Correct borrow, and impl Send for RawIter

cordyceps/src/list.rs

@@ -259,7 +259,7 @@ pub struct Iter<'list, T: Linked<Links<T>> + ?Sized> {
 /// the returned `NonNull<T>` nodes. See [`List::iter_raw()`] for
 /// more details on safety invariants.
 pub struct IterRaw<'list, T: Linked<Links<T>> + ?Sized> {
-    _list: &'list List<T>,
+    _list: &'list mut List<T>,
 
     /// The current node when iterating head -> tail.
     curr: Link<T>,
@@ -963,10 +963,10 @@ impl<T: Linked<Links<T>> + ?Sized> List<T> {
     #[must_use]
     pub fn iter_raw(&mut self) -> IterRaw<'_, T> {
         IterRaw {
-            _list: self,
+            len: self.len(),
             curr: self.head,
             curr_back: self.tail,
-            len: self.len(),
+            _list: self,
         }
     }
 
@@ -1451,7 +1451,13 @@ impl<T: Linked<Links<T>> + ?Sized> DoubleEndedIterator for IterMut<'_, T> {
 
 impl<T: Linked<Links<T>> + ?Sized> iter::FusedIterator for IterMut<'_, T> {}
 
-// === impl RawIter ====
+// === impl IterRaw ====
+
+/// ## SAFETY
+///
+/// IterRaw contains an exclusive reference to the given List, and objects
+/// within the list are pinned. Therefore, `Send`-ing the iterator is sound.
+unsafe impl<T: Linked<Links<T>> + ?Sized> Send for IterRaw<'_, T> {}
 
 impl<T: Linked<Links<T>> + ?Sized> Iterator for IterRaw<'_, T> {
     type Item = NonNull<T>;
@@ -1496,7 +1502,7 @@ impl<T: Linked<Links<T>> + ?Sized> DoubleEndedIterator for IterRaw<'_, T> {
         let curr = self.curr_back.take()?;
         self.len -= 1;
         unsafe {
-            // safety: it is safe for us to borrow `curr`, because the iterator
+            // safety: it is safe for us to borrow `curr_back`, because the iterator
             // borrows the `List`, ensuring that the list will not be dropped
             // while the iterator exists. the returned item will not outlive the
             // iterator.

cordyceps/src/list/tests/iter_raw.rs

@@ -129,3 +129,8 @@ fn smoke() {
 
     drop(list);
 }
+
+#[test]
+fn assert_send() {
+    crate::util::assert_send::<IterRaw<'_, OwnedEntryHeader>>();
+}

cordyceps/src/util.rs

@@ -150,3 +150,6 @@ impl<T: fmt::Display> fmt::Display for FmtOption<'_, T> {
 
 #[cfg(test)]
 pub(crate) fn assert_send_sync<T: Send + Sync>() {}
+
+#[cfg(test)]
+pub(crate) fn assert_send<T: Send>() {}