7.6.1 Completion and Finalization
This subclause defines 
completion and 
leaving 
of the execution of constructs and entities. A 
master is the execution 
of a construct that includes finalization of local objects after it is 
complete (and after waiting for any local tasks — see 
9.3), 
but before leaving. Other constructs and entities are left immediately 
upon completion. 
 
Dynamic Semantics
The execution 
of a construct or entity is 
complete when the end of that execution 
has been reached, or when a transfer of control (see 
5.1) 
causes it to be abandoned. 
Completion 
due to reaching the end of execution, or due to the transfer of control 
of an 
exit_statement, 
return statement, 
goto_statement, 
or 
requeue_statement 
or of the selection of a 
terminate_alternative 
is 
normal completion. Completion is 
abnormal otherwise 
— when control is transferred out of a construct due to abort or 
the raising of an exception. 
 
After execution 
of a construct or entity is complete, it is 
left, meaning that 
execution continues with the next action, as defined for the execution 
that is taking place. 
Leaving an execution happens 
immediately after its completion, except in the case of a 
master: 
the execution of a body other than a 
package_body; 
the execution of a 
statement; 
or the evaluation of an 
expression, 
function_call, 
or 
range that 
is not part of an enclosing 
expression, 
function_call, 
range, or 
simple_statement 
other than a 
simple_return_statement. 
A master is finalized after it is complete, and before it is left.
 
For the 
finalization of 
a master, dependent tasks are first awaited, as explained in 
9.3. 
Then each object whose accessibility level is the same as that of the 
master is finalized if the object was successfully initialized and still 
exists. These actions are performed whether the master is left by reaching 
the last statement or via a transfer of control. When a transfer of control 
causes completion of an execution, each included master is finalized 
in order, from innermost outward. 
 
For 
the 
finalization of an object: 
 
If the full type of the object is an elementary 
type, finalization has no effect; 
If the full type of the object is a tagged type, 
and the tag of the object identifies a controlled type, the Finalize 
procedure of that controlled type is called;
If the full type of the object is a protected type, 
or if the full type of the object is a tagged type and the tag of the 
object identifies a protected type, the actions defined in 
9.4 
are performed;
 
If the full type of the object is a composite type, 
then after performing the above actions, if any, every component of the 
object is finalized in an arbitrary order, except as follows:
 
if the object has a component with an access discriminant constrained 
by a per-object expression, this component is finalized before any components 
that do not have such discriminants; for an object with several components 
with such a discriminant, they are finalized in the reverse of the order 
of their 
component_declarations; 
 
If the object has coextensions (see 
3.10.2), 
each coextension is finalized after the object whose access discriminant 
designates it.
 
Immediately before an instance 
of Unchecked_Deallocation reclaims the storage of an object, the object 
is finalized. If an instance of Unchecked_Deallocation is never applied 
to an object created by an 
allocator, 
the object will still exist when the corresponding master completes, 
and it will be finalized then.
 
 The finalization of a master performs finalization 
of objects created by declarations in the master in the reverse order 
of their creation. After the finalization of a master is complete, the 
objects finalized as part of its finalization cease to 
exist, 
as do any types and subtypes defined and created within the master.
 
 
   Each nonderived 
access type 
T has an associated 
collection,
 
which is the set of objects created by 
allocators 
of 
T, or of types derived from 
T. Unchecked_Deallocation 
removes an object from its collection. Finalization of a collection consists 
of finalization of each object in the collection, in an arbitrary order. 
The collection of an access type is an object implicitly declared at 
the following place:
 
For a named access type, the first freezing point 
(see 
13.14) of the type.
 
For the type of an access parameter, the call that 
contains the 
allocator.
 
For the type of an access result, within the master 
of the call (see 
3.10.2). 
 
