Struct Unique Frame Owner &nbsp; Copy item path

impl<M: AnyFrameMeta + Repr<MetaSlotSmall>> UniqueFrameOwner<Link<M>>

pub open spec fn frame_link_inv(&self, regions: MetaRegionOwners) -> bool

{
    &&& self.meta_value(regions).prev is None
    &&& self.meta_value(regions).next is None
    &&& self.meta_own.paddr == regions.slots[self.slot_index].addr()
    &&& regions.slot_owners[self.slot_index].in_list_perm.value() == 0

}

impl<M: AnyFrameMeta + Repr<MetaSlotStorage> + OwnerOf> UniqueFrameOwner<M>

pub open spec fn meta_wf(self, regions: MetaRegionOwners) -> bool

{
    typed_meta_wf::<
        M,
    >(
        *regions.slots[self.slot_index],
        regions.slot_owners[self.slot_index].metadata_perm.resource(),
        self.repr_perm->0,
    )
}

pub open spec fn meta_value(self, regions: MetaRegionOwners) -> M

{
    typed_meta_value::<
        M,
    >(regions.slot_owners[self.slot_index].metadata_perm.resource(), self.repr_perm->0)
}

pub open spec fn global_inv(self, regions: MetaRegionOwners) -> bool

{
    &&& regions.contains(self.slot_index)
    &&& self.meta_wf(regions)
    &&& regions.slots[self.slot_index].addr() == index_to_meta(self.slot_index)
    &&& self.meta_value(regions).wf(self.meta_own)
    &&& regions.slot_owners[self.slot_index].metadata_perm.is_resource_vacant()
    &&& regions.slot_owners[self.slot_index].metadata_perm.resource().storage_perm.id()
        == regions.slots[self.slot_index].value().storage.id()
    &&& regions
        .slot_owners[self.slot_index]
        .metadata_perm
        .resource()
        .vtable_ptr_perm
        .pptr() == regions.slots[self.slot_index].value().vtable_ptr
    &&& regions
        .slot_owners[self.slot_index]
        .metadata_perm
        .resource()
        .vtable_ptr_perm
        .is_init()
    &&& regions.slot_owners[self.slot_index].slot_vaddr == index_to_meta(self.slot_index)
    &&& regions.ref_count(self.slot_index) == REF_COUNT_UNIQUE
    &&& regions.slot_owners[self.slot_index].usage is Frame

}

pub open spec fn from_unused_owner( meta_own: M::Owner, repr_perm: M::ReprPerm, slot_index: int, ) -> Self

{
    Self {
        meta_own,
        repr_perm: Some(repr_perm),
        slot_index,
    }
}

pub proof fn tracked_from_unused_owner( tracked meta_own: M::Owner, tracked repr_perm: M::ReprPerm, slot_index: int, ) -> tracked res : Self

returns

Self::from_unused_owner(meta_own, repr_perm, slot_index),

pub proof fn tracked_borrow_repr_perm(tracked &self) -> tracked &M::ReprPerm

requires

self.repr_perm is Some,

returns

self.repr_perm->0,

pub proof fn tracked_borrow_mut_repr_perm(tracked &mut self) -> tracked res : &mut M::ReprPerm

requires

old(self).inv(),

ensures

*res == old(self).repr_perm->0,

final(self).meta_own == old(self).meta_own,

final(self).slot_index == old(self).slot_index,

final(self).repr_perm is Some,

final(self).repr_perm->0 == *final(res),

final(self).inv(),

Trait Implementations§

impl<M: AnyFrameMeta + ?Sized + Repr<MetaSlotStorage> + OwnerOf> Inv for UniqueFrameOwner<M>

open spec fn inv(self) -> bool

{
    &&& 0 <= self.slot_index < MAX_NR_PAGES
    &&& self.slot_index < max_meta_slots()
    &&& self.repr_perm is Some

