tree 7a985d8adeb27614fe6e4de03c7bb93f1e945927
parent a7e3dafd035024803b80676ab8ed02b4acb9b111
author Sam McCall <sammccall@google.com> 1702636281 -0800
committer Copybara-Service <copybara-worker@google.com> 1702636331 -0800

Remove nullability from Span::{pointer,iterator}

These are in some sense correct (begin()/end() can be null for empty spans), but
don't capture the critical contract that begin() is only null when end() is.
This leads to foreach loops over spans being considered unsafe.

Long-term we may want to express such constraints somehow, but for now giving
these pointers unknown nullability is the best we can do.

PiperOrigin-RevId: 591191038
Change-Id: I1f02e068a445c0ca5996a9212477b64393ef4161