Struct TrustedPayload 

pub struct TrustedPayload { /* private fields */ }

Payload for PacketBufferError::TrustedPayload and crate::boundary::PacketBuildError::TrustedPayload.

A packet carrying AV_PKT_FLAG_TRUSTED, refused on both legs.

Why a flag makes a payload uncarriable

AV_PKT_FLAG_TRUSTED is FFmpeg’s marker for a packet whose bytes came from a source the decoder may treat as its own — and the wrapped-AVFrame producers use it for exactly that: the payload is not media, it is a structure containing pointers to other live objects (an AVFrame and its buffers), passed by address between components inside one FFmpeg pipeline.

This crate copies bytes. A pointer copied by value is not owned by the copy — and that is not a gap this crate can close, because there is no bound on what a payload’s pointers might reach. So the amputation has a corollary:

A payload that carries addresses instead of bytes cannot be carried. Copying it produces a message that looks owned, is Send + Sync + 'static by every type-level test, and dangles the moment its source is dropped — a use-after-free reachable through entirely safe API.

Refusing is not conservatism, it is the only correct answer: the contract this crate exists to keep says every byte leaving FFmpeg is copied once into memory Rust owns, and a pointer cannot be.

Refused at both legs, because either one alone leaves the loop open: copy-out ([payload_of]) is where such a packet would enter the graph, and the reverse builders are where a flag that survived some other route would be handed back to a decoder that trusts it.

Implementations

impl TrustedPayload

pub const fn new(len: usize) -> Self

Constructs a TrustedPayload payload.

pub const fn len(&self) -> usize

How many bytes the packet declared.

pub const fn is_empty(&self) -> bool

Whether the refused packet declared no bytes.

Trait Implementations

impl Clone for TrustedPayload

fn clone(&self) -> TrustedPayload

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for TrustedPayload

impl Debug for TrustedPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TrustedPayload

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for TrustedPayload

impl Error for TrustedPayload

fn source(&self) -> Option<&(dyn Error + 'static)>

Returns the lower-level source of this error, if any.

fn description(&self) -> &str

👎Deprecated since 1.42.0:

use the Display impl or to_string()

fn cause(&self) -> Option<&dyn Error>

👎Deprecated since 1.33.0:

replaced by Error::source, which can support downcasting

fn provide<'a>(&'a self, request: &mut Request<'a>)

🔬This is a nightly-only experimental API. (error_generic_member_access)

Provides type-based access to context intended for error reports.

impl From<TrustedPayload> for PacketBuildError

fn from(source: TrustedPayload) -> Self

Converts to this type from the input type.

impl From<TrustedPayload> for PacketBufferError

fn from(source: TrustedPayload) -> Self

Converts to this type from the input type.

impl From<TrustedPayload> for ImageDecodeError

fn from(source: TrustedPayload) -> Self

Converts to this type from the input type.

impl PartialEq for TrustedPayload

fn eq(&self, other: &TrustedPayload) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for TrustedPayload