词条 | Circle-ellipse problem |
释义 |
The circle-ellipse problem in software development (sometimes termed the square-rectangle problem) illustrates several pitfalls which can arise when using subtype polymorphism in object modelling. The issues are most commonly encountered when using object-oriented programming (OOP). By definition, this problem is a violation of the Liskov substitution principle, one of the SOLID principles. The problem concerns which subtyping or inheritance relationship should exist between classes which represent circles and ellipses (or, similarly, squares and rectangles). More generally, the problem illustrates the difficulties which can occur when a base class contains methods which mutate an object in a manner which may invalidate a (stronger) invariant found in a derived class, causing the Liskov substitution principle to be violated. The existence of the circle-ellipse problem is sometimes used to criticize object-oriented programming. It may also imply that hierarchical taxonomies are difficult to make universal, implying that situational classification systems may be more practical. DescriptionIt is a central tenet of object-oriented analysis and design that subtype polymorphism, which is implemented in most object oriented languages via inheritance, should be used to model object types that are subsets of each other; this is commonly referred to as the is-a relationship. In the present example, the set of circles is a subset of the set of ellipses; circles can be defined as ellipses whose major and minor axes are the same length. Thus, code written in an object oriented language that models shapes will frequently choose to make {{mono|class Circle}} a subclass of {{mono|class Ellipse}}, i.e. inheriting from it. A subclass must provide support for all behaviour supported by the super-class; subclasses must implement any mutator methods defined in a base class. In the present case, the method {{mono|Ellipse.stretchX}} alters the length of one of its axes in place. If {{mono|Circle}} inherits from {{mono|Ellipse}}, it must also have a method {{mono|stretchX}}, but the result of this method would be to change a circle into something that is no longer a circle. The Circle class cannot simultaneously satisfy its own invariant and the behavioural requirements of the {{mono|Ellipse.stretchX}} method. A related problem with this inheritance arises when considering the implementation. An ellipse requires more states to be described than a circle, because the former needs attributes to specify the length and rotation of the major and minor axes whereas a circle needs only a radius. It may be possible to avoid this if the language (such as Eiffel) makes constant values of a class, functions without arguments, and data members interchangeable. Some authors have suggested reversing the relationship between circle and ellipse, on the grounds that an ellipse is a circle with more abilities. Unfortunately, ellipses fail to satisfy many of the invariants of circles; if {{mono|Circle}} has a method {{mono|radius}}, {{mono|Ellipse}} must now provide it, too. Possible solutionsOne may solve the problem by:
Exactly which option is appropriate will depend on who wrote {{mono|Circle}} and who wrote {{mono|Ellipse}}. If the same author is designing them both from scratch, then the author will be able to define the interface to handle this situation. If the {{mono|Ellipse}} object was already written, and cannot be changed, then the options are more limited. Change the modelReturn success or failure valueAllow the objects to return a "success" or "failure" value for each modifier or raise an exception on failure. This is usually done in the case of file I/O, but can also be helpful here. Now, {{mono|Ellipse.stretchX}} works, and returns "true", while {{mono|Circle.stretchX}} simply returns "false". This is in general good practice, but may require that the original author of {{mono|Ellipse}} anticipated such a problem, and defined the mutators as returning a value. Also, it requires the client code to test the return value for support of the stretch function, which in effect is like testing if the referenced object is either a circle or an ellipse. Another way to look at this is that it is like putting in the contract that the contract may or may not be fulfilled depending on the object implementing the interface. Eventually, it is only a clever way to bypass the Liskov constraint by stating up-front that the post condition may or may not be valid. Alternately, {{mono|Circle.stretchX}} could throw an exception (but depending on the language, this may also require that the original author of {{mono|Ellipse}} declare that it may throw an exception). Return the new value of XThis is a similar solution to the above, but is slightly more powerful. {{mono|Ellipse.stretchX}} now returns the new value of its X dimension. Now, {{mono|Circle.stretchX}} can simply return its current radius. All modifications must be done through {{mono|Circle.stretch}}, which preserves the circle invariant. Allow for a weaker contract on EllipseIf the interface contract for {{mono|Ellipse}} states only