Migrate to strict and exposed provenance
This commit is contained in:
@@ -97,7 +97,7 @@ unsafe fn scan_slice_to_str(heap_slice: &[u8]) -> HeapStringScan {
|
||||
.unwrap_or(heap_slice.len());
|
||||
let zero_byte_addr = heap_slice.as_ptr().add(string_len);
|
||||
|
||||
let sentinel_len = pstr_sentinel_length(zero_byte_addr as usize);
|
||||
let sentinel_len = pstr_sentinel_length(zero_byte_addr.addr());
|
||||
let tail_idx = cell_index!(
|
||||
(string_len + sentinel_len).next_multiple_of(ALIGN)
|
||||
+ if sentinel_len <= 1 { heap_index!(1) } else { 0 }
|
||||
|
||||
@@ -297,7 +297,7 @@ impl Term {
|
||||
Term::atom(alias.as_str().to_string())
|
||||
} else {
|
||||
Term::compound("$stream", [
|
||||
Term::integer(stream.as_ptr() as usize)
|
||||
Term::integer(stream.as_ptr().addr())
|
||||
])
|
||||
};
|
||||
term_stack.push(stream_term);
|
||||
|
||||
@@ -59,9 +59,10 @@ impl Index<usize> for AndFrame {
|
||||
|
||||
unsafe {
|
||||
let ptr = self as *const crate::machine::stack::AndFrame as *const u8;
|
||||
let ptr = ptr as usize + prelude_offset + index_offset;
|
||||
|
||||
&*(ptr as *const HeapCellValue)
|
||||
// This address falls outside the provenance for self, therefore we have to get it
|
||||
// from exposed provenance.
|
||||
&*std::ptr::with_exposed_provenance(ptr.addr() + prelude_offset + index_offset)
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -72,10 +73,11 @@ impl IndexMut<usize> for AndFrame {
|
||||
let index_offset = (index - 1) * mem::size_of::<HeapCellValue>();
|
||||
|
||||
unsafe {
|
||||
let ptr = self as *mut crate::machine::stack::AndFrame as *const u8;
|
||||
let ptr = ptr as usize + prelude_offset + index_offset;
|
||||
let ptr = self as *mut crate::machine::stack::AndFrame as *mut u8;
|
||||
|
||||
&mut *(ptr as *mut HeapCellValue)
|
||||
// This address falls outside the provenance for self, therefore we have to get it
|
||||
// from exposed provenance.
|
||||
&mut *std::ptr::with_exposed_provenance_mut(ptr.addr() + prelude_offset + index_offset)
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -85,20 +87,14 @@ impl Index<usize> for Stack {
|
||||
|
||||
#[inline]
|
||||
fn index(&self, index: usize) -> &Self::Output {
|
||||
unsafe {
|
||||
let ptr = self.buf.base as usize + index;
|
||||
&*(ptr as *const HeapCellValue)
|
||||
}
|
||||
unsafe { &*self.buf.base.add(index).cast() }
|
||||
}
|
||||
}
|
||||
|
||||
impl IndexMut<usize> for Stack {
|
||||
#[inline]
|
||||
fn index_mut(&mut self, index: usize) -> &mut Self::Output {
|
||||
unsafe {
|
||||
let ptr = self.buf.base as usize + index;
|
||||
&mut *(ptr as *mut HeapCellValue)
|
||||
}
|
||||
unsafe { &mut *self.buf.base.add(index).cast_mut().cast() }
|
||||
}
|
||||
}
|
||||
|
||||
@@ -132,9 +128,10 @@ impl Index<usize> for OrFrame {
|
||||
|
||||
unsafe {
|
||||
let ptr = self as *const crate::machine::stack::OrFrame as *const u8;
|
||||
let ptr = ptr as usize + prelude_offset + index_offset;
|
||||
|
||||
&*(ptr as *const HeapCellValue)
|
||||
// This address falls outside the provenance for self, therefore we have to get it
|
||||
// from exposed provenance.
|
||||
&*std::ptr::with_exposed_provenance(ptr.addr() + prelude_offset + index_offset)
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -146,10 +143,11 @@ impl IndexMut<usize> for OrFrame {
|
||||
let index_offset = index * mem::size_of::<HeapCellValue>();
|
||||
|
||||
unsafe {
|
||||
let ptr = self as *mut crate::machine::stack::OrFrame as *const u8;
|
||||
let ptr = ptr as usize + prelude_offset + index_offset;
|
||||
let ptr = self as *mut crate::machine::stack::OrFrame as *mut u8;
|
||||
|
||||
&mut *(ptr as *mut HeapCellValue)
|
||||
// This address falls outside the provenance for self, therefore we have to get it
|
||||
// from exposed provenance.
