Struct PoolSlot 

pub struct PoolSlot { /* private fields */ }

A handle to a locked memory region containing secret data.

The slot is either backed by a tier slab (mlock’d single-page pool) or a standalone SecureBuffer (guard pages + mlock, for larger allocations).

PoolSlot is Send but NOT Sync; exclusive reference semantics prevent concurrent mutation.

Safety of the slab pointer

When origin is Slab, ptr points into a TieredPool tier’s SecureSlab which lives in a OnceLock<TieredPool> and is never dropped for the process lifetime. The pointer therefore cannot dangle as long as the process is alive.

Safety

PoolSlot must not outlive the global pool. Only acquire via the module-level pool_acquire() and coffer_view() functions, not via a local TieredPool instance. The TieredPool::acquire() method is intentionally pub(crate) for this reason.

Implementations

impl PoolSlot

pub fn bytes(&mut self) -> &mut [u8]

Mutable access to the slot’s bytes.

pub fn as_slice(&self) -> &[u8]

Read-only access to the slot’s bytes.

pub fn size(&self) -> usize

Total capacity of this slot in bytes.

Trait Implementations

impl Debug for PoolSlot

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Drop for PoolSlot

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.

impl Send for PoolSlot