Lines Matching full:safety

15 /// # Safety
26     /// # Safety
35         // SAFETY: The caller promises that the pointer is valid. The implementer promises that the  in raw_get_list_links()
49         // SAFETY: The implementation of `raw_get_list_links` only compiles if the field has the
61                 // SAFETY: The caller promises that the pointer is not dangling. We know that this
73 /// # Safety
91         // SAFETY: The implementation of `raw_get_list_links` only compiles if the field has the
104                 // SAFETY: The caller promises that the pointer is not dangling.
127         // SAFETY: See GUARANTEES comment on each method.
135                 // SAFETY: The caller guarantees that `me` points at a valid value of type `Self`.
152                 // SAFETY: `me` originates from the most recent call to `prepare_to_insert`, so it
167                 // SAFETY: The caller promises that `me` points at a valid value.
178                 // SAFETY: `me` originates from the most recent call to `prepare_to_insert`, so it
191         // SAFETY: See GUARANTEES comment on each method.
202                 // SAFETY: The caller promises that `me` points at a valid value of type `Self`.
208                 // SAFETY: The constant is equal to `offset_of!(ListLinksSelfPtr, self_ptr)`, so
214                 // SAFETY: This value is not accessed in any other places than `prepare_to_insert`,
215                 // `post_remove`, or `view_value`. By the safety requirements of those methods,
230                 // SAFETY: The caller promises that `me` points at a valid value of type `Self`.
235             // may choose to satisfy the safety requirements of `post_remove` instead of the safety
244             // GUARANTEES: (only when using the `view_value` safety requirements)
251                 // SAFETY: The constant is equal to `offset_of!(ListLinksSelfPtr, self_ptr)`, so
256                 // SAFETY: This is not a data race, because the only function that writes to this
257                 // value is `prepare_to_insert`, but by the safety requirements the
266                 // SAFETY: This specific implementation of `view_value` allows the caller to
267                 // promise the safety requirements of `post_remove` instead of the safety