mirror of
https://github.com/apple/swift.git
synced 2025-12-14 20:36:38 +01:00
Explanation: There were some scenarios where we could call an unsafe function without marking the expression as unsafe. These affect mostly cases where the function's result is passed to another function or returned. This PR makes sure we always flag functions with unsafe return types, even if their result is not stored anywhere for later use. Issues: rdar://157237301 Original PRs: #83520 Risk: Low, worst case scenario the user has to add redundant unsafe keywords in strict memory safe mode. Testing: Added a compiler test. Reviewers: @DougGregor
249 lines
8.2 KiB
Swift
249 lines
8.2 KiB
Swift
//===----------------------------------------------------------------------===//
|
||
//
|
||
// This source file is part of the Swift.org open source project
|
||
//
|
||
// Copyright (c) 2014 - 2017 Apple Inc. and the Swift project authors
|
||
// Licensed under Apache License v2.0 with Runtime Library Exception
|
||
//
|
||
// See https://swift.org/LICENSE.txt for license information
|
||
// See https://swift.org/CONTRIBUTORS.txt for the list of Swift project authors
|
||
//
|
||
//===----------------------------------------------------------------------===//
|
||
// Extern C functions
|
||
//===----------------------------------------------------------------------===//
|
||
|
||
// FIXME: Once we have an FFI interface, make these have proper function bodies
|
||
|
||
/// Returns if `x` is a power of 2.
|
||
@_transparent
|
||
public // @testable
|
||
func _isPowerOf2(_ x: UInt) -> Bool {
|
||
if x == 0 {
|
||
return false
|
||
}
|
||
// Note: use unchecked subtraction because we have checked that `x` is not
|
||
// zero.
|
||
return x & (x &- 1) == 0
|
||
}
|
||
|
||
/// Returns if `x` is a power of 2.
|
||
@_transparent
|
||
public // @testable
|
||
func _isPowerOf2(_ x: Int) -> Bool {
|
||
if x <= 0 {
|
||
return false
|
||
}
|
||
// Note: use unchecked subtraction because we have checked that `x` is not
|
||
// `Int.min`.
|
||
return x & (x &- 1) == 0
|
||
}
|
||
|
||
#if _runtime(_ObjC)
|
||
@_transparent
|
||
public func _autorelease(_ x: AnyObject) {
|
||
Builtin.retain(x)
|
||
Builtin.autorelease(x)
|
||
}
|
||
#endif
|
||
|
||
|
||
@available(SwiftStdlib 5.7, *)
|
||
@_silgen_name("swift_getFunctionFullNameFromMangledName")
|
||
public // SPI (Distributed)
|
||
func _getFunctionFullNameFromMangledNameImpl(
|
||
_ mangledName: UnsafePointer<UInt8>, _ mangledNameLength: UInt
|
||
) -> (UnsafePointer<UInt8>, UInt)
|
||
|
||
/// Given a function's mangled name, return a human readable name.
|
||
/// Used e.g. by Distributed.RemoteCallTarget to hide mangled names.
|
||
@available(SwiftStdlib 5.7, *)
|
||
@_unavailableInEmbedded
|
||
public // SPI (Distributed)
|
||
func _getFunctionFullNameFromMangledName(mangledName: String) -> String? {
|
||
let mangledNameUTF8 = Array(mangledName.utf8)
|
||
let (stringPtr, count) =
|
||
unsafe mangledNameUTF8.withUnsafeBufferPointer { (mangledNameUTF8) in
|
||
return unsafe _getFunctionFullNameFromMangledNameImpl(
|
||
mangledNameUTF8.baseAddress!,
|
||
UInt(mangledNameUTF8.endIndex))
|
||
}
|
||
|
||
guard count > 0 else {
|
||
return nil
|
||
}
|
||
|
||
return unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: Int(count))).0
|
||
}
|
||
|
||
// FIXME(ABI)#51 : this API should allow controlling different kinds of
|
||
// qualification separately: qualification with module names and qualification
|
||
// with type names that we are nested in.
