Lines Matching full:safety

429 // SAFETY: Ownership of an `HrTimer` can be moved to other threads and
433 // SAFETY: Timer operations are locked on the C side, so it is safe to operate
447                 // SAFETY: By design of `pin_init!`, `place` is a pointer to a
468     /// # Safety
472         // SAFETY: The field projection to `timer` does not go out of bounds,
494     /// # Safety
498         // SAFETY: `this` points to an allocation of at least `HrTimer` size.
503         // SAFETY: `c_timer_ptr` is initialized and valid. Synchronization is
510     /// # Safety
520         // SAFETY:
521         // * The C API requirements for this function are fulfilled by our safety contract.
522         // * `self_ptr` is guaranteed to point to a valid `Self` via our safety contract
544         // SAFETY: `raw_forward` does not move `Self`
547         // SAFETY: By existence of `Pin<&mut Self>`, the pointer passed to `raw_forward` points to a
571         // SAFETY: `self` is an immutable reference and thus always points to a valid `HrTimer`.
574         // SAFETY:
624 /// # Safety
637     /// # Safety
647     /// # Safety
656 /// # Safety
673 // SAFETY: By the safety requirement of [`UnsafeHrTimerPointer`], dropping the
690         // SAFETY: We drop the timer handle below before returning.
708     /// # Safety
735 /// # Safety
741 /// Note: One way to satisfy the safety requirement is to call `Self::cancel` in
760 /// # Safety
777     /// # Safety
788     /// # Safety
800     /// # Safety
804         // SAFETY: `this` is a valid pointer to a `Self`.
807         // SAFETY: timer_ptr points to an allocation of at least `HrTimer` size.
814     /// # Safety
820         // SAFETY: By function safety requirement, `this` is a valid `Self`.
1033     /// # Safety
1043         // SAFETY: The caller guarantees `timer` is a valid pointer to an initialized
1045         // INVARIANT: Our safety contract ensures that we're within the context of a timer callback
1055         // SAFETY:
1087         // SAFETY: This implementation of `raw_get_timer` only compiles if the
1096                 // SAFETY: The caller promises that the pointer is not dangling.
1104                 // SAFETY: As per the safety requirement of this function, `ptr`