183 // SAFETY: This file is known to not have any active `fdget_pos` calls that did not take the
187 // SAFETY: This file is known to not have any active `fdget_pos` calls that did not take the
191 // SAFETY: The type invariants guarantee that `File` is always ref-counted. This implementation
196         // SAFETY: The existence of a shared reference means that the refcount is nonzero.  in inc_ref()
202         // SAFETY: To call this method, the caller passes us ownership of a normal refcount, so we  in dec_ref()
226 // SAFETY: The type invariants guarantee that `LocalFile` is always ref-counted. This implementation
231         // SAFETY: The existence of a shared reference means that the refcount is nonzero.  in inc_ref()
237         // SAFETY: To call this method, the caller passes us ownership of a normal refcount, so we  in dec_ref()
254         // SAFETY: FFI call, there are no requirements on `fd`.  in fget()
257         // SAFETY: `bindings::fget` created a refcount, and we pass ownership of it to the `ARef`.  in fget()
267     /// # Safety
275         // SAFETY: The caller guarantees that the pointer is not dangling and stays valid for the  in from_raw_file()
293     /// # Safety
302         // SAFETY: `LocalFile` and `File` have the same layout.  in assume_no_fdget_pos()
314         // SAFETY: It's okay to read the `f_cred` field without synchronization because `f_cred` is  in cred()
318         // SAFETY: The signature of this function ensures that the caller will only access the  in cred()
331         // SAFETY: The file is valid because the shared reference guarantees a nonzero refcount.  in flags()
341     /// # Safety
349         // SAFETY: The caller guarantees that the pointer is not dangling and stays valid for the  in from_raw_file()
362         // SAFETY: The caller provides a `&File`, and since it is a reference, it must point at a  in deref()
396         // SAFETY: FFI call, there are no safety requirements on `flags`.  in get_unused_fd_flags()
417         // SAFETY: `self.fd` was previously returned by `get_unused_fd_flags`. We have not yet used  in fd_install()
437         // SAFETY: By the type invariants of this type, `self.fd` was previously returned by  in drop()