Hsiu Che Yu 3a1ec424dd rust: num: bounded: mark __new as unsafe ...

The `Bounded::__new()` constructor relies on the caller to ensure the
value can be represented within N bits. Failing to uphold this
requirement breaks the type invariant. Mark it as unsafe and document
this requirement in a Safety section to make the contract explicit.

Update all call sites to use unsafe blocks and change their comments
from `INVARIANT:` to `SAFETY:`, as they are now justifying unsafe
operations rather than establishing type invariants.

Fixes: 01e345e82e ("rust: num: add Bounded integer wrapping type")
Link: https://lore.kernel.org/all/aS1qC_ol2XEpZ44b@google.com/
Reported-by: Miguel Ojeda <ojeda@kernel.org>
Closes: https://github.com/Rust-for-Linux/linux/issues/1211
Signed-off-by: Hsiu Che Yu <yu.whisper.personal@gmail.com>
Acked-by: Alexandre Courbot <acourbot@nvidia.com>
Link: https://patch.msgid.link/20251204033849.23480-1-yu.whisper.personal@gmail.com
Signed-off-by: Miguel Ojeda <ojeda@kernel.org>

2026-01-06 21:01:47 +01:00

..

alloc

rust: alloc: use kernel::fmt

2025-10-20 04:04:23 +02:00

block

rust: block: update ARef and AlwaysRefCounted imports from sync::aref

2025-11-05 18:24:10 -07:00

debugfs

Merge tag 'driver-core-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-12-05 21:29:02 -08:00

device

rust: device: use kernel::{fmt,prelude::fmt!}

2025-09-16 09:26:59 +02:00

drm

Merge tag 'drm-next-2025-12-03' of https://gitlab.freedesktop.org/drm/kernel

2025-12-04 08:53:30 -08:00

fs

rust: fs: add file::Offset type alias

2025-11-05 00:05:38 +01:00

io

rust: io: add typedef for phys_addr_t

2025-11-13 20:17:24 +11:00

irq

rust: irq: add &Device<Bound> argument to irq callbacks

2025-08-12 20:33:33 +02:00

list

rust: list: remove nonexistent generic parameter in link

2025-07-20 19:29:19 +02:00

mm

mm: introduce VMA flags bitmap type

2025-11-29 10:41:09 -08:00

net

Merge tag 'net-next-6.18' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2025-10-02 15:17:01 -07:00

num

rust: num: bounded: mark __new as unsafe

2026-01-06 21:01:47 +01:00

pci

Merge tag 'driver-core-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-12-05 21:29:02 -08:00

str

rust: str: add radix prefixed integer parsing functions

2025-11-03 14:40:45 +01:00

sync

rust: sync: atomic: separate import "blocks"

2025-12-06 08:44:10 -08:00

time

rust: add udelay() function

2025-11-04 13:25:29 +01:00

.gitignore

rust: Add warn_on macro

2025-07-23 02:05:58 +02:00

acpi.rs

rust: acpi: replace core::mem::zeroed with pin_init::zeroed

2025-10-27 20:27:05 +01:00

alloc.rs

Merge tag 'mm-stable-2025-10-01-19-00' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2025-10-02 18:18:33 -07:00

auxiliary.rs

rust: Add trait to convert a device reference to a bus device reference

2025-11-18 11:00:51 +13:00

bitmap.rs

rust: bitmap: add BitmapVec::new_inline()

