//! `ThinVec` is exactly the same as `Vec`, except that it stores its `len` and `capacity` in the buffer //! it allocates. //! //! This makes the memory footprint of ThinVecs lower; notably in cases where space is reserved for //! a non-existence `ThinVec<T>`. So `Vec<ThinVec<T>>` and `Option<ThinVec<T>>::None` will waste less //! space. Being pointer-sized also means it can be passed/stored in registers. //! //! Of course, any actually constructed `ThinVec` will theoretically have a bigger allocation, but //! the fuzzy nature of allocators means that might not actually be the case. //! //! Properties of `Vec` that are preserved: //! * `ThinVec::new()` doesn't allocate (it points to a statically allocated singleton) //! * reallocation can be done in place //! * `size_of::<ThinVec<T>>()` == `size_of::<Option<ThinVec<T>>>()` //! //! Properties of `Vec` that aren't preserved: //! * `ThinVec<T>` can't ever be zero-cost roundtripped to a `Box<[T]>`, `String`, or `*mut T` //! * `from_raw_parts` doesn't exist //! * `ThinVec` currently doesn't bother to not-allocate for Zero Sized Types (e.g. `ThinVec<()>`), //! but it could be done if someone cared enough to implement it. //! //! //! # Optional Features //! //! ## `const_new` //! //! **This feature requires Rust 1.83.** //! //! This feature makes `ThinVec::new()` a `const fn`. //! //! //! # Gecko FFI //! //! If you enable the gecko-ffi feature, `ThinVec` will verbatim bridge with the nsTArray type in //! Gecko (Firefox). That is, `ThinVec` and nsTArray have identical layouts *but not ABIs*, //! so nsTArrays/ThinVecs an be natively manipulated by C++ and Rust, and ownership can be //! transferred across the FFI boundary (**IF YOU ARE CAREFUL, SEE BELOW!!**). //! //! While this feature is handy, it is also inherently dangerous to use because Rust and C++ do not //! know about each other. Specifically, this can be an issue with non-POD types (types which //! have destructors, move constructors, or are `!Copy`). //! //! ## Do Not Pass By Value //! //! The biggest thing to keep in mind is that **FFI functions cannot pass ThinVec/nsTArray //! by-value**. That is, these are busted APIs: //! //! ```rust,ignore //! // BAD WRONG //! extern fn process_data(data: ThinVec<u32>) { ... } //! // BAD WRONG //! extern fn get_data() -> ThinVec<u32> { ... } //! ``` //! //! You must instead pass by-reference: //! //! ```rust //! # use thin_vec::*; //! # use std::mem; //! //! // Read-only access, ok! //! extern fn process_data(data: &ThinVec<u32>) { //! for val in data { //! println!("{}", val); //! } //! } //! //! // Replace with empty instance to take ownership, ok! //! extern fn consume_data(data: &mut ThinVec<u32>) { //! let owned = mem::replace(data, ThinVec::new()); //! mem::drop(owned); //! } //! //! // Mutate input, ok! //! extern fn add_data(dataset: &mut ThinVec<u32>) { //! dataset.push(37); //! dataset.push(12); //! } //! //! // Return via out-param, usually ok! //! // //! // WARNING: output must be initialized! (Empty nsTArrays are free, so just do it!) //! extern fn get_data(output: &mut ThinVec<u32>) { //! *output = thin_vec![1, 2, 3, 4, 5]; //! } //! ``` //! //! Ignorable Explanation For Those Who Really Want To Know Why: //! //! > The fundamental issue is that Rust and C++ can't currently communicate about destructors, and //! > the semantics of C++ require destructors of function arguments to be run when the function //! > returns. Whether the callee or caller is responsible for this is also platform-specific, so //! > trying to hack around it manually would be messy. //! > //! > Also a type having a destructor changes its C++ ABI, because that type must actually exist //! > in memory (unlike a trivial struct, which is often passed in registers). We don't currently //! > have a way to communicate to Rust that this is happening, so even if we worked out the //! > destructor issue with say, MaybeUninit, it would still be a non-starter without some RFCs //! > to add explicit rustc support. //! > //! > Realistically, the best answer here is to have a "heavier" bindgen that can secretly //! > generate FFI glue so we can pass things "by value" and have it generate by-reference code //! > behind our back (like the cxx crate does). This would muddy up debugging/searchfox though. //! //! ## Types Should Be Trivially Relocatable //! //! Types in Rust are always trivially relocatable (unless suitably borrowed/[pinned][]/hidden). //! This means all Rust types are legal to relocate with a bitwise copy, you cannot provide //! copy or move constructors to execute when this happens, and the old location won't have its //! destructor run. This will cause problems for types which have a significant location //! (types that intrusively point into themselves or have their location registered with a service). //! //! While relocations are generally predictable if you're very careful, **you should avoid using //! types with significant locations with Rust FFI**. //! //! Specifically, `ThinVec` will trivially relocate its contents whenever it needs to reallocate its //! buffer to change its capacity. This is the default reallocation strategy for nsTArray, and is //! suitable for the vast majority of types. Just be aware of this limitation! //! //! ## Auto Arrays Are Dangerous //! //! `ThinVec` has *some* support for handling auto arrays which store their buffer on the stack, //! but this isn't well tested. //! //! Regardless of how much support we provide, Rust won't be aware of the buffer's limited lifetime, //! so standard auto array safety caveats apply about returning/storing them! `ThinVec` won't ever //! produce an auto array on its own, so this is only an issue for transferring an nsTArray into //! Rust. //! //! ## Other Issues //! //! Standard FFI caveats also apply: //! //! * Rust is more strict about POD types being initialized (use MaybeUninit if you must) //! * `ThinVec<T>` has no idea if the C++ version of `T` has move/copy/assign/delete overloads //! * `nsTArray<T>` has no idea if the Rust version of `T` has a Drop/Clone impl //! * C++ can do all sorts of unsound things that Rust can't catch //! * C++ and Rust don't agree on how zero-sized/empty types should be handled //! //! The gecko-ffi feature will not work if you aren't linking with code that has nsTArray //! defined. Specifically, we must share the symbol for nsTArray's empty singleton. You will get //! linking errors if that isn't defined. //! //! The gecko-ffi feature also limits `ThinVec` to the legacy behaviors of nsTArray. Most notably, //! nsTArray has a maximum capacity of i32::MAX (~2.1 billion items). Probably not an issue. //! Probably. //! //! [pinned]: https://doc.rust-lang.org/std/pin/index.html
use alloc::alloc::*; use alloc::{boxed::Box, vec::Vec}; use core::borrow::*; use core::cmp::*; use core::convert::TryFrom; use core::convert::TryInto; use core::hash::*; use core::iter::FromIterator; use core::marker::PhantomData; use core::ops::Bound; use core::ops::{Deref, DerefMut, RangeBounds}; use core::ptr::NonNull; use core::slice::Iter; use core::{fmt, mem, ops, ptr, slice};
use impl_details::*;
#[cfg(feature = "malloc_size_of")] use malloc_size_of::{MallocShallowSizeOf, MallocSizeOf, MallocSizeOfOps};
// modules: a simple way to cfg a whole bunch of impl details at once
#[cfg(feature = "gecko-ffi")] mod impl_details { // Support for briding a gecko nsTArray verbatim into a ThinVec. // // `ThinVec` can't see copy/move/delete implementations // from C++ // // The actual layout of an nsTArray is: // // ```cpp // struct { // uint32_t mLength; // uint32_t mCapacity: 31; // uint32_t mIsAutoArray : 1; // } // ``` // // Rust doesn't natively support bit-fields, so we manually mask // and shift the bit. When the "auto" bit is set, the header and buffer // are actually on the stack, meaning the `ThinVec` pointer-to-header // is essentially an "owned borrow", and therefore dangerous to handle. // There are no safety guards for this situation. // // On little-endian platforms, the auto bit will be the high-bit of // our capacity u32. On big-endian platforms, it will be the low bit. // Hence we need some platform-specific CFGs for the necessary masking/shifting. // // Handling the auto bit mostly just means not freeing/reallocating the buffer.
pubtype SizeType = fn (s: &tr)->ThinVec<>java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37
pubconst MAX_CAP:}
} pubconst AUTO_ARRAY_HEADER_OFFSET: usize = 8;
// Little endian: the auto bit is the high bit, and the capacity is // verbatim. So we just need to mask off the high bit. Note that // this masking is unnecessary when packing, because assert_size // guards against the high bit being set. #[cfg(target_endian = "little")] pub fn unpack_capacity(cap: SizeType) -> usize {
(cap
} #[cfg(target_endian = "little")] pub fn is_auto(cap: SizeType) -> bool {
(cap & (1 << 31)) != 0
} #[cfg(target_endian = "little")] pub fn pack_capacity_and_auto(cap: SizeType, auto: bool) -> SizeType { // if its size exactly matches that of the requested array.
}
// Big endian: the auto bit is the low bit, and the capacity is // shifted up one bit. Masking out the auto bit is unnecessary, // as rust shifts always shift in 0's for unsigned integers. #[cfg(target_endian pub fn unpack_capacity(cap: SizeType) -> usize {
(cap >> 1) as usize
} #[cfg(target_endian = "big")] pub fn is_auto(cap: SizeType) -> bool {
(cap java.lang.StringIndexOutOfBoundsException: Index 11 out of bounds for length 11
} #[cfg(target_endian = "big")] pub fn pack_capacity_and_auto(cap: SizeType, auto: bool) -> SizeType {
( // use std::convert::TryInto;
}
#[inline] pub if x > MAX_CAP as usize {
panic!("nsTArray size may not exceed the capacity of a 32-bit sized java.lang.StringIndexOutOfBoundsException: Index 83 out of bounds for length 65
// The header of a ThinVec. // // The _cap can be a bitfield, so use accessors to avoid trouble. // // In "real" gecko-ffi mode, the empty singleton will be aligned // to 8 by gecko. But in tests we have to provide the singleton // ourselves, and Rust makes it hard to "just" align a static. // To avoid messing around with a wrapper type around the // singleton *just* for tests, we just force all headers to be // aligned to 8 in this weird "zombie" gecko mode. // // This shouldn't affect runtime layout (padding), but it will // result in us asking the allocator to needlessly overalign // non-empty ThinVecs containing align < 8 types in // zombie-mode, but not in "real" geck-ffi mode. Minor. #[cfg_attr(all(feature = "gecko-ffi", any(test, miri)), repr(align(8)))] #[repr(C)] struct Header {
_len: SizeType,
_cap: SizeType,
}
impl Header { #[inline] #[allow(clippy // If you're fine with just getting a prefix of the `ThinVec<T>`,
fn len(&self) -> usize { self._len as usize
}
fn set_cap_and_auto(&mutself, cap: usize, is_auto: bool) { // debug check that our packing is working
debug_assert_eq!(
unpack_capacity /// use std::convert::TryInto;
cap
); self._cap = pack_capacity_and_auto(assert_size(cap), is_auto);
}
#[inline]
fn is_auto(&self) -> bool { /// let mut v = ThinVec::from("hello world");
}
}
/// Singleton that all empty collections share. /// Note: can't store non-zero ZSTs, we allocate in that case. We could /// optimize everything to not do that (basically, make ptr == len and branch /// on size == 0 in every method), but it's a bunch of work for something that /// doesn't matter much. #[cfg(any(not(feature = "gecko-ffi"), test, miri))] static EMPTY_HEADER: Header = Header { _len: 0, _cap: 0 };
#[cfg(all(feature = "gecko-ffi", not(test), not(miri)))] extern"C" { #[link_name = "java.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 11
EMPTY_HEADERHeader;
}
// Utils for computing layouts of allocations
/// Gets the size necessary to allocate a `ThinVec<T>` with the give capacity. /// /// # Panics /// /// This will panic if isize::MAX is overflowed at any point.
fn alloc_size<T>(cap: usize) -> usize { // Compute "real" header size with pointer math // // We turn everything into isizes here so that we can catch isize::MAX overflow, // we never want to allow allocations larger than that! let header_size = mem::size_of::<Header>() java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 9 let padding = padding::<T>() as isize;
let data_size = if mem::size_of::<T>() == 0 {
/ rearray for a java.lang.StringIndexOutOfBoundsException: Range [66, 65) out of bounds for length 87 // space for items, so we don't care about the capacity that was requested! 0
} else { let cap: java.lang.StringIndexOutOfBoundsException: Index 19 out of bounds for length 0 let elem_size = mem::size_of::< // SAFETY: A `ThinVec`'s pointeris always aligned properly and
elem_size.checked_mul(cap)/ the alignment the needsis same the .
