blob: 693af1d0cf216adfeb213aa0759fceac3366a99f [file] [log] [blame]
Raymond Hettingerf3501602003-09-08 19:01:04 +00001\chapter{Extending Python with \C{} or \Cpp{} \label{intro}}
Fred Drakecc8f44b2001-08-20 19:30:29 +00002
3
4It is quite easy to add new built-in modules to Python, if you know
5how to program in C. Such \dfn{extension modules} can do two things
6that can't be done directly in Python: they can implement new built-in
7object types, and they can call C library functions and system calls.
8
9To support extensions, the Python API (Application Programmers
10Interface) defines a set of functions, macros and variables that
11provide access to most aspects of the Python run-time system. The
12Python API is incorporated in a C source file by including the header
13\code{"Python.h"}.
14
15The compilation of an extension module depends on its intended use as
16well as on your system setup; details are given in later chapters.
17
18
19\section{A Simple Example
20 \label{simpleExample}}
21
22Let's create an extension module called \samp{spam} (the favorite food
23of Monty Python fans...) and let's say we want to create a Python
24interface to the C library function \cfunction{system()}.\footnote{An
25interface for this function already exists in the standard module
Raymond Hettinger68804312005-01-01 00:28:46 +000026\module{os} --- it was chosen as a simple and straightforward example.}
Fred Drakecc8f44b2001-08-20 19:30:29 +000027This function takes a null-terminated character string as argument and
28returns an integer. We want this function to be callable from Python
29as follows:
30
31\begin{verbatim}
32>>> import spam
33>>> status = spam.system("ls -l")
34\end{verbatim}
35
36Begin by creating a file \file{spammodule.c}. (Historically, if a
37module is called \samp{spam}, the C file containing its implementation
38is called \file{spammodule.c}; if the module name is very long, like
39\samp{spammify}, the module name can be just \file{spammify.c}.)
40
41The first line of our file can be:
42
43\begin{verbatim}
44#include <Python.h>
45\end{verbatim}
46
47which pulls in the Python API (you can add a comment describing the
48purpose of the module and a copyright notice if you like).
Fred Drake34c43202004-03-31 07:45:46 +000049
50\begin{notice}[warning]
51 Since Python may define some pre-processor definitions which affect
52 the standard headers on some systems, you \emph{must} include
53 \file{Python.h} before any standard headers are included.
54\end{notice}
Fred Drakecc8f44b2001-08-20 19:30:29 +000055
Fred Drake396ca572001-09-06 16:30:30 +000056All user-visible symbols defined by \file{Python.h} have a prefix of
Fred Drakecc8f44b2001-08-20 19:30:29 +000057\samp{Py} or \samp{PY}, except those defined in standard header files.
58For convenience, and since they are used extensively by the Python
59interpreter, \code{"Python.h"} includes a few standard header files:
60\code{<stdio.h>}, \code{<string.h>}, \code{<errno.h>}, and
61\code{<stdlib.h>}. If the latter header file does not exist on your
62system, it declares the functions \cfunction{malloc()},
63\cfunction{free()} and \cfunction{realloc()} directly.
64
65The next thing we add to our module file is the C function that will
66be called when the Python expression \samp{spam.system(\var{string})}
67is evaluated (we'll see shortly how it ends up being called):
68
69\begin{verbatim}
70static PyObject *
Fred Drake723f94b2002-06-22 01:42:00 +000071spam_system(PyObject *self, PyObject *args)
Fred Drakecc8f44b2001-08-20 19:30:29 +000072{
Brett Cannon289e4cb2004-06-29 03:48:23 +000073 const char *command;
Fred Drakecc8f44b2001-08-20 19:30:29 +000074 int sts;
75
76 if (!PyArg_ParseTuple(args, "s", &command))
77 return NULL;
78 sts = system(command);
79 return Py_BuildValue("i", sts);
80}
81\end{verbatim}
82
83There is a straightforward translation from the argument list in
84Python (for example, the single expression \code{"ls -l"}) to the
85arguments passed to the C function. The C function always has two
86arguments, conventionally named \var{self} and \var{args}.
87
88The \var{self} argument is only used when the C function implements a
89built-in method, not a function. In the example, \var{self} will
90always be a \NULL{} pointer, since we are defining a function, not a
91method. (This is done so that the interpreter doesn't have to
92understand two different types of C functions.)
93
94The \var{args} argument will be a pointer to a Python tuple object
95containing the arguments. Each item of the tuple corresponds to an
96argument in the call's argument list. The arguments are Python
97objects --- in order to do anything with them in our C function we have
98to convert them to C values. The function \cfunction{PyArg_ParseTuple()}
99in the Python API checks the argument types and converts them to C
100values. It uses a template string to determine the required types of
101the arguments as well as the types of the C variables into which to
102store the converted values. More about this later.
103
104\cfunction{PyArg_ParseTuple()} returns true (nonzero) if all arguments have
105the right type and its components have been stored in the variables
106whose addresses are passed. It returns false (zero) if an invalid
107argument list was passed. In the latter case it also raises an
108appropriate exception so the calling function can return
109\NULL{} immediately (as we saw in the example).
110
111
112\section{Intermezzo: Errors and Exceptions
113 \label{errors}}
114
115An important convention throughout the Python interpreter is the
116following: when a function fails, it should set an exception condition
117and return an error value (usually a \NULL{} pointer). Exceptions
118are stored in a static global variable inside the interpreter; if this
119variable is \NULL{} no exception has occurred. A second global
120variable stores the ``associated value'' of the exception (the second
121argument to \keyword{raise}). A third variable contains the stack
122traceback in case the error originated in Python code. These three
123variables are the C equivalents of the Python variables
124\code{sys.exc_type}, \code{sys.exc_value} and \code{sys.exc_traceback} (see
125the section on module \module{sys} in the
126\citetitle[../lib/lib.html]{Python Library Reference}). It is
127important to know about them to understand how errors are passed
128around.
129
130The Python API defines a number of functions to set various types of
131exceptions.
132
133The most common one is \cfunction{PyErr_SetString()}. Its arguments
134are an exception object and a C string. The exception object is
135usually a predefined object like \cdata{PyExc_ZeroDivisionError}. The
136C string indicates the cause of the error and is converted to a
137Python string object and stored as the ``associated value'' of the
138exception.
139
140Another useful function is \cfunction{PyErr_SetFromErrno()}, which only
141takes an exception argument and constructs the associated value by
142inspection of the global variable \cdata{errno}. The most
143general function is \cfunction{PyErr_SetObject()}, which takes two object
144arguments, the exception and its associated value. You don't need to
145\cfunction{Py_INCREF()} the objects passed to any of these functions.
146
147You can test non-destructively whether an exception has been set with
148\cfunction{PyErr_Occurred()}. This returns the current exception object,
149or \NULL{} if no exception has occurred. You normally don't need
150to call \cfunction{PyErr_Occurred()} to see whether an error occurred in a
151function call, since you should be able to tell from the return value.
152
153When a function \var{f} that calls another function \var{g} detects
154that the latter fails, \var{f} should itself return an error value
155(usually \NULL{} or \code{-1}). It should \emph{not} call one of the
156\cfunction{PyErr_*()} functions --- one has already been called by \var{g}.
157\var{f}'s caller is then supposed to also return an error indication
158to \emph{its} caller, again \emph{without} calling \cfunction{PyErr_*()},
159and so on --- the most detailed cause of the error was already
160reported by the function that first detected it. Once the error
161reaches the Python interpreter's main loop, this aborts the currently
162executing Python code and tries to find an exception handler specified
163by the Python programmer.
164
165(There are situations where a module can actually give a more detailed
166error message by calling another \cfunction{PyErr_*()} function, and in
167such cases it is fine to do so. As a general rule, however, this is
168not necessary, and can cause information about the cause of the error
169to be lost: most operations can fail for a variety of reasons.)
170
171To ignore an exception set by a function call that failed, the exception
172condition must be cleared explicitly by calling \cfunction{PyErr_Clear()}.
173The only time C code should call \cfunction{PyErr_Clear()} is if it doesn't
174want to pass the error on to the interpreter but wants to handle it
175completely by itself (possibly by trying something else, or pretending
176nothing went wrong).
