2 * Copyright (c) 2009 Apple Inc. All rights reserved.
4 * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
6 * This file contains Original Code and/or Modifications of Original Code
7 * as defined in and that are subject to the Apple Public Source License
8 * Version 2.0 (the 'License'). You may not use this file except in
9 * compliance with the License. The rights granted to you under the License
10 * may not be used to create, or enable the creation or redistribution of,
11 * unlawful or unlicensed copies of an Apple operating system, or to
12 * circumvent, violate, or enable the circumvention or violation of, any
13 * terms of an Apple operating system software license agreement.
15 * Please obtain a copy of the License at
16 * http://www.opensource.apple.com/apsl/ and read it before using this file.
18 * The Original Code and all software distributed under the License are
19 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
20 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
21 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
22 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
23 * Please see the License for the specific language governing rights and
24 * limitations under the License.
26 * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
29 #include <kern/backtrace.h>
30 #include <vm/vm_map_store_rb.h>
32 RB_GENERATE(rb_head
, vm_map_store
, entry
, rb_node_compare
);
34 #define VME_FOR_STORE( store) \
35 (vm_map_entry_t)(((unsigned long)store) - ((unsigned long)sizeof(struct vm_map_links)))
38 vm_map_store_init_rb( struct vm_map_header
* hdr
)
40 RB_INIT(&(hdr
->rb_head_store
));
43 int rb_node_compare(struct vm_map_store
*node
, struct vm_map_store
*parent
)
48 vme_c
= VME_FOR_STORE(node
);
49 vme_p
= VME_FOR_STORE(parent
);
50 if (vme_c
->vme_start
< vme_p
->vme_start
)
52 if (vme_c
->vme_start
>= vme_p
->vme_end
)
57 void vm_map_store_walk_rb( vm_map_t map
, vm_map_entry_t
*wrong_vme
, vm_map_entry_t
*vm_entry
)
59 struct vm_map_header hdr
= map
->hdr
;
60 struct vm_map_store
*rb_entry
= RB_ROOT(&(hdr
.rb_head_store
));
61 vm_map_entry_t cur
= *vm_entry
;
63 rb_entry
= RB_FIND( rb_head
, &(hdr
.rb_head_store
), &(cur
->store
));
65 panic("NO SUCH ENTRY %p. Gave back %p", *vm_entry
, *wrong_vme
);
67 panic("Cur: %p, L: %p, R: %p", VME_FOR_STORE(rb_entry
), VME_FOR_STORE(RB_LEFT(rb_entry
,entry
)), VME_FOR_STORE(RB_RIGHT(rb_entry
,entry
)));
71 boolean_t
vm_map_store_lookup_entry_rb( vm_map_t map
, vm_map_offset_t address
, vm_map_entry_t
*vm_entry
)
73 struct vm_map_header hdr
= map
->hdr
;
74 struct vm_map_store
*rb_entry
= RB_ROOT(&(hdr
.rb_head_store
));
75 vm_map_entry_t cur
= vm_map_to_entry(map
);
76 vm_map_entry_t prev
= VM_MAP_ENTRY_NULL
;
78 while (rb_entry
!= (struct vm_map_store
*)NULL
) {
79 cur
= VME_FOR_STORE(rb_entry
);
80 if(cur
== VM_MAP_ENTRY_NULL
)
82 if (address
>= cur
->vme_start
) {
83 if (address
< cur
->vme_end
) {
87 rb_entry
= RB_RIGHT(rb_entry
, entry
);
90 rb_entry
= RB_LEFT(rb_entry
, entry
);
93 if( prev
== VM_MAP_ENTRY_NULL
){
94 prev
= vm_map_to_entry(map
);