that "stretchX modifies the X axis", and does not state "and nothing else will change", then {{mono|Circle}} could simply force the X and Y dimensions to be the same. {{mono|Circle.stretchX}} and {{mono|Circle.stretchY}} both modify both the X and Y size. {{mono|Circle::stretchX(x) {xSize = ySize = x;}Circle::stretchY(y) {xSize = ySize = y;}}} Convert the Circle into an EllipseIf {{mono|Circle.stretchX}} is called, then {{mono|Circle}} changes itself into an {{mono|Ellipse}}. For example, in Common Lisp, this can be done via the {{mono|CHANGE-CLASS}} method. This may be dangerous, however, if some other function is expecting it to be a {{mono|Circle}}. Some languages preclude this type of change, and others impose restrictions on the {{mono|Ellipse}} class to be an acceptable replacement for {{mono|Circle}}. For languages that allow implicit conversion like C++, this may only be a partial solution solving the problem on call-by-copy, but not on call-by-reference. Make all instances constantOne can change the model so that instances of the classes represent constant values (i.e., they are immutable). This is the implementation that is used in purely functional programming. In this case, methods such as {{mono|stretchX}} must be changed to yield a new instance, rather than modifying the instance they act on. This means that it is no longer a problem to define {{mono|Circle.stretchX}}, and the inheritance reflects the mathematical relationship between circles and ellipses. A disadvantage is that changing the value of an instance then requires an assignment, which is inconvenient and prone to programming errors, e.g., {{mono|Orbit(planet[i]) :{{=}} Orbit(planet[i]).stretchX}}A second disadvantage is that such an assignment conceptually involves a temporary value, which could reduce performance and be difficult to optimise. Factor out modifiersOne can define a new class {{mono|MutableEllipse}}, and put the modifiers from {{mono|Ellipse}} in it. The {{mono|Circle}} only inherits queries from {{mono|Ellipse}}. This has a disadvantage of introducing an extra class where all that is desired is specify that {{mono|Circle}} does not inherit modifiers from {{mono|Ellipse}}. Impose preconditions on modifiersOne can specify that {{mono|Ellipse.stretchX}} is only allowed on instances satisfying {{mono|Ellipse.stretchable}}, and will otherwise throw an exception. This requires anticipation of the problem when Ellipse is defined. Factor out common functionality into an abstract base classCreate an abstract base class called {{mono|EllipseOrCircle}} and put methods that work with both {{mono|Circle}}s and {{mono|Ellipse}}s in this class. Functions that can deal with either type of object will expect an {{mono|EllipseOrCircle}}, and functions that use {{mono|Ellipse}}- or {{mono|Circle}}-specific requirements will use the descendant classes. However, {{mono|Circle}} is then no longer an {{mono|Ellipse}} subclass, leading to the "a {{mono|Circle}} is not a sort of {{mono|Ellipse}}" situation described above. Drop all inheritance relationshipsThis solves the problem at a stroke. Any common operations desired for both a Circle and Ellipse can be abstracted out to a common interface that each class implements, or into mixins. Also, one may provide conversion methods like {{mono|Circle.asEllipse}}, which returns a mutable Ellipse object initialized using the circle's radius. From that point on, it is a separate object and can be mutated separately from the original circle without issue. Methods converting the other way need not commit to one strategy. For instance, there can be both {{mono|Ellipse.minimalEnclosingCircle}} and {{mono|Ellipse.maximalEnclosedCircle}}, and any other strategy desired. Combine class Circle into class EllipseThen, wherever a circle was used before, use an ellipse. A circle can already be represented by an ellipse. There is no reason to have class Circle unless it needs some circle-specific methods that can't be applied to an ellipse, or unless the programmer wishes to benefit from conceptual and/or performance advantages of the circle's simpler model. Inverse inheritanceMajorinc proposed a model that divides methods on modifiers, selectors and general methods. Only selectors can be automatically inherited from superclass, while modifiers should be inherited from subclass to superclass. In general case, the methods must be explicitly inherited. The model can be emulated in languages with multiple inheritance, using abstract classes.