177
178Every failing \cfunction{malloc()} call must be turned into an
179exception --- the direct caller of \cfunction{malloc()} (or
180\cfunction{realloc()}) must call \cfunction{PyErr_NoMemory()} and
181return a failure indicator itself. All the object-creating functions
182(for example, \cfunction{PyInt_FromLong()}) already do this, so this
183note is only relevant to those who call \cfunction{malloc()} directly.
184
185Also note that, with the important exception of
186\cfunction{PyArg_ParseTuple()} and friends, functions that return an
187integer status usually return a positive value or zero for success and
188\code{-1} for failure, like \UNIX{} system calls.
189
190Finally, be careful to clean up garbage (by making
191\cfunction{Py_XDECREF()} or \cfunction{Py_DECREF()} calls for objects
192you have already created) when you return an error indicator!
193
194The choice of which exception to raise is entirely yours. There are
195predeclared C objects corresponding to all built-in Python exceptions,
196such as \cdata{PyExc_ZeroDivisionError}, which you can use directly.
197Of course, you should choose exceptions wisely --- don't use
198\cdata{PyExc_TypeError} to mean that a file couldn't be opened (that
199should probably be \cdata{PyExc_IOError}). If something's wrong with
200the argument list, the \cfunction{PyArg_ParseTuple()} function usually
201raises \cdata{PyExc_TypeError}. If you have an argument whose value
202must be in a particular range or must satisfy other conditions,
203\cdata{PyExc_ValueError} is appropriate.
204
205You can also define a new exception that is unique to your module.
206For this, you usually declare a static object variable at the
207beginning of your file:
208
209\begin{verbatim}
210static PyObject *SpamError;
211\end{verbatim}
212
213and initialize it in your module's initialization function
214(\cfunction{initspam()}) with an exception object (leaving out
215the error checking for now):
216
217\begin{verbatim}
Mark Hammond8235ea12002-07-19 06:55:41 +0000218PyMODINIT_FUNC
Fred Drakeef6373a2001-11-17 06:50:42 +0000219initspam(void)
Fred Drakecc8f44b2001-08-20 19:30:29 +0000220{
Fred Drake63e40a52002-04-12 19:08:31 +0000221 PyObject *m;
Fred Drakecc8f44b2001-08-20 19:30:29 +0000222
223 m = Py_InitModule("spam", SpamMethods);
Fred Drake63e40a52002-04-12 19:08:31 +0000224
Fred Drakecc8f44b2001-08-20 19:30:29 +0000225 SpamError = PyErr_NewException("spam.error", NULL, NULL);
Fred Drake63e40a52002-04-12 19:08:31 +0000226 Py_INCREF(SpamError);
227 PyModule_AddObject(m, "error", SpamError);
Fred Drakecc8f44b2001-08-20 19:30:29 +0000228}
229\end{verbatim}
230
231Note that the Python name for the exception object is
232\exception{spam.error}. The \cfunction{PyErr_NewException()} function
233may create a class with the base class being \exception{Exception}
234(unless another class is passed in instead of \NULL), described in the
235\citetitle[../lib/lib.html]{Python Library Reference} under ``Built-in
236Exceptions.''
237
238Note also that the \cdata{SpamError} variable retains a reference to
239the newly created exception class; this is intentional! Since the
240exception could be removed from the module by external code, an owned
241reference to the class is needed to ensure that it will not be
242discarded, causing \cdata{SpamError} to become a dangling pointer.
243Should it become a dangling pointer, C code which raises the exception
244could cause a core dump or other unintended side effects.
245
Brett Cannon555a9642004-06-26 23:10:32 +0000246We discuss the use of PyMODINIT_FUNC as a function return type later in this
247sample.
Fred Drakecc8f44b2001-08-20 19:30:29 +0000248
249\section{Back to the Example
250 \label{backToExample}}
251
252Going back to our example function, you should now be able to
253understand this statement:
254
255\begin{verbatim}
256 if (!PyArg_ParseTuple(args, "s", &command))
257 return NULL;
258\end{verbatim}
259
260It returns \NULL{} (the error indicator for functions returning
261object pointers) if an error is detected in the argument list, relying
262on the exception set by \cfunction{PyArg_ParseTuple()}. Otherwise the
263string value of the argument has been copied to the local variable
264\cdata{command}. This is a pointer assignment and you are not supposed
265to modify the string to which it points (so in Standard C, the variable
266\cdata{command} should properly be declared as \samp{const char
267*command}).
268
269The next statement is a call to the \UNIX{} function
270\cfunction{system()}, passing it the string we just got from
271\cfunction{PyArg_ParseTuple()}:
272
273\begin{verbatim}
274 sts = system(command);
275\end{verbatim}
276
277Our \function{spam.system()} function must return the value of
278\cdata{sts} as a Python object. This is done using the function
279\cfunction{Py_BuildValue()}, which is something like the inverse of
280\cfunction{PyArg_ParseTuple()}: it takes a format string and an
281arbitrary number of C values, and returns a new Python object.
282More info on \cfunction{Py_BuildValue()} is given later.
283
284\begin{verbatim}
285 return Py_BuildValue("i", sts);
286\end{verbatim}
287
288In this case, it will return an integer object. (Yes, even integers
289are objects on the heap in Python!)
290
291If you have a C function that returns no useful argument (a function
292returning \ctype{void}), the corresponding Python function must return
Brett Cannon634893d2004-06-27 04:28:00 +0000293\code{None}. You need this idiom to do so (which is implemented by the
294\csimplemacro{Py_RETURN_NONE} macro):
Fred Drakecc8f44b2001-08-20 19:30:29 +0000295
296\begin{verbatim}
297 Py_INCREF(Py_None);
298 return Py_None;
299\end{verbatim}
300
301\cdata{Py_None} is the C name for the special Python object
302\code{None}. It is a genuine Python object rather than a \NULL{}
303pointer, which means ``error'' in most contexts, as we have seen.
304
305
306\section{The Module's Method Table and Initialization Function
307 \label{methodTable}}
308
309I promised to show how \cfunction{spam_system()} is called from Python
310programs. First, we need to list its name and address in a ``method
311table'':
312
313\begin{verbatim}
314static PyMethodDef SpamMethods[] = {
315 ...
Fred Drakeef6373a2001-11-17 06:50:42 +0000316 {"system", spam_system, METH_VARARGS,
317 "Execute a shell command."},
Fred Drakecc8f44b2001-08-20 19:30:29 +0000318 ...
Fred Drakeef6373a2001-11-17 06:50:42 +0000319 {NULL, NULL, 0, NULL} /* Sentinel */
Fred Drakecc8f44b2001-08-20 19:30:29 +0000320};
321\end{verbatim}
322
323Note the third entry (\samp{METH_VARARGS}). This is a flag telling
324the interpreter the calling convention to be used for the C
325function. It should normally always be \samp{METH_VARARGS} or
326\samp{METH_VARARGS | METH_KEYWORDS}; a value of \code{0} means that an
327obsolete variant of \cfunction{PyArg_ParseTuple()} is used.
328
329When using only \samp{METH_VARARGS}, the function should expect
330the Python-level parameters to be passed in as a tuple acceptable for
331parsing via \cfunction{PyArg_ParseTuple()}; more information on this
332function is provided below.
333
334The \constant{METH_KEYWORDS} bit may be set in the third field if
335keyword arguments should be passed to the function. In this case, the
336C function should accept a third \samp{PyObject *} parameter which
337will be a dictionary of keywords. Use
338\cfunction{PyArg_ParseTupleAndKeywords()} to parse the arguments to
339such a function.
340
341The method table must be passed to the interpreter in the module's
342initialization function. The initialization function must be named
343\cfunction{init\var{name}()}, where \var{name} is the name of the
344module, and should be the only non-\keyword{static} item defined in
345the module file:
346
347\begin{verbatim}
Mark Hammond8235ea12002-07-19 06:55:41 +0000348PyMODINIT_FUNC
Fred Drakeef6373a2001-11-17 06:50:42 +0000349initspam(void)
Fred Drakecc8f44b2001-08-20 19:30:29 +0000350{
351 (void) Py_InitModule("spam", SpamMethods);
352}
353\end{verbatim}
354
Mark Hammond8235ea12002-07-19 06:55:41 +0000355Note that PyMODINIT_FUNC declares the function as \code{void} return type,
356declares any special linkage declarations required by the platform, and for
Raymond Hettingerf3501602003-09-08 19:01:04 +0000357\Cpp{} declares the function as \code{extern "C"}.
