C coding guideline
Update November 2017: This page was written in 2008 and starts showing its age now. I do no longer recommend all of the statements in this guide, but will keep this page online for historical reasons. I suggest to use a style guide from a successful active open source project instead.
There are plenty of Coding Guidelines out there in the Web, but many of them have one fundamental flaw: they are old. They were written many years ago when C99 was very new or did not even exist yet. C99 is reasonably seasoned now and most of the compiler vendors have adopted it, and apart from very particular cases there is no reason anymore to advocate against C99. This guide lines have been heavily influenced by the following guides: Python's Style Guide for C Code, the JSF air vehicle C++ coding standard and some styles in the POSIX API (especially the naming conventions).
The key words
optional in this document are to be interpreted as described in RFC 2119.
- The use of ISO C99 is recommended.
- The new C99 type bool shall be used on all logic operations and the fixed-size types like uint8_t should be used whenever an exact size of a variable is required. For types with a minimum size requirement use types like uint_least8_t or uint_fast8_t. The new types do increase portability and can be easily redefined for compilers that do not support them.
- Proprietary compiler extensions should not be used.
- All function declarations and definitions must use full prototypes (i.e. specify the types of all arguments).
- C++ style // one-line comments may be used.
- The code must compile without compiler warnings. The warning level should be set on a reasonably strict level (e.g. -W -Wall and possibly -Werror with GCC).
- The code must be properly indented. It is recommended to indent with 4 spaces. Tab stops must not be used.
- Lines should be kept shorter than 120 characters.
- Lines should not end in white space. Trailing white spaces may be deleted automatically by other team members, and tend to lead to unnecessary changed lines in a file.
- Automatically expanded text (such as e.g. Version Control Keywords) should be kept to a minimum. They cause differences when comparing two source trees and can to generate conflicts when merging versions of the same file.
- A function definition should be kept in one line if the the function accepts one parameter. If the function accepts more than one parameter, then the function definition should be split, with the first parameter in the same line as the function name and each one of the following parameters on a separate line.
- One space shall be placed between keywords like 'if', 'for', etc. and the following left parenthesis; no spaces inside the parenthesis, braces as shown:
if (ptr != NULL)
- The statements forming the body of an if, else, for, etc. shall always be enclosed in braces, even if the braces form an empty block.
- The return statement should not get redundant parentheses:
return NULL; // OK
return (NULL); // less readable
- Function and macro calls shall not contain space before the opening parenthesis no spaces inside the parenthesis, no spaces before commas, one space after each comma. e.g. foo(a, b, c);.
- Long lines should be split after commas in the outermost argument list. Continuation lines shall be indented appropriately.
- When breaking a long expression at a binary operator, put the operator at the end of the previous line, e.g.:
if (type->tp_dictoffset != 0 &&
base->tp_dictoffset == 0)
- Put blank lines around functions, structure definitions, and major sections inside functions.
- Comments shall go before the code they describe.
- All functions and variables should be declared static unless they are to be part of a published interface.
- External functions and variables must be declared in an appropriate header file. Use the external keyword only where necessary; it is not needed for function declarations and should be best avoided.
- Identifiers shall be written in lowercase and should contain an underscore
_ between words.
- Macros and enumeration identifiers shall be written in uppercase letters to distinguish them from normal identifiers. A notable exception to this rule are macros that behave like functions but cannot be expressed as static inline function. The assert() macro is an example.
- User defined types shall end with
_t. Structures, enumerations and unions are marked by the struct, enum and union keywords and do not need additional markings. Instances (variables) of the types defined above don't have a suffix.
typedef unsigned int counter_t;
typedef struct iq_data iq_data_t;
iq_data_t a, b;
enum error error;
- Debug versions of the code should use the assert() macro extensively. This helps to spot some programming errors when they occur. In debug releases the program execution will halt on the wrong assertion, allowing the programmer to inspect local variables.
- Assertions shall not be used as error recovery or additional run-time checks. Release code must not contain any code related to assertions.
- A header file shall use include guards.
- Header files should include only the minimum set of .h files to compile it without warnings.
- Strong typing is highly recommended. Use size_t for objects that describe a length, define your own types for particular objects. This gives the compiler the opportunity to detect programming errors at compile time and will help you refactoring the code when needed.