/*
- * Copyright (c) 2000 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2006 Apple Computer, Inc. All rights reserved.
*
- * @APPLE_LICENSE_HEADER_START@
- *
- * Copyright (c) 1999-2003 Apple Computer, Inc. All Rights Reserved.
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
*
* This file contains Original Code and/or Modifications of Original Code
* as defined in and that are subject to the Apple Public Source License
* Version 2.0 (the 'License'). You may not use this file except in
- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
+ *
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.
*
* The Original Code and all software distributed under the License are
* distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
* Please see the License for the specific language governing rights and
* limitations under the License.
*
- * @APPLE_LICENSE_HEADER_END@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@
*/
/*
* @OSF_COPYRIGHT@
* any improvements or extensions that they make and grant Carnegie Mellon
* the rights to redistribute these changes.
*/
+/*
+ * NOTICE: This file was modified by McAfee Research in 2004 to introduce
+ * support for mandatory and extensible security protections. This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ */
/*
*/
/*
* File: mach/port.h
*
- * Definition of a port
+ * Definition of a Mach port
+ *
+ * Mach ports are the endpoints to Mach-implemented communications
+ * channels (usually uni-directional message queues, but other types
+ * also exist).
+ *
+ * Unique collections of these endpoints are maintained for each
+ * Mach task. Each Mach port in the task's collection is given a
+ * [task-local] name to identify it - and the the various "rights"
+ * held by the task for that specific endpoint.
+ *
+ * This header defines the types used to identify these Mach ports
+ * and the various rights associated with them. For more info see:
+ *
+ * <mach/mach_port.h> - manipulation of port rights in a given space
+ * <mach/message.h> - message queue [and port right passing] mechanism
*
- * [The basic port_t type should probably be machine-dependent,
- * as it must be represented by a 32-bit integer.]
*/
#ifndef _MACH_PORT_H_
#define _MACH_PORT_H_
+#include <sys/cdefs.h>
#include <stdint.h>
#include <mach/boolean.h>
#include <mach/machine/vm_types.h>
-#include <sys/appleapiopts.h>
-
/*
- * A port_name_t is a 32 bit value which represents a name of a
- * port right within some ipc space. This is a constant definition
- * everywhere.
- *
- * The type port_t represents a reference added or deleted to a
- * port right.
+ * mach_port_name_t - the local identity for a Mach port
*
- * At user space, this is represented by returning the name of
- * the right(s) that got altered within the user's ipc space.
- * So a port_t is the same type as a port_name_t there.
+ * The name is Mach port namespace specific. It is used to
+ * identify the rights held for that port by the task whose
+ * namespace is implied [or specifically provided].
*
- * Since there is no right space for the kernel proper (all rights
- * are naked rights) these rights are represented by passing a
- * pointer to the specific ipc_object_t subclass (typically
- * ipc_port_t) that got altered/is to be altered.
+ * Use of this type usually implies just a name - no rights.
+ * See mach_port_t for a type that implies a "named right."
*
- * JMM - Because of this pointer/integer overloading, port names
- * should be defined as uintptr_t types. But that would make
- * message headers and descriptors pointer-length dependent.
*/
-typedef natural_t port_name_t;
-typedef port_name_t *port_name_array_t;
+
+typedef natural_t mach_port_name_t;
+typedef mach_port_name_t *mach_port_name_array_t;
-#ifdef KERNEL_PRIVATE
+#ifdef KERNEL
+
+/*
+ * mach_port_t - a named port right
+ *
+ * In the kernel, "rights" are represented [named] by pointers to
+ * the ipc port object in question. There is no port namespace for the
+ * rights to be collected.
+ *
+ * Actually, there is namespace for the kernel task. But most kernel
+ * code - including, but not limited to, Mach IPC code - lives in the
+ * limbo between the current user-level task and the "next" task. Very
+ * little of the kernel code runs in full kernel task context. So very
+ * little of it gets to use the kernel task's port name space.
+ *
+ * Because of this implementation approach, all in-kernel rights for
+ * a given port coalesce [have the same name/pointer]. The actual
+ * references are counted in the port itself. It is up to the kernel
+ * code in question to "just remember" how many [and what type of]
+ * rights it holds and handle them appropriately.
+ *
+ */
-#if !defined(__APPLE_API_PRIVATE) || !defined(MACH_KERNEL_PRIVATE)
+#ifndef MACH_KERNEL_PRIVATE
/*
- * For kernel code that resides outside of mach
- * we define empty structs so that everything will
- * remain strongly typed, without giving out
- * implementation details.
