diff --git a/doc/dev/coding.html b/doc/dev/coding.html index c765b4c2b0..138085069b 100644 --- a/doc/dev/coding.html +++ b/doc/dev/coding.html @@ -15,7 +15,7 @@ - WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. --> - +

C Language

@@ -346,6 +346,11 @@ Bad (obviously for more than one reason ...): A function should report success or failure, and do so accurately. It should never fail silently. Use of Design by Contract can help here.

+When a function is designed to return results to the caller by +assigning to caller variables through pointer arguments, it should +perform the assignment only if it succeeds and leave the variables +unmodified if it fails.

+

Testing Bits

Bit testing should be as follows:

Good: