rust/src/libcore/cast.rs

150 lines
4.3 KiB
Rust
Raw Normal View History

// Copyright 2012-2014 The Rust Project Developers. See the COPYRIGHT
// file at the top-level directory of this distribution and at
// http://rust-lang.org/COPYRIGHT.
//
// Licensed under the Apache License, Version 2.0 <LICENSE-APACHE or
// http://www.apache.org/licenses/LICENSE-2.0> or the MIT license
// <LICENSE-MIT or http://opensource.org/licenses/MIT>, at your
// option. This file may not be copied, modified, or distributed
// except according to those terms.
//! Unsafe casting functions
use mem;
use intrinsics;
use ptr::copy_nonoverlapping_memory;
/// Casts the value at `src` to U. The two types must have the same length.
#[inline]
pub unsafe fn transmute_copy<T, U>(src: &T) -> U {
let mut dest: U = mem::uninit();
let dest_ptr: *mut u8 = transmute(&mut dest);
let src_ptr: *u8 = transmute(src);
copy_nonoverlapping_memory(dest_ptr, src_ptr, mem::size_of::<U>());
dest
}
/**
* Move a thing into the void
*
* The forget function will take ownership of the provided value but neglect
* to run any required cleanup or memory-management operations on it.
*/
#[inline]
pub unsafe fn forget<T>(thing: T) { intrinsics::forget(thing); }
2012-01-17 19:28:21 -06:00
/**
* Force-increment the reference count on a shared box. If used
* carelessly, this can leak the box.
*/
#[inline]
2013-02-15 02:51:28 -06:00
pub unsafe fn bump_box_refcount<T>(t: @T) { forget(t); }
2012-06-27 12:11:57 -05:00
/**
* Transform a value of one type into a value of another type.
* Both types must have the same size and alignment.
*
* # Example
*
* ```rust
2013-12-22 15:31:23 -06:00
* use std::cast;
*
* let v: &[u8] = unsafe { cast::transmute("L") };
2013-08-22 14:06:41 -05:00
* assert!(v == [76u8]);
* ```
*/
#[inline]
pub unsafe fn transmute<L, G>(thing: L) -> G {
intrinsics::transmute(thing)
}
/// Coerce an immutable reference to be mutable.
#[inline]
std: deprecate cast::transmute_mut. Turning a `&T` into an `&mut T` carries a large risk of undefined behaviour, and needs to be done very very carefully. Providing a convenience function for exactly this task is a bad idea, just tempting people into doing the wrong thing. The right thing is to use types like `Cell`, `RefCell` or `Unsafe`. For memory safety, Rust has that guarantee that `&mut` pointers do not alias with any other pointer, that is, if you have a `&mut T` then that is the only usable pointer to that `T`. This allows Rust to assume that writes through a `&mut T` do not affect the values of any other `&` or `&mut` references. `&` pointers have no guarantees about aliasing or not, so it's entirely possible for the same pointer to be passed into both arguments of a function like fn foo(x: &int, y: &int) { ... } Converting either of `x` or `y` to a `&mut` pointer and modifying it would affect the other value: invalid behaviour. (Similarly, it's undefined behaviour to modify the value of an immutable local, like `let x = 1;`.) At a low-level, the *only* safe way to obtain an `&mut` out of a `&` is using the `Unsafe` type (there are higher level wrappers around it, like `Cell`, `RefCell`, `Mutex` etc.). The `Unsafe` type is registered with the compiler so that it can reason a little about these `&` to `&mut` casts, but it is still up to the user to ensure that the `&mut`s obtained out of an `Unsafe` never alias. (Note that *any* conversion from `&` to `&mut` can be invalid, including a plain `transmute`, or casting `&T` -> `*T` -> `*mut T` -> `&mut T`.) [breaking-change]
2014-05-04 08:17:37 -05:00
#[deprecated="casting &T to &mut T is undefined behaviour: use Cell<T>, RefCell<T> or Unsafe<T>"]
pub unsafe fn transmute_mut<'a,T>(ptr: &'a T) -> &'a mut T { transmute(ptr) }
/// Coerce a reference to have an arbitrary associated lifetime.
#[inline]
pub unsafe fn transmute_lifetime<'a,'b,T>(ptr: &'a T) -> &'b T {
transmute(ptr)
}
/// Coerce an immutable reference to be mutable.
#[inline]
pub unsafe fn transmute_mut_unsafe<T>(ptr: *T) -> *mut T {
transmute(ptr)
}
/// Coerce a mutable reference to have an arbitrary associated lifetime.
#[inline]
pub unsafe fn transmute_mut_lifetime<'a,'b,T>(ptr: &'a mut T) -> &'b mut T {
2013-02-15 02:51:28 -06:00
transmute(ptr)
}
/// Transforms lifetime of the second pointer to match the first.
#[inline]
pub unsafe fn copy_lifetime<'a,S,T>(_ptr: &'a S, ptr: &T) -> &'a T {
transmute_lifetime(ptr)
}
/// Transforms lifetime of the second pointer to match the first.
#[inline]
pub unsafe fn copy_mut_lifetime<'a,S,T>(_ptr: &'a mut S, ptr: &mut T) -> &'a mut T {
transmute_mut_lifetime(ptr)
}
/// Transforms lifetime of the second pointer to match the first.
#[inline]
pub unsafe fn copy_lifetime_vec<'a,S,T>(_ptr: &'a [S], ptr: &T) -> &'a T {
transmute_lifetime(ptr)
}
/****************************************************************************
* Tests
****************************************************************************/
2012-01-17 19:28:21 -06:00
#[cfg(test)]
mod tests {
use cast::{bump_box_refcount, transmute};
2014-02-16 02:04:33 -06:00
use raw;
use realstd::str::StrAllocating;
2012-01-17 19:28:21 -06:00
#[test]
fn test_transmute_copy() {
assert_eq!(1u, unsafe { ::cast::transmute_copy(&1) });
2012-01-17 19:28:21 -06:00
}
2012-06-27 12:11:57 -05:00
#[test]
fn test_bump_managed_refcount() {
2012-06-27 12:11:57 -05:00
unsafe {
2014-04-15 20:17:48 -05:00
let managed = @"box box box".to_owned(); // refcount 1
2013-12-14 16:53:20 -06:00
bump_box_refcount(managed); // refcount 2
let ptr: *int = transmute(managed); // refcount 2
2013-04-26 16:04:39 -05:00
let _box1: @~str = ::cast::transmute_copy(&ptr);
let _box2: @~str = ::cast::transmute_copy(&ptr);
2014-04-15 20:17:48 -05:00
assert!(*_box1 == "box box box".to_owned());
assert!(*_box2 == "box box box".to_owned());
2012-06-27 12:11:57 -05:00
// Will destroy _box1 and _box2. Without the bump, this would
// use-after-free. With too many bumps, it would leak.
}
}
#[test]
fn test_transmute() {
unsafe {
2012-12-12 20:41:30 -06:00
let x = @100u8;
let x: *raw::Box<u8> = transmute(x);
2013-03-28 20:39:09 -05:00
assert!((*x).data == 100);
2013-02-15 02:51:28 -06:00
let _x: @int = transmute(x);
}
}
2013-08-04 15:22:56 -05:00
#[test]
fn test_transmute2() {
unsafe {
2014-04-25 03:08:02 -05:00
assert_eq!(box [76u8], transmute("L".to_owned()));
2013-08-04 15:22:56 -05:00
}
}
2012-01-17 19:28:21 -06:00
}