libsa/catalogue.cpp

   1 /*
   2  * Copyright (c) 2000 Apple Computer, Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28 #include <libkern/c++/OSContainers.h>
  29 #include <IOKit/IODeviceTreeSupport.h>
  30 #include <IOKit/IORegistryEntry.h>
  31 #include <IOKit/IOCatalogue.h>
  32 #include <IOKit/IOKitKeysPrivate.h>
  33 #include <libkern/c++/OSUnserialize.h>
  34 #include <libkern/OSByteOrder.h>
  35 #include <libsa/catalogue.h>
  36
  37 extern "C" {
  38 #include <machine/machine_routines.h>
  39 #include <mach/host_info.h>
  40 #include <mach/kmod.h>
  41 #include <libsa/mkext.h>
  42 #include <libsa/vers_rsrc.h>
  43 #include <mach-o/loader.h>
  44 };
  45
  46 #include <IOKit/IOLib.h>
  47
  48 #include <IOKit/assert.h>
  49
  50 extern "C" {
  51 extern void IODTFreeLoaderInfo( char *key, void *infoAddr, int infoSize );
  52 // extern kern_return_t host_info(host_t host,
  53 //     host_flavor_t flavor,
  54 //     host_info_t info,
  55 //     mach_msg_type_number_t  *count);
  56 extern int grade_binary(cpu_type_t exectype, cpu_subtype_t execsubtype);
  57 // Return the address of the named Mach-O segment from the currently
  58 // executing 32 bit kernel, or NULL.
  59 extern struct segment_command *getsegbyname(char *seg_name);
  60 // Return the address of the named section from the named Mach-O segment
  61 // from the currently executing 32 bit kernel, or NULL.
  62 extern struct section *getsectbyname(char *segname, char *sectname);
  63 };
  64
  65 #define LOG_DELAY()
  66
  67 #if 0
  68 #define VTYELLOW   "\033[33m"
  69 #define VTRESET    "\033[0m"
  70 #else
  71 #define VTYELLOW   ""
  72 #define VTRESET    ""
  73 #endif
  74
  75 /*********************************************************************
  76 *********************************************************************/
  77 static OSDictionary * gStartupExtensions = 0;
  78 static OSArray * gBootLoaderObjects = 0;
  79 extern OSArray * gIOPrelinkedModules;
  80
  81 OSDictionary * getStartupExtensions(void) {
  82     if (gStartupExtensions) {
  83         return gStartupExtensions;
  84     }
  85     gStartupExtensions = OSDictionary::withCapacity(1);
  86     assert (gStartupExtensions);
  87
  88     return gStartupExtensions;
  89 }
  90
  91 /* This array holds objects that are needed to be held around during
  92  * boot before kextd starts up. Currently it contains OSData objects
  93  * copied from OF entries for mkext archives in device ROMs. Because
  94  * the Device Tree support code dumps these after initially handing
  95  * them to us, we have to be able to clean them up later.
  96  */
  97 OSArray * getBootLoaderObjects(void) {
  98     if (gBootLoaderObjects) {
  99         return gBootLoaderObjects;
 100     }
 101     gBootLoaderObjects = OSArray::withCapacity(1);
 102     assert (gBootLoaderObjects);
 103
 104     return gBootLoaderObjects;
 105 }
 106
 107 /*********************************************************************
 108 * This function checks that a driver dict has all the required
 109 * entries and does a little bit of value checking too.
 110 *
 111 * index is nonnegative if the index of an entry from an mkext
 112 * archive.
 113 *********************************************************************/
 114 bool validateExtensionDict(OSDictionary * extension, int index) {
 115
 116     bool result = true;
 117     bool not_a_dict = false;
 118     bool id_missing = false;
 119     bool is_kernel_resource = false;
 120     bool has_executable = false;
 121     bool ineligible_for_safe_boot = false;
 122     OSString * bundleIdentifier = NULL;    // do not release
 123     OSObject * rawValue = NULL;            // do not release
 124     OSString * stringValue = NULL;         // do not release
 125     OSBoolean * booleanValue = NULL;       // do not release
 126     OSDictionary * personalities = NULL;   // do not release
 127     OSDictionary * libraries = NULL;       // do not release
 128     OSCollectionIterator * keyIterator = NULL;  // must release
 129     OSString * key = NULL;                 // do not release
 130     VERS_version vers;
 131     VERS_version compatible_vers;
 132     char namep[16];      // unused but needed for PE_parse_boot_arg()
 133
 134     // Info dict is a dictionary
 135     if (!OSDynamicCast(OSDictionary, extension)) {
 136         not_a_dict = true;
 137         result = false;
 138         goto finish;
 139     }
 140
 141     // CFBundleIdentifier is a string - REQUIRED
 142     bundleIdentifier = OSDynamicCast(OSString,
 143         extension->getObject("CFBundleIdentifier"));
 144     if (!bundleIdentifier) {
 145         id_missing = true;
 146         result = false;
 147         goto finish;
 148     }
 149
 150     // Length of CFBundleIdentifier is not >= KMOD_MAX_NAME
 151     if (bundleIdentifier->getLength() >= KMOD_MAX_NAME) {
 152         result = false;
 153         goto finish;
 154     }
 155
 156     // CFBundlePackageType is "KEXT" - REQUIRED
 157     stringValue = OSDynamicCast(OSString,
 158         extension->getObject("CFBundlePackageType"));
 159     if (!stringValue) {
 160         result = false;
 161         goto finish;
 162     }
 163     if (!stringValue->isEqualTo("KEXT")) {
 164         result = false;
 165         goto finish;
 166     }
 167
 168     // CFBundleVersion is a string - REQUIRED
 169     stringValue = OSDynamicCast(OSString,
 170         extension->getObject("CFBundleVersion"));
 171     if (!stringValue) {
 172         result = false;
 173         goto finish;
 174     }
 175     // CFBundleVersion is of valid form
 176     vers = VERS_parse_string(stringValue->getCStringNoCopy());
 177     if (vers < 0) {
 178         result = false;
 179         goto finish;
 180     }
 181
 182     // OSBundleCompatibleVersion is a string - OPTIONAL
 183     rawValue = extension->getObject("OSBundleCompatibleVersion");
 184     if (rawValue) {
 185         stringValue = OSDynamicCast(OSString, rawValue);
 186         if (!stringValue) {
 187             result = false;
 188             goto finish;
 189         }
 190
 191         // OSBundleCompatibleVersion is of valid form
 192         compatible_vers = VERS_parse_string(stringValue->getCStringNoCopy());
 193         if (compatible_vers < 0) {
 194             result = false;
 195             goto finish;
 196         }
 197
 198         // OSBundleCompatibleVersion <= CFBundleVersion
 199         if (compatible_vers > vers) {
 200             result = false;
 201             goto finish;
 202         }
 203     }
 204
 205     // CFBundleExecutable is a string - OPTIONAL
 206     rawValue = extension->getObject("CFBundleExecutable");
 207     if (rawValue) {
 208         stringValue = OSDynamicCast(OSString, rawValue);
 209         if (!stringValue || stringValue->getLength() == 0) {
 210             result = false;
 211             goto finish;
 212         }
 213         has_executable = true;
 214     }
 215
 216     // OSKernelResource is a boolean value - OPTIONAL
 217     rawValue = extension->getObject("OSKernelResource");
 218     if (rawValue) {
 219         booleanValue = OSDynamicCast(OSBoolean, rawValue);
 220         if (!booleanValue) {
 221             result = false;
 222             goto finish;
 223         }
 224         is_kernel_resource = booleanValue->isTrue();
 225     }
 226
 227     // IOKitPersonalities is a dictionary - OPTIONAL
 228     rawValue = extension->getObject("IOKitPersonalities");
 229     if (rawValue) {
 230         personalities = OSDynamicCast(OSDictionary, rawValue);
 231         if (!personalities) {
 232             result = false;
 233             goto finish;
 234         }
 235
 236         keyIterator = OSCollectionIterator::withCollection(personalities);
 237         if (!keyIterator) {
 238             IOLog("Error: Failed to allocate iterator for personalities.\n");
 239             LOG_DELAY();
 240             result = false;
 241             goto finish;
 242         }
 243
 244         while ((key = OSDynamicCast(OSString, keyIterator->getNextObject()))) {
 245             OSDictionary * personality = NULL;  // do not release
 246
 247             // Each personality is a dictionary
 248             personality = OSDynamicCast(OSDictionary,
 249                 personalities->getObject(key));
 250             if (!personality) {
 251                 result = false;
 252                 goto finish;
 253             }
 254
 255             //   IOClass exists as a string - REQUIRED
 256             if (!OSDynamicCast(OSString, personality->getObject("IOClass"))) {
 257                 result = false;
 258                 goto finish;
 259             }
 260
 261             //   IOProviderClass exists as a string - REQUIRED
 262             if (!OSDynamicCast(OSString,
 263                 personality->getObject("IOProviderClass"))) {
 264
 265                 result = false;
 266                 goto finish;
 267             }
 268
 269             // CFBundleIdentifier is a string - OPTIONAL - INSERT IF ABSENT!
 270             rawValue = personality->getObject("CFBundleIdentifier");
 271             if (!rawValue) {
 272                 personality->setObject("CFBundleIdentifier", bundleIdentifier);
 273             } else {
 274                 OSString * personalityID = NULL;    // do not release
 275                 personalityID = OSDynamicCast(OSString, rawValue);
 276                 if (!personalityID) {
 277                     result = false;
 278                     goto finish;
 279                 } else {
 280                     // Length of CFBundleIdentifier is not >= KMOD_MAX_NAME
 281                     if (personalityID->getLength() >= KMOD_MAX_NAME) {
 282                         result = false;
 283                         goto finish;
 284                     }
 285                 }
 286             }
 287
 288             // IOKitDebug is a number - OPTIONAL
 289             rawValue = personality->getObject("IOKitDebug");
 290             if (rawValue && !OSDynamicCast(OSNumber, rawValue)) {
 291                 result = false;
 292                 goto finish;
 293             }
 294         }
 295
 296         keyIterator->release();
 297         keyIterator = NULL;
 298     }
 299
 300
 301     // OSBundleLibraries is a dictionary - REQUIRED if
 302     // not kernel resource & has executable
 303     //
 304     rawValue = extension->getObject("OSBundleLibraries");
 305     if (!rawValue && !is_kernel_resource && has_executable) {
 306         result = false;
 307         goto finish;
 308     }
 309
 310     if (rawValue) {
 311         libraries = OSDynamicCast(OSDictionary, rawValue);
 312         if (!libraries) {
 313             result = false;
 314             goto finish;
 315         }
 316
 317         keyIterator = OSCollectionIterator::withCollection(libraries);
 318         if (!keyIterator) {
 319             IOLog("Error: Failed to allocate iterator for libraries.\n");
 320             LOG_DELAY();
 321             result = false;
 322             goto finish;
 323         }
 324
 325         while ((key = OSDynamicCast(OSString,
 326             keyIterator->getNextObject()))) {
 327
 328             OSString * libraryVersion = NULL;  // do not release
 329
 330             // Each key's length is not >= KMOD_MAX_NAME
 331             if (key->getLength() >= KMOD_MAX_NAME) {
 332                 result = false;
 333                 goto finish;
 334             }
 335
 336             libraryVersion = OSDynamicCast(OSString,
 337                 libraries->getObject(key));
 338             if (!libraryVersion) {
 339                 result = false;
 340                 goto finish;
 341             }
 342
 343             // Each value is a valid version string
 344             vers = VERS_parse_string(libraryVersion->getCStringNoCopy());
 345             if (vers < 0) {
 346                 result = false;
 347                 goto finish;
 348             }
 349         }
 350
 351         keyIterator->release();
 352         keyIterator = NULL;
 353     }
 354
 355     // OSBundleRequired, if present, must have a legal value.
 356     // If it is not present and if we are safe-booting,
 357     // then the kext is not eligible.
 358     //
 359     rawValue = extension->getObject("OSBundleRequired");
 360     if (rawValue) {
 361         stringValue = OSDynamicCast(OSString, rawValue);
 362         if (!stringValue) {
 363             result = false;
 364             goto finish;
 365         }
 366         if (!stringValue->isEqualTo("Root") &&
 367             !stringValue->isEqualTo("Local-Root") &&
 368             !stringValue->isEqualTo("Network-Root") &&
 369             !stringValue->isEqualTo("Safe Boot") &&
 370             !stringValue->isEqualTo("Console")) {
 371
 372             result = false;
 373             goto finish;
 374         }
 375
 376     } else if (PE_parse_boot_arg("-x", namep)) { /* safe boot */
 377         ineligible_for_safe_boot = true;
 378         result = false;
 379         goto finish;
 380     }
 381
 382
 383 finish:
 384     if (keyIterator)   keyIterator->release();
 385
 386     if (!result) {
 387         if (ineligible_for_safe_boot) {
 388             IOLog(VTYELLOW "Skipping extension \"%s\" during safe boot "
 389                 "(no OSBundleRequired property)\n"
 390                 VTRESET,
 391                 bundleIdentifier->getCStringNoCopy());
 392         } else if (not_a_dict) {
 393             if (index > -1) {
 394                 IOLog(VTYELLOW "mkext entry %d: " VTRESET, index);
 395             } else {
 396                 IOLog(VTYELLOW "kernel extension " VTRESET);
 397             }
 398             IOLog(VTYELLOW "info dictionary isn't a dictionary\n"
 399                 VTRESET);
 400         } else if (id_missing) {
 401             if (index > -1) {
 402                 IOLog(VTYELLOW "mkext entry %d: " VTRESET, index);
 403             } else {
 404                 IOLog(VTYELLOW "kernel extension " VTRESET);
 405             }
 406             IOLog(VTYELLOW "\"CFBundleIdentifier\" property is "
 407                 "missing or not a string\n"
 408                 VTRESET);
 409         } else {
 410             IOLog(VTYELLOW "kernel extension \"%s\": info dictionary is invalid\n"
 411                 VTRESET, bundleIdentifier->getCStringNoCopy());
 412         }
 413         LOG_DELAY();
 414     }
 415
 416     return result;
 417 }
 418
 419
 420 /*********************************************************************
 421 *********************************************************************/
 422 OSDictionary * compareExtensionVersions(
 423     OSDictionary * incumbent,
 424     OSDictionary * candidate) {
 425
 426     OSDictionary * winner = NULL;
 427
 428     OSDictionary * incumbentPlist = NULL;
 429     OSDictionary * candidatePlist = NULL;
 430     OSString * incumbentName = NULL;
 431     OSString * candidateName = NULL;
 432     OSString * incumbentVersionString = NULL;
 433     OSString * candidateVersionString = NULL;
 434     VERS_version incumbent_vers = 0;
 435     VERS_version candidate_vers = 0;
 436
 437     incumbentPlist = OSDynamicCast(OSDictionary,
 438         incumbent->getObject("plist"));
 439     candidatePlist = OSDynamicCast(OSDictionary,
 440         candidate->getObject("plist"));
 441
 442     if (!incumbentPlist || !candidatePlist) {
 443         IOLog("compareExtensionVersions() called with invalid "
 444             "extension dictionaries.\n");
 445         LOG_DELAY();
 446         winner = NULL;
 447         goto finish;
 448     }
 449
 450     incumbentName = OSDynamicCast(OSString,
 451         incumbentPlist->getObject("CFBundleIdentifier"));
 452     candidateName = OSDynamicCast(OSString,
 453         candidatePlist->getObject("CFBundleIdentifier"));
 454     incumbentVersionString = OSDynamicCast(OSString,
 455         incumbentPlist->getObject("CFBundleVersion"));
 456     candidateVersionString = OSDynamicCast(OSString,
 457         candidatePlist->getObject("CFBundleVersion"));
 458
 459     if (!incumbentName || !candidateName ||
 460         !incumbentVersionString || !candidateVersionString) {
 461
 462         IOLog("compareExtensionVersions() called with invalid "
 463             "extension dictionaries.\n");
 464         LOG_DELAY();
 465         winner = NULL;
 466         goto finish;
 467     }
 468
 469     if (strcmp(incumbentName->getCStringNoCopy(),
 470                candidateName->getCStringNoCopy())) {
 471
 472         IOLog("compareExtensionVersions() called with different "
 473             "extension names (%s and %s).\n",
 474             incumbentName->getCStringNoCopy(),
 475             candidateName->getCStringNoCopy());
 476         LOG_DELAY();
 477         winner = NULL;
 478         goto finish;
 479     }
 480
 481     incumbent_vers = VERS_parse_string(incumbentVersionString->getCStringNoCopy());
 482     if (incumbent_vers < 0) {
 483
 484         IOLog(VTYELLOW "Error parsing version string for extension %s (%s)\n"
 485             VTRESET,
 486             incumbentName->getCStringNoCopy(),
 487             incumbentVersionString->getCStringNoCopy());
 488         LOG_DELAY();
 489         winner = NULL;
 490         goto finish;
 491     }
 492
 493     candidate_vers = VERS_parse_string(candidateVersionString->getCStringNoCopy());
 494     if (candidate_vers < 0) {
 495
 496         IOLog(VTYELLOW "Error parsing version string for extension %s (%s)\n"
 497             VTRESET,
 498             candidateName->getCStringNoCopy(),
 499             candidateVersionString->getCStringNoCopy());
 500         LOG_DELAY();
 501         winner = NULL;
 502         goto finish;
 503      }
 504
 505     if (candidate_vers > incumbent_vers) {
 506         IOLog(VTYELLOW "Replacing extension \"%s\" with newer version "
 507             "(%s -> %s).\n" VTRESET,
 508             incumbentName->getCStringNoCopy(),
 509             incumbentVersionString->getCStringNoCopy(),
 510             candidateVersionString->getCStringNoCopy());
 511         LOG_DELAY();
 512         winner = candidate;
 513         goto finish;
 514     } else {
 515         IOLog(VTYELLOW "Skipping duplicate extension \"%s\" with older/same "
 516             " version (%s -> %s).\n" VTRESET,
 517             candidateName->getCStringNoCopy(),
 518             candidateVersionString->getCStringNoCopy(),
 519             incumbentVersionString->getCStringNoCopy());
 520         LOG_DELAY();
 521         winner = incumbent;
 522         goto finish;
 523     }
 524
 525 finish:
 526
 527     // no cleanup, how nice
 528     return winner;
 529 }
 530
 531
 532 /*********************************************************************
 533 * This function merges entries in the mergeFrom dictionary into the
 534 * mergeInto dictionary. If it returns false, the two dictionaries are
 535 * not altered. If it returns true, then mergeInto may have new
 536 * entries; any keys that were already present in mergeInto are
 537 * removed from mergeFrom, so that the caller can see what was
 538 * actually merged.
 539 *********************************************************************/
 540 bool mergeExtensionDictionaries(OSDictionary * mergeInto,
 541     OSDictionary * mergeFrom) {
 542
 543     bool result = true;
 544     OSDictionary * mergeIntoCopy = NULL;       // must release
 545     OSDictionary * mergeFromCopy = NULL;       // must release
 546     OSCollectionIterator * keyIterator = NULL; // must release
 547     OSString * key;                            // don't release
 548
 549    /* Add 1 to count to guarantee copy can grow (grr).
 550     */
 551     mergeIntoCopy = OSDictionary::withDictionary(mergeInto,
 552         mergeInto->getCount() + 1);
 553     if (!mergeIntoCopy) {
 554         IOLog("Error: Failed to copy 'into' extensions dictionary "
 555             "for merge.\n");
 556         LOG_DELAY();
 557         result = false;
 558         goto finish;
 559     }
 560
 561    /* Add 1 to count to guarantee copy can grow (grr).
 562     */
 563     mergeFromCopy = OSDictionary::withDictionary(mergeFrom,
 564         mergeFrom->getCount() + 1);
 565     if (!mergeFromCopy) {
 566         IOLog("Error: Failed to copy 'from' extensions dictionary "
 567             "for merge.\n");
 568         LOG_DELAY();
 569         result = false;
 570         goto finish;
 571     }
 572
 573     keyIterator = OSCollectionIterator::withCollection(mergeFrom);
 574     if (!keyIterator) {
 575         IOLog("Error: Failed to allocate iterator for extensions.\n");
 576         LOG_DELAY();
 577         result = false;
 578         goto finish;
 579     }
 580
 581
 582    /*****
 583     * Loop through "from" dictionary, checking if the identifier already
 584     * exists in the "into" dictionary and checking versions if it does.
 585     */
 586     while ((key = OSDynamicCast(OSString, keyIterator->getNextObject()))) {
 587         OSDictionary * incumbentExt = OSDynamicCast(OSDictionary,
 588             mergeIntoCopy->getObject(key));
 589         OSDictionary * candidateExt = OSDynamicCast(OSDictionary,
 590             mergeFrom->getObject(key));
 591
 592         if (!incumbentExt) {
 593             if (!mergeIntoCopy->setObject(key, candidateExt)) {
 594
 595                /* This is a fatal error, so bail.
 596                 */
 597                 IOLog("mergeExtensionDictionaries(): Failed to add "
 598                     "identifier %s\n",
 599                     key->getCStringNoCopy());
 600                 LOG_DELAY();
 601                 result = false;
 602                 goto finish;
 603             }
 604         } else {
 605             OSDictionary * mostRecentExtension =
 606                 compareExtensionVersions(incumbentExt, candidateExt);
 607
 608             if (mostRecentExtension == incumbentExt) {
 609                 mergeFromCopy->removeObject(key);
 610             } else if (mostRecentExtension == candidateExt) {
 611
 612                 if (!mergeIntoCopy->setObject(key, candidateExt)) {
 613
 614                    /* This is a fatal error, so bail.
 615                     */
 616                     IOLog("mergeExtensionDictionaries(): Failed to add "
 617                         "identifier %s\n",
 618                         key->getCStringNoCopy());
 619                     LOG_DELAY();
 620                     result = false;
 621                     goto finish;
 622                 }
 623             } else /* should be NULL */ {
 624
 625                /* This is a nonfatal error, so continue doing others.
 626                 */
 627                 IOLog("mergeExtensionDictionaries(): Error comparing "
 628                     "versions of duplicate extensions %s.\n",
 629                     key->getCStringNoCopy());
 630                 LOG_DELAY();
 631                 continue;
 632             }
 633         }
 634     }
 635
 636 finish:
 637
 638    /* If successful, replace the contents of the original
 639     * dictionaries with those of the modified copies.
 640     */
 641     if (result) {
 642         mergeInto->flushCollection();
 643         mergeInto->merge(mergeIntoCopy);
 644         mergeFrom->flushCollection();
 645         mergeFrom->merge(mergeFromCopy);
 646     }
 647
 648     if (mergeIntoCopy) mergeIntoCopy->release();
 649     if (mergeFromCopy) mergeFromCopy->release();
 650     if (keyIterator)   keyIterator->release();
 651
 652     return result;
 653 }
 654
 655
 656 /****
 657  * These bits are used to parse data made available by bootx.
 658  */
 659 #define BOOTX_KEXT_PREFIX       "Driver-"
 660 #define BOOTX_MULTIKEXT_PREFIX  "DriversPackage-"
 661
 662 typedef struct MemoryMapFileInfo {
 663     UInt32 paddr;
 664     UInt32 length;
 665 } MemoryMapFileInfo;
 666
 667 typedef struct BootxDriverInfo {
 668     char *plistAddr;
 669     long  plistLength;
 670     void *moduleAddr;
 671     long  moduleLength;
 672 } BootxDriverInfo;
 673
 674 typedef struct MkextEntryInfo {
 675     vm_address_t  base_address;
 676     mkext_file  * fileinfo;
 677 } MkextEntryInfo;
 678
 679
 680 /*********************************************************************
 681 * This private function reads the data for a single extension from
 682 * the bootx memory-map's propery dict, returning a dictionary with
 683 * keys "plist" for the extension's Info.plist as a parsed OSDictionary
 684 * and "code" for the extension's executable code as an OSData.
 685 *********************************************************************/
 686 OSDictionary * readExtension(OSDictionary * propertyDict,
 687     const char * memory_map_name) {
 688
 689     int error = 0;
 690     OSData               * bootxDriverDataObject = NULL;
 691     OSDictionary         * driverPlist = NULL;
 692     OSString             * driverName = NULL;
 693     OSData               * driverCode = NULL;
 694     OSString             * errorString = NULL;
 695     OSDictionary         * driverDict = NULL;
 696
 697     MemoryMapFileInfo * driverInfo = 0;
 698     BootxDriverInfo * dataBuffer;
 699
 700     kmod_info_t          * loaded_kmod = NULL;
 701
 702     bootxDriverDataObject = OSDynamicCast(OSData,
 703         propertyDict->getObject(memory_map_name));
 704     // don't release bootxDriverDataObject
 705
 706     if (!bootxDriverDataObject) {
 707         IOLog("Error: No driver data object "
 708             "for device tree entry \"%s\".\n",
 709             memory_map_name);
 710         LOG_DELAY();
 711         error = 1;
 712         goto finish;
 713     }
 714
 715     driverDict = OSDictionary::withCapacity(2);
 716     if (!driverDict) {
 717         IOLog("Error: Couldn't allocate dictionary "
 718             "for device tree entry \"%s\".\n", memory_map_name);
 719         LOG_DELAY();
 720         error = 1;
 721         goto finish;
 722     }
 723
 724     driverInfo = (MemoryMapFileInfo *)
 725         bootxDriverDataObject->getBytesNoCopy(0,
 726         sizeof(MemoryMapFileInfo));
 727 #if defined (__ppc__)
 728     dataBuffer = (BootxDriverInfo *)ml_static_ptovirt(driverInfo->paddr);
 729 #elif defined (__i386__)
 730     dataBuffer = (BootxDriverInfo *)ml_boot_ptovirt(driverInfo->paddr);
 731     dataBuffer->plistAddr = (char *)ml_boot_ptovirt((vm_address_t)dataBuffer->plistAddr);
 732     if (dataBuffer->moduleAddr)
 733       dataBuffer->moduleAddr = (void *)ml_boot_ptovirt((vm_address_t)dataBuffer->moduleAddr);
 734 #else
 735 #error unsupported architecture
 736 #endif
 737     if (!dataBuffer) {
 738         IOLog("Error: No data buffer "
 739         "for device tree entry \"%s\".\n", memory_map_name);
 740         LOG_DELAY();
 741         error = 1;
 742         goto finish;
 743     }
 744
 745     driverPlist = OSDynamicCast(OSDictionary,
 746         OSUnserializeXML(dataBuffer->plistAddr, &errorString));
 747     if (!driverPlist) {
 748         IOLog("Error: Couldn't read XML property list "
 749             "for device tree entry \"%s\".\n", memory_map_name);
 750         LOG_DELAY();
 751         if (errorString) {
 752             IOLog("XML parse error: %s.\n",
 753                 errorString->getCStringNoCopy());
 754             LOG_DELAY();
 755         }
 756         error = 1;
 757         goto finish;
 758     }
 759
 760
 761     driverName = OSDynamicCast(OSString,
 762         driverPlist->getObject("CFBundleIdentifier"));  // do not release
 763     if (!driverName) {
 764         IOLog("Error: Device tree entry \"%s\" has "
 765             "no \"CFBundleIdentifier\" property.\n", memory_map_name);
 766         LOG_DELAY();
 767         error = 1;
 768         goto finish;
 769     }
 770
 771    /* Check if kmod is already loaded and is a real loadable one (has
 772     * an address).
