@@ -17,6 +17,7 @@ enum PermissionPriv {
17
17
/// is relevant
18
18
/// - `conflicted` is set on foreign reads,
19
19
/// - `conflicted` must not be set on child writes (there is UB otherwise).
20
+ ///
20
21
/// This is so that the behavior of `Reserved` adheres to the rules of `noalias`:
21
22
/// - foreign-read then child-write is UB due to `conflicted`,
22
23
/// - child-write then foreign-read is UB since child-write will activate and then
@@ -339,15 +340,15 @@ pub mod diagnostics {
339
340
/// This function assumes that its arguments apply to the same location
340
341
/// and that they were obtained during a normal execution. It will panic otherwise.
341
342
/// - all transitions involved in `self` and `err` should be increasing
342
- /// (Reserved < Active < Frozen < Disabled);
343
+ /// (Reserved < Active < Frozen < Disabled);
343
344
/// - between `self` and `err` the permission should also be increasing,
344
- /// so all permissions inside `err` should be greater than `self.1`;
345
+ /// so all permissions inside `err` should be greater than `self.1`;
345
346
/// - `Active` and `Reserved(conflicted=false)` cannot cause an error
346
- /// due to insufficient permissions, so `err` cannot be a `ChildAccessForbidden(_)`
347
- /// of either of them;
347
+ /// due to insufficient permissions, so `err` cannot be a `ChildAccessForbidden(_)`
348
+ /// of either of them;
348
349
/// - `err` should not be `ProtectedDisabled(Disabled)`, because the protected
349
- /// tag should not have been `Disabled` in the first place (if this occurs it means
350
- /// we have unprotected tags that become protected)
350
+ /// tag should not have been `Disabled` in the first place (if this occurs it means
351
+ /// we have unprotected tags that become protected)
351
352
pub ( in super :: super ) fn is_relevant ( & self , err : TransitionError ) -> bool {
352
353
// NOTE: `super::super` is the visibility of `TransitionError`
353
354
assert ! ( self . is_possible( ) ) ;
0 commit comments