| #[rustc_doc_primitive = "bool"] | |
| #[doc(alias = "true")] | |
| #[doc(alias = "false")] | |
| /// The boolean type. | |
| /// | |
| /// The `bool` represents a value, which could only be either [`true`] or [`false`]. If you cast | |
| /// a `bool` into an integer, [`true`] will be 1 and [`false`] will be 0. | |
| /// | |
| /// # Basic usage | |
| /// | |
| /// `bool` implements various traits, such as [`BitAnd`], [`BitOr`], [`Not`], etc., | |
| /// which allow us to perform boolean operations using `&`, `|` and `!`. | |
| /// | |
| /// [`if`] requires a `bool` value as its conditional. [`assert!`], which is an | |
| /// important macro in testing, checks whether an expression is [`true`] and panics | |
| /// if it isn't. | |
| /// | |
| /// ``` | |
| /// let bool_val = true & false | false; | |
| /// assert!(!bool_val); | |
| /// ``` | |
| /// | |
| /// [`true`]: ../std/keyword.true.html | |
| /// [`false`]: ../std/keyword.false.html | |
| /// [`BitAnd`]: ops::BitAnd | |
| /// [`BitOr`]: ops::BitOr | |
| /// [`Not`]: ops::Not | |
| /// [`if`]: ../std/keyword.if.html | |
| /// | |
| /// # Examples | |
| /// | |
| /// A trivial example of the usage of `bool`: | |
| /// | |
| /// ``` | |
| /// let praise_the_borrow_checker = true; | |
| /// | |
| /// // using the `if` conditional | |
| /// if praise_the_borrow_checker { | |
| /// println!("oh, yeah!"); | |
| /// } else { | |
| /// println!("what?!!"); | |
| /// } | |
| /// | |
| /// // ... or, a match pattern | |
| /// match praise_the_borrow_checker { | |
| /// true => println!("keep praising!"), | |
| /// false => println!("you should praise!"), | |
| /// } | |
| /// ``` | |
| /// | |
| /// Also, since `bool` implements the [`Copy`] trait, we don't | |
| /// have to worry about the move semantics (just like the integer and float primitives). | |
| /// | |
| /// Now an example of `bool` cast to integer type: | |
| /// | |
| /// ``` | |
| /// assert_eq!(true as i32, 1); | |
| /// assert_eq!(false as i32, 0); | |
| /// ``` | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_bool {} | |
| #[rustc_doc_primitive = "never"] | |
| #[doc(alias = "!")] | |
| // | |
| /// The `!` type, also called "never". | |
| /// | |
| /// `!` represents the type of computations which never resolve to any value at all. For example, | |
| /// the [`exit`] function `fn exit(code: i32) -> !` exits the process without ever returning, and | |
| /// so returns `!`. | |
| /// | |
| /// `break`, `continue` and `return` expressions also have type `!`. For example we are allowed to | |
| /// write: | |
| /// | |
| /// ``` | |
| /// #![feature(never_type)] | |
| /// # fn foo() -> u32 { | |
| /// let x: ! = { | |
| /// return 123 | |
| /// }; | |
| /// # } | |
| /// ``` | |
| /// | |
| /// Although the `let` is pointless here, it illustrates the meaning of `!`. Since `x` is never | |
| /// assigned a value (because `return` returns from the entire function), `x` can be given type | |
| /// `!`. We could also replace `return 123` with a `panic!` or a never-ending `loop` and this code | |
| /// would still be valid. | |
| /// | |
| /// A more realistic usage of `!` is in this code: | |
| /// | |
| /// ``` | |
| /// # fn get_a_number() -> Option<u32> { None } | |
| /// # loop { | |
| /// let num: u32 = match get_a_number() { | |
| /// Some(num) => num, | |
| /// None => break, | |
| /// }; | |
| /// # } | |
| /// ``` | |
| /// | |
| /// Both match arms must produce values of type [`u32`], but since `break` never produces a value | |
| /// at all we know it can never produce a value which isn't a [`u32`]. This illustrates another | |
| /// behavior of the `!` type - expressions with type `!` will coerce into any other type. | |
| /// | |
| /// [`u32`]: prim@u32 | |
| /// [`exit`]: ../std/process/fn.exit.html | |
| /// | |
| /// # `!` and generics | |
| /// | |
| /// ## Infallible errors | |
| /// | |
| /// The main place you'll see `!` used explicitly is in generic code. Consider the [`FromStr`] | |
| /// trait: | |
| /// | |
| /// ``` | |
| /// trait FromStr: Sized { | |
| /// type Err; | |
| /// fn from_str(s: &str) -> Result<Self, Self::Err>; | |
| /// } | |
| /// ``` | |
| /// | |
| /// When implementing this trait for [`String`] we need to pick a type for [`Err`]. And since | |
| /// converting a string into a string will never result in an error, the appropriate type is `!`. | |
| /// (Currently the type actually used is an enum with no variants, though this is only because `!` | |
| /// was added to Rust at a later date and it may change in the future.) With an [`Err`] type of | |
| /// `!`, if we have to call [`String::from_str`] for some reason the result will be a | |
| /// [`Result<String, !>`] which we can unpack like this: | |
| /// | |
| /// ``` | |
| /// use std::str::FromStr; | |
| /// let Ok(s) = String::from_str("hello"); | |
| /// ``` | |
| /// | |
| /// Since the [`Err`] variant contains a `!`, it can never occur. This means we can exhaustively | |
| /// match on [`Result<T, !>`] by just taking the [`Ok`] variant. This illustrates another behavior | |
| /// of `!` - it can be used to "delete" certain enum variants from generic types like `Result`. | |
| /// | |
| /// ## Infinite loops | |
| /// | |
| /// While [`Result<T, !>`] is very useful for removing errors, `!` can also be used to remove | |
| /// successes as well. If we think of [`Result<T, !>`] as "if this function returns, it has not | |
| /// errored," we get a very intuitive idea of [`Result<!, E>`] as well: if the function returns, it | |
| /// *has* errored. | |
| /// | |
| /// For example, consider the case of a simple web server, which can be simplified to: | |
| /// | |
| /// ```ignore (hypothetical-example) | |
| /// loop { | |
| /// let (client, request) = get_request().expect("disconnected"); | |
| /// let response = request.process(); | |
| /// response.send(client); | |
| /// } | |
| /// ``` | |
| /// | |
| /// Currently, this isn't ideal, because we simply panic whenever we fail to get a new connection. | |
| /// Instead, we'd like to keep track of this error, like this: | |
| /// | |
| /// ```ignore (hypothetical-example) | |
| /// loop { | |
| /// match get_request() { | |
| /// Err(err) => break err, | |
| /// Ok((client, request)) => { | |
| /// let response = request.process(); | |
| /// response.send(client); | |
| /// }, | |
| /// } | |
| /// } | |
| /// ``` | |
| /// | |
| /// Now, when the server disconnects, we exit the loop with an error instead of panicking. While it | |
| /// might be intuitive to simply return the error, we might want to wrap it in a [`Result<!, E>`] | |
| /// instead: | |
| /// | |
| /// ```ignore (hypothetical-example) | |
| /// fn server_loop() -> Result<!, ConnectionError> { | |
| /// loop { | |
| /// let (client, request) = get_request()?; | |
| /// let response = request.process(); | |
| /// response.send(client); | |
| /// } | |
| /// } | |
| /// ``` | |
| /// | |
| /// Now, we can use `?` instead of `match`, and the return type makes a lot more sense: if the loop | |
| /// ever stops, it means that an error occurred. We don't even have to wrap the loop in an `Ok` | |
| /// because `!` coerces to `Result<!, ConnectionError>` automatically. | |
| /// | |
| /// [`String::from_str`]: str::FromStr::from_str | |
| /// [`String`]: ../std/string/struct.String.html | |
| /// [`FromStr`]: str::FromStr | |
| /// | |
| /// # `!` and traits | |
| /// | |
| /// When writing your own traits, `!` should have an `impl` whenever there is an obvious `impl` | |
| /// which doesn't `panic!`. The reason is that functions returning an `impl Trait` where `!` | |
| /// does not have an `impl` of `Trait` cannot diverge as their only possible code path. In other | |
| /// words, they can't return `!` from every code path. As an example, this code doesn't compile: | |
| /// | |
| /// ```compile_fail | |
| /// use std::ops::Add; | |
| /// | |
| /// fn foo() -> impl Add<u32> { | |
| /// unimplemented!() | |
| /// } | |
| /// ``` | |
| /// | |
| /// But this code does: | |
| /// | |
| /// ``` | |
| /// use std::ops::Add; | |
| /// | |
| /// fn foo() -> impl Add<u32> { | |
| /// if true { | |
| /// unimplemented!() | |
| /// } else { | |
| /// 0 | |
| /// } | |
| /// } | |
| /// ``` | |
| /// | |
| /// The reason is that, in the first example, there are many possible types that `!` could coerce | |
| /// to, because many types implement `Add<u32>`. However, in the second example, | |
| /// the `else` branch returns a `0`, which the compiler infers from the return type to be of type | |
| /// `u32`. Since `u32` is a concrete type, `!` can and will be coerced to it. See issue [#36375] | |
| /// for more information on this quirk of `!`. | |
| /// | |
| /// [#36375]: https://github.com/rust-lang/rust/issues/36375 | |
| /// | |
| /// As it turns out, though, most traits can have an `impl` for `!`. Take [`Debug`] | |
| /// for example: | |
| /// | |
| /// ``` | |
| /// #![feature(never_type)] | |
| /// # use std::fmt; | |
| /// # trait Debug { | |
| /// # fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result; | |
| /// # } | |
| /// impl Debug for ! { | |
| /// fn fmt(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result { | |
| /// *self | |
| /// } | |
| /// } | |
| /// ``` | |
| /// | |
| /// Once again we're using `!`'s ability to coerce into any other type, in this case | |
| /// [`fmt::Result`]. Since this method takes a `&!` as an argument we know that it can never be | |
| /// called (because there is no value of type `!` for it to be called with). Writing `*self` | |
| /// essentially tells the compiler "We know that this code can never be run, so just treat the | |
| /// entire function body as having type [`fmt::Result`]". This pattern can be used a lot when | |
| /// implementing traits for `!`. Generally, any trait which only has methods which take a `self` | |
| /// parameter should have such an impl. | |
| /// | |
| /// On the other hand, one trait which would not be appropriate to implement is [`Default`]: | |
| /// | |
| /// ``` | |
| /// trait Default { | |
| /// fn default() -> Self; | |
| /// } | |
| /// ``` | |
| /// | |
| /// Since `!` has no values, it has no default value either. It's true that we could write an | |
| /// `impl` for this which simply panics, but the same is true for any type (we could `impl | |
| /// Default` for (eg.) [`File`] by just making [`default()`] panic.) | |
| /// | |
| /// [`File`]: ../std/fs/struct.File.html | |
| /// [`Debug`]: fmt::Debug | |
| /// [`default()`]: Default::default | |
| /// | |
| /// # Never type fallback | |
| /// | |
| /// When the compiler sees a value of type `!` in a [coercion site], it implicitly inserts a | |
| /// coercion to allow the type checker to infer any type: | |
| /// | |
| // FIXME: use `core::convert::absurd` here instead, once it's merged | |
| /// ```rust,ignore (illustrative-and-has-placeholders) | |
| /// // this | |
| /// let x: u8 = panic!(); | |
| /// | |
| /// // is (essentially) turned by the compiler into | |
| /// let x: u8 = absurd(panic!()); | |
| /// | |
| /// // where absurd is a function with the following signature | |
| /// // (it's sound, because `!` always marks unreachable code): | |
| /// fn absurd<T>(_: !) -> T { ... } | |
| /// ``` | |
| /// | |
| /// This can lead to compilation errors if the type cannot be inferred: | |
| /// | |
| /// ```compile_fail | |
| /// // this | |
| /// { panic!() }; | |
| /// | |
| /// // gets turned into this | |
| /// { absurd(panic!()) }; // error: can't infer the type of `absurd` | |
| /// ``` | |
| /// | |
| /// To prevent such errors, the compiler remembers where it inserted `absurd` calls, and | |
| /// if it can't infer the type, it uses the fallback type instead: | |
| /// ```rust, ignore | |
| /// type Fallback = /* An arbitrarily selected type! */; | |
| /// { absurd::<Fallback>(panic!()) } | |
| /// ``` | |
| /// | |
| /// This is what is known as "never type fallback". | |
| /// | |
| /// Historically, the fallback type was [`()`], causing confusing behavior where `!` spontaneously | |
| /// coerced to `()`, even when it would not infer `()` without the fallback. The fallback was changed | |
| /// to `!` in the [2024 edition], and will be changed in all editions at a later date. | |
| /// | |
| /// [coercion site]: <https://doc.rust-lang.org/reference/type-coercions.html#coercion-sites> | |
| /// [`()`]: prim@unit | |
| /// [2024 edition]: <https://doc.rust-lang.org/edition-guide/rust-2024/never-type-fallback.html> | |
| /// | |
| #[unstable(feature = "never_type", issue = "35121")] | |
| mod prim_never {} | |
| // Required to make auto trait impls render. | |
| // See src/librustdoc/passes/collect_trait_impls.rs:collect_trait_impls | |
| #[doc(hidden)] | |
| impl ! {} | |
| #[rustc_doc_primitive = "char"] | |
| #[allow(rustdoc::invalid_rust_codeblocks)] | |
| /// A character type. | |
| /// | |
| /// The `char` type represents a single character. More specifically, since | |
| /// 'character' isn't a well-defined concept in Unicode, `char` is a '[Unicode | |
| /// scalar value]'. | |
| /// | |
| /// This documentation describes a number of methods and trait implementations on the | |
| /// `char` type. For technical reasons, there is additional, separate | |
| /// documentation in [the `std::char` module](char/index.html) as well. | |
| /// | |
| /// # Validity and Layout | |
| /// | |
| /// A `char` is a '[Unicode scalar value]', which is any '[Unicode code point]' | |
| /// other than a [surrogate code point]. This has a fixed numerical definition: | |
| /// code points are in the range 0 to 0x10FFFF, inclusive. | |
| /// Surrogate code points, used by UTF-16, are in the range 0xD800 to 0xDFFF. | |
| /// | |
| /// No `char` may be constructed, whether as a literal or at runtime, that is not a | |
| /// Unicode scalar value. Violating this rule causes undefined behavior. | |
| /// | |
| /// ```compile_fail | |
| /// // Each of these is a compiler error | |
| /// ['\u{D800}', '\u{DFFF}', '\u{110000}']; | |
| /// ``` | |
| /// | |
| /// ```should_panic | |
| /// // Panics; from_u32 returns None. | |
| /// char::from_u32(0xDE01).unwrap(); | |
| /// ``` | |
| /// | |
| /// ```no_run | |
| /// // Undefined behavior | |
| /// let _ = unsafe { char::from_u32_unchecked(0x110000) }; | |
| /// ``` | |
| /// | |
| /// Unicode scalar values are also the exact set of values that may be encoded in UTF-8. Because | |
| /// `char` values are Unicode scalar values and functions may assume [incoming `str` values are | |
| /// valid UTF-8](primitive.str.html#invariant), it is safe to store any `char` in a `str` or read | |
| /// any character from a `str` as a `char`. | |
| /// | |
| /// The gap in valid `char` values is understood by the compiler, so in the | |
| /// below example the two ranges are understood to cover the whole range of | |
| /// possible `char` values and there is no error for a [non-exhaustive match]. | |
| /// | |
| /// ``` | |
| /// let c: char = 'a'; | |
| /// match c { | |
| /// '\0' ..= '\u{D7FF}' => false, | |
| /// '\u{E000}' ..= '\u{10FFFF}' => true, | |
| /// }; | |
| /// ``` | |
| /// | |
| /// All Unicode scalar values are valid `char` values, but not all of them represent a real | |
| /// character. Many Unicode scalar values are not currently assigned to a character, but may be in | |
| /// the future ("reserved"); some will never be a character ("noncharacters"); and some may be given | |
| /// different meanings by different users ("private use"). | |
| /// | |
| /// `char` is guaranteed to have the same size, alignment, and function call ABI as `u32` on all | |
| /// platforms. | |
| /// ``` | |
| /// use std::alloc::Layout; | |
| /// assert_eq!(Layout::new::<char>(), Layout::new::<u32>()); | |
| /// ``` | |
| /// | |
| /// [Unicode code point]: https://www.unicode.org/glossary/#code_point | |
| /// [Unicode scalar value]: https://www.unicode.org/glossary/#unicode_scalar_value | |
| /// [non-exhaustive match]: ../book/ch06-02-match.html#matches-are-exhaustive | |
| /// [surrogate code point]: https://www.unicode.org/glossary/#surrogate_code_point | |
| /// | |
| /// # Representation | |
| /// | |
| /// `char` is always four bytes in size. This is a different representation than | |
| /// a given character would have as part of a [`String`]. For example: | |
| /// | |
| /// ``` | |
| /// let v = vec!['h', 'e', 'l', 'l', 'o']; | |
| /// | |
| /// // five elements times four bytes for each element | |
| /// assert_eq!(20, v.len() * size_of::<char>()); | |
| /// | |
| /// let s = String::from("hello"); | |
| /// | |
| /// // five elements times one byte per element | |
| /// assert_eq!(5, s.len() * size_of::<u8>()); | |
| /// ``` | |
| /// | |
| /// [`String`]: ../std/string/struct.String.html | |
| /// | |
| /// As always, remember that a human intuition for 'character' might not map to | |
| /// Unicode's definitions. For example, despite looking similar, the 'é' | |
| /// character is one Unicode code point while 'é' is two Unicode code points: | |
| /// | |
| /// ``` | |
| /// let mut chars = "é".chars(); | |
| /// // U+00e9: 'latin small letter e with acute' | |
| /// assert_eq!(Some('\u{00e9}'), chars.next()); | |
| /// assert_eq!(None, chars.next()); | |
| /// | |
| /// let mut chars = "é".chars(); | |
| /// // U+0065: 'latin small letter e' | |
| /// assert_eq!(Some('\u{0065}'), chars.next()); | |
| /// // U+0301: 'combining acute accent' | |
| /// assert_eq!(Some('\u{0301}'), chars.next()); | |
| /// assert_eq!(None, chars.next()); | |
| /// ``` | |
| /// | |
| /// This means that the contents of the first string above _will_ fit into a | |
| /// `char` while the contents of the second string _will not_. Trying to create | |
| /// a `char` literal with the contents of the second string gives an error: | |
| /// | |
| /// ```text | |
| /// error: character literal may only contain one codepoint: 'é' | |
| /// let c = 'é'; | |
| /// ^^^ | |
| /// ``` | |
| /// | |
| /// Another implication of the 4-byte fixed size of a `char` is that | |
| /// per-`char` processing can end up using a lot more memory: | |
| /// | |
| /// ``` | |
| /// let s = String::from("love: ❤️"); | |
| /// let v: Vec<char> = s.chars().collect(); | |
| /// | |
| /// assert_eq!(12, size_of_val(&s[..])); | |
| /// assert_eq!(32, size_of_val(&v[..])); | |
| /// ``` | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_char {} | |
| #[rustc_doc_primitive = "unit"] | |
| #[doc(alias = "(")] | |
| #[doc(alias = ")")] | |
| #[doc(alias = "()")] | |
| // | |
| /// The `()` type, also called "unit". | |
| /// | |
| /// The `()` type has exactly one value `()`, and is used when there | |
| /// is no other meaningful value that could be returned. `()` is most | |
| /// commonly seen implicitly: functions without a `-> ...` implicitly | |
| /// have return type `()`, that is, these are equivalent: | |
| /// | |
| /// ```rust | |
| /// fn long() -> () {} | |
| /// | |
| /// fn short() {} | |
| /// ``` | |
| /// | |
| /// The semicolon `;` can be used to discard the result of an | |
| /// expression at the end of a block, making the expression (and thus | |
| /// the block) evaluate to `()`. For example, | |
| /// | |
| /// ```rust | |
| /// fn returns_i64() -> i64 { | |
| /// 1i64 | |
| /// } | |
| /// fn returns_unit() { | |
| /// 1i64; | |
| /// } | |
| /// | |
| /// let is_i64 = { | |
| /// returns_i64() | |
| /// }; | |
| /// let is_unit = { | |
| /// returns_i64(); | |
| /// }; | |
| /// ``` | |
| /// | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_unit {} | |
| // Required to make auto trait impls render. | |
| // See src/librustdoc/passes/collect_trait_impls.rs:collect_trait_impls | |
| #[doc(hidden)] | |
| impl () {} | |
| #[rustc_doc_primitive = "pointer"] | |
| #[doc(alias = "ptr")] | |
| #[doc(alias = "*")] | |
| #[doc(alias = "*const")] | |
| #[doc(alias = "*mut")] | |
| // | |
| /// Raw, unsafe pointers, `*const T`, and `*mut T`. | |
| /// | |
| /// *[See also the `std::ptr` module](ptr).* | |
| /// | |
| /// Working with raw pointers in Rust is uncommon, typically limited to a few patterns. Raw pointers | |
| /// can be out-of-bounds, unaligned, or [`null`]. However, when loading from or storing to a raw | |
| /// pointer, it must be [valid] for the given access and aligned. When using a field expression, | |
| /// tuple index expression, or array/slice index expression on a raw pointer, it follows the rules | |
| /// of [in-bounds pointer arithmetic][`offset`]. | |
| /// | |
| /// Storing through a raw pointer using `*ptr = data` calls `drop` on the old value, so | |
| /// [`write`] must be used if the type has drop glue and memory is not already | |
| /// initialized - otherwise `drop` would be called on the uninitialized memory. | |
| /// | |
| /// Use the [`null`] and [`null_mut`] functions to create null pointers, and the | |
| /// [`is_null`] method of the `*const T` and `*mut T` types to check for null. | |
| /// The `*const T` and `*mut T` types also define the [`offset`] method, for | |
| /// pointer math. | |
| /// | |
| /// # Common ways to create raw pointers | |
| /// | |
| /// ## 1. Coerce a reference (`&T`) or mutable reference (`&mut T`). | |
| /// | |
| /// ``` | |
| /// let my_num: i32 = 10; | |
| /// let my_num_ptr: *const i32 = &my_num; | |
| /// let mut my_speed: i32 = 88; | |
| /// let my_speed_ptr: *mut i32 = &mut my_speed; | |
| /// ``` | |
| /// | |
| /// To get a pointer to a boxed value, dereference the box: | |
| /// | |
| /// ``` | |
| /// let my_num: Box<i32> = Box::new(10); | |
