enricobuehler
dfebb9dfbb
undocumented_unsafe_blocks joins unsafe_op_in_unsafe_fn in
[workspace.lints], and the ~100 scattered per-file #![deny(...)] attributes
(85 files) are deleted — a new crate, or a new module in an old one, is now
covered on creation rather than on remembering. The per-file form is how
pf-vkhdr-layer, wdk-probe and half of pf-clipboard stayed uncovered.
There are THREE workspaces, so the claim is made three times: the main
Cargo.toml, packaging/windows/drivers (workspace table + [lints]
workspace = true in all seven members), and packaging/windows/pf-vkhdr-layer
(its [lints] table, previous commit). pf-update now opts into workspace
lints; the two vendored member snapshots (cros-codecs, usbip-sim) stay out
deliberately and now both say so.
Newly-covered fallout was two link-sanity tests (pyrowave-sys, libvpl-sys)
— proofs written. Stale prose that claimed the workspace held
unsafe_op_in_unsafe_fn at "warn" (it has been deny) or pointed at the
deleted attributes is corrected.
nvenc_core.rs is carved OUT of the unsafe_op_in_unsafe_fn fence: its
exemption rationale ("raw entry-table calls almost line for line") was
false — the file makes zero FFI calls. Its unsafe surface is C-union writes
whose soundness hangs on which codec arm is active, and its own 4:4:4 note
records the shipped bug (hevcConfig bytes stamped onto an AV1 config) that
per-operation blocks make visible. It now runs the strictest discipline in
the crate: clippy::multiple_unsafe_ops_per_block at deny, one union access
per block, each naming its codec guard.
Verified here: cargo fmt clean in all three workspaces; native clippy
-D warnings clean for everything that compiles on macOS (the three
pre-existing mac-native failures — pf-client-core wol.rs, pf-encode
dead-code/closure-call, probe mic_burst — reproduce on the clean tree).
Linux/Windows legs ride the .25/.133 gate.
48 lines
1.9 KiB
Rust
48 lines
1.9 KiB
Rust
//! The Skia console UI (punktfunk-planning `linux-client-rearchitecture.md` §6): an
|
|
//! [`Overlay`](pf_presenter::overlay::Overlay) implementation rendering on the
|
|
//! PRESENTER's Vulkan device into offscreen RGBA images the presenter composites as one
|
|
//! premultiplied quad. Skia never touches the swapchain, and nothing here runs while
|
|
//! the overlay has nothing to show — the §6.1 invariants live or die in this crate.
|
|
//!
|
|
//! The console is a full couch shell now — home (host carousel), the game library
|
|
//! coverflow, settings, add-host, and PIN pairing, with screen transitions, per-pad
|
|
//! button glyphs, and a controller keyboard (suppressed on Steam Deck, where Steam's
|
|
//! own keyboard types through SDL text input) — plus the in-stream chrome: stats OSD,
|
|
//! capture hint, start banner.
|
|
|
|
// Unsafe-proof program: every `unsafe {}` in the Skia/Vulkan overlay carries a `// SAFETY:` proof.
|
|
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod anim;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod glyphs;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod launcher_icons;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub mod library;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub mod model;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod pointer;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod screens;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod shell;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod skia_overlay;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod theme;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
mod widgets;
|
|
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub use library::{LibraryGame, LibraryPhase, LibraryShared};
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub use model::{
|
|
ConsoleBus, ConsoleCmd, ConsoleShared, HostRow, PairPhase, ProfileChip, WakeStatus,
|
|
};
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub use shell::ConsoleOptions;
|
|
#[cfg(any(target_os = "linux", windows))]
|
|
pub use skia_overlay::{ConsoleEntry, ConsoleHandles, SkiaOverlay};
|