osfmk/kern/startup.c

   1 /*
   2  * Copyright (c) 2000-2020 Apple Inc. All rights reserved.
   3  *
   4  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
   5  *
   6  * This file contains Original Code and/or Modifications of Original Code
   7  * as defined in and that are subject to the Apple Public Source License
   8  * Version 2.0 (the 'License'). You may not use this file except in
   9  * compliance with the License. The rights granted to you under the License
  10  * may not be used to create, or enable the creation or redistribution of,
  11  * unlawful or unlicensed copies of an Apple operating system, or to
  12  * circumvent, violate, or enable the circumvention or violation of, any
  13  * terms of an Apple operating system software license agreement.
  14  *
  15  * Please obtain a copy of the License at
  16  * http://www.opensource.apple.com/apsl/ and read it before using this file.
  17  *
  18  * The Original Code and all software distributed under the License are
  19  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  20  * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
  21  * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
  22  * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
  23  * Please see the License for the specific language governing rights and
  24  * limitations under the License.
  25  *
  26  * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
  27  */
  28 /*
  29  * @OSF_COPYRIGHT@
  30  */
  31 /*
  32  * Mach Operating System
  33  * Copyright (c) 1991,1990,1989,1988 Carnegie Mellon University
  34  * All Rights Reserved.
  35  *
  36  * Permission to use, copy, modify and distribute this software and its
  37  * documentation is hereby granted, provided that both the copyright
  38  * notice and this permission notice appear in all copies of the
  39  * software, derivative works or modified versions, and any portions
  40  * thereof, and that both notices appear in supporting documentation.
  41  *
  42  * CARNEGIE MELLON ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
  43  * CONDITION.  CARNEGIE MELLON DISCLAIMS ANY LIABILITY OF ANY KIND FOR
  44  * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS SOFTWARE.
  45  *
  46  * Carnegie Mellon requests users of this software to return to
  47  *
  48  *  Software Distribution Coordinator  or  Software.Distribution@CS.CMU.EDU
  49  *  School of Computer Science
  50  *  Carnegie Mellon University
  51  *  Pittsburgh PA 15213-3890
  52  *
  53  * any improvements or extensions that they make and grant Carnegie Mellon
  54  * the rights to redistribute these changes.
  55  */
  56 /*
  57  * NOTICE: This file was modified by McAfee Research in 2004 to introduce
  58  * support for mandatory and extensible security protections.  This notice
  59  * is included in support of clause 2.2 (b) of the Apple Public License,
  60  * Version 2.0.
  61  */
  62 /*
  63  */
  64
  65 /*
  66  *      Mach kernel startup.
  67  */
  68
  69 #include <debug.h>
  70 #include <mach_kdp.h>
  71
  72 #include <mach/boolean.h>
  73 #include <mach/machine.h>
  74 #include <mach/thread_act.h>
  75 #include <mach/task_special_ports.h>
  76 #include <mach/vm_param.h>
  77 #include <ipc/ipc_init.h>
  78 #include <kern/assert.h>
  79 #include <kern/mach_param.h>
  80 #include <kern/misc_protos.h>
  81 #include <kern/clock.h>
  82 #include <kern/coalition.h>
  83 #include <kern/cpu_number.h>
  84 #include <kern/cpu_quiesce.h>
  85 #include <kern/ledger.h>
  86 #include <kern/machine.h>
  87 #include <kern/processor.h>
  88 #include <kern/restartable.h>
  89 #include <kern/sched_prim.h>
  90 #include <kern/turnstile.h>
  91 #if CONFIG_SCHED_SFI
  92 #include <kern/sfi.h>
  93 #endif
  94 #include <kern/startup.h>
  95 #include <kern/task.h>
  96 #include <kern/thread.h>
  97 #include <kern/timer.h>
  98 #if CONFIG_TELEMETRY
  99 #include <kern/telemetry.h>
 100 #endif
 101 #include <kern/zalloc.h>
 102 #include <kern/locks.h>
 103 #include <kern/debug.h>
 104 #if KPERF
 105 #include <kperf/kperf.h>
 106 #endif /* KPERF */
 107 #include <corpses/task_corpse.h>
 108 #include <prng/random.h>
 109 #include <console/serial_protos.h>
 110 #include <vm/vm_kern.h>
 111 #include <vm/vm_init.h>
 112 #include <vm/vm_map.h>
 113 #include <vm/vm_object.h>
 114 #include <vm/vm_page.h>
 115 #include <vm/vm_pageout.h>
 116 #include <vm/vm_shared_region.h>
 117 #include <machine/pmap.h>
