Lines Matching full:safety

119 // SAFETY: All zeros is equivalent to `None` (option layout optimization guarantee:
123 // SAFETY: `Box` is `Send` if `T` is `Send` because the `Box` owns a `T`.
131 // SAFETY: `Box` is `Sync` if `T` is `Sync` because the `Box` owns a `T`.
146     /// # Safety
155         // INVARIANT: Validity of `raw` is guaranteed by the safety preconditions of this function.
156         // SAFETY: By the safety preconditions of this function, `raw` is not a NULL pointer.
171     /// // SAFETY: `ptr` comes from a previous call to `KBox::into_raw`.
187         // SAFETY: `Box::into_raw` always returns a properly aligned and dereferenceable pointer
202     /// # Safety
208         // SAFETY: `raw` comes from a previous call to `Box::into_raw`. By the safety requirements
218         // SAFETY: We've just initialized `b`'s value.
324             // SAFETY:
330             // SAFETY:
341         // SAFETY: `slice` points to an allocation allocated with `A` (`buffer`) and holds a valid
356         // SAFETY: `ptr` is valid, because it came from `Box::into_raw`.
376         // SAFETY: `ptr` is valid, because it came from `this`. After this call we never access the
385         // SAFETY: By the type invariant `&*b` is valid for `read`.
402         // SAFETY: The value wrapped inside a `Pin<Box<T, A>>` cannot be moved or replaced as long
416         // SAFETY: When init errors/panics, slot will get deallocated but not dropped,
419         // SAFETY: All fields have been initialized.
425         // SAFETY: When init errors/panics, slot will get deallocated but not dropped,
428         // SAFETY: All fields have been initialized.
456 // SAFETY: The pointer returned by `into_foreign` comes from a well aligned
476         // SAFETY: The safety requirements of this function ensure that `ptr` comes from a previous
482         // SAFETY: The safety requirements of this method ensure that the object remains alive and
489         // SAFETY: The safety requirements of this method ensure that the pointer is valid and that
495 // SAFETY: The pointer returned by `into_foreign` comes from a well aligned
506         // SAFETY: We are still treating the box as pinned.
511         // SAFETY: The safety requirements of this function ensure that `ptr` comes from a previous
517         // SAFETY: The safety requirements for this function ensure that the object is still alive,
519         // The safety requirements of `from_foreign` also ensure that the object remains alive for
523         // SAFETY: This pointer originates from a `Pin<Box<T>>`.
529         // SAFETY: The safety requirements for this function ensure that the object is still alive,
531         // The safety requirements of `from_foreign` also ensure that the object remains alive for
535         // SAFETY: This pointer originates from a `Pin<Box<T>>`.
548         // SAFETY: `self.0` is always properly aligned, dereferenceable and points to an initialized
560         // SAFETY: `self.0` is always properly aligned, dereferenceable and points to an initialized
650         // SAFETY: The pointer in `self.0` is guaranteed to be valid by the type invariant.
653         // SAFETY:
675 /// // SAFETY: There is no concurrent read or write to the same page.
689         // SAFETY: