Skip to content

Commit bfd04c0

Browse files
Support ranges in <[T]>::get_many_mut()
I implemented that with a separate trait and not within `SliceIndex`, because doing that via `SliceIndex` requires adding support for range types that are (almost) always overlapping e.g. `RangeFrom`, and also adding fake support code for `impl SliceIndex<str>`. An inconvenience that I ran into was that slice indexing takes the index by value, but I only have it by reference. I could change slice indexing to take by ref, but this is pretty much the hottest code ever so I'm afraid to touch it. Instead I added a requirement for `Clone` (which all index types implement anyway) and cloned. This is an internal requirement the user won't see and the clone should always be optimized away. I also implemented `Clone`, `PartialEq` and `Eq` for the error type, since I noticed it does not do that when writing the tests and other errors in std seem to implement them. I didn't implement `Copy` because maybe we will want to put something non-`Copy` there.
1 parent 46e8d20 commit bfd04c0

File tree

2 files changed

+231
-19
lines changed

2 files changed

+231
-19
lines changed

library/core/src/slice/mod.rs

+162-18
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,10 @@ use crate::cmp::Ordering::{self, Equal, Greater, Less};
1010
use crate::intrinsics::{exact_div, select_unpredictable, unchecked_sub};
1111
use crate::mem::{self, SizedTypeProperties};
1212
use crate::num::NonZero;
13-
use crate::ops::{Bound, OneSidedRange, Range, RangeBounds};
13+
use crate::ops::{Bound, OneSidedRange, Range, RangeBounds, RangeInclusive};
1414
use crate::simd::{self, Simd};
1515
use crate::ub_checks::assert_unsafe_precondition;
16-
use crate::{fmt, hint, ptr, slice};
16+
use crate::{fmt, hint, ptr, range, slice};
1717

1818
#[unstable(
1919
feature = "slice_internals",
@@ -4467,6 +4467,12 @@ impl<T> [T] {
44674467

44684468
/// Returns mutable references to many indices at once, without doing any checks.
44694469
///
4470+
/// An index can be either a `usize` or a [`Range`] or a [`RangeInclusive`] (note
4471+
/// that this method takes an array, so all indices must be of the same type.
4472+
/// This restriction may be lifted in the future). If passed an array of `usize`s
4473+
/// this method gives back an array of mutable references to single elements, while
4474+
/// if passed an array of ranges it gives back an array of mutable references to slices.
4475+
///
44704476
/// For a safe alternative see [`get_many_mut`].
44714477
///
44724478
/// # Safety
@@ -4487,39 +4493,68 @@ impl<T> [T] {
44874493
/// *b *= 100;
44884494
/// }
44894495
/// assert_eq!(x, &[10, 2, 400]);
4496+
///
4497+
/// unsafe {
4498+
/// let [a, b] = x.get_many_unchecked_mut([0..1, 1..3]);
4499+
/// a[0] = 8;
4500+
/// b[0] = 88;
4501+
/// b[1] = 888;
4502+
/// }
4503+
/// assert_eq!(x, &[8, 88, 888]);
4504+
///
4505+
/// unsafe {
4506+
/// let [a, b] = x.get_many_unchecked_mut([1..=2, 0..=0]);
4507+
/// a[0] = 11;
4508+
/// a[1] = 111;
4509+
/// b[0] = 1;
4510+
/// }
4511+
/// assert_eq!(x, &[1, 11, 111]);
44904512
/// ```
44914513
///
44924514
/// [`get_many_mut`]: slice::get_many_mut
44934515
/// [undefined behavior]: https://doc.rust-lang.org/reference/behavior-considered-undefined.html
44944516
#[unstable(feature = "get_many_mut", issue = "104642")]
44954517
#[inline]
4496-
pub unsafe fn get_many_unchecked_mut<const N: usize>(
4518+
pub unsafe fn get_many_unchecked_mut<I, const N: usize>(
44974519
&mut self,
4498-
indices: [usize; N],
4499-
) -> [&mut T; N] {
4520+
indices: [I; N],
4521+
) -> [&mut I::Output; N]
4522+
where
4523+
I: GetManyMutIndex + SliceIndex<Self>,
4524+
{
45004525
// NB: This implementation is written as it is because any variation of
45014526
// `indices.map(|i| self.get_unchecked_mut(i))` would make miri unhappy,
45024527
// or generate worse code otherwise. This is also why we need to go
45034528
// through a raw pointer here.
45044529
let slice: *mut [T] = self;
4505-
let mut arr: mem::MaybeUninit<[&mut T; N]> = mem::MaybeUninit::uninit();
4530+
let mut arr: mem::MaybeUninit<[&mut I::Output; N]> = mem::MaybeUninit::uninit();
45064531
let arr_ptr = arr.as_mut_ptr();
45074532