100 void vm_map_store_entry_link_rb( struct vm_map_header
*mapHdr
, __unused vm_map_entry_t after_where
, vm_map_entry_t entry
)
102 struct rb_head
*rbh
= &(mapHdr
->rb_head_store
);
103 struct vm_map_store
*store
= &(entry
->store
);
104 struct vm_map_store
*tmp_store
;
105 if((tmp_store
= RB_INSERT( rb_head
, rbh
, store
)) != NULL
) {
106 panic("VMSEL: INSERT FAILED: 0x%lx, 0x%lx, 0x%lx, 0x%lx", (uintptr_t)entry
->vme_start
, (uintptr_t)entry
->vme_end
,
107 (uintptr_t)(VME_FOR_STORE(tmp_store
))->vme_start
, (uintptr_t)(VME_FOR_STORE(tmp_store
))->vme_end
);
111 void vm_map_store_entry_unlink_rb( struct vm_map_header
*mapHdr
, vm_map_entry_t entry
)
113 struct rb_head
*rbh
= &(mapHdr
->rb_head_store
);
114 struct vm_map_store
*rb_entry
;
115 struct vm_map_store
*store
= &(entry
->store
);
117 rb_entry
= RB_FIND( rb_head
, rbh
, store
);
119 panic("NO ENTRY TO DELETE");
120 RB_REMOVE( rb_head
, rbh
, store
);
124 vm_map_store_copy_reset_rb( vm_map_copy_t copy
, vm_map_entry_t entry
, int nentries
)
126 struct vm_map_header
*mapHdr
= &(copy
->cpy_hdr
);
127 struct rb_head
*rbh
= &(mapHdr
->rb_head_store
);
128 struct vm_map_store
*store
;
131 while (entry
!= vm_map_copy_to_entry(copy
) && nentries
> 0) {
132 store
= &(entry
->store
);
133 RB_REMOVE( rb_head
, rbh
, store
);
134 entry
= entry
->vme_next
;
140 extern zone_t vm_map_holes_zone
; /* zone for vm map holes (vm_map_links) structures */
143 vm_map_combine_hole(vm_map_t map
, vm_map_entry_t hole_entry
);
145 vm_map_combine_hole(__unused vm_map_t map
, vm_map_entry_t hole_entry
)
148 vm_map_entry_t middle_hole_entry
, last_hole_entry
;
150 hole_entry
->vme_end
= hole_entry
->vme_next
->vme_end
;
152 middle_hole_entry
= hole_entry
->vme_next
;
153 last_hole_entry
= middle_hole_entry
->vme_next
;
155 assert(last_hole_entry
->vme_prev
== middle_hole_entry
);
156 assert(middle_hole_entry
->vme_end
!= last_hole_entry
->vme_start
);
158 last_hole_entry
->vme_prev
= hole_entry
;
159 hole_entry
->vme_next
= last_hole_entry
;
161 middle_hole_entry
->vme_prev
= NULL
;
162 middle_hole_entry
->vme_next
= NULL
;
164 zfree(vm_map_holes_zone
, middle_hole_entry
);
166 assert(hole_entry
->vme_start
< hole_entry
->vme_end
);
167 assert(last_hole_entry
->vme_start
< last_hole_entry
->vme_end
);
172 vm_map_delete_hole(vm_map_t map
, vm_map_entry_t hole_entry
);
174 vm_map_delete_hole(vm_map_t map
, vm_map_entry_t hole_entry
)
176 if (hole_entry
== CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
178 if (hole_entry
->vme_next
== CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
180 map
->holes_list
= NULL
;
181 SAVE_HINT_HOLE_WRITE(map
, NULL
);
184 vm_map_entry_t l_next
, l_prev
;
186 l_next
= (vm_map_entry_t
) map
->holes_list
->next
;
187 l_prev
= (vm_map_entry_t
) map
->holes_list
->prev
;
188 map
->holes_list
= (struct vm_map_links
*) l_next
;
190 l_next
->vme_prev
= l_prev
;
191 l_prev
->vme_next
= l_next
;
193 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) l_next
);
197 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) hole_entry
->vme_prev
);
199 hole_entry
->vme_prev
->vme_next
= hole_entry
->vme_next
;
200 hole_entry
->vme_next
->vme_prev
= hole_entry
->vme_prev
;
203 hole_entry
->vme_next
= NULL
;
204 hole_entry
->vme_prev
= NULL
;
205 zfree(vm_map_holes_zone
, hole_entry
);
215 check_map_sanity(vm_map_t map
, vm_map_entry_t old_hole_entry
)
217 vm_map_entry_t hole_entry
, next_hole_entry
;
218 vm_map_entry_t map_entry
, next_map_entry
;
220 if (map
->holes_list
== NULL
) {
225 hole_entry
= (vm_map_entry_t
) map
->holes_list
;
226 next_hole_entry
= hole_entry
->vme_next
;
228 map_entry
= vm_map_first_entry(map
);
229 next_map_entry
= map_entry
->vme_next
;
231 while(map_entry
->vme_start
> hole_entry
->vme_start
) {
232 hole_entry
= next_hole_entry
;
233 next_hole_entry
= hole_entry
->vme_next
;
235 if (hole_entry
== (vm_map_entry_t
)map
->holes_list
)
239 while (map_entry
!= vm_map_to_entry(map
)) {
241 if (map_entry
->vme_start
>= map
->max_offset
)
244 if (map_entry
->vme_end
!= map_entry
->vme_next
->vme_start
) {
246 if (map_entry
->vme_next
== vm_map_to_entry(map
))
249 if (hole_entry
->vme_start
!= map_entry
->vme_end
) {
250 panic("hole_entry not aligned %p(0x%llx), %p (0x%llx), %p", hole_entry
, (unsigned long long)hole_entry
->vme_start
, map_entry
->vme_next
, (unsigned long long)map_entry
->vme_end
, old_hole_entry
);
251 assert(hole_entry
->vme_start
== map_entry
->vme_end
);
254 if (hole_entry
->vme_end
!= map_entry
->vme_next
->vme_start
) {
255 panic("hole_entry not next aligned %p(0x%llx), %p (0x%llx), %p", hole_entry
, (unsigned long long)hole_entry
->vme_end
, map_entry
->vme_next
, (unsigned long long)map_entry
->vme_next
->vme_start
, old_hole_entry
);
256 assert(hole_entry
->vme_end
== map_entry
->vme_next
->vme_start
);
259 hole_entry
= next_hole_entry
;
260 next_hole_entry
= hole_entry
->vme_next
;
262 if (hole_entry
== (vm_map_entry_t
)map
->holes_list
)
266 map_entry
= map_entry
->vme_next
;
274 copy_hole_info(vm_map_entry_t hole_entry
, vm_map_entry_t old_hole_entry
)
276 old_hole_entry
->vme_prev
= hole_entry
->vme_prev
;
277 old_hole_entry
->vme_next
= hole_entry
->vme_next
;
278 old_hole_entry
->vme_start
= hole_entry
->vme_start
;
279 old_hole_entry
->vme_end
= hole_entry
->vme_end
;
284 update_holes_on_entry_deletion(vm_map_t map
, vm_map_entry_t old_entry
);
286 update_holes_on_entry_deletion(vm_map_t map
, vm_map_entry_t old_entry
)
289 * Dealing with the deletion of an older entry.
292 vm_map_entry_t hole_entry
, next_hole_entry
;
294 struct vm_map_entry old_hole_entry
;
296 boolean_t create_new_hole
= TRUE
;
298 hole_entry
= CAST_TO_VM_MAP_ENTRY(map
->hole_hint
);
302 if (hole_entry
->vme_end
== old_entry
->vme_start
) {
304 * Found a hole right after above our entry.
308 } else if (hole_entry
->vme_start
== old_entry
->vme_end
) {
310 if (hole_entry
!= CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
313 * Found a hole right after below our entry but
314 * make sure we don't erroneously extend backwards.
319 hole_entry
= hole_entry
->vme_prev
;
322 } else if (hole_entry
->vme_start
> old_entry
->vme_end
) {
325 * Useless hint. Start from the top.