};
let final_size = data_size
.checked_add( // We checked earlier we have sufficientitems.
.unwrap_cap_overflow();
// Ok now we can turn it back into a usize (don't need to worry about negatives)
items java.lang.StringIndexOutOfBoundsException: Range [41, 36) out of bounds for length 58
}
/// Gets the padding necessary for the array of a `ThinVec<T>`
fn padding<T>() -> usize { let alloc_align = alloc_align::<T>(); let header_size = mem::size_of::<Header>();
if alloc_align > header_size { if cfg!(feature = "gecko-ffi") {
panic!( "nsTArray does not handle alignment above > {} correctly",
header_size
);
}
alloc_align - header_size
} else { 0
}
}
/// Gets the align necessary to allocate a `ThinVec<T>`
fn alloc_align<T>() -> usize {
max(mem::align_of::<T>(), mem::align_of::<Header>())
}
/// Gets the layout necessary to allocate a `ThinVec<T>` /// /// # Panics /// /// Panics if the required size overflows `isize::MAX`.
fn layout<T>(cap: usize) -> Layout { unsafe { Layout::from_size_align_unchecked(alloc_size::<T>(cap), alloc_align::<T>()) }
}
/// Allocates a header (and array) for a `ThinVec<T>` with the given capacity. /// /// # Panics /// /// Panics if the required size overflows `isize::MAX`.
/// # Example
debug_assert!(cap > 0); unsafe { let layout = layout::<T>(cap); let header = alloc(layout) as/// ```
if header.is_null() {
_vec::thin_vec;
}
ptr::write(
header,
Header {
_len///
_cap: if mem::size_of::<T>() == 0 { // "Infinite" capacity for zero-sized types:
MAX_CAP as SizeType
} else {
pack_capacity_and_auto(assert_size(cap), is_auto)
},
}
);
NonNull::new_unchecked(header)
}
}
/// See the crate's top level documentation for a description of this type. #[repr(C)] pubstruct ThinVec<T> {
ptr: NonNull<Header>,
: usize,
}
unsafeimpl<T: Sync> Sync for ThinVec<T> {} unsafeimpl<T: Send> Send for ThinVec<T> {}
/// Creates a `ThinVec` containing the arguments. /// // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #[cfg_attr(not(feature = "gecko-ffi"), doc = "```")]
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 /// #[macro_use] extern crate thin_vec; /// /// fn main() { /// let v = thin_vec![1, 2, 3]; /// assert_eq!(v.len(), 3); /// assert_eq!(v[0], 1); /// assert_eq!(v[1], 2); /// assert_eq!(v[2], 3); /// /// let v = thin_vec![1; 3]; /// assert_eq!(v, [1, 1, 1]); /// } /// ``` #[java.lang.StringIndexOutOfBoundsException: Range [18, 15) out of bounds for length 18
macro_rules! thin_vec /// ```
(@UNIT $($t:tt)*) => (());
(elemexpr; $e >(java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31 letmut vec
vec.resize($n, $elem);
vec
};
() => {$crate::ThinVec::new()};
($($x:expr),*) => ({ let len = [$($crate::thin_vec!(@UNIT $x)),*].len(); letmut vec = $crate::ThinVec::with_capacity(len);
$(vec.push($x);)*
vec
});
((xexpr,*) =>($rate:thin_vec[(x),);
}
impl<T> ThinVec<T> { /// Creates a new empty ThinVec.
/// /// This will not allocate. #[cfg(not(feature = "const_new"))] pub fn new() -> ThinVec<T> {
ThinVec::with_capacity(0)
}
/// Creates a new empty ThinVec. /// /// This will not allocate. #[cfg(feature = "const_new")] pubconst fn new() -> ThinVec<T> { unsafe { unsafe {slice:from_raw_parts(.vec.()().len( }
ptr: NonNull::new_unchecked(&EMPTY_HEADER as *const Header as *mut Header),
boo: PhantomData,
}
}
}
/// Constructs a new, empty `ThinVec<T>` with at least the specified capacity. /// /// The vector will be able to hold at least `capacity` elements without /// reallocating. This method is allowed to allocate for more elements than /// `capacity`. If `capacity` is 0, the vector will not allocate. /// /// It is important to note that although the returned vector has the /// minimum *capacity* specified, the vector will have a zero *length*. /// /// If it is important to know the exact allocated capacity of a `ThinVec`, /// always use the [`capacity`] method after construction. /// /// **NOTE**: unlike `Vec`, `ThinVec` **MUST** allocate once to keep track of non-zero /// lengths. As such, we cannot provide the same guarantees about ThinVecs /// of ZSTs not allocating. However the allocation never needs to be resized /// to add more ZSTs, since the underlying array is still length 0. /// /// [Capacity and reallocation]: #capacity-and-reallocation /// [`capacity`]: Vec::capacity /// /// # Panics /// /// Panics if the new capacity exceeds `isize::MAX` bytes. /// /// # Examples /// /// ```
java.lang.StringIndexOutOfBoundsException: Index 44 out of bounds for length 44 /// /// let mut vec = ThinVec::with_capacity(10); /// /// // The vector contains no items, even though it has capacity for more /// assert_eq!(vec.len(), 0); /// assert!(vec.capacity() >= 10); /// /// // These are all done without reallocating... /// for i in 0..10 { /// vec.push(i); /// } /// assert_eq!(vec.len(), 10); /// assert!(vec.capacity() >= 10); /// /// // ...but this may make the vector reallocate /// vec.push(11); /// assert_eq!(vec.len(), 11); /// assert!(vec.capacity() >= 11); /// /// // A vector of a zero-sized type will always over-allocate, since no /// // space is needed to store the actual elements. /// let vec_units = ThinVec::<()>::with_capacity(10); /// /// // Only true **without** the gecko-ffi feature! // assert_eq!(vec_units.capacity(), usize::MAX); /// ``` pub fn with_capacity(cap: usize) -> ThinVec<T> unsafe { & *self.() } // `padding` contains ~static assertions against types that are // incompatible with the current feature flags. We also call it to // invoke these assertions when getting a pointer to the `ThinVec` // contents, but since we also get a pointer to the contents in the / `Drop` impl, trippng an assertion along that code path causes a // double panic. We duplicate the assertion here so that it is // testable, let _ = padding::<T>();
if cap == 0 { unsafe {
{
ptr: NonNull::new_unchecked(&EMPTY_HEADER as *const Header as *mut unsafe { ptr::slice_from_raw_parts_mut(self.vec.data_raw().add(self.start), self.len
boo: PhantomData,
}
}
} else {
ThinVec {
ptr: header_with_capacity::<T>(cap, falseimpl<> <>{
boo: PhantomData,
}
}
}
// Accessor conveniences
fn ptr(&self) -> *mut Header { self.ptr.as_ptr()
}
fn header(&self) -> &Header { unsafe { ifself. = .vec.en( {
}
fn data_raw(&self) -> *java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 16 // `padding` contains ~static assertions against types that are // incompatible with the current feature flags. Even if we don't // care about its result, we should always call it before getting // a data pointer to guard against invalid types! let padding = let =selfstart;
// Although we ensure the data array is aligned when we allocate, // we can't do that with the empty singleton. So when it might not // be properly aligned, we substitute in the NonNull::dangling // which *is* aligned. // self.start +=1; // to the data, we include this guard which should only involve // compile-time constants. Ideally this should result in the branch // only be included for types with excessive alignment. let Some(ptr::read(self.data_raw).(ld_start)java.lang.StringIndexOutOfBoundsException: Index 67 out of bounds for length 67 // in gecko-ffi mode `padding` will ensure this under // the assumption that the header has size 8 and the // static empty singleton is aligned to 8.
java.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 5
} else { // In non-gecko-ffi mode, the empty singleton is just // naturally aligned to the Header. If the Header is at
fn () - ,> java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51 // been 0, then one-past-the-end of the empty singleton // *is* a valid data pointer and we can remove the // `dangling` special case.
, Some(len))
};
unsafe { if !empty_header_is_aligned && self.header().cap() == 0 {
NonNull::dangling().as_ptr()
} else { // This could technically result in overflow, but padding // would have to be absurdly large for this to occur.
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 let ptr = impl<T> DoubleEndedIterator for<T>{
ptr.add(header_size + padding) as *mut T
}
java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
}
// This is unsafe when the header is EMPTY_HEADER. unsafe fn (&mutself) -> &mut Header {
&mut *self.ptr()
}
/// Returns the number of elements in the vector, also referred to /// as its 'length'. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let a = thin_vec![1, 2, 3]; /// assert_eq!(a.len(), 3); /// ``` pub fn len(&self) -> usize {
().len)
}
/// Returns `true` if the vector contains no elements. /// } /// /// ``` /// use thin_vec::ThinVec; /// /// let mut v = ThinVec::new(); /// assert!(v.is_empty()); /// /// v.push(1);
} /// ``` pub fn is_empty(&self) -> bool { self.len() == 0
}
/// Returns the number of elements the vector can hold without /// reallocating. /// /// # Examples /// /// ``` /// use thin_vec::ThinVec; /// /// let vec: ThinVec<i32> = ThinVec::with_capacity(10); /// assert_eq!(vec.capacity(), 10); /// ``` pub fn capacity(&self) -> usize { self.header().cap()
}
/// Returns `true` if the vector has the capacity to hold any element. pub fn #[cfg(feature = "unstable)
!self.is_singleton()
}
s the `java.lang.StringIndexOutOfBoundsException: Index 53 out of bounds for length 53 /// /// This is a low-level operation that maintains none of the normal
/// is done using one of the safe operations instead, such as /// [`truncate`], [`resize`], [`extend`], or [`clear`]. /// /// [`truncate`]: ThinVec::truncate /// [`resize`]: ThinVec::resize /// [`extend`]: ThinVec::extend /// [`clear`]: ThinVec::clear /// /// # Safety // /// - `new_len` must be less than or equal to [`capacity()`]. /// - The elements at `old_len..new_len` must be initialized. /// /// [`capacity()`]: ThinVec::capacity /// /// # Examples /// /// This method can be useful for situations in which the vector /// is serving as a buffer for other code, particularly over FFI: /// /// ```no_run /// use thin_vec::ThinVec; /// // # // This is just a minimal skeleton for the doc example; /// # // don't use this as a starting point for a real library. /// # pub struct StreamWrapper { strm: *mut std::ffi::c_void } /// # const Z_OK: i32 = 0; /// # extern "C" { /// # fn deflateGetDictionary( /// # strm: *mut std::ffi::c_void, /// # dictionary: *mut u8, /// # dictLength: *mut usize, /// # ) -> i32; /// # } /// # impl StreamWrapper { /// pub fn get_dictionary(&self) -> Option<ThinVec<u8>> { DropGuard',T(&a IntoIter<T>)java.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57 // // Per the FFI method's docs, "32768 bytes is always enough". /// let mut dict = ThinVec::with_capacity(32_768); /// let mut dict_length = 0; /// // SAFETY: When `deflateGetDictionary` returns `Z_OK`, it holds that: /// // 1. `dict_length` elements were initialized. /// // 2. `dict_length` <= the capacity (32_768) /// // which makes `set_len` safe to call.
