Struct Mapping 

pub struct Mapping { /* private fields */ }

A safe wrapper around a mapped region of memory.

Note: this type implements Deref/DerefMut to the SharedBuffer type, which allows reading/writing from the underlying memory. Aside from creation and the Drop impl, all of the interesting functionality of this type is offered via SharedBuffer.

Implementations

impl Mapping

pub fn allocate(size: usize) -> Result<(Self, Vmo), Status>

Create a Mapping and map it in the root address space. Returns the VMO that was mapped.

The resulting VMO will not be resizeable.

pub fn allocate_with_name( size: usize, name: &str, ) -> Result<(Self, Vmo), Status>

Create a Mapping and map it in the root address space. Returns the VMO that was mapped.

The resulting VMO will not be resizeable.

pub fn create_from_vmo( vmo: &Vmo, size: usize, flags: VmarFlags, ) -> Result<Self, Status>

Create a Mapping from an existing VMO.

Requires that the VMO was not created with the RESIZABLE option, and returns ZX_ERR_NOT_SUPPORTED otherwise.

pub fn create_from_vmo_with_offset( vmo: &Vmo, vmo_offset: u64, size: usize, flags: VmarFlags, ) -> Result<Self, Status>

Create a Mapping from an existing VMO at vmo_offset.

vmo_offset must be page-aligned. Requires that the VMO was not created with the RESIZABLE option, and returns ZX_ERR_NOT_SUPPORTED otherwise.

pub fn create_from_vmo_with_vmar( vmo: &Vmo, vmar: &Vmar, size: usize, flags: VmarFlags, ) -> Result<Self, Status>

Create a Mapping from an existing VMO in the specified vmar.

Requires that the VMO was not created with the RESIZABLE option, and returns ZX_ERR_NOT_SUPPORTED otherwise.

pub fn create_from_vmo_with_vmar_and_offset( vmo: &Vmo, vmar: &Vmar, vmo_offset: u64, size: usize, flags: VmarFlags, ) -> Result<Self, Status>

Create a Mapping from an existing VMO in the specified vmar at vmo_offset.

vmo_offset must be page-aligned. Requires that the VMO was not created with the RESIZABLE option, and returns ZX_ERR_NOT_SUPPORTED otherwise.

pub fn len(&self) -> usize

Return the size of the mapping.

Methods from Deref<Target = SharedBuffer>

pub fn read(&self, dst: &mut [u8]) -> usize

Read bytes from the buffer.

Read up to dst.len() bytes from the buffer, returning how many bytes were read. The only thing that can cause fewer bytes to be read than requested is if dst is larger than the buffer itself.

A call to read is only guaranteed to happen after an operation in another thread or process if the mechanism used to signal the other process has well-defined memory ordering semantics. Otherwise, the acquire_writes method must be called before read and after receiving a signal from the other process in order to provide such ordering guarantees. In practice, this means that acquire_writes should be the first read operation that happens after receiving a signal from another process that the memory may be read. See the acquire_writes documentation for more details.

pub fn read_at(&self, offset: usize, dst: &mut [u8]) -> usize

Read bytes from the buffer at an offset.

Read up to dst.len() bytes starting at offset into the buffer, returning how many bytes were read. The only thing that can cause fewer bytes to be read than requested is if there are fewer than dst.len() bytes available starting at offset within the buffer.

A call to read_at is only guaranteed to happen after an operation in another thread or process if the mechanism used to signal the other process has well-defined memory ordering semantics. Otherwise, the acquire_writes method must be called before read_at and after receiving a signal from the other process in order to provide such ordering guarantees. In practice, this means that acquire_writes should be the first read operation that happens after receiving a signal from another process that the memory may be read. See the acquire_writes documentation for more details.

Panics

read_at panics if offset is greater than the length of the buffer.

pub fn write(&self, src: &[u8]) -> usize

Write bytes to the buffer.

Write up to src.len() bytes into the buffer, returning how many bytes were written. The only thing that can cause fewer bytes to be written than requested is if src is larger than the buffer itself.

A call to write is only guaranteed to happen before an operation in another thread or process if the mechanism used to signal the other process has well-defined memory ordering semantics. Otherwise, the release_writes method must be called after write and before signalling the other process in order to provide such ordering guarantees. In practice, this means that release_writes should be the last write operation that happens before signalling another process that the memory may be read. See the release_writes documentation for more details.

pub fn write_at(&self, offset: usize, src: &[u8]) -> usize

Write bytes to the buffer at an offset.

Write up to src.len() bytes starting at offset into the buffer, returning how many bytes were written. The only thing that can cause fewer bytes to be written than requested is if there are fewer than src.len() bytes available starting at offset within the buffer.

A call to write_at is only guaranteed to happen before an operation in another thread or process if the mechanism used to signal the other process has well-defined memory ordering semantics. Otherwise, the release_writes method must be called after write_at and before signalling the other process in order to provide such ordering guarantees. In practice, this means that release_writes should be the last write operation that happens before signalling another process that the memory may be read. See the release_writes documentation for more details.

Panics

write_at panics if offset is greater than the length of the buffer.

pub fn copy_from_at<B>( &self, dst_offset: usize, src: &B, src_offset: usize, len: usize, ) -> usize

where B: AsSharedBuffer + ?Sized,

Copy bytes from a SharedBuffer or slice into this buffer at an offset.

