ziglang/zig
260
5.9k
Fork
You've already forked zig
765

Add @backingInt and @fromBackingInt for converting between packed structs, packed unions, enums and their integer representations #35602

Open
opened 2026年06月03日 14:11:45 +02:00 by justusk · 4 comments
Member
Copy link

Migrated from: https://github.com/ziglang/zig/issues/18882


Accepted proposal (as per this comment):

  • Remove @intFromEnum, replacing it with a new builtin @backingInt. That builtin accepts enums and bitpacks (packed struct/packed union).
  • Remove @enumFromInt, replacing it with a new builtin @fromBackingInt. That builtin can return enums and bitpacks (packed struct/packed union).
  • Allow @bitCast to accept and/or return enum types. This accepts the sub-proposal given in this comment.

This also effectively accepts https://github.com/ziglang/zig/issues/22712, because @fromBackingInt will provide a result type to its operand.

Migrated from: https://github.com/ziglang/zig/issues/18882 --- Accepted proposal (as per [this comment](https://github.com/ziglang/zig/issues/18882#issuecomment-4361640243)): - Remove `@intFromEnum`, replacing it with a new builtin `@backingInt`. That builtin accepts enums and bitpacks (packed struct/packed union). - Remove `@enumFromInt`, replacing it with a new builtin `@fromBackingInt`. That builtin can return enums and bitpacks (packed struct/packed union). - Allow `@bitCast` to accept and/or return enum types. This accepts the sub-proposal given in [this comment](https://github.com/ziglang/zig/issues/14367#issuecomment-4316671616). This also effectively accepts https://github.com/ziglang/zig/issues/22712, because `@fromBackingInt` will provide a result type to its operand.
Author
Member
Copy link

I've migrated this issue because for me there are a few open questions remaining:

  • This regresses using @intFromEnum directly on tagged unions, as @backingInt only works on packed unions. Is that intentional?

  • What does 'removing all restrictions' from @bitCast mean? Should it check whether a tag value is valid when casting to an exhaustive enum or just not perform any safety checks at all? What about pointers and error sets?

  • What about enums/bitpacks with inferred backing integers? Should @backingInt/@fromBackingInt work on those or should one use @bitCast with an explicit result type instead?

  • Bonus question: What about invalid enum tag values? If @bitCast doesn't perform any safety checks they can now be constructed without much friction, and as #35486 and #35448 show they can already be constructed easily as part of bitpacks today. How should they be handled?

I've migrated this issue because for me there are a few open questions remaining: - This regresses using `@intFromEnum` directly on tagged unions, as `@backingInt` only works on packed unions. Is that intentional? - What does 'removing all restrictions' from `@bitCast` mean? Should it check whether a tag value is valid when casting to an exhaustive enum or just not perform any safety checks at all? What about pointers and error sets? - What about enums/bitpacks with inferred backing integers? Should `@backingInt`/`@fromBackingInt` work on those or should one use `@bitCast` with an explicit result type instead? - Bonus question: What about invalid enum tag values? If `@bitCast` doesn't perform any safety checks they can now be constructed without much friction, and as #35486 and #35448 show they can already be constructed easily as part of bitpacks today. How should they be handled?
Owner
Copy link

A lot of the below isn't necessarily a consensus within the core team (we've not discussed it), but rather just my own opinions. I think that an initial implementation of this which works the way I've written here would likely be accepted.


This regresses using @intFromEnum directly on tagged unions, as @backingInt only works on packed unions. Is that intentional?

Unintentional, sorry for not catching that! @backingInt should also work on tagged unions by just using the tag.

What does 'removing all restrictions' from @bitCast mean?

Hm, did I use this wording somewhere? I can't immediately see it.

Should it check whether a tag value is valid when casting to an exhaustive enum [...] ?

I think from a language perspective it might make the most sense to not do this safety check and to instead return undefined if the tag is not valid. However, since we don't currently have runtime safety for undefined (tracked by #63), that would probably be a major footgun right now. Therefore, for now, let's say that there is a safety check for this (the same one as @fromBackingInt).

What about pointers...

I assume this is referring to pointer alignment checks? I would say the same as above---i.e. for now let's include the safety-check, but in the future we might want to revisit that decision.

...and error sets?

Error sets are not and should not be accepted by @bitCast (neither as the operand type nor the result type). The bit-level representation and byte-level ("in memory") representation of errors are both considered to be opaque and implementation-defined, so the only valid way to convert them to/from the underlying error code integer is @errorFromInt/@intFromError.

What about enums/bitpacks with inferred backing integers?

I would suggest not allowing @backingInt/@fromBackingInt on those. With this, we come closer to removing the concept of "inferred backing types" from Zig, which I think is a good idea and meshes super nicely with #24714---in such a world, given a packed struct { x: u8 }, we can say that the type is 8 bits long, but we cannot say that it is backed by specifically a u8. It's a good idea to be initially conservative with what we allow, because we can relax a restriction in future without breaking anyone's code, but adding a restriction is necessarily breaking. In this case, I would definitely argue that it makes sense to require people to use @bitCast for these types so that they are forced to acknowledge the type they are using!

Bonus question: What about invalid enum tag values?

Firstly, I should note that I think I've said contradictory things about this before, so sorry for any confusion. I'm not 100% sure where I think the language should land here, but I would say that for now, as I mentioned above, @bitCast should have a safety check for this.

As you correctly note, the language problem still very much exists, per #35486 and #35448. The solution to this is not obvious, so definitely don't try to deal with it while implementing this proposal! At some point I'll try to speak to the rest of the core team about this design issue so that we can put together a proposal for the semantics here.

A lot of the below isn't necessarily a consensus within the core team (we've not discussed it), but rather just my own opinions. I think that an initial implementation of this which works the way I've written here would likely be accepted. --- > This regresses using `@intFromEnum` directly on tagged unions, as `@backingInt` only works on packed unions. Is that intentional? Unintentional, sorry for not catching that! `@backingInt` should also work on tagged unions by just using the tag. > What does 'removing all restrictions' from `@bitCast` mean? Hm, did I use this wording somewhere? I can't immediately see it. > Should it check whether a tag value is valid when casting to an exhaustive enum [...] ? I think from a language perspective it *might* make the most sense to not do this safety check and to instead return `undefined` if the tag is not valid. However, since we don't currently have runtime safety for `undefined` (tracked by [#63](https://github.com/ziglang/zig/issues/63)), that would probably be a major footgun right now. Therefore, for now, let's say that there *is* a safety check for this (the same one as `@fromBackingInt`). > What about pointers... I assume this is referring to pointer alignment checks? I would say the same as above---i.e. for now let's include the safety-check, but in the future we might want to revisit that decision. > ...and error sets? Error sets are not and should not be accepted by `@bitCast` (neither as the operand type nor the result type). The bit-level representation and byte-level ("in memory") representation of errors are both considered to be opaque and implementation-defined, so the only valid way to convert them to/from the underlying error code integer is `@errorFromInt`/`@intFromError`. > What about enums/bitpacks with inferred backing integers? I would suggest *not* allowing `@backingInt`/`@fromBackingInt` on those. With this, we come closer to removing the concept of "inferred backing types" from Zig, which I think is a good idea and meshes super nicely with [#24714](https://github.com/ziglang/zig/issues/24714)---in such a world, given a `packed struct { x: u8 }`, we *can* say that the type is 8 bits long, but we *cannot* say that it is backed by specifically a `u8`. It's a good idea to be initially conservative with what we allow, because we can relax a restriction in future without breaking anyone's code, but *adding* a restriction is necessarily breaking. In this case, I would definitely argue that it makes sense to require people to use `@bitCast` for these types so that they are forced to acknowledge the type they are using! > Bonus question: What about invalid enum tag values? Firstly, I should note that I think I've said contradictory things about this before, so sorry for any confusion. I'm not 100% sure where I think the language should land here, but I would say that **for now**, as I mentioned above, `@bitCast` should have a safety check for this. As you correctly note, the language problem still very much exists, per #35486 and #35448. The solution to this is not obvious, so definitely don't try to deal with it while implementing this proposal! At some point I'll try to speak to the rest of the core team about this design issue so that we can put together a proposal for the semantics here.
Author
Member
Copy link

What does 'removing all restrictions' from @bitCast mean?

Hm, did I use this wording somewhere? I can't immediately see it.

Sorry the exact wording was from memory didn't double check, I'm referring to this comment by Andrew

What about pointers...

I assume this is referring to pointer alignment checks? I would say the same as above---i.e. for now let's include the safety-check, but in the future we might want to revisit that decision.

I was referring to pointers working at all with @bitCast, I'm guessing the answer is 'yes'?

If yes, what's the plan for @intFromPtr and @ptrFromInt? Should @bitCast on pointers just be the same but without the usize result type?

>> What does 'removing all restrictions' from @bitCast mean? > > Hm, did I use this wording somewhere? I can't immediately see it. Sorry the exact wording was from memory didn't double check, I'm referring to [this comment](https://github.com/ziglang/zig/issues/14367#issuecomment-4316671616) by Andrew >> What about pointers... > > I assume this is referring to pointer alignment checks? I would say the same as above---i.e. for now let's include the safety-check, but in the future we might want to revisit that decision. I was referring to pointers working at all with `@bitCast`, I'm guessing the answer is 'yes'? If yes, what's the plan for `@intFromPtr` and `@ptrFromInt`? Should `@bitCast` on pointers just be the same but without the `usize` result type?
Owner
Copy link

Oh wait, sorry, brain was clearly slightly switched off when I wrote my comment; pointers should not be legal as @bitCast operand or destination type! (This actually was agreed internally---one reason for this is because avoiding treating pointers as simple sequences of bits makes for a better provenance model and may make it easier to support CHERI architectures in the future.)

Oh wait, sorry, brain was clearly slightly switched off when I wrote my comment; pointers should not be legal as `@bitCast` operand or destination type! (This actually *was* agreed internally---one reason for this is because avoiding treating pointers as simple sequences of bits makes for a better provenance model and may make it easier to support CHERI architectures in the future.)
Sign in to join this conversation.
No Branch/Tag specified
master
elfv2
spork8
restricted
0.16.x
panic-rewrite
parking-futex-lockfree
windows-Io-cleanup
Io-watch
ParseCommandLineOptions
windows-async-files
poll-ring
debug-file-leaks-differently
debug-file-leaks
ProcessPrng
elfv2-dyn
jobserver
threadtheft
io-threaded-no-queue
0.15.x
Io.net
comptime-allocator
restricted-function-pointers
cli
wasm-linker-writer
wrangle-writer-buffering
sha1-stream
async-await-demo
fixes
0.14.x
ast-node-methods
macos-debug-info
make-vs-configure
fuzz-macos
sans-aro
ArrayList-reserve
incr-bug
llvm-ir-nosanitize-metadata
ci-tarballs
ci-scripts
threadpool
0.12.x
new-pkg-hash
json-diagnostics
more-doctests
rework-comptime-mutation
0.11.x
ci-perf-comment
stage2-async
0.10.x
autofix
0.9.x
aro
hcs
0.8.x
0.7.x
0.16.0
0.15.2
0.15.1
0.15.0
0.14.1
0.14.0
0.12.1
0.13.0
0.12.0
0.11.0
0.10.1
0.10.0
0.9.1
0.9.0
0.8.1
0.8.0
0.7.1
0.7.0
0.6.0
0.5.0
0.4.0
0.3.0
0.2.0
0.1.1
0.1.0
Labels
Clear labels
abi/f32
abi/ilp32
abi/sf
accepted
This proposal is planned.
arch/21k
arch/6502
arch/aarch64
arch/alpha
arch/amdgcn
arch/arc
arch/arc32
arch/arc64
arch/arm
arch/avr
arch/bfin
arch/bpf
arch/colossus
arch/cris
arch/csky
arch/dlx
arch/epiphany
arch/fr30
arch/frv
arch/hexagon
arch/hppa
arch/hppa64
arch/ia64
arch/kalimba
arch/kvx
arch/lanai
arch/lm32
arch/loongarch32
arch/loongarch64
arch/m32r
arch/m68k
arch/m88k
arch/mcore
arch/microblaze
arch/mips
arch/mips64
arch/mmix
arch/moxie
arch/mrisc32
arch/msp430
arch/nds32
arch/ns32k
arch/nvptx
arch/or1k
arch/powerpc
arch/powerpc64
arch/propeller
arch/riscv32
arch/riscv64
arch/rl78
arch/rx
arch/s390x
arch/sh
arch/sparc
arch/sparc64
arch/spirv
arch/spu
arch/tricore
arch/v850
arch/vax
arch/vc4
arch/ve
arch/wasm
arch/x86
arch/x86_64
arch/xcore
arch/xtensa
autodoc
The web application for interactive documentation and generation of its assets.
backend/c
The C backend outputs C source code.
backend/llvm
The LLVM backend outputs an LLVM bitcode module.
backend/self-hosted
The self-hosted backends produce machine code directly.
binutils
Zig's included binary utilities: zig ar, zig dlltool, zig lib, zig ranlib, zig objcopy, and zig rc.
breaking
Implementing this issue could cause existing code to no longer compile or have different behavior.
build system
The Zig build system - zig build, std.Build, the build runner, and package management.
debug info
An issue related to debug information (e.g. DWARF) produced by the Zig compiler.
docs
An issue with documentation, e.g. the language reference or standard library doc comments.
