mirror of
https://github.com/apple/swift.git
synced 2025-12-14 20:36:38 +01:00
Previously, we skipped checking the return type of a function for safety as we expected to warn at the use of the returned value: let x = returnsUnsafe() usesUnsafe(x) // warn here Unfortunately, this resulted in missing some unsafe constructs that can introduce memory safety issues when the use of the return value had a different shape resulting in false negatives for cases like: return returnsUnsafe() or usesUnsafe(returnsUnsafe()) This PR changes the analysis to always take return types of function calls into account. rdar://157237301
249 lines
8.2 KiB
Swift
249 lines
8.2 KiB
Swift
//===----------------------------------------------------------------------===//
|
||
//
|
||
// This source file is part of the Swift.org open source project
|
||
//
|
||
// Copyright (c) 2014 - 2017 Apple Inc. and the Swift project authors
|
||
// Licensed under Apache License v2.0 with Runtime Library Exception
|
||
//
|
||
// See https://swift.org/LICENSE.txt for license information
|
||
// See https://swift.org/CONTRIBUTORS.txt for the list of Swift project authors
|
||
//
|
||
//===----------------------------------------------------------------------===//
|
||
// Extern C functions
|
||
//===----------------------------------------------------------------------===//
|
||
|
||
// FIXME: Once we have an FFI interface, make these have proper function bodies
|
||
|
||
/// Returns if `x` is a power of 2.
|
||
@_transparent
|
||
public // @testable
|
||
func _isPowerOf2(_ x: UInt) -> Bool {
|
||
if x == 0 {
|
||
return false
|
||
}
|
||
// Note: use unchecked subtraction because we have checked that `x` is not
|
||
// zero.
|
||
return x & (x &- 1) == 0
|
||
}
|
||
|
||
/// Returns if `x` is a power of 2.
|
||
@_transparent
|
||
public // @testable
|
||
func _isPowerOf2(_ x: Int) -> Bool {
|
||
if x <= 0 {
|
||
return false
|
||
}
|
||
// Note: use unchecked subtraction because we have checked that `x` is not
|
||
// `Int.min`.
|
||
return x & (x &- 1) == 0
|
||
}
|
||
|
||
#if _runtime(_ObjC)
|
||
@_transparent
|
||
public func _autorelease(_ x: AnyObject) {
|
||
Builtin.retain(x)
|
||
Builtin.autorelease(x)
|
||
}
|
||
#endif
|
||
|
||
|
||
@available(SwiftStdlib 5.7, *)
|
||
@_silgen_name("swift_getFunctionFullNameFromMangledName")
|
||
public // SPI (Distributed)
|
||
func _getFunctionFullNameFromMangledNameImpl(
|
||
_ mangledName: UnsafePointer<UInt8>, _ mangledNameLength: UInt
|
||
) -> (UnsafePointer<UInt8>, UInt)
|
||
|
||
/// Given a function's mangled name, return a human readable name.
|
||
/// Used e.g. by Distributed.RemoteCallTarget to hide mangled names.
|
||
@available(SwiftStdlib 5.7, *)
|
||
@_unavailableInEmbedded
|
||
public // SPI (Distributed)
|
||
func _getFunctionFullNameFromMangledName(mangledName: String) -> String? {
|
||
let mangledNameUTF8 = Array(mangledName.utf8)
|
||
let (stringPtr, count) =
|
||
unsafe mangledNameUTF8.withUnsafeBufferPointer { (mangledNameUTF8) in
|
||
return unsafe _getFunctionFullNameFromMangledNameImpl(
|
||
mangledNameUTF8.baseAddress!,
|
||
UInt(mangledNameUTF8.endIndex))
|
||
}
|
||
|
||
guard count > 0 else {
|
||
return nil
|
||
}
|
||
|
||
return unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: Int(count))).0
|
||
}
|
||
|
||
// FIXME(ABI)#51 : this API should allow controlling different kinds of
|
||
// qualification separately: qualification with module names and qualification
|
||
// with type names that we are nested in.
|
||
// But we can place it behind #if _runtime(_Native) and remove it from ABI on
|
||
// Apple platforms, deferring discussions mentioned above.
|
||
@_silgen_name("swift_getTypeName")
|
||
public func _getTypeName(_ type: Any.Type, qualified: Bool)
|
||
-> (UnsafePointer<UInt8>, Int)
|
||
|
||
/// Returns the demangled qualified name of a metatype.
|
||
@_semantics("typeName")
|
||
@_unavailableInEmbedded
|
||
public // @testable
|
||
func _typeName(_ type: Any.Type, qualified: Bool = true) -> String {
|
||
let (stringPtr, count) = unsafe _getTypeName(type, qualified: qualified)
|
||
return unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: count)).0
|
||
}
|
||
|
||
@available(SwiftStdlib 5.3, *)
|
||
@_silgen_name("swift_getMangledTypeName")
|
||
@_preInverseGenerics
|
||
public func _getMangledTypeName(_ type: any (~Copyable & ~Escapable).Type)
|
||
-> (UnsafePointer<UInt8>, Int)
|
||
|
||
/// Returns the mangled name for a given type.
|
||
@available(SwiftStdlib 5.3, *)
|
||
@_unavailableInEmbedded
|
||
@_preInverseGenerics
|
||
public // SPI
|
||
func _mangledTypeName(_ type: any (~Copyable & ~Escapable).Type) -> String? {
|
||
let (stringPtr, count) = unsafe _getMangledTypeName(type)
|
||
guard count > 0 else {
|
||
return nil
|
||
}
|
||
|
||
let (result, repairsMade) = unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: count))
|
||
|
||
_precondition(!repairsMade, "repairs made to _mangledTypeName, this is not expected since names should be valid UTF-8")
|
||
|
||
return result
|
||
}
|
||
|
||
/// Lookup a class given a name. Until the demangled encoding of type
|
||
/// names is stabilized, this is limited to top-level class names (Foo.bar).
