[apple/xnu.git] / osfmk / kern / task.c

/*
 * Copyright (c) 2000-2008 Apple Inc. All rights reserved.
 *
 * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. The rights granted to you under the License
 * may not be used to create, or enable the creation or redistribution of,
 * unlawful or unlicensed copies of an Apple operating system, or to
 * circumvent, violate, or enable the circumvention or violation of, any
 * terms of an Apple operating system software license agreement.
 * 
 * Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
 */
/*
 * @OSF_FREE_COPYRIGHT@
 */
/* 
 * Mach Operating System
 * Copyright (c) 1991,1990,1989,1988 Carnegie Mellon University
 * All Rights Reserved.
 * 
 * Permission to use, copy, modify and distribute this software and its
 * documentation is hereby granted, provided that both the copyright
 * notice and this permission notice appear in all copies of the
 * software, derivative works or modified versions, and any portions
 * thereof, and that both notices appear in supporting documentation.
 * 
 * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
 * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
 * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
 * 
 * Carnegie Mellon requests users of this software to return to
 * 
 *  Software Distribution Coordinator  or  Software.Distribution@CS.CMU.EDU
 *  School of Computer Science
 *  Carnegie Mellon University
 *  Pittsburgh PA 15213-3890
 * 
 * any improvements or extensions that they make and grant Carnegie Mellon
 * the rights to redistribute these changes.
 */
/*
 *      File:   kern/task.c
 *      Author: Avadis Tevanian, Jr., Michael Wayne Young, David Golub,
 *              David Black
 *
 *      Task management primitives implementation.
 */
/*
 * Copyright (c) 1993 The University of Utah and
 * the Computer Systems Laboratory (CSL).  All rights reserved.
 *
 * Permission to use, copy, modify and distribute this software and its
 * documentation is hereby granted, provided that both the copyright
 * notice and this permission notice appear in all copies of the
 * software, derivative works or modified versions, and any portions
 * thereof, and that both notices appear in supporting documentation.
 *
 * THE UNIVERSITY OF UTAH AND CSL ALLOW FREE USE OF THIS SOFTWARE IN ITS "AS
 * IS" CONDITION.  THE UNIVERSITY OF UTAH AND CSL DISCLAIM ANY LIABILITY OF
 * ANY KIND FOR ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
 *
 * CSL requests users of this software to return to csl-dist@cs.utah.edu any
 * improvements that they make and grant CSL redistribution rights.
 *
 */
/*
 * NOTICE: This file was modified by McAfee Research in 2004 to introduce
 * support for mandatory and extensible security protections.  This notice
 * is included in support of clause 2.2 (b) of the Apple Public License,
 * Version 2.0.
 * Copyright (c) 2005 SPARTA, Inc.
 */

#include <mach_kdb.h>
#include <fast_tas.h>
#include <platforms.h>

#include <mach/mach_types.h>
#include <mach/boolean.h>
#include <mach/host_priv.h>
#include <mach/machine/vm_types.h>
#include <mach/vm_param.h>
#include <mach/semaphore.h>
#include <mach/task_info.h>
#include <mach/task_special_ports.h>

#include <ipc/ipc_types.h>
#include <ipc/ipc_space.h>
#include <ipc/ipc_entry.h>

#include <kern/kern_types.h>
#include <kern/mach_param.h>
#include <kern/misc_protos.h>
#include <kern/task.h>
#include <kern/thread.h>
#include <kern/zalloc.h>
#include <kern/kalloc.h>
#include <kern/processor.h>
#include <kern/sched_prim.h>    /* for thread_wakeup */
#include <kern/ipc_tt.h>
#include <kern/ledger.h>
#include <kern/host.h>
#include <kern/clock.h>
#include <kern/timer.h>
#include <kern/assert.h>
#include <kern/sync_lock.h>
#include <kern/affinity.h>

#include <vm/pmap.h>
#include <vm/vm_map.h>
#include <vm/vm_kern.h>         /* for kernel_map, ipc_kernel_map */
#include <vm/vm_pageout.h>
#include <vm/vm_protos.h>

#if     MACH_KDB
#include <ddb/db_sym.h>
#endif  /* MACH_KDB */

#ifdef __ppc__
#include <ppc/exception.h>
#include <ppc/hw_perfmon.h>
#endif

/*
 * Exported interfaces
 */

#include <mach/task_server.h>
#include <mach/mach_host_server.h>
#include <mach/host_security_server.h>
#include <mach/mach_port_server.h>
#include <mach/security_server.h>

#include <vm/vm_shared_region.h>

#if CONFIG_MACF_MACH
#include <security/mac_mach_internal.h>
#endif

task_t  kernel_task;
zone_t  task_zone;

/* Forwards */

void            task_hold_locked(
                        task_t          task);
void            task_wait_locked(
                        task_t          task);
void            task_release_locked(
                        task_t          task);
void            task_free(
                        task_t          task );
void            task_synchronizer_destroy_all(
                        task_t          task);

kern_return_t   task_set_ledger(
                        task_t          task,
                        ledger_t        wired,
                        ledger_t        paged);

void
task_backing_store_privileged(
                        task_t task)
{
        task_lock(task);
        task->priv_flags |= VM_BACKING_STORE_PRIV;
        task_unlock(task);
        return;
}


void
task_set_64bit(
                task_t task,
                boolean_t is64bit)
{
#ifdef __i386__
        thread_t thread;
#endif /* __i386__ */
        int     vm_flags = 0;

        if (is64bit) {
                if (task_has_64BitAddr(task))
                        return;

                task_set_64BitAddr(task);
        } else {
                if ( !task_has_64BitAddr(task))
                        return;

