Files
swift-mirror/stdlib/public/core/SwiftNativeNSArray.swift
Gábor Horváth 99f9c318ca [6.2][StrictMemorySafety] Check the safety of return types of calls
Explanation: There were some scenarios where we could call an unsafe
function without marking the expression as unsafe. These affect mostly
cases where the function's result is passed to another function or
returned. This PR makes sure we always flag functions with unsafe return
types, even if their result is not stored anywhere for later use.
Issues: rdar://157237301
Original PRs: #83520
Risk: Low, worst case scenario the user has to add redundant unsafe
keywords in strict memory safe mode.
Testing: Added a compiler test.
Reviewers: @DougGregor
2025-08-13 11:49:22 +01:00

587 lines
19 KiB
Swift

//===--- SwiftNativeNSArray.swift -----------------------------------------===//
//
// This source file is part of the Swift.org open source project
//
// Copyright (c) 2014 - 2017 Apple Inc. and the Swift project authors
// Licensed under Apache License v2.0 with Runtime Library Exception
//
// See https://swift.org/LICENSE.txt for license information
// See https://swift.org/CONTRIBUTORS.txt for the list of Swift project authors
//
//===----------------------------------------------------------------------===//
//
// __ContiguousArrayStorageBase supplies the implementation of the
// _NSArrayCore API (and thus, NSArray the API) for our
// _ContiguousArrayStorage<T>. We can't put this implementation
// directly on _ContiguousArrayStorage because generic classes can't
// override Objective-C selectors.
//
//===----------------------------------------------------------------------===//
#if _runtime(_ObjC)
import SwiftShims
/// Returns `true` if the given `index` is valid as a position (`0
/// index count`); otherwise, returns `false`.
@usableFromInline @_transparent
internal func _isValidArrayIndex(_ index: Int, count: Int) -> Bool {
return (index >= 0) && (index <= count)
}
/// Returns `true` if the given `index` is valid for subscripting
/// (`0 index < count`); otherwise, returns `false`.
@usableFromInline @_transparent
internal func _isValidArraySubscript(_ index: Int, count: Int) -> Bool {
return (index >= 0) && (index < count)
}
/// An `NSArray` with Swift-native reference counting and contiguous
/// storage.
///
/// NOTE: older runtimes called this
/// _SwiftNativeNSArrayWithContiguousStorage. The two must coexist, so
/// it was renamed. The old name must not be used in the new runtime.
@_fixed_layout
@usableFromInline
internal class __SwiftNativeNSArrayWithContiguousStorage
: __SwiftNativeNSArray { // Provides NSArray inheritance and native refcounting
@inlinable
@nonobjc internal override init() { super.init() }
@inlinable
deinit {}
// Operate on our contiguous storage
internal func withUnsafeBufferOfObjects<R>(
_ body: (UnsafeBufferPointer<AnyObject>) throws -> R
) rethrows -> R {
_internalInvariantFailure(
"Must override withUnsafeBufferOfObjects in derived classes")
}
}
private let NSNotFound: Int = .max
// Implement the APIs required by NSArray
extension __SwiftNativeNSArrayWithContiguousStorage {
@objc internal var count: Int {
return unsafe withUnsafeBufferOfObjects { $0.count }
}
@inline(__always)
@_effects(readonly)
@nonobjc private func _objectAt(_ index: Int) -> Unmanaged<AnyObject> {
return unsafe withUnsafeBufferOfObjects {
objects in
_precondition(
_isValidArraySubscript(index, count: objects.count),
"Array index out of range")
return unsafe Unmanaged.passUnretained(objects[index])
}
}
@objc(objectAtIndexedSubscript:)
@_effects(readonly)
dynamic internal func objectAtSubscript(_ index: Int) -> Unmanaged<AnyObject> {
return unsafe _objectAt(index)
}
@objc(objectAtIndex:)
@_effects(readonly)
dynamic internal func objectAt(_ index: Int) -> Unmanaged<AnyObject> {
return unsafe _objectAt(index)
}
@objc internal func getObjects(
_ aBuffer: UnsafeMutablePointer<AnyObject>, range: _SwiftNSRange
) {
return unsafe withUnsafeBufferOfObjects {
objects in
_precondition(
_isValidArrayIndex(range.location, count: objects.count),
"Array index out of range")
_precondition(
_isValidArrayIndex(
range.location + range.length, count: objects.count),
"Array index out of range")
if objects.isEmpty { return }
// These objects are "returned" at +0, so treat them as pointer values to
// avoid retains. Copy bytes via a raw pointer to circumvent reference
// counting while correctly aliasing with all other pointer types.
