Struct SlotCount 

pub struct SlotCount(/* private fields */);

A frame width the shadow stack can actually hold: a u32 proven <= MAX_SHADOW_SLOTS at construction.

An over-wide frame is unconstructible rather than rejected at run time: SlotCount::new is the only way to make one, the backend turns the None into a compile diagnostic naming the function, and every consumer of a SlotCount may assume the bound without re-checking it. That assumption is load-bearing — it is one of the two premises of SHADOW_STACK_SLOTS.

Implementations

impl SlotCount

pub const fn new(n: u32) -> Option<SlotCount>

Some iff n slots fit in one frame. const so a caller can prove a literal width at compile time.

pub const fn get(self) -> u32

The width, which is <= MAX_SHADOW_SLOTS by construction.

Trait Implementations

impl Clone for SlotCount

fn clone(&self) -> SlotCount

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SlotCount

impl Debug for SlotCount

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for SlotCount

impl PartialEq for SlotCount

fn eq(&self, other: &SlotCount) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl StructuralPartialEq for SlotCount