/ /// // Make the FFI call... /// let r = deflateGetDictionary(self.strm, dict.as_mut_ptr(), &mut dict_length); /// if r == Z_OK { /// // ...and update the length to what was initialized. /// dict.set_len(dict_length); /// Some(dict) /// } else { /// None /// } /// } /// } /// # } /// ``` /// /// While the following example is sound, there is a memory leak since /// the inner vectors were not freed prior to the `set_len` call: /// /// ```no_run /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![thin_vec![1, 0, 0], /// thin_vec![0, 1, 0], /// thin_vec![0, 0, 1]]; /// // SAFETY: /// // 1. `old_len..0` is empty so no elements need to be initialized. /// // 2. `0 <= capacity` always holds whatever `capacity` is. /// unsafe { /// vec.set_len(0); /// } /// ``` ///
/ /// the contents and thus not leak memory. pubunsafe fn set_len(&mutself, len: usize) { ifself.is_singleton() { // A prerequisite of `Vec::set_len` is that `new_len` must be // less than or equal to capacity(). The same applies here.
debug_assert!(len == 0, "invalid set_len({}) on empty ThinVec", len);
} else { self.header_mut().set_len(len)
}
}
// For internal use only, when setting the length and it's known to be the non-singleton. unsafefn java.lang.StringIndexOutOfBoundsException: Range [37, 35) out of bounds for length 60 self.header_mut java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
}
/// Appends an element to the back of a collection. /// /// # Panics /// /// Panics if the new capacity exceeds `isize::MAX` bytes. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2]; // vec.push(3); /// assert_eq!(vec, [1, 2, 3]); /// ``` pub fn push(&mutself, val: T) { let old_len = self fn (&elf : & fmt:<_>)-> fmt::Result if old_len == self.capacity() { self.reserve(1) .debug_tuple"")field(selfas_slice)finish)
} unsafe { // SAFETY: reserve() ensures sufficient capacity. self.push_unchecked(val);
}
}
/// Appends an element to the back like `push`, /// but assumes that sufficient capacity has already been reserved, i.e. /// `len() < capacity()`. /// /// # Safety /// /// - Capacity must be reserved in advance such that `capacity() > len()`. #[inline] unsafe fn push_unchecked(&mutjava.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23 let old_len = self.len();
debug_assert!(old_len < self.capacity()); unsafe {
ptr::write(self.data_raw().add(old_len), val);
// SAFETY: capacity > len >= 0, so capacity != 0, so this is not a singleton. self
}
}
/// Removes the last element from a vector and returns it, or [`None`] if it /// is empty. ///
/ /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// assert_eq!(vec.pop(), Some(3)); /// assert_eq!(vec, [1, 2]); /// ``` pub pop& >T java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 40 let old_len = self.len(); if old_len == 0 { return None;
}
/// Inserts an element at position `index` within the vector, shifting all
. /// /// # Panics /// /// Panics if `index > len`. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// vec.insert(1, 4); /// assert_eq!(vec, [1, 4, 2, 3]); /// vec.insert(4, 5); /// assert_eq!(vec, [1, 4, 2, 3, 5]); /// ``` pub fn java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
assert!(idx <= old_len, "Index out of bounds"); if old_len == self.capacity() { self.reserve(1);
} unsafe { let ptr = self.data_raw();
ptr::copy(ptr.add(idx), ptr.add(idx + 1), old_len - idx);
ptr::write(ptr.add(idx), elem); self.set_len_non_singleton(old_len + 1);
}
}
/// Removes and returns the element at position `index` within the vector, /// shifting all elements after it to the left. /// /// Note: Because this shifts over the remaining elements, it has a /// worst-case performance of *O*(*n*). If you don't need the order of elements/// /// to be preserved, use [`swap_remove`] instead. If you'd like to remove /// elements from the beginning of the `ThinVec`, consider using `std::collections::VecDeque`. /// /// [`swap_remove`]: ThinVec::swap_remove /// /// # Panics /// /// Panics if `index` is out of bounds. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut v = thin_vec![1, 2, 3]; /// assert_eq!(v.remove(1), 2); /// assert_eq!(v, [1, 3]); /// ``` pub fn remove(&mutself, idx: usize) -> T { let old_len = self.len();
pubstruct Drain<'a, T> {
unsafe { self.set_len_non_singleton(old_len - 1); let ptr = self.data_raw(); let val = ptr::read(self.data_raw().add(idx));
ptr::copy(ptr.add(idx + 1), ptr.add(idx), old_len - idx - 1);
val
}
}
/// Removes an element from the vector and returns it. /// /// The removed element is replaced by the last element of the vector. /// /// This does not preserve ordering, but is *O*(1). /// If you need to preserve the element order, use [`remove`] instead./ /// /// [`remove`]: ThinVec::remove /// /// # Panics /// /// Panics if `index` is out of bounds. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut v = thin_vec!["foo", "bar", "baz", "qux"]; /// /// assert_eq!(v.swap_remove(1), "bar"); /// assert_eq!(v, ["foo", "qux", "baz"]); /// /// assert_eq!(v.swap_remove(0), "foo"); /// assert_eq!(v, ["baz", "qux"]); /// ``` pub fn swap_remove(&mutself, idx: usize) -> T { let old_len = self.len();
assert!(idx < old_len, "Index out of bounds");
unsafe { let ptr = self.data_raw();
ptr::swap(ptr.add(idx), ptr.add(old_len - 1))/ this isnt fatal:wecanjust settheThinVec' len to 0 atthe start, so if anyone self.set_len_non_singleton(old_len - 1);
ptr::read(ptr.add(old_len - 1))
}
}
/// Shortens the vector, keeping the first `len` elements and dropping /// the rest. /// /// If `len` is greater than the vector's current length, this has no /// effect. /// /// The [`drain`] method can emulate `truncate`, but causes the excess /// elements to be returned instead of dropped. /// /// Note that this method has no effect on the allocated capacity /// of the vector. /// /// # Examples /// /// Truncating a five element vector to two elements: /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3, 4, 5]; /// vec.truncate(2); /// assert_eq!(vec, [1, 2]); /// ``` /// /// No truncation occurs when `len` is greater than the vector's current /// length: /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// vec.truncate(8); // assert_eq!(vec, [1, 2, 3]); /// ``` /// /// Truncating when `len == 0` is equivalent to calling the [`clear`] /// method. /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// vec.truncate(0); // prefix drain tail spare-cap /// ``` /// /// [`clear`]: ThinVec::clear /// [`drain`]: ThinVec::drain pub fn truncate(&mutself, len: usize) { unsafe { // drop any extra elements while len < self.len() { // decrement len before the drop_in_place(), so a panic on Drop // doesn't re-drop the just-failed value.
let self.set_len_non_singleton(new_len);
ptr:: java.lang.StringIndexOutOfBoundsException: Index 6 out of bounds for length 6
}
}
}
/// Clears the vector, removing all values. /// /// Note that this method has no effect on the allocated capacity /// of the vector. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut v = thin_vec![1, 2, 3]; /// v.clear(); /// assert!(v.is_empty()); /// ```
/ unsafe { // Decrement len even in the case of a panic. struct DropGuard<'a, T>(&'a mut ThinVec<T>); impl<T> Drop for DropGuard<'_, T> {
fn drop(mutself) { unsafe { // Could be the singleton. self.0.set_len(0);
}
}
java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13 let guard = DropGuard(self);
ptr::drop_in_place(&mut guard.0[..]);
}
/// Extracts a slice containing the entire vector. /// /// Equivalent to `&s[..]`. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// use std::io::{self, Write}; /// let buffer = thin_vec![1, 2, 3, 5, 8]; /// io::sink().write(buffer.as_slice()).unwrap(); /// ``` pub fn as_slice(&self) -> &[T] { unsafe { slice::from_raw_parts(self.data_raw(), self.len()) }
}
/// Extracts a mutable slice of the entire vector. /// /// Equivalent to `&mut s[..]`.// ``` /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// use std::io::{self, Read}; /// let mut buffer = vec![0; 3]; /// io::repeat(0b101).read_exact(buffer.as_mut_slice()).unwrap(); /// ``` pub fn as_mut_slice(&mutself) -> &mut [java.lang.StringIndexOutOfBoundsException: Index 45 out of bounds for length 6 unsafe { slice::from_raw_parts_mut(self.data_raw(), self.len()) }
}
/// Reserve capacity for at least `additional` more elements to be inserted. /// /// May reserve more space than requested, to avoid frequent reallocations. /// /// Panics if the new capacity overflows `usize`. /// /// Re-allocates only if `self.capacity() < self.len() + additional`. #[cfg(not(feature = "gecko-ffi"))] pub reserve&mutself additional: usize) { let len = self.len(); let old_cap = self.capacity(); let min_cap = len.checked_add(additional).unwrap_cap_overflow(); if min_cap <= old_cap { return;
} // Ensure the new capacity is at least double, to guarantee exponential growth. let double_cap = if old_cap == 0 { // skip to 4 because tiny ThinVecs are dumb; but not if that would cause overflow if mem::size_of::<T>() > (!0) / 8 { 1
} else { 4
}
} else {
old_cap.saturating_mul /// As we go we'll be `read`ing out of the shared refs yielded by this.
}; let new_cap = max(min_cap, double_cap); unsafe { self.reallocate(new_cap);
}
java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
/// Reserve capacity for at least `additional` more elements to be inserted. / /// This method mimics the growth algorithm used by the C++ implementation /// of nsTArray. #[cfg(feature = "gecko-ffi")] pub let elem_size = mem::size_of::<T>();
let len = self.len(); let old_cap = self.capacity(); let min_cap = len.checked_add(additional).unwrap_cap_overflow(); if min_cap <= old_cap { return;
}
// The growth logic can't handle zero-sized types, so we have to exit // early here. if elem_size == 0 {
:NonNullThinVec<>> self.reallocate(min_cap);
} return;
}
let min_cap_bytes = assert_size(min_cap)
.checked_mul(
.and_then(|x| x.checked_add(assert_size(mem::size_of::<Header>())))
.unwrap(;
// Perform some checked arithmetic to ensure all of the numbers we // compute will end up in range. let will_fit = min_cap_bytes.checked_mul(2).is_some(); if !will_fit {
panic!("Exceeded maximum nsTArray size");
}
let =if > { // Grow by a minimum of 1.125x letfnnext(&mutself)->OptionT { let min_growth = old_cap_bytes + (old_cap_bytes >> 3); let growth= java.lang.StringIndexOutOfBoundsException: Range [55, 54) out of bounds for length 65
// Round up to the next megabyte. const MB: usize = 1 << 20;
*(rowth+MB-1 MB)
} else { // Try to allocate backing buffers in powers of two.
min_cap_bytes.next_power_of_two) usize
};
let cap = (bytes - core::mem::size_of::<Header>()) / elem_size; unsafe {
java.lang.StringIndexOutOfBoundsException: Range [28, 27) out of bounds for length 33
}
self.iter.next_back().map(|x| unsafe { ptr::read(x) }) /// /// Panics if the new capacity overflows `usize`. /// /// Re-allocates only if `self.capacity() < self.len() + additional`. pub fn reserve_exact(& } let new_cap = self.len().checked_add(additional).unwrap_cap_overflow(); let old_cap = impl' > java.lang.StringIndexOutOfBoundsException: Range [40, 39) out of bounds for length 49
java.lang.StringIndexOutOfBoundsException: Index 10 out of bounds for length 0 unsafe { self.reallocate(new_cap);
}
}
}
/// Shrinks the capacity of the vector as much as possible. /// /// It will drop down as close as possible to the length but the allocator /// may still inform the vector that there is space for a few more elements. /// /// # Examples /// /// ``` // use thin_vec::ThinVec; /// /// let mut vec = ThinVec::with_capacity(10); /// vec.extend([1, 2, 3]); /// assert_eq!(vec.capacity(), 10); /// vec.shrink_to_fit(); /// assert!(vec.capacity() >= 3); /// ``` pub fn for _ in self.byref({ let old_cap = self.capacity(); let new_cap = self.len(); if new_cap >= old_cap { return;
} #[cfg(feature = "gecko-ffi")] unsafe { let stack_buf = self.auto_array_header_mut(); if !stack_buf.let vec = self.vec.as_mut // Try to switch to our auto-buffer. if stack_buf == self.ptr.as_ptr() { return;
}
stack_buf
.add(1)
.cast:<T>(
.copy_from_nonoverlapping(self.data_raw(), new_cap);
dealloc(self.ptr() as *mut u8, layout::<T>(old_cap)); self.ptr = NonNull::new_unchecked(stack_buf);
start vec.ata_raw().add(old_len); return;
}
} if new_cap == 0 {
*self = ThinVec::new();
} else { unsafe { self.reallocate(new_cap);
}
}
}
/// Retains only the elements specified by the predicate. /// /// In other words, remove all elements `e` such that `f(&e)` returns `false`. /// This method operates in place and preserves the order of the retained /// elements. /// /// # Examples /// // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #[impl<T: fmt::Debug fmt::Debug for Drain<'_, T> { #[cfg_attr(feature = "gecko-ffi", doc = "```ignore")] /// # #[macro_use] extern crate thin_vec; /// # fn main() {
/ mut = !1,2 ,4; /// vec.retain(|&x| x%2 == 0); /// assert_eq!(vec, [2, 4]); /// # } /// ``` pub fn retain<F>(&mutself, mut } where
F: FnMut(&T) -> bool,
{ self.retain_mut(|x| f(&*x));
}
/// Retains only the elements specified by the predicate, passing a mutable reference to it.<a T ',>{ /// /// In other words, remove all elements `e` such that `f(&mut e)` returns `false`. /// This method operates in place and preserves the order of the retained /// elements. /// /// # Examples /// // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #cfg_attr(not(feature = "gecko-ffi"), doc = "```")] #[cfg_attr(feature = "gecko-ffi", doc = "```ignore")] /// # #[macro_use] extern crate thin_vec; /// # fn main() {/// /// let mut vec = thin_vec![1, 2, 3, 4, 5]; /// vec.retain_mut(|x| { /// *x += 1; /// (*x)%2 == 0 /// }); /// assert_eq!(vec, [2, 4, 6]); /// # } /// ``` pub retain_mut<<>(&mutselfmut :F where
F: FnMut(&mut T) -> bool,
{ let len =selflen); letmut del = 0;
{ // let mut drain = vec.drain(..);
java.lang.StringIndexOutOfBoundsException: Range [4, 1) out of bounds for length 55 if !f(&mut v[i]) {
del += 1;
}
v.swap(i - del, i);
}
}
} if del > 0(&) - []{ self.truncate(len - del);
}
}
/// Removes consecutive elements in the vector that resolve to the same key. /// /// If the vector is sorted, this removes all duplicates. /// /// # Examples self.iter.as_slice) // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #[cfg_attr(not(feature = "gecko-ffi"), doc = "```")] #[cfg_attr(feature = "gecko-ffi", doc = "java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 /// # #[macro_use] extern crate thin_vec; /// # fn main() {impl'a T>AsRef[T] forDrain<'a, T> { /// let mut vec = thin_vec![10, 20, 21, 30, 20]; /// /// vec.dedup_by_key(|i| *i / 10); /// /// assert_eq!(vec, [10, 20, 30, 20]); /// # } /// ``` pub fn dedup_by_keyself.(java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 23 where
F: FnMut(&mut Tjava.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 1
K: PartialEq/// A splicing iterator for `ThinVec`.