 118 #include <machine/commpage.h>
 119 #include <machine/machine_routines.h>
 120 #include <libkern/version.h>
 121 #include <sys/codesign.h>
 122 #include <sys/kdebug.h>
 123 #include <sys/random.h>
 124 #include <sys/ktrace.h>
 125 #include <libkern/section_keywords.h>
 126
 127 #include <kern/ltable.h>
 128 #include <kern/waitq.h>
 129 #include <ipc/ipc_voucher.h>
 130 #include <voucher/ipc_pthread_priority_internal.h>
 131 #include <mach/host_info.h>
 132 #include <pthread/workqueue_internal.h>
 133
 134 #if CONFIG_XNUPOST
 135 #include <tests/ktest.h>
 136 #include <tests/xnupost.h>
 137 #endif
 138
 139 #if CONFIG_ATM
 140 #include <atm/atm_internal.h>
 141 #endif
 142
 143 #if CONFIG_CSR
 144 #include <sys/csr.h>
 145 #endif
 146
 147 #include <bank/bank_internal.h>
 148
 149 #if ALTERNATE_DEBUGGER
 150 #include <arm64/alternate_debugger.h>
 151 #endif
 152
 153 #if MACH_KDP
 154 #include <kdp/kdp.h>
 155 #endif
 156
 157 #if CONFIG_MACF
 158 #include <security/mac_mach_internal.h>
 159 #if CONFIG_VNGUARD
 160 extern void vnguard_policy_init(void);
 161 #endif
 162 #endif
 163
 164 #if KPC
 165 #include <kern/kpc.h>
 166 #endif
 167
 168 #if HYPERVISOR
 169 #include <kern/hv_support.h>
 170 #endif
 171
 172 #include <san/kasan.h>
 173
 174 #include <i386/pmCPU.h>
 175 static void             kernel_bootstrap_thread(void);
 176
 177 static void             load_context(
 178         thread_t        thread);
 179
 180 #if CONFIG_ECC_LOGGING
 181 #include <kern/ecc.h>
 182 #endif
 183
 184 #if (defined(__i386__) || defined(__x86_64__)) && CONFIG_VMX
 185 #include <i386/vmx/vmx_cpu.h>
 186 #endif
 187
 188 #if CONFIG_DTRACE
 189 extern void dtrace_early_init(void);
 190 extern void sdt_early_init(void);
 191 #endif
 192
 193 // libkern/OSKextLib.cpp
 194 extern void OSKextRemoveKextBootstrap(void);
 195
 196 void scale_setup(void);
 197 extern void bsd_scale_setup(int);
 198 extern unsigned int semaphore_max;
 199 extern void stackshot_init(void);
 200
 201 /*
 202  *      Running in virtual memory, on the interrupt stack.
 203  */
 204
 205 extern struct startup_entry startup_entries[]
 206 __SECTION_START_SYM(STARTUP_HOOK_SEGMENT, STARTUP_HOOK_SECTION);
 207
 208 extern struct startup_entry startup_entries_end[]
 209 __SECTION_END_SYM(STARTUP_HOOK_SEGMENT, STARTUP_HOOK_SECTION);
 210
 211 static struct startup_entry *__startup_data startup_entry_cur = startup_entries;
 212
 213 SECURITY_READ_ONLY_LATE(startup_subsystem_id_t) startup_phase = STARTUP_SUB_NONE;
 214
 215 extern int serverperfmode;
 216
 217 #if DEBUG || DEVELOPMENT
 218 TUNABLE(startup_debug_t, startup_debug, "startup_debug", 0);
 219 #endif
 220
 221 /* size of kernel trace buffer, disabled by default */
 222 TUNABLE(unsigned int, new_nkdbufs, "trace", 0);
 223 TUNABLE(unsigned int, wake_nkdbufs, "trace_wake", 0);
 224 TUNABLE(unsigned int, write_trace_on_panic, "trace_panic", 0);
 225 TUNABLE(unsigned int, trace_wrap, "trace_wrap", 0);
 226
 227 /* mach leak logging */
 228 TUNABLE(int, log_leaks, "-l", 0);
 229
 230 static inline void
 231 kernel_bootstrap_log(const char *message)
 232 {
 233         if ((startup_debug & STARTUP_DEBUG_VERBOSE) &&
 234             startup_phase >= STARTUP_SUB_KPRINTF) {
 235                 kprintf("kernel_bootstrap: %s\n", message);
 236         }
 237         kernel_debug_string_early(message);
 238 }
 239
 240 static inline void
 241 kernel_bootstrap_thread_log(const char *message)
 242 {
 243         if ((startup_debug & STARTUP_DEBUG_VERBOSE) &&
 244             startup_phase >= STARTUP_SUB_KPRINTF) {
 245                 kprintf("kernel_bootstrap_thread: %s\n", message);
 246         }
 247         kernel_debug_string_early(message);
 248 }
 249
 250 extern void
 251 qsort(void *a, size_t n, size_t es, int (*cmp)(const void *, const void *));
 252
 253 __startup_func
 254 static int
 255 startup_entry_cmp(const void *e1, const void *e2)
 256 {
 257         const struct startup_entry *a = e1;
 258         const struct startup_entry *b = e2;
 259         if (a->subsystem == b->subsystem) {
 260                 if (a->rank == b->rank) {
 261                         return 0;
 262                 }
 263                 return a->rank > b->rank ? 1 : -1;
 264         }
 265         return a->subsystem > b->subsystem ? 1 : -1;
 266 }
 267
 268 __startup_func
 269 void
 270 kernel_startup_bootstrap(void)
 271 {
 272         /*
 273          * Sort the various STARTUP() entries by subsystem/rank.
 274          */
 275         size_t n = startup_entries_end - startup_entries;
 276
 277         if (n == 0) {
 278                 panic("Section %s,%s missing",
 279                     STARTUP_HOOK_SEGMENT, STARTUP_HOOK_SECTION);
 280         }
 281         if (((uintptr_t)startup_entries_end - (uintptr_t)startup_entries) %
 282             sizeof(struct startup_entry)) {
 283                 panic("Section %s,%s has invalid size",
 284                     STARTUP_HOOK_SEGMENT, STARTUP_HOOK_SECTION);
 285         }
 286
 287         qsort(startup_entries, n, sizeof(struct startup_entry), startup_entry_cmp);
 288
 289         /*
 290          * Then initialize all tunables, and early locks
 291          */
 292         kernel_startup_initialize_upto(STARTUP_SUB_LOCKS_EARLY);
 293 }
 294
 295 __startup_func
 296 extern void
 297 kernel_startup_tunable_init(const struct startup_tunable_spec *spec)
 298 {
 299         if (PE_parse_boot_argn(spec->name, spec->var_addr, spec->var_len)) {
 300                 if (spec->var_is_bool) {
 301                         /* make sure bool's are valued in {0, 1} */
 302                         *(bool *)spec->var_addr = *(uint8_t *)spec->var_addr;
 303                 }
 304         }
 305 }
 306
 307 static void
 308 kernel_startup_log(startup_subsystem_id_t subsystem)
 309 {
 310         static const char *names[] = {
 311                 [STARTUP_SUB_TUNABLES] = "tunables",
 312                 [STARTUP_SUB_LOCKS_EARLY] = "locks_early",
 313                 [STARTUP_SUB_KPRINTF] = "kprintf",
 314
 315                 [STARTUP_SUB_PMAP_STEAL] = "pmap_steal",
 316                 [STARTUP_SUB_VM_KERNEL] = "vm_kernel",
 317                 [STARTUP_SUB_KMEM] = "kmem",
 318                 [STARTUP_SUB_KMEM_ALLOC] = "kmem_alloc",
 319                 [STARTUP_SUB_ZALLOC] = "zalloc",
 320                 [STARTUP_SUB_PERCPU] = "percpu",
 321                 [STARTUP_SUB_LOCKS] = "locks",
 322
 323                 [STARTUP_SUB_CODESIGNING] = "codesigning",
 324                 [STARTUP_SUB_OSLOG] = "oslog",
 325                 [STARTUP_SUB_MACH_IPC] = "mach_ipc",
 326                 [STARTUP_SUB_SYSCTL] = "sysctl",
 327                 [STARTUP_SUB_EARLY_BOOT] = "early_boot",
 328
 329                 /* LOCKDOWN is special and its value won't fit here. */
 330         };
 331         static startup_subsystem_id_t logged = STARTUP_SUB_NONE;
 332
 333         if (subsystem <= logged) {
 334                 return;
 335         }
 336
 337         if (subsystem < sizeof(names) / sizeof(names[0]) && names[subsystem]) {
 338                 kernel_bootstrap_log(names[subsystem]);
 339         }
 340         logged = subsystem;
 341 }
 342
 343 __startup_func
 344 void
 345 kernel_startup_initialize_upto(startup_subsystem_id_t upto)
 346 {
 347         struct startup_entry *cur = startup_entry_cur;
 348
 349         assert(startup_phase < upto);
 350
 351         while (cur < startup_entries_end && cur->subsystem <= upto) {
 352                 if ((startup_debug & STARTUP_DEBUG_VERBOSE) &&
 353                     startup_phase >= STARTUP_SUB_KPRINTF) {
 354                         kprintf("%s[%d, rank %d]: %p(%p)\n", __func__,
 355                             cur->subsystem, cur->rank, cur->func, cur->arg);
 356                 }
 357                 startup_phase = cur->subsystem - 1;
 358                 kernel_startup_log(cur->subsystem);
 359                 cur->func(cur->arg);
 360                 startup_entry_cur = ++cur;
 361         }
 362         kernel_startup_log(upto);
 363
 364         if ((startup_debug & STARTUP_DEBUG_VERBOSE) &&
 365             upto >= STARTUP_SUB_KPRINTF) {
 366                 kprintf("%s: reached phase %d\n", __func__, upto);
 367         }
 368         startup_phase = upto;
 369 }
 370
 371 void
 372 kernel_bootstrap(void)
 373 {
 374         kern_return_t   result;
 375         thread_t        thread;
 376         char            namep[16];
 377
 378         printf("%s\n", version); /* log kernel version */
 379
 380         scale_setup();
 381
 382         kernel_bootstrap_log("vm_mem_bootstrap");
 383         vm_mem_bootstrap();
 384
 385         machine_info.memory_size = (uint32_t)mem_size;
 386 #if XNU_TARGET_OS_OSX
 387         machine_info.max_mem = max_mem_actual;
 388 #else
 389         machine_info.max_mem = max_mem;
 390 #endif /* XNU_TARGET_OS_OSX */
 391         machine_info.major_version = version_major;
 392         machine_info.minor_version = version_minor;
 393
 394         kernel_startup_initialize_upto(STARTUP_SUB_OSLOG);
 395
 396 #if KASAN
 397         kernel_bootstrap_log("kasan_late_init");
 398         kasan_late_init();
 399 #endif
 400
 401 #if CONFIG_TELEMETRY
 402         kernel_bootstrap_log("telemetry_init");
 403         telemetry_init();
 404 #endif
 405
 406         if (PE_i_can_has_debugger(NULL)) {
 407                 if (PE_parse_boot_argn("-show_pointers", &namep, sizeof(namep))) {
 408                         doprnt_hide_pointers = FALSE;
 409                 }
 410                 if (PE_parse_boot_argn("-no_slto_panic", &namep, sizeof(namep))) {
 411                         extern boolean_t spinlock_timeout_panic;
 412                         spinlock_timeout_panic = FALSE;
 413                 }
 414         }
 415
 416         kernel_bootstrap_log("console_init");
 417         console_init();
 418
 419         kernel_bootstrap_log("stackshot_init");
 420         stackshot_init();
 421
 422         kernel_bootstrap_log("sched_init");
 423         sched_init();
 424
 425         kernel_bootstrap_log("waitq_bootstrap");
 426         waitq_bootstrap();
 427
 428 #if CONFIG_MACF
 429         kernel_bootstrap_log("mac_policy_init");
 430         mac_policy_init();
 431 #endif
 432
 433         kernel_startup_initialize_upto(STARTUP_SUB_MACH_IPC);
 434
 435         /*
 436          * As soon as the virtual memory system is up, we record
 437          * that this CPU is using the kernel pmap.
 438          */
 439         kernel_bootstrap_log("PMAP_ACTIVATE_KERNEL");
 440         PMAP_ACTIVATE_KERNEL(master_cpu);
 441
 442         kernel_bootstrap_log("mapping_free_prime");
 443         mapping_free_prime();                                           /* Load up with temporary mapping blocks */
 444
 445         kernel_bootstrap_log("machine_init");
 446         machine_init();
 447
 448         kernel_bootstrap_log("thread_machine_init_template");
 449         thread_machine_init_template();
 450
 451         kernel_bootstrap_log("clock_init");
 452         clock_init();
 453
 454         /*
 455          *      Initialize the IPC, task, and thread subsystems.
 456          */
 457 #if CONFIG_THREAD_GROUPS
 458         kernel_bootstrap_log("thread_group_init");
 459         thread_group_init();
 460 #endif
 461
 462 #if CONFIG_COALITIONS
 463         kernel_bootstrap_log("coalitions_init");
 464         coalitions_init();
 465 #endif
 466
 467         kernel_bootstrap_log("task_init");
 468         task_init();
 469
 470         kernel_bootstrap_log("thread_init");
 471         thread_init();
 472
 473         kernel_bootstrap_log("restartable_init");
 474         restartable_init();
 475
 476         kernel_bootstrap_log("workq_init");
 477         workq_init();
 478
 479         kernel_bootstrap_log("turnstiles_init");
 480         turnstiles_init();
 481
 482 #if CONFIG_ATM
 483         /* Initialize the Activity Trace Resource Manager. */
 484         kernel_bootstrap_log("atm_init");
 485         atm_init();
 486 #endif
 487         kernel_bootstrap_log("mach_init_activity_id");
 488         mach_init_activity_id();
 489
 490         /* Initialize the BANK Manager. */
 491         kernel_bootstrap_log("bank_init");
 492         bank_init();
 493
 494         kernel_bootstrap_log("ipc_pthread_priority_init");
 495         ipc_pthread_priority_init();
 496
 497         /* initialize the corpse config based on boot-args */
 498         corpses_init();
 499
 500         /* initialize host_statistics */
 501         host_statistics_init();
 502
 503         /* initialize exceptions */
 504         kernel_bootstrap_log("exception_init");
 505         exception_init();
 506
 507 #if CONFIG_SCHED_SFI
 508         kernel_bootstrap_log("sfi_init");
 509         sfi_init();
 510 #endif
 511
 512         /*
 513          *      Create a kernel thread to execute the kernel bootstrap.
 514          */
 515
 516         kernel_bootstrap_log("kernel_thread_create");
 517         result = kernel_thread_create((thread_continue_t)kernel_bootstrap_thread, NULL, MAXPRI_KERNEL, &thread);
 518
 519         if (result != KERN_SUCCESS) {
 520                 panic("kernel_bootstrap: result = %08X\n", result);
 521         }
 522
 523         /* The static init_thread is re-used as the bootstrap thread */
 524         assert(thread == current_thread());
 525
 526         /* TODO: do a proper thread_start() (without the thread_setrun()) */
 527         thread->state = TH_RUN;
 528         thread->last_made_runnable_time = mach_absolute_time();
 529         thread_set_thread_name(thread, "kernel_bootstrap_thread");
 530
 531         thread_deallocate(thread);
 532
 533         kernel_bootstrap_log("load_context - done");
 534         load_context(thread);
 535         /*NOTREACHED*/
 536 }
 537
 538 SECURITY_READ_ONLY_LATE(vm_offset_t) vm_kernel_addrperm;
 539 SECURITY_READ_ONLY_LATE(vm_offset_t) buf_kernel_addrperm;
 540 SECURITY_READ_ONLY_LATE(vm_offset_t) vm_kernel_addrperm_ext;
 541 SECURITY_READ_ONLY_LATE(uint64_t) vm_kernel_addrhash_salt;
 542 SECURITY_READ_ONLY_LATE(uint64_t) vm_kernel_addrhash_salt_ext;
 543
 544 /*
 545  * Now running in a thread.  Kick off other services,
 546  * invoke user bootstrap, enter pageout loop.
 547  */
 548 static void
 549 kernel_bootstrap_thread(void)
 550 {
 551         processor_t             processor = current_processor();
 552
 553         kernel_bootstrap_thread_log("idle_thread_create");
 554         /*
 555          * Create the idle processor thread.
 556          */
 557         idle_thread_create(processor);
 558
 559         /*
 560          * N.B. Do not stick anything else
 561          * before this point.
 562          *
 563          * Start up the scheduler services.
 564          */
 565         kernel_bootstrap_thread_log("sched_startup");
 566         sched_startup();
 567
 568         /*
 569          * Thread lifecycle maintenance (teardown, stack allocation)
 570          */
 571         kernel_bootstrap_thread_log("thread_daemon_init");
 572         thread_daemon_init();
 573
 574         /* Create kernel map entry reserve */
 575         vm_kernel_reserved_entry_init();
 576
 577         /*
 578          * Thread callout service.
 579          */
 580         kernel_bootstrap_thread_log("thread_call_initialize");
 581         thread_call_initialize();
 582
 583         /*
 584          * Work interval subsystem initialization.
 585          * Needs to be done once thread calls have been initialized.
 586          */
 587         kernel_bootstrap_thread_log("work_interval_initialize");
 588         work_interval_subsystem_init();
 589
 590         /*
 591          * Remain on current processor as
 592          * additional processors come online.
 593          */
 594         kernel_bootstrap_thread_log("thread_bind");
 595         thread_bind(processor);
 596
 597         /*
 598          * Initialize ipc thread call support.
 599          */
 600         kernel_bootstrap_thread_log("ipc_thread_call_init");
 601         ipc_thread_call_init();
 602
 603         /*
 604          * Kick off memory mapping adjustments.
