chore: forbid unsafe #235

Cargo.toml

@@ -25,6 +25,7 @@ package.version = "2.0.0-rc.6"
 
 [workspace.lints.rust]
 warnings = 'deny' # Treat all warnings as errors
+unsafe_code = 'deny'
 # Inherited from Wasmtime
 unused_extern_crates = 'warn'
 trivial_numeric_casts = 'warn'

crates/wasi/src/cli/locked_async.rs

@@ -1,3 +1,5 @@
+#![allow(unsafe_code)] // Pin projections require unsafe
+
 use crate::cli::{IsTerminal, StdinStream, StdoutStream};
 use crate::p2;
 use bytes::Bytes;

crates/wasi/src/cli/worker_thread_stdin.rs

@@ -1,3 +1,5 @@
+#![allow(unsafe_code)] // Pin projections require unsafe
+
 //! Handling for standard in using a worker task.
 //!
 //! Standard input is a global singleton resource for the entire program which

crates/wasi/src/p1.rs

@@ -1,3 +1,5 @@
+#![allow(unsafe_code)] // Required for WASIp1 bindings
+
 //! Bindings for WASIp1 aka Preview 1 aka `wasi_snapshot_preview1`.
 //!
 //! This module contains runtime support for configuring and executing

crates/wasi/src/sockets/udp.rs

@@ -1,3 +1,5 @@
+#![allow(unsafe_code)] // Socket operations require unsafe
+
 use crate::runtime::with_ambient_tokio_runtime;
 use crate::sockets::util::{
     ErrorCode, get_unicast_hop_limit, is_valid_address_family, is_valid_remote_address,