Docs changes: these functions are not unsafe.

* ngx_str_t::to_str
* Pool::allocate
* Buf and MutableBuf methods

Author: pchickey

nginx-sys/src/lib.rs

@@ -117,10 +117,6 @@ impl ngx_str_t {
 
     /// Convert the nginx string to a string slice (`&str`).
     ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
-    /// It assumes that the underlying `data` pointer is valid and points to a valid UTF-8 encoded string.
-    ///
     /// # Panics
     /// This function panics if the `ngx_str_t` is not valid UTF-8.
     ///

src/core/buffer.rs

@@ -13,18 +13,12 @@ pub trait Buffer {
     fn as_ngx_buf_mut(&mut self) -> *mut ngx_buf_t;
 
     /// Returns the buffer contents as a byte slice.
-    ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
     fn as_bytes(&self) -> &[u8] {
         let buf = self.as_ngx_buf();
         unsafe { slice::from_raw_parts((*buf).pos, self.len()) }
     }
 
     /// Returns the length of the buffer contents.
-    ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
     fn len(&self) -> usize {
         let buf = self.as_ngx_buf();
         unsafe {
@@ -68,9 +62,6 @@ pub trait Buffer {
 /// The `MutableBuffer` trait extends the `Buffer` trait and provides methods for working with a mutable buffer.
 pub trait MutableBuffer: Buffer {
     /// Returns a mutable reference to the buffer contents as a byte slice.
-    ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
     fn as_bytes_mut(&mut self) -> &mut [u8] {
         let buf = self.as_ngx_buf_mut();
         unsafe { slice::from_raw_parts_mut((*buf).pos, self.len()) }
@@ -105,9 +96,6 @@ impl Buffer for TemporaryBuffer {
 
 impl MutableBuffer for TemporaryBuffer {
     /// Returns a mutable reference to the buffer contents as a byte slice.
-    ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
     fn as_bytes_mut(&mut self) -> &mut [u8] {
         unsafe { slice::from_raw_parts_mut((*self.0).pos, self.len()) }
     }

src/core/pool.rs

@@ -135,9 +135,6 @@ impl Pool {
     /// Allocates memory for a value of a specified type and adds a cleanup handler to the memory pool.
     ///
     /// Returns a typed pointer to the allocated memory if successful, or a null pointer if allocation or cleanup handler addition fails.
-    ///
-    /// # Safety
-    /// This function is marked as unsafe because it involves raw pointer manipulation.
     pub fn allocate<T>(&mut self, value: T) -> *mut T {
         unsafe {
             let p = self.alloc(mem::size_of::<T>()) as *mut T;