| /// let my_num_ptr: *const i32 = &*my_num; | |
| /// let mut my_speed: Box<i32> = Box::new(88); | |
| /// let my_speed_ptr: *mut i32 = &mut *my_speed; | |
| /// ``` | |
| /// | |
| /// This does not take ownership of the original allocation | |
| /// and requires no resource management later, | |
| /// but you must not use the pointer after its lifetime. | |
| /// | |
| /// ## 2. Consume a box (`Box<T>`). | |
| /// | |
| /// The [`into_raw`] function consumes a box and returns | |
| /// the raw pointer. It doesn't destroy `T` or deallocate any memory. | |
| /// | |
| /// ``` | |
| /// let my_speed: Box<i32> = Box::new(88); | |
| /// let my_speed: *mut i32 = Box::into_raw(my_speed); | |
| /// | |
| /// // By taking ownership of the original `Box<T>` though | |
| /// // we are obligated to put it together later to be destroyed. | |
| /// unsafe { | |
| /// drop(Box::from_raw(my_speed)); | |
| /// } | |
| /// ``` | |
| /// | |
| /// Note that here the call to [`drop`] is for clarity - it indicates | |
| /// that we are done with the given value and it should be destroyed. | |
| /// | |
| /// ## 3. Create it using `&raw` | |
| /// | |
| /// Instead of coercing a reference to a raw pointer, you can use the raw borrow | |
| /// operators `&raw const` (for `*const T`) and `&raw mut` (for `*mut T`). | |
| /// These operators allow you to create raw pointers to fields to which you cannot | |
| /// create a reference (without causing undefined behavior), such as an | |
| /// unaligned field. This might be necessary if packed structs or uninitialized | |
| /// memory is involved. | |
| /// | |
| /// ``` | |
| /// #[derive(Debug, Default, Copy, Clone)] | |
| /// #[repr(C, packed)] | |
| /// struct S { | |
| /// aligned: u8, | |
| /// unaligned: u32, | |
| /// } | |
| /// let s = S::default(); | |
| /// let p = &raw const s.unaligned; // not allowed with coercion | |
| /// ``` | |
| /// | |
| /// ## 4. Get it from C. | |
| /// | |
| /// ``` | |
| /// # mod libc { | |
| /// # pub unsafe fn malloc(_size: usize) -> *mut core::ffi::c_void { core::ptr::NonNull::dangling().as_ptr() } | |
| /// # pub unsafe fn free(_ptr: *mut core::ffi::c_void) {} | |
| /// # } | |
| /// # #[cfg(false)] | |
| /// #[allow(unused_extern_crates)] | |
| /// extern crate libc; | |
| /// | |
| /// unsafe { | |
| /// let my_num: *mut i32 = libc::malloc(size_of::<i32>()) as *mut i32; | |
| /// if my_num.is_null() { | |
| /// panic!("failed to allocate memory"); | |
| /// } | |
| /// libc::free(my_num as *mut core::ffi::c_void); | |
| /// } | |
| /// ``` | |
| /// | |
| /// Usually you wouldn't literally use `malloc` and `free` from Rust, | |
| /// but C APIs hand out a lot of pointers generally, so are a common source | |
| /// of raw pointers in Rust. | |
| /// | |
| /// [`null`]: ptr::null | |
| /// [`null_mut`]: ptr::null_mut | |
| /// [`is_null`]: pointer::is_null | |
| /// [`offset`]: pointer::offset | |
| /// [`into_raw`]: ../std/boxed/struct.Box.html#method.into_raw | |
| /// [`write`]: ptr::write | |
| /// [valid]: ptr#safety | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_pointer {} | |
| #[rustc_doc_primitive = "array"] | |
| #[doc(alias = "[]")] | |
| #[doc(alias = "[T;N]")] // unfortunately, rustdoc doesn't have fuzzy search for aliases | |
| #[doc(alias = "[T; N]")] | |
| /// A fixed-size array, denoted `[T; N]`, for the element type, `T`, and the | |
| /// non-negative compile-time constant size, `N`. | |
| /// | |
| /// There are two syntactic forms for creating an array: | |
| /// | |
| /// * A list with each element, i.e., `[x, y, z]`. | |
| /// * A repeat expression `[expr; N]` where `N` is how many times to repeat `expr` in the array. `expr` must either be: | |
| /// | |
| /// * A value of a type implementing the [`Copy`] trait | |
| /// * A `const` value | |
| /// | |
| /// Note that `[expr; 0]` is allowed, and produces an empty array. | |
| /// This will still evaluate `expr`, however, and immediately drop the resulting value, so | |
| /// be mindful of side effects. | |
| /// | |
| /// Arrays of *any* size implement the following traits if the element type allows it: | |
| /// | |
| /// - [`Copy`] | |
| /// - [`Clone`] | |
| /// - [`Debug`] | |
| /// - [`IntoIterator`] (implemented for `[T; N]`, `&[T; N]` and `&mut [T; N]`) | |
| /// - [`PartialEq`], [`PartialOrd`], [`Eq`], [`Ord`] | |
| /// - [`Hash`] | |
| /// - [`AsRef`], [`AsMut`] | |
| /// - [`Borrow`], [`BorrowMut`] | |
| /// | |
| /// Arrays of sizes from 0 to 32 (inclusive) implement the [`Default`] trait | |
| /// if the element type allows it. As a stopgap, trait implementations are | |
| /// statically generated up to size 32. | |
| /// | |
| /// Arrays of sizes from 1 to 12 (inclusive) implement [`From<Tuple>`], where `Tuple` | |
| /// is a homogeneous [prim@tuple] of appropriate length. | |
| /// | |
| /// Arrays coerce to [slices (`[T]`)][slice], so a slice method may be called on | |
| /// an array. Indeed, this provides most of the API for working with arrays. | |
| /// | |
| /// Slices have a dynamic size and do not coerce to arrays. Instead, use | |
| /// `slice.try_into().unwrap()` or `<ArrayType>::try_from(slice).unwrap()`. | |
| /// | |
| /// Array's `try_from(slice)` implementations (and the corresponding `slice.try_into()` | |
| /// array implementations) succeed if the input slice length is the same as the result | |
| /// array length. They optimize especially well when the optimizer can easily determine | |
| /// the slice length, e.g. `<[u8; 4]>::try_from(&slice[4..8]).unwrap()`. Array implements | |
| /// [TryFrom](crate::convert::TryFrom) returning: | |
| /// | |
| /// - `[T; N]` copies from the slice's elements | |
| /// - `&[T; N]` references the original slice's elements | |
| /// - `&mut [T; N]` references the original slice's elements | |
| /// | |
| /// You can move elements out of an array with a [slice pattern]. If you want | |
| /// one element, see [`mem::replace`]. | |
| /// | |
| /// # Examples | |
| /// | |
| /// ``` | |
| /// let mut array: [i32; 3] = [0; 3]; | |
| /// | |
| /// array[1] = 1; | |
| /// array[2] = 2; | |
| /// | |
| /// assert_eq!([1, 2], &array[1..]); | |
| /// | |
| /// // This loop prints: 0 1 2 | |
| /// for x in array { | |
| /// print!("{x} "); | |
| /// } | |
| /// ``` | |
| /// | |
| /// You can also iterate over reference to the array's elements: | |
| /// | |
| /// ``` | |
| /// let array: [i32; 3] = [0; 3]; | |
| /// | |
| /// for x in &array { } | |
| /// ``` | |
| /// | |
| /// You can use `<ArrayType>::try_from(slice)` or `slice.try_into()` to get an array from | |
| /// a slice: | |
| /// | |
| /// ``` | |
| /// let bytes: [u8; 3] = [1, 0, 2]; | |
| /// assert_eq!(1, u16::from_le_bytes(<[u8; 2]>::try_from(&bytes[0..2]).unwrap())); | |
| /// assert_eq!(512, u16::from_le_bytes(bytes[1..3].try_into().unwrap())); | |
| /// ``` | |
| /// | |
| /// You can use a [slice pattern] to move elements out of an array: | |
| /// | |
| /// ``` | |
| /// fn move_away(_: String) { /* Do interesting things. */ } | |
| /// | |
| /// let [john, roa] = ["John".to_string(), "Roa".to_string()]; | |
| /// move_away(john); | |
| /// move_away(roa); | |
| /// ``` | |
| /// | |
| /// Arrays can be created from homogeneous tuples of appropriate length: | |
| /// | |
| /// ``` | |
| /// let tuple: (u32, u32, u32) = (1, 2, 3); | |
| /// let array: [u32; 3] = tuple.into(); | |
| /// ``` | |
| /// | |
| /// # Editions | |
| /// | |
| /// Prior to Rust 1.53, arrays did not implement [`IntoIterator`] by value, so the method call | |
| /// `array.into_iter()` auto-referenced into a [slice iterator](slice::iter). Right now, the old | |
| /// behavior is preserved in the 2015 and 2018 editions of Rust for compatibility, ignoring | |
| /// [`IntoIterator`] by value. In the future, the behavior on the 2015 and 2018 edition | |
| /// might be made consistent to the behavior of later editions. | |
| /// | |
| /// ```rust,edition2018 | |
| /// // Rust 2015 and 2018: | |
| /// | |
| /// # #![allow(array_into_iter)] // override our `deny(warnings)` | |
| /// let array: [i32; 3] = [0; 3]; | |
| /// | |
| /// // This creates a slice iterator, producing references to each value. | |
| /// for item in array.into_iter().enumerate() { | |
| /// let (i, x): (usize, &i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// | |
| /// // The `array_into_iter` lint suggests this change for future compatibility: | |
| /// for item in array.iter().enumerate() { | |
| /// let (i, x): (usize, &i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// | |
| /// // You can explicitly iterate an array by value using `IntoIterator::into_iter` | |
| /// for item in IntoIterator::into_iter(array).enumerate() { | |
| /// let (i, x): (usize, i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// ``` | |
| /// | |
| /// Starting in the 2021 edition, `array.into_iter()` uses `IntoIterator` normally to iterate | |
| /// by value, and `iter()` should be used to iterate by reference like previous editions. | |
| /// | |
| /// ```rust,edition2021 | |
| /// // Rust 2021: | |
| /// | |
| /// let array: [i32; 3] = [0; 3]; | |
| /// | |
| /// // This iterates by reference: | |
| /// for item in array.iter().enumerate() { | |
| /// let (i, x): (usize, &i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// | |
| /// // This iterates by value: | |
| /// for item in array.into_iter().enumerate() { | |
| /// let (i, x): (usize, i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// ``` | |
| /// | |
| /// Future language versions might start treating the `array.into_iter()` | |
| /// syntax on editions 2015 and 2018 the same as on edition 2021. So code using | |
| /// those older editions should still be written with this change in mind, to | |
| /// prevent breakage in the future. The safest way to accomplish this is to | |
| /// avoid the `into_iter` syntax on those editions. If an edition update is not | |
| /// viable/desired, there are multiple alternatives: | |
| /// * use `iter`, equivalent to the old behavior, creating references | |
| /// * use [`IntoIterator::into_iter`], equivalent to the post-2021 behavior (Rust 1.53+) | |
| /// * replace `for ... in array.into_iter() {` with `for ... in array {`, | |
| /// equivalent to the post-2021 behavior (Rust 1.53+) | |
| /// | |
| /// ```rust,edition2018 | |
| /// // Rust 2015 and 2018: | |
| /// | |
| /// let array: [i32; 3] = [0; 3]; | |
| /// | |
| /// // This iterates by reference: | |
| /// for item in array.iter() { | |
| /// let x: &i32 = item; | |
| /// println!("{x}"); | |
| /// } | |
| /// | |
| /// // This iterates by value: | |
| /// for item in IntoIterator::into_iter(array) { | |
| /// let x: i32 = item; | |
| /// println!("{x}"); | |
| /// } | |
| /// | |
| /// // This iterates by value: | |