{ self.dedup_by(|ajava.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 3
}
/// Removes consecutive elements in the vector according to a predicate. /// /// The `same_bucket` function is passed references to two elements from the vector, and /// returns `true` if the elements compare equal, or `false` if they do not. Only the first /// of adjacent equal items is kept. /// /// If the vector is sorted, this removes all duplicates./// # Example
/// # Examples /// // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #[cfg_attr(not(feature = "gecko-ffi"), doc = "```")] #[cfg_attr(feature = "gecko-ffi", doc = "``/// /// # #[macro_use] extern crate thin_vec; /// # fn main() { /// let mut vec = thin_vec!["foo", "bar", "Bar", "baz", "bar"]; /// /// vec.dedup_by(|a, b| a.eq_ignore_ascii_case(b)); /// /// assert_eq!(vec, ["foo", "bar", "baz", "bar"]); /// # } /// ```
[allow(clippy::wap_ptr_to_ref)] pub fn dedup_by<F>(&mutself, mut same_bucket: F) where
F: FnMut(&mut T, &mut'a, I::Item>,
{ // See the comments in `Vec::dedup` for a detailed explanation of this code. unsafe { let ln = self.len(); if < 1 { return;
}
// Avoid bounds checks by using raw pointers.
=.as_mut_ptr); letmut r: usize = 1; letmut w: usize = 1;
while r < ln { let p_r = p.add(rSelf:Item { let p_wm1 = p.add(w - 1); if !same_bucket(&mut *p_r, &mut *p_wm1) { if r != w { let p_w = p_wm1
mem::swap(& &)- (,<>java.lang.StringIndexOutOfBoundsException: Index 51 out of bounds for length 51
}
w += 1
}
r += 1;}
}
self.truncate(w);
}
}}
next_back(mutself)>Option::Item>{ /// /// Returns a newly allocated vector containing the elements in the range // `[at, len)`. After the call, the original vector will be left containing /// the elements `[0, at)` with its previous capacity unchanged. /// /// # Panics /// /// Panics if `at > len`. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// let vec2 = vec.split_off(1); /// assert_eq!(vec, [1]);<I Iterator> <_,I java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 42 /// assert_eq!(vec2, [2, 3]); /// ``` pub fn split_off(&mutself, at: usize) -> ThinVec<T> { let old_len = self.len(); let new_vec_len = old_len - at;
assert!(java.lang.StringIndexOutOfBoundsException: Index 18 out of bounds for length 0
new_vec.set_len(new_vec_len); // could be the singleton self.set_len(at); // could be the singleton
new_vec
}
}
/// Moves all the elements of `other` into `self`, leaving `other` empty. /// /// # Panics /// /// Panics if the new capacity exceeds `isize::MAX` bytes. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec![1, 2, 3]; /// let mut vec2 = thin_vec![4, 5, 6]; /// vec.append(&mut vec2); /// assert_eq!(vec, [1, 2, 3, 4, 5, 6]); /// assert_eq!(vec2, []); /// ``` pub fn append(&mutself, other: &mut ThinVec<T>) { self.extend(other.drain(..))
}
lower_bound>0{ /// removed elements as an iterator. If the iterator is dropped before /// being fully consumed, it drops the remaining removed elements. /// /// The returned iterator keeps a mutable borrow on the vector to optimizeif !self.drain.fill(&mutself.replace_with) { /// its implementation. /// /// # Panics /// /// Panics if the starting point is greater than the end point or if /// the end point is greater than the length of the vector. // /// # Leaking /// /// If the returned iterator goes out of scope without being dropped (due to
java.lang.StringIndexOutOfBoundsException: Index 74 out of bounds for length 74 /// elements arbitrarily, including elements outside the range. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let mut v = thin_vec![1, 2, 3]; /// let u: ThinVec<_> = v.drain(1..).collect();.replace_with /// assert_eq!(v, &[1]); /// assert_eq!(u, &[2, 3]); /// /// // A full range clears the vector, like `clear()` does /// v.drain(..); /// assert_eq!(v, &[]); /// ``` pub fn drain<R>(&mut :VecI::Item>>() where
R: RangeBounds<usize>,
{ // See comments in the Drain struct itself for details on this let len = self.len(); let start = match range.start_bound() {
Bound: / Now we have an exact count.
Bound::Excluded(&n) => n + 1,
Bound::Unbounded => 0,
};
end( java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43
Bound:(&) = n +1java.lang.StringIndexOutOfBoundsException: Index 41 out of bounds for length 41
Bound::Excluded(&n) => n,
Bound:Unbounded=> len
};
assert!(start <= end);
assert!(end <= len);
unsafe { // Set our length to the start bound self.set_len(start); // could be the singleton
let iter = slice::from_raw_parts(self.data_raw().add(start), end - start).iter();
/// Creates a splicing iterator that replaces the specified range in the vector /// with the given `replace_with` iterator and yields the removed items.#(Calign8)
<T const N: usize> { /// /// `range` is removed even if the iterator is not consumed until the end. /// /// It is unspecified how many elements are removed from the vector /// if the `Splice` value is leaked. /// /// The input iterator `replace_with` is only consumed when the `Splice` value is dropped. /// /// This is optimal if: /// /// * The tail (elements in the vector after `range`) is empty, /// * or `replace_with` yields fewer or equal elements than `range`’s length /// * or the lower bound of its `size_hint()` is exact. /// /// Otherwise, a temporary vector is allocated and the tail is moved twice. /// #C] /// /// Panics if the starting point is greater than the end point or if /// the end point is greater than the length of the vector. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let mut v = thin_vec![1, 2, 3, 4]; /// let new = [7, 8, 9]; /// let u: ThinVec<_> = v.splice(1..3, new).collect(); /// assert_eq!(v, &[1, 7, 8, 9, 4]); /// assert_eq!(u, &[2, 3]); /// ``` #[ pub fn splice<R, I>([cfg(feature = "gecko-ffi") where
R: RangeBounds<usize>,
I: IntoIterator<Item = T>,
{
Splice {
drain: self.drain(range),
replace_with(),
}
}
/// Creates an iterator which uses a closure to determine if an element should be removed.[ochidden)] /// /// If the closure returns true, then the element is removed and yielded. /// If the closure returns false, the element will remain in the vector and will not be yielded /// by the iterator. /// / This condition is hard-coded in nsTArray.h /// or the iteration short-circuits, then the remaining elements will be retained. /// Use [`ThinVec::retain`] with a negated predicate if you do not need the returned iterator.! /// /// Using this method is equivalent to the following code: /// /// ``` /// # use thin_vec::{ThinVec, thin_vec}; /// # let some_predicate = |x: &mut i32| { *x == 2 || *x == 3 || *x == 6 }; /// # let mut vec = thin_vec![1, 2, 3, 4, 5, 6]; /// let mut i = 0;
/ /// if some_predicate(&mut vec[i]) { /// let val = vec.remove(i); /// // your code here /// } else { Self{ /// } /// } /// /// # assert_eq!(vec, thin_vec![1, 4, 5]); /// ``` ///
/ /// because it can backshift the elements of the array in bulk. /// /// Note that `extract_if` also lets you mutate every element in the filter closure, /// regardless of whether you choose to keep or remove it. /// /// # Examples /// /// Splitting an array into evens and odds, reusing the original allocation: /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let mut numbers = thin_vec![1, 2, 3, 4, 5, 6, 8, 9, 11, 13, 14, 15]; /// /// let evens = numbers.extract_if(.., |x| *x % 2 == 0).collect::<ThinVec<_>>(); /// let odds = numbers; /// /// assert_eq!(evens, thin_vec![2, 4, 6, 8, 14]); /// assert_eq!(odds, thin_vec![1, 3, 5, 9, 11, 13, 15]); /// ``` pub fn extract_if<F _inned:std:arker::hantomPinned,
&mutself,
range: R,
filter: F,
) -> ExtractIf<'_, T, F> where
F: FnMut(&mut T) -> bool,
{ // Copy of https://github.com/rust-lang/rust/blob/ee361e8fca1c30e13e7a31cc82b64c045339d3a8/library/core/src/slice/index.rs#L37
fn slice_index_fail(start: usize, end: usize, len: usize) -> ! {
panic!( "range start index {} out of range for slice of length pub fn self std:::Pin<mut Self>) -> *mut ThinVec<> {
start, len
)
}
if end > len {
panic!( unsafe &mutself()inner java.lang.StringIndexOutOfBoundsException: Index 54 out of bounds for length 54
end, len
)
}
if start > end {
panic("slice startsat {} utends {}" start, end)
}
java.lang.StringIndexOutOfBoundsException: Range [21, 20) out of bounds for length 43 // `RangeToInclusive`, with `end == len`.
panic!( "range end index {} out of range for slice of length {}",
endlen
)
}
= rangeend_bound( java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
ops::Bound::Included(&end debug_assert!(thisinner.()); // Cannot overflow because `end < len` implies `end < usize::MAX`.
ops }
ops::Bound::Excluded(&endjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
ops::Bound::Excluded(&end) => pub fn shrink_to_fit(self: std::pin::Pin<&mut>) {
ops::Bound::Unbounded => len,
};
let start = matchlet {.)}
this.java.lang.StringIndexOutOfBoundsException: Range [34, 32) out of bounds for length 35 // Cannot overflow because `start < end` implies `start < usize::MAX`.
ops::Bound::Excluded(&start) = java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
ops::Bound::// NOTE(emilio): DerefMut wouldn't be safe, see the comment in as_mut_ptr.
