RustBrock/Lifetimes.md

13 KiB

Lifetimes

Valid References with Lifetimes

Lifetimes are another type of generic generic that has been used in the past.

Rather than ensuring that a type has the behavior we want lifetimes ensure that references are valid for as long as we need them to be.

Every reference in Rust has a lifetime, which is the scope that a reference is valid

A majority of the time references are implicit and inferred, like how types are inferred for the most part

We must only annotate types when multiple types are possible

The same concept can happen with lifetimes, where references could be related in a few different ways

Rust requires us to annotate the relationships using generic lifetime parameters to ensure the actual references used at runtime are valid

Annotating lifetimes is not a concept or feature that is in other programming languages

Preventing Dangling References with Lifetimes

The main aim of lifetimes is to prevent dangling references, this causes a program to reference data other than the data it's intended to reference

Here is an example that will not compile due to the value being referred to going out of scope, then the reference being invalid and being used elsewhere

fn main() {
    let r;

    {
        let x = 5;
        r = &x;
    }

    println!("r: {r}");
}

This is initialization is allowed because if yo try to use a variable with no value associated then Rust will throw a compile-time error.

This proves that rust does not allow or have a null type

in this code r has a reference to x but x goes out of scope, this makes r not be valid reference, this invalid reference is attempted to be used.

The error message that would occur afterwards would say that x "does not live long enough". This refers to x going out of scope but r is still in scope

Hence we say that r "lives longer" because it has a larger scope

The Borrow Checker

The Rust compiler has a borrow checker that compares scopes to determine whether all borrows are valid

Here is an example with annotations showing the lifetimes of variables

fn main() {
    let r;                // ---------+-- 'a
                          //          |
    {                     //          |
        let x = 5;        // -+-- 'b  |
        r = &x;           //  |       |
    }                     // -+       |
                          //          |
    println!("r: {r}");   //          |
}                         // ---------+

In this annotations r is represented by 'a and x is represented by 'b

'a is the lifetime of r and 'b is the lifetime of x

As you can see 'a encompasses more than 'b

At compile time Rust will compare the size of the two lifetimes and sees that r has a lifetime of 'a but that it refers to memory with a lifetime of 'b. This results in a rejection of the program because the reference becomes invalid before a use of it: the subject reference doesn't live as long as the reference.

The lifetime refers to how long it "lives" in memory or is available in memory

Here is the fix to the program above

fn main() {
    let x = 5;            // ----------+-- 'b
                          //           |
    let r = &x;           // --+-- 'a  |
                          //   |       |
    println!("r: {r}");   //   |       |
                          // --+       |
}                         // ----------+

As you can now see the the lifetime of 'b is now larger than the 'a reference

Know you know that the reference r will always be valid because x is always valid

Generic Lifetimes in Functions

To illustrate this we will write a function that returns the longer of two string slices

This function takes in two string slices and returns a single string slice

Here is an example of the use of the function longest that does this functionality

fn main() {
    let string1 = String::from("abcd");
    let string2 = "xyz";

    let result = longest(string1.as_str(), string2);
    println!("The longest string is {result}");
}

Note that longest takes in a string slice, which are references, we don't want the function to take ownership of the strings

If we try to implement longest function like below, it won't compile

fn longest(x: &str, y: &str) -> &str {
    if x.len() > y.len() {
        x
    } else {
        y
    }
}

Here is the compiler error

$ cargo run
   Compiling chapter10 v0.1.0 (file:///projects/chapter10)
error[E0106]: missing lifetime specifier
 --> src/main.rs:9:33
  |
9 | fn longest(x: &str, y: &str) -> &str {
  |               ----     ----     ^ expected named lifetime parameter
  |
  = help: this function's return type contains a borrowed value, but the signature does not say whether it is borrowed from `x` or `y`
help: consider introducing a named lifetime parameter
  |
9 | fn longest<'a>(x: &'a str, y: &'a str) -> &'a str {
  |           ++++     ++          ++          ++

For more information about this error, try `rustc --explain E0106`.
error: could not compile `chapter10` (bin "chapter10") due to 1 previous error

This error highlights that the return type needs a generic lifetime parameter because rust cannot determine whether the reference is referring to x or y

We don't know either because of the if and else in the body of the function refer to two different things depending on what the inputs are

We also don't know the concrete lifetimes of the references , so we cannot even analyze the lifetimes like we did before, so we cant ensure that the reference and lifetime will always be valid.

The borrow checker cannot check for this either so it throws an error.