| /// for item in array { | |
| /// let x: i32 = item; | |
| /// println!("{x}"); | |
| /// } | |
| /// | |
| /// // IntoIter can also start a chain. | |
| /// // This iterates by value: | |
| /// for item in IntoIterator::into_iter(array).enumerate() { | |
| /// let (i, x): (usize, i32) = item; | |
| /// println!("array[{i}] = {x}"); | |
| /// } | |
| /// ``` | |
| /// | |
| /// [slice]: prim@slice | |
| /// [`Debug`]: fmt::Debug | |
| /// [`Hash`]: hash::Hash | |
| /// [`Borrow`]: borrow::Borrow | |
| /// [`BorrowMut`]: borrow::BorrowMut | |
| /// [slice pattern]: ../reference/patterns.html#slice-patterns | |
| /// [`From<Tuple>`]: convert::From | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_array {} | |
| #[rustc_doc_primitive = "slice"] | |
| #[doc(alias = "[")] | |
| #[doc(alias = "]")] | |
| #[doc(alias = "[]")] | |
| /// A dynamically-sized view into a contiguous sequence, `[T]`. | |
| /// | |
| /// Contiguous here means that elements are laid out so that every element is the same | |
| /// distance from its neighbors. | |
| /// | |
| /// *[See also the `std::slice` module](crate::slice).* | |
| /// | |
| /// Slices are a view into a block of memory represented as a pointer and a | |
| /// length. | |
| /// | |
| /// ``` | |
| /// // slicing a Vec | |
| /// let vec = vec![1, 2, 3]; | |
| /// let int_slice = &vec[..]; | |
| /// // coercing an array to a slice | |
| /// let str_slice: &[&str] = &["one", "two", "three"]; | |
| /// ``` | |
| /// | |
| /// Slices are either mutable or shared. The shared slice type is `&[T]`, | |
| /// while the mutable slice type is `&mut [T]`, where `T` represents the element | |
| /// type. For example, you can mutate the block of memory that a mutable slice | |
| /// points to: | |
| /// | |
| /// ``` | |
| /// let mut x = [1, 2, 3]; | |
| /// let x = &mut x[..]; // Take a full slice of `x`. | |
| /// x[1] = 7; | |
| /// assert_eq!(x, &[1, 7, 3]); | |
| /// ``` | |
| /// | |
| /// It is possible to slice empty subranges of slices by using empty ranges (including `slice.len()..slice.len()`): | |
| /// ``` | |
| /// let x = [1, 2, 3]; | |
| /// let empty = &x[0..0]; // subslice before the first element | |
| /// assert_eq!(empty, &[]); | |
| /// let empty = &x[..0]; // same as &x[0..0] | |
| /// assert_eq!(empty, &[]); | |
| /// let empty = &x[1..1]; // empty subslice in the middle | |
| /// assert_eq!(empty, &[]); | |
| /// let empty = &x[3..3]; // subslice after the last element | |
| /// assert_eq!(empty, &[]); | |
| /// let empty = &x[3..]; // same as &x[3..3] | |
| /// assert_eq!(empty, &[]); | |
| /// ``` | |
| /// | |
| /// It is not allowed to use subranges that start with lower bound bigger than `slice.len()`: | |
| /// ```should_panic | |
| /// let x = vec![1, 2, 3]; | |
| /// let _ = &x[4..4]; | |
| /// ``` | |
| /// | |
| /// As slices store the length of the sequence they refer to, they have twice | |
| /// the size of pointers to [`Sized`](marker/trait.Sized.html) types. | |
| /// Also see the reference on | |
| /// [dynamically sized types](../reference/dynamically-sized-types.html). | |
| /// | |
| /// ``` | |
| /// # use std::rc::Rc; | |
| /// let pointer_size = size_of::<&u8>(); | |
| /// assert_eq!(2 * pointer_size, size_of::<&[u8]>()); | |
| /// assert_eq!(2 * pointer_size, size_of::<*const [u8]>()); | |
| /// assert_eq!(2 * pointer_size, size_of::<Box<[u8]>>()); | |
| /// assert_eq!(2 * pointer_size, size_of::<Rc<[u8]>>()); | |
| /// ``` | |
| /// | |
| /// ## Trait Implementations | |
| /// | |
| /// Some traits are implemented for slices if the element type implements | |
| /// that trait. This includes [`Eq`], [`Hash`] and [`Ord`]. | |
| /// | |
| /// ## Iteration | |
| /// | |
| /// The slices implement `IntoIterator`. The iterator yields references to the | |
| /// slice elements. | |
| /// | |
| /// ``` | |
| /// let numbers: &[i32] = &[0, 1, 2]; | |
| /// for n in numbers { | |
| /// println!("{n} is a number!"); | |
| /// } | |
| /// ``` | |
| /// | |
| /// The mutable slice yields mutable references to the elements: | |
| /// | |
| /// ``` | |
| /// let mut scores: &mut [i32] = &mut [7, 8, 9]; | |
| /// for score in scores { | |
| /// *score += 1; | |
| /// } | |
| /// ``` | |
| /// | |
| /// This iterator yields mutable references to the slice's elements, so while | |
| /// the element type of the slice is `i32`, the element type of the iterator is | |
| /// `&mut i32`. | |
| /// | |
| /// * [`.iter`] and [`.iter_mut`] are the explicit methods to return the default | |
| /// iterators. | |
| /// * Further methods that return iterators are [`.split`], [`.splitn`], | |
| /// [`.chunks`], [`.windows`] and more. | |
| /// | |
| /// [`Hash`]: core::hash::Hash | |
| /// [`.iter`]: slice::iter | |
| /// [`.iter_mut`]: slice::iter_mut | |
| /// [`.split`]: slice::split | |
| /// [`.splitn`]: slice::splitn | |
| /// [`.chunks`]: slice::chunks | |
| /// [`.windows`]: slice::windows | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_slice {} | |
| #[rustc_doc_primitive = "str"] | |
| /// String slices. | |
| /// | |
| /// *[See also the `std::str` module](crate::str).* | |
| /// | |
| /// The `str` type, also called a 'string slice', is the most primitive string | |
| /// type. It is usually seen in its borrowed form, `&str`. It is also the type | |
| /// of string literals, `&'static str`. | |
| /// | |
| /// # Basic Usage | |
| /// | |
| /// String literals are string slices: | |
| /// | |
| /// ``` | |
| /// let hello_world = "Hello, World!"; | |
| /// ``` | |
| /// | |
| /// Here we have declared a string slice initialized with a string literal. | |
| /// String literals have a static lifetime, which means the string `hello_world` | |
| /// is guaranteed to be valid for the duration of the entire program. | |
| /// We can explicitly specify `hello_world`'s lifetime as well: | |
| /// | |
| /// ``` | |
| /// let hello_world: &'static str = "Hello, world!"; | |
| /// ``` | |
| /// | |
| /// # Representation | |
| /// | |
| /// A `&str` is made up of two components: a pointer to some bytes, and a | |
| /// length. You can look at these with the [`as_ptr`] and [`len`] methods: | |
| /// | |
| /// ``` | |
| /// use std::slice; | |
| /// use std::str; | |
| /// | |
| /// let story = "Once upon a time..."; | |
| /// | |
| /// let ptr = story.as_ptr(); | |
| /// let len = story.len(); | |
| /// | |
| /// // story has nineteen bytes | |
| /// assert_eq!(19, len); | |
| /// | |
| /// // We can re-build a str out of ptr and len. This is all unsafe because | |
| /// // we are responsible for making sure the two components are valid: | |
| /// let s = unsafe { | |
| /// // First, we build a &[u8]... | |
| /// let slice = slice::from_raw_parts(ptr, len); | |
| /// | |
| /// // ... and then convert that slice into a string slice | |
| /// str::from_utf8(slice) | |
| /// }; | |
| /// | |
| /// assert_eq!(s, Ok(story)); | |
| /// ``` | |
| /// | |
| /// [`as_ptr`]: str::as_ptr | |
| /// [`len`]: str::len | |
| /// | |
| /// Note: This example shows the internals of `&str`. `unsafe` should not be | |
| /// used to get a string slice under normal circumstances. Use `as_str` | |
| /// instead. | |
| /// | |
| /// # Invariant | |
| /// | |
| /// Rust libraries may assume that string slices are always valid UTF-8. | |
| /// | |
| /// Constructing a non-UTF-8 string slice is not immediate undefined behavior, but any function | |
| /// called on a string slice may assume that it is valid UTF-8, which means that a non-UTF-8 string | |
| /// slice can lead to undefined behavior down the road. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_str {} | |
| #[rustc_doc_primitive = "tuple"] | |
| #[doc(alias = "(")] | |
| #[doc(alias = ")")] | |
| #[doc(alias = "()")] | |
| // | |
| /// A finite heterogeneous sequence, `(T, U, ..)`. | |
| /// | |
| /// Let's cover each of those in turn: | |
| /// | |
| /// Tuples are *finite*. In other words, a tuple has a length. Here's a tuple | |
| /// of length `3`: | |
| /// | |
| /// ``` | |
| /// ("hello", 5, 'c'); | |
| /// ``` | |
| /// | |
| /// 'Length' is also sometimes called 'arity' here; each tuple of a different | |
| /// length is a different, distinct type. | |
| /// | |
| /// Tuples are *heterogeneous*. This means that each element of the tuple can | |
| /// have a different type. In that tuple above, it has the type: | |
| /// | |
| /// ``` | |
| /// # let _: | |
| /// (&'static str, i32, char) | |
| /// # = ("hello", 5, 'c'); | |
| /// ``` | |
| /// | |
| /// Tuples are a *sequence*. This means that they can be accessed by position; | |
| /// this is called 'tuple indexing', and it looks like this: | |
| /// | |
| /// ```rust | |
| /// let tuple = ("hello", 5, 'c'); | |
| /// | |
| /// assert_eq!(tuple.0, "hello"); | |
| /// assert_eq!(tuple.1, 5); | |
| /// assert_eq!(tuple.2, 'c'); | |
| /// ``` | |
| /// | |
| /// The sequential nature of the tuple applies to its implementations of various | |
| /// traits. For example, in [`PartialOrd`] and [`Ord`], the elements are compared | |
| /// sequentially until the first non-equal set is found. | |
| /// | |
| /// For more about tuples, see [the book](../book/ch03-02-data-types.html#the-tuple-type). | |
| /// | |
| // Hardcoded anchor in src/librustdoc/html/format.rs | |
| // linked to as `#trait-implementations-1` | |
| /// # Trait implementations | |
| /// | |
| /// In this documentation the shorthand `(T₁, T₂, …, Tₙ)` is used to represent tuples of varying | |
| /// length. When that is used, any trait bound expressed on `T` applies to each element of the | |
| /// tuple independently. Note that this is a convenience notation to avoid repetitive | |
| /// documentation, not valid Rust syntax. | |
| /// | |
| /// Due to a temporary restriction in Rust’s type system, the following traits are only | |
| /// implemented on tuples of arity 12 or less. In the future, this may change: | |
| /// | |
| /// * [`PartialEq`] | |
| /// * [`Eq`] | |
| /// * [`PartialOrd`] | |
| /// * [`Ord`] | |
| /// * [`Debug`] | |
| /// * [`Default`] | |
| /// * [`Hash`] | |
| /// * [`From<[T; N]>`][from] | |
| /// | |
| /// [from]: convert::From | |
| /// [`Debug`]: fmt::Debug | |
| /// [`Hash`]: hash::Hash | |
| /// | |
| /// The following traits are implemented for tuples of any length. These traits have | |
| /// implementations that are automatically generated by the compiler, so are not limited by | |
| /// missing language features. | |
| /// | |
| /// * [`Clone`] | |
| /// * [`Copy`] | |
| /// * [`Send`] | |
| /// * [`Sync`] | |
| /// * [`Unpin`] | |
| /// * [`UnwindSafe`] | |
| /// * [`RefUnwindSafe`] | |
| /// | |
| /// [`UnwindSafe`]: panic::UnwindSafe | |
| /// [`RefUnwindSafe`]: panic::RefUnwindSafe | |
| /// | |
| /// # Examples | |
| /// | |
| /// Basic usage: | |
| /// | |
| /// ``` | |
| /// let tuple = ("hello", 5, 'c'); | |
| /// | |
| /// assert_eq!(tuple.0, "hello"); | |
| /// ``` | |
| /// | |
| /// Tuples are often used as a return type when you want to return more than | |
| /// one value: | |
| /// | |
| /// ``` | |
| /// fn calculate_point() -> (i32, i32) { | |
| /// // Don't do a calculation, that's not the point of the example | |
| /// (4, 5) | |
| /// } | |
| /// | |
| /// let point = calculate_point(); | |
| /// | |
| /// assert_eq!(point.0, 4); | |
| /// assert_eq!(point.1, 5); | |
| /// | |
| /// // Combining this with patterns can be nicer. | |
| /// | |
| /// let (x, y) = calculate_point(); | |
| /// | |
| /// assert_eq!(x, 4); | |
| /// assert_eq!(y, 5); | |
| /// ``` | |
| /// | |
| /// Homogeneous tuples can be created from arrays of appropriate length: | |
| /// | |
| /// ``` | |
| /// let array: [u32; 3] = [1, 2, 3]; | |
| /// let tuple: (u32, u32, u32) = array.into(); | |
| /// ``` | |
| /// | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_tuple {} | |
| // Required to make auto trait impls render. | |
| // See src/librustdoc/passes/collect_trait_impls.rs:collect_trait_impls | |
| #[doc(hidden)] | |
| impl<T> (T,) {} | |
| #[rustc_doc_primitive = "f16"] | |
| #[doc(alias = "half")] | |
| /// A 16-bit floating-point type (specifically, the "binary16" type defined in IEEE 754-2008). | |
| /// | |
| /// This type is very similar to [`prim@f32`] but has decreased precision because it uses half as many | |
| /// bits. Please see [the documentation for `f32`](prim@f32) or [Wikipedia on half-precision | |
| /// values][wikipedia] for more information. | |
| /// | |
| /// Note that most common platforms will not support `f16` in hardware without enabling extra target | |
| /// features, with the notable exception of Apple Silicon (also known as M1, M2, etc.) processors. | |
| /// Hardware support on x86/x86-64 requires the avx512fp16 or avx10.1 features, while RISC-V requires | |
| /// Zfh, and Arm/AArch64 requires FEAT_FP16. Usually the fallback implementation will be to use `f32` | |
| /// hardware if it exists, and convert between `f16` and `f32` when performing math. | |
| /// | |
| /// *[See also the `std::f16::consts` module](crate::f16::consts).* | |
| /// | |
| /// [wikipedia]: https://en.wikipedia.org/wiki/Half-precision_floating-point_format | |
| #[unstable(feature = "f16", issue = "116909")] | |
| mod prim_f16 {} | |
| #[rustc_doc_primitive = "f32"] | |
| #[doc(alias = "single")] | |
| /// A 32-bit floating-point type (specifically, the "binary32" type defined in IEEE 754-2008). | |
| /// | |
| /// This type can represent a wide range of decimal numbers, like `3.5`, `27`, | |
| /// `-113.75`, `0.0078125`, `34359738368`, `0`, `-1`. So unlike integer types | |
| /// (such as `i32`), floating-point types can represent non-integer numbers, | |
| /// too. | |
| /// | |
| /// However, being able to represent this wide range of numbers comes at the | |
| /// cost of precision: floats can only represent some of the real numbers and | |
| /// calculation with floats round to a nearby representable number. For example, | |
| /// `5.0` and `1.0` can be exactly represented as `f32`, but `1.0 / 5.0` results | |
| /// in `0.20000000298023223876953125` since `0.2` cannot be exactly represented | |
| /// as `f32`. Note, however, that printing floats with `println` and friends will | |
| /// often discard insignificant digits: `println!("{}", 1.0f32 / 5.0f32)` will | |
| /// print `0.2`. | |
| /// | |
| /// Additionally, `f32` can represent some special values: | |
| /// | |
| /// - −0.0: IEEE 754 floating-point numbers have a bit that indicates their sign, so −0.0 is a | |
| /// possible value. For comparison −0.0 = +0.0, but floating-point operations can carry | |
| /// the sign bit through arithmetic operations. This means −0.0 × +0.0 produces −0.0 and | |
| /// a negative number rounded to a value smaller than a float can represent also produces −0.0. | |
| /// - [∞](#associatedconstant.INFINITY) and | |
| /// [−∞](#associatedconstant.NEG_INFINITY): these result from calculations | |
| /// like `1.0 / 0.0`. | |
| /// - [NaN (not a number)](#associatedconstant.NAN): this value results from | |
| /// calculations like `(-1.0).sqrt()`. NaN has some potentially unexpected | |
| /// behavior: | |
| /// - It is not equal to any float, including itself! This is the reason `f32` | |
| /// doesn't implement the `Eq` trait. | |
| /// - It is also neither smaller nor greater than any float, making it | |
| /// impossible to sort by the default comparison operation, which is the | |
| /// reason `f32` doesn't implement the `Ord` trait. | |
| /// - It is also considered *infectious* as almost all calculations where one | |
| /// of the operands is NaN will also result in NaN. The explanations on this | |
| /// page only explicitly document behavior on NaN operands if this default | |
| /// is deviated from. | |
| /// - Lastly, there are multiple bit patterns that are considered NaN. | |
| /// Rust does not currently guarantee that the bit patterns of NaN are | |
| /// preserved over arithmetic operations, and they are not guaranteed to be | |
| /// portable or even fully deterministic! This means that there may be some | |
| /// surprising results upon inspecting the bit patterns, | |
| /// as the same calculations might produce NaNs with different bit patterns. | |
| /// This also affects the sign of the NaN: checking `is_sign_positive` or `is_sign_negative` on | |
| /// a NaN is the most common way to run into these surprising results. | |
| /// (Checking `x >= 0.0` or `x <= 0.0` avoids those surprises, but also how negative/positive | |
| /// zero are treated.) | |
| /// See the section below for what exactly is guaranteed about the bit pattern of a NaN. | |
| /// | |
| /// When a primitive operation (addition, subtraction, multiplication, or | |
| /// division) is performed on this type, the result is rounded according to the | |
| /// roundTiesToEven direction defined in IEEE 754-2008. That means: | |
| /// | |
| /// - The result is the representable value closest to the true value, if there | |
| /// is a unique closest representable value. | |
| /// - If the true value is exactly half-way between two representable values, | |
| /// the result is the one with an even least-significant binary digit. | |
| /// - If the true value's magnitude is ≥ `f32::MAX` + 2<sup>(`f32::MAX_EXP` − | |
| /// `f32::MANTISSA_DIGITS` − 1)</sup>, the result is ∞ or −∞ (preserving the | |
| /// true value's sign). | |
| /// - If the result of a sum exactly equals zero, the outcome is +0.0 unless | |
| /// both arguments were negative, then it is -0.0. Subtraction `a - b` is | |
| /// regarded as a sum `a + (-b)`. | |
| /// | |
| /// For more information on floating-point numbers, see [Wikipedia][wikipedia]. | |
| /// | |
| /// *[See also the `std::f32::consts` module](crate::f32::consts).* | |
| /// | |
| /// [wikipedia]: https://en.wikipedia.org/wiki/Single-precision_floating-point_format | |
| /// | |
| /// # NaN bit patterns | |
| /// | |
| /// This section defines the possible NaN bit patterns returned by floating-point operations. | |
| /// | |
| /// The bit pattern of a floating-point NaN value is defined by: | |
| /// - a sign bit. | |
| /// - a quiet/signaling bit. Rust assumes that the quiet/signaling bit being set to `1` indicates a | |
| /// quiet NaN (QNaN), and a value of `0` indicates a signaling NaN (SNaN). In the following we | |
| /// will hence just call it the "quiet bit". | |
| /// - a payload, which makes up the rest of the significand (i.e., the mantissa) except for the | |
| /// quiet bit. | |
| /// | |
| /// The rules for NaN values differ between *arithmetic* and *non-arithmetic* (or "bitwise") | |
| /// operations. The non-arithmetic operations are unary `-`, `abs`, `copysign`, `signum`, | |
| /// `{to,from}_bits`, `{to,from}_{be,le,ne}_bytes` and `is_sign_{positive,negative}`. These | |
| /// operations are guaranteed to exactly preserve the bit pattern of their input except for possibly | |
| /// changing the sign bit. | |
| /// | |
| /// The following rules apply when a NaN value is returned from an arithmetic operation: | |
| /// - The result has a non-deterministic sign. | |
| /// - The quiet bit and payload are non-deterministically chosen from | |
| /// the following set of options: | |
| /// | |
| /// - **Preferred NaN**: The quiet bit is set and the payload is all-zero. | |
| /// - **Quieting NaN propagation**: The quiet bit is set and the payload is copied from any input | |
| /// operand that is a NaN. If the inputs and outputs do not have the same payload size (i.e., for | |
| /// `as` casts), then | |
| /// - If the output is smaller than the input, low-order bits of the payload get dropped. | |
| /// - If the output is larger than the input, the payload gets filled up with 0s in the low-order | |
| /// bits. | |
| /// - **Unchanged NaN propagation**: The quiet bit and payload are copied from any input operand | |
| /// that is a NaN. If the inputs and outputs do not have the same size (i.e., for `as` casts), the | |
| /// same rules as for "quieting NaN propagation" apply, with one caveat: if the output is smaller | |
| /// than the input, dropping the low-order bits may result in a payload of 0; a payload of 0 is not | |
| /// possible with a signaling NaN (the all-0 significand encodes an infinity) so unchanged NaN | |
| /// propagation cannot occur with some inputs. | |
| /// - **Target-specific NaN**: The quiet bit is set and the payload is picked from a target-specific | |
| /// set of "extra" possible NaN payloads. The set can depend on the input operand values. | |
| /// See the table below for the concrete NaNs this set contains on various targets. | |
| /// | |
| /// In particular, if all input NaNs are quiet (or if there are no input NaNs), then the output NaN | |
| /// is definitely quiet. Signaling NaN outputs can only occur if they are provided as an input | |
| /// value. Similarly, if all input NaNs are preferred (or if there are no input NaNs) and the target | |
| /// does not have any "extra" NaN payloads, then the output NaN is guaranteed to be preferred. | |
| /// | |
| /// The non-deterministic choice happens when the operation is executed; i.e., the result of a | |
| /// NaN-producing floating-point operation is a stable bit pattern (looking at these bits multiple | |
| /// times will yield consistent results), but running the same operation twice with the same inputs | |
| /// can produce different results. | |
| /// | |
| /// These guarantees are neither stronger nor weaker than those of IEEE 754: IEEE 754 guarantees | |
| /// that an operation never returns a signaling NaN, whereas it is possible for operations like | |
