diff --git a/gcc/cp/ChangeLog b/gcc/cp/ChangeLog index 2c497256560389de3f2525376bfd4d423e2fa49c..ca2ac716d0a04a8d67487512249d52157159d7ae 100644 --- a/gcc/cp/ChangeLog +++ b/gcc/cp/ChangeLog @@ -1,3 +1,26 @@ +2000-04-15 Mark Mitchell <mark@codesourcery.com> + + * cp-tree.def (THUNK_DECL): Add to documentation. + * cp-tree.h (flag_huge_objects): Declare. + * class.c (modify_vtable_entry): Tidy. + (update_vtable_entry_for_fn): Split out from dfs_modify_vtables. + Calculate delta appropriately for the new ABI. + (dfs_modify_vtables): Use it. + (modify_all_vtables): Fix thinko in code to add overriding copies + of functions to primary vtables. + (build_clone): Fix typo in comment. + (clone_function_decl): Correct order of destructors in vtable. + (build_vbase_offset_vtbl_entries): Adjust comment. + (dfs_vcall_offset_queue_p): Remove. + (dfs_build_vcall_offset_vtbl_entries): Update BV_VCALL_INDEX. + (build_vcall_offset_vtbl_entries): Juse use dfs_skip_vbases. + (build_vtable_entry): Correct check for pure virtual functions. + Don't declare flag_huge_objects. + * decl.c (flag_huge_objects): Remove declaration. + * method.c (make_thunk): Tweak mangling for vcall offset thunks. + Use int_size_in_bytes. + (emit_thunk): Handle vcall offset thunks. + Sat Apr 15 16:00:01 2000 Richard Kenner <kenner@vlsi1.ultra.nyu.edu> * decl2.c (parse_time, varconst_time): Delete declarations. diff --git a/gcc/cp/class.c b/gcc/cp/class.c index e89c733dcd485e5ac4f8b69bc34479f9633db049..bf9c804a8a35c4e06f9e1dfb28b400912e7d59c7 100644 --- a/gcc/cp/class.c +++ b/gcc/cp/class.c @@ -146,7 +146,6 @@ static void layout_virtual_bases PARAMS ((tree, varray_type *)); static tree dfs_set_offset_for_shared_vbases PARAMS ((tree, void *)); static tree dfs_set_offset_for_unshared_vbases PARAMS ((tree, void *)); static void build_vbase_offset_vtbl_entries PARAMS ((tree, vcall_offset_data *)); -static tree dfs_vcall_offset_queue_p PARAMS ((tree, void *)); static tree dfs_build_vcall_offset_vtbl_entries PARAMS ((tree, void *)); static void build_vcall_offset_vtbl_entries PARAMS ((tree, vcall_offset_data *)); static void layout_vtable_decl PARAMS ((tree, int)); @@ -977,9 +976,9 @@ make_new_vtable (t, binfo) /* Make *VIRTUALS, an entry on the BINFO_VIRTUALS list for BINFO (which is in the hierarchy dominated by T) list FNDECL as its - BV_FN. DELTA is the required adjustment from the `this' pointer - where the vtable entry appears to the `this' required when the - function is actually called. */ + BV_FN. DELTA is the required constant adjustment from the `this' + pointer where the vtable entry appears to the `this' required when + the function is actually called. */ static void modify_vtable_entry (t, binfo, fndecl, delta, virtuals) @@ -989,15 +988,12 @@ modify_vtable_entry (t, binfo, fndecl, delta, virtuals) tree delta; tree *virtuals; { - tree vcall_index; tree v; v = *virtuals; - vcall_index = integer_zero_node; if (fndecl != BV_FN (v) - || !tree_int_cst_equal (delta, BV_DELTA (v)) - || !tree_int_cst_equal (vcall_index, BV_VCALL_INDEX (v))) + || !tree_int_cst_equal (delta, BV_DELTA (v))) { tree base_fndecl; @@ -1015,7 +1011,7 @@ modify_vtable_entry (t, binfo, fndecl, delta, virtuals) base_fndecl = BV_FN (v); BV_DELTA (v) = delta; - BV_VCALL_INDEX (v) = vcall_index; + BV_VCALL_INDEX (v) = integer_zero_node; BV_FN (v) = fndecl; /* Now assign virtual dispatch information, if