Fred Drakecc8f44b2001-08-20 19:30:29 +0000358
359When the Python program imports module \module{spam} for the first
360time, \cfunction{initspam()} is called. (See below for comments about
361embedding Python.) It calls
362\cfunction{Py_InitModule()}, which creates a ``module object'' (which
363is inserted in the dictionary \code{sys.modules} under the key
364\code{"spam"}), and inserts built-in function objects into the newly
365created module based upon the table (an array of \ctype{PyMethodDef}
366structures) that was passed as its second argument.
367\cfunction{Py_InitModule()} returns a pointer to the module object
368that it creates (which is unused here). It aborts with a fatal error
369if the module could not be initialized satisfactorily, so the caller
370doesn't need to check for errors.
371
372When embedding Python, the \cfunction{initspam()} function is not
373called automatically unless there's an entry in the
374\cdata{_PyImport_Inittab} table. The easiest way to handle this is to
375statically initialize your statically-linked modules by directly
376calling \cfunction{initspam()} after the call to
377\cfunction{Py_Initialize()} or \cfunction{PyMac_Initialize()}:
378
379\begin{verbatim}
Fred Drake723f94b2002-06-22 01:42:00 +0000380int
381main(int argc, char *argv[])
Fred Drakecc8f44b2001-08-20 19:30:29 +0000382{
383 /* Pass argv[0] to the Python interpreter */
384 Py_SetProgramName(argv[0]);
385
386 /* Initialize the Python interpreter. Required. */
387 Py_Initialize();
388
389 /* Add a static module */
390 initspam();
391\end{verbatim}
392
393An example may be found in the file \file{Demo/embed/demo.c} in the
394Python source distribution.
395
Fred Drake0aa811c2001-10-20 04:24:09 +0000396\note{Removing entries from \code{sys.modules} or importing
Fred Drakecc8f44b2001-08-20 19:30:29 +0000397compiled modules into multiple interpreters within a process (or
398following a \cfunction{fork()} without an intervening
399\cfunction{exec()}) can create problems for some extension modules.
400Extension module authors should exercise caution when initializing
401internal data structures.
402Note also that the \function{reload()} function can be used with
403extension modules, and will call the module initialization function
404(\cfunction{initspam()} in the example), but will not load the module
405again if it was loaded from a dynamically loadable object file
Fred Drake0aa811c2001-10-20 04:24:09 +0000406(\file{.so} on \UNIX, \file{.dll} on Windows).}
Fred Drakecc8f44b2001-08-20 19:30:29 +0000407
408A more substantial example module is included in the Python source
409distribution as \file{Modules/xxmodule.c}. This file may be used as a
410template or simply read as an example. The \program{modulator.py}
411script included in the source distribution or Windows install provides
412a simple graphical user interface for declaring the functions and
413objects which a module should implement, and can generate a template
414which can be filled in. The script lives in the
415\file{Tools/modulator/} directory; see the \file{README} file there
416for more information.
417
418
419\section{Compilation and Linkage
420 \label{compilation}}
421
422There are two more things to do before you can use your new extension:
423compiling and linking it with the Python system. If you use dynamic
Fred Drake4e765552002-05-16 13:48:14 +0000424loading, the details may depend on the style of dynamic loading your
425system uses; see the chapters about building extension modules
426(chapter \ref{building}) and additional information that pertains only
427to building on Windows (chapter \ref{building-on-windows}) for more
428information about this.
429% XXX Add information about Mac OS
Fred Drakecc8f44b2001-08-20 19:30:29 +0000430
431If you can't use dynamic loading, or if you want to make your module a
432permanent part of the Python interpreter, you will have to change the
433configuration setup and rebuild the interpreter. Luckily, this is
Fred Drake4e765552002-05-16 13:48:14 +0000434very simple on \UNIX: just place your file (\file{spammodule.c} for
435example) in the \file{Modules/} directory of an unpacked source
436distribution, add a line to the file \file{Modules/Setup.local}
437describing your file:
Fred Drakecc8f44b2001-08-20 19:30:29 +0000438
439\begin{verbatim}
440spam spammodule.o
441\end{verbatim}
442
443and rebuild the interpreter by running \program{make} in the toplevel
444directory. You can also run \program{make} in the \file{Modules/}
445subdirectory, but then you must first rebuild \file{Makefile}
446there by running `\program{make} Makefile'. (This is necessary each
447time you change the \file{Setup} file.)
448
449If your module requires additional libraries to link with, these can
450be listed on the line in the configuration file as well, for instance:
451
452\begin{verbatim}
453spam spammodule.o -lX11
454\end{verbatim}
455
456\section{Calling Python Functions from C
457 \label{callingPython}}
458
459So far we have concentrated on making C functions callable from
460Python. The reverse is also useful: calling Python functions from C.
461This is especially the case for libraries that support so-called
462``callback'' functions. If a C interface makes use of callbacks, the
463equivalent Python often needs to provide a callback mechanism to the
464Python programmer; the implementation will require calling the Python
465callback functions from a C callback. Other uses are also imaginable.
466
467Fortunately, the Python interpreter is easily called recursively, and
468there is a standard interface to call a Python function. (I won't
469dwell on how to call the Python parser with a particular string as
470input --- if you're interested, have a look at the implementation of
471the \programopt{-c} command line option in \file{Python/pythonmain.c}
472from the Python source code.)
473
474Calling a Python function is easy. First, the Python program must
475somehow pass you the Python function object. You should provide a
476function (or some other interface) to do this. When this function is
477called, save a pointer to the Python function object (be careful to
478\cfunction{Py_INCREF()} it!) in a global variable --- or wherever you
479see fit. For example, the following function might be part of a module
480definition:
481
482\begin{verbatim}
483static PyObject *my_callback = NULL;
484
485static PyObject *
Fred Drake723f94b2002-06-22 01:42:00 +0000486my_set_callback(PyObject *dummy, PyObject *args)
Fred Drakecc8f44b2001-08-20 19:30:29 +0000487{
488 PyObject *result = NULL;
489 PyObject *temp;
490
491 if (PyArg_ParseTuple(args, "O:set_callback", &temp)) {
492 if (!PyCallable_Check(temp)) {
493 PyErr_SetString(PyExc_TypeError, "parameter must be callable");
494 return NULL;
495 }
496 Py_XINCREF(temp); /* Add a reference to new callback */
497 Py_XDECREF(my_callback); /* Dispose of previous callback */
498 my_callback = temp; /* Remember new callback */
499 /* Boilerplate to return "None" */
500 Py_INCREF(Py_None);
501 result = Py_None;
502 }
503 return result;
504}
505\end{verbatim}
506
507This function must be registered with the interpreter using the
508\constant{METH_VARARGS} flag; this is described in section
509\ref{methodTable}, ``The Module's Method Table and Initialization
510Function.'' The \cfunction{PyArg_ParseTuple()} function and its
Fred Drakec37b65e2001-11-28 07:26:15 +0000511arguments are documented in section~\ref{parseTuple}, ``Extracting
Fred Drakecc8f44b2001-08-20 19:30:29 +0000512Parameters in Extension Functions.''
513
514The macros \cfunction{Py_XINCREF()} and \cfunction{Py_XDECREF()}
515increment/decrement the reference count of an object and are safe in
516the presence of \NULL{} pointers (but note that \var{temp} will not be
Fred Drakec37b65e2001-11-28 07:26:15 +0000517\NULL{} in this context). More info on them in
518section~\ref{refcounts}, ``Reference Counts.''
Fred Drakecc8f44b2001-08-20 19:30:29 +0000519
520Later, when it is time to call the function, you call the C function
Fred Drake99181ac2001-11-29 05:02:34 +0000521\cfunction{PyEval_CallObject()}.\ttindex{PyEval_CallObject()} This
522function has two arguments, both pointers to arbitrary Python objects:
523the Python function, and the argument list. The argument list must
524always be a tuple object, whose length is the number of arguments. To
525call the Python function with no arguments, pass an empty tuple; to
526call it with one argument, pass a singleton tuple.
527\cfunction{Py_BuildValue()} returns a tuple when its format string
528consists of zero or more format codes between parentheses. For
529example:
Fred Drakecc8f44b2001-08-20 19:30:29 +0000530
531\begin{verbatim}
532 int arg;
533 PyObject *arglist;
534 PyObject *result;
535 ...
536 arg = 123;
537 ...
538 /* Time to call the callback */
539 arglist = Py_BuildValue("(i)", arg);
540 result = PyEval_CallObject(my_callback, arglist);
541 Py_DECREF(arglist);
542\end{verbatim}
543
544\cfunction{PyEval_CallObject()} returns a Python object pointer: this is
545the return value of the Python function. \cfunction{PyEval_CallObject()} is
546``reference-count-neutral'' with respect to its arguments. In the
547example a new tuple was created to serve as the argument list, which
548is \cfunction{Py_DECREF()}-ed immediately after the call.
549
550The return value of \cfunction{PyEval_CallObject()} is ``new'': either it
551is a brand new object, or it is an existing object whose reference
552count has been incremented. So, unless you want to save it in a
553global variable, you should somehow \cfunction{Py_DECREF()} the result,
554even (especially!) if you are not interested in its value.
555
556Before you do this, however, it is important to check that the return
Fred Drakec37b65e2001-11-28 07:26:15 +0000557value isn't \NULL. If it is, the Python function terminated by
Fred Drakecc8f44b2001-08-20 19:30:29 +0000558raising an exception. If the C code that called
559\cfunction{PyEval_CallObject()} is called from Python, it should now
560return an error indication to its Python caller, so the interpreter
561can print a stack trace, or the calling Python code can handle the
562exception. If this is not possible or desirable, the exception should
563be cleared by calling \cfunction{PyErr_Clear()}. For example:
564
565\begin{verbatim}
566 if (result == NULL)
567 return NULL; /* Pass error back */
568 ...use result...
569 Py_DECREF(result);
570\end{verbatim}
571
572Depending on the desired interface to the Python callback function,
573you may also have to provide an argument list to
574\cfunction{PyEval_CallObject()}. In some cases the argument list is
575also provided by the Python program, through the same interface that
576specified the callback function. It can then be saved and used in the
577same manner as the function object. In other cases, you may have to
578construct a new tuple to pass as the argument list. The simplest way
579to do this is to call \cfunction{Py_BuildValue()}. For example, if
580you want to pass an integral event code, you might use the following
581code:
582
583\begin{verbatim}
584 PyObject *arglist;
585 ...
586 arglist = Py_BuildValue("(l)", eventcode);
587 result = PyEval_CallObject(my_callback, arglist);
588 Py_DECREF(arglist);
589 if (result == NULL)
590 return NULL; /* Pass error back */
591 /* Here maybe use the result */
592 Py_DECREF(result);
593\end{verbatim}
594
595Note the placement of \samp{Py_DECREF(arglist)} immediately after the
596call, before the error check! Also note that strictly spoken this
597code is not complete: \cfunction{Py_BuildValue()} may run out of
598memory, and this should be checked.
599
600
601\section{Extracting Parameters in Extension Functions
602 \label{parseTuple}}
603
Fred Drakee9fba912002-03-28 22:36:56 +0000604\ttindex{PyArg_ParseTuple()}
605
Fred Drakecc8f44b2001-08-20 19:30:29 +0000606The \cfunction{PyArg_ParseTuple()} function is declared as follows:
607
608\begin{verbatim}
609int PyArg_ParseTuple(PyObject *arg, char *format, ...);
610\end{verbatim}
611
612The \var{arg} argument must be a tuple object containing an argument
613list passed from Python to a C function. The \var{format} argument
Fred Drake68304cc2002-04-05 23:01:14 +0000614must be a format string, whose syntax is explained in
615``\ulink{Parsing arguments and building
616values}{../api/arg-parsing.html}'' in the
617\citetitle[../api/api.html]{Python/C API Reference Manual}. The
Fred Drakecc8f44b2001-08-20 19:30:29 +0000618remaining arguments must be addresses of variables whose type is
Fred Drake68304cc2002-04-05 23:01:14 +0000619determined by the format string.
Fred Drakecc8f44b2001-08-20 19:30:29 +0000620
621Note that while \cfunction{PyArg_ParseTuple()} checks that the Python
622arguments have the required types, it cannot check the validity of the
623addresses of C variables passed to the call: if you make mistakes
624there, your code will probably crash or at least overwrite random bits
625in memory. So be careful!
626
Fred Drakecc8f44b2001-08-20 19:30:29 +0000627Note that any Python object references which are provided to the
628caller are \emph{borrowed} references; do not decrement their
629reference count!
630
Fred Drakecc8f44b2001-08-20 19:30:29 +0000631Some example calls:
632
633\begin{verbatim}
634 int ok;
635 int i, j;
636 long k, l;
Brett Cannon289e4cb2004-06-29 03:48:23 +0000637 const char *s;
Fred Drakecc8f44b2001-08-20 19:30:29 +0000638 int size;
639
640 ok = PyArg_ParseTuple(args, ""); /* No arguments */
641 /* Python call: f() */
642\end{verbatim}
643
644\begin{verbatim}
645 ok = PyArg_ParseTuple(args, "s", &s); /* A string */
646 /* Possible Python call: f('whoops!') */
647\end{verbatim}
648
649\begin{verbatim}
650 ok = PyArg_ParseTuple(args, "lls", &k, &l, &s); /* Two longs and a string */
651 /* Possible Python call: f(1, 2, 'three') */
652\end{verbatim}
653
654\begin{verbatim}
655 ok = PyArg_ParseTuple(args, "(ii)s#", &i, &j, &s, &size);
656 /* A pair of ints and a string, whose size is also returned */
657 /* Possible Python call: f((1, 2), 'three') */
658\end{verbatim}
659
660\begin{verbatim}
661 {
Brett Cannon289e4cb2004-06-29 03:48:23 +0000662 const char *file;
663 const char *mode = "r";
Fred Drakecc8f44b2001-08-20 19:30:29 +0000664 int bufsize = 0;
665 ok = PyArg_ParseTuple(args, "s|si", &file, &mode, &bufsize);
666 /* A string, and optionally another string and an integer */
667 /* Possible Python calls:
668 f('spam')
669 f('spam', 'w')
670 f('spam', 'wb', 100000) */
671 }
672\end{verbatim}
673
674\begin{verbatim}
675 {
676 int left, top, right, bottom, h, v;
677 ok = PyArg_ParseTuple(args, "((ii)(ii))(ii)",
678 &left, &top, &right, &bottom, &h, &v);
679 /* A rectangle and a point */
680 /* Possible Python call:
681 f(((0, 0), (400, 300)), (10, 10)) */
682 }
683\end{verbatim}
684
685\begin{verbatim}
686 {
687 Py_complex c;
688 ok = PyArg_ParseTuple(args, "D:myfunction", &c);
689 /* a complex, also providing a function name for errors */
690 /* Possible Python call: myfunction(1+2j) */
691 }
692\end{verbatim}
693
694
695\section{Keyword Parameters for Extension Functions
696 \label{parseTupleAndKeywords}}
697
Fred Drakee9fba912002-03-28 22:36:56 +0000698\ttindex{PyArg_ParseTupleAndKeywords()}
699
Fred Drakecc8f44b2001-08-20 19:30:29 +0000700The \cfunction{PyArg_ParseTupleAndKeywords()} function is declared as
701follows:
702
703\begin{verbatim}
704int PyArg_ParseTupleAndKeywords(PyObject *arg, PyObject *kwdict,
Fred Drake723f94b2002-06-22 01:42:00 +0000705 char *format, char *kwlist[], ...);
Fred Drakecc8f44b2001-08-20 19:30:29 +0000706\end{verbatim}
707
708The \var{arg} and \var{format} parameters are identical to those of the
709\cfunction{PyArg_ParseTuple()} function. The \var{kwdict} parameter
710is the dictionary of keywords received as the third parameter from the
Fred Drakec37b65e2001-11-28 07:26:15 +0000711Python runtime. The \var{kwlist} parameter is a \NULL-terminated
Fred Drakecc8f44b2001-08-20 19:30:29 +0000712list of strings which identify the parameters; the names are matched
713with the type information from \var{format} from left to right. On
714success, \cfunction{PyArg_ParseTupleAndKeywords()} returns true,
715otherwise it returns false and raises an appropriate exception.
