Don't allow unsafe code in initialisation expression of #[percore] variables

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+### Bugfixes
+
+- Don't allow unsafe code in initialisation expression of `#[percore]` variables.
+
 ## 0.2.5
 
 ### New features

percore-derive/src/lib.rs

@@ -34,8 +34,10 @@ pub fn percore(_attr: TokenStream, item: TokenStream) -> TokenStream {
     quote! {
         #[cfg_attr(target_os = "none", unsafe(link_section = ".percore"))]
         #(#attrs)*
-        #vis static #name: percore::derive::LinkedPerCore<#ty> =
-            unsafe { percore::derive::LinkedPerCore::new(#expr) };
+        #vis static #name: percore::derive::LinkedPerCore<#ty> = const {
+            let value = #expr;
+            unsafe { percore::derive::LinkedPerCore::new(value) }
+        };
     }
     .into()
 }

src/derive.rs

@@ -240,7 +240,7 @@ mod tests {
     use super::*;
     use crate as percore;
     use crate::ExceptionFree;
-    use core::cell::RefCell;
+    use core::{cell::RefCell, num::NonZero};
 
     #[percore]
     static VALUE: ExceptionLock<RefCell<u64>> =
@@ -265,4 +265,11 @@ mod tests {
         *VALUE.get().borrow_mut(token) = 10;
         assert_eq!(10, *VALUE.get().borrow(token).borrow());
     }
+
+    #[test]
+    fn derive_unsafe() {
+        #[percore]
+        static VALUE: ExceptionLock<NonZero<u64>> =
+            ExceptionLock::new(unsafe { NonZero::new_unchecked(42) });
+    }
 }