Skip to content

Ensure the unsafe markers in rust/std/lib.rsspec match reality #863

@tautschnig

Description

@tautschnig

I have reviewed rust/std/lib.rsspec and noticed the following:

  • // SOUNDNESS ISSUE: We currently don't prevent blocks of memory allocated by an allocator from outliving the allocator itself!! https://github.com/verifast/verifast/issues/829
    no longer seems to be an issue with [Rust] pred points_to_at_lft #853 having been merged.
  • It seems that there is no requirement that unsafe markers on specifications agree to their definitions. Examples include
    fn new_unchecked(ptr: *mut T) -> Unique<T>;
    or
    fn from_size_align_unchecked(size: usize, align: usize) -> Layout;
    . This tripped me up a bit as I expected all safe functions to have //@ req true.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions