以下代码片段显示“本地范围的静态对象初始化”不是线程安全的:
#include <windows.h>
#include <stdio.h>
#include <process.h>
struct X {
~X() { puts("~X()"); }
int i_ ;
void print(void) {
printf("thread id=%u, i = %d\n", GetCurrentThreadId(), i_);
}
X(int i) {
puts("begin to sleep 10 seconds");
Sleep(1000 * 10);
i_ = i;
printf("X(int) i = %d\n", i_);
puts("end");
}
};
X & getX()
{
static X static_x(1000);
return static_x;
}
void thread_proc(void *)
{
X & x = getX();
x.print();
}
int main(int argc, char *argv[])
{
HANDLE all_threads[2] = {};
all_threads[0] = HANDLE( _beginthread(thread_proc, 0, 0) );
printf("First thread Id: %u\n", GetThreadId(all_threads[0]) );
Sleep(1000);
all_threads[1] = HANDLE( _beginthread(thread_proc, 0, 0) );
printf("Second thread Id: %u\n", GetThreadId(all_threads[1]) );
WaitForMultipleObjects( _countof(all_threads), all_threads, TRUE, 1000 * 20);
puts("main exit");
return 0;
}
输出将是(当然线程 ID 在您的机器上会有所不同):
First thread Id: 20104
begin to sleep 10 seconds
Second thread Id: 20248
thread id=20248, i = 0
X(int) i = 4247392
end
thread id=20104, i = 1000
main exit
~X()
在第一个线程返回之前,这意味着单例的ctor被调用并返回,第二个线程获取未初始化的对象并调用它的成员方法(因为静态对象在BSS段中,加载程序加载后它将被初始化为零可执行文件)并得到错误的值:0。
通过 /FAsc /Fastatic.asm 打开汇编列表将获得函数 getX() 的汇编代码:
01: ?getX@@YAAAUX@@XZ PROC ; getX
02:
03: ; 20 : {
04:
05: 00000 55 push ebp
06: 00001 8b ec mov ebp, esp
07:
08: ; 21 : static X static_x(1000);
09:
10: 00003 a1 00 00 00 00 mov eax, DWORD PTR ?$S1@?1??getX@@YAAAUX@@XZ@4IA
11: 00008 83 e0 01 and eax, 1
12: 0000b 75 2b jne SHORT $LN1@getX
13: 0000d 8b 0d 00 00 00
14: 00 mov ecx, DWORD PTR ?$S1@?1??getX@@YAAAUX@@XZ@4IA
15: 00013 83 c9 01 or ecx, 1
16: 00016 89 0d 00 00 00
17: 00 mov DWORD PTR ?$S1@?1??getX@@YAAAUX@@XZ@4IA, ecx
18: 0001c 68 e8 03 00 00 push 1000 ; 000003e8H
19: 00021 b9 00 00 00 00 mov ecx, OFFSET ?static_x@?1??getX@@YAAAUX@@XZ@4U2@A
20: 00026 e8 00 00 00 00 call ??0X@@QAE@H@Z ; X::X
21: 0002b 68 00 00 00 00 push OFFSET ??__Fstatic_x@?1??getX@@YAAAUX@@XZ@YAXXZ ; `getX'::`2'::`dynamic atexit destructor for 'static_x''
22: 00030 e8 00 00 00 00 call _atexit
23: 00035 83 c4 04 add esp, 4
24: $LN1@getX:
25:
26: ; 22 : return static_x;
27:
28: 00038 b8 00 00 00 00 mov eax, OFFSET ?static_x@?1??getX@@YAAAUX@@XZ@4U2@A
29:
30: ; 23 : }
在第 10 行,神秘符号 [?$S1@?1??getX@@YAAAUX@@XZ@4IA] 是全局指示符(也在 BSS 中),它标记单例是否被连接,它将被标记为 true在第 14-17 行,就在调用 ctor 之前,这就是问题所在,这也解释了为什么第二个线程立即获得未初始化的单例对象并愉快地调用它的成员函数。编译器没有插入与线程安全相关的代码。