Lines Matching full:safety
89 // SAFETY: Ownership of an `HrTimer` can be moved to other threads and
93 // SAFETY: Timer operations are locked on the C side, so it is safe to operate
106 // SAFETY: By design of `pin_init!`, `place` is a pointer to a in new()
128 /// # Safety
132 // SAFETY: The field projection to `timer` does not go out of bounds, in raw_get()
154 /// # Safety
158 // SAFETY: `this` points to an allocation of at least `HrTimer` size. in raw_cancel()
163 // SAFETY: `c_timer_ptr` is initialized and valid. Synchronization is in raw_cancel()
201 /// # Safety
209 /// # Safety
219 /// # Safety
228 /// # Safety
240 // SAFETY: By the safety requirement of [`UnsafeHrTimerPointer`], dropping the
251 // SAFETY: We drop the timer handle below before returning. in start_scoped()
269 /// # Safety
292 /// # Safety
298 /// Note: One way to satisfy the safety requirement is to call `Self::cancel` in
315 /// # Safety
327 /// # Safety
338 /// # Safety
350 /// # Safety
354 // SAFETY: `this` is a valid pointer to a `Self`. in c_timer_ptr()
357 // SAFETY: timer_ptr points to an allocation of at least `HrTimer` size. in c_timer_ptr()
364 /// # Safety
370 // SAFETY: By function safety requirement, `this` is a valid `Self`. in start()
488 // SAFETY: This implementation of `raw_get_timer` only compiles if the
496 // SAFETY: The caller promises that the pointer is not dangling.
504 // SAFETY: As per the safety requirement of this function, `ptr`