 773     */
 774     loaded_kmod = kmod_lookupbyname_locked(driverName->getCStringNoCopy());
 775     if (loaded_kmod && loaded_kmod->address) {
 776         IOLog("Skipping new extension \"%s\"; an extension named "
 777             "\"%s\" is already loaded.\n",
 778             driverName->getCStringNoCopy(),
 779             loaded_kmod->name);
 780         LOG_DELAY();
 781         error = 1;
 782         goto finish;
 783     }
 784
 785     if (!validateExtensionDict(driverPlist, -1)) {
 786         // validateExtensionsDict() logs an error
 787         error = 1;
 788         goto finish;
 789     }
 790
 791     driverDict->setObject("plist", driverPlist);
 792
 793    /* It's perfectly okay for a KEXT to have no executable.
 794     * Check that moduleAddr is nonzero before attempting to
 795     * get one.
 796     *
 797     * NOTE: The driverCode object is created "no-copy", so
 798     * it doesn't own that memory. The memory must be freed
 799     * separately from the OSData object (see
 800     * clearStartupExtensionsAndLoaderInfo() at the end of this file).
 801     */
 802     if (dataBuffer->moduleAddr && dataBuffer->moduleLength) {
 803         driverCode = OSData::withBytesNoCopy(dataBuffer->moduleAddr,
 804             dataBuffer->moduleLength);
 805         if (!driverCode) {
 806             IOLog("Error: Couldn't allocate data object "
 807                 "to hold code for device tree entry \"%s\".\n",
 808                 memory_map_name);
 809             LOG_DELAY();
 810             error = 1;
 811             goto finish;
 812         }
 813
 814         if (driverCode) {
 815             driverDict->setObject("code", driverCode);
 816         }
 817     }
 818
 819 finish:
 820
 821     if (loaded_kmod) {
 822         kfree(loaded_kmod, sizeof(kmod_info_t));
 823     }
 824
 825     // do not release bootxDriverDataObject
 826     // do not release driverName
 827
 828     if (driverPlist) {
 829         driverPlist->release();
 830     }
 831     if (errorString) {
 832         errorString->release();
 833     }
 834     if (driverCode) {
 835         driverCode->release();
 836     }
 837     if (error) {
 838         if (driverDict) {
 839             driverDict->release();
 840             driverDict = NULL;
 841         }
 842     }
 843     return driverDict;
 844 }
 845
 846
 847 /*********************************************************************
 848 * Used to uncompress a single file entry in an mkext archive.
 849 *
 850 * The OSData returned does not own its memory! You must deallocate
 851 * that memory using kmem_free() before releasing the OSData().
 852 *********************************************************************/
 853 static bool uncompressFile(u_int8_t *base_address, mkext_file * fileinfo,
 854                            /* out */ OSData ** file) {
 855
 856     bool result = true;
 857     kern_return_t kern_result;
 858     u_int8_t * uncompressed_file = 0; // kmem_free() on error
 859     OSData * uncompressedFile = 0;    // returned
 860     size_t uncompressed_size = 0;
 861
 862     size_t offset = OSSwapBigToHostInt32(fileinfo->offset);
 863     size_t compsize = OSSwapBigToHostInt32(fileinfo->compsize);
 864     size_t realsize = OSSwapBigToHostInt32(fileinfo->realsize);
 865     time_t modifiedsecs = OSSwapBigToHostInt32(fileinfo->modifiedsecs);
 866
 867     *file = 0;
 868
 869    /* If these four fields are zero there's no file, but that isn't
 870     * an error.
 871     */
 872     if (offset == 0 && compsize == 0 &&
 873         realsize == 0 && modifiedsecs == 0) {
 874         goto finish;
 875     }
 876
 877     // Add 1 for '\0' to terminate XML string!
 878     kern_result = kmem_alloc(kernel_map, (vm_offset_t *)&uncompressed_file,
 879         realsize + 1);
 880     if (kern_result != KERN_SUCCESS) {
 881         IOLog("Error: Couldn't allocate data buffer "
 882               "to uncompress file.\n");
 883         LOG_DELAY();
 884         result = false;
 885         goto finish;
 886     }
 887
 888     uncompressedFile = OSData::withBytesNoCopy(uncompressed_file,
 889         realsize + 1);
 890     if (!uncompressedFile) {
 891         IOLog("Error: Couldn't allocate data object "
 892               "to uncompress file.\n");
 893         LOG_DELAY();
 894         result = false;
 895         goto finish;
 896     }
 897
 898     if (compsize != 0) {
 899         uncompressed_size = decompress_lzss(uncompressed_file,
 900             base_address + offset,
 901             compsize);
 902         if (uncompressed_size != realsize) {
 903             IOLog("Error: Uncompressed file is not the length "
 904                   "recorded.\n");
 905             LOG_DELAY();
 906             result = false;
 907             goto finish;
 908         }
 909         uncompressed_file[uncompressed_size] = '\0';
 910     } else {
 911         bcopy(base_address + offset, uncompressed_file,
 912             realsize);
 913         uncompressed_file[realsize] = '\0';
 914     }
 915
 916     *file = uncompressedFile;
 917
 918 finish:
 919     if (!result) {
 920         if (uncompressed_file) {
 921             kmem_free(kernel_map, (vm_address_t)uncompressed_file,
 922                 realsize + 1);
 923         }
 924         if (uncompressedFile) {
 925             uncompressedFile->release();
 926             *file = 0;
 927         }
 928     }
 929     return result;
 930 }
 931
 932 bool uncompressModule(OSData *compData, /* out */ OSData ** file) {
 933
 934     MkextEntryInfo *info = (MkextEntryInfo *) compData->getBytesNoCopy();
 935
 936     return uncompressFile((u_int8_t *) info->base_address,
 937                           info->fileinfo, file);
 938 }
 939
 940
 941 /*********************************************************************
 942 * Does the work of pulling extensions out of an mkext archive located
 943 * in memory.
 944 *********************************************************************/
 945 bool extractExtensionsFromArchive(MemoryMapFileInfo * mkext_file_info,
 946     OSDictionary * extensions) {
 947
 948     bool result = true;
 949
 950     u_int8_t     * crc_address = 0;
 951     u_int32_t      checksum;
 952     mkext_header * mkext_data = 0;   // don't free
 953     mkext_kext   * onekext_data = 0; // don't free
 954     mkext_file   * plist_file = 0;   // don't free
 955     mkext_file   * module_file = 0;  // don't free
 956     kmod_info_t  * loaded_kmod = 0;  // must free
 957
 958     OSData       * driverPlistDataObject = 0; // must release
 959     OSDictionary * driverPlist = 0;  // must release
 960     OSData       * driverCode = 0;   // must release
 961     OSDictionary * driverDict = 0;   // must release
 962     OSString     * moduleName = 0;   // don't release
 963     OSString     * errorString = NULL;  // must release
 964
 965     OSData         * moduleInfo = 0;  // must release
 966     MkextEntryInfo   module_info;
 967
 968
 969 #if defined (__ppc__)
 970     mkext_data = (mkext_header *)mkext_file_info->paddr;
 971 #elif defined (__i386__)
 972     mkext_data = (mkext_header *)ml_boot_ptovirt(mkext_file_info->paddr);
 973 #else
 974 #error unsupported architecture
 975 #endif
 976     if (OSSwapBigToHostInt32(mkext_data->magic) != MKEXT_MAGIC ||
 977         OSSwapBigToHostInt32(mkext_data->signature) != MKEXT_SIGN) {
 978         IOLog("Error: Extension archive has invalid magic or signature.\n");
 979         LOG_DELAY();
 980         result = false;
 981         goto finish;
 982     }
 983
 984     if (OSSwapBigToHostInt32(mkext_data->length) != mkext_file_info->length) {
 985         IOLog("Error: Mismatch between extension archive & "
 986             "recorded length.\n");
 987         LOG_DELAY();
 988         result = false;
 989         goto finish;
 990     }
 991
 992     crc_address = (u_int8_t *)&mkext_data->version;
 993     checksum = adler32(crc_address,
 994         (unsigned int)mkext_data +
 995         OSSwapBigToHostInt32(mkext_data->length) - (unsigned int)crc_address);
 996
 997     if (OSSwapBigToHostInt32(mkext_data->adler32) != checksum) {
 998         IOLog("Error: Extension archive has a bad checksum.\n");
 999         LOG_DELAY();
1000         result = false;
1001         goto finish;
1002     }
1003
1004     IORegistryEntry * root = IORegistryEntry::getRegistryRoot();
1005     assert(root);
1006     OSData * checksumObj = OSData::withBytes((void *)&checksum,
1007         sizeof(checksum));
1008     assert(checksumObj);
1009     if (checksumObj) {
1010         root->setProperty(kIOStartupMkextCRC, checksumObj);
1011         checksumObj->release();
1012     }
1013
1014    /* If the MKEXT archive isn't fat, check that the CPU type & subtype
1015     * match that of the running kernel.
1016     */
1017     if (OSSwapBigToHostInt32(mkext_data->cputype) != (UInt32)CPU_TYPE_ANY) {
1018         kern_return_t          kresult = KERN_FAILURE;
1019         host_basic_info_data_t hostinfo;
1020         host_info_t            hostinfo_ptr = (host_info_t)&hostinfo;
1021         mach_msg_type_number_t count = sizeof(hostinfo)/sizeof(integer_t);
1022
1023         kresult = host_info((host_t)1, HOST_BASIC_INFO,
1024             hostinfo_ptr, &count);
1025         if (kresult != KERN_SUCCESS) {
1026             IOLog("Error: Couldn't get current host info.\n");
1027             LOG_DELAY();
1028             result = false;
1029             goto finish;
1030         }
1031         if ((UInt32)hostinfo.cpu_type !=
1032             OSSwapBigToHostInt32(mkext_data->cputype)) {
1033
1034             IOLog("Error: Extension archive doesn't contain software "
1035                 "for this computer's CPU type.\n");
1036             LOG_DELAY();
1037             result = false;
1038             goto finish;
1039         }
1040         if (!grade_binary(OSSwapBigToHostInt32(mkext_data->cputype),
1041                           OSSwapBigToHostInt32(mkext_data->cpusubtype))) {
1042             IOLog("Error: Extension archive doesn't contain software "
1043                 "for this computer's CPU subtype.\n");
1044             LOG_DELAY();
1045             result = false;
1046             goto finish;
1047         }
1048     }
1049
1050     for (unsigned int i = 0;
1051          i < OSSwapBigToHostInt32(mkext_data->numkexts);
1052          i++) {
1053
1054         if (loaded_kmod) {
1055             kfree(loaded_kmod, sizeof(kmod_info_t));
1056             loaded_kmod = 0;
1057         }
1058
1059         if (driverPlistDataObject) {
1060             kmem_free(kernel_map,
1061                 (unsigned int)driverPlistDataObject->getBytesNoCopy(),
1062                 driverPlistDataObject->getLength());
1063
1064             driverPlistDataObject->release();
1065             driverPlistDataObject = NULL;
1066         }
1067         if (driverPlist) {
1068             driverPlist->release();
1069             driverPlist = NULL;
1070         }
1071         if (driverCode) {
1072             driverCode->release();
1073             driverCode = NULL;
1074         }
1075         if (driverDict) {
1076             driverDict->release();
1077             driverDict = NULL;
1078         }
1079         if (errorString) {
1080             errorString->release();
1081             errorString = NULL;
1082         }
1083
1084         onekext_data = &mkext_data->kext[i];
1085         plist_file = &onekext_data->plist;
1086         module_file = &onekext_data->module;
1087
1088         if (!uncompressFile((u_int8_t *)mkext_data, plist_file,
1089             &driverPlistDataObject)) {
1090
1091             IOLog("Error: couldn't uncompress plist file "
1092                 "from multikext archive entry %d.\n", i);
1093             LOG_DELAY();
1094             continue;
1095         }
1096
1097         if (!driverPlistDataObject) {
1098             IOLog("Error: No property list present "
1099                 "for multikext archive entry %d.\n", i);
1100             LOG_DELAY();
1101             continue;
1102         } else {
1103             driverPlist = OSDynamicCast(OSDictionary,
1104                 OSUnserializeXML(
1105                     (char *)driverPlistDataObject->getBytesNoCopy(),
1106                     &errorString));
1107             if (!driverPlist) {
1108                 IOLog("Error: Couldn't read XML property list "
1109                       "for multikext archive entry %d.\n", i);
1110                 LOG_DELAY();
1111                 if (errorString) {
1112                     IOLog("XML parse error: %s.\n",
1113                         errorString->getCStringNoCopy());
1114                     LOG_DELAY();
1115                 }
1116                 continue;
1117             }
1118
1119             if (!validateExtensionDict(driverPlist, i)) {
1120                 // validateExtensionsDict() logs an error
1121                 continue;
1122             }
1123
1124         }
1125
1126        /* Get the extension's module name. This is used to record
1127         * the extension.
1128         */
1129         moduleName = OSDynamicCast(OSString,
1130             driverPlist->getObject("CFBundleIdentifier"));  // do not release
1131         if (!moduleName) {
1132             IOLog("Error: Multikext archive entry %d has "
1133                 "no \"CFBundleIdentifier\" property.\n", i);
1134             LOG_DELAY();
1135             continue; // assume a kext config error & continue
1136         }
1137
1138        /* Check if kmod is already loaded and is a real loadable one (has
1139         * an address).
1140         */
1141         loaded_kmod = kmod_lookupbyname_locked(moduleName->getCStringNoCopy());
1142         if (loaded_kmod && loaded_kmod->address) {
1143             IOLog("Skipping new extension \"%s\"; an extension named "
1144                 "\"%s\" is already loaded.\n",
1145                 moduleName->getCStringNoCopy(),
1146                 loaded_kmod->name);
1147             continue;
1148         }
1149
1150
1151         driverDict = OSDictionary::withCapacity(2);
1152         if (!driverDict) {
1153             IOLog("Error: Couldn't allocate dictionary "
1154                   "for multikext archive entry %d.\n", i);
1155             LOG_DELAY();
1156             result = false;
1157             goto finish;
1158         }
1159
1160         driverDict->setObject("plist", driverPlist);
1161
1162        /*****
1163         * Prepare an entry to hold the mkext entry info for the
1164         * compressed binary module, if there is one. If all four fields
1165         * of the module entry are zero, there isn't one.
1166         */
1167         if (!(loaded_kmod && loaded_kmod->address) && (OSSwapBigToHostInt32(module_file->offset) ||
1168             OSSwapBigToHostInt32(module_file->compsize) ||
1169             OSSwapBigToHostInt32(module_file->realsize) ||
1170             OSSwapBigToHostInt32(module_file->modifiedsecs))) {
1171
1172             moduleInfo = OSData::withCapacity(sizeof(MkextEntryInfo));
1173             if (!moduleInfo) {
1174                 IOLog("Error: Couldn't allocate data object "
1175                       "for multikext archive entry %d.\n", i);
1176                 LOG_DELAY();
1177                 result = false;
1178                 goto finish;
1179             }
1180
1181             module_info.base_address = (vm_address_t)mkext_data;
1182             module_info.fileinfo = module_file;
1183
1184             if (!moduleInfo->appendBytes(&module_info, sizeof(module_info))) {
1185                 IOLog("Error: Couldn't record info "
1186                       "for multikext archive entry %d.\n", i);
1187                 LOG_DELAY();
1188                 result = false;
1189                 goto finish;
1190             }
1191
1192             driverDict->setObject("compressedCode", moduleInfo);
1193         }
1194
1195         OSDictionary * incumbentExt = OSDynamicCast(OSDictionary,
1196             extensions->getObject(moduleName));
1197
1198         if (!incumbentExt) {
1199             extensions->setObject(moduleName, driverDict);
1200         } else {
1201             OSDictionary * mostRecentExtension =
1202                 compareExtensionVersions(incumbentExt, driverDict);
1203
1204             if (mostRecentExtension == incumbentExt) {
1205                 /* Do nothing, we've got the most recent. */
1206             } else if (mostRecentExtension == driverDict) {
1207                 if (!extensions->setObject(moduleName, driverDict)) {
1208
1209                    /* This is a fatal error, so bail.
1210                     */
1211                     IOLog("extractExtensionsFromArchive(): Failed to add "
1212                         "identifier %s\n",
1213                         moduleName->getCStringNoCopy());
1214                     LOG_DELAY();
1215                     result = false;
1216                     goto finish;
1217                 }
1218             } else /* should be NULL */ {
1219
1220                /* This is a nonfatal error, so continue.
1221                 */
1222                 IOLog("extractExtensionsFromArchive(): Error comparing "
1223                     "versions of duplicate extensions %s.\n",
1224                     moduleName->getCStringNoCopy());
1225                 LOG_DELAY();
1226                 continue;
1227             }
1228         }
1229     }
1230
1231 finish:
1232
1233     if (loaded_kmod) kfree(loaded_kmod, sizeof(kmod_info_t));
1234     if (driverPlistDataObject) {
1235         kmem_free(kernel_map,
1236             (unsigned int)driverPlistDataObject->getBytesNoCopy(),
1237             driverPlistDataObject->getLength());
1238         driverPlistDataObject->release();
1239     }
1240     if (driverPlist) driverPlist->release();
1241     if (driverCode)  driverCode->release();
1242     if (moduleInfo)  moduleInfo->release();
1243     if (driverDict)  driverDict->release();
1244     if (errorString) errorString->release();
1245
1246     return result;
1247 }
1248
1249 /*********************************************************************
1250 *
1251 *********************************************************************/
1252 bool readExtensions(OSDictionary * propertyDict,
1253     const char * memory_map_name,
1254     OSDictionary * extensions) {
1255
1256     bool result = true;
1257     OSData * mkextDataObject = 0;      // don't release
1258     MemoryMapFileInfo * mkext_file_info = 0; // don't free
1259
1260     mkextDataObject = OSDynamicCast(OSData,
1261         propertyDict->getObject(memory_map_name));
1262     // don't release mkextDataObject
1263
1264     if (!mkextDataObject) {
1265         IOLog("Error: No mkext data object "
1266             "for device tree entry \"%s\".\n",
1267             memory_map_name);
1268         LOG_DELAY();
1269         result = false;
1270         goto finish;
1271     }
1272
1273     mkext_file_info = (MemoryMapFileInfo *)mkextDataObject->getBytesNoCopy();
1274     if (!mkext_file_info) {
1275         result = false;
1276         goto finish;
1277     }
1278
1279     result = extractExtensionsFromArchive(mkext_file_info, extensions);
1280
1281 finish:
1282
1283     if (!result && extensions) {
1284         extensions->flushCollection();
1285     }
1286
1287     return result;
1288 }
1289
1290
1291 /*********************************************************************
1292 * Adds the personalities for an extensions dictionary to the global
1293 * IOCatalogue.
