Files
swift-mirror/stdlib/public/core/Pointer.swift
Gábor Horváth 99f9c318ca [6.2][StrictMemorySafety] Check the safety of return types of calls
Explanation: There were some scenarios where we could call an unsafe
function without marking the expression as unsafe. These affect mostly
cases where the function's result is passed to another function or
returned. This PR makes sure we always flag functions with unsafe return
types, even if their result is not stored anywhere for later use.
Issues: rdar://157237301
Original PRs: #83520
Risk: Low, worst case scenario the user has to add redundant unsafe
keywords in strict memory safe mode.
Testing: Added a compiler test.
Reviewers: @DougGregor
2025-08-13 11:49:22 +01:00

527 lines
17 KiB
Swift

//===----------------------------------------------------------------------===//
//
// This source file is part of the Swift.org open source project
//
// Copyright (c) 2014 - 2024 Apple Inc. and the Swift project authors
// Licensed under Apache License v2.0 with Runtime Library Exception
//
// See https://swift.org/LICENSE.txt for license information
// See https://swift.org/CONTRIBUTORS.txt for the list of Swift project authors
//
//===----------------------------------------------------------------------===//
#if SWIFT_ENABLE_REFLECTION
public typealias _CustomReflectableOrNone = CustomReflectable
#else
public typealias _CustomReflectableOrNone = Any
#endif
#if !$Embedded
public typealias _CustomDebugStringConvertibleOrNone = CustomDebugStringConvertible
#else
public typealias _CustomDebugStringConvertibleOrNone = Any
#endif
/// A stdlib-internal protocol modeled by the intrinsic pointer types,
/// UnsafeMutablePointer, UnsafePointer, UnsafeRawPointer,
/// UnsafeMutableRawPointer, and AutoreleasingUnsafeMutablePointer.
public protocol _Pointer:
Hashable,
Strideable,
_CustomDebugStringConvertibleOrNone,
_CustomReflectableOrNone,
BitwiseCopyable
{
/// A type that represents the distance between two pointers.
typealias Distance = Int
associatedtype Pointee: ~Copyable
/// The underlying raw pointer value.
var _rawValue: Builtin.RawPointer { get }
/// Creates a pointer from a raw value.
init(_ _rawValue: Builtin.RawPointer)
}
extension _Pointer {
/// Creates a new typed pointer from the given opaque pointer.
///
/// - Parameter from: The opaque pointer to convert to a typed pointer.
@_transparent
public init(_ from: OpaquePointer) {
unsafe self.init(from._rawValue)
}
/// Creates a new typed pointer from the given opaque pointer.
///
/// - Parameter from: The opaque pointer to convert to a typed pointer. If
/// `from` is `nil`, the result of this initializer is `nil`.
@_transparent
public init?(_ from: OpaquePointer?) {
guard let unwrapped = unsafe from else { return nil }
unsafe self.init(unwrapped)
}
/// Creates a new pointer from the given address, specified as a bit
/// pattern.
///
/// The address passed as `bitPattern` must have the correct alignment for
/// the pointer's `Pointee` type. That is,
/// `bitPattern % MemoryLayout<Pointee>.alignment` must be `0`.
///
/// - Parameter bitPattern: A bit pattern to use for the address of the new
/// pointer. If `bitPattern` is zero, the result is `nil`.
@_transparent
public init?(bitPattern: Int) {
if bitPattern == 0 { return nil }
self.init(Builtin.inttoptr_Word(bitPattern._builtinWordValue))
}
/// Creates a new pointer from the given address, specified as a bit
/// pattern.
///
/// The address passed as `bitPattern` must have the correct alignment for
/// the pointer's `Pointee` type. That is,
/// `bitPattern % MemoryLayout<Pointee>.alignment` must be `0`.
///
/// - Parameter bitPattern: A bit pattern to use for the address of the new
/// pointer. If `bitPattern` is zero, the result is `nil`.
@_transparent
public init?(bitPattern: UInt) {
if bitPattern == 0 { return nil }
self.init(Builtin.inttoptr_Word(bitPattern._builtinWordValue))
}
/// Creates a new pointer from the given pointer.