328 hole_entry
= CAST_TO_VM_MAP_ENTRY(map
->holes_list
);
331 if (hole_entry
!= CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
332 if (hole_entry
->vme_start
> old_entry
->vme_start
) {
333 panic("Hole hint failed: Hole entry start: 0x%llx, entry start: 0x%llx, map hole start: 0x%llx, map hint start: 0x%llx\n",
334 (unsigned long long)hole_entry
->vme_start
,
335 (unsigned long long)old_entry
->vme_start
,
336 (unsigned long long)map
->holes_list
->start
,
337 (unsigned long long)map
->hole_hint
->start
);
339 if (hole_entry
->vme_end
> old_entry
->vme_start
) {
340 panic("Hole hint failed: Hole entry end: 0x%llx, entry start: 0x%llx, map hole start: 0x%llx, map hint start: 0x%llx\n",
341 (unsigned long long)hole_entry
->vme_end
,
342 (unsigned long long)old_entry
->vme_start
,
343 (unsigned long long)map
->holes_list
->start
,
344 (unsigned long long)map
->hole_hint
->start
);
350 next_hole_entry
= hole_entry
->vme_next
;
353 * Hole is right above the entry.
355 if (hole_entry
->vme_end
== old_entry
->vme_start
) {
358 copy_hole_info(hole_entry
, &old_hole_entry
);
362 * Is there another hole right below the entry?
363 * Can we combine holes?
366 if (old_entry
->vme_end
== hole_entry
->vme_next
->vme_start
) {
368 vm_map_combine_hole(map
, hole_entry
);
371 hole_entry
->vme_end
= old_entry
->vme_end
;
373 create_new_hole
= FALSE
;
375 check_map_sanity(map
, &old_hole_entry
);
381 * Hole is right below the entry.
383 if (hole_entry
->vme_start
== old_entry
->vme_end
) {
386 copy_hole_info(hole_entry
, &old_hole_entry
);
389 hole_entry
->vme_start
= old_entry
->vme_start
;
390 create_new_hole
= FALSE
;
393 check_map_sanity(map
, &old_hole_entry
);
399 * Hole is beyond our entry. Let's go back to the last hole
400 * before our entry so we have the right place to link up the
401 * new hole that will be needed.
403 if (hole_entry
->vme_start
> old_entry
->vme_end
) {
406 copy_hole_info(hole_entry
, &old_hole_entry
);
409 if (hole_entry
!= CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
410 assert(hole_entry
->vme_start
!= old_entry
->vme_start
);
411 hole_entry
= hole_entry
->vme_prev
;
416 hole_entry
= next_hole_entry
;
418 if (hole_entry
== CAST_TO_VM_MAP_ENTRY(map
->holes_list
)) {
419 hole_entry
= hole_entry
->vme_prev
;
425 if (create_new_hole
) {
426 struct vm_map_links
*new_hole_entry
= NULL
;
427 vm_map_entry_t l_next
, l_prev
;
429 new_hole_entry
= zalloc(vm_map_holes_zone
);
432 * First hole in the map?
434 * A hole that is located above the current first hole in the map?