 605          */
 606         kernel_bootstrap_thread_log("mapping_adjust");
 607         mapping_adjust();
 608
 609         /*
 610          *      Create the clock service.
 611          */
 612         kernel_bootstrap_thread_log("clock_service_create");
 613         clock_service_create();
 614
 615         /*
 616          *      Create the device service.
 617          */
 618         device_service_create();
 619
 620         phys_carveout_init();
 621
 622 #if MACH_KDP
 623         kernel_bootstrap_log("kdp_init");
 624         kdp_init();
 625 #endif
 626
 627 #if ALTERNATE_DEBUGGER
 628         alternate_debugger_init();
 629 #endif
 630
 631 #if KPC
 632         kpc_init();
 633 #endif
 634
 635 #if HYPERVISOR
 636         kernel_bootstrap_thread_log("hv_support_init");
 637         hv_support_init();
 638 #endif
 639
 640 #if CONFIG_TELEMETRY
 641         kernel_bootstrap_log("bootprofile_init");
 642         bootprofile_init();
 643 #endif
 644
 645         char trace_typefilter[256] = {};
 646         PE_parse_boot_arg_str("trace_typefilter", trace_typefilter,
 647             sizeof(trace_typefilter));
 648 #if KPERF
 649         kperf_init();
 650 #endif /* KPERF */
 651         kdebug_init(new_nkdbufs, trace_typefilter,
 652             (trace_wrap ? KDOPT_WRAPPING : 0) | KDOPT_ATBOOT);
 653
 654         kernel_startup_initialize_upto(STARTUP_SUB_SYSCTL);
 655
 656 #ifdef  IOKIT
 657         kernel_bootstrap_log("PE_init_iokit");
 658         PE_init_iokit();
 659 #endif
 660
 661         assert(ml_get_interrupts_enabled() == FALSE);
 662
 663         /*
 664          * Past this point, kernel subsystems that expect to operate with
 665          * interrupts or preemption enabled may begin enforcement.
 666          */
 667         kernel_startup_initialize_upto(STARTUP_SUB_EARLY_BOOT);
 668
 669 #if INTERRUPT_MASKED_DEBUG
 670         // Reset interrupts masked timeout before we enable interrupts
 671         ml_spin_debug_clear_self();
 672 #endif
 673         (void) spllo();         /* Allow interruptions */
 674
 675         /*
 676          * This will start displaying progress to the user, start as early as possible
 677          */
 678         initialize_screen(NULL, kPEAcquireScreen);
 679
 680         /*
 681          *      Initialize the shared region module.
 682          */
 683         vm_commpage_init();
 684         vm_commpage_text_init();
 685
 686 #if CONFIG_MACF
 687         kernel_bootstrap_log("mac_policy_initmach");
 688         mac_policy_initmach();
 689 #if CONFIG_VNGUARD
 690         kernel_bootstrap_log("vnguard_policy_init");
 691         vnguard_policy_init();
 692 #endif
 693 #endif
 694
 695 #if CONFIG_DTRACE
 696         kernel_bootstrap_log("dtrace_early_init");
 697         dtrace_early_init();
 698         sdt_early_init();
 699 #endif
 700
 701 #ifndef BCM2837
 702         kernel_bootstrap_log("trust_cache_init");
 703         trust_cache_init();
 704 #endif
 705
 706         kernel_startup_initialize_upto(STARTUP_SUB_LOCKDOWN);
 707
 708         /*
 709          * Get rid of segments used to bootstrap kext loading. This removes
 710          * the KLD, PRELINK symtab, LINKEDIT, and symtab segments/load commands.
 711          * Must be done prior to lockdown so that we can free (and possibly relocate)
 712          * the static KVA mappings used for the jettisoned bootstrap segments.
 713          */
 714         kernel_bootstrap_log("OSKextRemoveKextBootstrap");
 715         OSKextRemoveKextBootstrap();
 716
 717         /*
 718          * Initialize the globals used for permuting kernel
 719          * addresses that may be exported to userland as tokens
 720          * using VM_KERNEL_ADDRPERM()/VM_KERNEL_ADDRPERM_EXTERNAL().
 721          * Force the random number to be odd to avoid mapping a non-zero
 722          * word-aligned address to zero via addition.
 723          * Note: at this stage we can use the cryptographically secure PRNG
 724          * rather than early_random().
