1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
// SPDX-License-Identifier: Apache-2.0 OR MIT
/*!
<!-- Note: Document from sync-markdown-to-rustdoc:start through sync-markdown-to-rustdoc:end
is synchronized from README.md. Any changes to that range are not preserved. -->
<!-- tidy:sync-markdown-to-rustdoc:start -->
A type that asserts that the underlying type is not moved after being
[pinned][pin] and mutably accessed.
This is a rewrite of [futures-test]'s `AssertUnmoved` to allow use in more
use cases. This also supports traits other than [futures][futures03].
Many of the changes made in this project are also reflected upstream:
[rust-lang/futures-rs#2148], [rust-lang/futures-rs#2208]
## Usage
Add this to your `Cargo.toml`:
```toml
[dependencies]
assert-unmoved = "0.1"
```
## Examples
An example of detecting incorrect [`Pin::new_unchecked`] use (**should panic**):
```should_panic
use std::pin::Pin;
use assert_unmoved::AssertUnmoved;
use futures::{
future::{self, Future},
task::{noop_waker, Context},
};
let waker = noop_waker();
let mut cx = Context::from_waker(&waker);
// First we allocate the future on the stack and poll it.
let mut future = AssertUnmoved::new(future::pending::<()>());
let pinned_future = unsafe { Pin::new_unchecked(&mut future) };
assert!(pinned_future.poll(&mut cx).is_pending());
// Next we move it back to the heap and poll it again. This second call
// should panic (as the future is moved).
let mut boxed_future = Box::new(future);
let pinned_boxed_future = unsafe { Pin::new_unchecked(&mut *boxed_future) };
let _ = pinned_boxed_future.poll(&mut cx).is_pending();
```
An example of detecting incorrect [`StreamExt::next`] implementation (**should panic**):
```should_panic
use std::pin::Pin;
use assert_unmoved::AssertUnmoved;
use futures::{
future::Future,
stream::{self, Stream},
task::{noop_waker, Context, Poll},
};
struct Next<'a, S: Stream>(&'a mut S);
impl<S: Stream> Future for Next<'_, S> {
type Output = Option<S::Item>;
fn poll(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Self::Output> {
// This is `Pin<&mut Type>` to `Pin<Field>` projection and is unsound
// if `S` is not `Unpin` (you can move `S` after `Next` dropped).
//
// The correct projection is `Pin<&mut Type>` to `Pin<&mut Field>`.
// In `Next`, it is `Pin<&mut Next<'_, S>>` to `Pin<&mut &mut S>`,
// and it needs to add `S: Unpin` bounds to convert `Pin<&mut &mut S>`
// to `Pin<&mut S>`.
let stream: Pin<&mut S> = unsafe { self.map_unchecked_mut(|f| f.0) };
stream.poll_next(cx)
}
}
let waker = noop_waker();
let mut cx = Context::from_waker(&waker);
let mut stream = AssertUnmoved::new(stream::pending::<()>());
{
let next = Next(&mut stream);
let mut pinned_next = Box::pin(next);
assert!(pinned_next.as_mut().poll(&mut cx).is_pending());
}
// Move stream to the heap.
let mut boxed_stream = Box::pin(stream);
let next = Next(&mut boxed_stream);
let mut pinned_next = Box::pin(next);
// This should panic (as the future is moved).
let _ = pinned_next.as_mut().poll(&mut cx).is_pending();
```
## Optional features
- **`futures03`** — Implements [futures v0.3][futures03] traits for assert-unmoved types.
- **`tokio1`** — Implements [tokio v1][tokio1] traits for assert-unmoved types.
- **`tokio03`** — Implements [tokio v0.3][tokio03] traits for assert-unmoved types.
- **`tokio02`** — Implements [tokio v0.2][tokio02] traits for assert-unmoved types.
Note: The MSRV when these features are enabled depends on the MSRV of these crates.
[`Pin::new_unchecked`]: https://doc.rust-lang.org/std/pin/struct.Pin.html#method.new_unchecked
[`StreamExt::next`]: https://docs.rs/futures/latest/futures/stream/trait.StreamExt.html#method.next
[futures-test]: https://docs.rs/futures-test
[futures03]: https://docs.rs/futures/0.3
[pin]: https://doc.rust-lang.org/std/pin/index.html
[rust-lang/futures-rs#2148]: https://github.com/rust-lang/futures-rs/pull/2148
[rust-lang/futures-rs#2208]: https://github.com/rust-lang/futures-rs/pull/2208
[tokio02]: https://docs.rs/tokio/0.2
[tokio03]: https://docs.rs/tokio/0.3
[tokio1]: https://docs.rs/tokio/1
<!-- tidy:sync-markdown-to-rustdoc:end -->
*/
// unsafe_op_in_unsafe_fn requires Rust 1.52
// docs.rs only (cfg is enabled by docs.rs, not build script)
extern crate std;
pub use AssertUnmoved;