436 if (map
->holes_list
== NULL
|| (hole_entry
== CAST_TO_VM_MAP_ENTRY(map
->holes_list
) && hole_entry
->vme_start
> old_entry
->vme_start
)) {
438 if (map
->holes_list
== NULL
) {
440 map
->holes_list
= new_hole_entry
;
441 new_hole_entry
->prev
= new_hole_entry
->next
= CAST_TO_VM_MAP_ENTRY(map
->holes_list
);
444 l_next
= CAST_TO_VM_MAP_ENTRY(map
->holes_list
);
445 l_prev
= map
->holes_list
->prev
;
446 map
->holes_list
= new_hole_entry
;
447 new_hole_entry
->next
= l_next
;
448 new_hole_entry
->prev
= l_prev
;
450 l_prev
->vme_next
= l_next
->vme_prev
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
454 l_next
= hole_entry
->vme_next
;
455 l_prev
= hole_entry
->vme_next
->vme_prev
;
457 new_hole_entry
->prev
= hole_entry
;
458 new_hole_entry
->next
= l_next
;
460 hole_entry
->vme_next
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
461 l_next
->vme_prev
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
464 new_hole_entry
->start
= old_entry
->vme_start
;
465 new_hole_entry
->end
= old_entry
->vme_end
;
467 hole_entry
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
469 assert(new_hole_entry
->start
< new_hole_entry
->end
);
473 check_map_sanity(map
, &old_hole_entry
);
476 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) hole_entry
);
482 update_holes_on_entry_creation(vm_map_t map
, vm_map_entry_t new_entry
);
484 update_holes_on_entry_creation(vm_map_t map
, vm_map_entry_t new_entry
)
487 vm_map_entry_t hole_entry
, next_hole_entry
;
489 struct vm_map_entry old_hole_entry
;
490 vm_map_entry_t tmp_entry
;
491 boolean_t check_map_with_hole_sanity
= TRUE
;
495 * Case A: The entry is aligned exactly with the start and end of the hole.
496 * This will delete the hole.
498 * Case B: The entry is completely within a hole but NOT aligned with the start/end of the hole.
499 * This will split a hole.
501 * Case C: The entry overlaps with the hole. The entry could be extending upwards (C1) or downwards (C2).
502 * This will reduce the size of the hole or delete the hole completely if it is smaller than the entry.
505 hole_entry
= CAST_TO_VM_MAP_ENTRY(map
->holes_list
);
507 next_hole_entry
= hole_entry
->vme_next
;
513 * If the entry doesn't exist in the RB tree, we are likely dealing with copy maps where
514 * the entries belonging to the copy map are linked into the list of entries silently and
515 * then added to the RB-tree later on.
516 * So sanity checks are useless in that case.
518 check_map_with_hole_sanity
= vm_map_lookup_entry(map
, new_entry
->vme_start
, &tmp_entry
);
521 if (hole_entry
->vme_start
== new_entry
->vme_start
&&
522 hole_entry
->vme_end
== new_entry
->vme_end
) {
526 copy_hole_info(hole_entry
, &old_hole_entry
);
530 * This check makes sense only for regular maps, not copy maps.
531 * With a regular map, the VM entry is first linked and then
532 * the hole is deleted. So the check below, which makes sure that
533 * the map's bounds are being respected, is valid.
534 * But for copy maps, the hole is deleted before the VM entry is
535 * linked (vm_map_store_copy_insert) and so this check is invalid.
537 if (hole_entry == (vm_map_entry_t) map->holes_list) {
539 if (hole_entry->vme_next == (vm_map_entry_t) map->holes_list) {
541 next_hole_entry = vm_map_last_entry(map);
542 assert(next_hole_entry->vme_end >= map->max_offset);
547 vm_map_delete_hole(map
, hole_entry
);
550 if (check_map_with_hole_sanity
)
551 check_map_sanity(map
, &old_hole_entry
);
555 } else if (hole_entry
->vme_start
< new_entry
->vme_start
&&
556 hole_entry
->vme_end
> new_entry
->vme_end
) {
559 struct vm_map_links
*new_hole_entry
= NULL
;
561 new_hole_entry
= zalloc(vm_map_holes_zone
);
564 copy_hole_info(hole_entry
, &old_hole_entry
);
567 new_hole_entry
->prev
= hole_entry
;
568 new_hole_entry
->next
= hole_entry
->vme_next
;
569 hole_entry
->vme_next
->vme_prev
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
570 hole_entry
->vme_next
= CAST_TO_VM_MAP_ENTRY(new_hole_entry
);
572 new_hole_entry
->start
= new_entry
->vme_end
;
573 new_hole_entry
->end
= hole_entry
->vme_end
;
574 hole_entry
->vme_end
= new_entry
->vme_start
;
576 assert(hole_entry
->vme_start
< hole_entry
->vme_end
);
577 assert(new_hole_entry
->start
< new_hole_entry
->end
);
580 if (check_map_with_hole_sanity
)
581 check_map_sanity(map
, &old_hole_entry
);
584 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) hole_entry
);
587 } else if ((new_entry
->vme_start
<= hole_entry
->vme_start
) && (hole_entry
->vme_start
< new_entry
->vme_end
)) {
590 * Case C1: Entry moving upwards and a part/full hole lies within the bounds of the entry.