1294 *********************************************************************/
1295 bool addPersonalities(OSDictionary * extensions) {
1296     bool result = true;
1297     OSCollectionIterator * keyIterator = NULL;  // must release
1298     OSString             * key;          // don't release
1299     OSDictionary * driverDict = NULL;    // don't release
1300     OSDictionary * driverPlist = NULL;   // don't release
1301     OSDictionary * thisDriverPersonalities = NULL;  // don't release
1302     OSArray      * allDriverPersonalities = NULL;   // must release
1303
1304     allDriverPersonalities = OSArray::withCapacity(1);
1305     if (!allDriverPersonalities) {
1306         IOLog("Error: Couldn't allocate personality dictionary.\n");
1307         LOG_DELAY();
1308         result = false;
1309         goto finish;
1310     }
1311
1312    /* Record all personalities found so that they can be
1313     * added to the catalogue.
1314     * Note: Not all extensions have personalities.
1315     */
1316
1317     keyIterator = OSCollectionIterator::withCollection(extensions);
1318     if (!keyIterator) {
1319         IOLog("Error: Couldn't allocate iterator to record personalities.\n");
1320         LOG_DELAY();
1321         result = false;
1322         goto finish;
1323     }
1324
1325     while ( ( key = OSDynamicCast(OSString,
1326               keyIterator->getNextObject() ))) {
1327
1328         driverDict = OSDynamicCast(OSDictionary,
1329             extensions->getObject(key));
1330         driverPlist = OSDynamicCast(OSDictionary,
1331             driverDict->getObject("plist"));
1332         thisDriverPersonalities = OSDynamicCast(OSDictionary,
1333             driverPlist->getObject("IOKitPersonalities"));
1334
1335         if (thisDriverPersonalities) {
1336             OSCollectionIterator * pIterator;
1337             OSString * locakKey;
1338             pIterator = OSCollectionIterator::withCollection(
1339                 thisDriverPersonalities);
1340             if (!pIterator) {
1341                 IOLog("Error: Couldn't allocate iterator "
1342                     "to record extension personalities.\n");
1343                 LOG_DELAY();
1344                 continue;
1345             }
1346             while ( (locakKey = OSDynamicCast(OSString,
1347                      pIterator->getNextObject())) ) {
1348
1349                 OSDictionary * personality = OSDynamicCast(
1350                     OSDictionary,
1351                     thisDriverPersonalities->getObject(locakKey));
1352                 if (personality) {
1353                     allDriverPersonalities->setObject(personality);
1354                 }
1355             }
1356             pIterator->release();
1357         }
1358     } /* extract personalities */
1359
1360
1361    /* Add all personalities found to the IOCatalogue,
1362     * but don't start matching.
1363     */
1364     gIOCatalogue->addDrivers(allDriverPersonalities, false);
1365
1366 finish:
1367
1368     if (allDriverPersonalities) allDriverPersonalities->release();
1369     if (keyIterator) keyIterator->release();
1370
1371     return result;
1372 }
1373
1374
1375 /*********************************************************************
1376 * Called from IOCatalogue to add extensions from an mkext archive.
1377 * This function makes a copy of the mkext object passed in because
1378 * the device tree support code dumps it after calling us (indirectly
1379 * through the IOCatalogue).
1380 *********************************************************************/
1381 bool addExtensionsFromArchive(OSData * mkextDataObject) {
1382     bool result = true;
1383
1384     OSDictionary * startupExtensions = NULL;  // don't release
1385     OSArray      * bootLoaderObjects = NULL;  // don't release
1386     OSDictionary * extensions = NULL;         // must release
1387     MemoryMapFileInfo mkext_file_info;
1388     OSCollectionIterator * keyIterator = NULL;   // must release
1389     OSString             * key = NULL;           // don't release
1390
1391     startupExtensions = getStartupExtensions();
1392     if (!startupExtensions) {
1393         IOLog("Can't record extension archive; there is no"
1394             " extensions dictionary.\n");
1395         LOG_DELAY();
1396         result = false;
1397         goto finish;
1398     }
1399
1400     bootLoaderObjects = getBootLoaderObjects();
1401     if (! bootLoaderObjects) {
1402         IOLog("Error: Couldn't allocate array to hold temporary objects.\n");
1403         LOG_DELAY();
1404         result = false;
1405         goto finish;
1406     }
1407
1408     extensions = OSDictionary::withCapacity(2);
1409     if (!extensions) {
1410         IOLog("Error: Couldn't allocate dictionary to unpack "
1411             "extension archive.\n");
1412         LOG_DELAY();
1413         result = false;
1414         goto finish;
1415     }
1416
1417     mkext_file_info.paddr = (UInt32)mkextDataObject->getBytesNoCopy();
1418     mkext_file_info.length = mkextDataObject->getLength();
1419
1420    /* Save the local mkext data object so that we can deallocate it later.
1421     */
1422     bootLoaderObjects->setObject(mkextDataObject);
1423
1424     result = extractExtensionsFromArchive(&mkext_file_info, extensions);
1425     if (!result) {
1426         IOLog("Error: Failed to extract extensions from archive.\n");
1427         LOG_DELAY();
1428         result = false;
1429         goto finish;
1430     }
1431
1432     result = mergeExtensionDictionaries(startupExtensions, extensions);
1433     if (!result) {
1434         IOLog("Error: Failed to merge new extensions into existing set.\n");
1435         LOG_DELAY();
1436         goto finish;
1437     }
1438
1439     result = addPersonalities(extensions);
1440     if (!result) {
1441         IOLog("Error: Failed to add personalities for extensions extracted "
1442             "from archive.\n");
1443         LOG_DELAY();
1444         result = false;
1445         goto finish;
1446     }
1447
1448 finish:
1449
1450     if (!result) {
1451         IOLog("Error: Failed to record extensions from archive.\n");
1452         LOG_DELAY();
1453     } else {
1454         keyIterator = OSCollectionIterator::withCollection(
1455             extensions);
1456
1457         if (keyIterator) {
1458             while ( (key = OSDynamicCast(OSString,
1459                      keyIterator->getNextObject())) ) {
1460
1461                 IOLog("Added extension \"%s\" from archive.\n",
1462                     key->getCStringNoCopy());
1463                 LOG_DELAY();
1464             }
1465             keyIterator->release();
1466         }
1467     }
1468
1469     if (extensions) extensions->release();
1470
1471     return result;
1472 }
1473
1474
1475 /*********************************************************************
1476 * This function builds dictionaries for the startup extensions
1477 * put into memory by bootx, recording each in the startup extensions
1478 * dictionary. The dictionary format is this:
1479 *
1480 * {
1481 *     "plist" = (the extension's Info.plist as an OSDictionary)
1482 *     "code"  = (an OSData containing the executable file)
1483 * }
1484 *
1485 * This function returns true if any extensions were found and
1486 * recorded successfully, or if there are no start extensions,
1487 * and false if an unrecoverable error occurred. An error reading
1488 * a single extension is not considered fatal, and this function
1489 * will simply skip the problematic extension to try the next one.
1490 *********************************************************************/
1491
1492 bool recordStartupExtensions(void) {
1493     bool result = true;
1494     OSDictionary         * startupExtensions = NULL; // must release
1495     OSDictionary         * existingExtensions = NULL; // don't release
1496     OSDictionary         * mkextExtensions = NULL;   // must release
1497     IORegistryEntry      * bootxMemoryMap = NULL;    // must release
1498     OSDictionary         * propertyDict = NULL;      // must release
1499     OSCollectionIterator * keyIterator = NULL;       // must release
1500     OSString             * key = NULL;               // don't release
1501
1502     OSDictionary * newDriverDict = NULL;  // must release
1503     OSDictionary * driverPlist = NULL; // don't release
1504
1505     struct section * infosect;
1506     struct section * symsect;
1507     unsigned int     prelinkedCount = 0;
1508
1509     existingExtensions = getStartupExtensions();
1510     if (!existingExtensions) {
1511         IOLog("Error: There is no dictionary for startup extensions.\n");
1512         LOG_DELAY();
1513         result = false;
1514         goto finish;
1515     }
1516
1517     startupExtensions = OSDictionary::withCapacity(1);
1518     if (!startupExtensions) {
1519         IOLog("Error: Couldn't allocate dictionary "
1520             "to record startup extensions.\n");
1521         LOG_DELAY();
1522         result = false;
1523         goto finish;
1524     }
1525
1526     // --
1527     // add any prelinked modules as startup extensions
1528
1529     infosect   = getsectbyname("__PRELINK", "__info");
1530     symsect    = getsectbyname("__PRELINK", "__symtab");
1531     if (infosect && infosect->addr && infosect->size
1532      && symsect && symsect->addr && symsect->size) do
1533     {
1534         gIOPrelinkedModules = OSDynamicCast(OSArray,
1535             OSUnserializeXML((const char *) infosect->addr, NULL));
1536
1537         if (!gIOPrelinkedModules)
1538             break;
1539         for( unsigned int idx = 0;
1540                 (propertyDict = OSDynamicCast(OSDictionary, gIOPrelinkedModules->getObject(idx)));
1541                 idx++)
1542         {
1543             enum { kPrelinkReservedCount = 4 };
1544
1545            /* Get the extension's module name. This is used to record
1546             * the extension. Do *not* release the moduleName.
