pub struct CString<const N: usize, LenT: LenType = usize> { /* private fields */ }
Expand description
A fixed capacity CString
.
It stores up to N - 1
non-nul characters with a trailing nul terminator.
Implementations§
Source§impl<const N: usize, LenT: LenType> CString<N, LenT>
impl<const N: usize, LenT: LenType> CString<N, LenT>
Sourcepub fn new() -> Self
pub fn new() -> Self
Creates a new C-compatible string with a terminating nul byte.
use heapless::CString;
// A fixed-size `CString` that can store up to 10 characters
// including the nul terminator.
let empty = CString::<10>::new();
assert_eq!(empty.as_c_str(), c"");
assert_eq!(empty.to_str(), Ok(""));
Sourcepub unsafe fn from_bytes_with_nul_unchecked(
bytes: &[u8],
) -> Result<Self, CapacityError>
pub unsafe fn from_bytes_with_nul_unchecked( bytes: &[u8], ) -> Result<Self, CapacityError>
Unsafely creates a CString
from a byte slice.
This function will copy the provided bytes
to a CString
without
performing any sanity checks.
The function will fail if bytes.len() > N
.
§Safety
The provided slice must be nul-terminated and not contain any interior nul bytes.
§Examples
use heapless::CString;
let mut c_string = unsafe { CString::<7>::from_bytes_with_nul_unchecked(b"string\0").unwrap() };
assert_eq!(c_string.to_str(), Ok("string"));
Sourcepub fn from_bytes_with_nul(bytes: &[u8]) -> Result<Self, ExtendError>
pub fn from_bytes_with_nul(bytes: &[u8]) -> Result<Self, ExtendError>
Instantiates a CString
copying from the giving byte slice, assuming it is
nul-terminated.
Fails if the given byte slice has any interior nul byte, if the slice does not
end with a nul byte, or if the byte slice can’t fit in N
.
Sourcepub unsafe fn from_raw(ptr: *const c_char) -> Result<Self, ExtendError>
pub unsafe fn from_raw(ptr: *const c_char) -> Result<Self, ExtendError>
Builds a CString
copying from a raw C string pointer.
§Safety
- The memory pointed to by
ptr
must contain a valid nul terminator at the end of the string. ptr
must be valid for reads of bytes up to and including the nul terminator. This means in particular:- The entire memory range of this
CStr
must be contained within a single allocated object! ptr
must be non-nul even for a zero-lengthCStr
.
- The entire memory range of this
§Example
use core::ffi::{c_char, CStr};
use heapless::CString;
const HELLO_PTR: *const c_char = {
const BYTES: &[u8] = b"Hello, world!\0";
BYTES.as_ptr().cast()
};
let copied = unsafe { CString::<14>::from_raw(HELLO_PTR) }.unwrap();
assert_eq!(copied.to_str(), Ok("Hello, world!"));
Sourcepub fn extend_from_bytes(&mut self, bytes: &[u8]) -> Result<(), ExtendError>
pub fn extend_from_bytes(&mut self, bytes: &[u8]) -> Result<(), ExtendError>
Extends the CString
with the given bytes.
This function fails if the CString
would not have enough capacity to append the bytes or
if the bytes contain an interior nul byte.
§Example
use heapless::CString;
let mut c_string = CString::<10>::new();
c_string.extend_from_bytes(b"hey").unwrap();
c_string.extend_from_bytes(b" there\0").unwrap();
assert_eq!(c_string.to_str(), Ok("hey there"));
Sourcepub fn as_bytes_with_nul(&self) -> &[u8]
pub fn as_bytes_with_nul(&self) -> &[u8]
Returns the underlying byte slice including the trailing nul terminator.
§Example
use heapless::CString;
let mut c_string = CString::<5>::new();
c_string.extend_from_bytes(b"abc").unwrap();
assert_eq!(c_string.as_bytes_with_nul(), b"abc\0");
Methods from Deref<Target = CStr>§
1.0.0 · Sourcepub fn as_ptr(&self) -> *const i8
pub fn as_ptr(&self) -> *const i8
Returns the inner pointer to this C string.
The returned pointer will be valid for as long as self
is, and points
to a contiguous region of memory terminated with a 0 byte to represent
the end of the string.
The type of the returned pointer is
*const c_char
, and whether it’s
an alias for *const i8
or *const u8
is platform-specific.
WARNING
The returned pointer is read-only; writing to it (including passing it to C code that writes to it) causes undefined behavior.
It is your responsibility to make sure that the underlying memory is not
freed too early. For example, the following code will cause undefined
behavior when ptr
is used inside the unsafe
block:
use std::ffi::{CStr, CString};
// 💀 The meaning of this entire program is undefined,
// 💀 and nothing about its behavior is guaranteed,
// 💀 not even that its behavior resembles the code as written,
// 💀 just because it contains a single instance of undefined behavior!
// 🚨 creates a dangling pointer to a temporary `CString`
// 🚨 that is deallocated at the end of the statement
let ptr = CString::new("Hi!".to_uppercase()).unwrap().as_ptr();
// without undefined behavior, you would expect that `ptr` equals:
dbg!(CStr::from_bytes_with_nul(b"HI!\0").unwrap());
// 🙏 Possibly the program behaved as expected so far,
// 🙏 and this just shows `ptr` is now garbage..., but
// 💀 this violates `CStr::from_ptr`'s safety contract
// 💀 leading to a dereference of a dangling pointer,
// 💀 which is immediate undefined behavior.
// 💀 *BOOM*, you're dead, your entire program has no meaning.
dbg!(unsafe { CStr::from_ptr(ptr) });
This happens because, the pointer returned by as_ptr
does not carry any
lifetime information, and the CString
is deallocated immediately after
the expression that it is part of has been evaluated.
To fix the problem, bind the CString
to a local variable:
use std::ffi::{CStr, CString};
let c_str = CString::new("Hi!".to_uppercase()).unwrap();
let ptr = c_str.as_ptr();
assert_eq!(unsafe { CStr::from_ptr(ptr) }, c"HI!");
1.79.0 · Sourcepub fn count_bytes(&self) -> usize
pub fn count_bytes(&self) -> usize
Returns the length of self
. Like C’s strlen
, this does not include the nul terminator.
Note: This method is currently implemented as a constant-time cast, but it is planned to alter its definition in the future to perform the length calculation whenever this method is called.
§Examples
assert_eq!(c"foo".count_bytes(), 3);
assert_eq!(c"".count_bytes(), 0);
1.71.0 · Sourcepub fn is_empty(&self) -> bool
pub fn is_empty(&self) -> bool
Returns true
if self.to_bytes()
has a length of 0.
§Examples
assert!(!c"foo".is_empty());
assert!(c"".is_empty());
1.0.0 · Sourcepub fn to_bytes(&self) -> &[u8]
pub fn to_bytes(&self) -> &[u8]
Converts this C string to a byte slice.
The returned slice will not contain the trailing nul terminator that this C string has.
Note: This method is currently implemented as a constant-time cast, but it is planned to alter its definition in the future to perform the length calculation whenever this method is called.
§Examples
assert_eq!(c"foo".to_bytes(), b"foo");
1.0.0 · Sourcepub fn to_bytes_with_nul(&self) -> &[u8]
pub fn to_bytes_with_nul(&self) -> &[u8]
Converts this C string to a byte slice containing the trailing 0 byte.
This function is the equivalent of CStr::to_bytes
except that it
will retain the trailing nul terminator instead of chopping it off.
Note: This method is currently implemented as a 0-cost cast, but it is planned to alter its definition in the future to perform the length calculation whenever this method is called.
§Examples
assert_eq!(c"foo".to_bytes_with_nul(), b"foo\0");
Sourcepub fn bytes(&self) -> Bytes<'_>
🔬This is a nightly-only experimental API. (cstr_bytes
)
pub fn bytes(&self) -> Bytes<'_>
cstr_bytes
)Iterates over the bytes in this C string.
The returned iterator will not contain the trailing nul terminator that this C string has.
§Examples
#![feature(cstr_bytes)]
assert!(c"foo".bytes().eq(*b"foo"));
Sourcepub fn display(&self) -> impl Display
🔬This is a nightly-only experimental API. (cstr_display
)
pub fn display(&self) -> impl Display
cstr_display
)Returns an object that implements Display
for safely printing a CStr
that may
contain non-Unicode data.
Behaves as if self
were first lossily converted to a str
, with invalid UTF-8 presented
as the Unicode replacement character: �.
§Examples
#![feature(cstr_display)]
let cstr = c"Hello, world!";
println!("{}", cstr.display());