buffer_trait/

lib.rs

#![doc = include_str!("../README.md")]
#![cfg_attr(not(test), no_std)]
#![cfg_attr(docsrs, feature(doc_cfg))]

#[cfg(feature = "alloc")]
extern crate alloc;

#[cfg(feature = "alloc")]
use alloc::vec::Vec;
use core::marker::PhantomData;
use core::mem::MaybeUninit;
use core::slice;

/// A memory buffer that may be uninitialized.
///
/// There are three types that implement the `Buffer` trait, and the type you
/// use determines the return type of the functions that use it:
///
/// | If you pass a…           | You get back a… |
/// | ------------------------ | --------------- |
/// | `&mut [u8]`              | `usize`, indicating the number of elements initialized. |
/// | `&mut [MaybeUninit<u8>]` | `(&mut [u8], &mut [MaybeUninit<u8>])`, holding the initialized and uninitialized subslices. |
/// | [`SpareCapacity`]        | `usize`, indicating the number of elements initialized. And the `Vec` is extended. |
/// | `&mut`[`Cursor<T, B>`]   | `usize`, indicating the number of elements initialized. And the `Cursor` is advanced. Be sure to call `Cursor::finish` when you're done writing to it. |
///
/// # Examples
///
/// Passing a `&mut [u8]`:
///
/// ```
/// # use rustix::io::read;
/// # fn example(fd: rustix::fd::BorrowedFd) -> rustix::io::Result<()> {
/// let mut buf = [0_u8; 64];
/// let nread = read(fd, &mut buf)?;
/// // `nread` is the number of bytes read.
/// # Ok(())
/// # }
/// ```
///
/// Passing a `&mut [MaybeUninit<u8>]`:
///
/// ```
/// # use rustix::io::read;
/// # use std::mem::MaybeUninit;
/// # fn example(fd: rustix::fd::BorrowedFd) -> rustix::io::Result<()> {
/// let mut buf = [MaybeUninit::<u8>::uninit(); 64];
/// let (init, uninit) = read(fd, &mut buf)?;
/// // `init` is a `&mut [u8]` with the initialized bytes.
/// // `uninit` is a `&mut [MaybeUninit<u8>]` with the remaining bytes.
/// # Ok(())
/// # }
/// ```
///
/// Passing a [`SpareCapacity`], via the [`spare_capacity`] helper function:
///
/// ```
/// # use rustix::io::read;
/// # use rustix::buffer::spare_capacity;
/// # fn example(fd: rustix::fd::BorrowedFd) -> rustix::io::Result<()> {
/// let mut buf = Vec::with_capacity(64);
/// let nread = read(fd, spare_capacity(&mut buf))?;
/// // `nread` is the number of bytes read.
/// // Also, `buf.len()` is now `nread` elements longer than it was before.
/// # Ok(())
/// # }
/// ```
///
/// Passing a `&mut`[`Cursor<T, B>`]:
///
/// ```no_run,ignore
/// # use rustix::io::read;
/// # fn example(fd: rustix::fd::BorrowedFd) -> rustix::io::Result<()> {
/// let mut buf = [0_u8; 64];
/// let mut cursor = Cursor::new(spare_capacity(&mut buf));
/// let _nread = read(fd, &mut cursor)?;
/// let _nread = read(fd, &mut cursor)?;
/// let _nread = read(fd, &mut cursor)?;
/// let total_nread = cursor.finish();
/// // `total_nread` is the total number of bytes read.
/// // Also, `buf.len()` is now `total_nread` elements longer than it was before.
/// # Ok(())
/// # }
/// ```
///
/// # Guide to error messages
///
/// Sometimes code using `Buffer` can encounter non-obvious error messages.
/// Here are some we've encountered, along with ways to fix them.
///
/// If you see errors like
/// "cannot move out of `self` which is behind a mutable reference"
/// and
/// "move occurs because `x` has type `&mut [u8]`, which does not implement the `Copy` trait",
/// replace `x` with `&mut *x`. See `error_buffer_wrapper` in
/// examples/buffer_errors.rs.
///
/// If you see errors like
/// "type annotations needed"
/// and
/// "cannot infer type of the type parameter `Buf` declared on the function `read`",
/// you may need to change a `&mut []` to `&mut [0_u8; 0]`. See
/// `error_empty_slice` in examples/buffer_errors.rs.
///
/// If you see errors like
/// "the trait bound `[MaybeUninit<u8>; 1]: Buffer<u8>` is not satisfied",
/// add a `&mut` to pass the array by reference instead of by value. See
/// `error_array_by_value` in examples/buffer_errors.rs.
///
/// If you see errors like
/// "cannot move out of `x`, a captured variable in an `FnMut` closure",
/// try replacing `x` with `&mut *x`, or, if that doesn't work, try moving a
/// `let` into the closure body. See `error_retry_closure` and
/// `error_retry_indirect_closure` in examples/buffer_errors.rs.
///
/// If you see errors like
/// "captured variable cannot escape `FnMut` closure body",
/// use an explicit loop instead of `retry_on_intr`, assuming you're using
/// that. See `error_retry_closure_uninit` in examples/buffer_errors.rs.
///
/// [`&mut Cursor<T, B>`]: crate::Cursor
pub trait Buffer<T> where Self: Sized {
    /// The type of the value returned by functions with `Buffer` arguments.
    type Output;

    /// Return the length of the underlying buffer.
    fn buffer_len(&self) -> usize;

    /// Return a raw mutable pointer to and length of the underlying buffer.
    ///
    /// After using this pointer and length to initialize some elements, call
    /// `assume_init` to declare how many were initialized.
    fn parts_mut(&mut self) -> (*mut T, usize);

    /// Assert that `len` elements were written to, and provide a return value.
    ///
    /// # Safety
    ///
    /// At least the first `len` elements of the buffer must be initialized.
    unsafe fn assume_init(self, len: usize) -> Self::Output;

    /// Return a `Cursor` for safely writing to the buffer.
    ///
    /// Return a `Cursor`. Calling `.finish()` on the cursor returns the
    /// `Self::Output`.
    ///
    /// This is an alternative to `parts_mut`/`assume_init` which allows
    /// callers to avoid using `unsafe`.
    fn cursor(self) -> Cursor<T, Self> {
        Cursor::new(self)
    }
}

impl<T> Buffer<T> for &mut [T] {
    type Output = usize;

    #[inline]
    fn buffer_len(&self) -> usize {
        self.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr(), self.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        len
    }
}

impl<T, const N: usize> Buffer<T> for &mut [T; N] {
    type Output = usize;

    #[inline]
    fn buffer_len(&self) -> usize {
        N
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr(), N)
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        len
    }
}

// `Vec` implements `DerefMut` to `&mut [T]`, however it doesn't get
// auto-derefed in a `impl Buffer<u8>`, so we add this `impl` so that our users
// don't have to add an extra `*` in these situations.
#[cfg(feature = "alloc")]
impl<T> Buffer<T> for &mut Vec<T> {
    type Output = usize;

    #[inline]
    fn buffer_len(&self) -> usize {
        self.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr(), self.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        len
    }
}

impl<'a, T> Buffer<T> for &'a mut [MaybeUninit<T>] {
    type Output = (&'a mut [T], &'a mut [MaybeUninit<T>]);

    #[inline]
    fn buffer_len(&self) -> usize {
        self.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr().cast(), self.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        unsafe {
            let (init, uninit) = self.split_at_mut(len);

            // Convert `init` from `&mut [MaybeUninit<T>]` to `&mut [T]`.
            //
            // SAFETY: The user asserts that the slice is now initialized.
            let init = slice::from_raw_parts_mut(init.as_mut_ptr().cast::<T>(), init.len());

            (init, uninit)
        }
    }
}

impl<'a, T, const N: usize> Buffer<T> for &'a mut [MaybeUninit<T>; N] {
    type Output = (&'a mut [T], &'a mut [MaybeUninit<T>]);

