Rust 1.62.1 addresses a few recent regressions in the compiler and standard library, and also mitigates a CPU vulnerability on Intel SGX.

• The compiler fixed unsound function coercions involving impl Trait return types.
• The compiler fixed an incremental compilation bug with async fn lifetimes.
• Windows added a fallback for overlapped I/O in synchronous reads and writes.
• The x86_64-fortanix-unknown-sgx target added a mitigation for the MMIO stale data vulnerability, advisory INTEL-SA-00615.

Language

• Stabilize #[derive(Default)] on enums with a #[default] variant
• Teach flow sensitive checks that visibly uninhabited call expressions never return
• Fix constants not getting dropped if part of a diverging expression
• Support unit struct/enum variant in destructuring assignment
• Remove mutable_borrow_reservation_conflict lint and allow the code pattern
• const functions may now specify extern "C" or extern "Rust"

Compiler

• linker: Stop using whole-archive on dependencies of dylibs
• Make unaligned_references lint deny-by-default This lint is also a future compatibility lint, and is expected to eventually become a hard error.
• Only add codegen backend to dep info if -Zbinary-dep-depinfo is used
• Reject #[thread_local] attribute on non-static items
• Add tier 3 aarch64-pc-windows-gnullvm and x86_64-pc-windows-gnullvm targets*
• Implement a lint to warn about unused macro rules
• Promote x86_64-unknown-none target to Tier 2*

* Refer to Rust's platform support page for more information on Rust's tiered platform support.

Libraries

• Windows: Use a pipe relay for chaining pipes
• Replace Linux Mutex and Condvar with futex based ones.
• Replace RwLock by a futex based one on Linux
• std: directly use pthread in UNIX parker implementation

Stabilized APIs

• bool::then_some
• f32::total_cmp
• f64::total_cmp
• Stdin::lines
• windows::CommandExt::raw_arg
• impl<T: Default> Default for AssertUnwindSafe<T>
• From<Rc<str>> for Rc<[u8]>
• From<Arc<str>> for Arc<[u8]>
• FusedIterator for EncodeWide
• RDM intrinsics on aarch64

Clippy

• Create clippy lint against unexpectedly late drop for temporaries in match scrutinee expressions

Cargo

• Added the cargo add command for adding dependencies to Cargo.toml from the command-line. docs
• Package ID specs now support name@version syntax in addition to the previous name:version to align with the behavior in cargo add and other tools. cargo install and cargo yank also now support this syntax so the version does not need to passed as a separate flag.
• The git and registry directories in Cargo's home directory (usually ~/.cargo) are now marked as cache directories so that they are not included in backups or content indexing (on Windows).
• Added automatic @ argfile support, which will use "response files" if the command-line to rustc exceeds the operating system's limit.

Compatibility Notes

• cargo test now passes --target to rustdoc if the specified target is the same as the host target. #10594
• rustdoc: doctests are now run on unexported macro_rules! macros, matching other private items
• rustdoc: Remove .woff font files
• Enforce Copy bounds for repeat elements while considering lifetimes
• Windows: Fix potential unsoundness by aborting if File reads or writes cannot complete synchronously.

Internal Changes

• Unify ReentrantMutex implementations across all platforms

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

Language

• const fn signatures can now include generic trait bounds
• const fn signatures can now use impl Trait in argument and return position
• Function pointers can now be created, cast, and passed around in a const fn
• Recursive calls can now set the value of a function's opaque impl Trait return type

Compiler

• Linking modifier syntax in #[link] attributes and on the command line, as well as the whole-archive modifier specifically, are now supported
• The char type is now described as UTF-32 in debuginfo
• The #[target_feature] attribute can now be used with aarch64 features
• X86 #[target_feature = "adx"] is now stable