}

Auto Trait Implementations§

impl<M> Freeze for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: Freeze, <M as Repr<MetaSlotStorage>>::ReprPerm: Freeze,

impl<M> RefUnwindSafe for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: RefUnwindSafe, <M as Repr<MetaSlotStorage>>::ReprPerm: RefUnwindSafe,

impl<M> Send for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: Send, <M as Repr<MetaSlotStorage>>::ReprPerm: Send,

impl<M> Sync for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: Sync, <M as Repr<MetaSlotStorage>>::ReprPerm: Sync,

impl<M> Unpin for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: Unpin, <M as Repr<MetaSlotStorage>>::ReprPerm: Unpin,

impl<M> UnsafeUnpin for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: UnsafeUnpin, <M as Repr<MetaSlotStorage>>::ReprPerm: UnsafeUnpin,

impl<M> UnwindSafe for UniqueFrameOwner<M>
where <M as OwnerOf>::Owner: UnwindSafe, <M as Repr<MetaSlotStorage>>::ReprPerm: UnwindSafe,

Blanket Implementations§

impl<T> Any for T
where T: 'static + ?Sized,

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more

impl<T> Borrow<T> for T
where T: ?Sized,

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more

impl<T> BorrowMut<T> for T
where T: ?Sized,

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more

impl<T> Conv for T

fn conv<T>(self) -> T
where Self: Into<T>,

Converts self into T using Into<T>. Read more

impl<T> FmtForward for T

fn fmt_binary(self) -> FmtBinary<Self>
where Self: Binary,

Causes self to use its Binary implementation when Debug-formatted.

fn fmt_display(self) -> FmtDisplay<Self>
where Self: Display,

Causes self to use its Display implementation when Debug-formatted.

fn fmt_lower_exp(self) -> FmtLowerExp<Self>
where Self: LowerExp,

Causes self to use its LowerExp implementation when Debug-formatted.

fn fmt_lower_hex(self) -> FmtLowerHex<Self>
where Self: LowerHex,

Causes self to use its LowerHex implementation when Debug-formatted.

fn fmt_octal(self) -> FmtOctal<Self>
where Self: Octal,

Causes self to use its Octal implementation when Debug-formatted.

fn fmt_pointer(self) -> FmtPointer<Self>
where Self: Pointer,

Causes self to use its Pointer implementation when Debug-formatted.

fn fmt_upper_exp(self) -> FmtUpperExp<Self>
where Self: UpperExp,

Causes self to use its UpperExp implementation when Debug-formatted.

fn fmt_upper_hex(self) -> FmtUpperHex<Self>
where Self: UpperHex,

Causes self to use its UpperHex implementation when Debug-formatted.

fn fmt_list(self) -> FmtList<Self>
where &'a Self: for<'a> IntoIterator,

Formats each item in a sequence. Read more

impl<T> From<T> for T

fn from(t: T) -> T

Returns the argument unchanged.

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> T

impl<T, U> IntoSpecImpl for T
where U: From<T>,

fn obeys_into_spec() -> bool

fn into_spec(self) -> U

impl<T> Pipe for T
where T: ?Sized,

fn pipe<R>(self, func: impl FnOnce(Self) -> R) -> R
where Self: Sized,

Pipes by value. This is generally the method you want to use. Read more

fn pipe_ref<'a, R>(&'a self, func: impl FnOnce(&'a Self) -> R) -> R
where R: 'a,

Borrows self and passes that borrow into the pipe function. Read more

fn pipe_ref_mut<'a, R>(&'a mut self, func: impl FnOnce(&'a mut Self) -> R) -> R
where R: 'a,

Mutably borrows self and passes that borrow into the pipe function. Read more

fn pipe_borrow<'a, B, R>(&'a self, func: impl FnOnce(&'a B) -> R) -> R
where Self: Borrow, B: 'a + ?Sized, R: 'a,