///
/// - Parameter other: The typed pointer to convert.
@_transparent
public init(@_nonEphemeral _ other: Self) {
self.init(other._rawValue)
}
/// Creates a new pointer from the given pointer.
///
/// - Parameter other: The typed pointer to convert. If `other` is `nil`, the
/// result is `nil`.
@_transparent
public init?(@_nonEphemeral _ other: Self?) {
guard let unwrapped = other else { return nil }
self.init(unwrapped._rawValue)
}
}
// well, this is pretty annoying
extension _Pointer /*: Equatable */ {
// - Note: This may be more efficient than Strideable's implementation
// calling self.distance().
/// Returns a Boolean value indicating whether two pointers are equal.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` and `rhs` reference the same memory address;
/// otherwise, `false`.
@_transparent
public static func == (lhs: Self, rhs: Self) -> Bool {
return Bool(Builtin.cmp_eq_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether two pointers represent
/// the same memory address.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` and `rhs` reference the same memory address;
/// otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func == <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_eq_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether two pointers represent
/// different memory addresses.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` and `rhs` reference different memory addresses;
/// otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func != <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_ne_RawPointer(lhs._rawValue, rhs._rawValue))
}
}
extension _Pointer /*: Comparable */ {
// - Note: This is an unsigned comparison unlike Strideable's
// implementation.
/// Returns a Boolean value indicating whether the first pointer references
/// a memory location earlier than the second pointer references.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` references a memory address earlier than
/// `rhs`; otherwise, `false`.
@_transparent
public static func < (lhs: Self, rhs: Self) -> Bool {
return Bool(Builtin.cmp_ult_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether the first pointer references
/// a memory location earlier than the second pointer references.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` references a memory address
/// earlier than `rhs`; otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func < <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_ult_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether the first pointer references
/// a memory location earlier than or same as the second pointer references.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` references a memory address
/// earlier than or the same as `rhs`; otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func <= <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_ule_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether the first pointer references
/// a memory location later than the second pointer references.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` references a memory address
/// later than `rhs`; otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func > <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_ugt_RawPointer(lhs._rawValue, rhs._rawValue))
}
/// Returns a Boolean value indicating whether the first pointer references
/// a memory location later than or same as the second pointer references.
///
/// - Parameters:
/// - lhs: A pointer.
/// - rhs: Another pointer.
/// - Returns: `true` if `lhs` references a memory address
/// later than or the same as `rhs`; otherwise, `false`.
@inlinable
@_alwaysEmitIntoClient
public static func >= <Other: _Pointer>(lhs: Self, rhs: Other) -> Bool {
return Bool(Builtin.cmp_uge_RawPointer(lhs._rawValue, rhs._rawValue))
}
}
extension _Pointer /*: Strideable*/ {
/// Returns a pointer to the next consecutive instance.
///
/// The resulting pointer must be within the bounds of the same allocation as
/// this pointer.
///
/// - Returns: A pointer advanced from this pointer by
/// `MemoryLayout<Pointee>.stride` bytes.
@_transparent
public func successor() -> Self {
return advanced(by: 1)
}
/// Returns a pointer to the previous consecutive instance.
///
/// The resulting pointer must be within the bounds of the same allocation as
/// this pointer.
///
/// - Returns: A pointer shifted backward from this pointer by
/// `MemoryLayout<Pointee>.stride` bytes.
@_transparent
public func predecessor() -> Self {
return advanced(by: -1)
}
/// Returns the distance from this pointer to the given pointer, counted as
/// instances of the pointer's `Pointee` type.
///
/// With pointers `p` and `q`, the result of `p.distance(to: q)` is
/// equivalent to `q - p`.
///
/// Typed pointers are required to be properly aligned for their `Pointee`
/// type. Proper alignment ensures that the result of `distance(to:)`
/// accurately measures the distance between the two pointers, counted in
/// strides of `Pointee`. To find the distance in bytes between two
/// pointers, convert them to `UnsafeRawPointer` instances before calling
/// `distance(to:)`.
///
/// - Parameter end: The pointer to calculate the distance to.