Libraries

• ManuallyDrop<T> is now documented to have the same layout as T
• #[ignore = "..."] messages are printed when running tests
• Consistently show absent stdio handles on Windows as NULL handles
• Make std::io::stdio::lock() return 'static handles. Previously, the creation of locked handles to stdin/stdout/stderr would borrow the handles being locked, which prevented writing let out = std::io::stdout().lock(); because out would outlive the return value of stdout(). Such code now works, eliminating a common pitfall that affected many Rust users.
• Vec::from_raw_parts is now less restrictive about its inputs
• std::thread::available_parallelism now takes cgroup quotas into account. Since available_parallelism is often used to create a thread pool for parallel computation, which may be CPU-bound for performance, available_parallelism will return a value consistent with the ability to use that many threads continuously, if possible. For instance, in a container with 8 virtual CPUs but quotas only allowing for 50% usage, available_parallelism will return 4.

Stabilized APIs

• Pin::static_mut
• Pin::static_ref
• Vec::retain_mut
• VecDeque::retain_mut
• Write for Cursor<[u8; N]>
• std::os::unix::net::SocketAddr::from_pathname
• std::process::ExitCode and std::process::Termination. The stabilization of these two APIs now makes it possible for programs to return errors from main with custom exit codes.
• std::thread::JoinHandle::is_finished

These APIs are now usable in const contexts:

• <*const T>::offset and <*mut T>::offset
• <*const T>::wrapping_offset and <*mut T>::wrapping_offset
• <*const T>::add and <*mut T>::add
• <*const T>::sub and <*mut T>::sub
• <*const T>::wrapping_add and <*mut T>::wrapping_add
• <*const T>::wrapping_sub and <*mut T>::wrapping_sub
• <[T]>::as_mut_ptr
• <[T]>::as_ptr_range
• <[T]>::as_mut_ptr_range

Cargo

No feature changes, but see compatibility notes.

Compatibility Notes

• Previously native static libraries were linked as whole-archive in some cases, but now rustc tries not to use whole-archive unless explicitly requested. This change may result in linking errors in some cases. To fix such errors, native libraries linked from the command line, build scripts, or #[link] attributes need to
  • (more common) either be reordered to respect dependencies between them (if a depends on b then a should go first and b second)
  • (less common) or be updated to use the +whole-archive modifier.
• Catching a second unwind from FFI code while cleaning up from a Rust panic now causes the process to abort
• Proc macros no longer see ident matchers wrapped in groups
• The number of # in r# raw string literals is now required to be less than 256
• When checking that a dyn type satisfies a trait bound, supertrait bounds are now enforced
• cargo vendor now only accepts one value for each --sync flag
• cfg predicates in all() and any() are always evaluated to detect errors, instead of short-circuiting. The compatibility considerations here arise in nightly-only code that used the short-circuiting behavior of all to write something like cfg(all(feature = "nightly", syntax-requiring-nightly)), which will now fail to compile. Instead, use either cfg_attr(feature = "nightly", ...) or nested uses of cfg.
• bootstrap: static-libstdcpp is now enabled by default, and can now be disabled when llvm-tools is enabled

Internal Changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• debuginfo: Refactor debuginfo generation for types
• Remove the everybody loops pass

Language

• Stabilize #[cfg(panic = "...")] for either "unwind" or "abort".
• Stabilize #[cfg(target_has_atomic = "...")] for each integer size and "ptr".

Compiler

• Enable combining +crt-static and relocation-model=pic on x86_64-unknown-linux-gnu
• Fixes wrong unreachable_pub lints on nested and glob public reexport
• Stabilize -Z instrument-coverage as -C instrument-coverage
• Stabilize -Z print-link-args as --print link-args
• Add new Tier 3 target mips64-openwrt-linux-musl*
• Add new Tier 3 target armv7-unknown-linux-uclibceabi (softfloat)*
• Fix invalid removal of newlines from doc comments
• Add kernel target for RustyHermit
• Deny mixing bin crate type with lib crate types
• Make rustc use RUST_BACKTRACE=full by default
• Upgrade to LLVM 14

* Refer to Rust's platform support page for more information on Rust's tiered platform support.

