--- /dev/null
+/*
+ * Copyright (c) 1999-2002 Apple Computer, Inc. All rights reserved.
+ *
+ * @APPLE_LICENSE_HEADER_START@
+ *
+ * The contents of this file constitute Original Code as defined in and
+ * are subject to the Apple Public Source License Version 1.1 (the
+ * "License"). You may not use this file except in compliance with the
+ * License. Please obtain a copy of the License at
+ * http://www.apple.com/publicsource and read it before using this file.
+ *
+ * This Original Code and all software distributed under the License are
+ * distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY KIND, EITHER
+ * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
+ * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
+ * FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT. Please see the
+ * License for the specific language governing rights and limitations
+ * under the License.
+ *
+ * @APPLE_LICENSE_HEADER_END@
+ */
+/*
+ * Mach Operating System
+ * Copyright (c) 1991,1990,1989 Carnegie Mellon University
+ * All Rights Reserved.
+ *
+ * Permission to use, copy, modify and distribute this software and its
+ * documentation is hereby granted, provided that both the copyright
+ * notice and this permission notice appear in all copies of the
+ * software, derivative works or modified versions, and any portions
+ * thereof, and that both notices appear in supporting documentation.
+ *
+ * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
+ * CONDITION. CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
+ * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
+ *
+ * Carnegie Mellon requests users of this software to return to
+ *
+ * Software Distribution Coordinator or Software.Distribution@CS.CMU.EDU
+ * School of Computer Science
+ * Carnegie Mellon University
+ * Pittsburgh PA 15213-3890
+ *
+ * any improvements or extensions that they make and grant Carnegie Mellon
+ * the rights to redistribute these changes.
+ */
+
+#include <stdlib.h>
+#include <mach/mach.h>
+#include <mach/boolean.h>
+#include <mach/kern_return.h>
+#include <mach/message.h>
+#include <mach/mig_errors.h>
+#include <mach/vm_statistics.h>
+
+#ifdef HOST_MACH_MSG_TRAP
+__private_extern__ kern_return_t _host_mach_msg_trap_return_ = KERN_FAILURE;
+
+#define MACH_MSG_TRAP(msg, opt, ssize, rsize, rname, to, not) \
+ ((_host_mach_msg_trap_return_ == KERN_SUCCESS) ? \
+ mach_msg_trap((msg), (opt), (ssize), (rsize), (rname), (to), (not)) : \
+ mach_msg_overwrite_trap((msg), (opt), (ssize), (rsize), (rname), \
+ (to), (not), MACH_MSG_NULL, 0))
+
+#else
+
+#define MACH_MSG_TRAP(msg, opt, ssize, rsize, rname, to, not) \
+ mach_msg_overwrite_trap((msg), (opt), (ssize), (rsize), (rname), \
+ (to), (not), MACH_MSG_NULL, 0))
+#endif
+
+#define LIBMACH_OPTIONS (MACH_SEND_INTERRUPT|MACH_RCV_INTERRUPT)
+
+/*
+ * Routine: mach_msg
+ * Purpose:
+ * Send and/or receive a message. If the message operation
+ * is interrupted, and the user did not request an indication
+ * of that fact, then restart the appropriate parts of the
+ * operation.
+ */
+mach_msg_return_t
+mach_msg(msg, option, send_size, rcv_size, rcv_name, timeout, notify)
+ mach_msg_header_t *msg;
+ mach_msg_option_t option;
+ mach_msg_size_t send_size;
+ mach_msg_size_t rcv_size;
+ mach_port_t rcv_name;
+ mach_msg_timeout_t timeout;
+ mach_port_t notify;
+{
+ mach_msg_return_t mr;
+
+ /*
+ * Consider the following cases:
+ * 1) Errors in pseudo-receive (eg, MACH_SEND_INTERRUPTED
+ * plus special bits).
+ * 2) Use of MACH_SEND_INTERRUPT/MACH_RCV_INTERRUPT options.
+ * 3) RPC calls with interruptions in one/both halves.
+ *
+ * We refrain from passing the option bits that we implement
+ * to the kernel. This prevents their presence from inhibiting
+ * the kernel's fast paths (when it checks the option value).
+ */
+
+ mr = MACH_MSG_TRAP(msg, option &~ LIBMACH_OPTIONS,
+ send_size, rcv_size, rcv_name,
+ timeout, notify);
+ if (mr == MACH_MSG_SUCCESS)
+ return MACH_MSG_SUCCESS;
+
+ if ((option & MACH_SEND_INTERRUPT) == 0)
+ while (mr == MACH_SEND_INTERRUPTED)
+ mr = MACH_MSG_TRAP(msg,
+ option &~ LIBMACH_OPTIONS,
+ send_size, rcv_size, rcv_name,
+ timeout, notify);
+
+ if ((option & MACH_RCV_INTERRUPT) == 0)
+ while (mr == MACH_RCV_INTERRUPTED)
+ mr = MACH_MSG_TRAP(msg,
+ option &~ (LIBMACH_OPTIONS|MACH_SEND_MSG),
+ 0, rcv_size, rcv_name,
+ timeout, notify);
+
+ return mr;
+}
+
+/*
+ * Routine: mach_msg_overwrite
+ * Purpose:
+ * Send and/or receive a message. If the message operation
+ * is interrupted, and the user did not request an indication
+ * of that fact, then restart the appropriate parts of the
+ * operation.
+ *
+ * Distinct send and receive buffers may be specified. If
+ * no separate receive buffer is specified, the msg parameter
+ * will be used for both send and receive operations.
+ *
+ * In addition to a distinct receive buffer, that buffer may
+ * already contain scatter control information to direct the
+ * receiving of the message.
+ */
+mach_msg_return_t
+mach_msg_overwrite(msg, option, send_size, rcv_limit, rcv_name, timeout,
+ notify, rcv_msg, rcv_scatter_size)
+ mach_msg_header_t *msg;
+ mach_msg_option_t option;
+ mach_msg_size_t send_size;
+ mach_msg_size_t rcv_limit;
+ mach_port_t rcv_name;
+ mach_msg_timeout_t timeout;
+ mach_port_t notify;
+ mach_msg_header_t *rcv_msg;
+ mach_msg_size_t rcv_scatter_size;
+{
+ mach_msg_return_t mr;
+
+ /*
+ * Consider the following cases:
+ * 1) Errors in pseudo-receive (eg, MACH_SEND_INTERRUPTED
+ * plus special bits).
+ * 2) Use of MACH_SEND_INTERRUPT/MACH_RCV_INTERRUPT options.
+ * 3) RPC calls with interruptions in one/both halves.
+ *
+ * We refrain from passing the option bits that we implement
+ * to the kernel. This prevents their presence from inhibiting
+ * the kernel's fast paths (when it checks the option value).
+ */
+
+ mr = mach_msg_overwrite_trap(msg, option &~ LIBMACH_OPTIONS,
+ send_size, rcv_limit, rcv_name,
+ timeout, notify, rcv_msg, rcv_scatter_size);
+ if (mr == MACH_MSG_SUCCESS)
+ return MACH_MSG_SUCCESS;
+
+ if ((option & MACH_SEND_INTERRUPT) == 0)
+ while (mr == MACH_SEND_INTERRUPTED)
+ mr = mach_msg_overwrite_trap(msg,
+ option &~ LIBMACH_OPTIONS,
+ send_size, rcv_limit, rcv_name,
+ timeout, notify, rcv_msg, rcv_scatter_size);
+
+ if ((option & MACH_RCV_INTERRUPT) == 0)
+ while (mr == MACH_RCV_INTERRUPTED)
+ mr = mach_msg_overwrite_trap(msg,
+ option &~ (LIBMACH_OPTIONS|MACH_SEND_MSG),
+ 0, rcv_limit, rcv_name,
+ timeout, notify, rcv_msg, rcv_scatter_size);
+
+ return mr;
+}
+
+
+mach_msg_return_t
+mach_msg_send(mach_msg_header_t *msg)
+{
+ return mach_msg(msg, MACH_SEND_MSG,
+ msg->msgh_size, 0, MACH_PORT_NULL,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+}
+
+mach_msg_return_t
+mach_msg_receive(mach_msg_header_t *msg)
