  • 1
    There was a coverity blog post about this very topic a few months ago. Commented Jan 15, 2015 at 15:58
  • 1
    @KeillRandor - Another way to "avoid all this stuff" is to use a function table. Commented Jan 16, 2015 at 9:21

5 Answers 5

77

Well clang has -Wimplicit-fallthrough which I did not know about but found by using -Weverything. So for this code it gives me the following warning (see it live):

warning: unannotated fall-through between switch labels [-Wimplicit-fallthrough]
case 2:
^
note: insert '[[clang::fallthrough]];' to silence this warning
case 2:
^
[[clang::fallthrough]]; 
note: insert 'break;' to avoid fall-through
case 2:
^
break; 

The only documentation I can find for this flag is in the Attribute Reference which says:

The clang::fallthrough attribute is used along with the -Wimplicit-fallthrough argument to annotate intentional fall-through between switch labels. It can only be applied to a null statement placed at a point of execution between any statement and the next switch label. It is common to mark these places with a specific comment, but this attribute is meant to replace comments with a more strict annotation, which can be checked by the compiler.

and provides an example of how to mark explicit fall-through:

case 44:  // warning: unannotated fall-through
g();
[[clang::fallthrough]];
case 55:  // no warning

This use of an attribute to mark explicit fall-through has the disadvantage of not being portable. Visual Studio generate an error and gcc generates the following warning:

warning: attributes at the beginning of statement are ignored [-Wattributes]

which is a problem if you want to use -Werror.

I tried this with gcc 4.9 and it looks like gcc does not support this warning:

error: unrecognized command line option '-Wimplicit-fallthrough'

As of GCC 7, -Wimplicit-fallthrough is supported and __attribute__((fallthrough)) can be used to suppress the warnings when fallthrough is intentional. GCC does recognize "fallthrough" comments in certain scenarios, but it can be confused fairly easily.

I do not see a way of generating such a warning for Visual Studio.

Note, Chandler Carruth explains that -Weverything is not for production use:

This is an insane group that literally enables every warning in Clang. Don't use this on your code. It is intended strictly for Clang developers or for exploring what warnings exist.

but it is useful for figuring out what warnings exist.

C++17 changes

In C++17 we get the attribute [[fallthrough]] covered in [dcl.attr.fallthrough]p1:

The attribute-token fallthrough may be applied to a null statement (9.2); such a statement is a fallthrough statement. The attribute-token fallthrough shall appear at most once in each attribute-list and no attributeargument- clause shall be present. A fallthrough statement may only appear within an enclosing switch statement (9.4.2). The next statement that would be executed after a fallthrough statement shall be a labeled statement whose label is a case label or default label for the same switch statement. The program is ill-formed if there is no such statement.

...

[ Example:
void f(int n) {
void g(), h(), i();
switch (n) {
  case 1:
  case 2:
    g();
    [[fallthrough]];
  case 3: // warning on fallthrough discouraged
    h();
  case 4: // implementation may warn on fallthrough
    i();
    [[fallthrough]]; // ill-formed
  }
}
—end example ]

See live example using attribute.

6
  • 2
    This is why -Weverything (which the GCC folks are apparently loathe to emulate) is so useful. No, devs will probably not use it in the "official" set of warnings used to compile their production code, but it's extremely helpful to run codebases against it once in a while to see if there are any genuinely helpful warnings you're missing. Commented Sep 14, 2015 at 16:37
  • @KyleStrand I agree, I have found a few useful warnings this way. Commented Sep 14, 2015 at 16:41
  • 8
    [[fallthrough]] is now an official C++17 annotation so hopefully more compilers will add support for optional warnings when statements fall through without this annotation. Commented May 11, 2016 at 12:40
  • Note: there There is an open request for [[fallthrough]] and a related compiler warning to be implemented for Visual C++; you can vote for it if you would like to see this as well. Commented May 11, 2016 at 12:54
  • Worth noting -Wimplicit-fallthrough is not implement for C in clang but is in gcc Commented Feb 9, 2018 at 4:32
12

I always write a break; before each case, as follows:

switch(val) {
    break; case 0:
        foo();
    break; case 1:
        bar();
    break; case 2:
        baz();
    break; default:
        roomba();
}

This way, it is much more obvious to the eye if a break; is missing. The initial break; is redundant I suppose, but it helps to be consistent.

This is a conventional switch statement, I've simply used whitespace in a different way, removing the newline that is normally after a break; and before the next case.

10
  • 11
    How about #define CASE break; case? ;) Commented Jan 15, 2015 at 15:54
  • 7
    @FredOverflow: That would defeat the purpose of making the break;s more visually prominent. Commented Jan 15, 2015 at 17:35
  • 3
    What do you do in the fallthrough case? Just leave out the break?
    – nwp
    Commented Jan 15, 2015 at 18:35
  • 4
    @FredOverflow I find defines that change native commands like that a bit intrusive. Commented Jan 15, 2015 at 21:08
  • 23
    Wow, that's horrible to look at
    – James
    Commented Jan 16, 2015 at 9:02
6

Advice: if you consistently put a blank line in between case clauses, the absence of a 'break' becomes more visible to a human skimming the code:

switch (val) {
    case 0:
        foo();
        break;

    case 1:
        bar();

    case 2:
        baz();
        break;

    default:
        roomba();
}

This isn't as effective when there's a lot of code inside individual case clauses, but that tends to be a bad code smell in itself.

0

You can use a "python style" switch as follows (see it live, perhaps to one's surprise this is actually legal construct accoriding to the standard).