                /*
                 * Deallocate all memory previously allocated
                 * above the 32-bit address space, since it won't
                 * be accessible anymore.
                 */
                /* remove regular VM map entries & pmap mappings */
                (void) vm_map_remove(task->map,
                                     (vm_map_offset_t) VM_MAX_ADDRESS,
                                     MACH_VM_MAX_ADDRESS,
                                     0);
#ifdef __ppc__
                /* LP64todo - make this clean */
                /*
                 * PPC51: ppc64 is limited to 51-bit addresses.
                 * Memory mapped above that limit is handled specially
                 * at the pmap level, so let pmap clean the commpage mapping
                 * explicitly...
                 */
                pmap_unmap_sharedpage(task->map->pmap); /* Unmap commpage */
                /* ... and avoid regular pmap cleanup */
                vm_flags |= VM_MAP_REMOVE_NO_PMAP_CLEANUP;
#endif /* __ppc__ */
                /* remove the higher VM mappings */
                (void) vm_map_remove(task->map,
                                     MACH_VM_MAX_ADDRESS,
                                     0xFFFFFFFFFFFFF000ULL,
                                     vm_flags);
                task_clear_64BitAddr(task);
        }
        /* FIXME: On x86, the thread save state flavor can diverge from the
         * task's 64-bit feature flag due to the 32-bit/64-bit register save
         * state dichotomy. Since we can be pre-empted in this interval,
         * certain routines may observe the thread as being in an inconsistent
         * state with respect to its task's 64-bitness.
         */
#ifdef __i386__
        queue_iterate(&task->threads, thread, thread_t, task_threads) {
                machine_thread_switch_addrmode(thread);
        }
#endif /* __i386__ */
}

void
task_init(void)
{
        task_zone = zinit(
                        sizeof(struct task),
                        TASK_MAX * sizeof(struct task),
                        TASK_CHUNK * sizeof(struct task),
                        "tasks");

        /*
         * Create the kernel task as the first task.
         */
        if (task_create_internal(TASK_NULL, FALSE, FALSE, &kernel_task) != KERN_SUCCESS)
                panic("task_init\n");

        vm_map_deallocate(kernel_task->map);
        kernel_task->map = kernel_map;
}

/*
 * Create a task running in the kernel address space.  It may
 * have its own map of size mem_size and may have ipc privileges.
 */
kern_return_t
kernel_task_create(
        __unused task_t         parent_task,
        __unused vm_offset_t            map_base,
        __unused vm_size_t              map_size,
        __unused task_t         *child_task)
{
        return (KERN_INVALID_ARGUMENT);
}

kern_return_t
task_create(
        task_t                          parent_task,
        __unused ledger_port_array_t    ledger_ports,
        __unused mach_msg_type_number_t num_ledger_ports,
        __unused boolean_t              inherit_memory,
        __unused task_t                 *child_task)    /* OUT */
{
        if (parent_task == TASK_NULL)
                return(KERN_INVALID_ARGUMENT);

        /*
         * No longer supported: too many calls assume that a task has a valid
         * process attached.
         */
        return(KERN_FAILURE);
}

kern_return_t
host_security_create_task_token(
        host_security_t                 host_security,
        task_t                          parent_task,
        __unused security_token_t       sec_token,
        __unused audit_token_t          audit_token,
        __unused host_priv_t            host_priv,
        __unused ledger_port_array_t    ledger_ports,
        __unused mach_msg_type_number_t num_ledger_ports,
        __unused boolean_t              inherit_memory,
        __unused task_t                 *child_task)    /* OUT */
{
        if (parent_task == TASK_NULL)
                return(KERN_INVALID_ARGUMENT);

        if (host_security == HOST_NULL)
                return(KERN_INVALID_SECURITY);

        /*
         * No longer supported.
         */
        return(KERN_FAILURE);
}

kern_return_t
task_create_internal(
        task_t          parent_task,
        boolean_t       inherit_memory,
        boolean_t       is_64bit,
        task_t          *child_task)            /* OUT */
{
        task_t                  new_task;
        vm_shared_region_t      shared_region;

        new_task = (task_t) zalloc(task_zone);

        if (new_task == TASK_NULL)
                return(KERN_RESOURCE_SHORTAGE);

        /* one ref for just being alive; one for our caller */
        new_task->ref_count = 2;

        if (inherit_memory)
                new_task->map = vm_map_fork(parent_task->map);
        else
                new_task->map = vm_map_create(pmap_create(0, is_64bit),
                                        (vm_map_offset_t)(VM_MIN_ADDRESS),
                                        (vm_map_offset_t)(VM_MAX_ADDRESS), TRUE);

        /* Inherit memlock limit from parent */
        if (parent_task)
                vm_map_set_user_wire_limit(new_task->map, parent_task->map->user_wire_limit);

        mutex_init(&new_task->lock, 0);
        queue_init(&new_task->threads);
        new_task->suspend_count = 0;
        new_task->thread_count = 0;
        new_task->active_thread_count = 0;
        new_task->user_stop_count = 0;
        new_task->pset_hint = PROCESSOR_SET_NULL;
        new_task->role = TASK_UNSPECIFIED;
        new_task->active = TRUE;
        new_task->user_data = NULL;
        new_task->faults = 0;
        new_task->cow_faults = 0;
        new_task->pageins = 0;
        new_task->messages_sent = 0;
        new_task->messages_received = 0;
        new_task->syscalls_mach = 0;
        new_task->priv_flags = 0;
        new_task->syscalls_unix=0;
        new_task->c_switch = new_task->p_switch = new_task->ps_switch = 0;
        new_task->taskFeatures[0] = 0;                          /* Init task features */
        new_task->taskFeatures[1] = 0;                          /* Init task features */

#ifdef MACH_BSD
        new_task->bsd_info = NULL;
#endif /* MACH_BSD */

#ifdef __i386__
        new_task->i386_ldt = 0;
#endif

#ifdef __ppc__
        if(BootProcInfo.pf.Available & pf64Bit) new_task->taskFeatures[0] |= tf64BitData;       /* If 64-bit machine, show we have 64-bit registers at least */
#endif

        queue_init(&new_task->semaphore_list);
        queue_init(&new_task->lock_set_list);
        new_task->semaphores_owned = 0;
        new_task->lock_sets_owned = 0;