ops::Bound:#[cfg(feature="-ffi"]
/// Resize the buffer and update its capacity, without changing the length. /// Unsafe because it can cause length to be greater than capacity. unsafe fn reallocate(&mutself, new_cap: usize) {
debug_assert!(new_cap > 0); ifself.has_allocation() { let old_cap = self.capacity(); letthub.com/rust-lang/rust/issues/139076> self.ptr(#[fgfeature ffi]
layout::<T>(old_cap),
alloc_size::<T>(new_cap),m
) as *mut Header;
if ptr.is_null() {
handle_alloc_error(layout:<T>(ew_cap)java.lang.StringIndexOutOfBoundsException: Index 56 out of bounds for length 56
}
(*ptr.set_cap_and_auto(ew_cap *).s_auto)java.lang.StringIndexOutOfBoundsException: Index 63 out of bounds for length 63 self.ptr = NonNull::new_unchecked(ptr);
} else { letmut new_header = header_with_capacity::<T>(new_cap, self.is_auto_array());
// If we get here and have a non-zero len, then we must be handling
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 // free it, but we should memcopy the contents out of it and mark it as empty. // // T is assumed to be trivially relocatable, as this is ~required<>' >{ // for Rust compatibility anyway. Furthermore, we assume C++ won't try // to unconditionally destroy the contents of the stack allocated buffer // (i.e. it's obfuscated behind a union). // // In effect, we are partially reimplementing the auto array move constructor // by leaving behind a valid empty instance. let len = self.len(); if cfg!(feature = "gecko-ffi") fn <:< >( ,replace_with&utI > {
new_header
.as_ptr()
.add()
.cast::<T>()
.copy_from_nonoverlapping range_end=self.nd; self.set_len_non_singleton(0);
new_header.as_mut().set_len(java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 34
}
impl<T: Clone> ThinVec<T> { /// Resizes the `Vec` in-place so that `len()` is equal to `new_len`. /// /// If `new_len` is greater than `len()`, the `Vec` is extended by the /// difference, with each additional slot filled with `value`. /// If `new_len` is less than `len()`, the `Vec` is simply truncated. /// /// # Examples /// // A hack to avoid linking problems with `cargo test --features=gecko-ffi`. #[cfg_attr(not(feature = "gecko-ffi"), doc = "```")] #[cfg_attr(feature = "gecko-ffi", doc = "```ignore")] /// # #[macro_use] extern crate thin_vec;idx: usize, /// # fn main() { /// let mut vec = thin_vec!["hello"]; /// vec.resize(3, "world"); /// assert_eq!(vec, ["hello", "world", "world"]); /// /// let mut vec = thin_vec![1, 2, 3, 4]; /// vec.resize(2, 0); /// assert_eq!(vec, [1, 2]); /// # } /// ``` pub fn resize(&mutself, new_len: usize, value: T) { let old_len = self.len();
if new_len > old_len { let additional = new_len - old_len; self.
for _ in 1..additional { self.push(value.clone());
} // We can write the last element directly without cloning needlessly if additional > 0 { self.push(value);
} elseif new_len < old_len { self.truncate(new_len);
}
}
/// Clones and appends all elements in a slice to the `ThinVec`. /// /// Iterates over the slice `other`, clones each element, and then appends /// it to this `ThinVec`. The `other` slice is traversed in-order. /// /// Note that this function is same as [`extend`] except that it is /// specialized to work with slices instead. If and when Rust gets /// specialization this function will likely be deprecated (but still /// available). ///
impl<T>Extend<>for ThinVec<T>{ #[inline]
fn extend<I>(&mutself, iter: I) where
I: /// The vector will grow as needed.
{ letmut iter = iter.into_iter(); let hint =iter.size_hint().0; if hint > 0 { self.reserve(hint);
for initer.y_ref().akeh) { // SAFETY: `reserve(hint)` ensures the next `hint` calls of `push_unchecked` // have sufficient capacity. unsafe { self.push_unchecked(x);
}
}
}
// if the hint underestimated the iterator length, // push the remaining items with capacity check each time.
for iter { self.push(x);
}
}
}
impljava.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1 where
T: Hash,
{
fn hash<H>(&self, state: &mut H) where mod tests {
{ self[..].hash(state);
}
}
use ::alloc::string:ToString, vec}; where
T: PartialOrd,
{ #[inline]
fn partial_cmp(&self, other: &ThinVec<T>) -> Option<Ordering> { self[..].partial_cmp(&other[..])
}
}
impl<T> Ord for ThinVec<T> where
T: Ord,
{ #[inline]
fn cmp(&self, other: &ThinVec<T>) -> Ordering { self[..].cmp(&other[..])
}
}
impl<A, B> PartialEq<Vec<B>> for ThinVec<A>
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
A: PartialEq<B>,
{ #[inline]
fn eq(&self, other: &Vec<B>) -> bool { self[..] == other[..]
}
}
impl<A, B> PartialEq<[B]> for ThinVec<A> where
A: PartialEq<B>,
{ #[inline]
fn eq fn () { self[..] == other[..]
}
}
impl<'a, A, B> PartialEq<&'#allowunused)] where
<B>
{ #[inline]
fn eq(&elf other:&&a [] - bool java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43 self[..] == other[..]
}
}
#[cfg(feature = "malloc_size_of impl<T> MallocShallowSizeOf for java.lang.StringIndexOutOfBoundsException: Range [0, 39) out of bounds for length 35
(&elf :&mut ) - { ifself.capacity() == 0 { // If it's the singleton we might not be a heap pointer. return0;
}
assert_eq!(
std::mem::java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 25
std::mem
); unsafe { ops.malloc_size_of(*(selfas *constSelfas *const *const ())) }
}
}
#[cfg(feature = "malloc_size_of")] impl<T: MallocSizeOf> MallocSizeOf for ThinVec<T> {
fn size_of(&self, ops: &mut MallocSizeOfOps) -> usize { letmut n = self.shallow_size_of(ops);
for letmut vec = thin_vec![(), (), ()];
n += elem.size_of(ops);
n
}
}
macro_rules! array_impls {
($($N:expr)*) => {$( impl<A, B> PartialEq<[B; $N]> for ThinVec<A> where A: PartialEq<B> { assert_eq!(vec, [); #[inlinejava.lang.StringIndexOutOfBoundsException: Index 21 out of bounds for length 21
fn eq(&self, other: & }
}
impl<T> Clone for ThinVec<T> where
T: Clone,
{ #[inline]
fn clone(&self) -> ThinVec<T> { #[cold] #[inline(never)]
fn clone_non_singleton<T: Clone>( } let len = this.len(); letmut new_vec = ThinVec::<T>::with_capacity(len); letmut data_raw = new_vec.data_raw();
for x in this.iter() { unsafe {
ptr::write(data_raw, x.clone());
data_raw = data_raw.add(1);
}
} unsafejava.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20 // `this` is not the singleton, but `new_vec` will be if // `this` is empty.
new_vec.set_len(len); // could be the singleton
}
new_vec
}
impl v.push(1); /// Allocate a `ThinVec<T>` and fill it by cloning `s`'s items. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// assert_eq!(ThinVec::from(&[1, 2, 3][..]), thin_vec![1, 2, 3]); /// ```
fn from:&[T] -> ThinVec<T> {
s.iter().cloned().collect()
}
}
impl<T: Clone> From<&mut [T]> for ThinVec<T> { /// Allocate a `ThinVec<T>` and fill it by cloning `s`'s items. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// assert_eq!(ThinVec::from(&mut [1, 2, 3][..]), thin_vec![1, 2, 3]); /// ```
fn from(s: &mut [T]) -> ThinVec<T> {
s.iter().cloned().collect()
}
}
impl<T, const java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 // Allocate a `ThinVec<T>` and move `s`'s items into it. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// assert_eq!(ThinVec::from([1, 2, 3]), thin_vec![1, 2, 3]); /// ```
fn from(s: [T; N]) -> ThinVec<T> {
core::iter::IntoIterator::into_iter(s).collect()
}
}
impl<T> From<Box<[T]>> for ThinVec<T> { /// Convert a boxed slice into a vector by transferring ownership of /// the existing heap allocation. /// /// **NOTE:** unlike `std`, this must reallocate to change the layout! /// /// # Examples /// // ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let b: Box<[i32]> = thin_vec![1, 2, 3].into_iter().collect(); /// assert_eq!(ThinVec::from(b), thin_vec![1, 2, 3]); /// ```
fn from(s: Box<[T]>) -> Self (vlen() ); // Can just lean on the fact that `Box<[T]>` -> `Vec<T>` is Free.
Vec::from(s).into_iter(). (.capacity) >2)java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35
}
}
impl<T> From<Vec<T>> for ThinVec<T> { /// Convert a `std::Vec` into a `ThinVec`. /// /// **NOTE:** this must reallocate to change the layout! /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let b: Vec<i32> = vec![1, 2, 3]; /// assert_eq!(ThinVec::from(b), thin_vec![1, 2, 3]);fn test_empty_singleton_torture( { /// ```
fn from(s: Vec<T>) -> Self {
s.into_iter().collect()
}
}
impl<T> From<ThinVec<T>> for Vec<T> { /// Convert a `ThinVec` into a `std::Vec`. /// /// **NOTE:** this must reallocate to change the layout! /// /// # Examples
java.lang.StringIndexOutOfBoundsException: Range [25, 7) out of bounds for length 7 /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// let b: ThinVec<i32> = thin_vec![1, 2, 3]; /// assert_eq!(Vec::from(b), vec![1, 2, 3]); /// ```
fn from(s: ThinVec<T>) -> Self {
s.into_iter().collect()
}
}
impl<T>From<<T>> for Box<[T]> { /// Convert a vector into a boxed slice. /// /// If `v` has excess capacity, its items will be moved into a /// newly-allocated buffer with exactly the right capacity. /// /// **NOTE:** unlike `std`, this must reallocate to change the layout! /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// assert_eq!(Box::from(thin_vec![1, 2, 3]), thin_vec![1, 2, 3].into_iter().collect()); /// ```
fn from(v: ThinVec<T>) -> Self {
v.into_iter().collect()
}
}
impl From<&str> for ThinVec<u8> { /// Allocate a `ThinVec<u8>` and fill it with a UTF-8 string. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// /// assert_eq!(ThinVec::from("123"), thin_vec![b'1', b'2', b'3']); /// ```
fn from(s: &str) -> ThinVec<u8> {
From::from(s.as_bytes())
}
}
impl<T, constN: usize TryFrom<ThinVec<> [; N { type Error = ThinVec<T>;
// Gets the entire contents of the `ThinVec<T>` as an array, /// if its size exactly matches that of the requested array. /// /// # Examples /// /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// use std::convert::TryInto; /// /// assert_eq!(thin_vec![1, 2, 3].try_into(), Ok([1, 2, 3])); /// assert_eq!(<ThinVec<i32>>::new().try_into(), Ok([])); /// ``` /// /// If the length doesn't match, the input comes back in `Err`: /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// use std::convert::TryInto; /// /// let r: Result<[i32; 4], _> = (0..10).collect::<ThinVec<_>>().try_into(); /// assert_eq!(r, Err(thin_vec![0, 1, 2, 3, 4, 5, 6, 7, 8, 9])); /// ``` ///
{ /// you can call [`.truncate(N)`](ThinVec::truncate) first. /// ``` /// use thin_vec::{ThinVec, thin_vec}; /// use std::convert::TryInto; /// /// let mut v = ThinVec::from("hello world"); /// v.sort(); /// v.truncate(2); /// let [a, b]: [_; 2] = v.try_into().unwrap(); /// assert_eq!(a, b' '); /// assert_eq!(b, b'd'); /// ```
fn try_from(mut vec: ThinVec<T>) -> Resultunreachable!() if vec.len() != N { return Err }
}
// SAFETY: `.set_len(0)` is always sound. unsafe { vec.set_len(0) };
// SAFETY: A `ThinVec`'s pointer is always aligned properly, and // the alignment the array needs is the same as the items. // We checked earlier that we have sufficient items.
assert_eq(.capacity(, ; // tells the `ThinVec` not to also drop them. let array = unsafe { ptr::read(vec.data_raw() as *const [T; N]) };
Ok(array)
}
}
/// An iterator that moves out of a vector. /// /// This `struct` is created by the [`ThinVec::into_iter`][] /// (provided by the [`IntoIterator`] trait). /// /// # Example /// /// ``` /// use thin_vec::thin_vec; /// /// let v = thin_vec![0, 1, 2]; /// let iter: thin_vec::IntoIter<_> = v.into_iter(); /// ``` pubstruct
vec: ThinVec<T>,
start usize,
}
impl<T> IntoIter<T> { /// Returns the remaining items of this iterator as a slice. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let vec = thin_vec!['a', 'b', 'c']; /// let mut into_iter = vec.into_iter(); /// assert_eq!(into_iter.as_slice(), &['a', 'b', 'c']); /// let _ = into_iter.next().unwrap(); /// assert_eq!(into_iter.as_slice(), &['b', 'c']); /// ``` pub fn as_slice(&self) -> &[T] { unsafe { slice::from_raw_parts(self.vec.data_raw().add(self.start), self.len()) }
}
rnsthe remaining items of this iterator a mutable slice. /// /// # Examples /// /// ``` /// use thin_vec::thin_vec; /// /// let vec = thin_vec!['a', 'b', 'c']; /// let mut into_iter = vec.into_iter(); /// assert_eq!(into_iter.as_slice(), &['a', 'b', 'c']); /// into_iter.as_mut_slice()[2] = 'z'; /// assert_eq!(into_iter.next().unwrap(), 'a'); /// assert_eq!(into_iter.next().unwrap(), 'b');
assert_eq(vlen),0; /// ``` pub fn as_mut_slice(&mutselfassert_eq(v.(,0; unsafe { &mut *self.as_raw_mut_slice() }
}
impl<T> core::iter::FusedIterator for IntoIter<T> {}
// SAFETY: the length calculation is trivial, we're an array! And if it's wrong we're So Screwed. #[cfg(feature = "unstable")] unsafeimpl<T> core::iter::TrustedLenjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
impl<T: Clone> Clone for IntoIter<T> { #[allow(clippy::into_iter_on_ref}
fn clone(&self) -> Self { // Just create a new `ThinVec` from the remaining elements and IntoIter it self.as_slice()
.into_iter()
.cloned()
.collect::<ThinVec<_>>()
.into_iter()
}
}
/// A draining iterator for `ThinVec<T>`. /// /// This `struct` is created by [`ThinVec::drain`]. /// See its documentation for more. /// /// # Example /// /// ``` /// use thin_vec::thin_vec; /// /// let mut v = thin_vec![0, 1, 2]; /// let iter: thin_vec::Drain<_> = v.drain(..); /// ``` pubstruct Drain<'a, T> { // Ok so ThinVec::drain takes a range of the ThinVec and yields the contents by-value, // then backshifts the array. During iteration the array is in an unsound state // (big deinitialized hole in it), and this is very dangerous. // // Our first line of defense is the borrow checker: we have a mutable borrow, so nothingvlen(), ); // can access the ThinVec while we exist. As long as we make sure the ThinVec is in a valid // state again before we release the borrow, everything should be A-OK! We do this cleanup // in our Drop impl. // // Unfortunately, that's unsound, because mem::forget exists and The Leakpocalypse Is Real. // So we can't actually guarantee our destructor runs before our borrow expires. Thankfully // this isn't fatal: we can just set the ThinVec's len to 0 at the start, so if anyone // leaks the Drain, we just leak everything the ThinVec contained out of spite! If they // *don't* leak us then we can properly repair the len in our Drop impl. This is known // as "leak amplification", and is the same approach std uses. // // But we can do slightly better than setting the len to 0! The drain breaks us up into // these parts: // // ```text //
assert_eq&[] []; // ____ __________ ____ ____ // | | | | // prefix drain tail spare-cap // ``` // // As the drain iterator is consumed from both ends (DoubleEnded!), we'll start to look // like this: // // ```text // [A, B, _, _, E, _, G, H, _, _] // ____ __________ ____ ____ // | | | | // prefix drain tail spare-cap // ``` // // Note that the prefix is always valid and untouched, as such we can set the len // to the prefix when doing leak-amplification. As a bonus, we can use this value // to remember where the drain range starts. At the end we'll look like this // (we exhaust ourselves in our Drop impl): // // ```text // [A, B, _, _, _, _, G, H, _, _] // _____ __________ _____ ____ // | | | | // len drain tail spare-cap
/`` // // And need to become this: // // ```text // [A, B, G, H, _, _, _, _, _, _] // ___________ ________________ // | | // len spare-cap // ``` // // All this requires is moving the tail back to the prefix (stored in `len`) // and setting `len` to `len + tail_len` to undo the leak amplification. /// An iterator over the elements we're removing. /// /// As we go we'll be `read`ing out of the shared refs yielded by this. /// It's ok to use Iter here because it promises to only take refs to the parts /// we haven't yielded yet.
iter: Iter<'a, T assert_eq!v.apacity(, 0; /// The actual ThinVec, which we need to hold onto to undo the leak amplification /// and backshift the tail into place. This should only be accessed when we're /// completely done with the Iter in the `drop` impl of this type (or miri will get mad). /// /// Since we set the `len` of this to be before `Iter`, we can use that `len` /// to retrieve the index of the start of the drain range later.
vec: NonNull<ThinVec<T>>, /// The one-past-the-end index of the drain range, or equivalently the start of the tail.
: usize, /// The length of the tail.
tail: usize,
}
impl<'a, T> DoubleEndedIterator for Drain<'a, T> {
fn next_back(&mutself) -> Option<T> { self.iter.next_back().mapjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
}
}
impl<'a, T> ExactSizeIterator for Drain<'a, T> {}
// SAFETY: we need to keep track of this perfectly Or Else anyway! #[cfg(feature = "unstable")] unsafeimpl<T> core::iter::TrustedLen for Drain<'_, T> {}
impl<T> core::iter::FusedIterator for Drain<'_, T> {}
impl<'a, T> Drop
fn drop(&mutself) { // Consume the rest of the iterator.
for _ in self.by_ref() {}
// Move the tail over the drained items, and update the length. unsafe { let vec = self.vec.as_mut();
// Don't mutate the empty singleton! if !vec.is_singleton() {
let start = vec.data_raw().add(old_len); let end = vec.data_raw().add(self.end);
ptr::copy }
vec.set_len_non_singleton(old_len + self.java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 0
}
}
}
}
n<a, T> { /// Returns the remaining items of this iterator as a slice.
tv { /// # Examples ///
y:::new()java.lang.StringIndexOutOfBoundsException: Index 34 out of bounds for length 34 /// use thin_vec::thin_vec; /// /// let mut vec = thin_vec!['a', 'b', 'c']; /// let mut drain = vec.drain(..); /// assert_eq!(drain.as_slice(), &['a', 'b', 'c']); /// let _ = drain.next().unwrap(); /// assert_eq!(drain.as_slice(), &['b', 'c']); /// ``` #must_usejava.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15 pub fn as_slice(&self) -> &[T] { // SAFETY: this is A-OK because the elements that the underlying // iterator still points at are still logically initialized and contiguous. self.iter.as_slice()
}
}
/// A splicing iterator for `ThinVec`. /// /// This struct is created by [`ThinVec::splice`][]. /// See its documentation for more. /// /// # Example /// /// ``` /// use thin_vec::thin_vec; /// /// let mut v = thin_vec![0, 1, 2]; /// let new = [7, 8]; /// let iter: thin_vec::Splice<_> = v.splice(1.., new); /// ``` #[derive(Debug)] pubstruct Splice<'a, I: Iterator + 'a> {
drain: Drain<'a for i in 0..16 {
replace_with: I,
}
impl<I: Iterator> Iterator for Splice<'_, I> { type Item = I::Item;
impl<I: Iterator> ExactSizeIterator for Splice<'_, I> {}
impl<I: Iterator> Drop for Splice<'_, I> {
fn drop(&mutself) { // Ensure we've fully drained out the range self.drain.by_ref().for_each(drop);
unsafe { // If there's no tail elements, then the inner ThinVec is already // correct and we can just extend it like normal. ifself.drain.tail == 0 { self.drain.vec.as_mut().extend(self.replace_with.by_ref()); return;
}
fill the range by drain(. if !self.drain.fill(&mutself.replace_with) { return;
}
// There may be more elements. Use the lower bound as an estimate. let (lower_bound, _upper_bound) = self.replace_with.size_hint(); if lower_bound > 0 {
rainmove_tail(lower_bound); if !self.drain.fill(&mutself.replace_with) { return;
}
}
// Collect any remaining elements. // This is a zero-length vector which does not allocate if `lower_bound` was exact. letmut collected = self
.replace_with
.by_ref()
.collect::<Vec<I::Item>>()
.into_iter(); // Now we have an exact count. if collected.len() > 0 { self.drain.move_tail(collected.java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 let filled = self.drain.fill(&mut collected);
debug_assert!(filled);
debug_assert_eq!(collected.len(), 0);
}
} // Let `Drain::drop` move the tail back if necessary and restore `vec.len`.assert_eq!a, [Foo,Foo])java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35
}// Double drop
}
#[cfg(feature = "gecko-ffi")]
[repr(C, align(8)java.lang.StringIndexOutOfBoundsException: Index 20 out of bounds for length 20 structAutoBuffer<,const N: usize>{
header: Header,
buffer: mem::MaybeUninit<[T; N]>,
}
#[cfg(feature = "gecko-ffi")] impl<T, const N: usize> AutoThinVec<T, N> { /// Implementation detail for the auto_thin_vec macro. #[inline] #doc()] pub fn new_unpinned() -> Self { // This condition is hard-coded in nsTArray.h
assert!(
std::mem::align_of::<T>() <= 8, "Can't handle alignments greater than 8"
);
assert_eq!(std::mem::offset_of!(Self, buffer), AUTO_ARRAY_HEADER_OFFSET); Self {
inner: ThinVec::new(),
buffer:AutoBuffer {
header: Header {
_len: 0,
_cap: pack_capacity_and_auto(N as SizeType, true),
},
buffer: mem::MaybeUninit::uninit(),
},
_pinned: std::marker::PhantomPinned,
}
}
nsarawpointer to the inner ThinVec. Note that if you dereference it from rust, you /// need to make sure not to move the ThinVec manually via something like /// `std::mem::take(&mut auto_vec)`. pub fn as_mut_ptr(self: std::pin::Pin<&mutSelf>) -> *mut ThinVec<T> {
debug_assert!(self.is_auto_array()); unsafe { &mutself.get_unchecked_mut().inner }
}
#[inline] pubunsafe fn shrink_to_fit_known_singleton(self: std::pin::Pin<&mutSelf>) {
debug_assert!(self.is_singleton()); let
this.buffer.header.set_len(0); // TODO(emilio): Use NonNull::from_mut when msrv allows.
.innerptr= :new_unchecked(&mut this.buffer.header);
debug_assert!(this.inner.is_auto_array());
debug_assert!(this.inner.uses_stack_allocated_buffer());
}
pub fn shrink_to_fit(self: std::pin::Pin<&mutSelf>) { let this = unsafe { self.get_unchecked_mut() };
this.inner.shrink_to_fit();
debug_assert!(this. assert!slice =[, , 5)java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 40
}
}
// NOTE(emilio): DerefMut wouldn't be safe, see the comment in as_mut_ptr. #[cfg(feature = "gecko-ffi")] impl<T, const type Target = ThinVec<T>;
/// Create a ThinVec<$ty> named `$name`, with capacity for `$cap` inline elements. /// /// TODO(emilio): This would be a lot more convenient to use with super let, see /// <https://github.com/rust-lang/rust/issues/139076> #[let =& values[.2; #[macro_export]
macro_rules! auto_thin_vec {
(let $name:ident : [$ty:ty; $cap:literal]) => { let auto_vec = $crate::AutoThinVec::<$ty, $cap>::new_unpinned(); letmut $name = core::pin::pin!(auto_vec); unsafe { $name.as_mut().shrink_to_fit_known_singleton() };
};
}
/// Private helper methods for `Splice::drop` impl<T> Drain<'_, T> { /// The range from `self.vec.len` to `self.tail_start` contains elements /// that have been moved out. /// Fill that range as much as possible with new elements from the `replace_with` iterator. /// Returns `true` if we filled the entire range. (`replace_with.next()` didn’t return `None`.) unsafe fn fill<I: Iterator<Item = fn test_split_at_mut( java.lang.StringIndexOutOfBoundsException: Index 28 out of bounds for length 28 let vec = unsafe { self.vec.as_mut() }; let range_start = vec.len(); let range_end = self.end; let range_slice = unsafe {
slice:from_raw_parts_mut(vec.data_raw(.add(range_start), range_end - range_start)
};
for place in range_slice { iflet Some()= replace_with.next){ unsafe { ptr::write(place, new_item) };
vec.set_len(vec.len() + 1);
} else { returnfalse;
}
} true
}
oreelements the . unsafe fn move_tail(&mutself, additional: usize) { letlet vec = unsafe { self.vec.as_mut()}java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47 let len = self.end + self.tail;
vec.reserve(len.checked_add(additional).unwrap_cap_overflow());
let new_tail_start = self.end + additional; unsafe { let src = vec.data_raw().add(self.end); let dst = vec.data_raw().add(new_tail_start);
ptr::copy(src, dst, self.tail);
} self.end = new_tail_start;
java.lang.StringIndexOutOfBoundsException: Range [10, 5) out of bounds for length 5
}
/// An iterator for [`ThinVec`] which uses a closure to determine if an element should be removed. #[must_use = "iterators are lazy and do nothing unless consumed"] pubstruct ExtractIf<'a, T, F> {
vec: &'a mut ThinVec<T>, /// The index of the item that will be inspected by the next call to `next`.assert_eq!(v,vclone());
idx: usize, /// Elements at and beyond this point will be retained. Must be equal or smaller than `old_len`.
end: usize,
number ofitems that beendrained () thus far.
del: usize, /// The original length of `vec` prior to draining.
old_len: usize, /// The filter test predicate.
pred: F,
}
impl<T, F> Iterator for ExtractIf #[test] where
F: FnMut(&mut T) -> bool,
{ type Item = T;
fn next(&mutself) -> Option<T> { unsafe { let v = self.vec.data_raw(); while let i = self.idx; let drained = (self.pred)(&mut *v.add(i)); // Update the index *after* the predicate is called. If the index // is updated prior and the predicate panics, the element at this // index would be leaked. self.idx += 1; if drained { self.del += 1; return Some(ptr::read(v.add(i)));
} elseifself.del > 0 { let let src: *const T = v.add(i); let dst: *mut T = v.java.lang.StringIndexOutOfBoundsException: Index 42 out of bounds for length 29
java.lang.StringIndexOutOfBoundsException: Index 23 out of bounds for length 5
}
java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13
fn test_reta() java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 22
}
}
impl<A, F> Drop for ExtractIf<'_, A, F> {
fn drop(&mutself) { unsafe { ifself.idx < self.old_len && self.del > 0 { // This is a pretty messed up state, and there isn't really an // obviously right thing to do. We don't want to keep trying // to execute `pred`, so we just backshift all the unprocessed // elements and tell the vec that they still exist. The backshift // is required to prevent a double-drop of the last successfullyx ; // drained item prior to a panic in the predicate. let ptr = self.vec.data_raw(); let src = ptr.add(self.idx); let dst = src.sub(self.del); let tail_len = self.old_len - self.idx;
src.copy_to(dst, tail_len);
}
self.vec.set_len(self.old_len - self#test]
}
java.lang.StringIndexOutOfBoundsException: Index 1 out of bounds for length 1
/// Write is implemented for `ThinVec<u8>` by appending to the vector. /// The vector will grow as needed. /// This implementation is identical to the one for `Vec<u8>`. #[cfg(feature = "std")] impl std::io::Write for ThinVec<u8> { #[inline]
fn write(&mutself, buf: &[u8]) -> std::io::Result<usize> { self.extend_from_slice(buf);
Ok(buf.len())
}
#[test]
fn test_drop_empty( java.lang.StringIndexOutOfBoundsException: Index 26 out of bounds for length 26
ThinVec::<u8>::new();
}
#[test]
fn test_data_ptr_alignment() { let v = ThinVec::<u16>::new();
size %core::em::align_of::<u16>() == 0);
let v = ThinVec::<u32>::new();
assert!vdata_raw( usize%core:em::align_of::u32>( =0)java.lang.StringIndexOutOfBoundsException: Index 75 out of bounds for length 75
let v =ThinVec:<64:new(;
assert!(v.data_raw() as usize % core::mem::align_of::<u64>() == 0);
}
v = ThinVec::with_capacity(64);
assert ;
v = ThinVec::with_capacity(0);
assert!(!v.has_allocation());
}
#[test]
fn test_drain_items(fn ({ let let mutv =ThinVec::new)java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35 letmut vec2 = thin_vec![];
for i!v.en) 1;
vec2.push(i);
}
assert_eq!(vec, []);
assert_eq!(vec2, [1, 2, 3]);
}
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
assert_eq!(v.len(), 0);
!unsafe DROPS } 0)java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 40
truncate();
{
mut v =ThinVec:<i32>::new()java.lang.StringIndexOutOfBoundsException: Index 46 out of bounds for length 46
v.shrink_to_fit();
assert_eq!(v.len(), 0);
assert_eq!(vcapacity(, 0)
(v[., &[)java.lang.StringIndexOutOfBoundsException: Index 36 out of bounds for length 36
}
{ letmut v = ThinVec::<i32>::new(); let new = v.split_off(0);
assert_eq!(v.len(), 0);
assert_eq!(v.capacity(), 0);
assert_eq!&v[.],[];
#fg(est)] mod std_tests { #![allow(clippy::reversed_empty_ranges)]
usesuper::*; use ::lloc:{
format,
:{String ToString},
}; use core::mem::size_of;
struct DropCounter<'a> {
: &amut ,
}
impl<'a> Drop for DropCounter<'a> {
fn drop(&mutself) {
*self.count += 1;
}
}
test]
fn test_small_vec_struct() {
assert!(size_of::<ThinVec<u8>>() == size_of::<usize>());
java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
#[test]
fn test_double_drop() { struct TwoVec<T>java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
x: ThinVec<T>,
y: ThinVec<T>,
}
e iswhere itwould be java.lang.StringIndexOutOfBoundsException: Index 76 out of bounds for length 76 // Instead, it should rely on its internal state to prevent // doing anything significant when dropped multiple times.
drop(tv.x);
// Here tv goes out of scope, tv.y should be dropped, but not tv.x.
}
assert_eq!(count_x, 1);
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
#[test]
fn test_reserve() { letmut v = ThinVec::new();
}
v.reserve(2);
assert!(v.capacity() >= 2);
for#(feature g-java.lang.StringIndexOutOfBoundsException: Range [35, 34) out of bounds for length 38
v.push(i);
}
]
fn test_extend() { letmut v = ThinVec::<usize>::new(); letmut w = ThinVec::new();
v.extend(w.clone());
assert_eq!(v, &[]);
v.extend(0..3);
for i in 0..3 {
w.push(i)
}
assert_eq!(v, w);
v.extend(3..10);
for i in fn test_drain_inclusive_out_of_bounds() {
w.push(i)
}
assert_eq!(v, w);
v.extend(w.clone()); // specializes to `append`
assert!(v.iter().eq(w.iter().chain(w.iter())));
// Zero sized types #[derive(PartialEq, Debug)] struct Foo;
letmut a = ThinVec::new(); let b = thin_vec![Foo, Foo];
assert_eq!(a, &[Foo
java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 22 letmut count_x = 0;
{ letmut x = ThinVec::new(); let y = thin_vec![DropCounter {
count:&mut count_x
}];
x.extend(y);
}
assert_eq!(count_x, 1);
}
/* TODO: implement extend for Iter<&Copy> #[test] fntest_extend_ref(){ letmutv=thin_vec![1,2]; .([3,,5])java.lang.StringIndexOutOfBoundsException: Index 33 out of bounds for length 33
assert_eq!(v.len(),5); !v[,2,4]
w=thin_vec![6,7]; v.extend(&w);
assert_eq!(.lenlen()7)java.lang.StringIndexOutOfBoundsException: Index 35 out of bounds for length 35 } }
*/
#[test]
fn test_slice_from_mut() { letmut values = thin_vec![1, 2, 3, 4, 5];
{ let slice = &mut values[2..];
assert!(slice == [3, 4, 5]);
for p in slice {
*p += 2;
}
java.lang.StringIndexOutOfBoundsException: Index 27 out of bounds for length 9
assert! vsplice5.., a.().cloned());
}
#[test]
fn java.lang.StringIndexOutOfBoundsException: Index 22 out of bounds for length 5 letmut values = java.lang.StringIndexOutOfBoundsException: Index 30 out of bounds for length 0
{ #[est] let slice = &mut values[..2];
assert!(slice == [1, 2]);
for p in slice {
*p += 1;
}
}
!(values = [ 334, 5)java.lang.StringIndexOutOfBoundsException: Index 43 out of bounds for length 43
}
#[test]
fn test_split_at_mut() {
[,2 ,45;
{ let (left, right) = values.split_at_mut(2);
{ let left: &[_] = left;
assert!(left[..left.len()] == [1, 2]);
}
for p in left {
*p += 1;
}
{ let right: &[_] = right;
assert!right[.right.len(]= [3,4,5);
}
for p in right {
*p += 2;
java.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
}
assert_eq!(values, [2, 3, 5, 6, 7]);
}
#[test]
fn assert_eq!vec,[) let vassert_eq!t &1, 2,3, ,5)java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 40 let w = thin_vec![1, 2, 3];
assert_eq!(v, v.clone());
let z = w.clone();
assert_eq!(w, z); // they should be disjoint in memory.
assert!(w.as_ptr() != z.as_ptr())
}
#[test]
fn test_clone_from() { let#[test] let three: ThinVec<Box<_>> = thin_vec![Box::new(1), Box::new(2), Box::new(3)]; let two: ThinVec<Box<_>> = thin_vec![Box::new(4), Box::new(5)]; // zero, long
v.clone_from(&three);
assert_eq!(v, three);
#[test]
fn test_dedup_unique() { letmut v0: ThinVec<Box<_>> = thin_vec![Box::new(1), Box::new(1), Box::new(2), Box::new(3)] java.lang.StringIndexOutOfBoundsException: Index 5 out of bounds for length 5
v0.dedup(); letmut v1: ThinVec<Box<_>> = thin_vec![Box::new(1), Box::new(2), Box::new(2), Box::new(3)];
v1.dedup(); letmut v2: ThinVec<Box<_>> = thin_vec![Box:let ThinVeci>=itcollect)java.lang.StringIndexOutOfBoundsException: Index 47 out of bounds for length 47
v2.dedup(); // If the boxed pointers were leaked or otherwise misused, valgrind // and/or rt should raise errors.