716
Fred Drake0aa811c2001-10-20 04:24:09 +0000717\note{Nested tuples cannot be parsed when using keyword
Fred Drakecc8f44b2001-08-20 19:30:29 +0000718arguments! Keyword parameters passed in which are not present in the
Fred Drake0aa811c2001-10-20 04:24:09 +0000719\var{kwlist} will cause \exception{TypeError} to be raised.}
Fred Drakecc8f44b2001-08-20 19:30:29 +0000720
721Here is an example module which uses keywords, based on an example by
722Geoff Philbrick (\email{philbrick@hks.com}):%
723\index{Philbrick, Geoff}
724
725\begin{verbatim}
Fred Drakecc8f44b2001-08-20 19:30:29 +0000726#include "Python.h"
727
728static PyObject *
Fred Drake723f94b2002-06-22 01:42:00 +0000729keywdarg_parrot(PyObject *self, PyObject *args, PyObject *keywds)
Fred Drakecc8f44b2001-08-20 19:30:29 +0000730{
731 int voltage;
732 char *state = "a stiff";
733 char *action = "voom";
734 char *type = "Norwegian Blue";
735
736 static char *kwlist[] = {"voltage", "state", "action", "type", NULL};
737
738 if (!PyArg_ParseTupleAndKeywords(args, keywds, "i|sss", kwlist,
739 &voltage, &state, &action, &type))
740 return NULL;
741
742 printf("-- This parrot wouldn't %s if you put %i Volts through it.\n",
743 action, voltage);
744 printf("-- Lovely plumage, the %s -- It's %s!\n", type, state);
745
746 Py_INCREF(Py_None);
747
748 return Py_None;
749}
750
751static PyMethodDef keywdarg_methods[] = {
752 /* The cast of the function is necessary since PyCFunction values
753 * only take two PyObject* parameters, and keywdarg_parrot() takes
754 * three.
755 */
Fred Drake31f84832002-03-28 20:19:23 +0000756 {"parrot", (PyCFunction)keywdarg_parrot, METH_VARARGS | METH_KEYWORDS,
Fred Drakeef6373a2001-11-17 06:50:42 +0000757 "Print a lovely skit to standard output."},
758 {NULL, NULL, 0, NULL} /* sentinel */
Fred Drakecc8f44b2001-08-20 19:30:29 +0000759};
Fred Drake31f84832002-03-28 20:19:23 +0000760\end{verbatim}
Fred Drakecc8f44b2001-08-20 19:30:29 +0000761
Fred Drake31f84832002-03-28 20:19:23 +0000762\begin{verbatim}
Fred Drakecc8f44b2001-08-20 19:30:29 +0000763void
Fred Drakeef6373a2001-11-17 06:50:42 +0000764initkeywdarg(void)
Fred Drakecc8f44b2001-08-20 19:30:29 +0000765{
766 /* Create the module and add the functions */
767 Py_InitModule("keywdarg", keywdarg_methods);
768}
769\end{verbatim}
770
771
772\section{Building Arbitrary Values
773 \label{buildValue}}
774
775This function is the counterpart to \cfunction{PyArg_ParseTuple()}. It is
776declared as follows:
777
778\begin{verbatim}
779PyObject *Py_BuildValue(char *format, ...);
780\end{verbatim}
781
782It recognizes a set of format units similar to the ones recognized by
783\cfunction{PyArg_ParseTuple()}, but the arguments (which are input to the
784function, not output) must not be pointers, just values. It returns a
785new Python object, suitable for returning from a C function called
786from Python.
787
788One difference with \cfunction{PyArg_ParseTuple()}: while the latter
789requires its first argument to be a tuple (since Python argument lists
790are always represented as tuples internally),
791\cfunction{Py_BuildValue()} does not always build a tuple. It builds
792a tuple only if its format string contains two or more format units.
793If the format string is empty, it returns \code{None}; if it contains
794exactly one format unit, it returns whatever object is described by
795that format unit. To force it to return a tuple of size 0 or one,
796parenthesize the format string.
797
Fred Drakecc8f44b2001-08-20 19:30:29 +0000798Examples (to the left the call, to the right the resulting Python value):
799
800\begin{verbatim}
801 Py_BuildValue("") None
802 Py_BuildValue("i", 123) 123
803 Py_BuildValue("iii", 123, 456, 789) (123, 456, 789)
804 Py_BuildValue("s", "hello") 'hello'
805 Py_BuildValue("ss", "hello", "world") ('hello', 'world')
806 Py_BuildValue("s#", "hello", 4) 'hell'
807 Py_BuildValue("()") ()
808 Py_BuildValue("(i)", 123) (123,)
809 Py_BuildValue("(ii)", 123, 456) (123, 456)
810 Py_BuildValue("(i,i)", 123, 456) (123, 456)
811 Py_BuildValue("[i,i]", 123, 456) [123, 456]
812 Py_BuildValue("{s:i,s:i}",
813 "abc", 123, "def", 456) {'abc': 123, 'def': 456}
814 Py_BuildValue("((ii)(ii)) (ii)",
815 1, 2, 3, 4, 5, 6) (((1, 2), (3, 4)), (5, 6))
816\end{verbatim}
817
818
819\section{Reference Counts
820 \label{refcounts}}
821
Fred Drakec37b65e2001-11-28 07:26:15 +0000822In languages like C or \Cpp, the programmer is responsible for
Fred Drakecc8f44b2001-08-20 19:30:29 +0000823dynamic allocation and deallocation of memory on the heap. In C,
824this is done using the functions \cfunction{malloc()} and
Fred Drakec37b65e2001-11-28 07:26:15 +0000825\cfunction{free()}. In \Cpp, the operators \keyword{new} and
Michael W. Hudson241c2e92003-02-06 18:38:11 +0000826\keyword{delete} are used with essentially the same meaning and
Michael W. Hudsonff1f1942003-11-07 11:45:34 +0000827we'll restrict the following discussion to the C case.
Fred Drakecc8f44b2001-08-20 19:30:29 +0000828
829Every block of memory allocated with \cfunction{malloc()} should
830eventually be returned to the pool of available memory by exactly one
831call to \cfunction{free()}. It is important to call
832\cfunction{free()} at the right time. If a block's address is
833forgotten but \cfunction{free()} is not called for it, the memory it
834occupies cannot be reused until the program terminates. This is
835called a \dfn{memory leak}. On the other hand, if a program calls
836\cfunction{free()} for a block and then continues to use the block, it
837creates a conflict with re-use of the block through another
838\cfunction{malloc()} call. This is called \dfn{using freed memory}.
839It has the same bad consequences as referencing uninitialized data ---
840core dumps, wrong results, mysterious crashes.
841
842Common causes of memory leaks are unusual paths through the code. For
843instance, a function may allocate a block of memory, do some
844calculation, and then free the block again. Now a change in the
845requirements for the function may add a test to the calculation that
846detects an error condition and can return prematurely from the
847function. It's easy to forget to free the allocated memory block when
848taking this premature exit, especially when it is added later to the
849code. Such leaks, once introduced, often go undetected for a long
850time: the error exit is taken only in a small fraction of all calls,
851and most modern machines have plenty of virtual memory, so the leak
852only becomes apparent in a long-running process that uses the leaking
853function frequently. Therefore, it's important to prevent leaks from
854happening by having a coding convention or strategy that minimizes
855this kind of errors.
856
857Since Python makes heavy use of \cfunction{malloc()} and
858\cfunction{free()}, it needs a strategy to avoid memory leaks as well
859as the use of freed memory. The chosen method is called
860\dfn{reference counting}. The principle is simple: every object
861contains a counter, which is incremented when a reference to the
862object is stored somewhere, and which is decremented when a reference
863to it is deleted. When the counter reaches zero, the last reference
864to the object has been deleted and the object is freed.
865
866An alternative strategy is called \dfn{automatic garbage collection}.
867(Sometimes, reference counting is also referred to as a garbage
868collection strategy, hence my use of ``automatic'' to distinguish the
869two.) The big advantage of automatic garbage collection is that the
870user doesn't need to call \cfunction{free()} explicitly. (Another claimed
871advantage is an improvement in speed or memory usage --- this is no
872hard fact however.) The disadvantage is that for C, there is no
873truly portable automatic garbage collector, while reference counting
874can be implemented portably (as long as the functions \cfunction{malloc()}
875and \cfunction{free()} are available --- which the C Standard guarantees).
876Maybe some day a sufficiently portable automatic garbage collector
877will be available for C. Until then, we'll have to live with
878reference counts.
879
Fred Drake024e6472001-12-07 17:30:40 +0000880While Python uses the traditional reference counting implementation,
881it also offers a cycle detector that works to detect reference
882cycles. This allows applications to not worry about creating direct
883or indirect circular references; these are the weakness of garbage
884collection implemented using only reference counting. Reference
885cycles consist of objects which contain (possibly indirect) references
Tim Peters874c4f02001-12-07 17:51:41 +0000886to themselves, so that each object in the cycle has a reference count
Fred Drake024e6472001-12-07 17:30:40 +0000887which is non-zero. Typical reference counting implementations are not
Tim Peters874c4f02001-12-07 17:51:41 +0000888able to reclaim the memory belonging to any objects in a reference
Fred Drake024e6472001-12-07 17:30:40 +0000889cycle, or referenced from the objects in the cycle, even though there
890are no further references to the cycle itself.
891
892The cycle detector is able to detect garbage cycles and can reclaim
893them so long as there are no finalizers implemented in Python
894(\method{__del__()} methods). When there are such finalizers, the
895detector exposes the cycles through the \ulink{\module{gc}
Guido van Rossum44b3f762001-12-07 17:57:56 +0000896module}{../lib/module-gc.html} (specifically, the \code{garbage}
897variable in that module). The \module{gc} module also exposes a way
898to run the detector (the \function{collect()} function), as well as
Fred Drake024e6472001-12-07 17:30:40 +0000899configuration interfaces and the ability to disable the detector at
900runtime. The cycle detector is considered an optional component;
Guido van Rossum44b3f762001-12-07 17:57:56 +0000901though it is included by default, it can be disabled at build time
Fred Drake024e6472001-12-07 17:30:40 +0000902using the \longprogramopt{without-cycle-gc} option to the
903\program{configure} script on \UNIX{} platforms (including Mac OS X)
904or by removing the definition of \code{WITH_CYCLE_GC} in the
905\file{pyconfig.h} header on other platforms. If the cycle detector is
906disabled in this way, the \module{gc} module will not be available.
907
908
Fred Drakecc8f44b2001-08-20 19:30:29 +0000909\subsection{Reference Counting in Python
910 \label{refcountsInPython}}
911
912There are two macros, \code{Py_INCREF(x)} and \code{Py_DECREF(x)},
913which handle the incrementing and decrementing of the reference count.
914\cfunction{Py_DECREF()} also frees the object when the count reaches zero.
915For flexibility, it doesn't call \cfunction{free()} directly --- rather, it
916makes a call through a function pointer in the object's \dfn{type
917object}. For this purpose (and others), every object also contains a
918pointer to its type object.
919
920The big question now remains: when to use \code{Py_INCREF(x)} and
921\code{Py_DECREF(x)}? Let's first introduce some terms. Nobody
922``owns'' an object; however, you can \dfn{own a reference} to an
923object. An object's reference count is now defined as the number of
924owned references to it. The owner of a reference is responsible for
925calling \cfunction{Py_DECREF()} when the reference is no longer
926needed. Ownership of a reference can be transferred. There are three
927ways to dispose of an owned reference: pass it on, store it, or call
928\cfunction{Py_DECREF()}. Forgetting to dispose of an owned reference
929creates a memory leak.
930
931It is also possible to \dfn{borrow}\footnote{The metaphor of
932``borrowing'' a reference is not completely correct: the owner still
933has a copy of the reference.} a reference to an object. The borrower
934of a reference should not call \cfunction{Py_DECREF()}. The borrower must
935not hold on to the object longer than the owner from which it was
936borrowed. Using a borrowed reference after the owner has disposed of
937it risks using freed memory and should be avoided
938completely.\footnote{Checking that the reference count is at least 1
939\strong{does not work} --- the reference count itself could be in
940freed memory and may thus be reused for another object!}
941
942The advantage of borrowing over owning a reference is that you don't
943need to take care of disposing of the reference on all possible paths
944through the code --- in other words, with a borrowed reference you
945don't run the risk of leaking when a premature exit is taken. The
946disadvantage of borrowing over leaking is that there are some subtle
947situations where in seemingly correct code a borrowed reference can be
948used after the owner from which it was borrowed has in fact disposed
949of it.
950
951A borrowed reference can be changed into an owned reference by calling
952\cfunction{Py_INCREF()}. This does not affect the status of the owner from
953which the reference was borrowed --- it creates a new owned reference,
954and gives full owner responsibilities (the new owner must
955dispose of the reference properly, as well as the previous owner).
956
957
958\subsection{Ownership Rules
959 \label{ownershipRules}}
960
961Whenever an object reference is passed into or out of a function, it
962is part of the function's interface specification whether ownership is
963transferred with the reference or not.
964
965Most functions that return a reference to an object pass on ownership
966with the reference. In particular, all functions whose function it is
967to create a new object, such as \cfunction{PyInt_FromLong()} and
Fred Drake92024d12001-11-29 07:16:19 +0000968\cfunction{Py_BuildValue()}, pass ownership to the receiver. Even if
969the object is not actually new, you still receive ownership of a new
970reference to that object. For instance, \cfunction{PyInt_FromLong()}
971maintains a cache of popular values and can return a reference to a
972cached item.
Fred Drakecc8f44b2001-08-20 19:30:29 +0000973
974Many functions that extract objects from other objects also transfer
975ownership with the reference, for instance
976\cfunction{PyObject_GetAttrString()}. The picture is less clear, here,
977however, since a few common routines are exceptions:
978\cfunction{PyTuple_GetItem()}, \cfunction{PyList_GetItem()},
979\cfunction{PyDict_GetItem()}, and \cfunction{PyDict_GetItemString()}
980all return references that you borrow from the tuple, list or
981dictionary.
982
983The function \cfunction{PyImport_AddModule()} also returns a borrowed
984reference, even though it may actually create the object it returns:
985this is possible because an owned reference to the object is stored in
986\code{sys.modules}.
987
988When you pass an object reference into another function, in general,
989the function borrows the reference from you --- if it needs to store
990it, it will use \cfunction{Py_INCREF()} to become an independent
991owner. There are exactly two important exceptions to this rule:
992\cfunction{PyTuple_SetItem()} and \cfunction{PyList_SetItem()}. These
993functions take over ownership of the item passed to them --- even if
994they fail! (Note that \cfunction{PyDict_SetItem()} and friends don't
995take over ownership --- they are ``normal.'')
996
997When a C function is called from Python, it borrows references to its
998arguments from the caller. The caller owns a reference to the object,
999so the borrowed reference's lifetime is guaranteed until the function
1000returns. Only when such a borrowed reference must be stored or passed
1001on, it must be turned into an owned reference by calling
1002\cfunction{Py_INCREF()}.
1003
1004The object reference returned from a C function that is called from
Raymond Hettinger68804312005-01-01 00:28:46 +00001005Python must be an owned reference --- ownership is transferred from
1006the function to its caller.
Fred Drakecc8f44b2001-08-20 19:30:29 +00001007
1008
1009\subsection{Thin Ice
1010 \label{thinIce}}
1011
1012There are a few situations where seemingly harmless use of a borrowed
1013reference can lead to problems. These all have to do with implicit
1014invocations of the interpreter, which can cause the owner of a
1015reference to dispose of it.
1016
1017The first and most important case to know about is using
1018\cfunction{Py_DECREF()} on an unrelated object while borrowing a
1019reference to a list item. For instance:
1020
1021\begin{verbatim}
Fred Drake723f94b2002-06-22 01:42:00 +00001022void
1023bug(PyObject *list)
1024{
Fred Drakecc8f44b2001-08-20 19:30:29 +00001025 PyObject *item = PyList_GetItem(list, 0);
1026
1027 PyList_SetItem(list, 1, PyInt_FromLong(0L));
1028 PyObject_Print(item, stdout, 0); /* BUG! */
1029}
1030\end{verbatim}
1031
1032This function first borrows a reference to \code{list[0]}, then
1033replaces \code{list[1]} with the value \code{0}, and finally prints
1034the borrowed reference. Looks harmless, right? But it's not!
1035
1036Let's follow the control flow into \cfunction{PyList_SetItem()}. The list
1037owns references to all its items, so when item 1 is replaced, it has
1038to dispose of the original item 1. Now let's suppose the original
1039item 1 was an instance of a user-defined class, and let's further
1040suppose that the class defined a \method{__del__()} method. If this
1041class instance has a reference count of 1, disposing of it will call
1042its \method{__del__()} method.
1043
1044Since it is written in Python, the \method{__del__()} method can execute
1045arbitrary Python code. Could it perhaps do something to invalidate
1046the reference to \code{item} in \cfunction{bug()}? You bet! Assuming
1047that the list passed into \cfunction{bug()} is accessible to the
1048\method{__del__()} method, it could execute a statement to the effect of
1049\samp{del list[0]}, and assuming this was the last reference to that
1050object, it would free the memory associated with it, thereby
1051invalidating \code{item}.
1052
1053The solution, once you know the source of the problem, is easy:
1054temporarily increment the reference count. The correct version of the
1055function reads:
1056
1057\begin{verbatim}
Fred Drake723f94b2002-06-22 01:42:00 +00001058void
1059no_bug(PyObject *list)
1060{
Fred Drakecc8f44b2001-08-20 19:30:29 +00001061 PyObject *item = PyList_GetItem(list, 0);
1062
1063 Py_INCREF(item);
1064 PyList_SetItem(list, 1, PyInt_FromLong(0L));
1065 PyObject_Print(item, stdout, 0);
1066 Py_DECREF(item);
1067}
1068\end{verbatim}
1069
1070This is a true story. An older version of Python contained variants
1071of this bug and someone spent a considerable amount of time in a C
1072debugger to figure out why his \method{__del__()} methods would fail...
1073
1074The second case of problems with a borrowed reference is a variant
1075involving threads. Normally, multiple threads in the Python
1076interpreter can't get in each other's way, because there is a global
1077lock protecting Python's entire object space. However, it is possible
1078to temporarily release this lock using the macro
Fred Drake375e3022002-04-09 21:09:42 +00001079\csimplemacro{Py_BEGIN_ALLOW_THREADS}, and to re-acquire it using
1080\csimplemacro{Py_END_ALLOW_THREADS}. This is common around blocking
1081I/O calls, to let other threads use the processor while waiting for
1082the I/O to complete. Obviously, the following function has the same
1083problem as the previous one:
Fred Drakecc8f44b2001-08-20 19:30:29 +00001084
1085\begin{verbatim}
Fred Drake723f94b2002-06-22 01:42:00 +00001086void
1087bug(PyObject *list)
1088{
Fred Drakecc8f44b2001-08-20 19:30:29 +00001089 PyObject *item = PyList_GetItem(list, 0);
1090 Py_BEGIN_ALLOW_THREADS
1091 ...some blocking I/O call...
1092 Py_END_ALLOW_THREADS
1093 PyObject_Print(item, stdout, 0); /* BUG! */
1094}
1095\end{verbatim}
1096
1097
1098\subsection{NULL Pointers
1099 \label{nullPointers}}
1100
1101In general, functions that take object references as arguments do not
1102expect you to pass them \NULL{} pointers, and will dump core (or
1103cause later core dumps) if you do so. Functions that return object
1104references generally return \NULL{} only to indicate that an
1105exception occurred. The reason for not testing for \NULL{}
1106arguments is that functions often pass the objects they receive on to
Fred Drakec37b65e2001-11-28 07:26:15 +00001107other function --- if each function were to test for \NULL,
Fred Drakecc8f44b2001-08-20 19:30:29 +00001108there would be a lot of redundant tests and the code would run more
1109slowly.
1110
1111It is better to test for \NULL{} only at the ``source:'' when a
1112pointer that may be \NULL{} is received, for example, from
1113\cfunction{malloc()} or from a function that may raise an exception.
1114
1115The macros \cfunction{Py_INCREF()} and \cfunction{Py_DECREF()}
1116do not check for \NULL{} pointers --- however, their variants
1117\cfunction{Py_XINCREF()} and \cfunction{Py_XDECREF()} do.
1118
1119The macros for checking for a particular object type
1120(\code{Py\var{type}_Check()}) don't check for \NULL{} pointers ---
1121again, there is much code that calls several of these in a row to test
1122an object against various different expected types, and this would
1123generate redundant tests. There are no variants with \NULL{}
1124checking.
1125
1126The C function calling mechanism guarantees that the argument list
1127passed to C functions (\code{args} in the examples) is never
1128\NULL{} --- in fact it guarantees that it is always a tuple.\footnote{
1129These guarantees don't hold when you use the ``old'' style
1130calling convention --- this is still found in much existing code.}
1131
1132It is a severe error to ever let a \NULL{} pointer ``escape'' to
1133the Python user.
1134
1135% Frank Stajano:
1136% A pedagogically buggy example, along the lines of the previous listing,
1137% would be helpful here -- showing in more concrete terms what sort of
1138% actions could cause the problem. I can't very well imagine it from the
1139% description.
1140
1141
Fred Drakec37b65e2001-11-28 07:26:15 +00001142\section{Writing Extensions in \Cpp
Fred Drakecc8f44b2001-08-20 19:30:29 +00001143 \label{cplusplus}}
1144
Fred Drakec37b65e2001-11-28 07:26:15 +00001145It is possible to write extension modules in \Cpp. Some restrictions
Fred Drakecc8f44b2001-08-20 19:30:29 +00001146apply. If the main program (the Python interpreter) is compiled and
1147linked by the C compiler, global or static objects with constructors
1148cannot be used. This is not a problem if the main program is linked
1149by the \Cpp{} compiler. Functions that will be called by the
Raymond Hettinger68804312005-01-01 00:28:46 +00001150Python interpreter (in particular, module initialization functions)
Fred Drakecc8f44b2001-08-20 19:30:29 +00001151have to be declared using \code{extern "C"}.
1152It is unnecessary to enclose the Python header files in
1153\code{extern "C" \{...\}} --- they use this form already if the symbol
1154\samp{__cplusplus} is defined (all recent \Cpp{} compilers define this
1155symbol).
1156
1157
1158\section{Providing a C API for an Extension Module
1159 \label{using-cobjects}}
1160\sectionauthor{Konrad Hinsen}{hinsen@cnrs-orleans.fr}
1161
1162Many extension modules just provide new functions and types to be
1163used from Python, but sometimes the code in an extension module can
1164be useful for other extension modules. For example, an extension
1165module could implement a type ``collection'' which works like lists
1166without order. Just like the standard Python list type has a C API
1167which permits extension modules to create and manipulate lists, this
1168new collection type should have a set of C functions for direct
1169manipulation from other extension modules.
1170
1171At first sight this seems easy: just write the functions (without
1172declaring them \keyword{static}, of course), provide an appropriate
1173header file, and document the C API. And in fact this would work if
1174all extension modules were always linked statically with the Python
1175interpreter. When modules are used as shared libraries, however, the
1176symbols defined in one module may not be visible to another module.
1177The details of visibility depend on the operating system; some systems
1178use one global namespace for the Python interpreter and all extension
1179modules (Windows, for example), whereas others require an explicit
1180list of imported symbols at module link time (AIX is one example), or
1181offer a choice of different strategies (most Unices). And even if
1182symbols are globally visible, the module whose functions one wishes to
1183call might not have been loaded yet!
1184
1185Portability therefore requires not to make any assumptions about
1186symbol visibility. This means that all symbols in extension modules
1187should be declared \keyword{static}, except for the module's
1188initialization function, in order to avoid name clashes with other
1189extension modules (as discussed in section~\ref{methodTable}). And it
1190means that symbols that \emph{should} be accessible from other
1191extension modules must be exported in a different way.
1192
1193Python provides a special mechanism to pass C-level information
1194(pointers) from one extension module to another one: CObjects.