error message
This issue points out an error message that is unhelpful and should be improved.
frontend
Tokenization, parsing, AstGen, ZonGen, Sema, Legalize, and Liveness.
fuzzing
An issue related to Zig's integrated fuzz testing.
incremental
Reuse of internal compiler state for faster compilation.
lib/c
This issue relates to Zig's libc implementation and/or vendored libcs.
lib/compiler-rt
This issue relates to Zig's compiler-rt library.
lib/cxx
This issue relates to Zig's vendored libc++ and/or libc++abi.
lib/std
This issue relates to Zig's standard library.
lib/tsan
This issue relates to Zig's vendored libtsan.
lib/ubsan-rt
This issue relates to Zig's ubsan-rt library.
lib/unwind
This issue relates to Zig's vendored libunwind.
linking
Zig's integrated object file and incremental linker.
miscompilation
The compiler reports success but produces semantically incorrect code.
os/android
os/contiki
os/dragonfly
os/driverkit
os/emscripten
os/freebsd
os/fuchsia
os/haiku
os/hermit
os/hurd
os/illumos
os/ios
os/linux
os/maccatalyst
os/macos
os/managarm
os/netbsd
os/ohos
os/openbsd
os/plan9
os/redox
os/rtems
os/serenity
os/tvos
os/uefi
os/visionos
os/wasi
os/watchos
os/windows
proposal
This issue suggests language modifications. If it also has the "accepted" label then it is planned.
release notes
This issue or pull request should be mentioned in the release notes.
testing
This issue is related to testing the compiler, standard library, or other parts of Zig.
zig cc
Zig as a drop-in C-family compiler.
zig fmt
The Zig source code formatter.
zig reduce
The Zig source code reduction tool.
bounty
https://ziglang.org/news/announcing-donor-bounties
bug
Observed behavior contradicts documented or intended behavior.
contributor-friendly
This issue is limited in scope and/or knowledge of project internals.
downstream
An issue with a third-party project that uses this project.
enhancement
Solving this issue will likely involve adding new logic or components to the codebase.
infra
An issue related to project infrastructure, e.g. continuous integration.
optimization
A task to improve performance and/or resource usage.
question
No questions on the issue tracker; use a community space instead.
regression
Something that used to work in a previous version stopped working
upstream
An issue with a third-party project that this project uses.
use case
Describes a real use case that is difficult or impossible, but does not propose a solution.
No labels
abi/f32
abi/ilp32
abi/sf
accepted
arch/21k
arch/6502
arch/aarch64
arch/alpha
arch/amdgcn
arch/arc
arch/arc32
arch/arc64
arch/arm
arch/avr
arch/bfin
arch/bpf
arch/colossus
arch/cris
arch/csky
arch/dlx
arch/epiphany
arch/fr30
arch/frv
arch/hexagon
arch/hppa
arch/hppa64
arch/ia64
arch/kalimba
arch/kvx
arch/lanai
arch/lm32
arch/loongarch32
arch/loongarch64
arch/m32r
arch/m68k
arch/m88k
arch/mcore
arch/microblaze
arch/mips
arch/mips64
arch/mmix
arch/moxie
arch/mrisc32
arch/msp430
arch/nds32
arch/ns32k
arch/nvptx
arch/or1k
arch/powerpc
arch/powerpc64
arch/propeller
arch/riscv32
arch/riscv64
arch/rl78
arch/rx
arch/s390x
arch/sh
arch/sparc
arch/sparc64
arch/spirv
arch/spu
arch/tricore
arch/v850
arch/vax
arch/vc4
arch/ve
arch/wasm
arch/x86
arch/x86_64
arch/xcore
arch/xtensa
autodoc
backend/c
backend/llvm
backend/self-hosted
binutils
breaking
build system
debug info
docs
error message
frontend
fuzzing
incremental
lib/c
lib/compiler-rt
lib/cxx
lib/std
lib/tsan
lib/ubsan-rt
lib/unwind
linking
miscompilation
os/android
os/contiki
os/dragonfly
os/driverkit
os/emscripten
os/freebsd
os/fuchsia
os/haiku
os/hermit
os/hurd
os/illumos
os/ios
os/linux
os/maccatalyst
os/macos
os/managarm
os/netbsd
os/ohos
os/openbsd
os/plan9
os/redox
os/rtems
os/serenity
os/tvos
os/uefi
os/visionos
os/wasi
os/watchos
os/windows
proposal
release notes
testing
zig cc
zig fmt
zig reduce
bounty
bug
contributor-friendly
downstream
enhancement
infra
optimization
question
regression
upstream
use case
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
ziglang/zig#35602
Reference in a new issue
ziglang/zig
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?