Awesome
<img src="/package_icon.png" height="30px"> NullGuard.Fody
See Milestones for release notes.
This is an add-in for Fody
It is expected that all developers using Fody become a Patron on OpenCollective. See Licensing/Patron FAQ for more information.
Usage
See also Fody usage.
NuGet installation
Install the NullGuard.Fody NuGet package and update the Fody NuGet package:
PM> Install-Package Fody
PM> Install-Package NullGuard.Fody
The Install-Package Fody
is required since NuGet always defaults to the oldest, and most buggy, version of any dependency.
Modes
NullGuard supports three modes of operations, implicit, explicit and nullable reference types.
- In implicit mode everything is assumed to be not-null, unless attributed with
[AllowNull]
. This is how NullGuard has been working always. - In explicit mode everything is assumed to be nullable, unless attributed with
[NotNull]
. This mode is designed to support the R# nullability analysis, using pessimistic mode. - In nullable reference types mode the C# 8 nullable reference type (NRT) annotations are used to determine if a type may be null.
If not configured explicitly, NullGuard will auto-detect the mode as follows:
- If C# 8 nullable attributes are detected then nullable reference types mode is used.
- Referencing
JetBrains.Annotations
and using[NotNull]
anywhere will switch to explicit mode. - Default to implicit mode if the above criteria is not met.
Implicit Mode
Your Code
public class Sample
{
public void SomeMethod(string arg)
{
// throws ArgumentNullException if arg is null.
}
public void AnotherMethod([AllowNull] string arg)
{
// arg may be null here
}
public void AndAnotherMethod(string? arg)
{
// arg may be null here
}
public string MethodWithReturn()
{
return SomeOtherClass.SomeMethod();
}
[return: AllowNull]
public string MethodAllowsNullReturnValue()
{
return null;
}
public string? MethodAlsoAllowsNullReturnValue()
{
return null;
}
// Null checking works for automatic properties too.
public string SomeProperty { get; set; }
// can be applied to a whole property
[AllowNull]
public string NullProperty { get; set; }
// Or just the setter.
public string NullPropertyOnSet { get; [param: AllowNull] set; }
}
What gets compiled
public class SampleOutput
{
public string NullProperty{get;set}
string nullPropertyOnSet;
public string NullPropertyOnSet
{
get
{
var returnValue = nullPropertyOnSet;
if (returnValue == null)
{
throw new InvalidOperationException("Return value of property 'NullPropertyOnSet' is null.");
}
return returnValue;
}
set
{
nullPropertyOnSet = value;
}
}
public string MethodAllowsNullReturnValue()
{
return null;
}
public string MethodAlsoAllowsNullReturnValue()
{
return null;
}
string someProperty;
public string SomeProperty
{
get
{
if (someProperty == null)
{
throw new InvalidOperationException("Return value of property 'SomeProperty' is null.");
}
return someProperty;
}
set
{
if (value == null)
{
throw new ArgumentNullException("value", "Cannot set the value of property 'SomeProperty' to null.");
}
someProperty = value;
}
}
public void AnotherMethod(string arg)
{
}
public void AndAnotherMethod(string arg)
{
}
public string MethodWithReturn()
{
var returnValue = SomeOtherClass.SomeMethod();
if (returnValue == null)
{
throw new InvalidOperationException("Return value of method 'MethodWithReturn' is null.");
}
return returnValue;
}
public void SomeMethod(string arg)
{
if (arg == null)
{
throw new ArgumentNullException("arg");
}
}
}
Explicit Mode
If you are (already) using R#'s [NotNull]
attribute in your code to explicitly annotate not null items,
null guards will be added only for items that have an explicit [NotNull]
annotation.
public class Sample
{
public void SomeMethod([NotNull] string arg)
{
// throws ArgumentNullException if arg is null.
}
public void AnotherMethod(string arg)
{
// arg may be null here
}
[NotNull]
public string MethodWithReturn()
{
return SomeOtherClass.SomeMethod();
}
public string MethodAllowsNullReturnValue()
{
return null;
}
// Null checking works for automatic properties too.
// Default in explicit mode is nullable
public string NullProperty { get; set; }
// NotNull can be applied to a whole property
[NotNull]
public string SomeProperty { get; set; }
// or just the getter by overwriting the set method,
[NotNull]
public string NullPropertyOnSet { get; [param: AllowNull] set; }
// or just the setter by overwriting the get method.
[NotNull]
public string NullPropertyOnGet { [return: AllowNull] get; set; }
}
Inheritance of nullability is supported in explicit mode, i.e. if you implement an interface or derive from a base method with [NotNull]
annotations,
null guards will be added to your implementation.
You may use the [NotNull]
attribute defined in JetBrains.Anntotations
, or simply define your own. However not referencing JetBrains.Anntotations
will not auto-detect explicit mode, so you have to set this in the configuration.
Also note that using JetBrains.Anntotations
will require to define JETBRAINS_ANNOTATIONS
to include the attributes in the assembly, so NullGuard can find them.
NullGuard will neither remove those attributes nor the reference to JetBrains.Anntotations
. To get rid of the attributes and the reference, you can use JetBrainsAnnotations.Fody.
Just make sure NullGuard will run prior to JetBrainsAnnotations.Fody.
Nullable Reference Types Mode
Standard NRT annotations and attributes are used to determine the nullability of a type. Conditional postcondition attributes (ie. [MaybeNullWhenAttribute]
) that indicate the value may sometimes be null causes the postcondition null check to be omitted.
public class Sample
{
// Allows null return values
public string? MaybeGetValue()
{
return null;
}
// Throws InvalidOperationException since return value is not nullable
public string MustReturnValue()
{
return null;
}
// Throws InvalidOperationException for task results that violate nullability as well
public async Task<string> GetValueAsync()
{
return null;
}
// Allows null task result
public async Task<string?> GetValueAsync()
{
return null;
}
public void WriteValue(string arg)
{
// throws ArgumentNullException if arg is null.