unsafe UnsafeMutableRawPointer(aBuffer).copyMemory(
from: objects.baseAddress! + range.location,
byteCount: range.length * MemoryLayout<AnyObject>.stride)
}
}
@objc(countByEnumeratingWithState:objects:count:)
internal func countByEnumerating(
with state: UnsafeMutablePointer<_SwiftNSFastEnumerationState>,
objects: UnsafeMutablePointer<AnyObject>?, count: Int
) -> Int {
var enumerationState = unsafe state.pointee
if unsafe enumerationState.state != 0 {
return 0
}
return unsafe withUnsafeBufferOfObjects {
objects in
unsafe enumerationState.mutationsPtr = _fastEnumerationStorageMutationsPtr
unsafe enumerationState.itemsPtr =
unsafe AutoreleasingUnsafeMutablePointer(objects.baseAddress)
unsafe enumerationState.state = 1
unsafe state.pointee = enumerationState
return objects.count
}
}
@objc(copyWithZone:)
internal func copy(with _: _SwiftNSZone?) -> AnyObject {
return self
}
}
@_fixed_layout
@usableFromInline
@objc internal final class _SwiftNSMutableArray :
_SwiftNativeNSMutableArray
{
internal var contents: [AnyObject]
internal init(_ array: [AnyObject]) {
contents = array
super.init()
}
@objc internal var count: Int {
return contents.count
}
@objc(objectAtIndexedSubscript:)
@_effects(readonly)
dynamic internal func objectAtSubscript(_ index: Int) -> Unmanaged<AnyObject> {
//TODO: exception instead of precondition, once that's possible
return unsafe Unmanaged.passUnretained(contents[index])
}
@objc(objectAtIndex:)
@_effects(readonly)
dynamic internal func objectAt(_ index: Int) -> Unmanaged<AnyObject> {
//TODO: exception instead of precondition, once that's possible
return unsafe Unmanaged.passUnretained(contents[index])
}
@objc internal func getObjects(
_ aBuffer: UnsafeMutablePointer<AnyObject>, range: _SwiftNSRange
) {
return unsafe contents.withContiguousStorageIfAvailable { objects in
//TODO: exceptions instead of preconditions, once that's possible
_precondition(
_isValidArrayIndex(range.location, count: objects.count),
"Array index out of range")
_precondition(
_isValidArrayIndex(
range.location + range.length, count: objects.count),
"Array index out of range")
if objects.isEmpty { return }
// These objects are "returned" at +0, so treat them as pointer values to
// avoid retains. Copy bytes via a raw pointer to circumvent reference
// counting while correctly aliasing with all other pointer types.
unsafe UnsafeMutableRawPointer(aBuffer).copyMemory(
from: objects.baseAddress! + range.location,
byteCount: range.length * MemoryLayout<AnyObject>.stride)
}!
}
@objc(countByEnumeratingWithState:objects:count:)
internal func countByEnumerating(
with state: UnsafeMutablePointer<_SwiftNSFastEnumerationState>,
objects: UnsafeMutablePointer<AnyObject>?, count: Int
) -> Int {
var enumerationState = unsafe state.pointee
if unsafe enumerationState.state != 0 {
return 0
}
return unsafe contents.withContiguousStorageIfAvailable {
objects in
unsafe enumerationState.mutationsPtr = _fastEnumerationStorageMutationsPtr
unsafe enumerationState.itemsPtr =
unsafe AutoreleasingUnsafeMutablePointer(objects.baseAddress)
unsafe enumerationState.state = 1
unsafe state.pointee = enumerationState
return objects.count
}!
}
@objc(copyWithZone:)
dynamic internal func copy(with _: _SwiftNSZone?) -> AnyObject {
return contents._bridgeToObjectiveCImpl()
}
@objc(insertObject:atIndex:)
dynamic internal func insert(_ anObject: AnyObject, at index: Int) {
contents.insert(anObject, at: index)
}
@objc(removeObjectAtIndex:)
dynamic internal func removeObject(at index: Int) {
contents.remove(at: index)
}
@objc(addObject:)
dynamic internal func add(_ anObject: AnyObject) {
contents.append(anObject)
}
@objc(removeLastObject)
dynamic internal func removeLastObject() {
if !contents.isEmpty {
contents.removeLast()
}
}
@objc(replaceObjectAtIndex:withObject:)
dynamic internal func replaceObject(at index: Int, with anObject: AnyObject) {
//enforces bounds, unlike set equivalent, which can append
contents[index] = anObject
}
//Non-core methods overridden for performance
@objc(exchangeObjectAtIndex:withObjectAtIndex:)
dynamic internal func exchange(at index: Int, with index2: Int) {
contents.swapAt(index, index2)
}
@objc(replaceObjectsInRange:withObjects:count:)
dynamic internal func replaceObjects(in range: _SwiftNSRange,
with objects: UnsafePointer<AnyObject>,
count: Int) {
let range = range.location ..< range.location + range.length
let buf = unsafe UnsafeBufferPointer(start: objects, count: count)
if range == contents.startIndex..<contents.endIndex {
contents = unsafe Array(buf)
} else {
// We make an Array here to make sure that something is holding onto the
// objects in `buf`, since replaceSubrange could release them
unsafe contents.replaceSubrange(range, with: Array(buf))
}
}
@objc(insertObjects:count:atIndex:)
dynamic internal func insertObjects(_ objects: UnsafePointer<AnyObject>,
count: Int,
at index: Int) {
let buf = unsafe UnsafeBufferPointer(start: objects, count: count)
unsafe contents.insert(contentsOf: buf, at: index)
}
@objc(indexOfObjectIdenticalTo:)
dynamic internal func index(ofObjectIdenticalTo object: AnyObject) -> Int {
return contents.firstIndex { $0 === object } ?? NSNotFound
}
@objc(removeObjectsInRange:)
dynamic internal func removeObjects(in range: _SwiftNSRange) {
let range = range.location ..< range.location + range.length
contents.replaceSubrange(range, with: [])
}
@objc(removeAllObjects)
dynamic internal func removeAllObjects() {
contents = []
}
@objc(setObject:atIndex:)
dynamic internal func setObject(_ anObject: AnyObject, at index: Int) {
if index == contents.count {
contents.append(anObject)
} else {
contents[index] = anObject
}
}
@objc(setObject:atIndexedSubscript:) dynamic
internal func setObjectSubscript(_ anObject: AnyObject, at index: Int) {
if index == contents.count {
contents.append(anObject)
} else {
contents[index] = anObject
}
}
}
/// An `NSArray` whose contiguous storage is created and filled, upon
/// first access, by bridging the elements of a Swift `Array`.
///
/// Ideally instances of this class would be allocated in-line in the
/// buffers used for Array storage.
@_fixed_layout // FIXME(sil-serialize-all)
@usableFromInline
@objc internal class __SwiftDeferredNSArray
: __SwiftNativeNSArrayWithContiguousStorage {
// This stored property should be stored at offset zero. We perform atomic
// operations on it.
//
// Do not access this property directly.
@nonobjc
internal final var _heapBufferBridged_DoNotUse: AnyObject?
// When this class is allocated inline, this property can become a
// computed one.
@usableFromInline
@nonobjc
internal final let _nativeStorage: __ContiguousArrayStorageBase
@nonobjc
internal final var _heapBufferBridgedPtr: UnsafeMutablePointer<AnyObject?> {
return unsafe _getUnsafePointerToStoredProperties(self).assumingMemoryBound(
to: Optional<AnyObject>.self)
}
internal final var _heapBufferBridged: __BridgingBufferStorage? {
if let ref =
unsafe _stdlib_atomicLoadARCRef(object: _heapBufferBridgedPtr) {
return unsafe unsafeBitCast(ref, to: __BridgingBufferStorage.self)
}
return nil
}
@inlinable // FIXME(sil-serialize-all)
@nonobjc
internal init(_nativeStorage: __ContiguousArrayStorageBase) {
self._nativeStorage = _nativeStorage
}
internal final func _destroyBridgedStorage(_ hb: __BridgingBufferStorage?) {
if let bridgedStorage = hb {
withExtendedLifetime(bridgedStorage) {
let buffer = _BridgingBuffer(bridgedStorage)
let count = buffer.count
unsafe buffer.baseAddress.deinitialize(count: count)
}
}
}
deinit {
_destroyBridgedStorage(_heapBufferBridged)
}
internal override func withUnsafeBufferOfObjects<R>(
_ body: (UnsafeBufferPointer<AnyObject>) throws -> R
) rethrows -> R {
while true {
var buffer: UnsafeBufferPointer<AnyObject>
// If we've already got a buffer of bridged objects, just use it
if let bridgedStorage = _heapBufferBridged {
let bridgingBuffer = _BridgingBuffer(bridgedStorage)
unsafe buffer = unsafe UnsafeBufferPointer(
start: bridgingBuffer.baseAddress, count: bridgingBuffer.count)
}
// If elements are bridged verbatim, the native buffer is all we
// need, so return that.
else if let buf = unsafe _nativeStorage._withVerbatimBridgedUnsafeBuffer(
{ unsafe $0 }
) {
unsafe buffer = unsafe buf
}
else {
// Create buffer of bridged objects.
let objects = _nativeStorage._getNonVerbatimBridgingBuffer()
// Atomically store a reference to that buffer in self.
if unsafe !_stdlib_atomicInitializeARCRef(
object: _heapBufferBridgedPtr, desired: objects.storage!) {
// Another thread won the race. Throw out our buffer.
unsafe _destroyBridgedStorage(
unsafeDowncast(objects.storage!, to: __BridgingBufferStorage.self))
}
continue // Try again
}
defer { _fixLifetime(self) }
return try unsafe body(buffer)
}
}
/// Returns the number of elements in the array.
///
/// This override allows the count to be read without triggering
/// bridging of array elements.
@objc
internal override final var count: Int {
return _nativeStorage.countAndCapacity.count
}
}
/// A `__SwiftDeferredNSArray` which is used for static read-only Swift Arrays.
///
/// In contrast to its base class, `__SwiftDeferredStaticNSArray` is generic
/// over the element type. This is needed because the storage class of a static
/// read-only array (`__StaticArrayStorage`) does _not_ provide the element
/// type.
internal final class __SwiftDeferredStaticNSArray<Element>
: __SwiftDeferredNSArray {
internal override func withUnsafeBufferOfObjects<R>(
_ body: (UnsafeBufferPointer<AnyObject>) throws -> R
) rethrows -> R {
while true {
var buffer: UnsafeBufferPointer<AnyObject>
// If we've already got a buffer of bridged objects, just use it
if let bridgedStorage = _heapBufferBridged {
let bridgingBuffer = _BridgingBuffer(bridgedStorage)
unsafe buffer = unsafe UnsafeBufferPointer(
start: bridgingBuffer.baseAddress, count: bridgingBuffer.count)
}
else {
// Static read-only arrays can only contain non-verbatim bridged
// element types.
// Create buffer of bridged objects.
let objects = getNonVerbatimBridgingBuffer()
// Atomically store a reference to that buffer in self.
if unsafe !_stdlib_atomicInitializeARCRef(
object: _heapBufferBridgedPtr, desired: objects.storage!) {
// Another thread won the race. Throw out our buffer.
unsafe _destroyBridgedStorage(
unsafeDowncast(objects.storage!, to: __BridgingBufferStorage.self))
}
continue // Try again
}
defer { _fixLifetime(self) }
return try unsafe body(buffer)
}
}
internal func getNonVerbatimBridgingBuffer() -> _BridgingBuffer {
_internalInvariant(
!_isBridgedVerbatimToObjectiveC(Element.self),
"Verbatim bridging should be handled separately")
let count = _nativeStorage.countAndCapacity.count
let result = _BridgingBuffer(count)
let resultPtr = unsafe result.baseAddress
let p = unsafe UnsafeMutablePointer<Element>(Builtin.projectTailElems(_nativeStorage, Element.self))
for i in 0..<count {
unsafe (resultPtr + i).initialize(to: _bridgeAnythingToObjectiveC(p[i]))
}
_fixLifetime(self)
return result
}
}
#else
// Empty shim version for non-objc platforms.
@usableFromInline
@_fixed_layout
internal class __SwiftNativeNSArrayWithContiguousStorage {
@inlinable
internal init() {}
@inlinable
deinit {}
}
@available(*, unavailable)
extension __SwiftNativeNSArrayWithContiguousStorage: Sendable {}
#endif
/// Base class of the heap buffer backing arrays.
///
/// NOTE: older runtimes called this _ContiguousArrayStorageBase. The
/// two must coexist, so it was renamed. The old name must not be used
/// in the new runtime.
@usableFromInline
@_fixed_layout
internal class __ContiguousArrayStorageBase
: __SwiftNativeNSArrayWithContiguousStorage {
@usableFromInline
final var countAndCapacity: _ArrayBody
@inlinable
@nonobjc
internal init(_doNotCallMeBase: ()) {
_internalInvariantFailure("creating instance of __ContiguousArrayStorageBase")
}
#if _runtime(_ObjC)
internal override func withUnsafeBufferOfObjects<R>(
_ body: (UnsafeBufferPointer<AnyObject>) throws -> R
) rethrows -> R {
if let result = try unsafe _withVerbatimBridgedUnsafeBuffer(body) {
return result
}
_internalInvariantFailure(
"Can't use a buffer of non-verbatim-bridged elements as an NSArray")
}
/// If the stored type is bridged verbatim, invoke `body` on an
/// `UnsafeBufferPointer` to the elements and return the result.
/// Otherwise, return `nil`.
internal func _withVerbatimBridgedUnsafeBuffer<R>(
_ body: (UnsafeBufferPointer<AnyObject>) throws -> R
) rethrows -> R? {
_internalInvariantFailure(
"Concrete subclasses must implement _withVerbatimBridgedUnsafeBuffer")
}
internal func _getNonVerbatimBridgingBuffer() -> _BridgingBuffer {
_internalInvariantFailure(
"Concrete subclasses must implement _getNonVerbatimBridgingBuffer")
}
@objc(mutableCopyWithZone:)
dynamic internal func mutableCopy(with _: _SwiftNSZone?) -> AnyObject {
let arr = Array<AnyObject>(_ContiguousArrayBuffer(self))
return _SwiftNSMutableArray(arr)
}
@objc(indexOfObjectIdenticalTo:)
dynamic internal func index(ofObjectIdenticalTo object: AnyObject) -> Int {
let arr = Array<AnyObject>(_ContiguousArrayBuffer(self))
return arr.firstIndex { $0 === object } ?? NSNotFound
}
#endif
@inlinable
internal func canStoreElements(ofDynamicType _: Any.Type) -> Bool {
_internalInvariantFailure(
"Concrete subclasses must implement canStoreElements(ofDynamicType:)")
}
/// A type that every element in the array is.
@inlinable
@_unavailableInEmbedded
internal var staticElementType: Any.Type {
_internalInvariantFailure(
"Concrete subclasses must implement staticElementType")
}
@inlinable
deinit {
_internalInvariant(
self !== _emptyArrayStorage, "Deallocating empty array storage?!")
}
}