[RFC] Add deprecation message for extern functions with default safety

src/dmd/dsymbolsem.d

@@ -4049,6 +4049,22 @@ private extern(C++) final class DsymbolSemanticVisitor : Visitor
         if (funcdecl.canInferAttributes(sc))
             funcdecl.initInferAttributes();
 
+        /* Warn about external function declarations that may become incorrect
+         * when @safe is made the default.
+         *
+         * extern(D) virtual functions are ok because the compiler will check
+         * them when they are overridden.
+         */
+        if (funcdecl.isExternal()
+            && funcdecl.type.toTypeFunction().trust == TRUST.default_
+            && !(funcdecl.isVirtual()
+                && (funcdecl.linkage == LINK.d || funcdecl.linkage == LINK.default_)))
+        {
+            deprecation(funcdecl.loc,
+                "`extern` function `%s` should be marked explicitly as `@safe`, `@system`, or `@trusted`",
+                funcdecl.toPrettyChars);
+        }
+
         Module.dprogress++;
         funcdecl.semanticRun = PASS.semanticdone;
 

src/dmd/func.d

@@ -1260,6 +1260,13 @@ extern (C++) class FuncDeclaration : Declaration
         return false;
     }
 
+    final bool isExternal()
+    {
+        if (fbody || storage_class & STC.disable)
+            return false;
+        return (storage_class & STC.extern_) || (linkage != LINK.default_);
+    }
+
     /**********************************
      * Decide if attributes for this function can be inferred from examining
      * the function body.

test/compilable/compile1.d

@@ -476,7 +476,7 @@ template test8163(T...)
     }
 
     enum N = 2; // N>=2 triggers the bug
-    extern Point[N] bar();
+    @system extern Point[N] bar();
 
     void foo()
     {