| /// `SNAN * 1.0` to return a signaling NaN in Rust. Conversely, IEEE 754 makes no statement at all | |
| /// about which quiet NaN is returned, whereas Rust restricts the set of possible results to the | |
| /// ones listed above. | |
| /// | |
| /// Unless noted otherwise, the same rules also apply to NaNs returned by other library functions | |
| /// (e.g. `min`, `minimum`, `max`, `maximum`); other aspects of their semantics and which IEEE 754 | |
| /// operation they correspond to are documented with the respective functions. | |
| /// | |
| /// When an arithmetic floating-point operation is executed in `const` context, the same rules | |
| /// apply: no guarantee is made about which of the NaN bit patterns described above will be | |
| /// returned. The result does not have to match what happens when executing the same code at | |
| /// runtime, and the result can vary depending on factors such as compiler version and flags. | |
| /// | |
| /// ### Target-specific "extra" NaN values | |
| // FIXME: Is there a better place to put this? | |
| /// | |
| /// | `target_arch` | Extra payloads possible on this platform | | |
| /// |---------------|------------------------------------------| | |
| // Sorted alphabetically | |
| /// | `aarch64`, `arm`, `arm64ec`, `loongarch64`, `powerpc` (except when `target_abi = "spe"`), `powerpc64`, `riscv32`, `riscv64`, `s390x`, `x86`, `x86_64` | None | | |
| /// | `nvptx64` | All payloads | | |
| /// | `sparc`, `sparc64` | The all-one payload | | |
| /// | `wasm32`, `wasm64` | If all input NaNs are quiet with all-zero payload: None.<br> Otherwise: all payloads. | | |
| /// | |
| /// For targets not in this table, all payloads are possible. | |
| /// | |
| /// # Algebraic operators | |
| /// | |
| /// Algebraic operators of the form `a.algebraic_*(b)` allow the compiler to optimize | |
| /// floating point operations using all the usual algebraic properties of real numbers -- | |
| /// despite the fact that those properties do *not* hold on floating point numbers. | |
| /// This can give a great performance boost since it may unlock vectorization. | |
| /// | |
| /// The exact set of optimizations is unspecified but typically allows combining operations, | |
| /// rearranging series of operations based on mathematical properties, converting between division | |
| /// and reciprocal multiplication, and disregarding the sign of zero. This means that the results of | |
| /// elementary operations may have undefined precision, and "non-mathematical" values | |
| /// such as NaN, +/-Inf, or -0.0 may behave in unexpected ways, but these operations | |
| /// will never cause undefined behavior. | |
| /// | |
| /// Because of the unpredictable nature of compiler optimizations, the same inputs may produce | |
| /// different results even within a single program run. **Unsafe code must not rely on any property | |
| /// of the return value for soundness.** However, implementations will generally do their best to | |
| /// pick a reasonable tradeoff between performance and accuracy of the result. | |
| /// | |
| /// For example: | |
| /// | |
| /// ``` | |
| /// # #![allow(unused_assignments)] | |
| /// # let mut x: f32 = 0.0; | |
| /// # let a: f32 = 1.0; | |
| /// # let b: f32 = 2.0; | |
| /// # let c: f32 = 3.0; | |
| /// # let d: f32 = 4.0; | |
| /// x = a.algebraic_add(b).algebraic_add(c).algebraic_add(d); | |
| /// ``` | |
| /// | |
| /// May be rewritten as: | |
| /// | |
| /// ``` | |
| /// # #![allow(unused_assignments)] | |
| /// # let mut x: f32 = 0.0; | |
| /// # let a: f32 = 1.0; | |
| /// # let b: f32 = 2.0; | |
| /// # let c: f32 = 3.0; | |
| /// # let d: f32 = 4.0; | |
| /// x = ((a + b) + c) + d; // As written | |
| /// x = (a + c) + (b + d); // Reordered to shorten critical path and enable vectorization | |
| /// ``` | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_f32 {} | |
| #[rustc_doc_primitive = "f64"] | |
| #[doc(alias = "double")] | |
| /// A 64-bit floating-point type (specifically, the "binary64" type defined in IEEE 754-2008). | |
| /// | |
| /// This type is very similar to [`prim@f32`], but has increased precision by using twice as many | |
| /// bits. Please see [the documentation for `f32`](prim@f32) or [Wikipedia on double-precision | |
| /// values][wikipedia] for more information. | |
| /// | |
| /// *[See also the `std::f64::consts` module](crate::f64::consts).* | |
| /// | |
| /// [wikipedia]: https://en.wikipedia.org/wiki/Double-precision_floating-point_format | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_f64 {} | |
| #[rustc_doc_primitive = "f128"] | |
| #[doc(alias = "quad")] | |
| /// A 128-bit floating-point type (specifically, the "binary128" type defined in IEEE 754-2008). | |
| /// | |
| /// This type is very similar to [`prim@f32`] and [`prim@f64`], but has increased precision by using twice | |
| /// as many bits as `f64`. Please see [the documentation for `f32`](prim@f32) or [Wikipedia on | |
| /// quad-precision values][wikipedia] for more information. | |
| /// | |
| /// Note that no platforms have hardware support for `f128` without enabling target specific features, | |
| /// as for all instruction set architectures `f128` is considered an optional feature. Only Power ISA | |
| /// ("PowerPC") and RISC-V (via the Q extension) specify it, and only certain microarchitectures | |
| /// actually implement it. For x86-64 and AArch64, ISA support is not even specified, so it will always | |
| /// be a software implementation significantly slower than `f64`. | |
| /// | |
| /// _Note: `f128` support is incomplete. Many platforms will not be able to link math functions. On | |
| /// x86 in particular, these functions do link but their results are always incorrect._ | |
| /// | |
| /// *[See also the `std::f128::consts` module](crate::f128::consts).* | |
| /// | |
| /// [wikipedia]: https://en.wikipedia.org/wiki/Quadruple-precision_floating-point_format | |
| #[unstable(feature = "f128", issue = "116909")] | |
| mod prim_f128 {} | |
| #[rustc_doc_primitive = "i8"] | |
| // | |
| /// The 8-bit signed integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_i8 {} | |
| #[rustc_doc_primitive = "i16"] | |
| // | |
| /// The 16-bit signed integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_i16 {} | |
| #[rustc_doc_primitive = "i32"] | |
| // | |
| /// The 32-bit signed integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_i32 {} | |
| #[rustc_doc_primitive = "i64"] | |
| // | |
| /// The 64-bit signed integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_i64 {} | |
| #[rustc_doc_primitive = "i128"] | |
| // | |
| /// The 128-bit signed integer type. | |
| /// | |
| /// # ABI compatibility | |
| /// | |
| /// Rust's `i128` is expected to be ABI-compatible with C's `__int128` on platforms where the type | |
| /// is available, which includes most 64-bit architectures. If any platforms that do not specify | |
| /// `__int128` are updated to introduce it, the Rust `i128` ABI on relevant targets will be changed | |
| /// to match. | |
| /// | |
| /// It is important to note that in C, `__int128` is _not_ the same as `_BitInt(128)`, and the two | |
| /// types are allowed to have different ABIs. In particular, on x86, `__int128` and `_BitInt(128)` | |
| /// do not use the same alignment. `i128` is intended to always match `__int128` and does not | |
| /// attempt to match `_BitInt(128)` on platforms without `__int128`. | |
| #[stable(feature = "i128", since = "1.26.0")] | |
| mod prim_i128 {} | |
| #[rustc_doc_primitive = "u8"] | |
| // | |
| /// The 8-bit unsigned integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_u8 {} | |
| #[rustc_doc_primitive = "u16"] | |
| // | |
| /// The 16-bit unsigned integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_u16 {} | |
| #[rustc_doc_primitive = "u32"] | |
| // | |
| /// The 32-bit unsigned integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_u32 {} | |
| #[rustc_doc_primitive = "u64"] | |
| // | |
| /// The 64-bit unsigned integer type. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_u64 {} | |
| #[rustc_doc_primitive = "u128"] | |
| // | |
| /// The 128-bit unsigned integer type. | |
| /// | |
| /// Please see [the documentation for `i128`](prim@i128) for information on ABI compatibility. | |
| #[stable(feature = "i128", since = "1.26.0")] | |
| mod prim_u128 {} | |
| #[rustc_doc_primitive = "isize"] | |
| // | |
| /// The pointer-sized signed integer type. | |
| /// | |
| /// The size of this primitive is how many bytes it takes to reference any | |
| /// location in memory. For example, on a 32 bit target, this is 4 bytes | |
| /// and on a 64 bit target, this is 8 bytes. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_isize {} | |
| #[rustc_doc_primitive = "usize"] | |
| // | |
| /// The pointer-sized unsigned integer type. | |
| /// | |
| /// The size of this primitive is how many bytes it takes to reference any | |
| /// location in memory. For example, on a 32 bit target, this is 4 bytes | |
| /// and on a 64 bit target, this is 8 bytes. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_usize {} | |
| #[rustc_doc_primitive = "reference"] | |
| #[doc(alias = "&")] | |
| #[doc(alias = "&mut")] | |
| // | |
| /// References, `&T` and `&mut T`. | |
| /// | |
| /// A reference represents a borrow of some owned value. You can get one by using the `&` or `&mut` | |
| /// operators on a value, or by using a [`ref`](../std/keyword.ref.html) or | |
| /// <code>[ref](../std/keyword.ref.html) [mut](../std/keyword.mut.html)</code> pattern. | |
| /// | |
| /// For those familiar with pointers, a reference is just a pointer that is assumed to be | |
| /// aligned, not null, and pointing to memory containing a valid value of `T` - for example, | |
| /// <code>&[bool]</code> can only point to an allocation containing the integer values `1` | |
| /// ([`true`](../std/keyword.true.html)) or `0` ([`false`](../std/keyword.false.html)), but | |
| /// creating a <code>&[bool]</code> that points to an allocation containing | |
| /// the value `3` causes undefined behavior. | |
| /// In fact, <code>[Option]\<&T></code> has the same memory representation as a | |
| /// nullable but aligned pointer, and can be passed across FFI boundaries as such. | |
| /// | |
| /// In most cases, references can be used much like the original value. Field access, method | |
| /// calling, and indexing work the same (save for mutability rules, of course). In addition, the | |
| /// comparison operators transparently defer to the referent's implementation, allowing references | |
| /// to be compared the same as owned values. | |
| /// | |
| /// References have a lifetime attached to them, which represents the scope for which the borrow is | |
| /// valid. A lifetime is said to "outlive" another one if its representative scope is as long or | |
| /// longer than the other. The `'static` lifetime is the longest lifetime, which represents the | |
| /// total life of the program. For example, string literals have a `'static` lifetime because the | |
| /// text data is embedded into the binary of the program, rather than in an allocation that needs | |
| /// to be dynamically managed. | |
| /// | |
| /// `&mut T` references can be freely coerced into `&T` references with the same referent type, and | |
| /// references with longer lifetimes can be freely coerced into references with shorter ones. | |
| /// | |
| /// [`PartialEq`] will compare referenced values. It is possible to compare the reference address | |
| /// using reference-pointer coercion and raw pointer equality via [`ptr::eq`]. | |
| /// | |
| /// ``` | |
| /// use std::ptr; | |
| /// | |
| /// let five = 5; | |
| /// let other_five = 5; | |
| /// let five_ref = &five; | |
| /// let same_five_ref = &five; | |
| /// let other_five_ref = &other_five; | |
| /// | |
| /// assert!(five_ref == same_five_ref); | |
| /// assert!(five_ref == other_five_ref); | |
| /// | |
| /// assert!(ptr::eq(five_ref, same_five_ref)); | |
| /// assert!(!ptr::eq(five_ref, other_five_ref)); | |
| /// ``` | |
| /// | |
| /// For more information on how to use references, see [the book's section on "References and | |
| /// Borrowing"][book-refs]. | |
| /// | |
| /// [book-refs]: ../book/ch04-02-references-and-borrowing.html | |
| /// | |
| /// # Trait implementations | |
| /// | |
| /// The following traits are implemented for all `&T`, regardless of the type of its referent: | |
| /// | |
| /// * [`Copy`] | |
| /// * [`Clone`] \(Note that this will not defer to `T`'s `Clone` implementation if it exists!) | |
| /// * [`Deref`] | |
| /// * [`Borrow`] | |
| /// * [`fmt::Pointer`] | |
| /// | |
| /// [`Deref`]: ops::Deref | |
| /// [`Borrow`]: borrow::Borrow | |
| /// | |
| /// `&mut T` references get all of the above except `Copy` and `Clone` (to prevent creating | |
| /// multiple simultaneous mutable borrows), plus the following, regardless of the type of its | |
| /// referent: | |
| /// | |
| /// * [`DerefMut`] | |
| /// * [`BorrowMut`] | |
| /// | |
| /// [`DerefMut`]: ops::DerefMut | |
| /// [`BorrowMut`]: borrow::BorrowMut | |
| /// [bool]: prim@bool | |
| /// | |
| /// The following traits are implemented on `&T` references if the underlying `T` also implements | |
| /// that trait: | |
| /// | |
| /// * All the traits in [`std::fmt`] except [`fmt::Pointer`] (which is implemented regardless of the type of its referent) and [`fmt::Write`] | |
| /// * [`PartialOrd`] | |
| /// * [`Ord`] | |
| /// * [`PartialEq`] | |
| /// * [`Eq`] | |
| /// * [`AsRef`] | |
| /// * [`Fn`] \(in addition, `&T` references get [`FnMut`] and [`FnOnce`] if `T: Fn`) | |
| /// * [`Hash`] | |
| /// * [`ToSocketAddrs`] | |
| /// * [`Sync`] | |
| /// | |
| /// [`std::fmt`]: fmt | |
| /// [`Hash`]: hash::Hash | |
| /// [`ToSocketAddrs`]: ../std/net/trait.ToSocketAddrs.html | |
| /// | |
| /// `&mut T` references get all of the above except `ToSocketAddrs`, plus the following, if `T` | |
| /// implements that trait: | |
| /// | |
| /// * [`AsMut`] | |
| /// * [`FnMut`] \(in addition, `&mut T` references get [`FnOnce`] if `T: FnMut`) | |
| /// * [`fmt::Write`] | |
| /// * [`Iterator`] | |
| /// * [`DoubleEndedIterator`] | |
| /// * [`ExactSizeIterator`] | |
| /// * [`FusedIterator`] | |
| /// * [`TrustedLen`] | |
| /// * [`Send`] | |
| /// * [`io::Write`] | |
| /// * [`Read`] | |
| /// * [`Seek`] | |
| /// * [`BufRead`] | |
| /// | |
| /// [`FusedIterator`]: iter::FusedIterator | |
| /// [`TrustedLen`]: iter::TrustedLen | |
| /// [`Seek`]: ../std/io/trait.Seek.html | |
| /// [`BufRead`]: ../std/io/trait.BufRead.html | |
| /// [`Read`]: ../std/io/trait.Read.html | |
| /// [`io::Write`]: ../std/io/trait.Write.html | |
| /// | |
| /// In addition, `&T` references implement [`Send`] if and only if `T` implements [`Sync`]. | |
| /// | |
| /// Note that due to method call deref coercion, simply calling a trait method will act like they | |
| /// work on references as well as they do on owned values! The implementations described here are | |
| /// meant for generic contexts, where the final type `T` is a type parameter or otherwise not | |
| /// locally known. | |
| /// | |
| /// # Safety | |
| /// | |
| /// For all types, `T: ?Sized`, and for all `t: &T` or `t: &mut T`, when such values cross an API | |
| /// boundary, the following invariants must generally be upheld: | |
| /// | |
| /// * `t` is non-null | |
| /// * `t` is aligned to `align_of_val(t)` | |
| /// * if `size_of_val(t) > 0`, then `t` is dereferenceable for `size_of_val(t)` many bytes | |
| /// | |
| /// If `t` points at address `a`, being "dereferenceable" for N bytes means that the memory range | |
| /// `[a, a + N)` is all contained within a single [allocation]. | |
| /// | |
| /// For instance, this means that unsafe code in a safe function may assume these invariants are | |
| /// ensured of arguments passed by the caller, and it may assume that these invariants are ensured | |
| /// of return values from any safe functions it calls. | |
| /// | |
| /// For the other direction, things are more complicated: when unsafe code passes arguments | |
| /// to safe functions or returns values from safe functions, they generally must *at least* | |
| /// not violate these invariants. The full requirements are stronger, as the reference generally | |
| /// must point to data that is safe to use as type `T`. | |
| /// | |
| /// It is not decided yet whether unsafe code may violate these invariants temporarily on internal | |
| /// data. As a consequence, unsafe code which violates these invariants temporarily on internal data | |
| /// may be unsound or become unsound in future versions of Rust depending on how this question is | |
| /// decided. | |
| /// | |
| /// [allocation]: ptr#allocation | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_ref {} | |
| #[rustc_doc_primitive = "fn"] | |
| // | |
| /// Function pointers, like `fn(usize) -> bool`. | |
| /// | |
| /// *See also the traits [`Fn`], [`FnMut`], and [`FnOnce`].* | |
| /// | |
| /// Function pointers are pointers that point to *code*, not data. They can be called | |
| /// just like functions. Like references, function pointers are, among other things, assumed to | |
| /// not be null, so if you want to pass a function pointer over FFI and be able to accommodate null | |
| /// pointers, make your type [`Option<fn()>`](core::option#options-and-pointers-nullable-pointers) | |
| /// with your required signature. | |
| /// | |
| /// Note that FFI requires additional care to ensure that the ABI for both sides of the call match. | |
| /// The exact requirements are not currently documented. | |
| /// | |
| /// ### Safety | |
| /// | |
| /// Plain function pointers are obtained by casting either plain functions, or closures that don't | |
| /// capture an environment: | |
| /// | |
| /// ``` | |
| /// fn add_one(x: usize) -> usize { | |
| /// x + 1 | |
| /// } | |
| /// | |
| /// let ptr: fn(usize) -> usize = add_one; | |
| /// assert_eq!(ptr(5), 6); | |
| /// | |
| /// let clos: fn(usize) -> usize = |x| x + 5; | |
| /// assert_eq!(clos(5), 10); | |
| /// ``` | |
| /// | |
| /// In addition to varying based on their signature, function pointers come in two flavors: safe | |
| /// and unsafe. Plain `fn()` function pointers can only point to safe functions, | |
| /// while `unsafe fn()` function pointers can point to safe or unsafe functions. | |
| /// | |
| /// ``` | |
| /// fn add_one(x: usize) -> usize { | |
| /// x + 1 | |
| /// } | |
| /// | |
| /// unsafe fn add_one_unsafely(x: usize) -> usize { | |
| /// x + 1 | |
| /// } | |
| /// | |
| /// let safe_ptr: fn(usize) -> usize = add_one; | |
| /// | |
| /// //ERROR: mismatched types: expected normal fn, found unsafe fn | |
| /// //let bad_ptr: fn(usize) -> usize = add_one_unsafely; | |
| /// | |
| /// let unsafe_ptr: unsafe fn(usize) -> usize = add_one_unsafely; | |
| /// let really_safe_ptr: unsafe fn(usize) -> usize = add_one; | |
| /// ``` | |
| /// | |
| /// ### ABI | |
| /// | |
| /// On top of that, function pointers can vary based on what ABI they use. This | |
| /// is achieved by adding the `extern` keyword before the type, followed by the | |
| /// ABI in question. The default ABI is "Rust", i.e., `fn()` is the exact same | |
| /// type as `extern "Rust" fn()`. A pointer to a function with C ABI would have | |
| /// type `extern "C" fn()`. | |
| /// | |
| /// `extern "ABI" { ... }` blocks declare functions with ABI "ABI". The default | |
| /// here is "C", i.e., functions declared in an `extern {...}` block have "C" | |
| /// ABI. | |
| /// | |
| /// For more information and a list of supported ABIs, see [the nomicon's | |
| /// section on foreign calling conventions][nomicon-abi]. | |
| /// | |
| /// [nomicon-abi]: ../nomicon/ffi.html#foreign-calling-conventions | |
| /// | |
| /// ### Variadic functions | |
| /// | |
| /// Extern function declarations with the "C" or "cdecl" ABIs can also be *variadic*, allowing them | |
| /// to be called with a variable number of arguments. Normal Rust functions, even those with an | |
| /// `extern "ABI"`, cannot be variadic. For more information, see [the nomicon's section on | |
| /// variadic functions][nomicon-variadic]. | |
| /// | |
| /// [nomicon-variadic]: ../nomicon/ffi.html#variadic-functions | |
| /// | |
| /// ### Creating function pointers | |
| /// | |
| /// When `bar` is the name of a function, then the expression `bar` is *not* a | |
| /// function pointer. Rather, it denotes a value of an unnameable type that | |
| /// uniquely identifies the function `bar`. The value is zero-sized because the | |
| /// type already identifies the function. This has the advantage that "calling" | |
| /// the value (it implements the `Fn*` traits) does not require dynamic | |
| /// dispatch. | |
| /// | |
| /// This zero-sized type *coerces* to a regular function pointer. For example: | |
| /// | |
| /// ```rust | |
| /// fn bar(x: i32) {} | |
| /// | |
| /// let not_bar_ptr = bar; // `not_bar_ptr` is zero-sized, uniquely identifying `bar` | |
| /// assert_eq!(size_of_val(¬_bar_ptr), 0); | |
| /// | |
| /// let bar_ptr: fn(i32) = not_bar_ptr; // force coercion to function pointer | |
| /// assert_eq!(size_of_val(&bar_ptr), size_of::<usize>()); | |
| /// | |
| /// let footgun = &bar; // this is a shared reference to the zero-sized type identifying `bar` | |
| /// ``` | |
| /// | |
| /// The last line shows that `&bar` is not a function pointer either. Rather, it | |