unset. We can @@ -1087,7 +1083,8 @@ add_virtual_function (new_virtuals_p, overridden_virtuals_p, /* We've already dealt with this function. */ return; - new_virtual = build_tree_list (integer_zero_node, fndecl); + new_virtual = build_tree_list (NULL_TREE, fndecl); + BV_DELTA (new_virtual) = integer_zero_node; BV_VCALL_INDEX (new_virtual) = integer_zero_node; if (DECL_VINDEX (fndecl) == error_mark_node) @@ -2470,6 +2467,84 @@ dfs_find_base (binfo, data) ? binfo : NULL_TREE); } +/* Update a entry in the vtable for BINFO, which is in the hierarchy + dominated by T. FN has been overridden in BINFO; VIRTUALS points + to the corresponding position in the BINFO_VIRTUALS list. */ + +static void +update_vtable_entry_for_fn (t, binfo, fn, virtuals) + tree t; + tree binfo; + tree fn; + tree *virtuals; +{ + tree b; + tree overrider; + tree vindex; + tree delta; + HOST_WIDE_INT vindex_val; + HOST_WIDE_INT i; + + /* Find the function which originally caused this vtable + entry to be present. */ + vindex = DECL_VINDEX (fn); + b = dfs_walk (binfo, dfs_find_base, NULL, DECL_VIRTUAL_CONTEXT (fn)); + fn = BINFO_VIRTUALS (TYPE_BINFO (BINFO_TYPE (b))); + i = first_vfun_index (BINFO_TYPE (b)); + vindex_val = tree_low_cst (vindex, 0); + while (i < vindex_val) + { + fn = TREE_CHAIN (fn); + ++i; + } + fn = BV_FN (fn); + + /* Handle the case of a virtual function defined in BINFO itself. */ + overrider = find_final_overrider (t, b, fn); + if (overrider == error_mark_node) + return; + + /* Compute the constant adjustment to the `this' pointer. The + `this' pointer, when this function is called, will point at the + class whose vtable this is. */ + delta = size_binop (PLUS_EXPR, + get_derived_offset (binfo, + DECL_VIRTUAL_CONTEXT (fn)), + BINFO_OFFSET (binfo)); + if (flag_new_abi) + { + /* Under the new ABI, we only need to adjust as far as the + nearest virtual base. Then we use the vcall offset in the + virtual bases vtable. */ + for (b = binfo; b; b = BINFO_INHERITANCE_CHAIN (b)) + { + if (TREE_VIA_VIRTUAL (b)) + break; + if (same_type_p (BINFO_TYPE (b), + BINFO_TYPE (TREE_VALUE (overrider)))) + break; + } + } + else + b = NULL_TREE; + + if (b && TREE_VIA_VIRTUAL (b)) + /* The `this' pointer needs to be adjusted to the nearest virtual + base. */ + delta = size_diffop (BINFO_OFFSET (b), delta); + else + /* The `this' pointer needs to be adjusted from pointing to + BINFO to pointing at the base where the final overrider + appears. */ + delta = size_diffop (BINFO_OFFSET (TREE_VALUE (overrider)), delta); + + modify_vtable_entry (t, + binfo, + TREE_PURPOSE (overrider), + delta, + virtuals); +} + /* Called from modify_all_vtables via dfs_walk. */ static tree @@ -2503,51 +2578,10 @@ dfs_modify_vtables (binfo, data) virtuals; virtuals = TREE_CHAIN (virtuals), old_virtuals = TREE_CHAIN (old_virtuals)) - { - tree b; - tree fn; - tree overrider; - tree vindex; - tree delta; - HOST_WIDE_INT vindex_val; - HOST_WIDE_INT i; - - /* Find the function which originally caused this vtable - entry to be present. */ - fn = BV_FN (old_virtuals); - vindex = DECL_VINDEX (fn); - b = dfs_walk (binfo, dfs_find_base, NULL, DECL_VIRTUAL_CONTEXT (fn)); - fn = BINFO_VIRTUALS (TYPE_BINFO (BINFO_TYPE (b))); - i = first_vfun_index (BINFO_TYPE (b)); - vindex_val = tree_low_cst (vindex, 0); - while (i < vindex_val) - { - fn = TREE_CHAIN (fn); - ++i; - } - fn = BV_FN (fn); - - /* Handle the