9. What is design by contract? Explain the assertion construct?

Design by contract specifies the obligations of a calling-method and called-method to each other. Design by contract is a valuable technique, which should be used to build well-defined interfaces. The strength of this programming methodology is that it gets the programmer to think clearly about what a function does, what pre and post conditions it must adhere to and also it provides documentation for the caller. Java uses the assert statement to implement pre- and post-conditions. Java’s exceptions handling also support design by contract especially checked exceptions. In design by contract in addition to specifying programming code to carrying out intended operations of a method the programmer also specifies:

Preconditions – This is the part of the contract the calling-method must agree to. Preconditions specify the conditions that must be true before a called method can execute. Preconditions involve the system state and the arguments passed into the method at the time of its invocation. If a precondition fails then there is a bug in the calling-method or calling software component.

On public methods

On non-public methods

Preconditions on public methods are enforced by explicit checks that throw particular, specified exceptions. You should not use assertion to check the parameters of the public methods but can use for the non-public methods. Assert is inappropriate because the method guarantees that it will always enforce the argument checks. It must check its arguments whether or not assertions are enabled. Further, assert construct does not throw an exception of a specified type. It can throw only an AssertionError. public void setRate(int rate) { if(rate <= 0 || rate > MAX_RATE){ throw new IllegalArgumentException(“Invalid rate : ” + rate); } setCalculatedRate(rate); }

You can use assertion to check the parameters of the non-public methods. private void setCalculatedRate(int rate) { assert (rate > 0 && rate <> //calculate the rate and set it. } Assertions can be disabled, so programs must not assume that assert construct will be always executed: //Wrong: if assertion is disabled, CarpenterJob never //Get removed assert jobsAd.remove(PilotJob); //Correct: boolean pilotJobRemoved = jobsAd.remove(PilotJob); assert pilotJobRemoved;

• Postconditions – This is the part of the contract the called-method agrees to. What must be true after a method completes successfully. Postconditions can be used with assertions in both public and non-public methods. The postconditions involve the old system state, the new system state, the method arguments and the method’s return value. If a postcondition fails then there is a bug in the called-method or called software component.public double calcRate(int rate) {

if(rate <= 0 || rate > MAX_RATE){
throw new IllegalArgumentException(“Invalid rate !!! ”);
}

//logic to calculate the rate and set it goes here
assert this.evaluate(result) < 0 : this; //this �� message sent to AssertionError on failure
return result;
}

• Class invariants - what must be true about each instance of a class? A class invariant as an internal invariant that can specify the relationships among multiple attributes, and should be true before and after any method completes. If an invariant fails then there could be a bug in either calling-method or called-method. There is no particular mechanism for checking invariants but it is convenient to combine all the expressions required for checking invariants into a single internal method that can be called by assertions. For example if you have a class which deals with negative integers then you define the isNegative() convenient internal method:

class NegativeInteger {
Integer value = new Integer (-1); //invariant

//constructor
public NegativeInteger(Integer int) {
//constructor logic goes here
assert isNegative();
}

//rest of the public and non-public methods goes here. public methods should call assert isNegative(); prior to its return

//convenient internal method for checking invariants. Returns true if the integer value is negative
private boolean isNegative(){
return value.intValue() < 0 ;
}
}

The isNegative() method should be true before and after any method completes, each public method and constructor should contain the following assert statement immediately prior to its return.

assert isNegative();

Explain the assertion construct? The assertion statements have two forms as shown below:

assert Expression1;

assert Expression1 : Expression2;
Where:

• Expression1 - is a boolean expression. If the Expression1 evaluates to false, it throws an AssertionError without any detailed message.
  

• Expression2 - if the Expression1 evaluates to false throws an AssertionError with using the value of the Expression2 as the errors’ detailed message.

Note: If you are using assertions (available from JDK1.4 onwards), you should supply the JVM argument to enable it by package name or class name.

Java -ea[:packagename...|:classname] or Java -enableassertions[:packagename...|:classname]
Java –ea:Account