#if CONFIG_MACF_MACH
        /*mutex_init(&new_task->labellock, ETAP_NO_TRACE);*/
        new_task->label = labelh_new(1);
        mac_task_label_init (&new_task->maclabel);
#endif

        ipc_task_init(new_task, parent_task);

        new_task->total_user_time = 0;
        new_task->total_system_time = 0;

        new_task->vtimers = 0;

        new_task->shared_region = NULL;

        new_task->affinity_space = NULL;

        if (parent_task != TASK_NULL) {
                new_task->sec_token = parent_task->sec_token;
                new_task->audit_token = parent_task->audit_token;

                /* inherit the parent's shared region */
                shared_region = vm_shared_region_get(parent_task);
                vm_shared_region_set(new_task, shared_region);

                new_task->wired_ledger_port = ledger_copy(
                        convert_port_to_ledger(parent_task->wired_ledger_port));
                new_task->paged_ledger_port = ledger_copy(
                        convert_port_to_ledger(parent_task->paged_ledger_port));
                if(task_has_64BitAddr(parent_task))
                        task_set_64BitAddr(new_task);

#ifdef __i386__
                if (inherit_memory && parent_task->i386_ldt)
                        new_task->i386_ldt = user_ldt_copy(parent_task->i386_ldt);
#endif
                if (inherit_memory && parent_task->affinity_space)
                        task_affinity_create(parent_task, new_task);
        }
        else {
                new_task->sec_token = KERNEL_SECURITY_TOKEN;
                new_task->audit_token = KERNEL_AUDIT_TOKEN;
                new_task->wired_ledger_port = ledger_copy(root_wired_ledger);
                new_task->paged_ledger_port = ledger_copy(root_paged_ledger);
        }

        if (kernel_task == TASK_NULL) {
                new_task->priority = BASEPRI_KERNEL;
                new_task->max_priority = MAXPRI_KERNEL;
        }
        else {
                new_task->priority = BASEPRI_DEFAULT;
                new_task->max_priority = MAXPRI_USER;
        }
        
        mutex_lock(&tasks_threads_lock);
        queue_enter(&tasks, new_task, task_t, tasks);
        tasks_count++;
        mutex_unlock(&tasks_threads_lock);

        if (vm_backing_store_low && parent_task != NULL)
                new_task->priv_flags |= (parent_task->priv_flags&VM_BACKING_STORE_PRIV);

        ipc_task_enable(new_task);

        *child_task = new_task;
        return(KERN_SUCCESS);
}

/*
 *      task_deallocate:
 *
 *      Drop a reference on a task.
 */
void
task_deallocate(
        task_t          task)
{
        if (task == TASK_NULL)
            return;

        if (task_deallocate_internal(task) > 0)
                return;

        ipc_task_terminate(task);

        if (task->affinity_space)
                task_affinity_deallocate(task);

        vm_map_deallocate(task->map);
        is_release(task->itk_space);

#if CONFIG_MACF_MACH
        labelh_release(task->label);
#endif
        zfree(task_zone, task);
}

/*
 *      task_name_deallocate:
 *
 *      Drop a reference on a task name.
 */
void
task_name_deallocate(
        task_name_t             task_name)
{
        return(task_deallocate((task_t)task_name));
}


/*
 *      task_terminate:
 *
 *      Terminate the specified task.  See comments on thread_terminate
 *      (kern/thread.c) about problems with terminating the "current task."
 */

kern_return_t
task_terminate(
        task_t          task)
{
        if (task == TASK_NULL)
                return (KERN_INVALID_ARGUMENT);

        if (task->bsd_info)
                return (KERN_FAILURE);

        return (task_terminate_internal(task));
}

kern_return_t
task_terminate_internal(
        task_t                  task)
{
        thread_t                        thread, self;
        task_t                          self_task;
        boolean_t                       interrupt_save;

        assert(task != kernel_task);

        self = current_thread();
        self_task = self->task;

        /*
         *      Get the task locked and make sure that we are not racing
         *      with someone else trying to terminate us.
         */
        if (task == self_task)
                task_lock(task);
        else
        if (task < self_task) {
                task_lock(task);
                task_lock(self_task);
        }
        else {
                task_lock(self_task);
                task_lock(task);
        }

        if (!task->active || !self->active) {
                /*
                 *      Task or current act is already being terminated.
                 *      Just return an error. If we are dying, this will
                 *      just get us to our AST special handler and that
                 *      will get us to finalize the termination of ourselves.
                 */
                task_unlock(task);
                if (self_task != task)
                        task_unlock(self_task);

                return (KERN_FAILURE);
        }

        if (self_task != task)
                task_unlock(self_task);

        /*
         * Make sure the current thread does not get aborted out of
         * the waits inside these operations.
         */
        interrupt_save = thread_interrupt_level(THREAD_UNINT);

        /*
         *      Indicate that we want all the threads to stop executing
         *      at user space by holding the task (we would have held
         *      each thread independently in thread_terminate_internal -
         *      but this way we may be more likely to already find it
         *      held there).  Mark the task inactive, and prevent
         *      further task operations via the task port.
         */
        task_hold_locked(task);
        task->active = FALSE;
        ipc_task_disable(task);

        /*
         *      Terminate each thread in the task.
         */
        queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        thread_terminate_internal(thread);
        }

        /*
         *      Give the machine dependent code a chance
         *      to perform cleanup before ripping apart
         *      the task.
         */
        if (self_task == task)
                machine_thread_terminate_self();

        task_unlock(task);

        /*
         *      Destroy all synchronizers owned by the task.
         */
        task_synchronizer_destroy_all(task);