+{
+ return mach_msg(msg, MACH_RCV_MSG,
+ 0, msg->msgh_size, msg->msgh_local_port,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+}
+
+
+static void
+mach_msg_destroy_port(mach_port_t port, mach_msg_type_name_t type)
+{
+ if (MACH_PORT_VALID(port)) switch (type) {
+ case MACH_MSG_TYPE_MOVE_SEND:
+ case MACH_MSG_TYPE_MOVE_SEND_ONCE:
+ /* destroy the send/send-once right */
+ (void) mach_port_deallocate(mach_task_self(), port);
+ break;
+
+ case MACH_MSG_TYPE_MOVE_RECEIVE:
+ /* destroy the receive right */
+ (void) mach_port_mod_refs(mach_task_self(), port,
+ MACH_PORT_RIGHT_RECEIVE, -1);
+ break;
+
+ case MACH_MSG_TYPE_MAKE_SEND:
+ /* create a send right and then destroy it */
+ (void) mach_port_insert_right(mach_task_self(), port,
+ port, MACH_MSG_TYPE_MAKE_SEND);
+ (void) mach_port_deallocate(mach_task_self(), port);
+ break;
+
+ case MACH_MSG_TYPE_MAKE_SEND_ONCE:
+ /* create a send-once right and then destroy it */
+ (void) mach_port_extract_right(mach_task_self(), port,
+ MACH_MSG_TYPE_MAKE_SEND_ONCE,
+ &port, &type);
+ (void) mach_port_deallocate(mach_task_self(), port);
+ break;
+ }
+}
+
+static void
+mach_msg_destroy_memory(vm_offset_t addr, vm_size_t size)
+{
+ if (size != 0)
+ (void) vm_deallocate(mach_task_self(), addr, size);
+}
+
+
+/*
+ * Routine: mach_msg_destroy
+ * Purpose:
+ * mach_msg_destroy is useful in two contexts.
+ *
+ * First, it can deallocate all port rights and
+ * out-of-line memory in a received message.
+ * When a server receives a request it doesn't want,
+ * it needs this functionality.
+ *
+ * Second, it can mimic the side-effects of a msg-send
+ * operation. The effect is as if the message were sent
+ * and then destroyed inside the kernel. When a server
+ * can't send a reply (because the client died),
+ * it needs this functionality.
+ */
+void
+mach_msg_destroy(mach_msg_header_t *msg)
+{
+ mach_msg_bits_t mbits = msg->msgh_bits;
+
+ /*
+ * The msgh_local_port field doesn't hold a port right.
+ * The receive operation consumes the destination port right.
+ */
+
+ mach_msg_destroy_port(msg->msgh_remote_port, MACH_MSGH_BITS_REMOTE(mbits));
+
+ if (mbits & MACH_MSGH_BITS_COMPLEX) {
+ mach_msg_body_t *body;
+ mach_msg_descriptor_t *saddr, *eaddr;
+
+ body = (mach_msg_body_t *) (msg + 1);
+ saddr = (mach_msg_descriptor_t *)
+ ((mach_msg_base_t *) msg + 1);
+ eaddr = saddr + body->msgh_descriptor_count;
+
+ for ( ; saddr < eaddr; saddr++) {
+ switch (saddr->type.type) {
+
+ case MACH_MSG_PORT_DESCRIPTOR: {
+ mach_msg_port_descriptor_t *dsc;
+
+ /*
+ * Destroy port rights carried in the message
+ */
+ dsc = &saddr->port;
+ mach_msg_destroy_port(dsc->name, dsc->disposition);
+ break;
+ }
+
+ case MACH_MSG_OOL_DESCRIPTOR : {
+ mach_msg_ool_descriptor_t *dsc;
+
+ /*
+ * Destroy memory carried in the message
+ */
+ dsc = &saddr->out_of_line;
+ if (dsc->deallocate) {
+ mach_msg_destroy_memory((vm_offset_t)dsc->address,
+ dsc->size);
+ }
+ break;
+ }
+
+ case MACH_MSG_OOL_PORTS_DESCRIPTOR : {
+ mach_port_t *ports;
+ mach_msg_ool_ports_descriptor_t *dsc;
+ mach_msg_type_number_t j;
+
+ /*
+ * Destroy port rights carried in the message
+ */
+ dsc = &saddr->ool_ports;
