miri::borrow_tracker::tree_borrows::perms

Enum PermissionPriv

Source
enum PermissionPriv {
    ReservedFrz {
        conflicted: bool,
    },
    ReservedIM,
    Active,
    Frozen,
    Disabled,
}
Expand description

The activation states of a pointer.

Variants§

§

ReservedFrz

represents: a local mutable reference that has not yet been written to; allows: child reads, foreign reads; affected by: child writes (becomes Active), rejects: foreign writes (Disabled).

ReservedFrz is mostly for types that are Freeze (no interior mutability). If the type has interior mutability, see ReservedIM instead. (Note: since the discovery of tests/fail/tree_borrows/reservedim_spurious_write.rs, we also use ReservedFreeze for mutable references that were retagged with a protector independently of interior mutability)

special case: behaves differently when protected, which is where conflicted is relevant

  • conflicted is set on foreign reads,
  • conflicted must not be set on child writes (there is UB otherwise).

This is so that the behavior of Reserved adheres to the rules of noalias:

  • foreign-read then child-write is UB due to conflicted,
  • child-write then foreign-read is UB since child-write will activate and then foreign-read disables a protected Active, which is UB.

Fields

§conflicted: bool
§

ReservedIM

Alternative version of ReservedFrz made for types with interior mutability. allows: child reads, foreign reads, foreign writes (extra); affected by: child writes (becomes Active); rejects: nothing.

§

Active

represents: a unique pointer; allows: child reads, child writes; rejects: foreign reads (Frozen), foreign writes (Disabled).

§

Frozen

represents: a shared pointer; allows: all read accesses; rejects child writes (UB), foreign writes (Disabled).

§

Disabled

represents: a dead pointer; allows: all foreign accesses; rejects: all child accesses (UB).

Implementations§

Source§

impl PermissionPriv

Source

fn is_initial(&self) -> bool

Check if self can be the initial state of a pointer.

Source

fn compatible_with_protector(&self) -> bool

Reject ReservedIM that cannot exist in the presence of a protector.

Source

fn strongest_idempotent_foreign_access( &self, prot: bool, ) -> IdempotentForeignAccess

See foreign_access_skipping.rs. Computes the SIFA of a permission.

Trait Implementations§

Source§

impl Clone for PermissionPriv

Source§

fn clone(&self) -> PermissionPriv

Returns a copy of the value. Read more
1.0.0 · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for PermissionPriv

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Display for PermissionPriv

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl Hash for PermissionPriv

Source§

fn hash<__H: Hasher>(&self, state: &mut __H)

Feeds this value into the given Hasher. Read more
1.3.0 · Source§

fn hash_slice<H>(data: &[Self], state: &mut H)
where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher. Read more
Source§

impl PartialEq for PermissionPriv

Source§

fn eq(&self, other: &PermissionPriv) -> bool

Tests for self and other values to be equal, and is used by ==.
1.0.0 · Source§

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.
Source§

impl PartialOrd for PermissionPriv

Source§

fn partial_cmp(&self, other: &Self) -> Option<Ordering>

PermissionPriv is ordered by the reflexive transitive closure of Reserved(conflicted=false) < Reserved(conflicted=true) < Active < Frozen < Disabled. Reserved that have incompatible ty_is_freeze are incomparable to each other. This ordering matches the reachability by transitions, as asserted by the exhaustive test permissionpriv_partialord_is_reachability.

1.0.0 · Source§

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator. Read more
1.0.0 · Source§

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator. Read more
1.0.0 · Source§

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator. Read more
1.0.0 · Source§

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator. Read more
Source§

impl Copy for PermissionPriv

Source§

impl Eq for PermissionPriv

Source§

impl StructuralPartialEq for PermissionPriv

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dst: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dst. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T> Same for T

Source§

type Output = T

Should always be Self
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
Source§

impl<T> ToString for T
where T: Display + ?Sized,

Source§

fn to_string(&self) -> String

Converts the given value to a String. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<V, T> VZip<V> for T
where V: MultiLane<T>,

§

fn vzip(self) -> V

Layout§

Note: Most layout information is completely unstable and may even differ between compilations. The only exception is types with certain repr(...) attributes. Please see the Rust Reference's “Type Layout” chapter for details on type layout guarantees.

Size: 1 byte

Size for each variant:

  • ReservedFrz: 1 byte
  • ReservedIM: 0 bytes
  • Active: 0 bytes
  • Frozen: 0 bytes
  • Disabled: 0 bytes