Borrows self, then passes self.borrow() into the pipe function. Read more

fn pipe_borrow_mut<'a, B, R>( &'a mut self, func: impl FnOnce(&'a mut B) -> R, ) -> R
where Self: BorrowMut, B: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.borrow_mut() into the pipe function. Read more

fn pipe_as_ref<'a, U, R>(&'a self, func: impl FnOnce(&'a U) -> R) -> R
where Self: AsRef, U: 'a + ?Sized, R: 'a,

Borrows self, then passes self.as_ref() into the pipe function.

fn pipe_as_mut<'a, U, R>(&'a mut self, func: impl FnOnce(&'a mut U) -> R) -> R
where Self: AsMut, U: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.as_mut() into the pipe function.

fn pipe_deref<'a, T, R>(&'a self, func: impl FnOnce(&'a T) -> R) -> R
where Self: Deref<Target = T>, T: 'a + ?Sized, R: 'a,

Borrows self, then passes self.deref() into the pipe function.

fn pipe_deref_mut<'a, T, R>( &'a mut self, func: impl FnOnce(&'a mut T) -> R, ) -> R
where Self: DerefMut<Target = T> + Deref, T: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.deref_mut() into the pipe function.

impl<A> SpecEq<&A> for A
where A: ?Sized,

impl<A> SpecEq<&mut A> for A
where A: ?Sized,

impl<A> SpecEq<A> for A
where A: ?Sized,

impl<A> SpecEq<Ghost<A>> for A

impl<A> SpecEq<Tracked<A>> for A

impl<T> Tap for T

fn tap(self, func: impl FnOnce(&Self)) -> Self

Immutable access to a value. Read more

fn tap_mut(self, func: impl FnOnce(&mut Self)) -> Self

Mutable access to a value. Read more

fn tap_borrow(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow, B: ?Sized,

Immutable access to the Borrow of a value. Read more

fn tap_borrow_mut(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut, B: ?Sized,

Mutable access to the BorrowMut of a value. Read more

fn tap_ref<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Immutable access to the AsRef<R> view of a value. Read more

fn tap_ref_mut<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Mutable access to the AsMut<R> view of a value. Read more

fn tap_deref<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Immutable access to the Deref::Target of a value. Read more

fn tap_deref_mut<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Mutable access to the Deref::Target of a value. Read more

fn tap_dbg(self, func: impl FnOnce(&Self)) -> Self

Calls .tap() only in debug builds, and is erased in release builds.

fn tap_mut_dbg(self, func: impl FnOnce(&mut Self)) -> Self

Calls .tap_mut() only in debug builds, and is erased in release builds.

fn tap_borrow_dbg(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow, B: ?Sized,

Calls .tap_borrow() only in debug builds, and is erased in release builds.

fn tap_borrow_mut_dbg(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut, B: ?Sized,

Calls .tap_borrow_mut() only in debug builds, and is erased in release builds.

fn tap_ref_dbg<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Calls .tap_ref() only in debug builds, and is erased in release builds.

fn tap_ref_mut_dbg<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Calls .tap_ref_mut() only in debug builds, and is erased in release builds.

fn tap_deref_dbg<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Calls .tap_deref() only in debug builds, and is erased in release builds.

fn tap_deref_mut_dbg<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Calls .tap_deref_mut() only in debug builds, and is erased in release builds.

impl<T> TryConv for T

fn try_conv<T>(self) -> Result<T, Self::Error>
where Self: TryInto<T>,

Attempts to convert self into T using TryInto<T>. Read more

impl<T, U> TryFrom for T
where U: Into<T>,

type Error = Infallible

The type returned in the event of a conversion error.

fn try_from(value: U) -> Result<T, <T as TryFrom>::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

fn obeys_try_from_spec() -> bool

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

impl<T, U> TryInto for T
where U: TryFrom<T>,

type Error = >::Error

The type returned in the event of a conversion error.

fn try_into(self) -> Result<U, >::Error>

Performs the conversion.

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

fn obeys_try_into_spec() -> bool

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

impl<T, U> TryIntoSpecImpl for T
where U: TryFrom<T>,

fn obeys_try_into_spec() -> bool