views:

220

answers:

3

In order to fully understand and take advantage of the new features and enhancements provided with the coming of the new .NET Framework 4.0, I would like to get an example of real-world application of the Code Contracts.

  1. Anyone has a good example of application of this feature?

I would like to get a code sample with a brief explanation to help me get up and running with it.

Thanks! =)

+3  A: 

There is a freely available chapter about code contracts in the upcoming book C# in Depth, second edition. By some guy named Jon Skeet, some of you may be familiar with him :)

As for practical usage. You can use them anywhere in your code, but especially if you're developing framework / API type libraries that lots of people will be using, I expect them to come in quite handy. Static verification of your code saves a lot of time compared to finding out at runtime that you didn't handle some edge case.

You may document your method usage all you like, but will people actually read that documentation? Is it allowed to have string parameter x in method y be null, or not? Code contracts can provide that information, to take the guesswork out of the equation.

Here's an example of just such a case:

static int CountWhitespace(string text)
{
    Contract.Requires<ArgumentNullException>(text != null, "text");
    return text.Count(char.IsWhiteSpace);
}

The verification will complain if anyone tried to pass a string to CountWhitespace that might be null. In addition, it will throw an ArgumentNullException at runtime.

I've only recently converted my private class library to .NET 4.0, but I plan to add code contracts to it real soon.

Thorarin
Do you have a real-world example, as the OP requested?
Robert Harvey
The PDF article I linked is full of examples? I suppose I could paste them in, but it would be better to read the whole thing.
Thorarin
+8  A: 

From The Code Contracts User Manual:

Contracts allow you to express preconditions, postconditions and object invariants in your code for runtime checking, static analysis, and documentation.

Code Contracts are used for static verification; imagine if - at compile time - you caught not only syntax errors but also logic errors. This is the vision of static program verification.

Real WOrld Example

You could use contracts (and static verification) to reduce the cost of testing... in particular regression testing. As an example, let's say I write some code which fulfills some business needs... but later, performance needs change, and I'm required to optimize. If I first write a contract, then - when my new optimized code is verified - if it no longer fulfills the original contract I'll get an error message in my IDE, just like if I had a compile time error. As a result, you find and resolve the bug almost immediately, which costs less than a round of testing.

LeguRi
Do you have a real-world example, as the OP requested?
Robert Harvey
Oh sorry I must have only included imaginary-world examples... I'll get working on that :P I think I got one though...
LeguRi
+1: That's close enough.
Robert Harvey
Thanks :) Also, JML4 is a static verifier for Java, which allows you to write pre-conditions and post-conditions (in essence a simple contract) in annotations. For those interested: http://sourceforge.net/apps/trac/jmlspecs/wiki/JML4
LeguRi
+3  A: 

Have you ever seen a NullReferenceException and wished that the compiler could have warned you about it at compile time to avoid finding out the hard way - with your program crashing?

With code contracts you can write things like:

Contract.Requires(foo != null);

This isn't just a runtime check - you can set it up so that if you call this function with an argument that might be null you will get a compile error.

Here's a real world example:

Address GetAddress(Customer customer)
{
    Contract.Requires<ArgumentNullException>(customer != null, "customer");
    return addressBook.FindCustomer(customer);
}
Mark Byers
Do you have a real-world example, as the OP requested?
Robert Harvey
Why is it required to write *customer* again as a string in the second parameter?
Will Marcouiller
@Will Marcouiller: It is not required. If provided it will be used in the error message.
Mark Byers
@Mark Byers: I got it! Thanks! =)
Will Marcouiller