|
||
@_unavailableInEmbedded
|
||
public // SPI(Foundation)
|
||
func _typeByName(_ name: String) -> Any.Type? {
|
||
let nameUTF8 = Array(name.utf8)
|
||
return unsafe nameUTF8.withUnsafeBufferPointer { (nameUTF8) in
|
||
return unsafe _getTypeByMangledNameUntrusted(nameUTF8.baseAddress!,
|
||
UInt(nameUTF8.endIndex))
|
||
}
|
||
}
|
||
|
||
@_silgen_name("swift_stdlib_getTypeByMangledNameUntrusted")
|
||
internal func _getTypeByMangledNameUntrusted(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt)
|
||
-> Any.Type?
|
||
|
||
@_silgen_name("swift_getTypeByMangledNameInEnvironment")
|
||
public func _getTypeByMangledNameInEnvironment(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt,
|
||
genericEnvironment: UnsafeRawPointer?,
|
||
genericArguments: UnsafeRawPointer?)
|
||
-> Any.Type?
|
||
|
||
@_silgen_name("swift_getTypeByMangledNameInContext")
|
||
public func _getTypeByMangledNameInContext(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt,
|
||
genericContext: UnsafeRawPointer?,
|
||
genericArguments: UnsafeRawPointer?)
|
||
-> Any.Type?
|
||
|
||
/// Prevents performance diagnostics in the passed closure.
|
||
@_alwaysEmitIntoClient
|
||
@_semantics("no_performance_analysis")
|
||
@unsafe
|
||
public func _unsafePerformance<T>(_ c: () -> T) -> T {
|
||
return c()
|
||
}
|
||
|
||
// Helper function that exploits a bug in rethrows checking to
|
||
// allow us to call rethrows functions from generic typed-throws functions
|
||
// and vice-versa.
|
||
@usableFromInline
|
||
@_alwaysEmitIntoClient
|
||
@inline(__always)
|
||
func _rethrowsViaClosure(_ fn: () throws -> ()) rethrows {
|
||
try fn()
|
||
}
|
||
|
||
@available(SwiftStdlib 9999, *)
|
||
@usableFromInline internal var swift_deletedCalleeAllocatedCoroutineMethodError: () {
|
||
// TODO: CoroutineAccessors: Change to read from _read.
|
||
@_silgen_name("swift_deletedCalleeAllocatedCoroutineMethodError")
|
||
_read {
|
||
fatalError("Fatal error: Call of deleted method")
|
||
}
|
||
}
|
||
|
||
/// A type whose values can be implicitly or explicitly copied.
|
||
///
|
||
/// Conforming to this protocol indicates that a type's value can be copied;
|
||
/// this protocol doesn’t have any required methods or properties.
|
||
/// You don't generally need to write an explicit conformance to `Copyable`.
|
||
/// The following places implicitly include `Copyable` conformance:
|
||
///
|
||
/// * Structure declarations,
|
||
/// unless it has a noncopyable stored property
|
||
/// * Enumeration declarations,
|
||
/// unless it has a case whose associated value isn't copyable
|
||
/// * Class declarations
|
||
/// * Actor declarations
|
||
/// * Protocol declarations
|
||
/// * Associated type declarations
|
||
/// * The `Self` type in a protocol extension
|
||
/// * In an extension, the generic parameters of the type being extended
|
||
///
|
||
/// A class or actor can contain noncopyable stored properties,
|
||
/// while still being copyable itself ---
|
||
/// classes and actors are copied by retaining and releasing references.
|
||
///
|
||
/// In a declaration that includes generic type parameters,
|
||
/// each generic type parameter implicitly includes `Copyable`
|
||
/// in its list of requirements.
|
||
/// Metatypes and tuples of copyable types are also implicitly copyable,
|
||
/// as are boxed protocol types.
|
||
/// For example,
|
||
/// all of the following pairs of declarations are equivalent:
|
||
///
|
||
/// struct MyStructure { }
|
||
/// struct MyStructure: Copyable { }
|
||
///
|
||
/// protocol MyProtocol { }
|
||
/// protocol MyProtocol: Copyable { }
|
||
///
|
||
/// protocol AnotherProtocol {
|
||
/// associatedtype MyType
|
||
/// associatedtype MyType: Copyable
|
||
/// }
|
||
///
|
||
/// func genericFunction<T>(t: T) { }
|
||
/// func genericFunction<T>(t: T) where T: Copyable { }
|
||
///
|
||
/// let x: any MyProtocol
|
||
/// let x: any MyProtocol & Copyable
|
||
///
|
||
/// To suppress an implicit conformance to `Copyable` you write `~Copyable`.
|
||
/// For example,
|
||
/// only copyable types can conform to `MyProtocol` in the example above,
|
||
/// but both copyable and noncopyable types
|
||
/// can conform `NoRequirements` in the example below:
|
||
///
|
||
/// protocol NoRequirements: ~Copyable { }
|
||
///
|
||
/// Extensions to the `Copyable` protocol are not allowed.
|
||
@_marker public protocol Copyable/*: ~Escapable*/ {}
|
||
|
||
@_documentation(visibility: internal)
|
||
@_marker public protocol Escapable/*: ~Copyable*/ {}
|
||
|
||
@_marker public protocol BitwiseCopyable: ~Escapable { }
|
||
|
||
@available(*, deprecated, message: "Use BitwiseCopyable")
|
||
public typealias _BitwiseCopyable = BitwiseCopyable
|