    #[inline]
    fn buffer_len(&self) -> usize {
        self.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr().cast(), self.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        unsafe {
            let (init, uninit) = self.split_at_mut(len);

            // SAFETY: The user asserts that the slice is now initialized.
            let init = slice::from_raw_parts_mut(init.as_mut_ptr().cast::<T>(), init.len());

            (init, uninit)
        }
    }
}

#[cfg(feature = "alloc")]
impl<'a, T> Buffer<T> for &'a mut Vec<MaybeUninit<T>> {
    type Output = (&'a mut [T], &'a mut [MaybeUninit<T>]);

    #[inline]
    fn buffer_len(&self) -> usize {
        self.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        (self.as_mut_ptr().cast(), self.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        unsafe {
            let (init, uninit) = self.split_at_mut(len);

            // SAFETY: The user asserts that the slice is now initialized.
            let init = slice::from_raw_parts_mut(init.as_mut_ptr().cast::<T>(), init.len());

            (init, uninit)
        }
    }
}

/// A type that implements [`Buffer`] by appending to a `Vec`, up to its
/// capacity.
///
/// To use this, use the [`spare_capacity`] function.
///
/// Because this uses the capacity, and never reallocates, the `Vec` should
/// have some non-empty spare capacity.
#[cfg(feature = "alloc")]
#[cfg_attr(docsrs, doc(cfg(feature = "alloc")))]
pub struct SpareCapacity<'a, T>(&'a mut Vec<T>);

/// Construct a [`SpareCapacity`], which implements [`Buffer`].
///
/// This wraps a `&mut Vec` and uses the spare capacity of the `Vec` as the
/// buffer to receive data in, automatically calling `set_len` on the `Vec` to
/// set the length to include the received elements.
///
/// This uses the existing capacity, and never allocates, so the `Vec` should
/// have some non-empty spare capacity!
///
/// # Examples
///
/// ```
/// # fn test(input: rustix::fd::BorrowedFd) -> rustix::io::Result<()> {
/// use rustix::buffer::spare_capacity;
/// use rustix::io::{Errno, read};
///
/// let mut buf = Vec::with_capacity(1024);
/// match read(input, spare_capacity(&mut buf)) {
///     Ok(0) => { /* end of stream */ }
///     Ok(n) => { /* `buf` is now `n` bytes longer */ }
///     Err(Errno::INTR) => { /* `buf` is unmodified */ }
///     Err(e) => {
///         return Err(e);
///     }
/// }
///
/// # Ok(())
/// # }
/// ```
#[cfg(feature = "alloc")]
#[cfg_attr(docsrs, doc(cfg(feature = "alloc")))]
pub fn spare_capacity<'a, T>(v: &'a mut Vec<T>) -> SpareCapacity<'a, T> {
    debug_assert_ne!(
        v.capacity(),
        0,
        "`extend` uses spare capacity, and never allocates new memory, so the `Vec` passed to it \
         should have some spare capacity."
    );

    SpareCapacity(v)
}

#[cfg(feature = "alloc")]
impl<'a, T> Buffer<T> for SpareCapacity<'a, T> {
    /// The mutated `Vec` reflects the number of bytes read. We also return
    /// this number, and a value of 0 indicates the end of the stream has
    /// been reached.
    type Output = usize;

    #[inline]
    fn buffer_len(&self) -> usize {
        self.0.capacity() - self.0.len()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        let spare = self.0.spare_capacity_mut();
        (spare.as_mut_ptr().cast(), spare.len())
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        unsafe {
            // We initialized `len` elements; extend the `Vec` to include them.
            self.0.set_len(self.0.len() + len);
            len
        }
    }
}