2025-11-26 11:25:35 -05:00

bits.rs

rust: bits: add support for bits/genmask macros

2025-07-19 23:18:18 +02:00

block.rs

rust: block: add block related constants

2025-09-02 05:23:56 -06:00

bug.rs

rust: Add warn_on macro

2025-07-23 02:05:58 +02:00

build_assert.rs

rust: add build_error! to the prelude

2025-01-10 00:19:09 +01:00

clk.rs

rust: clk: use CStr::as_char_ptr

2025-10-22 07:15:19 +02:00

configfs.rs

rust: configfs: use CStr::as_char_ptr

2025-10-22 07:14:57 +02:00

cpu.rs

rust: kernel: cpu: mark CpuId::current() inline

2025-09-14 23:58:45 +02:00

cpufreq.rs

Merge 6.18-rc3 into driver-core-next

2025-10-27 08:02:50 +01:00

cpumask.rs

rust: cpumask: Mark CpumaskVar as transparent

2025-08-14 09:55:47 +05:30

cred.rs

Merge tag 'char-misc-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2025-10-04 16:26:32 -07:00

debugfs.rs

Merge tag 'driver-core-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-12-05 21:29:02 -08:00

device_id.rs

modpost: Add modname to mod_device_table alias

2025-09-24 09:10:45 -07:00

device.rs

Merge tag 'driver-core-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-12-05 21:29:02 -08:00

devres.rs

Merge tag 'driver-core-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-12-05 21:29:02 -08:00

dma.rs

rust: dma: use NonNull<T> instead of *mut T

2025-11-11 19:45:23 +11:00

driver.rs

rust: driver: let probe() return impl PinInit<Self, Error>

2025-10-21 18:40:48 +02:00

error.rs

rust: replace CStr with core::ffi::CStr

2025-10-22 07:47:27 +02:00

faux.rs

rust: faux: fix C header link

2025-08-13 17:40:28 +02:00

firmware.rs

rust: firmware: replace kernel::c_str! with C-Strings

2025-11-17 00:53:47 +01:00

fmt.rs

rust: fmt: Fix grammar in Adapter description

2026-01-04 23:51:35 +01:00

fs.rs

rust: fs: add Kiocb struct

2025-09-06 13:27:20 +02:00

generated_arch_reachable_asm.rs.S

rust: Add warn_on macro

2025-07-23 02:05:58 +02:00

generated_arch_static_branch_asm.rs.S

rust: jump_label: skip formatting generated file

2024-11-20 13:32:42 -05:00

generated_arch_warn_asm.rs.S

rust: Add warn_on macro

2025-07-23 02:05:58 +02:00

i2c.rs

rust: i2c: prepare for core::ffi::CStr

2025-11-24 09:14:47 +13:00

id_pool.rs

rust: id_pool: do not immediately acquire new ids

2025-12-02 14:17:09 -05:00

init.rs

rust: allow clippy::disallowed_names for doctests

2025-11-17 22:53:27 +01:00

io.rs

rust: io: add typedef for phys_addr_t

2025-11-13 20:17:24 +11:00

ioctl.rs

rust: start using the #[expect(...)] attribute

2024-10-07 21:39:57 +02:00

iov.rs

rust: iov: add iov_iter abstractions for ITER_DEST

2025-09-06 13:27:20 +02:00

irq.rs

rust: irq: add support for threaded IRQs and handlers

2025-08-12 20:22:09 +02:00

jump_label.rs

rust: jump_label: skip formatting generated file

2024-11-20 13:32:42 -05:00

kunit.rs

Merge tag 'linux_kselftest-kunit-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/shuah/linux-kselftest

2025-10-01 19:15:11 -07:00

lib.rs

Merge tag 'usb-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

2025-12-06 18:42:12 -08:00

list.rs

rust: list: add warning to List::remove docs about mem::take

2025-11-26 13:26:59 +01:00

maple_tree.rs

rust: maple_tree: rcu_read_lock() in destructor to silence lockdep

2025-12-23 11:23:15 -08:00

miscdevice.rs

Merge tag 'char-misc-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2025-10-04 16:26:32 -07:00

mm.rs

rust: mm: update ARef and AlwaysRefCounted imports from sync::aref

2025-09-13 16:55:15 -07:00

module_param.rs

Merge tag 'modules-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/modules/linux