case of a virtual function defined in BINFO - itself. */ - overrider = find_final_overrider (t, b, fn); - if (overrider == error_mark_node) - continue; - - /* The `this' pointer needs to be adjusted from pointing to - BINFO to pointing at the base where the final overrider - appears. */ - delta = size_binop (PLUS_EXPR, - get_derived_offset (binfo, - DECL_VIRTUAL_CONTEXT (fn)), - BINFO_OFFSET (binfo)); - delta = size_diffop (BINFO_OFFSET (TREE_VALUE (overrider)), delta); - - modify_vtable_entry (t, - binfo, - TREE_PURPOSE (overrider), - delta, - &virtuals); - } + update_vtable_entry_for_fn (t, + binfo, + BV_FN (old_virtuals), + &virtuals); } SET_BINFO_MARKED (binfo); @@ -2591,8 +2625,8 @@ modify_all_vtables (t, vfuns_p, overridden_virtuals) { tree fn = TREE_VALUE (*fnsp); - if (BINFO_VIRTUALS (binfo) - && !value_member (fn, BINFO_VIRTUALS (binfo))) + if (!BINFO_VIRTUALS (binfo) + || !value_member (fn, BINFO_VIRTUALS (binfo))) { /* Set the vtable index. */ set_vindex (t, fn, vfuns_p); @@ -3891,7 +3925,7 @@ build_clone (fn, name) DECL_VINDEX (clone) = NULL_TREE; } - /* If there was an in-charge paramter, drop it from the function + /* If there was an in-charge parameter, drop it from the function type. */ if (DECL_HAS_IN_CHARGE_PARM_P (clone)) { @@ -3990,11 +4024,14 @@ clone_function_decl (fn, update_method_vec_p) /* For each destructor, we need two variants: an in-charge version, a not-in-charge version, and an in-charge deleting - version. */ - clone = build_clone (fn, complete_dtor_identifier); + version. We clone the deleting version first because that + means it will go second on the TYPE_METHODS list -- and that + corresponds to the correct layout order in the virtual + function table. */ + clone = build_clone (fn, deleting_dtor_identifier); if (update_method_vec_p) add_method (DECL_CONTEXT (clone), NULL, clone); - clone = build_clone (fn, deleting_dtor_identifier); + clone = build_clone (fn, complete_dtor_identifier); if (update_method_vec_p) add_method (DECL_CONTEXT (clone), NULL, clone); clone = build_clone (fn, base_dtor_identifier); @@ -6637,9 +6674,9 @@ build_vbase_offset_vtbl_entries (binfo, vod) vod->index, integer_one_node)); /* The initializer is the delta from BINFO to this virtual base. - The vbase offsets go in reverse inheritance-graph order, and - we are walking in inheritance graph order so these end up in - the right order. */ + The vbase offsets go in reverse inheritance-graph order, and + we are walking in inheritance graph order so these end up in + the right order. */ delta = size_diffop (BINFO_OFFSET (b), BINFO_OFFSET (binfo)); vod->inits = tree_cons (NULL_TREE, fold (build1 (NOP_EXPR, @@ -6651,59 +6688,70 @@ build_vbase_offset_vtbl_entries (binfo, vod) /* Called from build_vcall_offset_vtbl_entries via dfs_walk. */ -static tree -dfs_vcall_offset_queue_p (binfo, data) - tree binfo; - void *data; -{ - vcall_offset_data* vod = (vcall_offset_data *) data; - - return (binfo == vod->vbase) ? binfo : dfs_skip_vbases (binfo, NULL); -} - -/* Called from build_vcall_offset_vtbl_entries via dfs_walk. */ - static tree dfs_build_vcall_offset_vtbl_entries (binfo, data) tree binfo; void *data; { vcall_offset_data* vod; - tree virtuals; + tree derived_virtuals; + tree base_virtuals; tree binfo_inits; + tree non_primary_binfo; tree b; int i; vod = (vcall_offset_data *) data; binfo_inits = NULL_TREE; - + + /* We might be a primary base class. Go up the inheritance + hierarchy until we find the class of which we are a primary base: + it is the BINFO_VIRTUALS there that we need to consider. */ + non_primary_binfo = binfo; + while (BINFO_PRIMARY_MARKED_P (non_primary_binfo)) + non_primary_binfo = BINFO_INHERITANCE_CHAIN (non_primary_binfo); + /* Skip virtuals that we have already handled in a primary base class. */ - virtuals = BINFO_VIRTUALS (binfo); + base_virtuals = BINFO_VIRTUALS (binfo); + derived_virtuals = BINFO_VIRTUALS (non_primary_binfo); b = BINFO_PRIMARY_BINFO (binfo); if (b) for (i = 0; i < CLASSTYPE_VSIZE (BINFO_TYPE (b)); ++i) - virtuals = TREE_CHAIN (virtuals); + { + base_virtuals = TREE_CHAIN (base_virtuals); + derived_virtuals = TREE_CHAIN (derived_virtuals); + } /* Make entries for the rest of the virtuals. */ - while (virtuals) + while (base_virtuals) { /* Figure out what function we're looking at. */ - tree fn = TREE_VALUE (virtuals); + tree fn = TREE_VALUE (derived_virtuals); tree base = DECL_CONTEXT (fn); /* The FN comes from BASE. So, we must caculate the adjustment from the virtual base that derived from BINFO to BASE. */ tree base_binfo = get_binfo (base, vod->derived, /*protect=*/0); + /* Compute the vcall offset. */ binfo_inits = tree_cons (NULL_TREE, fold (build1 (NOP_EXPR, vtable_entry_type, size_diffop (BINFO_OFFSET (base_binfo), BINFO_OFFSET (vod->vbase)))), binfo_inits); + + /* Keep track of the vtable index where this vcall offset can be + found. */ + BV_VCALL_INDEX (derived_virtuals) = vod->index; + /* The next vcall offset will be found at a more negative + offset. */ vod->index = fold (build (MINUS_EXPR, integer_type_node, vod->index, integer_one_node)); - virtuals = TREE_CHAIN (virtuals); + + /* Go to the next entries in the list. */ + derived_virtuals = TREE_CHAIN (derived_virtuals); + base_virtuals = TREE_CHAIN (base_virtuals); } /* The offests are built up in reverse order, so we straighten them @@ -6772,7 +6820,7 @@ build_vcall_offset_vtbl_entries (binfo, vod) dfs_walk_real (binfo, dfs_build_vcall_offset_vtbl_entries, NULL, - dfs_vcall_offset_queue_p, + dfs_skip_vbases, vod); vod->inits = chainon (vod->inits, inits); } @@ -6880,7 +6928,7 @@ build_vtable_entry (delta, vcall_index, entry) idelta = tree_low_cst (delta, 0); ivindex = tree_low_cst (vcall_index, 0); if ((idelta || ivindex) - && ! DECL_PURE_VIRTUAL_P (TREE_OPERAND (entry, 0))) + && TREE_OPERAND (entry, 0) != abort_fndecl) { entry = make_thunk (entry, idelta, ivindex); entry = build1 (ADDR_EXPR, vtable_entry_type, entry); @@ -6894,7 +6942,6 @@ build_vtable_entry (delta, vcall_index, entry) } else { - extern int flag_huge_objects; tree elems = tree_cons (NULL_TREE, delta, tree_cons (NULL_TREE, integer_zero_node, build_tree_list (NULL_TREE, entry))); diff --git a/gcc/cp/cp-tree.def b/gcc/cp/cp-tree.def index 4f826ab053c19dac2def8ce156575e4ec41f17c3..30ebe45b4508ae19c0e6cfa979a4778001ff5ed4 100644 --- a/gcc/cp/cp-tree.def +++ b/gcc/cp/cp-tree.def @@ -161,8 +161,10 @@ DEFTREECODE (TYPEOF_TYPE, "typeof_type", 't', 0) /* A thunk is a stub function. A THUNK_DECL is an alternate entry point for an ordinary - FUNCTION_DECL. It's job is to adjust the `this' poitner before - transferring control to the FUNCTION_DECL. + FUNCTION_DECL. The address of the ordinary FUNCTION_DECL is given + by the DECL_INITIAL, which is always an ADDR_EXPR whose operand is + a FUNCTION_DECL. The job of the thunk is to adjust the `this' + pointer before transferring control to the FUNCTION_DECL. A thunk may perform either, or both, of the following operations: diff --git a/gcc/cp/cp-tree.h b/gcc/cp/cp-tree.h index a0e6d8a49bc65f22062e980ad1f202093818ad50..f63cb6b5da1e5098b4d2972ce59bce6fbae3e639 100644 --- a/gcc/cp/cp-tree.h +++ b/gcc/cp/cp-tree.h @@ -219,6 +219,11 @@ extern int flag_honor_std; extern int flag_rtti; +/* Nonzero if we want to support huge (> 2^(sizeof(short)*8-1) bytes) + objects. */ + +extern int flag_huge_objects; + /* Nonzero if virtual base class offsets are stored in the virtual function table. Zero if, instead, a pointer to the virtual base is stored in the object itself. */ @@ -1767,7 +1772,7 @@ struct lang_type struct A {}; struct B : public A { }; - struct C : virtual public B { void f(); }; + struct C : virtual public B { void f(); int i; }; `A' is the primary base class for `B'. But, `B' is not a primary base class for `C'. So, in the copy of `A' that appears in the diff --git a/gcc/cp/decl.c b/gcc/cp/decl.c index cfb4618dc6e930335e7ea011da3f93d627b2f3de..69a868f4021dab9317c20f71a5e59483d4fd245c 100644 --- a/gcc/cp/decl.c +++ b/gcc/cp/decl.c @@ -336,10 +336,6 @@ extern int flag_no_builtin; extern int flag_no_nonansi_builtin; -/* Nonzero if we want to support huge (> 2^(sizeof(short)*8-1) bytes) - objects. */ -extern int flag_huge_objects; - /* Nonzero if we want to conserve space in the .o files. We do this by putting uninitialized data and runtime initialized data into .common instead of .data at the expense of not flagging multiple diff --git a/gcc/cp/method.c b/gcc/cp/method.c index ecc7dc03fc574872d7548107c9dc95bc1a9f1865..206c88598503cc17f2e27e11c5d31ec14555c6bf 100644 --- a/gcc/cp/method.c +++ b/gcc/cp/method.c @@ -2036,12 +2036,12 @@ make_thunk (function, delta, vcall_index) else icat (-delta); OB_PUTC ('_'); - OB_PUTID (DECL_ASSEMBLER_NAME (func_decl)); if (vcall_index) { - OB_PUTC ('_'); icat (vcall_index); + OB_PUTC ('_'); } + OB_PUTID (DECL_ASSEMBLER_NAME (func_decl)); OB_FINISH (); thunk_id = get_identifier (obstack_base (&scratch_obstack)); @@ -2062,7 +2062,7 @@ make_thunk (function, delta, vcall_index) DECL_INITIAL (thunk) = function; THUNK_DELTA (thunk) = delta; THUNK_VCALL_OFFSET (thunk) - = vcall_index * TREE_INT_CST_LOW (TYPE_SIZE (vtable_entry_type)); + = vcall_index * int_size_in_bytes (vtable_entry_type); DECL_EXTERNAL (thunk) = 1; DECL_ARTIFICIAL (thunk) = 1; /* So that finish_file can write out any thunks that need to be: */ @@ -2077,8 +2077,10 @@ void emit_thunk (thunk_fndecl) tree thunk_fndecl; { - tree function = TREE_OPERAND (DECL_INITIAL (thunk_fndecl), 0); + tree fnaddr = DECL_INITIAL (thunk_fndecl); + tree function = TREE_OPERAND (fnaddr, 0); int delta = THUNK_DELTA (thunk_fndecl); + int vcall_offset = THUNK_VCALL_OFFSET (thunk_fndecl); if (TREE_ASM_WRITTEN (thunk_fndecl)) return; @@ -2094,7 +2096,7 @@ emit_thunk (thunk_fndecl) TREE_SET_CODE (thunk_fndecl, FUNCTION_DECL); #ifdef ASM_OUTPUT_MI_THUNK - if (!flag_syntax_only) + if (!flag_syntax_only && vcall_offset == 0) { const char *fnname; current_function_decl = thunk_fndecl; @@ -2112,7 +2114,8 @@ emit_thunk (thunk_fndecl) current_function_decl = 0; cfun = 0; } -#else /* ASM_OUTPUT_MI_THUNK */ +#endif /* ASM_OUTPUT_MI_THUNK */ + else { /* If we don't have the necessary macro for efficient