Libraries

• Guarantee call order for sort_by_cached_key
• Improve Duration::try_from_secs_f32/f64 accuracy by directly processing exponent and mantissa
• Make Instant::{duration_since, elapsed, sub} saturating
• Remove non-monotonic clocks workarounds in Instant::now
• Make BuildHasherDefault, iter::Empty and future::Pending covariant

Stabilized APIs

• Arc::new_cyclic
• Rc::new_cyclic
• slice::EscapeAscii
• <[u8]>::escape_ascii
• u8::escape_ascii
• Vec::spare_capacity_mut
• MaybeUninit::assume_init_drop
• MaybeUninit::assume_init_read
• i8::abs_diff
• i16::abs_diff
• i32::abs_diff
• i64::abs_diff
• i128::abs_diff
• isize::abs_diff
• u8::abs_diff
• u16::abs_diff
• u32::abs_diff
• u64::abs_diff
• u128::abs_diff
• usize::abs_diff
• Display for io::ErrorKind
• From<u8> for ExitCode
• Not for ! (the "never" type)
• OpAssign<$t> for Wrapping<$t>
• arch::is_aarch64_feature_detected!

Cargo

• Port cargo from toml-rs to toml_edit
• Stabilize -Ztimings as --timings
• Stabilize namespaced and weak dependency features.
• Accept more cargo:rustc-link-arg-* types from build script output.
• cargo-new should not add ignore rule on Cargo.lock inside subdirs

Misc

• Ship docs on Tier 2 platforms by reusing the closest Tier 1 platform docs
• Drop rustc-docs from complete profile
• bootstrap: tidy up flag handling for llvm build

Compatibility Notes

• Remove compiler-rt linking hack on Android
• Mitigations for platforms with non-monotonic clocks have been removed from Instant::now. On platforms that don't provide monotonic clocks, an instant is not guaranteed to be greater than an earlier instant anymore.
• Instant::{duration_since, elapsed, sub} do not panic anymore on underflow, saturating to 0 instead. In the real world the panic happened mostly on platforms with buggy monotonic clock implementations rather than catching programming errors like reversing the start and end times. Such programming errors will now results in 0 rather than a panic.
• In a future release we're planning to increase the baseline requirements for the Linux kernel to version 3.2, and for glibc to version 2.17. We'd love your feedback in PR #95026.

Internal Changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• Switch all libraries to the 2021 edition

Language

• Stabilize default arguments for const parameters and remove the ordering restriction for type and const parameters
• Stabilize destructuring assignment
• Relax private in public lint on generic bounds and where clauses of trait impls
• Stabilize asm! and global_asm! for x86, x86_64, ARM, Aarch64, and RISC-V

Compiler

• Stabilize new symbol mangling format, leaving it opt-in (-Csymbol-mangling-version=v0)
• Emit LLVM optimization remarks when enabled with -Cremark
• Fix sparc64 ABI for aggregates with floating point members
• Warn when a #[test]-like built-in attribute macro is present multiple times.
• Add support for riscv64gc-unknown-freebsd
• Stabilize -Z emit-future-incompat as --json future-incompat
• Soft disable incremental compilation

This release disables incremental compilation, unless the user has explicitly opted in via the newly added RUSTC_FORCE_INCREMENTAL=1 environment variable. This is due to a known and relatively frequently occurring bug in incremental compilation, which causes builds to issue internal compiler errors. This particular bug is already fixed on nightly, but that fix has not yet rolled out to stable and is deemed too risky for a direct stable backport.

As always, we encourage users to test with nightly and report bugs so that we can track failures and fix issues earlier.

See 94124 for more details.

