b322dcfe61
Type-checking gaps (segfault/corruption → compile errors): - 0197: reject a store into an annotated slot whose value has no modeled coercion AND a different byte width (a 16-byte string into a 4-byte i32 overran the slot and segfaulted). New checkAssignable / noneReinterpretIsUnsafe (coerce.zig, width via the LLVM-accurate typeSizeBytes) wired into every store site: var/const-decl, single + multi assignment (identifier/field/index/ element/deref), named-return defaults. Same-width reinterpretations (*T→[*]T, i64→isize, fn-ref) and explicit xx/cast stay allowed; cascades suppressed via externalErrorsExist. Examples 1205, 1206. - 0198: an implicit `Any → T` unbox is now a compile error (it blindly reinterpreted the boxed payload — silent garbage for a wrong scalar, a segfault for an aggregate). xx and compiler-generated match/pack unboxes are unaffected. Example 1207. - 0199: `Any == <concrete>` (one operand Any) aborted the LLVM verifier — the comparison arm now fires when either operand is Any, boxing the concrete side first. Example 0654. Multi-return deferrals (PLAN-MULTIRET #6 + named-order + D3 + generic): - Reorder named return elements by name instead of requiring slot order; error on unknown/duplicate/missing (value-only AND full-failable-tuple forms). Examples 0210, 0214. - Reject a bare-paren (A, B) multi-return signature in generic-arg position (return-position-only). Example 0215. - Multi-return closure types / lambda literals work via the reused tuple machinery (destructure, single-bind+field, lambda arg). Example 0216. - Generic multi-return: positional works (0217); 0200: the named-slot implicit-return form now works for generic free fns + struct methods — monomorphizeFunction now calls bindNamedReturnSlots. Example 0218. readme.md documents the annotated-store coercion rule; CHECKPOINT-MULTIRET.md updated. Full corpus green (850/0).
35 lines
1.3 KiB
Plaintext
35 lines
1.3 KiB
Plaintext
// A store into ANY annotated slot whose value type has no coercion to the slot
|
|
// AND a different byte width is a type error — the raw `.none` passthrough would
|
|
// overrun the slot and corrupt adjacent memory (issue 0197). The guard covers
|
|
// every store site, not just plain var-decls: a struct field, an array element,
|
|
// a pointer deref, and a multi-assignment target.
|
|
//
|
|
// Regression (issue 0197): `struct{a:i32; b:i32}` is 8 bytes, but a 16-byte
|
|
// `string` stored raw into one of its fields (or into an i32 array element, or
|
|
// through an `*i32`) overran the slot and SIGSEGV'd / clobbered neighbors. The
|
|
// discriminator is BYTE WIDTH (via `typeSizeBytes`), so a same-width
|
|
// reinterpretation (`*T → [*]T`, a bare fn-ref into a function slot) still
|
|
// passes — only a genuine width mismatch is rejected.
|
|
|
|
#import "modules/std.sx";
|
|
|
|
S :: struct { a: i32; b: i32; }
|
|
|
|
main :: () -> i64 {
|
|
s : S = ---;
|
|
s.a = 1; s.b = 2;
|
|
s.a = "field"; // error: struct field, string ↛ i32
|
|
|
|
arr := i32.[1, 2, 3];
|
|
arr[0] = "elem"; // error: array element, string ↛ i32
|
|
|
|
n : i32 = 0;
|
|
p : *i32 = @n;
|
|
p.* = "deref"; // error: pointer deref, string ↛ i32
|
|
|
|
u : i32 = 0; v : i32 = 0;
|
|
u, v = "multi", 9; // error: multi-assign target, string ↛ i32
|
|
|
|
return 0;
|
|
}
|