thunks, generate a thunk function that just makes a call to the real function. @@ -2140,16 +2143,44 @@ emit_thunk (thunk_fndecl) copy_lang_decl (thunk_fndecl); DECL_INTERFACE_KNOWN (thunk_fndecl) = 1; DECL_NOT_REALLY_EXTERN (thunk_fndecl) = 1; + DECL_SAVED_FUNCTION_DATA (thunk_fndecl) = NULL; - start_function (NULL_TREE, thunk_fndecl, NULL_TREE, - SF_DEFAULT | SF_PRE_PARSED); + push_to_top_level (); + start_function (NULL_TREE, thunk_fndecl, NULL_TREE, SF_PRE_PARSED); store_parm_decls (); current_function_is_thunk = 1; - /* Build up the call to the real function. */ - t = build_int_2 (delta, -1 * (delta < 0)); + /* Adjust the this pointer by the constant. */ + t = ssize_int (delta); TREE_TYPE (t) = signed_type (sizetype); t = fold (build (PLUS_EXPR, TREE_TYPE (a), a, t)); + /* If there's a vcall offset, look up that value in the vtable and + adjust the `this' pointer again. */ + if (vcall_offset != 0) + { + tree orig_this; + + t = save_expr (t); + orig_this = t; + /* The vptr is always at offset zero in the object. */ + t = build1 (NOP_EXPR, + build_pointer_type (build_pointer_type + (vtable_entry_type)), + t); + /* Form the vtable address. */ + t = build1 (INDIRECT_REF, TREE_TYPE (TREE_TYPE (t)), t); + /* Find the entry with the vcall offset. */ + t = build (PLUS_EXPR, TREE_TYPE (t), t, ssize_int (vcall_offset)); + /* Calculate the offset itself. */ + t = build1 (INDIRECT_REF, TREE_TYPE (TREE_TYPE (t)), t); + /* Adjust the `this' pointer. */ + t = fold (build (PLUS_EXPR, + TREE_TYPE (orig_this), + orig_this, + t)); + } + + /* Build up the call to the real function. */ t = tree_cons (NULL_TREE, t, NULL_TREE); for (a = TREE_CHAIN (a); a; a = TREE_CHAIN (a)) t = tree_cons (NULL_TREE, a, t); @@ -2157,13 +2188,21 @@ emit_thunk (thunk_fndecl) t = build_call (function, t); finish_return_stmt (t); + /* The back-end expects DECL_INITIAL to contain a BLOCK, so we + clear this here. */ + DECL_INITIAL (thunk_fndecl) = NULL_TREE; + DECL_INITIAL (thunk_fndecl) = make_node (BLOCK); + BLOCK_VARS (DECL_INITIAL (thunk_fndecl)) + = DECL_ARGUMENTS (thunk_fndecl); expand_body (finish_function (0)); + /* Restore the DECL_INITIAL for the THUNK_DECL. */ + DECL_INITIAL (thunk_fndecl) = fnaddr; + pop_from_top_level (); /* Don't let the backend defer this function. */ if (DECL_DEFER_OUTPUT (thunk_fndecl)) output_inline_function (thunk_fndecl); } -#endif /* ASM_OUTPUT_MI_THUNK */ TREE_SET_CODE (thunk_fndecl, THUNK_DECL); } diff --git a/gcc/testsuite/g++.old-deja/g++.abi/vtable2.C b/gcc/testsuite/g++.old-deja/g++.abi/vtable2.C index 5d8cf9d019786ccc895443e8590b55f8d76e20be..8c4c93eb6670465071503a49b0cbb5c3a0759208 100644 --- a/gcc/testsuite/g++.old-deja/g++.abi/vtable2.C +++ b/gcc/testsuite/g++.old-deja/g++.abi/vtable2.C @@ -108,10 +108,10 @@ void S4::s1 () S2-in-S4 secondary vtable - S4::s1 vcall offset S1 vbase offset - S2:s0 vcall offset + S4::s1 vcall offset S0 vbase offset + S2:s0 vcall offset S2 offset to top S4 RTTI S2::s0 @@ -151,10 +151,12 @@ int main () return 5; if (*vtbl++ != (ptrdiff_t) &s1__2S4) return 6; - // All the vcall and vbase offsets should be zero. + // The S1 vbase offset. if (*vtbl++ != 0) return 7; - if (*vtbl++ != 0) + // The S4::s1 vcall offset is negative; once you convert to S2, you + // have to convert to S4 to find the final overrider. + if (*vtbl++ != ((char*) &s4 - (char*) (S2*) &s4)) return 8; if (*vtbl++ != 0) return 9;