Copy up to len bytes starting at src_offset in src into self starting at dst_offset, returning how many bytes were copied. src may refer to the same underlying memory as self (overlapping regions are handled safely). The only thing that can cause fewer bytes to be copied than requested is if there are fewer than len bytes available starting at dst_offset in self or starting at src_offset in src.

Since copy_from_at reads from src and writes to self, a call to copy_from_at is only guaranteed to happen after an operation on src or before an operation on self in another thread or process if the mechanism used to signal the other process has well-defined memory ordering semantics. Otherwise, src.acquire_writes() must be called before copy_from_at (after receiving a signal from the other process that src may be read) and self.release_writes() must be called after copy_from_at (before signalling the other process that self may be read). See the acquire_writes and release_writes documentation for more details.

Panics

copy_from_at panics if dst_offset is greater than the length of self or src_offset is greater than the length of src.

pub fn acquire_writes(&self)

Acquire all writes performed by the other process.

On some systems (such as Fuchsia, currently), the communication mechanism used for signalling a process that memory is readable does not have well-defined synchronization semantics. On those systems, this method MUST be called after receiving such a signal, or else writes performed before that signal are not guaranteed to be observed by this process.

acquire_writes acquires any writes performed on this buffer or any slice within the buffer.

Note on Fuchsia

Zircon, the Fuchsia kernel, will likely eventually have well-defined semantics around the synchronization behavior of various syscalls. Once that happens, calling this method in Fuchsia programs may become optional. This work is tracked in https://fxbug.dev/42107145.

pub fn release_writes(&mut self)

Release all writes performed so far.

On some systems (such as Fuchsia, currently), the communication mechanism used for signalling the other process that memory is readable does not have well-defined synchronization semantics. On those systems, this method MUST be called before such signalling, or else writes performed before that signal are not guaranteed to be observed by the other process.

release_writes releases any writes performed on this buffer or any slice within the buffer.

Note on Fuchsia

Zircon, the Fuchsia kernel, will likely eventually have well-defined semantics around the synchronization behavior of various syscalls. Once that happens, calling this method in Fuchsia programs may become optional. This work is tracked in https://fxbug.dev/42107145.

pub fn len(&self) -> usize

The number of bytes in this SharedBuffer.

pub fn slice<'a, R>(&'a self, range: R) -> SharedBufferSlice<'a>

where R: RangeBounds<usize>,

Create a slice of the original SharedBuffer.

Just like the slicing operation on array and slice references, slice constructs a SharedBufferSlice which points to the same memory as the original SharedBuffer, but starting and index from (inclusive) and ending at index to (exclusive).

Panics

slice panics if range is out of bounds of self or if range is nonsensical (its lower bound is larger than its upper bound).

pub fn slice_mut<'a, R>(&'a mut self, range: R) -> SharedBufferSliceMut<'a>

where R: RangeBounds<usize>,

Create a mutable slice of the original SharedBuffer.

Just like the mutable slicing operation on array and slice references, slice_mut constructs a SharedBufferSliceMut which points to the same memory as the original SharedBuffer, but starting and index from (inclusive) and ending at index to (exclusive).

Panics

slice_mut panics if range is out of bounds of self or if range is nonsensical (its lower bound is larger than its upper bound).

pub fn split_at<'a>( &'a self, idx: usize, ) -> (SharedBufferSlice<'a>, SharedBufferSlice<'a>)

Create two non-overlapping slices of the original SharedBuffer.

Just like the split_at method on array and slice references, split_at constructs one SharedBufferSlice which represents bytes [0, idx), and one which represents bytes [idx, len), where len is the length of the buffer.

Panics

split_at panics if idx > self.len().

pub fn split_at_mut<'a>( &'a mut self, idx: usize, ) -> (SharedBufferSliceMut<'a>, SharedBufferSliceMut<'a>)

Create two non-overlapping mutable slices of the original SharedBuffer.

Just like the split_at_mut method on array and slice references, split_at_miut constructs one SharedBufferSliceMut which represents bytes [0, idx), and one which represents bytes [idx, len), where len is the length of the buffer.

Panics

split_at_mut panics if idx > self.len().

pub fn as_ptr_len(&mut self) -> (*mut u8, usize)

Get the buffer pointer and length so that the memory can be freed.

This method is an alternative to calling consume if relinquishing ownership of the object is infeasible (for example, when the object is a struct field and thus can’t be moved out of the struct). Since it allows the object to continue existing, it must be used with care (see the “Safety” section below).

Safety

The returned pointer must only be used to free the memory. Since the memory is shared by another process, using it as a normal raw pointer to normal memory owned by this process is unsound.

If the pointer is used for this purpose, then the caller must ensure that no methods will be called on the object after the call to as_ptr_len. The only scenario in which the object may be used again is if the caller does nothing at all with the return value of this method (although that would be kind of pointless…).

Trait Implementations

impl Debug for Mapping

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Deref for Mapping

type Target = SharedBuffer

The resulting type after dereferencing.

fn deref(&self) -> &Self::Target

Dereferences the value.

impl DerefMut for Mapping

fn deref_mut(&mut self) -> &mut Self::Target

Mutably dereferences the value.

impl Drop for Mapping

fn drop(&mut self)

Executes the destructor for this type.

fn pin_drop(self: Pin<&mut Self>)

🔬This is a nightly-only experimental API. (pin_ergonomics)

Execute the destructor for this type, but different to Drop::drop, it requires self to be pinned.