Skip to main content

7.5 Limited Types

danger

This Reference Manual output has not been verified, and may contain omissions or errors. Report any problems on the tracking issue

1/2

[A limited type is (a view of) a type for which copying (such as for an assignment_statement) is not allowed. A nonlimited type is a (view of a) type for which copying is allowed.]

1.a
discussion
The concept of the value of a limited type is difficult to define, since the abstract value of a limited type often extends beyond its physical representation. In some sense, values of a limited type cannot be divorced from their object. The value is the object.
1.b/2
note
In Ada 83, in the two places where limited types were defined by the language, namely tasks and files, an implicit level of indirection was implied by the semantics to avoid the separation of the value from an associated object. In Ada 95, most limited types are passed by reference, and even return-ed by reference. In Ada 2005, most limited types are built-in-place upon return, rather than returned by reference. Thus the object “identity” is part of the logical value of most limited types.
1.c/2
note
To be honest: For a limited partial view whose full view is nonlimited, copying is possible on parameter passing and function return. To prevent any copying whatsoever, one should make both the partial and full views limited.
1.d/2
glossary entry
A limited type is a type for which copying (such as in an assignment_statement) is not allowed. A nonlimited type is a type for which copying is allowed.
2

Legality Rules​

3/2

If a tagged record type has any limited components, then the reserved word limited shall appear in its record_type_definition. [If the reserved word limited appears in the definition of a derived_type_definition, its parent type and any progenitor interfaces shall be limited.]

3.a.1/5
proof
The rule about the parent type being required to be limited can be found in 3.4. Rules about progenitor interfaces can be found in 3.9.4; specifically, a nonlimited interface can appear only on a nonlimited type. We repeat these rules here to gather these scattered rules in one obvious place.
3.a
reason
This prevents tagged limited types from becoming nonlimited. Otherwise, the following could happen:
3.b
package P is
    type T is limited private;
    type R is tagged
        record -- Illegal!
               -- This should say “limited record”.
            X : T;
        end record;
private
    type T is new Integer; -- R becomes nonlimited here.
end P;
3.c/2package Q is
    type R2 is new R with
        record
            Y : Some_Task_Type;
        end record;
end Q;
3.d/2
note
If the above were legal, then assignment would be defined for R'Class in the body of P, which is bad news, given the task.
3.1/5

In the following contexts, an expression of a limited type is permitted only if each of its operative constituents is newly constructed (see 4.4) :

3.2/2
3.d.1/5
ramification
We don't need to mention the base_expression of an array_delta_aggregate here, as its type cannot be limited (see 4.3.4), and thus neither can its base_expression. Similarly, we do not need any rules for components of a delta_aggregate nor the elements of a container_aggregate, as neither are allowed to be limited (see 4.3.4 and 4.3.5)
3.8/5
3.e/2
discussion
All of these contexts normally require copying; by restricting the uses as above, we can require the new object to be built-in-place.

Static Semantics​

4/3

A view of a type is limited if it is one of the following:

5/2
  • a type with the reserved word limited, synchronized, task, or protected in its definition;
5.a
ramification
Note that there is always a “definition”, conceptually, even if there is no syntactic category called “..._definition”.
5.b/2
note
This includes interfaces of the above kinds, derived types with the reserved word limited, as well as task and protected types.
6/3
  • a class-wide type whose specific type is limited;
    • 7/2
  • a composite type with a limited component;
    • 7.1/3
  • an incomplete view;
    • 7.2/2
  • a derived type whose parent is limited and is not an interface.
7.a/2
ramification
Limitedness is not inherited from interfaces; it must be explicitly specified when the parent is an interface.
7.b/2
note
To be honest: A derived type can become nonlimited if limited does not appear and the derivation takes place in the visible part of a child package, and the parent type is nonlimited as viewed from the private part or body of the child package.
7.c/2
reason
We considered a rule where limitedness was always inherited from the parent for derived types, but in the case of a type whose parent is an interface, this meant that the first interface is treated differently than other interfaces. It also would have forced users to declare dummy nonlimited interfaces just to get the limitedness right. We also considered a syntax like not limited to specify nonlimitedness when the parent was limited, but that was unsavory. The rule given is more uniform and simpler to understand.
7.d/2
note
The rules for interfaces are asymmetrical, but the language is not: if the parent interface is limited, the presence of the word limited determines the limitedness, and nonlimited progenitors are illegal by the rules in 3.9.4 if limited is present. If the parent interface is nonlimited, the word limited is illegal by the rules in 3.4. The net effect is that the order of the interfaces doesn't matter.
8

Otherwise, the type is nonlimited.

9

[There are no predefined equality operators for a limited type.]

9.1/3

A type is immutably limited if it is one of the following:

9.2/3
  • An explicitly limited record type;
    • 9.3/3
  • A record extension with the reserved word limited;
    • 9.4/3
  • A nonformal limited private type that is tagged or has at least one access discriminant with a default_expression;
9.a/3
reason
The full type in both of these cases must necessarily be immutably limited. We need to include private types as much as possible so that we aren't unintentionally discouraging the use of private types.
9.5/3
  • A task type, a protected type, or a synchronized interface;
    • 9.6/3
  • A type derived from an immutably limited type.
9.b/3
discussion
An immutably limited type is a type that cannot become nonlimited subsequently in a private part or in a child unit. If a view of the type makes it immutably limited, then no copying (assignment) operations are ever available for objects of the type. This allows other properties; for instance, it is safe for such objects to have access discriminants that have defaults or designate other limited objects.
9.c/3
ramification
A nonsynchronized limited interface type is not immutably limited; a type derived from it can be nonlimited.
9.7/3

A descendant of a generic formal limited private type is presumed to be immutably limited except within the body of a generic unit or a body declared within the declarative region of a generic unit, if the formal type is declared within the formal part of the generic unit.