1547             */
1548             OSString * moduleName = OSDynamicCast(OSString,
1549                 propertyDict->getObject("CFBundleIdentifier"));
1550             if (!moduleName) {
1551                 IOLog("Error: Prelinked module entry has "
1552                     "no \"CFBundleIdentifier\" property.\n");
1553                 LOG_DELAY();
1554                 continue;
1555             }
1556
1557            /* Add the kext, & its plist.
1558             */
1559             newDriverDict = OSDictionary::withCapacity(4);
1560             assert(newDriverDict);
1561             newDriverDict->setObject("plist", propertyDict);
1562             startupExtensions->setObject(moduleName, newDriverDict);
1563             newDriverDict->release();
1564
1565            /* Add the code if present.
1566             */
1567             OSData * data = OSDynamicCast(OSData, propertyDict->getObject("OSBundlePrelink"));
1568             if (data) {
1569                 if (data->getLength() < (kPrelinkReservedCount * sizeof(UInt32))) {
1570                     IOLog("Error: Prelinked module entry has "
1571                         "invalid \"OSBundlePrelink\" property.\n");
1572                     LOG_DELAY();
1573                     continue;
1574                 }
1575                 UInt32 * prelink;
1576                 prelink = (UInt32 *) data->getBytesNoCopy();
1577                 kmod_info_t * kmod_info = (kmod_info_t *) OSReadBigInt32(prelink, 0);
1578                 // end of "file" is end of symbol sect
1579                 data = OSData::withBytesNoCopy((void *) kmod_info->address,
1580                             symsect->addr + symsect->size - kmod_info->address);
1581                 newDriverDict->setObject("code", data);
1582                 data->release();
1583                 prelinkedCount++;
1584                 continue;
1585             }
1586            /* Add the symbols if present.
1587             */
1588             OSNumber * num = OSDynamicCast(OSNumber, propertyDict->getObject("OSBundlePrelinkSymbols"));
1589             if (num) {
1590                 UInt32 offset = num->unsigned32BitValue();
1591                 data = OSData::withBytesNoCopy((void *) (symsect->addr + offset), symsect->size - offset);
1592                 newDriverDict->setObject("code", data);
1593                 data->release();
1594                 prelinkedCount++;
1595                 continue;
1596             }
1597         }
1598         if (gIOPrelinkedModules)
1599             IOLog("%d prelinked modules\n", prelinkedCount);
1600
1601         // free __info
1602         vm_offset_t
1603         virt = ml_static_ptovirt(infosect->addr);
1604         if( virt) {
1605             ml_static_mfree(virt, infosect->size);
1606         }
1607         newDriverDict = NULL;
1608     }
1609     while (false);
1610     // --
1611
1612     bootxMemoryMap =
1613         IORegistryEntry::fromPath(
1614             "/chosen/memory-map", // path
1615             gIODTPlane            // plane
1616             );
1617     // return value is retained so be sure to release it
1618
1619     if (!bootxMemoryMap) {
1620         IOLog("Error: Couldn't read booter memory map.\n");
1621         LOG_DELAY();
1622         result = false;
1623         goto finish;
1624     }
1625
1626     propertyDict = bootxMemoryMap->dictionaryWithProperties();
1627     if (!propertyDict) {
1628         IOLog("Error: Couldn't get property dictionary "
1629             "from memory map.\n");
1630         LOG_DELAY();
1631         result = false;
1632         goto finish;
1633     }
1634
1635     keyIterator = OSCollectionIterator::withCollection(propertyDict);
1636     if (!keyIterator) {
1637         IOLog("Error: Couldn't allocate iterator for driver images.\n");
1638         LOG_DELAY();
1639         result = false;
1640         goto finish;
1641     }
1642
1643     while ( (key = OSDynamicCast(OSString,
1644              keyIterator->getNextObject())) ) {
1645        /* Clear newDriverDict & mkextExtensions upon entry to the loop,
1646         * handling both successful and unsuccessful iterations.
1647         */
1648         if (newDriverDict) {
1649             newDriverDict->release();
1650             newDriverDict = NULL;
1651         }
1652         if (mkextExtensions) {
1653             mkextExtensions->release();
1654             mkextExtensions = NULL;
1655         }
1656
1657         const char * keyValue = key->getCStringNoCopy();
1658
1659         if ( !strncmp(keyValue, BOOTX_KEXT_PREFIX,
1660               strlen(BOOTX_KEXT_PREFIX)) ) {
1661
1662            /* Read the extension from the bootx-supplied memory.
1663             */
1664             newDriverDict = readExtension(propertyDict, keyValue);
1665             if (!newDriverDict) {
1666                 IOLog("Error: Couldn't read data "
1667                     "for device tree entry \"%s\".\n", keyValue);
1668                 LOG_DELAY();
1669                 continue;
1670             }
1671
1672
1673            /* Preprare to record the extension by getting its info plist.
1674             */
1675             driverPlist = OSDynamicCast(OSDictionary,
1676                 newDriverDict->getObject("plist"));
1677             if (!driverPlist) {
1678                 IOLog("Error: Extension in device tree entry \"%s\" "
1679                     "has no property list.\n", keyValue);
1680                 LOG_DELAY();
1681                 continue;
1682             }
1683
1684
1685            /* Get the extension's module name. This is used to record
1686             * the extension. Do *not* release the moduleName.
1687             */
1688             OSString * moduleName = OSDynamicCast(OSString,
1689                 driverPlist->getObject("CFBundleIdentifier"));
1690             if (!moduleName) {
1691                 IOLog("Error: Device tree entry \"%s\" has "
1692                     "no \"CFBundleIdentifier\" property.\n", keyValue);
1693                 LOG_DELAY();
1694                 continue;
1695             }
1696
1697
1698            /* All has gone well so far, so record the extension under
1699             * its module name, checking for an existing duplicate.
1700             *
1701             * Do not release moduleName, as it's part of the extension's
1702             * plist.
1703             */
1704             OSDictionary * incumbentExt = OSDynamicCast(OSDictionary,
1705                 startupExtensions->getObject(moduleName));
1706
1707             if (!incumbentExt) {
1708                 startupExtensions->setObject(moduleName, newDriverDict);
1709             } else {
1710                 OSDictionary * mostRecentExtension =
1711                     compareExtensionVersions(incumbentExt, newDriverDict);
1712
1713                 if (mostRecentExtension == incumbentExt) {
1714                     /* Do nothing, we've got the most recent. */
1715                 } else if (mostRecentExtension == newDriverDict) {
1716                     if (!startupExtensions->setObject(moduleName,
1717                          newDriverDict)) {
1718
1719                        /* This is a fatal error, so bail.
1720                         */
1721                         IOLog("recordStartupExtensions(): Failed to add "
1722                             "identifier %s\n",
1723                             moduleName->getCStringNoCopy());
1724                         LOG_DELAY();
1725                         result = false;
1726                         goto finish;
1727                     }
1728                 } else /* should be NULL */ {
1729
1730                    /* This is a nonfatal error, so continue.
1731                     */
1732                     IOLog("recordStartupExtensions(): Error comparing "
1733                         "versions of duplicate extensions %s.\n",
1734                         moduleName->getCStringNoCopy());
1735                     LOG_DELAY();
1736                     continue;
1737                 }
1738             }
1739
1740
1741         } else if ( !strncmp(keyValue, BOOTX_MULTIKEXT_PREFIX,
1742               strlen(BOOTX_MULTIKEXT_PREFIX)) ) {
1743
1744             mkextExtensions = OSDictionary::withCapacity(10);
1745             if (!mkextExtensions) {
1746                 IOLog("Error: Couldn't allocate dictionary to unpack "
1747                     "multi-extension archive.\n");
1748                 LOG_DELAY();
1749                 result = false;
1750                 goto finish;  // allocation failure is fatal for this routine
1751             }
1752             if (!readExtensions(propertyDict, keyValue, mkextExtensions)) {
1753                 IOLog("Error: Couldn't unpack multi-extension archive.\n");
1754                 LOG_DELAY();
1755                 continue;
1756             } else {
1757                 if (!mergeExtensionDictionaries(startupExtensions,
1758                      mkextExtensions)) {
1759
1760                     IOLog("Error: Failed to merge new extensions into "
1761                         "existing set.\n");
1762                     LOG_DELAY();
1763                     result = false;
1764                     goto finish;  // merge error is fatal for this routine
1765                 }
1766             }
1767         }
1768
1769         // Do not release key.