/// A cursor for safely writing into an uninitialized buffer.
///
/// # Examples
///
/// ```ignore
/// # use buffer_trait::{Cursor, spare_capacity};
/// let mut buf = Vec::with_capacity(256);
/// let mut cursor = Cursor::new(spare_capacity(&mut buf));
/// let _nread = read(&input, &mut cursor).unwrap();
/// let _nread = read(&input, &mut cursor).unwrap();
/// let _nread = read(&input, &mut cursor).unwrap();
/// let total_read = cursor.finish();
/// ```
pub struct Cursor<T, B: Buffer<T>> {
    pos: usize,
    b: B,
    phantom: PhantomData<T>,
}

impl<T, B: Buffer<T>> Cursor<T, B> {
    /// Construct a new `Cursor`.
    pub fn new(b: B) -> Self {
        Self {
            pos: 0,
            b,
            phantom: PhantomData,
        }
    }

    /// Return the remaining amount of space in the buffer.
    pub fn remaining(&self) -> usize {
        self.b.buffer_len() - self.pos
    }

    /// Write an element to the buffer.
    ///
    /// # Panics
    ///
    /// Panics if this cursor has already reached the end of the buffer.
    pub fn write(&mut self, t: T) {
        let (ptr, len) = self.b.parts_mut();

        assert!(self.pos < len);

        // SAFETY: `Cursor::new` requires that `ptr` and `len` are valid, and we
        // just bounds-checked `pos`.
        unsafe {
            ptr.add(self.pos).write(t);
        }

        // Count how many elements we've initialized.
        self.pos += 1;
    }

    /// Write multiple elements to the buffer.
    ///
    /// # Panics
    ///
    /// Panics if this cursor is already within `t.len()` elements of the
    /// end of the buffer.
    pub fn write_slice(&mut self, t: &[T])
    where
        T: Copy,
    {
        let (ptr, len) = self.b.parts_mut();

        assert!(len - self.pos >= t.len());

        // SAFETY: We've required that `T` implements `Copy`, bounds-checked
        // the length, and `parts_mut()` should have given us a correct pointer
        // and length.
        unsafe {
            core::ptr::copy_nonoverlapping(t.as_ptr(), ptr, t.len());
        }

        // Count how many elements we've initialized.
        self.pos += t.len();
    }

    /// Finish writing to the buffer and return the output value.
    pub fn finish(self) -> B::Output {
        // SAFETY: `Cursor` ensures that exactly `pos` bytes have been written.
        unsafe { self.b.assume_init(self.pos) }
    }
}

impl<T, B: Buffer<T>> Buffer<T> for &mut Cursor<T, B> {
    /// The mutated `Cursor` reflects the number of bytes read. We also return
    /// this number, and a value of 0 indicates the end of the stream has
    /// been reached.
    type Output = usize;

    #[inline]
    fn buffer_len(&self) -> usize {
        self.remaining()
    }

    #[inline]
    fn parts_mut(&mut self) -> (*mut T, usize) {
        let parts = self.b.parts_mut();
        // SAFETY: We ensure that `self.pos` is always within the bounds
        // of the buffer.
        unsafe { (parts.0.add(self.pos), parts.1 - self.pos) }
    }

    #[inline]
    unsafe fn assume_init(self, len: usize) -> Self::Output {
        // Count how many elements we've initialized.
        self.pos += len;
        len
    }
}

#[cfg(test)]
mod tests {
    #[allow(unused_imports)]
    use super::*;

    /// Test type signatures.
    #[cfg(not(windows))]
    #[test]
    fn test_compilation() {
        use core::mem::MaybeUninit;

        fn read<B: Buffer<u8>>(b: B) -> Result<B::Output, ()> {
            Ok(b.cursor().finish())
        }

        let mut buf = vec![0_u8; 3];
        buf.reserve(32);
        let _x: usize = read(spare_capacity(&mut buf)).unwrap();
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = read(buf.spare_capacity_mut()).unwrap();
        let _x: usize = read(&mut buf).unwrap();
        let _x: usize = read(&mut *buf).unwrap();
        let _x: usize = read(&mut buf[..]).unwrap();
        let _x: usize = read(&mut (*buf)[..]).unwrap();