45084533
// SAFETY: We expect `indices` to contain disjunct values that are
45094534
// in bounds of `self`.
45104535
unsafe {
45114536
for i in 0..N {
4512-
let idx = *indices.get_unchecked(i);
4513-
*(*arr_ptr).get_unchecked_mut(i) = &mut *slice.get_unchecked_mut(idx);
4537+
let idx = indices.get_unchecked(i).clone();
4538+
arr_ptr.cast::<&mut I::Output>().add(i).write(&mut *slice.get_unchecked_mut(idx));
45144539
}
45154540
arr.assume_init()
45164541
}
45174542
}
45184543

45194544
/// Returns mutable references to many indices at once.
45204545
///
4521-
/// Returns an error if any index is out-of-bounds, or if the same index was
4522-
/// passed more than once.
4546+
/// An index can be either a `usize` or a [`Range`] or a [`RangeInclusive`] (note
4547+
/// that this method takes an array, so all indices must be of the same type.
4548+
/// This restriction may be lifted in the future). If passed an array of `usize`s
4549+
/// this method gives back an array of mutable references to single elements, while
4550+
/// if passed an array of ranges it gives back an array of mutable references to slices.
4551+
///
4552+
/// Returns an error if any index is out-of-bounds, or if there are overlapping indices.
4553+
/// An empty range is not considered to overlap if it is located at the beginning or at
4554+
/// the end of another range, but is considered to overlap if it is located in the middle.
4555+
///
4556+
/// This method does a O(n^2) check to check that there are no overlapping indices, so be careful
4557+
/// when passing many indices.
45234558
///
45244559
/// # Examples
45254560
///
@@ -4532,13 +4567,30 @@ impl<T> [T] {
45324567
/// *b = 612;
45334568
/// }
45344569
/// assert_eq!(v, &[413, 2, 612]);
4570+
///
4571+
/// if let Ok([a, b]) = v.get_many_mut([0..1, 1..3]) {
4572+
/// a[0] = 8;
4573+
/// b[0] = 88;
4574+
/// b[1] = 888;
4575+
/// }
4576+
/// assert_eq!(v, &[8, 88, 888]);
4577+
///
4578+
/// if let Ok([a, b]) = v.get_many_mut([1..=2, 0..=0]) {
4579+
/// a[0] = 11;
4580+
/// a[1] = 111;
4581+
/// b[0] = 1;
4582+
/// }
4583+
/// assert_eq!(v, &[1, 11, 111]);
45354584
/// ```
45364585
#[unstable(feature = "get_many_mut", issue = "104642")]
45374586
#[inline]
4538-
pub fn get_many_mut<const N: usize>(
4587+
pub fn get_many_mut<I, const N: usize>(
45394588
&mut self,
4540-
indices: [usize; N],
4541-
) -> Result<[&mut T; N], GetManyMutError<N>> {
4589+
indices: [I; N],
4590+
) -> Result<[&mut I::Output; N], GetManyMutError<N>>
4591+
where
4592+
I: GetManyMutIndex + SliceIndex<Self>,
4593+
{
45424594
if !get_many_check_valid(&indices, self.len()) {
45434595
return Err(GetManyMutError { _private: () });
45444596
}
@@ -4883,14 +4935,15 @@ impl<T, const N: usize> SlicePattern for [T; N] {
48834935
///
48844936
/// This will do `binomial(N + 1, 2) = N * (N + 1) / 2 = 0, 1, 3, 6, 10, ..`
48854937
/// comparison operations.
4886-
fn get_many_check_valid<const N: usize>(indices: &[usize; N], len: usize) -> bool {
4938+
#[inline]
4939+
fn get_many_check_valid<I: GetManyMutIndex, const N: usize>(indices: &[I; N], len: usize) -> bool {
48874940
// NB: The optimizer should inline the loops into a sequence
48884941
// of instructions without additional branching.
48894942
let mut valid = true;
4890-
for (i, &idx) in indices.iter().enumerate() {
4891-
valid &= idx < len;
4892-
for &idx2 in &indices[..i] {
4893-
valid &= idx != idx2;
4943+
for (i, idx) in indices.iter().enumerate() {
4944+
valid &= idx.is_in_bounds(len);
4945+
for idx2 in &indices[..i] {
4946+
valid &= !idx.is_overlapping(idx2);
48944947
}
48954948
}
48964949
valid
@@ -4914,6 +4967,7 @@ fn get_many_check_valid<const N: usize>(indices: &[usize; N], len: usize) -> boo
49144967
#[unstable(feature = "get_many_mut", issue = "104642")]
49154968
// NB: The N here is there to be forward-compatible with adding more details
49164969