 725          */
 726         read_random(&vm_kernel_addrperm, sizeof(vm_kernel_addrperm));
 727         vm_kernel_addrperm |= 1;
 728         read_random(&buf_kernel_addrperm, sizeof(buf_kernel_addrperm));
 729         buf_kernel_addrperm |= 1;
 730         read_random(&vm_kernel_addrperm_ext, sizeof(vm_kernel_addrperm_ext));
 731         vm_kernel_addrperm_ext |= 1;
 732         read_random(&vm_kernel_addrhash_salt, sizeof(vm_kernel_addrhash_salt));
 733         read_random(&vm_kernel_addrhash_salt_ext, sizeof(vm_kernel_addrhash_salt_ext));
 734
 735         /* No changes to kernel text and rodata beyond this point. */
 736         kernel_bootstrap_log("machine_lockdown");
 737         machine_lockdown();
 738
 739 #ifdef  IOKIT
 740         kernel_bootstrap_log("PE_lockdown_iokit");
 741         PE_lockdown_iokit();
 742 #endif
 743         /*
 744          * max_cpus must be nailed down by the time PE_lockdown_iokit() finishes,
 745          * at the latest
 746          */
 747         vm_set_restrictions(machine_info.max_cpus);
 748
 749 #ifdef CONFIG_XNUPOST
 750         kern_return_t result = kernel_list_tests();
 751         result = kernel_do_post();
 752         if (result != KERN_SUCCESS) {
 753                 panic("kernel_do_post: Tests failed with result = 0x%08x\n", result);
 754         }
 755         kernel_bootstrap_log("kernel_do_post - done");
 756 #endif /* CONFIG_XNUPOST */
 757
 758
 759 #if KPERF
 760         kperf_init_early();
 761 #endif
 762
 763         /*
 764          *      Start the user bootstrap.
 765          */
 766 #ifdef  MACH_BSD
 767         bsd_init();
 768 #endif
 769
 770
 771         /*
 772          * Get rid of pages used for early boot tracing.
 773          */
 774         kdebug_free_early_buf();
 775
 776         serial_keyboard_init();         /* Start serial keyboard if wanted */
 777
 778         vm_page_init_local_q(machine_info.max_cpus);
 779
 780         thread_bind(PROCESSOR_NULL);
 781
 782         /*
 783          * Now that all CPUs are available to run threads, this is essentially
 784          * a background thread. Take this opportunity to initialize and free
 785          * any remaining vm_pages that were delayed earlier by pmap_startup().
 786          */
 787         vm_free_delayed_pages();
 788
 789         /*
 790          *      Become the pageout daemon.
 791          */
 792         vm_pageout();
 793         /*NOTREACHED*/
 794 }
 795
 796 /*
 797  *      slave_main:
 798  *
 799  *      Load the first thread to start a processor.
 800  *      This path will also be used by the master processor
 801  *      after being offlined.
 802  */
 803 void
 804 slave_main(void *machine_param)
 805 {
 806         processor_t             processor = current_processor();
 807         thread_t                thread;
 808
 809         /*
 810          *      Use the idle processor thread if there
 811          *      is no dedicated start up thread.
 812          */
 813         if (processor->processor_offlined == true) {
 814                 /* Return to the saved processor_offline context */
 815                 assert(processor->startup_thread == THREAD_NULL);
 816
 817                 thread = processor->idle_thread;
 818                 thread->parameter = machine_param;
 819         } else if (processor->startup_thread) {
 820                 thread = processor->startup_thread;
 821                 processor->startup_thread = THREAD_NULL;
 822         } else {
 823                 thread = processor->idle_thread;
 824                 thread->continuation = processor_start_thread;
 825                 thread->parameter = machine_param;
 826         }
 827
 828         load_context(thread);
 829         /*NOTREACHED*/
 830 }
 831
 832 /*
 833  *      processor_start_thread:
 834  *
 835  *      First thread to execute on a started processor.
 836  *
 837  *      Called at splsched.
 838  */
 839 void
 840 processor_start_thread(void *machine_param,
 841     __unused wait_result_t result)
 842 {
 843         processor_t             processor = current_processor();
 844         thread_t                self = current_thread();
 845
 846         slave_machine_init(machine_param);
 847
 848         /*
 849          *      If running the idle processor thread,
 850          *      reenter the idle loop, else terminate.
 851          */
 852         if (self == processor->idle_thread) {
 853                 thread_block(idle_thread);
 854         }
 855
 856         thread_terminate(self);
 857         /*NOTREACHED*/
 858 }
 859
 860 /*
 861  *      load_context:
 862  *
 863  *      Start the first thread on a processor.
 864  *      This may be the first thread ever run on a processor, or
 865  *      it could be a processor that was previously offlined.
