---

yaml
---
r: 33220
b: refs/heads/snap-stage3
c: bc68a88
h: refs/heads/master
v: v3

Author: graydon

[refs]

@@ -1,7 +1,7 @@
 ---
 refs/heads/master: cd6f24f9d14ac90d167386a56e7a6ac1f0318195
 refs/heads/snap-stage1: e33de59e47c5076a89eadeb38f4934f58a3618a6
-refs/heads/snap-stage3: 9e6df2827721aa2ddba33a409cdda109b33cf232
+refs/heads/snap-stage3: bc68a88593a5f5b0cd33c5c9e8e83a1581fe6b12
 refs/heads/try: d324a424d8f84b1eb049b12cf34182bda91b0024
 refs/tags/release-0.1: 1f5c5126e96c79d22cb7862f75304136e204f105
 refs/heads/ndm: f3868061cd7988080c30d6d5bf352a5a5fe2460b

branches/snap-stage3/doc/rust.md

@@ -943,14 +943,15 @@ of that type.
 #### Unsafe functions
 
 Unsafe functions are those containing unsafe operations that are not contained in an [`unsafe` block](#unsafe-blocks).
+Such a function must be prefixed with the keyword `unsafe`.
 
 Unsafe operations are those that potentially violate the memory-safety guarantees of Rust's static semantics.
 Specifically, the following operations are considered unsafe:
 
-  - Dereferencing a [raw pointer](#pointer-types)
-  - Casting a [raw pointer](#pointer-types) to a safe pointer type
-  - Breaking the [purity-checking rules](#pure-functions)
-  - Calling an unsafe function
+  - Dereferencing a [raw pointer](#pointer-types).
+  - Casting a [raw pointer](#pointer-types) to a safe pointer type.
+  - Breaking the [purity-checking rules](#pure-functions) in a `pure` function.
+  - Calling an unsafe function.
 
 ##### Unsafe blocks