/// - Returns: The distance from this pointer to `end`, in strides of the
/// pointer's `Pointee` type. To access the stride, use
/// `MemoryLayout<Pointee>.stride`.
@_transparent
public func distance(to end: Self) -> Int {
return
Int(Builtin.sub_Word(Builtin.ptrtoint_Word(end._rawValue),
Builtin.ptrtoint_Word(_rawValue)))
/ MemoryLayout<Pointee>.stride
}
/// Returns a pointer offset from this pointer by the specified number of
/// instances.
///
/// With pointer `p` and distance `n`, the result of `p.advanced(by: n)` is
/// equivalent to `p + n`.
///
/// The resulting pointer must be within the bounds of the same allocation as
/// this pointer.
///
/// - Parameter n: The number of strides of the pointer's `Pointee` type to
/// offset this pointer. To access the stride, use
/// `MemoryLayout<Pointee>.stride`. `n` may be positive, negative, or
/// zero.
/// - Returns: A pointer offset from this pointer by `n` instances of the
/// `Pointee` type.
@_transparent
public func advanced(by n: Int) -> Self {
return Self(Builtin.gep_Word(
self._rawValue, n._builtinWordValue, Pointee.self))
}
}
extension _Pointer /*: Hashable */ {
@inlinable
@safe public func hash(into hasher: inout Hasher) {
hasher.combine(UInt(bitPattern: self))
}
@inlinable
@safe public func _rawHashValue(seed: Int) -> Int {
return Hasher._hash(seed: seed, UInt(bitPattern: self))
}
}
@_unavailableInEmbedded
extension _Pointer /*: CustomDebugStringConvertible */ {
/// A textual representation of the pointer, suitable for debugging.
@safe public var debugDescription: String {
return _rawPointerToString(_rawValue)
}
}
#if SWIFT_ENABLE_REFLECTION
extension _Pointer /*: CustomReflectable */ {
@safe public var customMirror: Mirror {
let ptrValue = UInt64(
bitPattern: Int64(Int(Builtin.ptrtoint_Word(_rawValue))))
return Mirror(self, children: ["pointerValue": ptrValue])
}
}
#endif
extension Int {
/// Creates a new value with the bit pattern of the given pointer.
///
/// The new value represents the address of the pointer passed as `pointer`.
/// If `pointer` is `nil`, the result is `0`.
///
/// - Parameter pointer: The pointer to use as the source for the new
/// integer.
@safe
@_transparent
public init<P: _Pointer>(bitPattern pointer: P?) {
if let pointer = pointer {
self = Int(Builtin.ptrtoint_Word(pointer._rawValue))
} else {
self = 0
}
}
}
extension UInt {
/// Creates a new value with the bit pattern of the given pointer.
///
/// The new value represents the address of the pointer passed as `pointer`.
/// If `pointer` is `nil`, the result is `0`.
///
/// - Parameter pointer: The pointer to use as the source for the new
/// integer.
@safe
@_transparent
public init<P: _Pointer>(bitPattern pointer: P?) {
if let pointer = pointer {
self = UInt(Builtin.ptrtoint_Word(pointer._rawValue))
} else {
self = 0
}
}
}
// Pointer arithmetic operators (formerly via Strideable)
extension Strideable where Self: _Pointer {
@_transparent
public static func + (@_nonEphemeral lhs: Self, rhs: Self.Stride) -> Self {
return lhs.advanced(by: rhs)
}
@_transparent
public static func + (lhs: Self.Stride, @_nonEphemeral rhs: Self) -> Self {
return rhs.advanced(by: lhs)
}
@_transparent
public static func - (@_nonEphemeral lhs: Self, rhs: Self.Stride) -> Self {
return lhs.advanced(by: -rhs)
}
@_transparent
public static func - (lhs: Self, rhs: Self) -> Self.Stride {
return rhs.distance(to: lhs)
}
@_transparent
public static func += (lhs: inout Self, rhs: Self.Stride) {
lhs = lhs.advanced(by: rhs)
}
@_transparent
public static func -= (lhs: inout Self, rhs: Self.Stride) {
lhs = lhs.advanced(by: -rhs)
}
}
/// Derive a pointer argument from a convertible pointer type.