 866  */
 867 static void __attribute__((noreturn))
 868 load_context(
 869         thread_t                thread)
 870 {
 871         processor_t             processor = current_processor();
 872
 873
 874 #define load_context_kprintf(x...) /* kprintf("load_context: " x) */
 875
 876         load_context_kprintf("machine_set_current_thread\n");
 877         machine_set_current_thread(thread);
 878
 879         load_context_kprintf("processor_up\n");
 880
 881         PMAP_ACTIVATE_KERNEL(processor->cpu_id);
 882
 883         /*
 884          * Acquire a stack if none attached.  The panic
 885          * should never occur since the thread is expected
 886          * to have reserved stack.
 887          */
 888         load_context_kprintf("thread %p, stack %lx, stackptr %lx\n", thread,
 889             thread->kernel_stack, thread->machine.kstackptr);
 890         if (!thread->kernel_stack) {
 891                 load_context_kprintf("stack_alloc_try\n");
 892                 if (!stack_alloc_try(thread)) {
 893                         panic("load_context");
 894                 }
 895         }
 896
 897         /*
 898          * The idle processor threads are not counted as
 899          * running for load calculations.
 900          */
 901         if (!(thread->state & TH_IDLE)) {
 902                 SCHED(run_count_incr)(thread);
 903         }
 904
 905         processor->active_thread = thread;
 906         processor_state_update_explicit(processor, thread->sched_pri,
 907             SFI_CLASS_KERNEL, PSET_SMP, thread_get_perfcontrol_class(thread), THREAD_URGENCY_NONE,
 908             ((thread->state & TH_IDLE) || (thread->bound_processor != PROCESSOR_NULL)) ? TH_BUCKET_SCHED_MAX : thread->th_sched_bucket);
 909         processor->current_is_bound = thread->bound_processor != PROCESSOR_NULL;
 910         processor->current_is_NO_SMT = false;
 911         processor->current_is_eagerpreempt = false;
 912 #if CONFIG_THREAD_GROUPS
 913         processor->current_thread_group = thread_group_get(thread);
 914 #endif
 915         processor->starting_pri = thread->sched_pri;
 916         processor->deadline = UINT64_MAX;
 917         thread->last_processor = processor;
 918         processor_up(processor);
 919         processor->last_dispatch = mach_absolute_time();
 920         timer_start(&thread->system_timer, processor->last_dispatch);
 921         processor->thread_timer = processor->kernel_timer = &thread->system_timer;
 922
 923         timer_start(&processor->system_state, processor->last_dispatch);
 924         processor->current_state = &processor->system_state;
 925
 926 #if __AMP__
 927         if (processor->processor_set->pset_cluster_type == PSET_AMP_P) {
 928                 timer_start(&thread->ptime, processor->last_dispatch);
 929         }
 930 #endif
 931
 932         cpu_quiescent_counter_join(processor->last_dispatch);
 933
 934         PMAP_ACTIVATE_USER(thread, processor->cpu_id);
 935
 936         load_context_kprintf("machine_load_context\n");
 937
 938         machine_load_context(thread);
 939         /*NOTREACHED*/
 940 }
 941
 942 void
 943 scale_setup(void)
 944 {
 945         int scale = 0;
 946 #if defined(__LP64__)
 947         typeof(task_max) task_max_base = task_max;
 948
 949         /* Raise limits for servers with >= 16G */
 950         if ((serverperfmode != 0) && ((uint64_t)max_mem_actual >= (uint64_t)(16 * 1024 * 1024 * 1024ULL))) {
 951                 scale = (int)((uint64_t)sane_size / (uint64_t)(8 * 1024 * 1024 * 1024ULL));
 952                 /* limit to 128 G */
 953                 if (scale > 16) {
 954                         scale = 16;
 955                 }
 956                 task_max_base = 2500;
 957                 /* Raise limits for machines with >= 3GB */
 958         } else if ((uint64_t)max_mem_actual >= (uint64_t)(3 * 1024 * 1024 * 1024ULL)) {
 959                 if ((uint64_t)max_mem_actual < (uint64_t)(8 * 1024 * 1024 * 1024ULL)) {
 960                         scale = 2;
 961                 } else {
 962                         /* limit to 64GB */
 963                         scale = MIN(16, (int)((uint64_t)max_mem_actual / (uint64_t)(4 * 1024 * 1024 * 1024ULL)));
 964                 }
 965         }
 966
 967         task_max = MAX(task_max, task_max_base * scale);
 968
 969         if (scale != 0) {
 970                 task_threadmax = task_max;
 971                 thread_max = task_max * 5;
 972         }
 973
 974 #endif
 975
 976         bsd_scale_setup(scale);
 977 }