|
||
// But we can place it behind #if _runtime(_Native) and remove it from ABI on
|
||
// Apple platforms, deferring discussions mentioned above.
|
||
@_silgen_name("swift_getTypeName")
|
||
public func _getTypeName(_ type: Any.Type, qualified: Bool)
|
||
-> (UnsafePointer<UInt8>, Int)
|
||
|
||
/// Returns the demangled qualified name of a metatype.
|
||
@_semantics("typeName")
|
||
@_unavailableInEmbedded
|
||
public // @testable
|
||
func _typeName(_ type: Any.Type, qualified: Bool = true) -> String {
|
||
let (stringPtr, count) = unsafe _getTypeName(type, qualified: qualified)
|
||
return unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: count)).0
|
||
}
|
||
|
||
@available(SwiftStdlib 5.3, *)
|
||
@_silgen_name("swift_getMangledTypeName")
|
||
@_preInverseGenerics
|
||
public func _getMangledTypeName(_ type: any (~Copyable & ~Escapable).Type)
|
||
-> (UnsafePointer<UInt8>, Int)
|
||
|
||
/// Returns the mangled name for a given type.
|
||
@available(SwiftStdlib 5.3, *)
|
||
@_unavailableInEmbedded
|
||
@_preInverseGenerics
|
||
public // SPI
|
||
func _mangledTypeName(_ type: any (~Copyable & ~Escapable).Type) -> String? {
|
||
let (stringPtr, count) = unsafe _getMangledTypeName(type)
|
||
guard count > 0 else {
|
||
return nil
|
||
}
|
||
|
||
let (result, repairsMade) = unsafe String._fromUTF8Repairing(
|
||
UnsafeBufferPointer(start: stringPtr, count: count))
|
||
|
||
_precondition(!repairsMade, "repairs made to _mangledTypeName, this is not expected since names should be valid UTF-8")
|
||
|
||
return result
|
||
}
|
||
|
||
/// Lookup a class given a name. Until the demangled encoding of type
|
||
/// names is stabilized, this is limited to top-level class names (Foo.bar).
|
||
@_unavailableInEmbedded
|
||
public // SPI(Foundation)
|
||
func _typeByName(_ name: String) -> Any.Type? {
|
||
let nameUTF8 = Array(name.utf8)
|
||
return unsafe nameUTF8.withUnsafeBufferPointer { (nameUTF8) in
|
||
return unsafe _getTypeByMangledNameUntrusted(nameUTF8.baseAddress!,
|
||
UInt(nameUTF8.endIndex))
|
||
}
|
||
}
|
||
|
||
@_silgen_name("swift_stdlib_getTypeByMangledNameUntrusted")
|
||
internal func _getTypeByMangledNameUntrusted(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt)
|
||
-> Any.Type?
|
||
|
||
@_silgen_name("swift_getTypeByMangledNameInEnvironment")
|
||
public func _getTypeByMangledNameInEnvironment(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt,
|
||
genericEnvironment: UnsafeRawPointer?,
|
||
genericArguments: UnsafeRawPointer?)
|
||
-> Any.Type?
|
||
|
||
@_silgen_name("swift_getTypeByMangledNameInContext")
|
||
public func _getTypeByMangledNameInContext(
|
||
_ name: UnsafePointer<UInt8>,
|
||
_ nameLength: UInt,
|
||
genericContext: UnsafeRawPointer?,
|
||
genericArguments: UnsafeRawPointer?)
|
||
-> Any.Type?
|
||
|
||
/// Prevents performance diagnostics in the passed closure.