This is because it doesn't know the lifetimes of x and y relate to the lifetime of the return value

To fix this error we should add a generic lifetime parameter that defines the relationship between the references so the borrow checker can perform its analysis

Lifetime Annotation Syntax

Lifetime annotations don't change based on how long any of the references live, instead they describe the relationship of the lifetimes of multiple references to each other without affecting the lifetimes

Like how functions can accept any type when the signature specifies a generic, functions can accept any lifetime by specifying a generic lifetime parameter

Lifetime annotations have a unusual syntax: the naming of a lifetime parameter must start with an apostrophe ' and are usually all lowercase and very short, just like generics

Most people use 'a as the first lifetime annotation

The placement of the lifetime goes after the & reference using a space to separate the lifetime from the reference's type

Here is an example to an i32 reference

&i32        // a reference
&'a i32     // a reference with an explicit lifetime
&'a mut i32 // a mutable reference with an explicit lifetime

One annotation by itself has no meaning because cannot be a relationship to another (or multiple) reference(s)

Lifetime Annotations in Function Signatures

To use lifetime annotations in a function's signature you must first declare the generic lifetime parameter inside <> between the function name and the parameter list (just like generics)

In this case the constraint we have is that we want the returned reference to be valid as long as both parameters are valid

This will be the relationship between the lifetime of the parameters and the return reference.

Here is this implemented with the name 'a as the lifetime, it is added to each reference in the function signature

fn longest<'a>(x: &'a str, y: &'a str) -> &'a str {
    if x.len() > y.len() {
        x
    } else {
        y
    }
}

This code should compile now with the use of lifetime annotations

The function signature now tells Rust that for some lifetime 'a, the function takes two parameters, both of which are string slices that live at least as long as lifetime 'a

The signature also tells Rust that the string slice returned from the function will live at least as long as life 'a.

What this means is that the smaller of the lifetime returned by the longest function is the same as the smaller of the lifetime values referred to by the function arguments

These relationships are what we want Rust to use when analyzing this code

Lifetime annotations go in the signature NOT the body of the function

Lifetime annotations are part of the contract of the function, like types in the signature

This makes the lifetime analysis easier on the Rust compiler

If there is a problem in the signature it makes it easier to identify and express in an error as well, and give clear solutions

Here is another example of the use of the longest function

fn main() {
    let string1 = String::from("long string is long");

    {
        let string2 = String::from("xyz");
        let result = longest(string1.as_str(), string2.as_str());
        println!("The longest string is {result}");
    }
}

In this example the lifetime of the return value of the longest function is the same as string2 which means that after the inner scope or {} the reference is no longer valid

This is both due to string2, result (which stores the reference) and the function signature states that it only lives as long as the shortest function

The value reference in result is long string is long and the program will print The longest string is long string is long

In this example the program will not compile

fn main() {
    let string1 = String::from("long string is long");
    let result;
    {
        let string2 = String::from("xyz");
        result = longest(string1.as_str(), string2.as_str());
    }
    println!("The longest string is {result}");
}

This is due to string2 not living long enough for the reference in result to be used while in a valid state

Here is the error it would provide

$ cargo run
   Compiling chapter10 v0.1.0 (file:///projects/chapter10)
error[E0597]: `string2` does not live long enough
 --> src/main.rs:6:44
  |
5 |         let string2 = String::from("xyz");
  |             ------- binding `string2` declared here
6 |         result = longest(string1.as_str(), string2.as_str());
  |                                            ^^^^^^^ borrowed value does not live long enough
7 |     }
  |     - `string2` dropped here while still borrowed
8 |     println!("The longest string is {result}");
  |                                     -------- borrow later used here

For more information about this error, try `rustc --explain E0597`.
error: could not compile `chapter10` (bin "chapter10") due to 1 previous error

This also states that string2 would need to be valid until the print! macro. Hence why it states that it doesn't live long enough

Even though the reference in this case is to string1 the compiler and the function signature states that the lifetime of the return value is the same as the shortest lifetime

Thinking in Terms of Lifetimes

The way that you need to specify lifetime parameters depends on what your function is doing

For example if this was your function

fn longest<'a>(x: &'a str, y: &str) -> &'a str {
    x
}

This function's return reference's lifetime is the same as x so the returned reference only lives as long as what is passed into x

The return reference lifetime has no relations to the y lifetime

Any lifetime MUST have another relationship to another reference

Any lifetime in a function signature's return value MUST relate to AT LEAST one parameter

If it doesn't it would create a dangling reference, this is because the value would go out of scope at the end of the function

Here is an example of longest that creates both a dangling reference and an invalid lifetime

fn longest<'a>(x: &str, y: &str) -> &'a str {
    let result = String::from("really long string");
    result.as_str()
}

Here is the error

$ cargo run
   Compiling chapter10 v0.1.0 (file:///projects/chapter10)
error[E0515]: cannot return value referencing local variable `result`
  --> src/main.rs:11:5
   |
11 |     result.as_str()
   |     ------^^^^^^^^^
   |     |
   |     returns a value referencing data owned by the current function
   |     `result` is borrowed here

For more information about this error, try `rustc --explain E0515`.
error: could not compile `chapter10` (bin "chapter10") due to 1 previous error

The problem is that result goes out of scope and gets cleaned up at the end of the function.

We also try to return a reference at the end of the function to result

There is no way we can specify lifetime parameters that would change the dangling reference in this case

Rust will not let you create a dangling reference

The fix for this would be to transfer ownership out of the function

Lifetime Annotations in Struct Definitions