// to the error type at a later point
4970+
#[derive(Clone, PartialEq, Eq)]
49174971
pub struct GetManyMutError<const N: usize> {
49184972
_private: (),
49194973
}
@@ -4931,3 +4985,93 @@ impl<const N: usize> fmt::Display for GetManyMutError<N> {
49314985
fmt::Display::fmt("an index is out of bounds or appeared multiple times in the array", f)
49324986
}
49334987
}
4988+
4989+
/// A helper trait for `<[T]>::get_many_mut()`.
4990+
///
4991+
/// # Safety
4992+
///
4993+
/// If `is_in_bounds()` returns `true` and `is_overlapping()` returns `false`,
4994+
/// it must be safe to index the slice with the indices.
4995+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
4996+
pub unsafe trait GetManyMutIndex: Clone {
4997+
/// Returns `true` if `self` is in bounds for `len` slice elements.
4998+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
4999+
fn is_in_bounds(&self, len: usize) -> bool;
5000+
5001+
/// Returns `true` if `self` overlaps with `other`.
5002+
///
5003+
/// Note that we don't consider zero-length ranges to overlap at the beginning or the end,
5004+
/// but do consider them to overlap in the middle.
5005+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5006+
fn is_overlapping(&self, other: &Self) -> bool;
5007+
}
5008+
5009+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5010+
// SAFETY: We implement `is_in_bounds()` and `is_overlapping()` correctly.
5011+
unsafe impl GetManyMutIndex for usize {
5012+
#[inline]
5013+
fn is_in_bounds(&self, len: usize) -> bool {
5014+
*self < len
5015+
}
5016+
5017+
#[inline]
5018+
fn is_overlapping(&self, other: &Self) -> bool {
5019+
*self == *other
5020+
}
5021+
}
5022+
5023+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5024+
// SAFETY: We implement `is_in_bounds()` and `is_overlapping()` correctly.
5025+
unsafe impl GetManyMutIndex for Range<usize> {
5026+
#[inline]
5027+
fn is_in_bounds(&self, len: usize) -> bool {
5028+
(self.start <= self.end) & (self.end <= len)
5029+
}
5030+
5031+
#[inline]
5032+
fn is_overlapping(&self, other: &Self) -> bool {
5033+
(self.start < other.end) & (other.start < self.end)
5034+
}
5035+
}
5036+
5037+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5038+
// SAFETY: We implement `is_in_bounds()` and `is_overlapping()` correctly.
5039+
unsafe impl GetManyMutIndex for RangeInclusive<usize> {
5040+
#[inline]
5041+
fn is_in_bounds(&self, len: usize) -> bool {
5042+
(self.start <= self.end) & (self.end < len)
5043+
}
5044+
5045+
#[inline]
5046+
fn is_overlapping(&self, other: &Self) -> bool {
5047+
(self.start <= other.end) & (other.start <= self.end)
5048+
}
5049+
}
5050+
5051+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5052+
// SAFETY: We implement `is_in_bounds()` and `is_overlapping()` correctly.
5053+
unsafe impl GetManyMutIndex for range::Range<usize> {
5054+
#[inline]
5055+
fn is_in_bounds(&self, len: usize) -> bool {
5056+
Range::from(*self).is_in_bounds(len)
5057+
}
5058+
5059+
#[inline]
5060+
fn is_overlapping(&self, other: &Self) -> bool {
5061+
Range::from(*self).is_overlapping(&Range::from(*other))
5062+
}
5063+
}
5064+
5065+
#[unstable(feature = "get_many_mut_helpers", issue = "none")]
5066+
// SAFETY: We implement `is_in_bounds()` and `is_overlapping()` correctly.
5067+
unsafe impl GetManyMutIndex for range::RangeInclusive<usize> {
5068+
#[inline]
5069+
fn is_in_bounds(&self, len: usize) -> bool {
5070+
RangeInclusive::from(*self).is_in_bounds(len)
5071+
}
5072+
5073+
#[inline]
5074+
fn is_overlapping(&self, other: &Self) -> bool {
5075+
RangeInclusive::from(*self).is_overlapping(&RangeInclusive::from(*other))
5076+
}
5077+
}

library/core/tests/slice.rs

+69-1
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,7 @@ use core::cell::Cell;
22
use core::cmp::Ordering;
33
use core::mem::MaybeUninit;
44
use core::num::NonZero;
5+
use core::ops::{Range, RangeInclusive};
56
use core::slice;
67