|
||
@_alwaysEmitIntoClient
|
||
@_semantics("no_performance_analysis")
|
||
@unsafe
|
||
public func _unsafePerformance<T>(_ c: () -> T) -> T {
|
||
return c()
|
||
}
|
||
|
||
// Helper function that exploits a bug in rethrows checking to
|
||
// allow us to call rethrows functions from generic typed-throws functions
|
||
// and vice-versa.
|
||
@usableFromInline
|
||
@_alwaysEmitIntoClient
|
||
@inline(__always)
|
||
func _rethrowsViaClosure(_ fn: () throws -> ()) rethrows {
|
||
try fn()
|
||
}
|
||
|
||
@available(SwiftStdlib 9999, *)
|
||
@usableFromInline internal var swift_deletedCalleeAllocatedCoroutineMethodError: () {
|
||
// TODO: CoroutineAccessors: Change to read from _read.
|
||
@_silgen_name("swift_deletedCalleeAllocatedCoroutineMethodError")
|
||
_read {
|
||
fatalError("Fatal error: Call of deleted method")
|
||
}
|
||
}
|
||
|
||
/// A type whose values can be implicitly or explicitly copied.
|
||
///
|
||
/// Conforming to this protocol indicates that a type's value can be copied;
|
||
/// this protocol doesn’t have any required methods or properties.
|
||
/// You don't generally need to write an explicit conformance to `Copyable`.
|
||
/// The following places implicitly include `Copyable` conformance:
|
||
///
|
||
/// * Structure declarations,
|
||
/// unless it has a noncopyable stored property
|
||
/// * Enumeration declarations,
|
||
/// unless it has a case whose associated value isn't copyable
|
||
/// * Class declarations
|
||
/// * Actor declarations
|
||
/// * Protocol declarations
|
||
/// * Associated type declarations
|
||
/// * The `Self` type in a protocol extension
|
||
/// * In an extension, the generic parameters of the type being extended
|
||
///
|
||
/// A class or actor can contain noncopyable stored properties,
|
||
/// while still being copyable itself ---
|
||
/// classes and actors are copied by retaining and releasing references.
|
||
///
|
||
/// In a declaration that includes generic type parameters,
|
||
/// each generic type parameter implicitly includes `Copyable`
|
||
/// in its list of requirements.
|
||
/// Metatypes and tuples of copyable types are also implicitly copyable,
|
||
/// as are boxed protocol types.
|
||
/// For example,
|
||
/// all of the following pairs of declarations are equivalent:
|
||
///
|
||
/// struct MyStructure { }
|
||
/// struct MyStructure: Copyable { }
|
||
///
|
||
/// protocol MyProtocol { }
|
||
/// protocol MyProtocol: Copyable { }
|
||
///
|
||
/// protocol AnotherProtocol {
|
||
/// associatedtype MyType
|
||
/// associatedtype MyType: Copyable
|
||
/// }
|
||
///
|
||
/// func genericFunction<T>(t: T) { }
|
||
/// func genericFunction<T>(t: T) where T: Copyable { }
|
||
///
|
||
/// let x: any MyProtocol
|
||
/// let x: any MyProtocol & Copyable
|
||
///
|
||
/// To suppress an implicit conformance to `Copyable` you write `~Copyable`.
|
||
/// For example,
|
||
/// only copyable types can conform to `MyProtocol` in the example above,
|
||
/// but both copyable and noncopyable types
|
||
/// can conform `NoRequirements` in the example below:
|
||
///
|
||
/// protocol NoRequirements: ~Copyable { }
|
||
///
|
||
/// Extensions to the `Copyable` protocol are not allowed.
|
||
@_marker public protocol Copyable/*: ~Escapable*/ {}
|
||
|
||
@_documentation(visibility: internal)
|
||
@_marker public protocol Escapable/*: ~Copyable*/ {}
|
||
|
||
@_marker public protocol BitwiseCopyable: ~Escapable { }
|
||
|
||
@available(*, deprecated, message: "Use BitwiseCopyable")
|
||
public typealias _BitwiseCopyable = BitwiseCopyable
|