1770
1771     } /* while ( (key = OSDynamicCast(OSString, ...) ) ) */
1772
1773     if (!mergeExtensionDictionaries(existingExtensions, startupExtensions)) {
1774         IOLog("Error: Failed to merge new extensions into existing set.\n");
1775         LOG_DELAY();
1776         result = false;
1777         goto finish;
1778     }
1779
1780     result = addPersonalities(startupExtensions);
1781     if (!result) {
1782         IOLog("Error: Failed to add personalities for extensions extracted "
1783             "from archive.\n");
1784         LOG_DELAY();
1785         result = false;
1786         goto finish;
1787     }
1788
1789 finish:
1790
1791     // reused so clear first!
1792     if (keyIterator) {
1793         keyIterator->release();
1794         keyIterator = 0;
1795     }
1796
1797     if (!result) {
1798         IOLog("Error: Failed to record startup extensions.\n");
1799         LOG_DELAY();
1800     } else {
1801 #if DEBUG
1802         keyIterator = OSCollectionIterator::withCollection(
1803             startupExtensions);
1804
1805         if (keyIterator) {
1806             while ( (key = OSDynamicCast(OSString,
1807                      keyIterator->getNextObject())) ) {
1808
1809                 IOLog("Found extension \"%s\".\n",
1810                     key->getCStringNoCopy());
1811                 LOG_DELAY();
1812             }
1813             keyIterator->release();
1814             keyIterator = 0;
1815         }
1816 #endif /* DEBUG */
1817     }
1818
1819     if (newDriverDict)     newDriverDict->release();
1820     if (propertyDict)      propertyDict->release();
1821     if (bootxMemoryMap)    bootxMemoryMap->release();
1822     if (mkextExtensions)   mkextExtensions->release();
1823     if (startupExtensions) startupExtensions->release();
1824
1825     return result;
1826 }
1827
1828
1829 /*********************************************************************
1830 * This function removes an entry from the dictionary of startup
1831 * extensions. It's used when an extension can't be loaded, for
1832 * whatever reason. For drivers, this allows another matching driver
1833 * to be loaded, so that, for example, a driver for the root device
1834 * can be found.
1835 *********************************************************************/
1836 void removeStartupExtension(const char * extensionName) {
1837     OSDictionary * startupExtensions = NULL;      // don't release
1838     OSDictionary * extensionDict = NULL;          // don't release
1839     OSDictionary * extensionPlist = NULL;         // don't release
1840     OSDictionary * extensionPersonalities = NULL; // don't release
1841     OSDictionary * personality = NULL;            // don't release
1842     OSCollectionIterator * keyIterator = NULL;    // must release
1843     OSString     * key = NULL;                    // don't release
1844
1845     startupExtensions = getStartupExtensions();
1846     if (!startupExtensions) goto finish;
1847
1848
1849    /* Find the extension's entry in the dictionary of
1850     * startup extensions.
1851     */
1852     extensionDict = OSDynamicCast(OSDictionary,
1853         startupExtensions->getObject(extensionName));
1854     if (!extensionDict) goto finish;
1855
1856     extensionPlist = OSDynamicCast(OSDictionary,
1857         extensionDict->getObject("plist"));
1858     if (!extensionPlist) goto finish;
1859
1860     extensionPersonalities = OSDynamicCast(OSDictionary,
1861         extensionPlist->getObject("IOKitPersonalities"));
1862     if (!extensionPersonalities) goto finish;
1863
1864    /* If it was there, remove it from the catalogue proper
1865     * by calling removeDrivers(). Pass true for the second
1866     * argument to trigger a new round of matching, and
1867     * then remove the extension from the dictionary of startup
1868     * extensions.
1869     */
1870     keyIterator = OSCollectionIterator::withCollection(
1871         extensionPersonalities);
1872     if (!keyIterator) {
1873         IOLog("Error: Couldn't allocate iterator to scan"
1874             " personalities for %s.\n", extensionName);
1875         LOG_DELAY();
1876     }
1877
1878     while ((key = OSDynamicCast(OSString, keyIterator->getNextObject()))) {
1879         personality = OSDynamicCast(OSDictionary,
1880             extensionPersonalities->getObject(key));
1881
1882
1883         if (personality) {
1884             gIOCatalogue->removeDrivers(personality, true);
1885         }
1886     }
1887
1888     startupExtensions->removeObject(extensionName);
1889
1890 finish:
1891
1892     if (keyIterator) keyIterator->release();
1893     return;
1894 }
1895
1896 /*********************************************************************
1897 * FIXME: This function invalidates the globals gStartupExtensions and
1898 * FIXME: ...gBootLoaderObjects without setting them to NULL. Since
1899 * FIXME: ...the code itself is immediately unloaded, there may not be
1900 * FIXME: ...any reason to worry about that!
1901 *********************************************************************/
1902 void clearStartupExtensionsAndLoaderInfo(void)
1903 {
1904     OSDictionary * startupExtensions = NULL;  // must release
1905     OSArray      * bootLoaderObjects = NULL;  // must release
1906
1907     IORegistryEntry      * bootxMemoryMap = NULL;    // must release
1908     OSDictionary         * propertyDict = NULL;      // must release
1909     OSCollectionIterator * keyIterator = NULL;       // must release
1910     OSString             * key = NULL;               // don't release
1911
1912    /*****
1913     * Drop any temporarily held data objects.
1914     */
1915     bootLoaderObjects = getBootLoaderObjects();
1916     if (bootLoaderObjects) {
1917         bootLoaderObjects->release();
1918     }
1919
1920    /****
1921     * If any "code" entries in driver dictionaries are accompanied
1922     * by "compressedCode" entries, then those data objects were
1923     * created based of of kmem_alloc()'ed memory, which must be
1924     * freed specially.
1925     */
1926     startupExtensions = getStartupExtensions();
1927     if (startupExtensions) {
1928         keyIterator =
1929             OSCollectionIterator::withCollection(startupExtensions);
1930         if (!keyIterator) {
1931             IOLog("Error: Couldn't allocate iterator for startup "
1932                 "extensions.\n");
1933             LOG_DELAY();
1934             goto memory_map;  // bail to the memory_map label
1935         }
1936
1937         while ( (key = OSDynamicCast(OSString,
1938                  keyIterator->getNextObject())) ) {
1939
1940             OSDictionary * driverDict = 0;
1941             OSData * codeData = 0;
1942
1943             driverDict = OSDynamicCast(OSDictionary,
1944                 startupExtensions->getObject(key));
1945             if (driverDict) {
1946                 codeData = OSDynamicCast(OSData,
1947                     driverDict->getObject("code"));
1948
1949                 if (codeData &&
1950                     driverDict->getObject("compressedCode")) {
1951
1952                     kmem_free(kernel_map,
1953                        (unsigned int)codeData->getBytesNoCopy(),
1954                         codeData->getLength());
1955                 }
1956             }
1957         }
1958
1959         keyIterator->release();
1960         startupExtensions->release();
1961     }
1962
1963 memory_map:
1964
1965    /****
1966     * Go through the device tree's memory map and remove any driver
1967     * data entries.
1968     */
1969     bootxMemoryMap =
1970         IORegistryEntry::fromPath(
1971             "/chosen/memory-map", // path
1972             gIODTPlane            // plane
1973             );
1974     // return value is retained so be sure to release it
1975
1976     if (!bootxMemoryMap) {
1977         IOLog("Error: Couldn't read booter memory map.\n");
1978         LOG_DELAY();
1979         goto finish;
1980     }
1981
1982     propertyDict = bootxMemoryMap->dictionaryWithProperties();
1983     if (!propertyDict) {
1984         IOLog("Error: Couldn't get property dictionary "
1985             "from memory map.\n");
1986         LOG_DELAY();
1987         goto finish;
1988     }
1989
1990     keyIterator = OSCollectionIterator::withCollection(propertyDict);
1991     if (!keyIterator) {
1992         IOLog("Error: Couldn't allocate iterator for driver images.\n");
1993         LOG_DELAY();
1994         goto finish;
1995     }
1996
1997     while ( (key = OSDynamicCast(OSString,
1998              keyIterator->getNextObject())) ) {
1999
2000         const char * keyValue = key->getCStringNoCopy();
2001
2002         if ( !strncmp(keyValue, BOOTX_KEXT_PREFIX,
2003                   strlen(BOOTX_KEXT_PREFIX)) ||
2004              !strncmp(keyValue, BOOTX_MULTIKEXT_PREFIX,
2005                   strlen(BOOTX_MULTIKEXT_PREFIX)) ) {
2006
2007             OSData            * bootxDriverDataObject = NULL;
2008             MemoryMapFileInfo * driverInfo = 0;
2009
2010             bootxDriverDataObject = OSDynamicCast(OSData,
2011                 propertyDict->getObject(keyValue));
2012             // don't release bootxDriverDataObject
2013
2014             if (!bootxDriverDataObject) {
2015                 continue;
2016             }
2017             driverInfo = (MemoryMapFileInfo *)
2018                 bootxDriverDataObject->getBytesNoCopy(0,
2019                 sizeof(MemoryMapFileInfo));
2020             IODTFreeLoaderInfo((char *)keyValue,
2021                 (void *)driverInfo->paddr,
2022                 (int)driverInfo->length);
2023         }
2024     }
2025
2026 finish:
2027     if (bootxMemoryMap) bootxMemoryMap->release();
2028     if (propertyDict)   propertyDict->release();
2029     if (keyIterator)    keyIterator->release();
2030
2031     return;
2032 }