1195A CObject is a Python data type which stores a pointer (\ctype{void
1196*}). CObjects can only be created and accessed via their C API, but
1197they can be passed around like any other Python object. In particular,
1198they can be assigned to a name in an extension module's namespace.
1199Other extension modules can then import this module, retrieve the
1200value of this name, and then retrieve the pointer from the CObject.
1201
1202There are many ways in which CObjects can be used to export the C API
1203of an extension module. Each name could get its own CObject, or all C
1204API pointers could be stored in an array whose address is published in
1205a CObject. And the various tasks of storing and retrieving the pointers
1206can be distributed in different ways between the module providing the
1207code and the client modules.
1208
1209The following example demonstrates an approach that puts most of the
1210burden on the writer of the exporting module, which is appropriate
1211for commonly used library modules. It stores all C API pointers
1212(just one in the example!) in an array of \ctype{void} pointers which
1213becomes the value of a CObject. The header file corresponding to
1214the module provides a macro that takes care of importing the module
1215and retrieving its C API pointers; client modules only have to call
1216this macro before accessing the C API.
1217
1218The exporting module is a modification of the \module{spam} module from
1219section~\ref{simpleExample}. The function \function{spam.system()}
1220does not call the C library function \cfunction{system()} directly,
1221but a function \cfunction{PySpam_System()}, which would of course do
1222something more complicated in reality (such as adding ``spam'' to
1223every command). This function \cfunction{PySpam_System()} is also
1224exported to other extension modules.
1225
1226The function \cfunction{PySpam_System()} is a plain C function,
1227declared \keyword{static} like everything else:
1228
1229\begin{verbatim}
1230static int
Brett Cannon289e4cb2004-06-29 03:48:23 +00001231PySpam_System(const char *command)
Fred Drakecc8f44b2001-08-20 19:30:29 +00001232{
1233 return system(command);
1234}
1235\end{verbatim}
1236
1237The function \cfunction{spam_system()} is modified in a trivial way:
1238
1239\begin{verbatim}
1240static PyObject *
Fred Drake723f94b2002-06-22 01:42:00 +00001241spam_system(PyObject *self, PyObject *args)
Fred Drakecc8f44b2001-08-20 19:30:29 +00001242{
Brett Cannon289e4cb2004-06-29 03:48:23 +00001243 const char *command;
Fred Drakecc8f44b2001-08-20 19:30:29 +00001244 int sts;
1245
1246 if (!PyArg_ParseTuple(args, "s", &command))
1247 return NULL;
1248 sts = PySpam_System(command);
1249 return Py_BuildValue("i", sts);
1250}
1251\end{verbatim}
1252
1253In the beginning of the module, right after the line
1254
1255\begin{verbatim}
1256#include "Python.h"
1257\end{verbatim}
1258
1259two more lines must be added:
1260
1261\begin{verbatim}
1262#define SPAM_MODULE
1263#include "spammodule.h"
1264\end{verbatim}
1265
1266The \code{\#define} is used to tell the header file that it is being
1267included in the exporting module, not a client module. Finally,
1268the module's initialization function must take care of initializing
1269the C API pointer array:
1270
1271\begin{verbatim}
Mark Hammond8235ea12002-07-19 06:55:41 +00001272PyMODINIT_FUNC
Fred Drakeef6373a2001-11-17 06:50:42 +00001273initspam(void)
Fred Drakecc8f44b2001-08-20 19:30:29 +00001274{
1275 PyObject *m;
1276 static void *PySpam_API[PySpam_API_pointers];
1277 PyObject *c_api_object;
1278
1279 m = Py_InitModule("spam", SpamMethods);
1280
1281 /* Initialize the C API pointer array */
1282 PySpam_API[PySpam_System_NUM] = (void *)PySpam_System;
1283
1284 /* Create a CObject containing the API pointer array's address */
1285 c_api_object = PyCObject_FromVoidPtr((void *)PySpam_API, NULL);
1286
Fred Drake63e40a52002-04-12 19:08:31 +00001287 if (c_api_object != NULL)
1288 PyModule_AddObject(m, "_C_API", c_api_object);
Fred Drakecc8f44b2001-08-20 19:30:29 +00001289}
1290\end{verbatim}
1291
Fred Drakeef6373a2001-11-17 06:50:42 +00001292Note that \code{PySpam_API} is declared \keyword{static}; otherwise
1293the pointer array would disappear when \function{initspam()} terminates!
Fred Drakecc8f44b2001-08-20 19:30:29 +00001294
1295The bulk of the work is in the header file \file{spammodule.h},
1296which looks like this:
1297
1298\begin{verbatim}
1299#ifndef Py_SPAMMODULE_H
1300#define Py_SPAMMODULE_H
1301#ifdef __cplusplus
1302extern "C" {
1303#endif
1304
1305/* Header file for spammodule */
1306
1307/* C API functions */
1308#define PySpam_System_NUM 0
1309#define PySpam_System_RETURN int
1310#define PySpam_System_PROTO (char *command)
1311
1312/* Total number of C API pointers */
1313#define PySpam_API_pointers 1
1314
1315
1316#ifdef SPAM_MODULE
1317/* This section is used when compiling spammodule.c */
1318
1319static PySpam_System_RETURN PySpam_System PySpam_System_PROTO;
1320
1321#else
1322/* This section is used in modules that use spammodule's API */
1323
1324static void **PySpam_API;
1325
1326#define PySpam_System \
1327 (*(PySpam_System_RETURN (*)PySpam_System_PROTO) PySpam_API[PySpam_System_NUM])
1328
Fred Drake63e40a52002-04-12 19:08:31 +00001329/* Return -1 and set exception on error, 0 on success. */
1330static int
1331import_spam(void)
1332{
1333 PyObject *module = PyImport_ImportModule("spam");
1334
1335 if (module != NULL) {
1336 PyObject *c_api_object = PyObject_GetAttrString(module, "_C_API");
1337 if (c_api_object == NULL)
1338 return -1;
1339 if (PyCObject_Check(c_api_object))
1340 PySpam_API = (void **)PyCObject_AsVoidPtr(c_api_object);
1341 Py_DECREF(c_api_object);
1342 }
1343 return 0;
Fred Drakecc8f44b2001-08-20 19:30:29 +00001344}
1345
1346#endif
1347
1348#ifdef __cplusplus
1349}
1350#endif
1351
Raymond Hettingerf9c2eda2003-05-20 05:31:16 +00001352#endif /* !defined(Py_SPAMMODULE_H) */
Fred Drakecc8f44b2001-08-20 19:30:29 +00001353\end{verbatim}
1354
1355All that a client module must do in order to have access to the
1356function \cfunction{PySpam_System()} is to call the function (or
1357rather macro) \cfunction{import_spam()} in its initialization
1358function:
1359
1360\begin{verbatim}
Mark Hammond8235ea12002-07-19 06:55:41 +00001361PyMODINIT_FUNC
Fred Drakeef6373a2001-11-17 06:50:42 +00001362initclient(void)
Fred Drakecc8f44b2001-08-20 19:30:29 +00001363{
1364 PyObject *m;
1365
1366 Py_InitModule("client", ClientMethods);
Fred Drake63e40a52002-04-12 19:08:31 +00001367 if (import_spam() < 0)
1368 return;
1369 /* additional initialization can happen here */
Fred Drakecc8f44b2001-08-20 19:30:29 +00001370}
1371\end{verbatim}
1372
1373The main disadvantage of this approach is that the file
1374\file{spammodule.h} is rather complicated. However, the
1375basic structure is the same for each function that is
1376exported, so it has to be learned only once.
1377
1378Finally it should be mentioned that CObjects offer additional
1379functionality, which is especially useful for memory allocation and
1380deallocation of the pointer stored in a CObject. The details
1381are described in the \citetitle[../api/api.html]{Python/C API
Fred Drake63e40a52002-04-12 19:08:31 +00001382Reference Manual} in the section
1383``\ulink{CObjects}{../api/cObjects.html}'' and in the implementation
1384of CObjects (files \file{Include/cobject.h} and
Fred Drakecc8f44b2001-08-20 19:30:29 +00001385\file{Objects/cobject.c} in the Python source code distribution).