+ ports = (mach_port_t *) dsc->address;
+ for (j = 0; j < dsc->count; j++, ports++) {
+ mach_msg_destroy_port(*ports, dsc->disposition);
+ }
+
+ /*
+ * Destroy memory carried in the message
+ */
+ if (dsc->deallocate) {
+ mach_msg_destroy_memory((vm_offset_t)dsc->address,
+ dsc->count * sizeof(mach_port_t));
+ }
+ break;
+ }
+ }
+ }
+ }
+}
+
+/*
+ * Routine: mach_msg_server_once
+ * Purpose:
+ * A simple generic server function. It allows more flexibility
+ * than mach_msg_server by processing only one message request
+ * and then returning to the user. Note that more in the way
+ * of error codes are returned to the user; specifically, any
+ * failing error from mach_msg calls will be returned
+ * (though errors from the demux routine or the routine it
+ * calls will not be).
+ */
+mach_msg_return_t
+mach_msg_server_once(
+ boolean_t (*demux)(mach_msg_header_t *, mach_msg_header_t *),
+ mach_msg_size_t max_size,
+ mach_port_t rcv_name,
+ mach_msg_options_t options)
+{
+ mig_reply_error_t *bufRequest, *bufReply;
+ mach_msg_size_t request_size;
+ mach_msg_size_t request_alloc;
+ mach_msg_size_t trailer_alloc;
+ mach_msg_size_t reply_alloc;
+ mach_msg_return_t mr;
+ kern_return_t kr;
+ mach_port_t self = mach_task_self();
+
+ options &= ~(MACH_SEND_MSG|MACH_RCV_MSG);
+
+ trailer_alloc = REQUESTED_TRAILER_SIZE(options);
+ request_alloc = round_page(max_size + trailer_alloc);
+
+ request_size = (options & MACH_RCV_LARGE) ?
+ request_alloc : max_size + trailer_alloc;
+
+ reply_alloc = round_page((options & MACH_SEND_TRAILER) ?
+ (max_size + MAX_TRAILER_SIZE) :
+ max_size);
+
+ kr = vm_allocate(self,
+ (vm_address_t *)&bufReply,
+ reply_alloc,
+ VM_MAKE_TAG(VM_MEMORY_MACH_MSG)|TRUE);
+ if (kr != KERN_SUCCESS)
+ return kr;
+
+ for (;;) {
+ mach_msg_size_t new_request_alloc;
+
+ kr = vm_allocate(self,
+ (vm_address_t *)&bufRequest,
+ request_alloc,
+ VM_MAKE_TAG(VM_MEMORY_MACH_MSG)|TRUE);
+ if (kr != KERN_SUCCESS) {
+ vm_deallocate(self,
+ (vm_address_t)bufReply,
+ reply_alloc);
+ return kr;
+ }
+
+ mr = mach_msg(&bufRequest->Head, MACH_RCV_MSG|options,
+ 0, request_size, rcv_name,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+
+ if (!((mr == MACH_RCV_TOO_LARGE) && (options & MACH_RCV_LARGE)))
+ break;
+
+ new_request_alloc = round_page(bufRequest->Head.msgh_size +
+ trailer_alloc);
+ vm_deallocate(self,
+ (vm_address_t) bufRequest,
+ request_alloc);
+ request_size = request_alloc = new_request_alloc;
+ }
+
+ if (mr == MACH_MSG_SUCCESS) {
+ /* we have a request message */
+
+ (void) (*demux)(&bufRequest->Head, &bufReply->Head);
+
+ if (!(bufReply->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)) {
+ if (bufReply->RetCode == MIG_NO_REPLY)
+ bufReply->Head.msgh_remote_port = MACH_PORT_NULL;
+ else if ((bufReply->RetCode != KERN_SUCCESS) &&
+ (bufRequest->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)) {
+ /* destroy the request - but not the reply port */
+ bufRequest->Head.msgh_remote_port = MACH_PORT_NULL;
+ mach_msg_destroy(&bufRequest->Head);
+ }
+ }
+
+ /*
+ * We don't want to block indefinitely because the client
+ * isn't receiving messages from the reply port.