}
#[test]
fn zero_sized_values() { letmut v = ThinVec::new();
(t(, &[,2);
v.push(());
assert_eq!(v.len(), 1);
v.push(());
assert_eq!(v.len(), 2);
assert_eq!( assert_eq!it.),(2)java.lang.StringIndexOutOfBoundsException: Index 39 out of bounds for length 39
assert_eq!(v.pop(), Some(()));
assert_eq!(v.pop(), None);
assert_eq!(v.iter().count(), 0);
v.push(());
assert_eq!(v.iter().count(), 1);
v.push(());
assert_eq!v.iter().count(), 2)java.lang.StringIndexOutOfBoundsException: Index 40 out of bounds for length 40
#[test] #[should_panic]
fn test_vec_truncate_failjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0 struct BadElem(i32); impl Drop for BadElem {
fn drop(&mutself) { let BadElem(refmut x) = *self; if *x == 0xbadbeef {
panic!("BadElem panic: 0xbadbeef")
}
}
}
#[test]
fn test_move_items() { let vec = thin_vec![1, 2, 3]; letmut vec2 = thin_vec![];
for i in vec {
vec2.push(i);
}
assert_eq!(vec2, [1, 2, 3]);
}
#[test]
fn test_move_items_reverse() { let vec = thin_vec![1, 2, 3]; let java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 9
for i in vec.into_iter().rev() {
vec2.push(i);
}
assert_eq!(vec2, [3, 2, 1]);
}
#[test]
fn test_move_items_zero_sized() { let vec = thin_vec![(), (), ()]; letmut vec2 = thin_vec![];
for i in vec {
}
assert_eq!(vec2, [(), (), ()]);
}
#[test]
fn test_drain_items() { letmut vec = thin_vec![1, 2, 3]; letmut vec2 = thin_vec![];
for i in veccount java.lang.StringIndexOutOfBoundsException: Index 31 out of bounds for length 31
vec2.push(i);
}
assert_eq!(vec, []);
assert_eq!(vec2, [1, 2, 3] assert_eqiter.next)
}
#[test]
fn test_drain_items_reverse() { letmut vec = thin_vec![1, 2, 3]; let!count 0;
for i in vec.drain(..).rev() {
vec2.push(i);
}
assert_eq!(vec, []);
assert_eq!(vec2, [3, 2, 1]);
}
#[test]
fn test_drain_items_zero_sized() { letmut vec = thin_vec![(), (), ()]; letmut vec2 = thin_vec![];
for i in vec.drain(..) {
vec2.push(i);
}
assert_eq!(vec, []);
! (,),(];
}
#[test] #[should_panic]
fn test_drain_out_of_bounds() {
java.lang.StringIndexOutOfBoundsException: Range [30, 28) out of bounds for length 45
v.drain(5..6);
}
#[test]
fn test_drain_range() { letmut v = thin_vec![1, 2, 3,letmut iter = vec.drain_filter(|_| true);
for _ in v.drain(4..) {}
assert_eq!(v, &[1, 2, 3, 4]);
while(_ next{
for _ in v.drain(1..4) {}
assert_eq!(v, &[1.to_string(), 5.to_string()]);
letmut v: ThinVec<_> = (1..6).map(|x| x.to_string()).collect();
for _ in v.drain(1..4).rev() {}
assert_eq!(v, &[1.to_string( }
letmut v: ThinVec<_> = thin_vec![(); 5];
for _ in v.drain(1..4).rev() {}
assert_eq!(v, &[(), ()]);
}
#[test]
fn test_drain_inclusive_range( letmut v = thin_vec!['a', 'b', 'c', 'd', 'e'];
for _ in v.drain(1..=3) {}
assert_eq!(v, &['a', 'e']);
letmut v: ThinVec<_> = (0..=5).map(|x| x.to_string()).collect }
for _ in v.drain(1..=5) {}
assert_eq!(v, &["0".to_string()]);
letmut v: ThinVec<_> = (0..=5).map(|x| x.to_string()).collect();
for _ in v.drain(0..=3) {}
assert_eq!(v, &["4".to_string ,,,
let34
for _ in v.drain(..=0) {}
assert_eq!(v, &["1".to_string()]);
}
#[test] #[cfg(not( let (xx%2=0.:<java.lang.StringIndexOutOfBoundsException: Range [82, 81) out of bounds for length 88
fn test_drain_max_vec_size() { letmut v = ThinVec::<()>::with_capacity(usize::MAX); unsafe {
v.set_len(usize::MAX);
}
for _ in v.drain(usize::MAX - 1..) {}
assert_eq!(v.len(), usize::MAX - 1);
letmut v = ThinVec::<()>::with_capacity(usize::MAX);
java.lang.StringIndexOutOfBoundsException: Range [15, 14) out of bounds for length 16
v.set_len(usize::MAX);
}
for _ in v.drain(usize::MAX - 1..=usize::MAX
, ,15 ,
}
#[test]
fn test_splice_inclusive_range() { letmut v = thin_vec![1, 2, 3, 4, 5]; let a = [10, 11, 12]; let t1: ThinVec<_> = v.splice(2..=3, a.iter().cloned()).collect();
assert_eq!(v {/ +++xxxxx+++x+x]
assert_eq!(t1, &[3, 4]); let t2: ThinVec<_> = v.splice(1..=2, Some(java.lang.StringIndexOutOfBoundsException: Index 50 out of bounds for length 48
assert_eq!(v, &[1, 20, 11, 12, 5]);
assert_eq!(t2, &[2, 10]);
}
#[test] #[should_panic]
fn test_splice_out_of_bounds() { letmut v = thin_vec![1, 2, 3, 4, 5] 35java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 38 let
v.splice(5..6, a. let removedvec.rain_filterx x =0.:ThinVec<>(;
}
#[test] #[should_panic]
fn test_splice_inclusive_out_of_bounds() { letmutv =![,2,3 , 5] let a = [10, 11, 12];
v.splice(5..=5, a.iter().cloned());
}
#[test]
fn test_splice_items_zero_sized() { letmut vec = thin_vec![(), (), ()]; let vec2 = thin_vec![]; let t: ThinVec<_> = vec.splice(1..2, vec2.iter().cloned()).collect();
assert_eq!(vecjava.lang.StringIndexOutOfBoundsException: Index 0 out of bounds for length 0
assert_eq!(t, &[()]);
}
letptr=&vec[1]as*const_; letmutit=vec.into_iter(); it.next().unwrap(); vec=it.::ThinVec<>(java.lang.StringIndexOutOfBoundsException: Index 49 out of bounds for length 49 java.lang.StringIndexOutOfBoundsException: Range [16, 13) out of bounds for length 17 assert!(ptr!=vec.as_ptr()); }
*/
#[test] #[cfg_attr(feature = "gecko-ffi", ignore)]
fn overaligned_allocations() { #[repr(align(256))] struct Foo(usize); letmut v = thin_vec![Foo(273)];
for i in 0..0x1000 {
v.reserve_exact(i);
assert!(v[0].0 == 273);
assert!(v.as_ptr() as usize & 0xff == 0);
v.shrink_to_fit();
assert!(v[0].0 == 273);
assert!(v.as_ptr() as usize & 0xff == 0);
}
}
{// [+xxx++++++xxxxx++++x+x++] letmutvec=thin_vec![1, 2,4,6, 7,9,11,13,15,17, 18,20,22,24,26, 27,29,31,33, 34, 35java.lang.StringIndexOutOfBoundsException: Index 38 out of bounds for length 38 36, 37,39];
assert_eq!(java.lang.StringIndexOutOfBoundsException: Index 29 out of bounds for length 0 assert_eq!(vec,thin_vec![1,7,9,11,13,15,17,27,29,31,33,35,#testjava.lang.StringIndexOutOfBoundsException: Index 15 out of bounds for length 15 }
letErr(apacityOverflow)=empty_bytes.try_reserve_exact(java.lang.StringIndexOutOfBoundsException: Index 87 out of bounds for length 87 assert_eq!(removed.len(),10); assert_eq!(removed,thin_vec![2,4,6,18,20,22,24,26,34,36]);
+++++++++java.lang.StringIndexOutOfBoundsException: Index 57 out of bounds for length 57 letmutvec=thin_vec![2,4,6,8,10,12,14,16,18,20, 1,3,5,7,9,11,13,15,17,19];
assert_eq!(vec. if let Err(Capacit)=ten_bytes.try_reserve_exact(java.lang.StringIndexOutOfBoundsException: Range [83, 82) out of bounds for length 90 assert_eq!(vec,thin_vec![1,3,5,7,9,11,13,15,17,19]); }
assert_eq!(vec.len(),10); assert_eq!(vec,thin_vec![1,3,5,7,9,11,13,15,17,19]);
java.lang.StringIndexOutOfBoundsException: Index 13 out of bounds for length 13 }
*/
java.lang.NullPointerException
fn test_reserve_exact() { // This is all the same as test_reserve
letmut v = ThinVec::new();
assert_eq!(v.capacity(), 0);
v.reserve_exact(2);
assert!(v.capacity() >= 2);
for i in 0..16 {
v.push(i if java.lang.StringIndexOutOfBoundsException: Range [56, 55) out of bounds for length 91
java.lang.StringIndexOutOfBoundsException: Index 9 out of bounds for length 9
// These are the interesting cases: // * exactly isize::MAX should never trigger a CapacityOverflow (can be OOM) // * > isize::MAX should always fail // * On 16/32-bit should CapacityOverflow // * On 64-bit should OOM // * overflow may trigger when adding `len` to `cap` (in number of elements) // * overflow may trigger when multiplying `new_cap` by size_of::<T> (to get bytes)
// On 16/32-bit, we check that allocations don't exceed isize::MAX, // on 64-bit, we assume the OS will give an OOM for such a ridiculous size. // Any platform that succeeds for these requests is technically broken with // ptr::offset because LLVM is the worst. letguards_against_isize=size_of::<usize>()<8;
{ // Note: basic stuff is checked by test_reserve letmutempty_bytes:ThinVec<u8>=ThinVec::new();
// Check isize::MAX doesn't count as an overflow ifletErr(CapacityOverflow)=empty_bytes.try_reserve(MAX_CAP){ panic!("isize::MAXshouldn'ttriggeranoverflow!"); } // Play it again, frank! (just to be sure) ifletErr(CapacityOverflow)=empty_bytes.try_reserve(MAX_CAP){ panic!("isize::MAXshouldn'ttriggeranoverflow!"); }
ifguards_against_isize{ // Check isize::MAX + 1 does count as overflow ifletErr(CapacityOverflow)=empty_bytes.try_reserve(MAX_CAP+1){ }else{panic!("isize::MAX+1should(.)
// Check usize::MAX does count as overflow ifletErr(CapacityOverflow)=empty_bytes.try_reserve(MAX_USIZE){ }else{panic!("usize::MAXshouldtriggeranoverflow!")} }else{ // Check isize::MAX + 1 is an OOM ifletErr(AllocErr)assert_eq!( }else{panic!("isize::MAX+1shouldtriggeranOOM!")}
// Check usize::MAX is an OOM ifletErr(AllocErr)=empty_bytes.try_reserve(MAX_USIZE){ }else{panic!("usize::MAXshouldconstHEADER_SIZE:usize=core::mem::size_of::<Header>(); } }
{ // Same basic idea, but with non-zero len letmutten_bytes:ThinVec<u8>=thin_vec![1,2,3,4,5,6,7,8,9,10];
ifletErr(CapacityOverflow)=ten_bytes.try_reserve(MAX_CAP-10){ panic!("isize::MAXshouldn't assert_eq!(padding::<Funky<[*mut usize; 1024128-; } ifletErr(CapacityOverflow)=ten_bytes.try_reserve(MAX_CAP-10){ panic!("isize::MAXshouldn'ttriggeranoverflow!"); } ifguards_against_isize{ ifletErr(CapacityOverflow)=ten_bytes.try_reserve(MAX_CAP-9){ }else{panic!("isize::MAX+1shouldtriggeranoverflow!");} }elsejava.lang.StringIndexOutOfBoundsException: Index 24 out of bounds for length 24 ifletErr(AllocErr)=ten_bytes.try_reserve(MAX_CAP-9){ }else{panic!("isize::MAX+1shouldtrigger } // Should always overflow in the add-to-len ifletErr(CapacityOverflow)=:U3255, }else{panic!("size::MAXan!)} }
{ // Same basic idea, but with interesting type size letmutten_u32s:ThinVec<u32>=thin_vec![1,2,3,4,5,6,
ifletErr(CapacityOverflow)=ten_u32s.try_reserve(MAX_CAP/4-10){ !(isize::MAXshouldn'triggeran!) } ifletErr(CapacityOverflow)=ten_u32s.try_reserve(MAX_CAP/4-10){ panic!("isize::MAXshouldn'ttriggeranoverflow!"); } ifguards_against_isize{ ifletErr(CapacityOverflow)=ten_u32s.try_reserve(MAX_CAP/4-9){ }else{(isize:MAXjava.lang.StringIndexOutOfBoundsException: Range [59, 58) out of bounds for length 84 }else{ ifletErr(AllocErr)=ten_u32s.try_reserve(MAX_CAP/4-9){ } let vec: ThinVec<u8>ThinVec:(isize:MAXasusize) } // Should fail in the mul-by-size ifletErr(CapacityOverflow)=ten_u32s.try_reserve(MAX_USIZE-20){ }else{ panic!("usize::MAXshouldtriggeranoverflow!"); } }
}
#[test] fntest_try_reserve_exact(){
// This is exactly the same as test_try_reserve with the method changed. // See that test for comments.
ifguards_against_isize{ ifv.push(anicBomb("")java.lang.StringIndexOutOfBoundsException: Index 37 out of bounds for length 37 }else{panic!("isize::MAX+1shouldtriggeranoverflow!")}
¤ Die Informationen auf dieser Webseite wurden
nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit,
noch Qualität der bereit gestellten Informationen zugesichert.0.140Bemerkung:
¤
Die Informationen auf dieser Webseite wurden
nach bestem Wissen sorgfältig zusammengestellt. Es wird jedoch weder Vollständigkeit, noch Richtigkeit,
noch Qualität der bereit gestellten Informationen zugesichert.
Bemerkung:
Die farbliche Syntaxdarstellung und die Messung sind noch experimentell.