        let mut buf = [0, 0, 0];
        let _x: usize = read(&mut buf).unwrap();
        let _x: usize = read(&mut buf[..]).unwrap();

        let mut buf = [
            MaybeUninit::uninit(),
            MaybeUninit::uninit(),
            MaybeUninit::uninit(),
        ];
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = read(&mut buf).unwrap();
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = read(&mut buf[..]).unwrap();

        let mut buf = vec![
            MaybeUninit::uninit(),
            MaybeUninit::uninit(),
            MaybeUninit::uninit(),
        ];
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = read(&mut buf).unwrap();
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = read(&mut buf[..]).unwrap();

        let mut buf = Cursor::new(&mut buf);
        let _x: usize = read(&mut buf).unwrap();
        let _x: (&mut [u8], &mut [MaybeUninit<u8>]) = buf.finish();
    }

    /// Test passing a `&mut [u8]` to `read`.
    #[cfg(not(windows))]
    #[test]
    fn test_slice() {
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut buf = [0_u8; 64];
        let nread = read(&input, &mut buf).unwrap();
        assert_eq!(nread, buf.len());
        assert_eq!(&buf[..39], b"#![doc = include_str!(\"../README.md\")]\n");
        input.seek(SeekFrom::End(-1)).unwrap();
        let nread = read(&input, &mut buf).unwrap();
        assert_eq!(nread, 1);
        assert_eq!(buf[0], b'\n');
        input.seek(SeekFrom::End(0)).unwrap();
        let nread = read(&input, &mut buf).unwrap();
        assert_eq!(nread, 0);
    }

    /// Test passing a `&mut [MaybeUninit<u8>]` to `read`.
    #[cfg(not(windows))]
    #[test]
    fn test_slice_uninit() {
        use core::mem::MaybeUninit;
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut buf = [MaybeUninit::<u8>::uninit(); 64];
        let (init, uninit) = read(&input, &mut buf).unwrap();
        assert_eq!(uninit.len(), 0);
        assert_eq!(&init[..39], b"#![doc = include_str!(\"../README.md\")]\n");
        assert_eq!(init.len(), buf.len());
        assert_eq!(
            unsafe { core::mem::transmute::<&mut [MaybeUninit<u8>], &mut [u8]>(&mut buf[..39]) },
            b"#![doc = include_str!(\"../README.md\")]\n"
        );
        input.seek(SeekFrom::End(-1)).unwrap();
        let (init, uninit) = read(&input, &mut buf).unwrap();
        assert_eq!(init.len(), 1);
        assert_eq!(init[0], b'\n');
        assert_eq!(uninit.len(), buf.len() - 1);
        input.seek(SeekFrom::End(0)).unwrap();
        let (init, uninit) = read(&input, &mut buf).unwrap();
        assert_eq!(init.len(), 0);
        assert_eq!(uninit.len(), buf.len());
    }

    /// Test passing a `SpareCapacity` to `read`.
    #[cfg(not(windows))]
    #[test]
    fn test_spare_capacity() {
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut buf = Vec::with_capacity(64);
        let nread = read(&input, spare_capacity(&mut buf)).unwrap();
        assert_eq!(nread, buf.capacity());
        assert_eq!(nread, buf.len());
        assert_eq!(&buf[..39], b"#![doc = include_str!(\"../README.md\")]\n");
        buf.clear();
        input.seek(SeekFrom::End(-1)).unwrap();
        let nread = read(&input, spare_capacity(&mut buf)).unwrap();
        assert_eq!(nread, 1);
        assert_eq!(buf.len(), 1);
        assert_eq!(buf[0], b'\n');
        buf.clear();
        input.seek(SeekFrom::End(0)).unwrap();
        let nread = read(&input, spare_capacity(&mut buf)).unwrap();
        assert_eq!(nread, 0);
        assert!(buf.is_empty());
    }

