1ad218f3af
As our implementation of MCP411 nears completion and we begin to solicit testing, it's no longer reasonable to expect testers to type or remember `BikeshedIntrinsicFrom`. The name degrades the ease-of-reading of documentation, and the overall experience of using compiler safe transmute. Tentatively, we'll instead adopt `TransmuteFrom`. This name seems to be the one most likely to be stabilized, after discussion on Zulip [1]. We may want to revisit the ordering of `Src` and `Dst` before stabilization, at which point we'd likely consider `TransmuteInto` or `Transmute`. [1] https://rust-lang.zulipchat.com/#narrow/stream/216762-project-safe-transmute/topic/What.20should.20.60BikeshedIntrinsicFrom.60.20be.20named.3F
48 lines
1.9 KiB
Rust
48 lines
1.9 KiB
Rust
#![crate_type = "lib"]
|
|
#![feature(transmutability)]
|
|
#![allow(dead_code, incomplete_features, non_camel_case_types)]
|
|
|
|
use std::cell::UnsafeCell;
|
|
|
|
mod assert {
|
|
use std::mem::{Assume, TransmuteFrom};
|
|
|
|
pub fn is_maybe_transmutable<Src, Dst>()
|
|
where
|
|
Dst: TransmuteFrom<Src, { Assume::SAFETY }>
|
|
{}
|
|
}
|
|
|
|
fn value_to_value() {
|
|
// We accept value-to-value transmutations of `UnsafeCell`-containing types,
|
|
// because owning a value implies exclusive access.
|
|
assert::is_maybe_transmutable::<UnsafeCell<u8>, u8>();
|
|
assert::is_maybe_transmutable::<u8, UnsafeCell<u8>>();
|
|
assert::is_maybe_transmutable::<UnsafeCell<u8>, UnsafeCell<u8>>();
|
|
}
|
|
|
|
fn ref_to_ref() {
|
|
// We forbid `UnsafeCell`-containing ref-to-ref transmutations, because the
|
|
// two types may use different, incompatible synchronization strategies.
|
|
assert::is_maybe_transmutable::<&'static u8, &'static UnsafeCell<u8>>(); //~ ERROR: cannot be safely transmuted
|
|
|
|
assert::is_maybe_transmutable::<&'static UnsafeCell<u8>, &'static UnsafeCell<u8>>(); //~ ERROR: cannot be safely transmuted
|
|
}
|
|
|
|
fn mut_to_mut() {
|
|
// `UnsafeCell` does't matter for `&mut T` to `&mut U`, since exclusive
|
|
// borrows can't be used for shared access.
|
|
assert::is_maybe_transmutable::<&'static mut u8, &'static mut UnsafeCell<u8>>();
|
|
assert::is_maybe_transmutable::<&'static mut UnsafeCell<u8>, &'static mut u8>();
|
|
assert::is_maybe_transmutable::<&'static mut UnsafeCell<u8>, &'static mut UnsafeCell<u8>>();
|
|
}
|
|
|
|
fn mut_to_ref() {
|
|
// We don't care about `UnsafeCell` for transmutations in the form `&mut T
|
|
// -> &U`, because downgrading a `&mut T` to a `&U` deactivates `&mut T` for
|
|
// the lifetime of `&U`.
|
|
assert::is_maybe_transmutable::<&'static mut u8, &'static UnsafeCell<u8>>();
|
|
assert::is_maybe_transmutable::<&'static mut UnsafeCell<u8>, &'static u8>();
|
|
assert::is_maybe_transmutable::<&'static mut UnsafeCell<u8>, &'static UnsafeCell<u8>>();
|
|
}
|