9.d/3
ramification
In an instance, a type is descended from the actual type corresponding to the formal, and all rules are rechecked in the specification. Bodies are excepted so that we assume the worst there; the complex wording is required to handle children of generics and unrelated bodies properly.
10/5
note
NOTE 1 While it is allowed to write initializations of limited objects, such initializations never copy a limited object. The source of such an assignment operation will be an aggregate or function_call, and such aggregates and function_calls will be built directly in the target object (see 7.6).
10.a/2
note
To be honest: This isn't quite true if the type can become nonlimited (see below); function_calls only are required to be build-in-place for “really” limited types.
note
Paragraphs 10 through 15 were deleted.
17
note
NOTE 2 As illustrated in 7.3.1, an untagged limited type can become nonlimited under certain circumstances.
17.a
ramification
Limited private types do not become nonlimited; instead, their full view can be nonlimited, which has a similar effect.
17.b
note
It is important to remember that a single nonprivate type can be both limited and nonlimited in different parts of its scope. In other words, “limited” is a property that depends on where you are in the scope of the type. We don't call this a “view property” because there is no particular declaration to declare the nonlimited view.
17.c
note
Tagged types never become nonlimited.

Examples​

18

Example of a package with a limited type:

19
package IO_Package is
   type File_Name is limited private;
20procedure Open (F : in out File_Name);
   procedure Close(F : in out File_Name);
   procedure Read (F : in File_Name; Item : out Integer);
   procedure Write(F : in File_Name; Item : in  Integer);
private
   type File_Name is
      limited record
         Internal_Name : Integer := 0;
      end record;
end IO_Package;
21package body IO_Package is
   Limit : constant := 200;
   type File_Descriptor is record  ...  end record;
   Directory : array (1 .. Limit) of File_Descriptor;
   ...
   procedure Open (F : in out File_Name) is  ...  end;
   procedure Close(F : in out File_Name) is  ...  end;
   procedure Read (F : in File_Name; Item : out Integer) is ... end;
   procedure Write(F : in File_Name; Item : in  Integer) is ... end;
begin
   ...
end IO_Package;
22/5
note
NOTE 3 Notes on the example: In the example above, an outside subprogram making use of IO_Package can obtain a file name by calling Open and later use it in calls to Read and Write. Thus, outside the package, a file name obtained from Open acts as a kind of password; its internal properties (such as containing a numeric value) are not known and no other operations (such as addition or comparison of internal names) can be performed on a file name. Most importantly, clients of the package cannot make copies of objects of type File_Name.
23
note
This example is characteristic of any case where complete control over the operations of a type is desired. Such packages serve a dual purpose. They prevent a user from making use of the internal structure of the type. They also implement the notion of an encapsulated data type where the only operations on the type are those given in the package specification.
24/2
note
The fact that the full view of File_Name is explicitly declared limited means that parameter passing will always be by reference and function results will always be built directly in the result object (see 6.2 and 6.5).

Extensions to Ada 83​

24.a
note
The restrictions in RM83-7.4.4(4), which disallowed out parameters of limited types in certain cases, are removed.

Wording Changes from Ada 83​

24.b/3
note
Since limitedness and privateness are orthogonal in Ada 95 (and to some extent in Ada 83), this is now its own subclause rather than being a subclause of 7.3, “Private Types and Private Extensions”.

Extensions to Ada 95​

24.c/2
note
Limited types now have an assignment operation, but its use is restricted such that all uses are build-in-place. This is accomplished by restricting uses to aggregates and function_calls. Aggregates were not allowed to have a limited type in Ada 95, which causes a compatibility issue discussed in 4.3, “Aggregates”. Compatibility issues with return statements for limited function_calls are discussed in 6.5, “Return Statements”.

Wording Changes from Ada 95​

24.d/2
note
Rewrote the definition of limited to ensure that interfaces are covered, but that limitedness is not inherited from interfaces. Derived types that explicitly include limited are now also covered.

Wording Changes from Ada 2005​

24.e/3
correction
Added a definition for immutably limited types, so that the fairly complex definition does not need to be repeated in rules elsewhere in the Reference Manual.
24.f/3
correction
The built-in-place rules are consolidated in 7.6, and thus they are removed from this subclause.
24.g/3
correction
Fixed an oversight: class-wide types were never defined to be limited, even if their associated specific type is. It is thought that this oversight was never implemented incorrectly by any compiler, thus we have not classified it as an incompatibility.
24.h/3
note
Allowed conditional_expressions in limited constructor contexts — we want to treat these as closely to parentheses as possible.
24.i/3
note
Added wording so that expression functions can return limited entities.
24.j/3
correction
Added incomplete views to the list of reasons for a view of a type to be limited. This is not a change as the definition already was in 3.10.1. But it is much better to have all of the reasons for limitedness together.

Extensions to Ada 2012​

24.k/5
correction
A raise_expression can be used in an expression used in a limited context. This is harmless (no object will be created if an exception is raised instead), useful, and thus appears to have been an omission when raise_expressions were added to the language.

Wording Changes from Ada 2012​

24.l/5
note
Added the base_expression of a delta_aggregate as a limited context.