feat(lang): L7 memory is safe unless it says unsafe
The typed buffers are slices: words/floats/fixeds/doubles/pointers(n) make
zeroed, bounds-checked []int/[]float/... and the type names mean them. buffer(n)
is a []byte, with text_of, Fs.read_bytes/write_bytes and view(xs, start, n).
bytes(), indexing a raw pointer or bytes, free, resize, Memory.*, raw file calls,
data_of and C externs are refused outside unsafe { } / unsafe function, and a
project's own files may write unsafe only with --unsafe; the runtime and packages
are the platform. A slice passed to an extern goes as its data.
What the change found: Sync's atomics on a slice header, words(n) uninitialised,
input's fixed axes in ints, truetype's fixed outlines as ints, skin matrices
typed int, gl_shader's source table made from raw bytes. render3d gets safe
entry points (safe_api.ludic). Rendering is byte-identical; a frame costs the same.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
parent
9259808f80
commit
b0b0b62bce
70 changed files with 69189 additions and 64569 deletions
|
|
@ -8,17 +8,19 @@
|
|||
# them back through the loopback: prints 4, then 10 20 30 42.
|
||||
program NetEcho {
|
||||
entry {
|
||||
let out = bytes(4)
|
||||
out[0] = '\n'
|
||||
out[1] = 20
|
||||
out[2] = 30
|
||||
out[3] = '*'
|
||||
net_send(0, out, 4) # onto the wire (the built-in loopback)
|
||||
unsafe { # raw buffers on purpose: built with --unsafe (L7)
|
||||
let out = bytes(4)
|
||||
out[0] = '\n'
|
||||
out[1] = 20
|
||||
out[2] = 30
|
||||
out[3] = '*'
|
||||
net_send(0, out, 4) # onto the wire (the built-in loopback)
|
||||
|
||||
let inb = bytes(64)
|
||||
let n = net_poll(inb, 64) # take the next datagram back off
|
||||
print(n) # 4
|
||||
var i = 0
|
||||
while i < n { print(inb[i]); i += 1 } # 10 20 30 42
|
||||
let inb = bytes(64)
|
||||
let n = net_poll(inb, 64) # take the next datagram back off
|
||||
print(n) # 4
|
||||
var i = 0
|
||||
while i < n { print(inb[i]); i += 1 } # 10 20 30 42
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
|
|
@ -15,15 +15,17 @@ program NetSnapshot {
|
|||
model Unit { Health }
|
||||
|
||||
entry {
|
||||
spawn Unit { Health { hp: 50, max: 100 } }
|
||||
let buf = bytes(world_size())
|
||||
for (Health) in query [Health, {Unit}] {
|
||||
print(Health.hp) # 50
|
||||
let n = world_save(buf) # snapshot the whole world
|
||||
Health.hp = 7
|
||||
print(Health.hp) # 7
|
||||
world_load(buf, n) # roll the world back
|
||||
print(Health.hp) # 50 — restored from bytes
|
||||
unsafe { # raw buffers on purpose: built with --unsafe (L7)
|
||||
spawn Unit { Health { hp: 50, max: 100 } }
|
||||
let buf = bytes(world_size())
|
||||
for (Health) in query [Health, {Unit}] {
|
||||
print(Health.hp) # 50
|
||||
let n = world_save(buf) # snapshot the whole world
|
||||
Health.hp = 7
|
||||
print(Health.hp) # 7
|
||||
world_load(buf, n) # roll the world back
|
||||
print(Health.hp) # 50 — restored from bytes
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue