[PATCH v2 0/4] rust: alloc: split `Vec::set_len` into `Vec::{inc,dec}_len`

From: Tamir Duberstein
Date: Tue Mar 18 2025 - 16:15:01 EST


This series is the product of a discussion[0] on the safety requirements
of `set_len`.

This series depends on "rust: alloc: add Vec::truncate method" by Andrew
Ballance <andrewjballance@xxxxxxxxx> [1] and rewrites `Vec::truncate`
using `Vec::dec_len`.

Link: https://lore.kernel.org/all/20250315154436.65065-1-dakr@xxxxxxxxxx/ [0]
Link: https://lore.kernel.org/all/20250316111644.154602-2-andrewjballance@xxxxxxxxx/ [1]
Signed-off-by: Tamir Duberstein <tamird@xxxxxxxxx>
---
Changes in v2:
- Avoid overflow in `set_len`. (Benno Lossin)
- Explained `CString::try_from_fmt` usage of `set_len`. (Benno Lossin,
Miguel Ojeda, Alice Ryhl)
- Added missing SoB. (Alice Ryhl)
- Prepend a patch documenting `Vec::len() <= Vec::capacity()` invariant.
- Add a patch rewriting `Vec::truncate` in terms of `Vec::dec_len`.
- Link to v1: https://lore.kernel.org/r/20250316-vec-set-len-v1-0-60f98a28723f@xxxxxxxxx

---
Tamir Duberstein (4):
rust: alloc: add Vec::len() <= Vec::capacity invariant
rust: alloc: add `Vec::dec_len`
rust: alloc: refactor `Vec::truncate` using `dec_len`
rust: alloc: replace `Vec::set_len` with `inc_len`

rust/kernel/alloc/kvec.rs | 87 +++++++++++++++++++++++++++--------------------
rust/kernel/str.rs | 2 +-
rust/kernel/uaccess.rs | 2 +-
3 files changed, 53 insertions(+), 38 deletions(-)
---
base-commit: cf25bc61f8aecad9b0c45fe32697e35ea4b13378
change-id: 20250316-vec-set-len-99be6cc48374
prerequisite-patch-id: 85a264a3c7e86025e7b36d91234134f5cc914366

Best regards,
--
Tamir Duberstein <tamird@xxxxxxxxx>