    /// Test passing a `Cursor` to `read`.
    #[test]
    fn test_cursor_as_buffer() {
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut total_read = 0;

        let mut buf = Vec::with_capacity(256);
        let mut cursor = Cursor::new(spare_capacity(&mut buf));
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39);
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39 * 2);
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39 * 3);

        assert_eq!(total_read, 39 * 3);

        let cursor_read = cursor.finish();
        assert_eq!(cursor_read, total_read);

        assert_eq!(buf.len(), 39 * 3);
        assert_eq!(buf.capacity(), 256);
        assert_eq!(
            buf,
            b"// The comment at the end of the file!\n// The comment at the end of the file!\n// The comment at the end of the file!\n"
        );
    }

    /// Test nesting `Cursor`s inside of `Cursor`s.
    #[test]
    fn test_nesting() {
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut total_read = 0;

        let mut buf = Vec::with_capacity(256);
        let mut cursor = Cursor::new(spare_capacity(&mut buf));
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39);
        input.seek(SeekFrom::End(-39)).unwrap();
        let mut nested_cursor = Cursor::new(&mut cursor);
        let nested_nread = read(&input, &mut nested_cursor).unwrap();
        assert_eq!(nested_nread, 39);
        assert_eq!(nested_cursor.remaining(), 256 - 39 * 2);
        input.seek(SeekFrom::End(-39)).unwrap();
        let mut nested_nested_cursor = Cursor::new(&mut nested_cursor);
        let nested_nested_nread = read(&input, &mut nested_nested_cursor).unwrap();
        assert_eq!(nested_nested_nread, 39);
        assert_eq!(nested_nested_cursor.remaining(), 256 - 39 * 3);
        let inner_nread = nested_nested_cursor.finish();
        assert_eq!(inner_nread, 39);
        assert_eq!(nested_cursor.remaining(), 256 - 39 * 3);
        let nread = nested_cursor.finish();
        total_read += nread;

        assert_eq!(total_read, 39 * 3);
        assert_eq!(cursor.remaining(), 256 - 39 * 3);

        let cursor_read = cursor.finish();
        assert_eq!(cursor_read, total_read);

        assert_eq!(buf.len(), 39 * 3);
        assert_eq!(buf.capacity(), 256);
        assert_eq!(
            &buf[..39*3],
            b"// The comment at the end of the file!\n// The comment at the end of the file!\n// The comment at the end of the file!\n"
        );
    }

    /// Test using a `Cursor` to read into a `MaybeUninit` buffer in multiple
    /// reads, ultimately producing a single initialized slice.
    #[test]
    fn test_incremental() {
        use std::io::{Seek, SeekFrom};

        // We need to obtain input stream with contents that we can compare
        // against, so open our own source file.
        let mut input = std::fs::File::open("src/lib.rs").unwrap();

        let mut total_read = 0;

        let mut buf = [MaybeUninit::<u8>::zeroed(); 256];
        let mut cursor = Cursor::new(&mut buf);
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39);
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39 * 2);
        input.seek(SeekFrom::End(-39)).unwrap();
        let nread = read(&input, &mut cursor).unwrap();
        total_read += nread;
        assert_eq!(cursor.remaining(), 256 - 39 * 3);

        assert_eq!(total_read, 39 * 3);

        let (init, uninit) = cursor.finish();
        assert_eq!(init.len(), total_read);
        assert_eq!(uninit.len(), 256 - total_read);

        assert_eq!(
            init,
            b"// The comment at the end of the file!\n// The comment at the end of the file!\n// The comment at the end of the file!\n"
        );
    }

    fn read<B: Buffer<u8>>(input: &std::fs::File, mut b: B) -> std::io::Result<B::Output> {
        use std::os::fd::AsRawFd;
        let parts = b.parts_mut();
        let n = unsafe { libc::read(input.as_raw_fd(), parts.0.cast(), parts.1) };
        if n < 0 {
            Err(std::io::Error::last_os_error())
        } else {
            unsafe { Ok(b.assume_init(n as usize)) }
        }
    }
}

// The comment at the end of the file!