use crate::imp::Box; use crate::{AsImpl, IUnknown, IUnknownImpl, Interface, InterfaceRef}; use core::any::Any; use core::borrow::Borrow; use core::ops::Deref; use core::ptr::NonNull; /// Identifies types that can be placed in [`ComObject`]. /// /// This trait links types that can be placed in `ComObject` with the types generated by the /// `#[implement]` macro. The `#[implement]` macro generates implementations of this trait. /// The generated types contain the vtable layouts and refcount-related fields for the COM /// object implementation. /// /// This trait is an implementation detail of the Windows crates. /// User code should not deal directly with this trait. /// /// This trait is sort of the reverse of [`IUnknownImpl`]. This trait allows user code to use /// [`ComObject`] instead of `ComObject`. pub trait ComObjectInner: Sized { /// The generated `_Impl` type (aka the "boxed" type or "outer" type). type Outer: IUnknownImpl; /// Moves an instance of this type into a new ComObject box and returns it. /// /// # Safety /// /// It is important that safe Rust code never be able to acquire an owned instance of a /// generated "outer" COM object type, e.g. `_Impl`. This would be unsafe because the /// `_Impl` object contains a reference count field and provides methods that adjust /// the reference count, and destroy the object when the reference count reaches zero. /// /// Safe Rust code must only be able to interact with these values by accessing them via a /// `ComObject` reference. `ComObject` handles adjusting reference counts and associates the /// lifetime of a `&_Impl` with the lifetime of the related `ComObject`. /// /// The `#[implement]` macro generates the implementation of this `into_object` method. /// The generated `into_object` method encapsulates the construction of the `_Impl` /// object and immediately places it into the heap and returns a `ComObject` reference to it. /// This ensures that our requirement -- that safe Rust code never own a `_Impl` value /// directly -- is met. fn into_object(self) -> ComObject; } /// Describes the COM interfaces implemented by a specific COM object. /// /// The `#[implement]` macro generates implementations of this trait. Implementations are attached /// to the "outer" types generated by `#[implement]`, e.g. the `MyApp_Impl` type. Each /// implementation knows how to locate the interface-specific field within `MyApp_Impl`. /// /// This trait is an implementation detail of the Windows crates. /// User code should not deal directly with this trait. pub trait ComObjectInterface { /// Gets a borrowed interface that is implemented by `T`. fn as_interface_ref(&self) -> InterfaceRef<'_, I>; } /// A counted pointer to a type that implements COM interfaces, where the object has been /// placed in the heap (boxed). /// /// This type exists so that you can place an object into the heap and query for COM interfaces, /// without losing the safe reference to the implementation object. /// /// Because the pointer inside this type is known to be non-null, `Option>` should /// always have the same size as a single pointer. /// /// # Safety /// /// The contained `ptr` field is an owned, reference-counted pointer to a _pinned_ `Pin>`. /// Although this code does not currently use `Pin`, it takes care not to expose any unsafe semantics /// to safe code. However, code that calls unsafe functions on [`ComObject`] must, like all unsafe code, /// understand and preserve invariants. #[repr(transparent)] pub struct ComObject { ptr: NonNull, } impl ComObject { /// Allocates a heap cell (box) and moves `value` into it. Returns a counted pointer to `value`. pub fn new(value: T) -> Self { T::into_object(value) } /// Creates a new `ComObject` that points to an existing boxed instance. /// /// # Safety /// /// The caller must ensure that `ptr` points to a valid, heap-allocated instance of `T::Outer`. /// Normally, this pointer comes from using `Box::into_raw(Box::new(...))`. /// /// The pointed-to box must have a reference count that is greater than zero. /// /// This function takes ownership of the existing pointer; it does not call `AddRef`. /// The reference count must accurately reflect all outstanding references to the box, /// including `ptr` in the count. pub unsafe fn from_raw(ptr: NonNull) -> Self { Self { ptr } } /// Gets a reference to the shared object stored in the box. /// /// [`ComObject`] also implements [`Deref`], so you can often deref directly into the object. /// For those situations where using the [`Deref`] impl is inconvenient, you can use /// this method to explicitly get a reference to the contents. #[inline(always)] pub fn get(&self) -> &T { self.get_box().get_impl() } /// Gets a reference to the shared object's heap box. #[inline(always)] fn get_box(&self) -> &T::Outer { unsafe { self.ptr.as_ref() } } // Note that we _do not_ provide a way to get a mutable reference to the outer box. // It's ok to return `&mut T`, but not `&mut T::Outer`. That would allow someone to replace the // contents of the entire object (box and reference count), which could lead to UB. // This could maybe be solved by returning `Pin<&mut T::Outer>`, but that requires some // additional thinking. /// Gets a mutable reference to the object stored in the box, if the reference count /// is exactly 1. If there are multiple references to this object then this returns `None`. #[inline(always)] pub fn get_mut(&mut self) -> Option<&mut T> { if self.is_reference_count_one() { // SAFETY: We must only return &mut T, *NOT* &mut T::Outer. // Returning T::Outer would allow swapping the contents of the object, which would // allow (incorrectly) modifying the reference count. unsafe { Some(self.ptr.as_mut().get_impl_mut()) } } else { None } } /// If this object has only a single object reference (i.e. this [`ComObject`] is the only /// reference to the heap allocation), then this method will extract the inner `T` /// (and return it in an `Ok`) and then free the heap allocation. /// /// If there is more than one reference to this object, then this returns `Err(self)`. #[inline(always)] pub fn take(self) -> Result { if self.is_reference_count_one() { let outer_box: Box = unsafe { core::mem::transmute(self) }; Ok(outer_box.into_inner()) } else { Err(self) } } /// Casts to a given interface type. /// /// This always performs a `QueryInterface`, even if `T` is known to implement `I`. /// If you know that `T` implements `I`, then use [`Self::as_interface`] or [`Self::to_interface`] because /// those functions do not require a dynamic `QueryInterface` call. #[inline(always)] pub fn cast(&self) -> windows_core::Result where T::Outer: ComObjectInterface, { let unknown = self.as_interface::(); unknown.cast() } /// Gets a borrowed reference to an interface that is implemented by `T`. /// /// The returned reference does not have an additional reference count. /// You can AddRef it by calling [`InterfaceRef::to_owned`]. #[inline(always)] pub fn as_interface(&self) -> InterfaceRef<'_, I> where T::Outer: ComObjectInterface, { self.get_box().as_interface_ref() } /// Gets an owned (counted) reference to an interface that is implemented by this [`ComObject`]. #[inline(always)] pub fn to_interface(&self) -> I where T::Outer: ComObjectInterface, { self.as_interface::().to_owned() } /// Converts `self` into an interface that it implements. /// /// This does not need to adjust reference counts because `self` is consumed. #[inline(always)] pub fn into_interface(self) -> I where T::Outer: ComObjectInterface, { unsafe { let raw = self.get_box().as_interface_ref().as_raw(); core::mem::forget(self); I::from_raw(raw) } } /// This casts the given COM interface to [`&dyn Any`]. It returns a reference to the "outer" /// object, e.g. `MyApp_Impl`, not the inner `MyApp` object. /// /// `T` must be a type that has been annotated with `#[implement]`; this is checked at /// compile-time by the generic constraints of this method. However, note that the /// returned `&dyn Any` refers to the _outer_ implementation object that was generated by /// `#[implement]`, i.e. the `MyApp_Impl` type, not the inner `MyApp` type. /// /// If the given object is not a Rust object, or is a Rust object but not `T`, or is a Rust /// object that contains non-static lifetimes, then this function will return `Err(E_NOINTERFACE)`. /// /// The returned value is an owned (counted) reference; this function calls `AddRef` on the /// underlying COM object. If you do not need an owned reference, then you can use the /// [`Interface::cast_object_ref`] method instead, and avoid the cost of `AddRef` / `Release`. pub fn cast_from(interface: &I) -> crate::Result where I: Interface, T::Outer: Any + 'static + IUnknownImpl, { interface.cast_object() } } impl Default for ComObject { fn default() -> Self { Self::new(T::default()) } } impl Drop for ComObject { fn drop(&mut self) { unsafe { T::Outer::Release(self.ptr.as_ptr()); } } } impl Clone for ComObject { #[inline(always)] fn clone(&self) -> Self { unsafe { self.ptr.as_ref().AddRef(); Self { ptr: self.ptr } } } } impl AsRef for ComObject where IUnknown: From + AsImpl, { #[inline(always)] fn as_ref(&self) -> &T { self.get() } } impl Deref for ComObject { type Target = T::Outer; #[inline(always)] fn deref(&self) -> &Self::Target { self.get_box() } } // There is no DerefMut implementation because we cannot statically guarantee // that the reference count is 1, which is a requirement for getting exclusive // access to the contents of the object. Use get_mut() for dynamically-checked // exclusive access. impl From for ComObject { fn from(value: T) -> ComObject { ComObject::new(value) } } // Delegate hashing, if implemented. impl core::hash::Hash for ComObject { fn hash(&self, state: &mut H) { self.get().hash(state); } } // If T is Send (or Sync) then the ComObject is also Send (or Sync). // Since the actual object storage is in the heap, the object is never moved. unsafe impl Send for ComObject {} unsafe impl Sync for ComObject {} impl PartialEq for ComObject { fn eq(&self, other: &ComObject) -> bool { let inner_self: &T = self.get(); let other_self: &T = other.get(); inner_self == other_self } } impl Eq for ComObject {} impl PartialOrd for ComObject { fn partial_cmp(&self, other: &Self) -> Option { let inner_self: &T = self.get(); let other_self: &T = other.get(); ::partial_cmp(inner_self, other_self) } } impl Ord for ComObject { fn cmp(&self, other: &Self) -> core::cmp::Ordering { let inner_self: &T = self.get(); let other_self: &T = other.get(); ::cmp(inner_self, other_self) } } impl core::fmt::Debug for ComObject { fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result { ::fmt(self.get(), f) } } impl core::fmt::Display for ComObject { fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result { ::fmt(self.get(), f) } } impl Borrow for ComObject { fn borrow(&self) -> &T { self.get() } }