        /*
         *      Destroy the IPC space, leaving just a reference for it.
         */
        ipc_space_destroy(task->itk_space);

#ifdef __ppc__
        /* LP64todo - make this clean */
        /*
         * PPC51: ppc64 is limited to 51-bit addresses.
         */
        pmap_unmap_sharedpage(task->map->pmap);         /* Unmap commpage */
#endif /* __ppc__ */

        if (vm_map_has_4GB_pagezero(task->map))
                vm_map_clear_4GB_pagezero(task->map);

        /*
         * If the current thread is a member of the task
         * being terminated, then the last reference to
         * the task will not be dropped until the thread
         * is finally reaped.  To avoid incurring the
         * expense of removing the address space regions
         * at reap time, we do it explictly here.
         */
        vm_map_remove(task->map,
                      task->map->min_offset,
                      task->map->max_offset,
                      VM_MAP_NO_FLAGS);

        /* release our shared region */
        vm_shared_region_set(task, NULL);

        mutex_lock(&tasks_threads_lock);
        queue_remove(&tasks, task, task_t, tasks);
        tasks_count--;
        mutex_unlock(&tasks_threads_lock);

        /*
         * We no longer need to guard against being aborted, so restore
         * the previous interruptible state.
         */
        thread_interrupt_level(interrupt_save);

#if __ppc__
    perfmon_release_facility(task); // notify the perfmon facility
#endif

        /*
         * Get rid of the task active reference on itself.
         */
        task_deallocate(task);

        return (KERN_SUCCESS);
}

/*
 * task_halt:
 *
 *      Shut the current task down (except for the current thread) in
 *      preparation for dramatic changes to the task (probably exec).
 *      We hold the task, terminate all other threads in the task and
 *      wait for them to terminate, clean up the portspace, and when
 *      all done, let the current thread go.
 */
kern_return_t
task_halt(
        task_t          task)
{
        thread_t        thread, self;

        assert(task != kernel_task);

        self = current_thread();

        if (task != self->task)
                return (KERN_INVALID_ARGUMENT);

        task_lock(task);

        if (!task->active || !self->active) {
                /*
                 *      Task or current thread is already being terminated.
                 *      Hurry up and return out of the current kernel context
                 *      so that we run our AST special handler to terminate
                 *      ourselves.
                 */
                task_unlock(task);

                return (KERN_FAILURE);
        }

        if (task->thread_count > 1) {
                /*
                 * Mark all the threads to keep them from starting any more
                 * user-level execution.  The thread_terminate_internal code
                 * would do this on a thread by thread basis anyway, but this
                 * gives us a better chance of not having to wait there.
                 */
                task_hold_locked(task);

                /*
                 *      Terminate all the other threads in the task.
                 */
                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        if (thread != self)
                                thread_terminate_internal(thread);
                }

                task_release_locked(task);
        }

        /*
         *      Give the machine dependent code a chance
         *      to perform cleanup before ripping apart
         *      the task.
         */
        machine_thread_terminate_self();

        task_unlock(task);

        /*
         *      Destroy all synchronizers owned by the task.
         */
        task_synchronizer_destroy_all(task);

        /*
         *      Destroy the contents of the IPC space, leaving just
         *      a reference for it.
         */
        ipc_space_clean(task->itk_space);

        /*
         * Clean out the address space, as we are going to be
         * getting a new one.
         */
        vm_map_remove(task->map, task->map->min_offset,
                      task->map->max_offset, VM_MAP_NO_FLAGS);

        return (KERN_SUCCESS);
}

/*
 *      task_hold_locked:
 *
 *      Suspend execution of the specified task.
 *      This is a recursive-style suspension of the task, a count of
 *      suspends is maintained.
 *
 *      CONDITIONS: the task is locked and active.
 */
void
task_hold_locked(
        register task_t         task)
{
        register thread_t       thread;

        assert(task->active);

        if (task->suspend_count++ > 0)
                return;

        /*
         *      Iterate through all the threads and hold them.
         */
        queue_iterate(&task->threads, thread, thread_t, task_threads) {
                thread_mtx_lock(thread);
                thread_hold(thread);
                thread_mtx_unlock(thread);
        }
}

/*
 *      task_hold:
 *
 *      Same as the internal routine above, except that is must lock
 *      and verify that the task is active.  This differs from task_suspend
 *      in that it places a kernel hold on the task rather than just a 
 *      user-level hold.  This keeps users from over resuming and setting
 *      it running out from under the kernel.
 *
 *      CONDITIONS: the caller holds a reference on the task
 */
kern_return_t
task_hold(
        register task_t         task)
{
        if (task == TASK_NULL)
                return (KERN_INVALID_ARGUMENT);

        task_lock(task);

        if (!task->active) {
                task_unlock(task);

                return (KERN_FAILURE);
        }

        task_hold_locked(task);
        task_unlock(task);

        return (KERN_SUCCESS);
}

/*
 *      task_wait_locked:
 *
 *      Wait for all threads in task to stop.
 *
 * Conditions:
 *      Called with task locked, active, and held.
 */
void
task_wait_locked(
        register task_t         task)
{
        register thread_t       thread, self;

        assert(task->active);
        assert(task->suspend_count > 0);

        self = current_thread();

        /*
         *      Iterate through all the threads and wait for them to
         *      stop.  Do not wait for the current thread if it is within
         *      the task.
         */
        queue_iterate(&task->threads, thread, thread_t, task_threads) {
                if (thread != self)
                        thread_wait(thread);
        }
}

/*
 *      task_release_locked:
 *
 *      Release a kernel hold on a task.
 *
 *      CONDITIONS: the task is locked and active
 */
void
task_release_locked(
        register task_t         task)
{
        register thread_t       thread;

        assert(task->active);
        assert(task->suspend_count > 0);

        if (--task->suspend_count > 0)
                return;

        queue_iterate(&task->threads, thread, thread_t, task_threads) {
                thread_mtx_lock(thread);
                thread_release(thread);
                thread_mtx_unlock(thread);
        }
}