+ * For kernel code that resides outside of Mach proper, we opaque the
+ * port structure definition.
*/
struct ipc_port ;
-#endif /* !__APPLE_API_PRIVATE || !MACH_KERNEL_PRIVATE */
+#endif /* MACH_KERNEL_PRIVATE */
typedef struct ipc_port *ipc_port_t;
-typedef ipc_port_t port_t;
-#define IPC_PORT_NULL ((ipc_port_t) 0)
-#define IPC_PORT_DEAD ((ipc_port_t)~0)
-#define IPC_PORT_VALID(port) (((port) != IPC_PORT_NULL) && \
- ((port) != IPC_PORT_DEAD))
+#define IPC_PORT_NULL ((ipc_port_t) 0UL)
+#define IPC_PORT_DEAD ((ipc_port_t)~0UL)
+#define IPC_PORT_VALID(port) \
+ ((port) != IPC_PORT_NULL && (port) != IPC_PORT_DEAD)
-#else /* ! KERNEL_PRIVATE */
+typedef ipc_port_t mach_port_t;
+
+/*
+ * Since the 32-bit and 64-bit representations of ~0 are different,
+ * explicitly handle MACH_PORT_DEAD
+ */
-typedef port_name_t port_t;
+#define CAST_MACH_PORT_TO_NAME(x) ((mach_port_name_t)(uintptr_t)(x))
+#define CAST_MACH_NAME_TO_PORT(x) ((x) == MACH_PORT_DEAD ? (mach_port_t)IPC_PORT_DEAD : (mach_port_t)(uintptr_t)(x))
-#endif /* KERNEL_PRIVATE */
+#else /* KERNEL */
+
+/*
+ * mach_port_t - a named port right
+ *
+ * In user-space, "rights" are represented by the name of the
+ * right in the Mach port namespace. Even so, this type is
+ * presented as a unique one to more clearly denote the presence
+ * of a right coming along with the name.
+ *
+ * Often, various rights for a port held in a single name space
+ * will coalesce and are, therefore, be identified by a single name
+ * [this is the case for send and receive rights]. But not
+ * always [send-once rights currently get a unique name for
+ * each right].
+ *
+ */
+
+#ifndef _MACH_PORT_T
+#define _MACH_PORT_T
+typedef mach_port_name_t mach_port_t;
+#endif
+
+#endif /* KERNEL */
+
+typedef mach_port_t *mach_port_array_t;
/*
- * PORT_NULL is a legal value that can be carried in messages.
+ * MACH_PORT_NULL is a legal value that can be carried in messages.
* It indicates the absence of any port or port rights. (A port
* argument keeps the message from being "simple", even if the
- * value is PORT_NULL.) The value PORT_DEAD is also a legal
+ * value is MACH_PORT_NULL.) The value MACH_PORT_DEAD is also a legal
* value that can be carried in messages. It indicates
* that a port right was present, but it died.
*/
-#define PORT_NULL ((port_t) 0)
-#define PORT_DEAD ((port_t) ~0)
-#define PORT_VALID(name) \
- (((port_t)(name) != PORT_NULL) && \
- ((port_t)(name) != PORT_DEAD))
-
-/*
- * Mach 3.0 renamed everything to have mach_ in front of it.
- * Do that mapping here, so we have the types and macros in
- * both formats.
- */
-typedef port_t mach_port_t;
-typedef port_t *mach_port_array_t;
-typedef port_name_t mach_port_name_t;
-typedef mach_port_name_t *mach_port_name_array_t;
#define MACH_PORT_NULL 0 /* intentional loose typing */
#define MACH_PORT_DEAD ((mach_port_name_t) ~0)
(((name) != MACH_PORT_NULL) && \
((name) != MACH_PORT_DEAD))
+
/*
- * mach_port_name_t must be an unsigned type. Port values
- * have two parts, a generation number and an index.
- * These macros encapsulate all knowledge of how
- * a mach_port_name_t is laid out. They are made visible
- * to user tasks so that packages to map from a mach_port_name_t
- * to associated user data can discount the generation
- * nuber (if desired) in doing the mapping.
+ * For kernel-selected [assigned] port names, the name is
+ * comprised of two parts: a generation number and an index.
+ * This approach keeps the exact same name from being generated
+ * and reused too quickly [to catch right/reference counting bugs].
+ * The dividing line between the constituent parts is exposed so
+ * that efficient "mach_port_name_t to data structure pointer"
+ * conversion implementation can be made. But it is possible
+ * for user-level code to assign their own names to Mach ports.