Libraries

• Remove unnecessary bounds for some Hash{Map,Set} methods

Stabilized APIs

• std::thread::available_parallelism
• Result::copied
• Result::cloned
• arch::asm!
• arch::global_asm!
• ops::ControlFlow::is_break
• ops::ControlFlow::is_continue
• TryFrom<char> for u8
• char::TryFromCharError implementing Clone, Debug, Display, PartialEq, Copy, Eq, Error
• iter::zip
• NonZeroU8::is_power_of_two
• NonZeroU16::is_power_of_two
• NonZeroU32::is_power_of_two
• NonZeroU64::is_power_of_two
• NonZeroU128::is_power_of_two
• NonZeroUsize::is_power_of_two
• DoubleEndedIterator for ToLowercase
• DoubleEndedIterator for ToUppercase
• TryFrom<&mut [T]> for [T; N]
• UnwindSafe for Once
• RefUnwindSafe for Once
• armv8 neon intrinsics for aarch64

Const-stable:

• mem::MaybeUninit::as_ptr
• mem::MaybeUninit::assume_init
• mem::MaybeUninit::assume_init_ref
• ffi::CStr::from_bytes_with_nul_unchecked

Cargo

• Stabilize the strip profile option
• Stabilize future-incompat-report
• Support abbreviating --release as -r
• Support term.quiet configuration
• Remove --host from cargo {publish,search,login}

Compatibility Notes

• Refactor weak symbols in std::sys::unix This may add new, versioned, symbols when building with a newer glibc, as the standard library uses weak linkage rather than dynamically attempting to load certain symbols at runtime.
• Deprecate crate_type and crate_name nested inside #![cfg_attr] This adds a future compatibility lint to supporting the use of cfg_attr wrapping either crate_type or crate_name specification within Rust files; it is recommended that users migrate to setting the equivalent command line flags.
• Remove effect of #[no_link] attribute on name resolution This may expose new names, leading to conflicts with preexisting names in a given namespace and a compilation failure.
• Cargo will document libraries before binaries.
• Respect doc=false in dependencies, not just the root crate
• Weaken guarantee around advancing underlying iterators in zip
• Make split_inclusive() on an empty slice yield an empty output
• Update std::env::temp_dir to use GetTempPath2 on Windows when available.
• unreachable! was updated to match other formatting macro behavior on Rust 2021

Internal Changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• Fix many cases of normalization-related ICEs

• Replace dominators algorithm with simple Lengauer-Tarjan

• Store liveness in interval sets for region inference

• Remove in_band_lifetimes from the compiler and standard library, in preparation for removing this unstable feature.

• Fix race condition in std::fs::remove_dir_all (CVE-2022-21658)
• Handle captured arguments in the useless_format Clippy lint
• Move non_send_fields_in_send_ty Clippy lint to nursery
• Fix wrong error message displayed when some imports are missing
• Fix rustfmt not formatting generated files from stdin

Language

• Format strings can now capture arguments simply by writing {ident} in the string. This works in all macros accepting format strings. Support for this in panic! (panic!("{ident}")) requires the 2021 edition; panic invocations in previous editions that appear to be trying to use this will result in a warning lint about not having the intended effect.
• *const T pointers can now be dereferenced in const contexts.
• The rules for when a generic struct implements Unsize have been relaxed.

Compiler

• Add LLVM CFI support to the Rust compiler
• Stabilize -Z strip as -C strip. Note that while release builds already don't add debug symbols for the code you compile, the compiled standard library that ships with Rust includes debug symbols, so you may want to use the strip option to remove these symbols to produce smaller release binaries. Note that this release only includes support in rustc, not directly in cargo.
• Add support for LLVM coverage mapping format versions 5 and 6
• Emit LLVM optimization remarks when enabled with -Cremark
• Update the minimum external LLVM to 12
• Add x86_64-unknown-none at Tier 3*
• Build musl dist artifacts with debuginfo enabled. When building release binaries using musl, you may want to use the newly stabilized strip option to remove these debug symbols, reducing the size of your binaries.
• Don't abort compilation after giving a lint error
• Error messages point at the source of trait bound obligations in more places

* Refer to Rust's platform support page for more information on Rust's tiered platform support.

Libraries

• All remaining functions in the standard library have #[must_use] annotations where appropriate, producing a warning when ignoring their return value. This helps catch mistakes such as expecting a function to mutate a value in place rather than return a new value.
• Paths are automatically canonicalized on Windows for operations that support it
• Re-enable debug checks for copy and copy_nonoverlapping
• Implement RefUnwindSafe for Rc<T>
• Make RSplit<T, P>: Clone not require T: Clone
• Implement Termination for Result<Infallible, E>. This allows writing fn main() -> Result<Infallible, ErrorType>, for a program whose successful exits never involve returning from main (for instance, a program that calls exit, or that uses exec to run another program).

Stabilized APIs

• Metadata::is_symlink
• Path::is_symlink
• {integer}::saturating_div
• Option::unwrap_unchecked
• Result::unwrap_unchecked
• Result::unwrap_err_unchecked
• File::options

These APIs are now usable in const contexts:

• Duration::new
• Duration::checked_add
• Duration::saturating_add
• Duration::checked_sub
• Duration::saturating_sub
• Duration::checked_mul
• Duration::saturating_mul
• Duration::checked_div

Cargo

• Add --message-format for install command
• Warn when alias shadows external subcommand

Rustdoc

• Show all Deref implementations recursively in rustdoc
• Use computed visibility in rustdoc

Compatibility Notes

• Try all stable method candidates first before trying unstable ones. This change ensures that adding new nightly-only methods to the Rust standard library will not break code invoking methods of the same name from traits outside the standard library.
• Windows: std::process::Command will no longer search the current directory for executables.
• All proc-macro backward-compatibility lints are now deny-by-default.
• proc_macro: Append .0 to unsuffixed float if it would otherwise become int token
• Refactor weak symbols in std::sys::unix. This optimizes accesses to glibc functions, by avoiding the use of dlopen. This does not increase the minimum expected version of glibc. However, software distributions that use symbol versions to detect library dependencies, and which take weak symbols into account in that analysis, may detect rust binaries as requiring newer versions of glibc.
• rustdoc now rejects some unexpected semicolons in doctests

Internal Changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• Implement coherence checks for negative trait impls
• Add rustc lint, warning when iterating over hashmaps
• Optimize live point computation
• Enable verification for 1/32nd of queries loaded from disk
• Implement version of normalize_erasing_regions that allows for normalization failure

Language

• Macro attributes may follow #[derive] and will see the original (pre-cfg) input.
• Accept curly-brace macros in expressions, like m!{ .. }.method() and m!{ .. }?.
• Allow panicking in constant evaluation.
• Ignore derived Clone and Debug implementations during dead code analysis.

Compiler

• Create more accurate debuginfo for vtables.
• Add armv6k-nintendo-3ds at Tier 3*.
• Add armv7-unknown-linux-uclibceabihf at Tier 3*.
• Add m68k-unknown-linux-gnu at Tier 3*.
• Add SOLID targets at Tier 3*: aarch64-kmc-solid_asp3, armv7a-kmc-solid_asp3-eabi, armv7a-kmc-solid_asp3-eabihf

* Refer to Rust's platform support page for more information on Rust's tiered platform support.

Libraries

• Avoid allocations and copying in Vec::leak
• Add #[repr(i8)] to Ordering
• Optimize File::read_to_end and read_to_string
• Update to Unicode 14.0
• Many more functions are marked #[must_use], producing a warning when ignoring their return value. This helps catch mistakes such as expecting a function to mutate a value in place rather than return a new value.

Stabilised APIs

• [T; N]::as_mut_slice
• [T; N]::as_slice
• collections::TryReserveError
• HashMap::try_reserve
• HashSet::try_reserve
• String::try_reserve
• String::try_reserve_exact
• Vec::try_reserve
• Vec::try_reserve_exact
• VecDeque::try_reserve
• VecDeque::try_reserve_exact
• Iterator::map_while
• iter::MapWhile
• proc_macro::is_available
• Command::get_program
• Command::get_args
• Command::get_envs
• Command::get_current_dir
• CommandArgs
• CommandEnvs

These APIs are now usable in const contexts:

• hint::unreachable_unchecked

Cargo

• Stabilize custom profiles

Compatibility notes

• Ignore derived Clone and Debug implementations during dead code analysis. This will break some builds that set #![deny(dead_code)].

Internal changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• Added an experimental backend for codegen with libgccjit.

• New lints to detect the presence of bidirectional-override Unicode codepoints in the compiled source code (CVE-2021-42574)

Language

• The 2021 Edition is now stable. See the edition guide for more details.
• The pattern in binding @ pattern can now also introduce new bindings.
• Union field access is permitted in const fn.

Compiler

• Upgrade to LLVM 13.
• Support memory, address, and thread sanitizers on aarch64-unknown-freebsd.
• Allow specifying a deployment target version for all iOS targets
• Warnings can be forced on with --force-warn. This feature is primarily intended for usage by cargo fix, rather than end users.
• Promote aarch64-apple-ios-sim to Tier 2*.
• Add powerpc-unknown-freebsd at Tier 3*.
• Add riscv32imc-esp-espidf at Tier 3*.

* Refer to Rust's platform support page for more information on Rust's tiered platform support.

Libraries

• Allow writing of incomplete UTF-8 sequences via stdout/stderr on Windows. The Windows console still requires valid Unicode, but this change allows splitting a UTF-8 character across multiple write calls. This allows, for instance, programs that just read and write data buffers (e.g. copying a file to stdout) without regard for Unicode or character boundaries.
• Prefer AtomicU{64,128} over Mutex for Instant backsliding protection. For this use case, atomics scale much better under contention.
• Implement Extend<(A, B)> for (Extend<A>, Extend<B>)
• impl Default, Copy, Clone for std::io::Sink and std::io::Empty
• impl From<[(K, V); N]> for all collections.
• Remove P: Unpin bound on impl Future for Pin.
• Treat invalid environment variable names as nonexistent. Previously, the environment functions would panic if given a variable name with an internal null character or equal sign (=). Now, these functions will just treat such names as nonexistent variables, since the OS cannot represent the existence of a variable with such a name.

Stabilised APIs

• std::os::unix::fs::chroot
• UnsafeCell::raw_get
• BufWriter::into_parts
• core::panic::{UnwindSafe, RefUnwindSafe, AssertUnwindSafe} These APIs were previously stable in std, but are now also available in core.
• Vec::shrink_to
• String::shrink_to
• OsString::shrink_to
• PathBuf::shrink_to
• BinaryHeap::shrink_to
• VecDeque::shrink_to
• HashMap::shrink_to
• HashSet::shrink_to

These APIs are now usable in const contexts:

• std::mem::transmute
• [T]::first
• [T]::split_first
• [T]::last
• [T]::split_last

Cargo

• Cargo supports specifying a minimum supported Rust version in Cargo.toml. This has no effect at present on dependency version selection. We encourage crates to specify their minimum supported Rust version, and we encourage CI systems that support Rust code to include a crate's specified minimum version in the test matrix for that crate by default.

Compatibility notes

• Update to new argument parsing rules on Windows. This adjusts Rust's standard library to match the behavior of the standard libraries for C/C++. The rules have changed slightly over time, and this PR brings us to the latest set of rules (changed in 2008).
• Disallow the aapcs calling convention on aarch64 This was already not supported by LLVM; this change surfaces this lack of support with a better error message.
• Make SEMICOLON_IN_EXPRESSIONS_FROM_MACROS warn by default
• Warn when an escaped newline skips multiple lines.
• Calls to libc::getpid / std::process::id from Command::pre_exec may return different values on glibc <= 2.24. Rust now invokes the clone3 system call directly, when available, to use new functionality available via that system call. Older versions of glibc cache the result of getpid, and only update that cache when calling glibc's clone/fork functions, so a direct system call bypasses that cache update. glibc 2.25 and newer no longer cache getpid for exactly this reason.

Internal changes

These changes provide no direct user facing benefits, but represent significant improvements to the internals and overall performance of rustc and related tools.

• LLVM is compiled with PGO in published x86_64-unknown-linux-gnu artifacts. This improves the performance of most Rust builds.
• Unify representation of macros in internal data structures. This change fixes a host of bugs with the handling of macros by the compiler, as well as rustdoc.