The key trick is to make the entire switch statement a simple statement - i.e. there is scope block, as usual.

Instead, we start a chaining if-statement interspersed with case labels. The if statement itself is unreachable, but you can chain with else if(/*irrelevant*/) to continue the switch in a way that never falls through.

The else nicely excludes the other branches. In effect it's a "switch tree" now, with labels that bypass the conditions.

switch (a) if (false)
    case 4:
    case 5:
    case 6:
        std::cout << "4,5,6" << std::endl; //single statement
        else if (false)
    case 7:
    case 8:
        { //compound is ok too
            std::cout << "7,";
            std::cout << "8" << std::endl;
        }
        else if (false)
    default:
        std::cout << "default" << std::endl;

Note that:

  • the actual condition expression is unused (the case labels jump past the condition)

  • you could actually use a macro like

      #define FORCEBREAK else if(false)
    

    to highlight the meaning.

Cons:

  • That last aspect kind of highlights a flaw: it's strictly more work, and C++17 [[fallthrough]] is mostly just better
  • You now need to silence the unreachable code warning that compilers give (e.g. GCC requires -Wno-switch-unreachable to accept it without warning)

Pros:

  • It's fancy
  • It teaches about the flexibilities of switch statements
  • It does force people to correctly break their switch cases, or it will fail with compile-time errors
  • It applies to C as well with minor modifications

Live On Compiler Explorer

#include <iostream>

void switchless(int a) {
    switch (a) if (false)
        case 4:
        case 5:
        case 6:
            std::cout << "4,5,6" << std::endl; //single statement
            else if (false)
        case 7:
        case 8:
            { //compound is ok too
                std::cout << "7,";
                std::cout << "8" << std::endl;
            }
            else if (false)
        default:
            std::cout << "default" << std::endl;
}

int main() {
    for (int i = 0; i < 10; ++i)
        switchless(i);
}

Prints

default
default
default
default
4,5,6
4,5,6
4,5,6
7,8
7,8
default
16
  • 1
    Yeah, but now you can't use standard warning flags godbolt.org/z/TKvT7rYr1. Also, what does this add? If you are disciplined enough to add two magic tokens (if (true) and else) then surely you will be motivated to add one token? (break;)
    – sehe
    Commented Mar 23, 2021 at 17:00
  • 1
    Mmm. I thought that you could add one at the front. However, I missed (because you didn't hightlight/explain it) that there wasn't a {} block for the switch itself. Given that, I would say these two changes make it striclty better: godbolt.org/z/hjaqasoYM - note that this is basically exactly what you get if you replase break with else if (false). [And notice I had to silence another warning that is even on by default.]
    – sehe
    Commented Mar 23, 2021 at 18:29
  • 1
    @sehe Well, yes, that answer is certainly worse than this one. But the problem here has a very good solution in [[fallthrough]] (and the answer also includes other historic approaches that predate that attribute) and there is really no reason to suggest any other approach.
    – Barry
    Commented Mar 23, 2021 at 18:53
  • 1
    gcc and clang both also support __attribute__((fallthrough)) in C: demo
    – Barry
    Commented Mar 23, 2021 at 19:02
  • 1
    Fixed it some more; note I flipped the order so it's much clearer that the entire body is an if-statement, the conditions don't matter (and are elimintaed as dead code) and, last but not least, it works well with formatting tools (like clang-format)
    – sehe
    Commented Mar 23, 2021 at 19:33
-1

Here's an answer to compulsively hate.

First, switch statements are fancy gotos. They can be combined with other control flow (famously, Duff's Device), but the obvious analogy here is a goto or two. Here's a useless example:

switch (var) {
    CASE1: case 1:
        if (foo) goto END; //same as break
        goto CASE2; //same as fallthrough
    CASE2: case 2:
        break;
    CASE3: case 3:
        goto CASE2; //fall *up*
    CASE4: case 4:
        return; //no break, but also no fallthrough!
    DEFAULT: default:
        continue; //similar, if you're in a loop
}
END:

Do I recommend this? No. In fact, if you're considering this just to annotate a fall-through, then your problem is actually something else.

This sort of code does make it very clear that a fall-through can happen in case 1, but as the other bits show, this is a very powerful technique in general that also lends itself to abuse. Be careful if you use it.

Forgetting a break? Well, then you'll also occasionally forget whatever annotation you pick. Forgetting to account for fall-through when changing a switch statement? You're a bad programmer. When modifying switch statements(or really any code), you need to first understand them.


Honestly, I very seldom make this kind of error (forgetting a break)--certainly less than I made other "common" programming errors (strict aliasing, for example). To be safe, I currently do (and recommend you to do) just write //fallthrough, since this at least clarifies intention.

Other than that, it's a just a reality that programmers need to accept. Proofread your code after you write it and find the occasional problem with debugging. That's life.

7
  • 5
    Do you also compile with all warnings disabled because you consider proofreading sufficient?
    – Barry
    Commented Jan 15, 2015 at 21:26
  • 10
    I am compulsively hating this.
    – matsjoyce
    Commented Jan 15, 2015 at 21:27
  • @Barry Proofreading was sufficient. It compiles just fine and does what it should. I assume you mean the unreferenced labels, which I included deliberately for clarity. I'm not sorry about them.
    – geometrian
    Commented Jan 15, 2015 at 22:11
  • 2
    Interesting excercise. Commented Jan 20, 2015 at 22:26
  • 1
    This is just a rant.
    – S.S. Anne
    Commented Aug 7, 2019 at 16:42

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.