| /// is a reference to the function-specific ZST. `&bar` is basically never what you | |
| /// want when `bar` is a function. | |
| /// | |
| /// ### Casting to and from integers | |
| /// | |
| /// You can cast function pointers directly to integers: | |
| /// | |
| /// ```rust | |
| /// let fnptr: fn(i32) -> i32 = |x| x+2; | |
| /// let fnptr_addr = fnptr as usize; | |
| /// ``` | |
| /// | |
| /// However, a direct cast back is not possible. You need to use `transmute`: | |
| /// | |
| /// ```rust | |
| /// # #[cfg(not(miri))] { // disabled because it fails with -Zmiri-strict-provenance | |
| /// # let fnptr: fn(i32) -> i32 = |x| x+2; | |
| /// # let fnptr_addr = fnptr as usize; | |
| /// let fnptr = fnptr_addr as *const (); | |
| /// let fnptr: fn(i32) -> i32 = unsafe { std::mem::transmute(fnptr) }; | |
| /// assert_eq!(fnptr(40), 42); | |
| /// # } | |
| /// ``` | |
| /// | |
| /// Crucially, we `as`-cast to a raw pointer before `transmute`ing to a function pointer. | |
| /// This avoids an integer-to-pointer `transmute`, which can be problematic. | |
| /// Transmuting between raw pointers and function pointers (i.e., two pointer types) is fine. | |
| /// | |
| /// Note that all of this is not portable to platforms where function pointers and data pointers | |
| /// have different sizes. | |
| /// | |
| /// ### ABI compatibility | |
| /// [ABI compatibility]: #abi-compatibility | |
| /// | |
| /// Generally, when a function is declared with one signature and called via a function pointer with | |
| /// a different signature, the two signatures must be *ABI-compatible* or else calling the function | |
| /// via that function pointer is Undefined Behavior. ABI compatibility is a lot stricter than merely | |
| /// having the same memory layout; for example, even if `i32` and `f32` have the same size and | |
| /// alignment, they might be passed in different registers and hence not be ABI-compatible. | |
| /// | |
| /// ABI compatibility as a concern only arises in code that alters the type of function pointers, | |
| /// and code that imports functions via `extern` blocks. Altering the type of function pointers is | |
| /// wildly unsafe (as in, a lot more unsafe than even [`transmute_copy`][mem::transmute_copy]), and | |
| /// should only occur in the most exceptional circumstances. Most Rust code just imports functions | |
| /// via `use`. So, most likely you do not have to worry about ABI compatibility. | |
| /// | |
| /// But assuming such circumstances, what are the rules? For this section, we are only considering | |
| /// the ABI of direct Rust-to-Rust calls (with both definition and callsite visible to the | |
| /// Rust compiler), not linking in general -- once functions are imported via `extern` blocks, there | |
| /// are more things to consider that we do not go into here. Note that this also applies to | |
| /// passing/calling functions across language boundaries via function pointers. | |
| /// | |
| /// **Nothing in this section should be taken as a guarantee for non-Rust-to-Rust calls, even with | |
| /// types from `core::ffi` or `libc`**. | |
| /// | |
| /// For two signatures to be considered *ABI-compatible*, they must use a compatible ABI string, | |
| /// must take the same number of arguments, and the individual argument types and the return types | |
| /// must be ABI-compatible. The ABI string is declared via `extern "ABI" fn(...) -> ...`; note that | |
| /// `fn name(...) -> ...` implicitly uses the `"Rust"` ABI string and `extern fn name(...) -> ...` | |
| /// implicitly uses the `"C"` ABI string. | |
| /// | |
| /// The ABI strings are guaranteed to be compatible if they are the same, or if the caller ABI | |
| /// string is `$X-unwind` and the callee ABI string is `$X`, where `$X` is one of the following: | |
| /// "C", "aapcs", "fastcall", "stdcall", "system", "sysv64", "thiscall", "vectorcall", "win64". | |
| /// | |
| /// The following types are guaranteed to be ABI-compatible: | |
| /// | |
| /// - `*const T`, `*mut T`, `&T`, `&mut T`, `Box<T>` (specifically, only `Box<T, Global>`), and | |
| /// `NonNull<T>` are all ABI-compatible with each other for all `T`. They are also ABI-compatible | |
| /// with each other for _different_ `T` if they have the same metadata type (`<T as | |
| /// Pointee>::Metadata`). However, see the [Control Flow Integrity][cfi-docs] docs for caveats. | |
| /// - `usize` is ABI-compatible with the `uN` integer type of the same size, and likewise `isize` is | |
| /// ABI-compatible with the `iN` integer type of the same size. | |
| /// - `char` is ABI-compatible with `u32`. | |
| /// - Any two `fn` (function pointer) types are ABI-compatible with each other if they have the same | |
| /// ABI string or the ABI string only differs in a trailing `-unwind`, independent of the rest of | |
| /// their signature. (This means you can pass `fn()` to a function expecting `fn(i32)`, and the | |
| /// call will be valid ABI-wise. The callee receives the result of transmuting the function pointer | |
| /// from `fn()` to `fn(i32)`; that transmutation is itself a well-defined operation, it's just | |
| /// almost certainly UB to later call that function pointer.) | |
| /// - Any two types with size 0 and alignment 1 are ABI-compatible. | |
| /// - A `repr(transparent)` type `T` is ABI-compatible with its unique non-trivial field, i.e., the | |
| /// unique field that doesn't have size 0 and alignment 1 (if there is such a field). | |
| /// - `i32` is ABI-compatible with `NonZero<i32>`, and similar for all other integer types. | |
| /// - If `T` is guaranteed to be subject to the [null pointer | |
| /// optimization](option/index.html#representation), and `E` is an enum satisfying the following | |
| /// requirements, then `T` and `E` are ABI-compatible. Such an enum `E` is called "option-like". | |
| /// - The enum `E` uses the [`Rust` representation], and is not modified by the `align` or | |
| /// `packed` representation modifiers. | |
| /// - The enum `E` has exactly two variants. | |
| /// - One variant has exactly one field, of type `T`. | |
| /// - All fields of the other variant are zero-sized with 1-byte alignment. | |
| /// | |
| /// Furthermore, ABI compatibility satisfies the following general properties: | |
| /// | |
| /// - Every type is ABI-compatible with itself. | |
| /// - If `T1` and `T2` are ABI-compatible and `T2` and `T3` are ABI-compatible, then so are `T1` and | |
| /// `T3` (i.e., ABI-compatibility is transitive). | |
| /// - If `T1` and `T2` are ABI-compatible, then so are `T2` and `T1` (i.e., ABI-compatibility is | |
| /// symmetric). | |
| /// | |
| /// More signatures can be ABI-compatible on specific targets, but that should not be relied upon | |
| /// since it is not portable and not a stable guarantee. | |
| /// | |
| /// Noteworthy cases of types *not* being ABI-compatible in general are: | |
| /// * `bool` vs `u8`, `i32` vs `u32`, `char` vs `i32`: on some targets, the calling conventions for | |
| /// these types differ in terms of what they guarantee for the remaining bits in the register that | |
| /// are not used by the value. | |
| /// * `i32` vs `f32` are not compatible either, as has already been mentioned above. | |
| /// * `struct Foo(u32)` and `u32` are not compatible (without `repr(transparent)`) since structs are | |
| /// aggregate types and often passed in a different way than primitives like `i32`. | |
| /// | |
| /// Note that these rules describe when two completely known types are ABI-compatible. When | |
| /// considering ABI compatibility of a type declared in another crate (including the standard | |
| /// library), consider that any type that has a private field or the `#[non_exhaustive]` attribute | |
| /// may change its layout as a non-breaking update unless documented otherwise -- so for instance, | |
| /// even if such a type is a 1-ZST or `repr(transparent)` right now, this might change with any | |
| /// library version bump. | |
| /// | |
| /// If the declared signature and the signature of the function pointer are ABI-compatible, then the | |
| /// function call behaves as if every argument was [`transmute`d][mem::transmute] from the | |
| /// type in the function pointer to the type at the function declaration, and the return value is | |
| /// [`transmute`d][mem::transmute] from the type in the declaration to the type in the | |
| /// pointer. All the usual caveats and concerns around transmutation apply; for instance, if the | |
| /// function expects a `NonZero<i32>` and the function pointer uses the ABI-compatible type | |
| /// `Option<NonZero<i32>>`, and the value used for the argument is `None`, then this call is Undefined | |
| /// Behavior since transmuting `None::<NonZero<i32>>` to `NonZero<i32>` violates the non-zero | |
| /// requirement. | |
| /// | |
| /// [cfi-docs]: https://doc.rust-lang.org/beta/unstable-book/compiler-flags/sanitizer.html#controlflowintegrity | |
| /// | |
| /// ### Trait implementations | |
| /// | |
| /// In this documentation the shorthand `fn(T₁, T₂, …, Tₙ)` is used to represent non-variadic | |
| /// function pointers of varying length. Note that this is a convenience notation to avoid | |
| /// repetitive documentation, not valid Rust syntax. | |
| /// | |
| /// The following traits are implemented for function pointers with any number of arguments and | |
| /// any ABI. | |
| /// | |
| /// * [`PartialEq`] | |
| /// * [`Eq`] | |
| /// * [`PartialOrd`] | |
| /// * [`Ord`] | |
| /// * [`Hash`] | |
| /// * [`Pointer`] | |
| /// * [`Debug`] | |
| /// * [`Clone`] | |
| /// * [`Copy`] | |
| /// * [`Send`] | |
| /// * [`Sync`] | |
| /// * [`Unpin`] | |
| /// * [`UnwindSafe`] | |
| /// * [`RefUnwindSafe`] | |
| /// | |
| /// Note that while this type implements `PartialEq`, comparing function pointers is unreliable: | |
| /// pointers to the same function can compare inequal (because functions are duplicated in multiple | |
| /// codegen units), and pointers to *different* functions can compare equal (since identical | |
| /// functions can be deduplicated within a codegen unit). | |
| /// | |
| /// [`Hash`]: hash::Hash | |
| /// [`Pointer`]: fmt::Pointer | |
| /// [`UnwindSafe`]: panic::UnwindSafe | |
| /// [`RefUnwindSafe`]: panic::RefUnwindSafe | |
| /// [`Rust` representation]: <https://doc.rust-lang.org/reference/type-layout.html#the-rust-representation> | |
| /// | |
| /// In addition, all *safe* function pointers implement [`Fn`], [`FnMut`], and [`FnOnce`], because | |
| /// these traits are specially known to the compiler. | |
| #[stable(feature = "rust1", since = "1.0.0")] | |
| mod prim_fn {} | |
| // Required to make auto trait impls render. | |
| // See src/librustdoc/passes/collect_trait_impls.rs:collect_trait_impls | |
| #[doc(hidden)] | |
| impl<Ret, T> fn(T) -> Ret {} |