2025-12-06 08:27:07 -08:00

net.rs

rust: core abstractions for network PHY drivers

2023-12-15 09:35:50 +00:00

num.rs

rust: num: add Bounded integer wrapping type

2025-11-19 00:22:24 +01:00

of.rs

rust: of: use core::ffi::CStr method names

2025-09-16 09:26:59 +02:00

opp.rs

Merge tag 'rust-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux

2025-12-03 14:16:49 -08:00

page.rs

Merge tag 'char-misc-6.18-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/char-misc

2025-10-04 16:26:32 -07:00

pci.rs

rust: Add trait to convert a device reference to a bus device reference

2025-11-18 11:00:51 +13:00

pid_namespace.rs

rust: pid_namespace: update AlwaysRefCounted imports from sync::aref

2025-08-19 13:08:41 +02:00

platform.rs

rust: Add trait to convert a device reference to a bus device reference

2025-11-18 11:00:51 +13:00

prelude.rs

Merge tag 'drm-next-2025-12-03' of https://gitlab.freedesktop.org/drm/kernel

2025-12-04 08:53:30 -08:00

print.rs

rust: use kernel::{fmt,prelude::fmt!}

2025-07-21 01:16:35 +02:00

processor.rs

rust: Add cpu_relax() helper

2025-08-21 16:58:07 +02:00

ptr.rs

rust: remove spurious use core::fmt::Debug

2025-10-20 04:04:24 +02:00

pwm.rs

pwm: Fix Rust formatting

2025-11-13 10:21:01 +01:00

rbtree.rs

rust: rbtree: fix documentation typo in CursorMut peek_next method

2026-01-04 23:51:35 +01:00

regulator.rs

rust: regulator: use CStr::as_char_ptr

2025-10-22 07:14:57 +02:00

revocable.rs

Merge tag 'rust-6.17' of git://git.kernel.org/pub/scm/linux/kernel/git/ojeda/linux

2025-08-03 13:49:10 -07:00

scatterlist.rs

rust: scatterlist: import ResourceSize from kernel::io

2025-11-13 20:17:24 +11:00

security.rs

rust_binder: add Rust Binder driver

2025-09-19 09:40:46 +02:00

seq_file.rs

rust: replace CStr with core::ffi::CStr

2025-10-22 07:47:27 +02:00

sizes.rs

rust: sizes: add constants up to SZ_2G

2025-06-23 18:12:30 +02:00

slice.rs

rust: slice: fix broken intra-doc links

2025-11-20 10:13:35 +00:00

static_assert.rs

rust: use absolute paths in macros referencing core and kernel

2025-05-23 00:12:14 +02:00

std_vendor.rs

rust: convert raw URLs to Markdown autolinks in comments

2025-05-12 00:20:25 +02:00

str.rs

Merge tag 'modules-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/modules/linux

2025-12-06 08:27:07 -08:00

sync.rs

Merge tag 'modules-6.19-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/modules/linux

2025-12-06 08:27:07 -08:00

task.rs

rust: task: update ARef and AlwaysRefCounted imports from sync::aref

2025-09-08 00:11:19 +02:00

time.rs

rust: time: Implement basic arithmetic operations for Delta

2025-09-04 16:56:48 +02:00

tracepoint.rs

rust: add tracepoint support

2024-11-04 16:21:44 -05:00

transmute.rs

rust: transmute: add from_bytes_prefix family of methods

2025-11-05 20:29:34 +09:00

types.rs

rust: allow clippy::disallowed_names for doctests

2025-11-17 22:53:27 +01:00

uaccess.rs

rust: uaccess: add UserSliceWriter::write_slice_file()

2025-11-05 00:35:37 +01:00

usb.rs

rust: Add trait to convert a device reference to a bus device reference

2025-11-18 11:00:51 +13:00

workqueue.rs

rust: pin-init: add pin projections to #[pin_data]

2025-09-11 23:26:20 +02:00

xarray.rs

rust: types: add FOREIGN_ALIGN to ForeignOwnable

2025-07-14 23:55:24 +02:00