Struct BoundedScope 

pub struct BoundedScope<'a>(/* private fields */);

Validated, non-empty TLV sequence of permissions.

Each entry has the layout:

[res_len: u8][resource bytes][verb_len: u8][verb bytes]

try_new walks the slice and verifies that:

• the slice is non-empty,
• every entry is complete (no truncated fields),
• the total number of entries does not exceed MAX_SCOPE_PERMS.

After construction the slice is guaranteed to be fully consumed by well-formed entries and iterable via iter().

Implementations

impl<'a> BoundedScope<'a>

pub fn iter(&self) -> ScopeIter<'a>

Returns an iterator yielding (resource, verb) pairs in order.

pub fn try_new(raw: &'a [u8]) -> Result<Self, KernelError>

Parses and validates a raw TLV slice.

Returns ScopeEmpty if raw is empty, WireInvalid if any entry is truncated or structurally incorrect, and ScopeTooLarge if the entry count exceeds MAX_SCOPE_PERMS.

Trait Implementations

impl<'a> Clone for BoundedScope<'a>

fn clone(&self) -> BoundedScope<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for BoundedScope<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> PartialEq for BoundedScope<'a>

fn eq(&self, other: &BoundedScope<'a>) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<'a> Copy for BoundedScope<'a>

impl<'a> Eq for BoundedScope<'a>

impl<'a> StructuralPartialEq for BoundedScope<'a>