use std::cell::RefCell; use std::mem::ManuallyDrop; use std::ops::Deref; union U1 { a: u8, } union U2 { a: ManuallyDrop, } union U3 { a: ManuallyDrop, } union U4 { a: T, } union U5 { a: usize, } union URef { p: &'static mut i32, } union URefCell { // field that does not drop but is not `Copy`, either a: (ManuallyDrop>, i32), } fn deref_union_field(mut u: URef) { // Not an assignment but an access to the union field! *(u.p) = 13; //~ ERROR access to union field is unsafe } union A { a: usize, b: &'static &'static B, } union B { c: usize, } fn raw_deref_union_field(mut u: URef) { // This is unsafe because we first dereference u.p (reading uninitialized memory) let _p = &raw const *(u.p); //~ ERROR access to union field is unsafe } fn assign_noncopy_union_field(mut u: URefCell) { u.a = (ManuallyDrop::new(RefCell::new(0)), 1); // OK (assignment does not drop) u.a.0 = ManuallyDrop::new(RefCell::new(0)); // OK (assignment does not drop) u.a.1 = 1; // OK } fn generic_noncopy() { let mut u3 = U3 { a: ManuallyDrop::new(T::default()) }; u3.a = ManuallyDrop::new(T::default()); // OK (assignment does not drop) *u3.a = T::default(); //~ ERROR access to union field is unsafe } fn generic_copy() { let mut u3 = U3 { a: ManuallyDrop::new(T::default()) }; u3.a = ManuallyDrop::new(T::default()); // OK *u3.a = T::default(); //~ ERROR access to union field is unsafe let mut u4 = U4 { a: T::default() }; u4.a = T::default(); // OK } fn main() { let mut u1 = U1 { a: 10 }; // OK let a = u1.a; //~ ERROR access to union field is unsafe u1.a = 11; // OK let mut u2 = U1 { a: 10 }; let a = &raw mut u2.a; // OK unsafe { *a = 3 }; let mut u3 = U1 { a: 10 }; let a = std::ptr::addr_of_mut!(u3.a); // OK unsafe { *a = 14 }; let u4 = U5 { a: 2 }; let vec = vec![1, 2, 3]; // This is unsafe because we read u4.a (potentially uninitialized memory) // to use as an array index let _a = &raw const vec[u4.a]; //~ ERROR access to union field is unsafe let U1 { a } = u1; //~ ERROR access to union field is unsafe if let U1 { a: 12 } = u1 {} //~ ERROR access to union field is unsafe if let Some(U1 { a: 13 }) = Some(u1) {} //~ ERROR access to union field is unsafe // let U1 { .. } = u1; // OK let mut u2 = U2 { a: ManuallyDrop::new(String::from("old")) }; // OK u2.a = ManuallyDrop::new(String::from("new")); // OK (assignment does not drop) *u2.a = String::from("new"); //~ ERROR access to union field is unsafe let mut u3 = U3 { a: ManuallyDrop::new(0) }; // OK u3.a = ManuallyDrop::new(1); // OK *u3.a = 1; //~ ERROR access to union field is unsafe let mut u3 = U3 { a: ManuallyDrop::new(String::from("old")) }; // OK u3.a = ManuallyDrop::new(String::from("new")); // OK (assignment does not drop) *u3.a = String::from("new"); //~ ERROR access to union field is unsafe let mut unions = [U1 { a: 1 }, U1 { a: 2 }]; // Array indexing + union field raw borrow - should be OK let ptr = &raw mut unions[0].a; // OK let ptr2 = &raw const unions[1].a; // OK let a = A { a: 0 }; let _p = &raw const (**a.b).c; //~ ERROR access to union field is unsafe arbitrary_deref(); } // regression test for https://github.com/rust-lang/rust/pull/141469#discussion_r2312546218 fn arbitrary_deref() { use std::ops::Deref; union A { a: usize, b: B, } #[derive(Copy, Clone)] struct B(&'static str); impl Deref for B { type Target = C; fn deref(&self) -> &C { println!("{:?}", self.0); &C { c: 0 } } } union C { c: usize, } let a = A { a: 0 }; let _p = &raw const (*a.b).c; //~ ERROR access to union field is unsafe }