185 // SAFETY: This file is known to not have any active `fdget_pos` calls that did not take the
189 // SAFETY: This file is known to not have any active `fdget_pos` calls that did not take the
193 // SAFETY: The type invariants guarantee that `File` is always ref-counted. This implementation
198         // SAFETY: The existence of a shared reference means that the refcount is nonzero.  in inc_ref()
204         // SAFETY: To call this method, the caller passes us ownership of a normal refcount, so we  in dec_ref()
229 // SAFETY: The type invariants guarantee that `LocalFile` is always ref-counted. This implementation
234         // SAFETY: The existence of a shared reference means that the refcount is nonzero.  in inc_ref()
240         // SAFETY: To call this method, the caller passes us ownership of a normal refcount, so we  in dec_ref()
258         // SAFETY: FFI call, there are no requirements on `fd`.  in fget()
261         // SAFETY: `bindings::fget` created a refcount, and we pass ownership of it to the `ARef`.  in fget()
271     /// # Safety
279         // SAFETY: The caller guarantees that the pointer is not dangling and stays valid for the  in from_raw_file()
297     /// # Safety
306         // SAFETY: `LocalFile` and `File` have the same layout.  in assume_no_fdget_pos()
318         // SAFETY: It's okay to read the `f_cred` field without synchronization because `f_cred` is  in cred()
322         // SAFETY: The signature of this function ensures that the caller will only access the  in cred()
335         // SAFETY: The file is valid because the shared reference guarantees a nonzero refcount.  in flags()
345     /// # Safety
353         // SAFETY: The caller guarantees that the pointer is not dangling and stays valid for the  in from_raw_file()
366         // SAFETY: The caller provides a `&File`, and since it is a reference, it must point at a  in deref()
401         // SAFETY: FFI call, there are no safety requirements on `flags`.  in get_unused_fd_flags()
423         // SAFETY: `self.fd` was previously returned by `get_unused_fd_flags`. We have not yet used  in fd_install()
444         // SAFETY: By the type invariants of this type, `self.fd` was previously returned by  in drop()