sel4_externally_shared

Struct VolatileRef

Source
pub struct VolatileRef<'a, T, A = ReadWrite, O = VolatileOps>
where T: ?Sized,
{ /* private fields */ }
Expand description

Volatile pointer type that respects Rust’s aliasing rules.

This pointer type behaves similar to Rust’s reference types:

  • it requires exclusive &mut self access for mutability
  • only read-only types implement [Clone] and [Copy]
  • [Send] and [Sync] are implemented if T: Sync

To perform volatile operations on VolatileRef types, use the as_ptr or as_mut_ptr methods to create a temporary VolatilePtr instance.

Since not all volatile resources (e.g. memory mapped device registers) are both readable and writable, this type supports limiting the allowed access types through an optional second generic parameter A that can be one of ReadWrite, ReadOnly, or WriteOnly. It defaults to ReadWrite, which allows all operations.

The size of this struct is the same as the size of the contained reference.

Implementations§

Source§

impl<'a, T> VolatileRef<'a, T>
where T: ?Sized,

Constructor functions.

These functions construct new VolatileRef values. While the new function creates a VolatileRef instance with unrestricted access, there are also functions for creating read-only or write-only instances.

Source

pub unsafe fn new(pointer: NonNull<T>) -> VolatileRef<'a, T>

Turns the given pointer into a VolatileRef.

§Safety
  • The pointer must be properly aligned.
  • It must be “dereferenceable” in the sense defined in the [core::ptr] documentation.
  • The pointer must point to an initialized instance of T.
  • You must enforce Rust’s aliasing rules, since the returned lifetime ’a is arbitrarily chosen and does not necessarily reflect the actual lifetime of the data. In particular, while this VolatileRef exists, the memory the pointer points to must not get accessed (read or written) through any other pointer.
Source

pub const unsafe fn new_read_only( pointer: NonNull<T>, ) -> VolatileRef<'a, T, ReadOnly>

Turns the given pointer into a read-only VolatileRef.

§Safety
  • The pointer must be properly aligned.
  • It must be “dereferenceable” in the sense defined in the [core::ptr] documentation.
  • The pointer must point to an initialized instance of T.
  • You must enforce Rust’s aliasing rules, since the returned lifetime ’a is arbitrarily chosen and does not necessarily reflect the actual lifetime of the data. In particular, while this VolatileRef exists, the memory the pointer points to must not get mutated.
Source

pub const unsafe fn new_restricted<A>( access: A, pointer: NonNull<T>, ) -> VolatileRef<'a, T, A>
where A: Access,

Turns the given pointer into a VolatileRef instance with the given access.

§Safety
  • The pointer must be properly aligned.
  • It must be “dereferenceable” in the sense defined in the [core::ptr] documentation.
  • The pointer must point to an initialized instance of T.
  • You must enforce Rust’s aliasing rules, since the returned lifetime ’a is arbitrarily chosen and does not necessarily reflect the actual lifetime of the data. In particular, while this VolatileRef exists, the memory the pointer points to must not get mutated. If the given access parameter allows write access, the pointer must not get read either while this VolatileRef exists.
Source

pub const unsafe fn new_restricted_with_ops<A, O>( access: A, ops: O, pointer: NonNull<T>, ) -> VolatileRef<'a, T, A, O>
where A: Access, O: Ops,

Source

pub fn from_ref(reference: &'a T) -> VolatileRef<'a, T, ReadOnly>
where T: 'a,

Creates a VolatileRef from the given shared reference.

Note: This function is only intended for testing, not for accessing real volatile data. The reason is that the &mut T argument is considered dereferenceable by Rust, so the compiler is allowed to insert non-volatile reads. This might lead to undesired (or even undefined?) behavior when accessing volatile data. So to be safe, only create raw pointers to volatile data and use the Self::new constructor instead.

Source

pub fn from_mut_ref(reference: &'a mut T) -> VolatileRef<'a, T>
where T: 'a,

Creates a VolatileRef from the given mutable reference.

Note: This function is only intended for testing, not for accessing real volatile data. The reason is that the &mut T argument is considered dereferenceable by Rust, so the compiler is allowed to insert non-volatile reads. This might lead to undesired (or even undefined?) behavior when accessing volatile data. So to be safe, only create raw pointers to volatile data and use the Self::new constructor instead.

Source§

impl<'a, T, A, O> VolatileRef<'a, T, A, O>
where T: ?Sized,

Source

pub fn as_ptr(&self) -> VolatilePtr<'_, T, <A as Access>::RestrictShared, O>
where A: Access,

Borrows this VolatileRef as a read-only VolatilePtr.

Use this method to do (partial) volatile reads of the referenced data.

Source

pub fn as_mut_ptr(&mut self) -> VolatilePtr<'_, T, A, O>
where A: Access,

Borrows this VolatileRef as a mutable VolatilePtr.

Use this method to do (partial) volatile reads or writes of the referenced data.

Source

pub fn into_ptr(self) -> VolatilePtr<'a, T, A>
where A: Access,

Converts this VolatileRef into a VolatilePtr with full access without shortening the lifetime.

Use this method when you need a VolatilePtr instance that lives for the full lifetime 'a.

This method consumes the VolatileRef.

Source§

impl<'a, T> VolatileRef<'a, T>
where T: ?Sized,

Methods for restricting access.

Source

pub fn read_only(self) -> VolatileRef<'a, T, ReadOnly>

Restricts access permissions to read-only.

§Example
use volatile::VolatileRef;
use core::ptr::NonNull;

let mut value: i16 = -4;
let mut volatile = VolatileRef::from_mut_ref(&mut value);

let read_only = volatile.read_only();
assert_eq!(read_only.as_ptr().read(), -4);
// read_only.as_ptr().write(10); // compile-time error
Source

pub fn write_only(self) -> VolatileRef<'a, T, WriteOnly>

Restricts access permissions to write-only.

§Example

Creating a write-only reference to a struct field:

use volatile::{VolatileRef};
use core::ptr::NonNull;

#[derive(Clone, Copy)]
struct Example { field_1: u32, field_2: u8, }
let mut value = Example { field_1: 15, field_2: 255 };
let mut volatile = VolatileRef::from_mut_ref(&mut value);

let write_only = volatile.write_only();
// write_only.as_ptr().read(); // compile-time error

Trait Implementations§

Source§

impl<'a, T, A, O> Clone for VolatileRef<'a, T, A, O>
where A: Access + Copyable, O: Ops, T: ?Sized,

Source§

fn clone(&self) -> VolatileRef<'a, T, A, O>

Returns a copy of the value. Read more
1.0.0§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl<T, A, O> Debug for VolatileRef<'_, T, A, O>
where T: ?Sized,

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter. Read more
Source§

impl<'a, T, A, O> Copy for VolatileRef<'a, T, A, O>
where A: Access + Copyable, O: Ops, T: ?Sized,

Source§

impl<T, A, O> Send for VolatileRef<'_, T, A, O>
where T: Sync + ?Sized,

Source§

impl<T, A, O> Sync for VolatileRef<'_, T, A, O>
where T: Sync + ?Sized,

Auto Trait Implementations§

§

impl<'a, T, A, O> Freeze for VolatileRef<'a, T, A, O>
where T: ?Sized,

§

impl<'a, T, A, O> RefUnwindSafe for VolatileRef<'a, T, A, O>
where A: RefUnwindSafe, O: RefUnwindSafe, T: RefUnwindSafe + ?Sized,

§

impl<'a, T, A, O> Unpin for VolatileRef<'a, T, A, O>
where A: Unpin, O: Unpin, T: ?Sized,

§

impl<'a, T, A, O> UnwindSafe for VolatileRef<'a, T, A, O>
where T: RefUnwindSafe + ?Sized, A: UnwindSafe, O: UnwindSafe,

Blanket Implementations§

§

impl<T> Any for T
where T: 'static + ?Sized,

§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
§

impl<T> Borrow<T> for T
where T: ?Sized,

§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
§

impl<T> BorrowMut<T> for T
where T: ?Sized,

§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
§

impl<T> CloneToUninit for T
where T: Clone,

§

unsafe fn clone_to_uninit(&self, dst: *mut T)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dst. Read more
§

impl<T> From<T> for T

§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, U> Into<U> for T
where U: From<T>,

§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of [From]<T> for U chooses to do.

§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

§

type Error = Infallible

The type returned in the event of a conversion error.
§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.