o3 0.41.0

shared-nothing primitives
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85

//! Initialized foreign-output fixtures.

use std::{
    alloc::{GlobalAlloc, Layout},
    cell::{BorrowError, Cell, RefCell},
    num::NonZero,
};

use o3::{
    alloc, buffer,
    buffer::{pool, write::consume},
};

use crate::common::alloc::system::Tracker;

thread_local! {
    pub static REENTRANT: RefCell<Option<pool::Growing>> = const { RefCell::new(None) };
    static ARMED: Cell<(bool, Result<(), Error>)> = const { Cell::new((false, Ok(()))) };
}

#[derive(Debug)]
pub enum Error {
    Borrow(BorrowError),
    Allocation(alloc::Exhausted),
}

pub struct Reentrant;

impl Reentrant {
    pub fn on_alloc<T>(run: impl FnOnce() -> T) -> (T, Result<(), Error>) {
        let previous = ARMED.replace((true, Ok(())));
        let value = run();
        (value, ARMED.replace(previous).1)
    }

    fn before() {
        let (armed, mut observed) = ARMED.replace((false, Ok(())));
        if armed {
            observed = REENTRANT.with(|owner| {
                if let Some(owner) = owner.try_borrow().map_err(Error::Borrow)?.as_ref() {
                    drop(owner.try_borrow().map_err(Error::Allocation)?);
                }
                Ok(())
            });
        }
        ARMED.set((false, observed));
    }
}

// SAFETY: every request is forwarded unchanged to Tracker. The one-shot arm is
// cleared before accessing the retained pool, so nested allocation cannot reenter.
unsafe impl GlobalAlloc for Reentrant {
    unsafe fn alloc(&self, layout: Layout) -> *mut u8 {
        Self::before();
        unsafe { Tracker.alloc(layout) }
    }

    unsafe fn alloc_zeroed(&self, layout: Layout) -> *mut u8 {
        Self::before();
        unsafe { Tracker.alloc_zeroed(layout) }
    }

    unsafe fn dealloc(&self, pointer: *mut u8, layout: Layout) {
        unsafe { Tracker.dealloc(pointer, layout) };
    }

    unsafe fn realloc(&self, pointer: *mut u8, layout: Layout, size: usize) -> *mut u8 {
        Self::before();
        unsafe { Tracker.realloc(pointer, layout, size) }
    }
}

/// Fills and completes the admitted nonzero prefix of the same initialized output.
pub fn try_fill<const N: usize, L>(
    mut output: buffer::raw::Output<'_, L>,
    fill: impl FnOnce(&mut [u8]),
) -> Result<(), consume::Error> {
    const { assert!(N > 0) };
    consume::Error::check(N, output.len())?;
    fill(&mut output.as_mut_slice()[..N]);
    // SAFETY: N is nonzero and the same exclusive initialized output retains
    // the checked N-byte prefix throughout the fixture's write.
    unsafe { output.complete(NonZero::new_unchecked(N)) };
    Ok(())
}