}
public void WriteValue(string? arg)
{
// arg may be null here
}
public void GenericMethod<T>(T arg) where T : notnull
{
// throws ArgumentNullException if arg is null.
}
public bool TryGetValue<T>(string key, [MaybeNullWhen(false)] out T value)
{
// throws ArgumentNullException if key is null.
// out value is not checked.
}
}
See the documentation for more information on the available nullable reference type attributes.
NullGuard adds a special annotation [MaybeNullTaskResultAttribute]
for this mode that can be used to control whether a Task result value might be null in situations where this currently isn't possible with NRTs:
// Throws InvalidOperationException for reference typed T unless the return value
// is marked with [MaybeNullTaskResult].
[return: MaybeNullTaskResult]
public async Task<T> TryGetValueAsync<T>() where T : notnull
{
return default(T);
}
Attributes
Where and how injection occurs can be controlled via attributes. The NullGuard.Fody nuget ships with an assembly containing these attributes.
/// <summary>
/// Prevents the injection of null checking (implicit mode only).
/// </summary>
[AttributeUsage(AttributeTargets.Parameter | AttributeTargets.ReturnValue | AttributeTargets.Property)]
public class AllowNullAttribute : Attribute
{
}
/// <summary>
/// Prevents injection of null checking on task result values when return value checks are enabled (NRT mode only).
/// </summary>
[AttributeUsage(AttributeTargets.ReturnValue)]
public class MaybeNullTaskResultAttribute : Attribute
{
}
/// <summary>
/// Allow specific categories of members to be targeted for injection. <seealso cref="ValidationFlags"/>
/// </summary>
[AttributeUsage(AttributeTargets.Assembly | AttributeTargets.Class)]
public class NullGuardAttribute : Attribute
{
/// <summary>
/// Initializes a new instance of the <see cref="NullGuardAttribute"/> with a <see cref="ValidationFlags"/>.
/// </summary>
/// <param name="flags">The <see cref="ValidationFlags"/> to use for the target this attribute is being applied to.</param>
public NullGuardAttribute(ValidationFlags flags)
{
}
}
/// <summary>
/// Used by <see cref="NullGuardAttribute"/> to target specific categories of members.
/// </summary>
[Flags]
public enum ValidationFlags
{
None = 0,
Properties = 1,
Arguments = 2,
OutValues = 4,
ReturnValues = 8,
NonPublic = 16,
Methods = Arguments | OutValues | ReturnValues,
AllPublicArguments = Properties | Arguments,
AllPublic = Properties | Methods,
All = AllPublic | NonPublic
}
All NullGuard attributes are removed from the assembly as part of the build.
Attributes are checked locally at the member, and if there are no attributes then the class is checked. If the class has no attributes then the assembly is checked. Finally if there are no attributes at the assembly level then the default value is used.
NullGuardAttribute
NullGuardAttribute
can be used at the class or assembly level. It takes a ValidationFlags
parameter.
[assembly: NullGuard(ValidationFlags.None)] // Sets no guards at the assembly level
[NullGuard(ValidationFlags.AllPublicArguments)] // Sets the default guard for class Foo
public class Foo { ... }
ValidationFlags
The ValidationFlags
determine how much checking NullGuard adds to your assembly.
None
Does nothing.Properties
Adds null guard checks to properties getter (cannot return null) and setter (cannot be set to null).Arguments
Method arguments are checked to make sure they are not null. This only applies to normal arguments, and the incoming value of a ref argument.OutValues
Out and ref arguments of a method are checked for null just before the method returns.ReturnValues
Checks the return value of a method for null.NonPublic
Applies the other flags to all non-public members as well.Methods
Processes all arguments (normal, out and ref) and return values of methods.AllPublicArguments
Processes all methods (arguments and return values) and properties.AllPublic
Checks everything (properties, all method args and return values).
AllowNullAttribute and CanBeNullAttribute
These attributes allow you to specify which arguments, return values and properties can be set to null. AllowNullAttribute
comes from the referenced project NullGuard adds. CanBeNullAttribute
can come from anywhere, but is commonly used by Resharper.
[AllowNull]
public string NullProperty { get; set; }
public void SomeMethod(string nonNullArg, [AllowNull] string nullArg) { ... }
[return: AllowNull]
public string MethodAllowsNullReturnValue() { ... }
public string PropertyAllowsNullGetButDoesNotAllowNullSet { [return: AllowNull] get; set; }
public string PropertyAllowsNullSetButDoesNotAllowNullGet { get; [param: AllowNull] set; }
Configuration
For Release builds NullGuard will weave code that throws ArgumentNullException
. For Debug builds NullGuard weaves Debug.Assert
.
If you want ArgumentNullException to be thrown for Debug builds then update FodyWeavers.xml to include:
<NullGuard IncludeDebugAssert="false" />
A complete example of FodyWeavers.xml
looks like this:
<Weavers>
<NullGuard IncludeDebugAssert="false" />
</Weavers>
You can also use RegEx to specify the name of a class to exclude from NullGuard.
<NullGuard ExcludeRegex="^ClassToExclude$" />
You can force the operation mode by setting it to Explicit
, Implicit
or NullableReferenceTypes
, if the default AutoDetect
does not detect the usage correctly.
<NullGuard Mode="Explicit" />
Icon
Icon courtesy of The Noun Project