PointsToArray

vstd_extra::array_ptr

Struct PointsToArray 

Source 
pub struct PointsToArray<V, const N: usize> { /* private fields */ }

Implementations§

Source§

impl<V, const N: usize> PointsToArray<V, N>

Source

pub open spec fn ptr(self) -> *mut [V; N]

{ self@.ptr }
Source

pub open spec fn opt_value(self) -> [MemContents<V>; N]

{ self@.value }
Source

pub open spec fn is_init(self, index: int) -> bool

{ 0 <= index < N && self.opt_value()[index].is_init() }
Source

pub open spec fn is_uninit(self, index: int) -> bool

{ 0 <= index < N && self.opt_value()[index].is_uninit() }
Source

pub open spec fn is_init_all(self) -> bool

{ is_mem_contents_all_init(self.opt_value()) }
Source

pub open spec fn is_uninit_all(self) -> bool

{ is_mem_contents_all_uninit(self.opt_value()) }
Source

pub open spec fn value(self) -> Seq<V>

recommends
self.is_init_all(),
{
    let opt_value = self.opt_value();
    Seq::new(N as nat, |i: int| opt_value[i].value())
}
Source

pub proof fn leak_contents(tracked &mut self, index: int)

ensures
self.ptr() == old(self).ptr(),
self.is_uninit(index),
forall |i: int| {
    0 <= i < N && i != index ==> self.opt_value()[i] == old(self).opt_value()[i]
},
Source

pub proof fn is_disjoint<S, const M: usize>(&self, other: &PointsToArray<S, M>)

ensures
self.ptr() as int + layout::size_of::<[V; N]>() <= other.ptr() as int
    || other.ptr() as int + layout::size_of::<[S; M]>() <= self.ptr() as int,
Source

pub proof fn is_disjoint_ptr<S>(&self, other: &PointsTo<S>)

ensures
self.ptr() as int + layout::size_of::<[V; N]>() <= other.ptr() as int
    || other.ptr() as int + layout::size_of::<S>() <= self.ptr() as int,
Source

pub proof fn is_nonnull(tracked &self)

requires
layout::size_of::<[V; N]>() > 0,
ensures
self@.ptr@.addr != 0,
Source§

impl<V, const N: usize> PointsToArray<V, N>

Source

pub proof fn into_array(tracked pt: PointsTo<[V; N]>) -> tracked res : PointsToArray<V, N>

ensures
res@.ptr == pt@.ptr,
res@.value == mem_contents_wrap(pt@.opt_value),
Source

pub proof fn into_ptr(tracked self) -> tracked res : PointsTo<[V; N]>

ensures
res@.ptr == self@.ptr,
res@.opt_value == mem_contents_unwrap(self@.value),

Trait Implementations§

Source§

impl<T, const N: usize> View for PointsToArray<T, N>

Source§

uninterp fn view(&self) -> Self::V

Source§

type V = PointsToArrayData<T, N>

Auto Trait Implementations§

§

impl<V, const N: usize> Freeze for PointsToArray<V, N>

§

impl<V, const N: usize> RefUnwindSafe for PointsToArray<V, N>
where V: RefUnwindSafe,

§

impl<V, const N: usize> Send for PointsToArray<V, N>
where V: Send,

§

impl<V, const N: usize> Sync for PointsToArray<V, N>
where V: Sync,

§

impl<V, const N: usize> Unpin for PointsToArray<V, N>
where V: Unpin,

§

impl<V, const N: usize> UnwindSafe for PointsToArray<V, N>
where V: UnwindSafe,

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> VERUS_SPEC__A

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> T

§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> U

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

§

fn obeys_try_from_spec() -> bool

§

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>