[1] Change the programming languageThis problem has straightforward solutions in a sufficiently powerful OO programming system. Essentially, the Circle-Ellipse problem is one of synchronizing two representations of type: the de facto type based on the properties of the object, and the formal type associated with the object by the object system. If these two pieces of information, which are ultimately only bits in the machine, are kept synchronized so that they say the same thing, everything is fine. It is clear that a circle cannot satisfy the invariants required of it while its base ellipse methods allow mutation of parameters. However, the possibility exists that when a circle cannot meet the circle invariants, its type can be updated so that it becomes an ellipse. If a circle which has become a de facto ellipse doesn't change type, then its type is a piece of information which is now out of date, reflecting the history of the object (how it was once constructed) and not its present reality (what it has since mutated into). Many object systems in popular use are based on a design which takes it for granted that an object carries the same type over its entire lifetime, from construction to finalization. This is not a limitation of OOP, but rather of particular implementations only. The following example uses the Common Lisp Object System (CLOS) in which objects can change class without losing their identity. All variables or other storage locations which hold a reference to an object continue to hold a reference to that same object after it changes class. The circle and ellipse models are deliberately simplified to avoid distracting details which are not relevant to the Circle-Ellipse Problem. An ellipse has two semi-axes called {{mono|h-axis}} and {{mono|v-axis}} in the code. Being an ellipse, a circle inherits these, and also has a {{mono|radius}} property, which value is equal to that of the axes (which must, of course, be equal). ((h-axis :type real :accessor h-axis :initarg :h-axis) (v-axis :type real :accessor v-axis :initarg :v-axis))) (defclass circle (ellipse)
(defmethod initialize-instance ((c circle) &key radius) (defmethod (setf radius) :after ((new-value real) (c circle)) (setf (slot-value c 'h-axis) new-value (slot-value c 'v-axis) new-value))
(defmethod (setf h-axis) :after ((new-value real) (c circle)) (unless (eql (radius c) new-value) (change-class c 'ellipse))) (defmethod (setf v-axis) :after ((new-value real) (c circle)) (unless (eql (radius c) new-value) (change-class c 'ellipse)))
(defmethod initialize-instance :after ((e ellipse) &key h-axis v-axis) (if (eql h-axis v-axis) (change-class e 'circle))) (defmethod (setf h-axis) :after ((new-value real) (e ellipse)) (unless (subtypep (class-of e) 'circle) (if (eql (h-axis e) (v-axis e)) (change-class e 'circle)))) (defmethod (setf v-axis) :after ((new-value real) (e ellipse)) (unless (subtypep (class-of e) 'circle) (if (eql (h-axis e) (v-axis e)) (change-class e 'circle))))
(defmethod update-instance-for-different-class :after ((old-e ellipse) (new-c circle) &key) (setf (radius new-c) (h-axis old-e)) (unless (eql (h-axis old-e) (v-axis old-e)) (error "ellipse ~s can't change into a circle because it's not one!" old-e))) This code can be demonstrated with an interactive session, using the CLISP implementation of Common Lisp. [1]> (make-instance 'ellipse :v-axis 3 :h-axis 3) [2]> (make-instance 'ellipse :v-axis 3 :h-axis 4) [3]> (defvar obj (make-instance 'ellipse :v-axis 3 :h-axis 4)) OBJ [4]> (class-of obj) [5]> (radius obj)
The following restarts are available: RETRY :R1 try calling RADIUS again RETURN :R2 specify return values ABORT :R3 Abort main loop Break 1 [6]> :a [7]> (setf (v-axis obj) 4) 4 [8]> (radius obj) 4 [9]> (class-of obj) [10]> (setf (radius obj) 9) 9 [11]> (v-axis obj) 9 [12]> (h-axis obj) 9 [13]> (setf (h-axis obj) 8) 8 [14]> (class-of obj) [15]> (radius obj)
The following restarts are available: RETRY :R1 try calling RADIUS again RETURN :R2 specify return values ABORT :R3 Abort main loop Break 1 [16]> :a [17]> Challenge the premise of the problemWhile at first glance it may seem obvious that a Circle is-an Ellipse, consider the following analogous code. Now, a prisoner is obviously a person. So logically, a sub-class can be created: Also obviously, this leads to trouble, since a prisoner is not free to move an arbitrary distance in any direction, yet the contract of the {{mono|Person}} class states that a Person can. Thus, the class {{mono|Person}} could better be named {{mono|FreePerson}}. If that were the case, then the idea that {{mono|class Prisoner extends FreePerson}} is clearly wrong. By analogy, then, a Circle is not an Ellipse, because it lacks the same degrees of freedom as an Ellipse. Applying better naming, then, a Circle could instead be named {{mono|OneDiameterFigure}} and an ellipse could be named {{mono|TwoDiameterFigure}}. With such names it is now more obvious that {{mono|TwoDiameterFigure}} should extend {{mono|OneDiameterFigure}}, since it adds another property to it; whereas {{mono|OneDiameterFigure}} has a single diameter property, {{mono|TwoDiameterFigure}} has two such properties (i.e., a major and a minor axis length). This strongly suggests that inheritance should never be used when the sub-class restricts the freedom implicit in the base class, but should only be used when the sub-class adds extra detail to the concept represented by the base class as in 'Monkey' is-an 'Animal'. References
1. ^Kazimir Majorinc, Ellipse-Circle Dilemma and Inverse Inheritance, ITI 98, Proceedings of the 20th International Conference of Information Technology Interfaces, Pula, 1998 External links
2 : Object-oriented programming|Anti-patterns |
随便看 |
|
开放百科全书收录14589846条英语、德语、日语等多语种百科知识,基本涵盖了大多数领域的百科知识,是一部内容自由、开放的电子版国际百科全书。