@_transparent
public // COMPILER_INTRINSIC
func _convertPointerToPointerArgument<
FromPointer: _Pointer,
ToPointer: _Pointer
>(_ from: FromPointer) -> ToPointer {
return ToPointer(from._rawValue)
}
/// Derive a pointer argument from the address of an inout parameter.
@_transparent
public // COMPILER_INTRINSIC
func _convertInOutToPointerArgument<
ToPointer: _Pointer
>(_ from: Builtin.RawPointer) -> ToPointer {
return ToPointer(from)
}
/// Derive a pointer argument from a value array parameter.
///
/// This always produces a non-null pointer, even if the array doesn't have any
/// storage.
#if !$Embedded
@_transparent
public // COMPILER_INTRINSIC
func _convertConstArrayToPointerArgument<
FromElement,
ToPointer: _Pointer
>(_ arr: [FromElement]) -> (AnyObject?, ToPointer) {
let (owner, opaquePointer) = unsafe arr._cPointerArgs()
let validPointer: ToPointer
if let addr = unsafe opaquePointer {
validPointer = ToPointer(addr._rawValue)
} else {
let lastAlignedValue = ~(MemoryLayout<FromElement>.alignment - 1)
let lastAlignedPointer = unsafe UnsafeRawPointer(bitPattern: lastAlignedValue)!
validPointer = ToPointer(lastAlignedPointer._rawValue)
}
return (owner, validPointer)
}
#else
@_transparent
public // COMPILER_INTRINSIC
func _convertConstArrayToPointerArgument<
FromElement,
ToPointer: _Pointer
>(_ arr: [FromElement]) -> (Builtin.NativeObject?, ToPointer) {
let (owner, opaquePointer) = unsafe arr._cPointerArgs()
let validPointer: ToPointer
if let addr = unsafe opaquePointer {
validPointer = ToPointer(addr._rawValue)
} else {
let lastAlignedValue = ~(MemoryLayout<FromElement>.alignment - 1)
let lastAlignedPointer = unsafe UnsafeRawPointer(bitPattern: lastAlignedValue)!
validPointer = ToPointer(lastAlignedPointer._rawValue)
}
return (owner, validPointer)
}
#endif
/// Derive a pointer argument from an inout array parameter.
///
/// This always produces a non-null pointer, even if the array's length is 0.
#if !$Embedded
@_transparent
public // COMPILER_INTRINSIC
func _convertMutableArrayToPointerArgument<
FromElement,
ToPointer: _Pointer
>(_ a: inout [FromElement]) -> (AnyObject?, ToPointer) {
// TODO: Putting a canary at the end of the array in checked builds might
// be a good idea
// Call reserve to force contiguous storage.
a.reserveCapacity(0)
unsafe _debugPrecondition(a._baseAddressIfContiguous != nil || a.isEmpty)
return _convertConstArrayToPointerArgument(a)
}
#else
@_transparent
public // COMPILER_INTRINSIC
func _convertMutableArrayToPointerArgument<
FromElement,
ToPointer: _Pointer
>(_ a: inout [FromElement]) -> (Builtin.NativeObject?, ToPointer) {
// TODO: Putting a canary at the end of the array in checked builds might
// be a good idea
// Call reserve to force contiguous storage.
a.reserveCapacity(0)
_debugPrecondition(unsafe a._baseAddressIfContiguous != nil || a.isEmpty)
return _convertConstArrayToPointerArgument(a)
}
#endif
/// Derive a UTF-8 pointer argument from a value string parameter.
#if !$Embedded
@_transparent
public // COMPILER_INTRINSIC
func _convertConstStringToUTF8PointerArgument<
ToPointer: _Pointer
>(_ str: String) -> (AnyObject?, ToPointer) {
let utf8 = Array(str.utf8CString)
return _convertConstArrayToPointerArgument(utf8)
}
#else
@_transparent
public // COMPILER_INTRINSIC
func _convertConstStringToUTF8PointerArgument<
ToPointer: _Pointer
>(_ str: String) -> (Builtin.NativeObject?, ToPointer) {
let utf8 = Array(str.utf8CString)
return _convertConstArrayToPointerArgument(utf8)
}
#endif