/*
 *      task_release:
 *
 *      Same as the internal routine above, except that it must lock
 *      and verify that the task is active.
 *
 *      CONDITIONS: The caller holds a reference to the task
 */
kern_return_t
task_release(
        task_t          task)
{
        if (task == TASK_NULL)
                return (KERN_INVALID_ARGUMENT);

        task_lock(task);

        if (!task->active) {
                task_unlock(task);

                return (KERN_FAILURE);
        }

        task_release_locked(task);
        task_unlock(task);

        return (KERN_SUCCESS);
}

kern_return_t
task_threads(
        task_t                                  task,
        thread_act_array_t              *threads_out,
        mach_msg_type_number_t  *count)
{
        mach_msg_type_number_t  actual;
        thread_t                                *thread_list;
        thread_t                                thread;
        vm_size_t                               size, size_needed;
        void                                    *addr;
        unsigned int                    i, j;

        if (task == TASK_NULL)
                return (KERN_INVALID_ARGUMENT);

        size = 0; addr = NULL;

        for (;;) {
                task_lock(task);
                if (!task->active) {
                        task_unlock(task);

                        if (size != 0)
                                kfree(addr, size);

                        return (KERN_FAILURE);
                }

                actual = task->thread_count;

                /* do we have the memory we need? */
                size_needed = actual * sizeof (mach_port_t);
                if (size_needed <= size)
                        break;

                /* unlock the task and allocate more memory */
                task_unlock(task);

                if (size != 0)
                        kfree(addr, size);

                assert(size_needed > 0);
                size = size_needed;

                addr = kalloc(size);
                if (addr == 0)
                        return (KERN_RESOURCE_SHORTAGE);
        }

        /* OK, have memory and the task is locked & active */
        thread_list = (thread_t *)addr;

        i = j = 0;

        for (thread = (thread_t)queue_first(&task->threads); i < actual;
                                ++i, thread = (thread_t)queue_next(&thread->task_threads)) {
                thread_reference_internal(thread);
                thread_list[j++] = thread;
        }

        assert(queue_end(&task->threads, (queue_entry_t)thread));

        actual = j;
        size_needed = actual * sizeof (mach_port_t);

        /* can unlock task now that we've got the thread refs */
        task_unlock(task);

        if (actual == 0) {
                /* no threads, so return null pointer and deallocate memory */

                *threads_out = NULL;
                *count = 0;

                if (size != 0)
                        kfree(addr, size);
        }
        else {
                /* if we allocated too much, must copy */

                if (size_needed < size) {
                        void *newaddr;

                        newaddr = kalloc(size_needed);
                        if (newaddr == 0) {
                                for (i = 0; i < actual; ++i)
                                        thread_deallocate(thread_list[i]);
                                kfree(addr, size);
                                return (KERN_RESOURCE_SHORTAGE);
                        }

                        bcopy(addr, newaddr, size_needed);
                        kfree(addr, size);
                        thread_list = (thread_t *)newaddr;
                }

                *threads_out = thread_list;
                *count = actual;

                /* do the conversion that Mig should handle */

                for (i = 0; i < actual; ++i)
                        ((ipc_port_t *) thread_list)[i] = convert_thread_to_port(thread_list[i]);
        }

        return (KERN_SUCCESS);
}

/*
 *      task_suspend:
 *
 *      Implement a user-level suspension on a task.
 *
 * Conditions:
 *      The caller holds a reference to the task
 */
kern_return_t
task_suspend(
        register task_t         task)
{
        if (task == TASK_NULL || task == kernel_task)
                return (KERN_INVALID_ARGUMENT);

        task_lock(task);

        if (!task->active) {
                task_unlock(task);

                return (KERN_FAILURE);
        }

        if (task->user_stop_count++ > 0) {
                /*
                 *      If the stop count was positive, the task is
                 *      already stopped and we can exit.
                 */
                task_unlock(task);

                return (KERN_SUCCESS);
        }

        /*
         * Put a kernel-level hold on the threads in the task (all
         * user-level task suspensions added together represent a
         * single kernel-level hold).  We then wait for the threads
         * to stop executing user code.
         */
        task_hold_locked(task);
        task_wait_locked(task);

        task_unlock(task);

        return (KERN_SUCCESS);
}

/*
 *      task_resume:
 *              Release a kernel hold on a task.
 *              
 * Conditions:
 *              The caller holds a reference to the task
 */
kern_return_t 
task_resume(
        register task_t task)
{
        register boolean_t      release = FALSE;

        if (task == TASK_NULL || task == kernel_task)
                return (KERN_INVALID_ARGUMENT);

        task_lock(task);

        if (!task->active) {
                task_unlock(task);

                return (KERN_FAILURE);
        }

        if (task->user_stop_count > 0) {
                if (--task->user_stop_count == 0)
                        release = TRUE;
        }
        else {
                task_unlock(task);

                return (KERN_FAILURE);
        }

        /*
         *      Release the task if necessary.
         */
        if (release)
                task_release_locked(task);

        task_unlock(task);

        return (KERN_SUCCESS);
}

kern_return_t
host_security_set_task_token(
        host_security_t  host_security,
        task_t           task,
        security_token_t sec_token,
        audit_token_t    audit_token,
        host_priv_t      host_priv)
{
        ipc_port_t       host_port;
        kern_return_t    kr;

        if (task == TASK_NULL)
                return(KERN_INVALID_ARGUMENT);

        if (host_security == HOST_NULL)
                return(KERN_INVALID_SECURITY);

        task_lock(task);
        task->sec_token = sec_token;
        task->audit_token = audit_token;
        task_unlock(task);

        if (host_priv != HOST_PRIV_NULL) {
                kr = host_get_host_priv_port(host_priv, &host_port);
        } else {
                kr = host_get_host_port(host_priv_self(), &host_port);
        }
        assert(kr == KERN_SUCCESS);
        kr = task_set_special_port(task, TASK_HOST_PORT, host_port);
        return(kr);
}