For any other anonymous access type, the first 
freezing point of the innermost enclosing declaration. 
 The master of an object is the master enclosing 
its creation whose accessibility level (see 
3.10.2) 
is equal to that of the object, except in the case of an anonymous object 
representing the result of an 
aggregate 
or function call. If such an anonymous object is part of the result of 
evaluating the actual parameter expression for an explicitly aliased 
parameter of a function call, the master of the object is the innermost 
master enclosing the evaluation of the 
aggregate 
or function call, excluding the 
aggregate 
or function call itself. Otherwise, the master of such an anonymous object 
is the innermost master enclosing the evaluation of the 
aggregate 
or function call, which may be the 
aggregate 
or function call itself. 
 
   In the case of an 
expression 
that is a master, finalization of any (anonymous) objects occurs after 
completing evaluation of the 
expression 
and all use of the objects, prior to starting the execution of any subsequent 
construct.
 
Bounded (Run-Time) Errors
 It 
is a bounded error for a call on Finalize or Adjust that occurs as part 
of object finalization or assignment to propagate an exception. The possible 
consequences depend on what action invoked the Finalize or Adjust operation: 
 
For an Adjust invoked as part of assignment operations 
other than those invoked as part of an 
assignment_statement, 
other adjustments due to be performed might or might not be performed, 
and then Program_Error is raised. During its propagation, finalization 
might or might not be applied to objects whose Adjust failed. 
For 
an Adjust invoked as part of an 
assignment_statement, 
any other adjustments due to be performed are performed, and then Program_Error 
is raised. 
 
For a Finalize invoked as part 
of a call on an instance of Unchecked_Deallocation, any other finalizations 
due to be performed are performed, and then Program_Error is raised. 
 
This paragraph 
was deleted.
For a Finalize invoked due 
to reaching the end of the execution of a master, any other finalizations 
associated with the master are performed, and Program_Error is raised 
immediately after leaving the master.
 
For a Finalize invoked by the 
transfer of control of an 
exit_statement, 
return statement, 
goto_statement, 
or 
requeue_statement, 
Program_Error is raised no earlier than after the finalization of the 
master being finalized when the exception occurred, and no later than 
the point where normal execution would have continued. Any other finalizations 
due to be performed up to that point are performed before raising Program_Error. 
 
For a Finalize invoked by a transfer of control 
that is due to raising an exception, any other finalizations due to be 
performed for the same master are performed; Program_Error is raised 
immediately after leaving the master. 
For a Finalize invoked by a transfer of control 
due to an abort or selection of a terminate alternative, the exception 
is ignored; any other finalizations due to be performed are performed. 
Implementation Permissions
   If the execution of an 
allocator 
propagates an exception, any parts of the allocated object that were 
successfully initialized may be finalized as part of the finalization 
of the innermost master enclosing the 
allocator.
 
   The implementation may finalize objects created 
by 
allocators 
for an access type whose storage pool supports subpools (see 
13.11.4) 
as if the objects were created (in an arbitrary order) at the point where 
the storage pool was elaborated instead of at the first freezing point 
of the access type.
 
18  The rules of Clause 10 imply that immediately 
prior to partition termination, Finalize operations are applied to library-level 
controlled objects (including those created by 
allocators 
of library-level access types, except those already finalized). This 
occurs after waiting for library-level tasks to terminate. 
 
19  A constant is only constant between 
its initialization and finalization. Both initialization and finalization 
are allowed to change the value of a constant.
20  Abort is deferred during certain operations 
related to controlled types, as explained in 
9.8. 
Those rules prevent an abort from causing a controlled object to be left 
in an ill-defined state.
 
21  The Finalize procedure is called upon 
finalization of a controlled object, even if Finalize was called earlier, 
either explicitly or as part of an assignment; hence, if a controlled 
type is visibly controlled (implying that its Finalize primitive is directly 
callable), or is nonlimited (implying that assignment is allowed), its 
Finalize procedure should be designed to have no ill effect if it is 
applied a second time to the same object. 
Ada 2005 and 2012 Editions sponsored in part by Ada-Europe