The scope of the unsafe block can be appropriately reduced#32
The scope of the unsafe block can be appropriately reduced#32peamaeq wants to merge 1 commit intosekineh:masterfrom
Conversation
|
Thanks, it looks good.
We also need a CHANGELOG entry.
|
|
As the CI failures are unrelated to this PR (same errors on master), I openned a separate PR: #33. Regarding the changes introduced in this PR, these are a subset of those found in rust-lang/rust#81706. The upstream PR also makes several of the private functions unsafe ( It may also be worth porting a more recent version from |
|
This would now conflict with #34, but very similar changes to those proposed here are among those proposed there. |
|
These big |
In this function you use the unsafe keyword for almost the entrie function body.
We need to mark unsafe operations more precisely using unsafe keyword. Keeping unsafe blocks small can bring many benefits. For example, when mistakes happen, we can locate any errors related to memory safety within an unsafe block. This is the balance between Safe and Unsafe Rust. The separation is designed to make using Safe Rust as ergonomic as possible, but requires extra effort and care when writing Unsafe Rust.
Hope this PR can help you.
Best regards.
References
https://doc.rust-lang.org/nomicon/safe-unsafe-meaning.html
https://doc.rust-lang.org/book/ch19-01-unsafe-rust.html