594 copy_hole_info(hole_entry
, &old_hole_entry
);
597 if (hole_entry
->vme_end
<= new_entry
->vme_end
) {
599 vm_map_delete_hole(map
, hole_entry
);
601 hole_entry
->vme_start
= new_entry
->vme_end
;
602 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) hole_entry
);
606 if (check_map_with_hole_sanity
)
607 check_map_sanity(map
, &old_hole_entry
);
612 } else if ((new_entry
->vme_start
< hole_entry
->vme_end
) && (hole_entry
->vme_end
<= new_entry
->vme_end
)) {
615 * Case C2: Entry moving downwards and a part/full hole lies within the bounds of the entry.
619 copy_hole_info(hole_entry
, &old_hole_entry
);
622 if (hole_entry
->vme_start
>= new_entry
->vme_start
) {
623 vm_map_delete_hole(map
, hole_entry
);
625 hole_entry
->vme_end
= new_entry
->vme_start
;
626 SAVE_HINT_HOLE_WRITE(map
, (struct vm_map_links
*) hole_entry
);
630 if (check_map_with_hole_sanity
)
631 check_map_sanity(map
, &old_hole_entry
);
637 hole_entry
= next_hole_entry
;
638 next_hole_entry
= hole_entry
->vme_next
;
640 if (hole_entry
== CAST_TO_VM_MAP_ENTRY(map
->holes_list
))
644 panic("Illegal action: h1: %p, s:0x%llx, e:0x%llx...h2:%p, s:0x%llx, e:0x%llx...h3:0x%p, s:0x%llx, e:0x%llx\n",
645 hole_entry
->vme_prev
,
646 (unsigned long long)hole_entry
->vme_prev
->vme_start
,
647 (unsigned long long)hole_entry
->vme_prev
->vme_end
,
649 (unsigned long long)hole_entry
->vme_start
,
650 (unsigned long long)hole_entry
->vme_end
,
651 hole_entry
->vme_next
,
652 (unsigned long long)hole_entry
->vme_next
->vme_start
,
653 (unsigned long long)hole_entry
->vme_next
->vme_end
);
658 update_first_free_rb(vm_map_t map
, vm_map_entry_t entry
, boolean_t new_entry_creation
)
661 if (map
->holelistenabled
) {
664 * Holes can be used to track ranges all the way up to MACH_VM_MAX_ADDRESS or more (e.g. kernel map).
666 vm_map_offset_t max_valid_offset
= (map
->max_offset
> MACH_VM_MAX_ADDRESS
) ? map
->max_offset
: MACH_VM_MAX_ADDRESS
;
669 * Clipping an entry will not result in the creation/deletion/modification of
670 * a hole. Those calls pass NULL for their target entry.
677 * Commpage is pinned beyond the map's max offset. That shouldn't affect the
678 * holes within the bounds of the map.
680 if (vm_map_trunc_page(entry
->vme_start
, VM_MAP_PAGE_MASK(map
)) >= max_valid_offset
) {
688 * - A new entry has already been added to the map
690 * - An older entry has already been deleted from the map
692 * We are updating the hole list after the fact (except in one special case involving copy maps).
696 if (new_entry_creation
) {
698 update_holes_on_entry_creation(map
, entry
);
701 update_holes_on_entry_deletion(map
, entry
);