+ * If we have a send-once right for the reply port, then
+ * this isn't a concern because the send won't block.
+ * If we have a send right, we need to use MACH_SEND_TIMEOUT.
+ * To avoid falling off the kernel's fast RPC path unnecessarily,
+ * we only supply MACH_SEND_TIMEOUT when absolutely necessary.
+ */
+ if (bufReply->Head.msgh_remote_port != MACH_PORT_NULL) {
+
+ mr = mach_msg(&bufReply->Head,
+ (MACH_MSGH_BITS_REMOTE(bufReply->Head.msgh_bits) ==
+ MACH_MSG_TYPE_MOVE_SEND_ONCE) ?
+ MACH_SEND_MSG|options :
+ MACH_SEND_MSG|MACH_SEND_TIMEOUT|options,
+ bufReply->Head.msgh_size, 0, MACH_PORT_NULL,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+
+ if ((mr != MACH_SEND_INVALID_DEST) &&
+ (mr != MACH_SEND_TIMED_OUT))
+ goto done_once;
+ mr = MACH_MSG_SUCCESS;
+ }
+ if (bufReply->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)
+ mach_msg_destroy(&bufReply->Head);
+ }
+
+ done_once:
+ (void)vm_deallocate(self,
+ (vm_address_t) bufRequest,
+ request_alloc);
+ (void)vm_deallocate(self,
+ (vm_address_t) bufReply,
+ reply_alloc);
+ return mr;
+}
+
+/*
+ * Routine: mach_msg_server
+ * Purpose:
+ * A simple generic server function. Note that changes here
+ * should be considered for duplication above.
+ */
+mach_msg_return_t
+mach_msg_server(
+ boolean_t (*demux)(mach_msg_header_t *, mach_msg_header_t *),
+ mach_msg_size_t max_size,
+ mach_port_t rcv_name,
+ mach_msg_options_t options)
+{
+ mig_reply_error_t *bufRequest, *bufReply;
+ mach_msg_size_t request_size;
+ mach_msg_size_t new_request_alloc;
+ mach_msg_size_t request_alloc;
+ mach_msg_size_t trailer_alloc;
+ mach_msg_size_t reply_alloc;
+ mach_msg_return_t mr;
+ kern_return_t kr;
+ mach_port_t self = mach_task_self();
+
+ options &= ~(MACH_SEND_MSG|MACH_RCV_MSG);
+
+ reply_alloc = round_page((options & MACH_SEND_TRAILER) ?
+ (max_size + MAX_TRAILER_SIZE) : max_size);
+
+ kr = vm_allocate(self,
+ (vm_address_t *)&bufReply,
+ reply_alloc,
+ VM_MAKE_TAG(VM_MEMORY_MACH_MSG)|TRUE);
+ if (kr != KERN_SUCCESS)
+ return kr;
+
+ request_alloc = 0;
+ trailer_alloc = REQUESTED_TRAILER_SIZE(options);
+ new_request_alloc = round_page(max_size + trailer_alloc);
+
+ request_size = (options & MACH_RCV_LARGE) ?
+ new_request_alloc : max_size + trailer_alloc;
+
+ for (;;) {
+ if (request_alloc < new_request_alloc) {
+ request_alloc = new_request_alloc;
+ kr = vm_allocate(self,
+ (vm_address_t *)&bufRequest,
+ request_alloc,
+ VM_MAKE_TAG(VM_MEMORY_MACH_MSG)|TRUE);
+ if (kr != KERN_SUCCESS) {
+ vm_deallocate(self,
+ (vm_address_t)bufReply,
+ reply_alloc);
+ return kr;
+ }
+ }
+
+ mr = mach_msg(&bufRequest->Head, MACH_RCV_MSG|options,
+ 0, request_size, rcv_name,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+
+ while (mr == MACH_MSG_SUCCESS) {
+ /* we have another request message */
+
+ (void) (*demux)(&bufRequest->Head, &bufReply->Head);
+
+ if (!(bufReply->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)) {
+ if (bufReply->RetCode == MIG_NO_REPLY)
+ bufReply->Head.msgh_remote_port = MACH_PORT_NULL;
+ else if ((bufReply->RetCode != KERN_SUCCESS) &&
+ (bufRequest->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)) {
+ /* destroy the request - but not the reply port */
+ bufRequest->Head.msgh_remote_port = MACH_PORT_NULL;
+ mach_msg_destroy(&bufRequest->Head);
+ }
+ }
+
+ /*
+ * We don't want to block indefinitely because the client
+ * isn't receiving messages from the reply port.
+ * If we have a send-once right for the reply port, then
+ * this isn't a concern because the send won't block.
+ * If we have a send right, we need to use MACH_SEND_TIMEOUT.
+ * To avoid falling off the kernel's fast RPC path,
+ * we only supply MACH_SEND_TIMEOUT when absolutely necessary.
+ */
+ if (bufReply->Head.msgh_remote_port != MACH_PORT_NULL) {
+ if (request_alloc == reply_alloc) {
+ mig_reply_error_t *bufTemp;
+
+ mr = mach_msg(
+ &bufReply->Head,
+ (MACH_MSGH_BITS_REMOTE(bufReply->Head.msgh_bits) ==
+ MACH_MSG_TYPE_MOVE_SEND_ONCE) ?
+ MACH_SEND_MSG|MACH_RCV_MSG|options :
+ MACH_SEND_MSG|MACH_RCV_MSG|MACH_SEND_TIMEOUT|options,
+ bufReply->Head.msgh_size, request_size, rcv_name,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+
+ /* swap request and reply */
+ bufTemp = bufRequest;
+ bufRequest = bufReply;
+ bufReply = bufTemp;
+
+ } else {
+ mr = mach_msg_overwrite(
+ &bufReply->Head,
+ (MACH_MSGH_BITS_REMOTE(bufReply->Head.msgh_bits) ==
+ MACH_MSG_TYPE_MOVE_SEND_ONCE) ?
+ MACH_SEND_MSG|MACH_RCV_MSG|options :
+ MACH_SEND_MSG|MACH_RCV_MSG|MACH_SEND_TIMEOUT|options,
+ bufReply->Head.msgh_size, request_size, rcv_name,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL,
+ &bufRequest->Head, request_size);
+ }
+
+ if ((mr != MACH_SEND_INVALID_DEST) &&
+ (mr != MACH_SEND_TIMED_OUT))
+ continue;
+ }
+ if (bufReply->Head.msgh_bits & MACH_MSGH_BITS_COMPLEX)
+ mach_msg_destroy(&bufReply->Head);
+
+ mr = mach_msg(&bufRequest->Head, MACH_RCV_MSG|options,
+ 0, request_size, rcv_name,
+ MACH_MSG_TIMEOUT_NONE, MACH_PORT_NULL);
+
+ } /* while (mr == MACH_MSG_SUCCESS) */
+
+ if ((mr == MACH_RCV_TOO_LARGE) && (options & MACH_RCV_LARGE)) {
+ new_request_alloc = round_page(bufRequest->Head.msgh_size +
+ trailer_alloc);
+ request_size = new_request_alloc;
+ vm_deallocate(self,
+ (vm_address_t) bufRequest,
+ request_alloc);
+ continue;
+ }
+
+ break;
+
+ } /* for(;;) */
+
+ (void)vm_deallocate(self,
+ (vm_address_t) bufRequest,
+ request_alloc);
+ (void)vm_deallocate(self,
+ (vm_address_t) bufReply,
+ reply_alloc);
+ return mr;
+}