78
#[test]
@@ -2553,6 +2554,14 @@ fn test_get_many_mut_normal_2() {
25532554
*a += 10;
25542555
*b += 100;
25552556
assert_eq!(v, vec![101, 2, 3, 14, 5]);
2557+
2558+
let [a, b] = v.get_many_mut([0..=1, 2..=2]).unwrap();
2559+
assert_eq!(a, &mut [101, 2][..]);
2560+
assert_eq!(b, &mut [3][..]);
2561+
a[0] += 10;
2562+
a[1] += 20;
2563+
b[0] += 100;
2564+
assert_eq!(v, vec![111, 22, 103, 14, 5]);
25562565
}
25572566

25582567
#[test]
@@ -2563,12 +2572,23 @@ fn test_get_many_mut_normal_3() {
25632572
*b += 100;
25642573
*c += 1000;
25652574
assert_eq!(v, vec![11, 2, 1003, 4, 105]);
2575+
2576+
let [a, b, c] = v.get_many_mut([0..1, 4..5, 1..4]).unwrap();
2577+
assert_eq!(a, &mut [11][..]);
2578+
assert_eq!(b, &mut [105][..]);
2579+
assert_eq!(c, &mut [2, 1003, 4][..]);
2580+
a[0] += 10;
2581+
b[0] += 100;
2582+
c[0] += 1000;
2583+
assert_eq!(v, vec![21, 1002, 1003, 4, 205]);
25662584
}
25672585

25682586
#[test]
25692587
fn test_get_many_mut_empty() {
25702588
let mut v = vec![1, 2, 3, 4, 5];
2571-
let [] = v.get_many_mut([]).unwrap();
2589+
let [] = v.get_many_mut::<usize, 0>([]).unwrap();
2590+
let [] = v.get_many_mut::<RangeInclusive<usize>, 0>([]).unwrap();
2591+
let [] = v.get_many_mut::<Range<usize>, 0>([]).unwrap();
25722592
assert_eq!(v, vec![1, 2, 3, 4, 5]);
25732593
}
25742594

@@ -2606,6 +2626,54 @@ fn test_get_many_mut_duplicate() {
26062626
assert!(v.get_many_mut([1, 3, 3, 4]).is_err());
26072627
}
26082628

2629+
#[test]
2630+
fn test_get_many_mut_range_oob() {
2631+
let mut v = vec![1, 2, 3, 4, 5];
2632+
assert!(v.get_many_mut([0..6]).is_err());
2633+
assert!(v.get_many_mut([5..6]).is_err());
2634+
assert!(v.get_many_mut([6..6]).is_err());
2635+
assert!(v.get_many_mut([0..=5]).is_err());
2636+
assert!(v.get_many_mut([0..=6]).is_err());
2637+
assert!(v.get_many_mut([5..=5]).is_err());
2638+
}
2639+
2640+
#[test]
2641+
fn test_get_many_mut_range_overlapping() {
2642+
let mut v = vec![1, 2, 3, 4, 5];
2643+
assert!(v.get_many_mut([0..1, 0..2]).is_err());
2644+
assert!(v.get_many_mut([0..1, 1..2, 0..1]).is_err());
2645+
assert!(v.get_many_mut([0..3, 1..1]).is_err());
2646+
assert!(v.get_many_mut([0..3, 1..2]).is_err());
2647+
assert!(v.get_many_mut([0..=0, 2..=2, 0..=1]).is_err());
2648+
assert!(v.get_many_mut([0..=4, 0..=0]).is_err());
2649+
assert!(v.get_many_mut([4..=4, 0..=0, 3..=4]).is_err());
2650+
}
2651+
2652+
#[test]
2653+
fn test_get_many_mut_range_empty_at_edge() {
2654+
let mut v = vec![1, 2, 3, 4, 5];
2655+
assert_eq!(
2656+
v.get_many_mut([0..0, 0..5, 5..5]),
2657+
Ok([&mut [][..], &mut [1, 2, 3, 4, 5], &mut []]),
2658+
);
2659+
assert_eq!(
2660+
v.get_many_mut([0..0, 0..1, 1..1, 1..2, 2..2, 2..3, 3..3, 3..4, 4..4, 4..5, 5..5]),
2661+
Ok([
2662+
&mut [][..],
2663+
&mut [1],
2664+
&mut [],
2665+
&mut [2],
2666+
&mut [],
2667+
&mut [3],
2668+
&mut [],
2669+
&mut [4],
2670+
&mut [],
2671+
&mut [5],
2672+
&mut [],
2673+
]),
2674+
);
2675+
}
2676+
26092677
#[test]
26102678
fn test_slice_from_raw_parts_in_const() {
26112679
static FANCY: i32 = 4;

0 commit comments

Comments
 (0)