1、new
int* p = new int;
汇编码如下:
int* p = new int;
00E54C44 push 4
00E54C46 call operator new (0E51384h)
00E54C4B add esp,4
分析:传入4byte的参数后调用operator new。其源码如下:
void *__CRTDECL operator new(size_t size) _THROW1(_STD bad_alloc){ // try to allocate size bytesvoid *p;while ((p = malloc(size)) == 0)if (_callnewh(size) == 0){ // report no memory_THROW_NCEE(_XSTD bad_alloc, );}return (p);}
#include <stdio.h>
#include <new.h>
int MyNewHandler(size_t size)
{printf("Allocation failed.Try again");return 1; //continue to allocate//return 0; //stop allocating,throw bad_alloc
}
void main()
{// Set the failure handler for new to be MyNewHandler._set_new_handler(MyNewHandler);while (1){int* p = new int[10000000];}
}
在new基本数据类型的时候还可以指定初始化值,比如:
int* p = new int(4);
总结:
- 简单类型直接调用operator new分配内存;
- 可以通过new_handler来处理new失败的情况;
- new分配失败的时候不像malloc那样返回NULL,它直接抛出异常。要判断是否分配成功应该用异常捕获的机制;
(2)复杂数据类型(需要由构造函数初始化对象)
代码实例:
class Object
{
public:Object(){_val = 1;}~Object(){}
private:int _val;
};void main()
{Object* p = new Object();
}
汇编码如下:
Object* p = new Object();
00AD7EDD push 4
00AD7EDF call operator new (0AD1384h)
00AD7EE4 add esp,4
00AD7EE7 mov dword ptr [ebp-0E0h],eax
00AD7EED mov dword ptr [ebp-4],0
00AD7EF4 cmp dword ptr [ebp-0E0h],0
00AD7EFB je main+70h (0AD7F10h)
00AD7EFD mov ecx,dword ptr [ebp-0E0h]
00AD7F03 call Object::Object (0AD1433h) //在new的地址上调用构造函数
00AD7F08 mov dword ptr [ebp-0F4h],eax
00AD7F0E jmp main+7Ah (0AD7F1Ah)
00AD7F10 mov dword ptr [ebp-0F4h],0
00AD7F1A mov eax,dword ptr [ebp-0F4h]
00AD7F20 mov dword ptr [ebp-0ECh],eax
00AD7F26 mov dword ptr [ebp-4],0FFFFFFFFh
00AD7F2D mov ecx,dword ptr [ebp-0ECh]
00AD7F33 mov dword ptr [p],ecx
2、delete
int *p = new int(1);
delete p;
delete的汇编码如下:
delete p;
00275314 mov eax,dword ptr [p]
00275317 mov dword ptr [ebp-0D4h],eax
0027531D mov ecx,dword ptr [ebp-0D4h]
00275323 push ecx
00275324 call operator delete (0271127h)
分析:传入参数p之后调用operator delete,其源码如下:
void operator delete( void * p )
{RTCCALLBACK(_RTC_Free_hook, (p, 0));free( p );
}
class Object
{
public:Object(){_val = 1;}~Object(){cout << "destroy object" << endl;}
private:int _val;
};void main()
{Object* p = new Object;delete p;
}
部分汇编码如下:
012241F0 mov dword ptr [this],ecx
012241F3 mov ecx,dword ptr [this]
012241F6 call Object::~Object (0122111Dh) //先调用析构函数
012241FB mov eax,dword ptr [ebp+8]
012241FE and eax,1
01224201 je Object::`scalar deleting destructor'+3Fh (0122420Fh)
01224203 mov eax,dword ptr [this]
01224206 push eax
01224207 call operator delete (01221145h)
0122420C add esp,4
总结:
char* p = new char[32]();
等同于:
char *p = new char[32];
memset(p, 32, 0);
class Object
{
public:Object(){_val = 1;}~Object(){cout << "destroy object" << endl;}
private:int _val;
};void main()
{Object* p = new Object[3];
}
class Object
{
public:Object(){_val = 1;}virtual ~Object(){cout << "destroy Object" << endl;}
private:int _val;
};class MyObject : public Object
{
public:~MyObject(){cout << "destroy MyObject" << endl;}
private:int _foo;
};void main()
{Object* p = new MyObject[3];delete[] p;
}
int* pint = new int[32];
delete pint;char* pch = new char[32];
delete pch;
- 简单类型直接调用operator new分配内存;
- 可以通过new_handler来处理new失败的情况;
- new分配失败的时候不像malloc那样返回NULL,它直接抛出异常。要判断是否分配成功应该用异常捕获的机制;