/*
 * Utility routine to set a ledger
 */
kern_return_t
task_set_ledger(
        task_t          task,
        ledger_t        wired,
        ledger_t        paged)
{
        if (task == TASK_NULL)
                return(KERN_INVALID_ARGUMENT);

        task_lock(task);
        if (wired) {
                ipc_port_release_send(task->wired_ledger_port);
                task->wired_ledger_port = ledger_copy(wired);
        }                
        if (paged) {
                ipc_port_release_send(task->paged_ledger_port);
                task->paged_ledger_port = ledger_copy(paged);
        }                
        task_unlock(task);

        return(KERN_SUCCESS);
}

/*
 * This routine was added, pretty much exclusively, for registering the
 * RPC glue vector for in-kernel short circuited tasks.  Rather than
 * removing it completely, I have only disabled that feature (which was
 * the only feature at the time).  It just appears that we are going to
 * want to add some user data to tasks in the future (i.e. bsd info,
 * task names, etc...), so I left it in the formal task interface.
 */
kern_return_t
task_set_info(
        task_t          task,
        task_flavor_t   flavor,
        __unused task_info_t    task_info_in,           /* pointer to IN array */
        __unused mach_msg_type_number_t task_info_count)
{
        if (task == TASK_NULL)
                return(KERN_INVALID_ARGUMENT);

        switch (flavor) {
            default:
                return (KERN_INVALID_ARGUMENT);
        }
        return (KERN_SUCCESS);
}

kern_return_t
task_info(
        task_t                                  task,
        task_flavor_t                   flavor,
        task_info_t                             task_info_out,
        mach_msg_type_number_t  *task_info_count)
{
        if (task == TASK_NULL)
                return (KERN_INVALID_ARGUMENT);

        switch (flavor) {

        case TASK_BASIC_INFO_32:
        case TASK_BASIC2_INFO_32:
        {
                task_basic_info_32_t    basic_info;
                vm_map_t                        map;

                if (*task_info_count < TASK_BASIC_INFO_32_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                basic_info = (task_basic_info_32_t)task_info_out;

                map = (task == kernel_task)? kernel_map: task->map;
                basic_info->virtual_size  = CAST_DOWN(vm_offset_t,map->size);
                if (flavor == TASK_BASIC2_INFO_32) {
                        /*
                         * The "BASIC2" flavor gets the maximum resident
                         * size instead of the current resident size...
                         */
                        basic_info->resident_size = pmap_resident_max(map->pmap);
                } else {
                        basic_info->resident_size = pmap_resident_count(map->pmap);
                }
                basic_info->resident_size *= PAGE_SIZE;

                task_lock(task);
                basic_info->policy = ((task != kernel_task)?
                                                                                  POLICY_TIMESHARE: POLICY_RR);
                basic_info->suspend_count = task->user_stop_count;

                absolutetime_to_microtime(task->total_user_time,
                                          (unsigned *)&basic_info->user_time.seconds,
                                          (unsigned *)&basic_info->user_time.microseconds);
                absolutetime_to_microtime(task->total_system_time,
                                          (unsigned *)&basic_info->system_time.seconds,
                                          (unsigned *)&basic_info->system_time.microseconds);
                task_unlock(task);

                *task_info_count = TASK_BASIC_INFO_32_COUNT;
                break;
        }

        case TASK_BASIC_INFO_64:
        {
                task_basic_info_64_t    basic_info;
                vm_map_t                        map;

                if (*task_info_count < TASK_BASIC_INFO_64_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                basic_info = (task_basic_info_64_t)task_info_out;

                map = (task == kernel_task)? kernel_map: task->map;
                basic_info->virtual_size  = map->size;
                basic_info->resident_size =
                        (mach_vm_size_t)(pmap_resident_count(map->pmap))
                        * PAGE_SIZE_64;

                task_lock(task);
                basic_info->policy = ((task != kernel_task)?
                                                                                  POLICY_TIMESHARE: POLICY_RR);
                basic_info->suspend_count = task->user_stop_count;

                absolutetime_to_microtime(task->total_user_time,
                                          (unsigned *)&basic_info->user_time.seconds,
                                          (unsigned *)&basic_info->user_time.microseconds);
                absolutetime_to_microtime(task->total_system_time,
                                          (unsigned *)&basic_info->system_time.seconds,
                                          (unsigned *)&basic_info->system_time.microseconds);
                task_unlock(task);

                *task_info_count = TASK_BASIC_INFO_64_COUNT;
                break;
        }

        case TASK_THREAD_TIMES_INFO:
        {
                register task_thread_times_info_t       times_info;
                register thread_t                                       thread;

                if (*task_info_count < TASK_THREAD_TIMES_INFO_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                times_info = (task_thread_times_info_t) task_info_out;
                times_info->user_time.seconds = 0;
                times_info->user_time.microseconds = 0;
                times_info->system_time.seconds = 0;
                times_info->system_time.microseconds = 0;

                task_lock(task);

                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                    time_value_t        user_time, system_time;

                    thread_read_times(thread, &user_time, &system_time);

                    time_value_add(&times_info->user_time, &user_time);
                    time_value_add(&times_info->system_time, &system_time);
                }

                task_unlock(task);

                *task_info_count = TASK_THREAD_TIMES_INFO_COUNT;
                break;
        }

        case TASK_ABSOLUTETIME_INFO:
        {
                task_absolutetime_info_t        info;
                register thread_t                       thread;

                if (*task_info_count < TASK_ABSOLUTETIME_INFO_COUNT)
                        return (KERN_INVALID_ARGUMENT);

                info = (task_absolutetime_info_t)task_info_out;
                info->threads_user = info->threads_system = 0;

                task_lock(task);

                info->total_user = task->total_user_time;
                info->total_system = task->total_system_time;

                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        uint64_t        tval;

                        tval = timer_grab(&thread->user_timer);
                        info->threads_user += tval;
                        info->total_user += tval;

                        tval = timer_grab(&thread->system_timer);
                        info->threads_system += tval;
                        info->total_system += tval;
                }

                task_unlock(task);

                *task_info_count = TASK_ABSOLUTETIME_INFO_COUNT;
                break;
        }

        /* OBSOLETE */
        case TASK_SCHED_FIFO_INFO:
        {

                if (*task_info_count < POLICY_FIFO_BASE_COUNT)
                        return (KERN_INVALID_ARGUMENT);

                return (KERN_INVALID_POLICY);
        }

        /* OBSOLETE */
        case TASK_SCHED_RR_INFO:
        {
                register policy_rr_base_t       rr_base;

                if (*task_info_count < POLICY_RR_BASE_COUNT)
                        return (KERN_INVALID_ARGUMENT);

                rr_base = (policy_rr_base_t) task_info_out;

                task_lock(task);
                if (task != kernel_task) {
                        task_unlock(task);
                        return (KERN_INVALID_POLICY);
                }

                rr_base->base_priority = task->priority;
                task_unlock(task);

                rr_base->quantum = std_quantum_us / 1000;

                *task_info_count = POLICY_RR_BASE_COUNT;
                break;
        }

        /* OBSOLETE */
        case TASK_SCHED_TIMESHARE_INFO:
        {
                register policy_timeshare_base_t        ts_base;

                if (*task_info_count < POLICY_TIMESHARE_BASE_COUNT)
                        return (KERN_INVALID_ARGUMENT);

                ts_base = (policy_timeshare_base_t) task_info_out;

                task_lock(task);
                if (task == kernel_task) {
                        task_unlock(task);
                        return (KERN_INVALID_POLICY);
                }

                ts_base->base_priority = task->priority;
                task_unlock(task);

                *task_info_count = POLICY_TIMESHARE_BASE_COUNT;
                break;
        }

        case TASK_SECURITY_TOKEN:
        {
                register security_token_t       *sec_token_p;

                if (*task_info_count < TASK_SECURITY_TOKEN_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                sec_token_p = (security_token_t *) task_info_out;

                task_lock(task);
                *sec_token_p = task->sec_token;
                task_unlock(task);

                *task_info_count = TASK_SECURITY_TOKEN_COUNT;
                break;
        }
            
        case TASK_AUDIT_TOKEN:
        {
                register audit_token_t  *audit_token_p;

                if (*task_info_count < TASK_AUDIT_TOKEN_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                audit_token_p = (audit_token_t *) task_info_out;

                task_lock(task);
                *audit_token_p = task->audit_token;
                task_unlock(task);

                *task_info_count = TASK_AUDIT_TOKEN_COUNT;
                break;
        }
            
        case TASK_SCHED_INFO:
                return (KERN_INVALID_ARGUMENT);

        case TASK_EVENTS_INFO:
        {
                register task_events_info_t     events_info;
                register thread_t                       thread;

                if (*task_info_count < TASK_EVENTS_INFO_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                events_info = (task_events_info_t) task_info_out;

                task_lock(task);

                events_info->faults = task->faults;
                events_info->pageins = task->pageins;
                events_info->cow_faults = task->cow_faults;
                events_info->messages_sent = task->messages_sent;
                events_info->messages_received = task->messages_received;
                events_info->syscalls_mach = task->syscalls_mach;
                events_info->syscalls_unix = task->syscalls_unix;

                events_info->csw = task->c_switch;

                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        events_info->csw += thread->c_switch;
                }

                task_unlock(task);

                *task_info_count = TASK_EVENTS_INFO_COUNT;
                break;
        }
        case TASK_AFFINITY_TAG_INFO:
        {
                if (*task_info_count < TASK_AFFINITY_TAG_INFO_COUNT)
                    return (KERN_INVALID_ARGUMENT);

                return task_affinity_info(task, task_info_out, task_info_count);
        }

        default:
                return (KERN_INVALID_ARGUMENT);
        }

        return (KERN_SUCCESS);
}

void
task_vtimer_set(
        task_t          task,
        integer_t       which)
{
        thread_t        thread;

        /* assert(task == current_task()); */ /* bogus assert 4803227 4807483 */

        task_lock(task);

        task->vtimers |= which;

        switch (which) {

        case TASK_VTIMER_USER:
                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        thread->vtimer_user_save = timer_grab(&thread->user_timer);
                }
                break;

        case TASK_VTIMER_PROF:
                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        thread->vtimer_prof_save = timer_grab(&thread->user_timer);
                        thread->vtimer_prof_save += timer_grab(&thread->system_timer);
                }
                break;

        case TASK_VTIMER_RLIM:
                queue_iterate(&task->threads, thread, thread_t, task_threads) {
                        thread->vtimer_rlim_save = timer_grab(&thread->user_timer);
                        thread->vtimer_rlim_save += timer_grab(&thread->system_timer);
                }
                break;
        }

        task_unlock(task);
}

void
task_vtimer_clear(
        task_t          task,
        integer_t       which)
{
        assert(task == current_task());

        task_lock(task);

        task->vtimers &= ~which;

        task_unlock(task);
}

void
task_vtimer_update(
__unused
        task_t          task,
        integer_t       which,
        uint32_t        *microsecs)
{
        thread_t        thread = current_thread();
        uint32_t        tdelt, secs;
        uint64_t        tsum;

        assert(task == current_task());

        assert(task->vtimers & which);

        tdelt = secs = 0;

        switch (which) {

        case TASK_VTIMER_USER:
                tdelt = timer_delta(&thread->user_timer,
                                                                &thread->vtimer_user_save);
                break;

        case TASK_VTIMER_PROF:
                tsum = timer_grab(&thread->user_timer);
                tsum += timer_grab(&thread->system_timer);
                tdelt = tsum - thread->vtimer_prof_save;
                thread->vtimer_prof_save = tsum;
                break;

        case TASK_VTIMER_RLIM:
                tsum = timer_grab(&thread->user_timer);
                tsum += timer_grab(&thread->system_timer);
                tdelt = tsum - thread->vtimer_rlim_save;
                thread->vtimer_rlim_save = tsum;
                break;
        }

        absolutetime_to_microtime(tdelt, &secs, microsecs);
}

/*
 *      task_assign:
 *
 *      Change the assigned processor set for the task
 */
kern_return_t
task_assign(
        __unused task_t         task,
        __unused processor_set_t        new_pset,
        __unused boolean_t      assign_threads)
{
        return(KERN_FAILURE);
}

/*
 *      task_assign_default:
 *
 *      Version of task_assign to assign to default processor set.
 */
kern_return_t
task_assign_default(
        task_t          task,
        boolean_t       assign_threads)
{
    return (task_assign(task, &pset0, assign_threads));
}

/*
 *      task_get_assignment
 *
 *      Return name of processor set that task is assigned to.
 */
kern_return_t
task_get_assignment(
        task_t          task,
        processor_set_t *pset)
{
        if (!task->active)
                return(KERN_FAILURE);

        *pset = &pset0;

        return (KERN_SUCCESS);
}


/*
 *      task_policy
 *
 *      Set scheduling policy and parameters, both base and limit, for
 *      the given task. Policy must be a policy which is enabled for the
 *      processor set. Change contained threads if requested. 
 */
kern_return_t
task_policy(
        __unused task_t                 task,
        __unused policy_t                       policy_id,
        __unused policy_base_t          base,
        __unused mach_msg_type_number_t count,
        __unused boolean_t                      set_limit,
        __unused boolean_t                      change)
{
        return(KERN_FAILURE);
}

/*
 *      task_set_policy
 *
 *      Set scheduling policy and parameters, both base and limit, for 
 *      the given task. Policy can be any policy implemented by the
 *      processor set, whether enabled or not. Change contained threads
 *      if requested.
 */
kern_return_t
task_set_policy(
        __unused task_t                 task,
        __unused processor_set_t                pset,
        __unused policy_t                       policy_id,
        __unused policy_base_t          base,
        __unused mach_msg_type_number_t base_count,
        __unused policy_limit_t         limit,
        __unused mach_msg_type_number_t limit_count,
        __unused boolean_t                      change)
{
        return(KERN_FAILURE);
}

#if     FAST_TAS
kern_return_t
task_set_ras_pc(
        task_t          task,
        vm_offset_t     pc,
        vm_offset_t     endpc)
{
        extern int fast_tas_debug;
 
        if (fast_tas_debug) {
                printf("task 0x%x: setting fast_tas to [0x%x, 0x%x]\n",
                       task, pc, endpc);
        }
        task_lock(task);
        task->fast_tas_base = pc;
        task->fast_tas_end =  endpc;
        task_unlock(task);
        return KERN_SUCCESS;
} 
#else   /* FAST_TAS */
kern_return_t
task_set_ras_pc(
        __unused task_t task,
        __unused vm_offset_t    pc,
        __unused vm_offset_t    endpc)
{
        return KERN_FAILURE;
}
#endif  /* FAST_TAS */

void
task_synchronizer_destroy_all(task_t task)
{
        semaphore_t     semaphore;
        lock_set_t      lock_set;

        /*
         *  Destroy owned semaphores
         */

        while (!queue_empty(&task->semaphore_list)) {
                semaphore = (semaphore_t) queue_first(&task->semaphore_list);
                (void) semaphore_destroy(task, semaphore);
        }

        /*
         *  Destroy owned lock sets
         */

        while (!queue_empty(&task->lock_set_list)) {
                lock_set = (lock_set_t) queue_first(&task->lock_set_list);
                (void) lock_set_destroy(task, lock_set);
        }
}

/*
 * We need to export some functions to other components that
 * are currently implemented in macros within the osfmk
 * component.  Just export them as functions of the same name.
 */
boolean_t is_kerneltask(task_t t)
{
        if (t == kernel_task)
                return (TRUE);

        return (FALSE);
}

#undef current_task
task_t current_task(void);
task_t current_task(void)
{
        return (current_task_fast());
}

#undef task_reference
void task_reference(task_t task);
void
task_reference(
        task_t          task)
{
        if (task != TASK_NULL)
                task_reference_internal(task);
}

#if CONFIG_MACF_MACH
/*
 * Protect 2 task labels against modification by adding a reference on
 * both label handles. The locks do not actually have to be held while
 * using the labels as only labels with one reference can be modified
 * in place.
 */

void
tasklabel_lock2(
        task_t a,
        task_t b)
{
        labelh_reference(a->label);
        labelh_reference(b->label);
}

void
tasklabel_unlock2(
        task_t a,
        task_t b)
{
        labelh_release(a->label);
        labelh_release(b->label);
}

void
mac_task_label_update_internal(
        struct label    *pl,
        struct task     *task)
{

        tasklabel_lock(task);
        task->label = labelh_modify(task->label);
        mac_task_label_update(pl, &task->maclabel);
        tasklabel_unlock(task);
        ip_lock(task->itk_self);
        mac_port_label_update_cred(pl, &task->itk_self->ip_label);
        ip_unlock(task->itk_self);
}

void
mac_task_label_modify(
        struct task     *task,
        void            *arg,
        void (*f)       (struct label *l, void *arg))
{

        tasklabel_lock(task);
        task->label = labelh_modify(task->label);
        (*f)(&task->maclabel, arg);
        tasklabel_unlock(task);
}

struct label *
mac_task_get_label(struct task *task)
{
        return (&task->maclabel);
}
#endif