|
||||
&mut *std::ptr::with_exposed_provenance_mut(ptr.addr() + prelude_offset + index_offset)
|
||||
}
|
||||
}
|
||||
}
|
||||
@@ -187,15 +185,19 @@ impl Stack {
|
||||
let frame_size = AndFrame::size_of(num_cells);
|
||||
|
||||
unsafe {
|
||||
let e = (*self.buf.ptr.get_mut()) as usize - self.buf.base as usize;
|
||||
let e = (*self.buf.ptr.get_mut()).addr() - self.buf.base.addr();
|
||||
let new_ptr = self.alloc(frame_size);
|
||||
let mut offset = prelude_size::<AndFramePrelude>();
|
||||
|
||||
for idx in 0..num_cells {
|
||||
ptr::write(
|
||||
new_ptr.add(offset) as *mut HeapCellValue,
|
||||
stack_loc_as_cell!(AndFrame, e, idx + 1),
|
||||
);
|
||||
let cell_ptr = new_ptr.add(offset) as *mut HeapCellValue;
|
||||
ptr::write(cell_ptr, stack_loc_as_cell!(AndFrame, e, idx + 1));
|
||||
|
||||
// Because in the Index and IndexMut inplementations we need to get this from
|
||||
// exposed provenance, we need to expose the provenance here, even though we don't
|
||||
// actually use the value for anything. This is a reminder that `expose_provenance`
|
||||
// isn't just a cast from a pointer to an integer but has actual side effects.
|
||||
cell_ptr.expose_provenance();
|
||||
|
||||
offset += mem::size_of::<HeapCellValue>();
|
||||
}
|
||||
@@ -208,22 +210,26 @@ impl Stack {
|
||||
}
|
||||
|
||||
pub(crate) fn top(&self) -> usize {
|
||||
unsafe { (*self.buf.ptr.get()) as usize - self.buf.base as usize }
|
||||
unsafe { (*self.buf.ptr.get()).addr() - self.buf.base.addr() }
|
||||
}
|
||||
|
||||
pub(crate) fn allocate_or_frame(&mut self, num_cells: usize) -> usize {
|
||||
let frame_size = OrFrame::size_of(num_cells);
|
||||
|
||||
unsafe {
|
||||
let b = (*self.buf.ptr.get_mut()) as usize - self.buf.base as usize;
|
||||
let b = (*self.buf.ptr.get_mut()).addr() - self.buf.base.addr();
|
||||
let new_ptr = self.alloc(frame_size);
|
||||
let mut offset = prelude_size::<OrFramePrelude>();
|
||||
|
||||
for idx in 0..num_cells {
|
||||
ptr::write(
|
||||
new_ptr.byte_add(offset) as *mut HeapCellValue,
|
||||
stack_loc_as_cell!(OrFrame, b, idx),
|
||||
);
|
||||
let cell_ptr = new_ptr.byte_add(offset) as *mut HeapCellValue;
|
||||
ptr::write(cell_ptr, stack_loc_as_cell!(OrFrame, b, idx));
|
||||
|
||||
// Because in the Index and IndexMut inplementations we need to get this from
|
||||
// exposed provenance, we need to expose the provenance here, even though we don't
|
||||
// actually use the value for anything. This is a reminder that `expose_provenance`
|
||||
// isn't just a cast from a pointer to an integer but has actual side effects.
|
||||
cell_ptr.expose_provenance();
|
||||
|
||||
offset += mem::size_of::<HeapCellValue>();
|
||||
}
|
||||
@@ -237,10 +243,7 @@ impl Stack {
|
||||
|
||||
#[inline(always)]
|
||||
pub(crate) fn index_and_frame(&self, e: usize) -> &AndFrame {
|
||||
unsafe {
|
||||
let ptr = self.buf.base as usize + e;
|
||||
&*(ptr as *const AndFrame)
|
||||
}
|
||||
unsafe { &*self.buf.base.add(e).cast() }
|
||||
}
|
||||
|
||||
#[inline(always)]
|
||||
@@ -254,26 +257,20 @@ impl Stack {
|
||||
|
||||
#[inline(always)]
|
||||
pub(crate) fn index_or_frame(&self, b: usize) -> &OrFrame {
|
||||
unsafe {
|
||||
let ptr = self.buf.base as usize + b;
|
||||
&*(ptr as *const OrFrame)
|
||||
}
|
||||
unsafe { &*self.buf.base.add(b).cast() }
|
||||
}
|
||||
|
||||
#[inline(always)]
|
||||
pub(crate) fn index_or_frame_mut(&mut self, b: usize) -> &mut OrFrame {
|
||||
unsafe {
|
||||
let ptr = self.buf.base as usize + b;
|
||||
&mut *(ptr as *mut OrFrame)
|
||||
}
|
||||
unsafe { &mut *self.buf.base.add(b).cast_mut().cast() }
|
||||
}
|
||||
|
||||
#[inline(always)]
|
||||
pub(crate) fn truncate(&mut self, b: usize) {
|
||||
let base = self.buf.base as usize + b;
|
||||
let base = unsafe { self.buf.base.add(b) };
|
||||
|
||||
if base < (*self.buf.ptr.get_mut()) as usize {
|
||||
*self.buf.ptr.get_mut() = base as *mut _;
|
||||
if base < (*self.buf.ptr.get_mut()) {
|
||||
*self.buf.ptr.get_mut() = base.cast_mut();
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user