+ * These are not required to participate in this algorithm. So
+ * care should be taken before "assuming" this model.
*
- * Within the kernel, ipc/ipc_entry.c implicitly assumes
- * when it uses the splay tree functions that the generation
- * number is in the low bits, so that names are ordered first
- * by index and then by generation. If the size of generation
- * numbers changes, be sure to update IE_BITS_GEN_MASK and
- * friends in ipc/ipc_entry.h.
*/
-#ifndef NO_PORT_GEN
+
+#ifndef NO_PORT_GEN
+
#define MACH_PORT_INDEX(name) ((name) >> 8)
#define MACH_PORT_GEN(name) (((name) & 0xff) << 24)
#define MACH_PORT_MAKE(index, gen) \
(((index) << 8) | (gen) >> 24)
-#else
+
+#else /* NO_PORT_GEN */
+
#define MACH_PORT_INDEX(name) (name)
#define MACH_PORT_GEN(name) (0)
#define MACH_PORT_MAKE(index, gen) (index)
-#endif /* !NO_PORT_GEN */
+
+#endif /* NO_PORT_GEN */
+
/*
- * These are the different rights a task may have.
+ * These are the different rights a task may have for a port.
* The MACH_PORT_RIGHT_* definitions are used as arguments
* to mach_port_allocate, mach_port_get_refs, etc, to specify
* a particular right to act upon. The mach_port_names and
#define MACH_PORT_RIGHT_SEND_ONCE ((mach_port_right_t) 2)
#define MACH_PORT_RIGHT_PORT_SET ((mach_port_right_t) 3)
#define MACH_PORT_RIGHT_DEAD_NAME ((mach_port_right_t) 4)
-#define MACH_PORT_RIGHT_NUMBER ((mach_port_right_t) 5)
+#define MACH_PORT_RIGHT_LABELH ((mach_port_right_t) 5)
+#define MACH_PORT_RIGHT_NUMBER ((mach_port_right_t) 6)
typedef natural_t mach_port_type_t;
typedef mach_port_type_t *mach_port_type_array_t;
#define MACH_PORT_TYPE_SEND_ONCE MACH_PORT_TYPE(MACH_PORT_RIGHT_SEND_ONCE)
#define MACH_PORT_TYPE_PORT_SET MACH_PORT_TYPE(MACH_PORT_RIGHT_PORT_SET)
#define MACH_PORT_TYPE_DEAD_NAME MACH_PORT_TYPE(MACH_PORT_RIGHT_DEAD_NAME)
+#define MACH_PORT_TYPE_LABELH MACH_PORT_TYPE(MACH_PORT_RIGHT_LABELH)
/* Convenient combinations. */
typedef unsigned int mach_port_srights_t; /* status of send rights */
typedef struct mach_port_status {
- mach_port_name_t mps_pset; /* containing port set */
+ mach_port_rights_t mps_pset; /* count of containing port sets */
mach_port_seqno_t mps_seqno; /* sequence number */
mach_port_mscount_t mps_mscount; /* make-send count */
mach_port_msgcount_t mps_qlimit; /* queue limit */
boolean_t mps_srights; /* do send rights exist? */
boolean_t mps_pdrequest; /* port-deleted requested? */
boolean_t mps_nsrequest; /* no-senders requested? */
- unsigned int mps_flags; /* port flags */
+ natural_t mps_flags; /* port flags */
} mach_port_status_t;
-#define MACH_PORT_QLIMIT_DEFAULT ((mach_port_msgcount_t) 5)
-#define MACH_PORT_QLIMIT_MAX ((mach_port_msgcount_t) 16)
+/* System-wide values for setting queue limits on a port */
+#define MACH_PORT_QLIMIT_ZERO ((mach_port_msgcount_t) 0)
+#define MACH_PORT_QLIMIT_BASIC ((mach_port_msgcount_t) 5)
+#define MACH_PORT_QLIMIT_SMALL ((mach_port_msgcount_t) 16)
+#define MACH_PORT_QLIMIT_LARGE ((mach_port_msgcount_t) 1024)
+#define MACH_PORT_QLIMIT_KERNEL ((mach_port_msgcount_t) 65536)
+#define MACH_PORT_QLIMIT_MIN MACH_PORT_QLIMIT_ZERO
+#define MACH_PORT_QLIMIT_DEFAULT MACH_PORT_QLIMIT_BASIC
+#define MACH_PORT_QLIMIT_MAX MACH_PORT_QLIMIT_LARGE
typedef struct mach_port_limits {
mach_port_msgcount_t mpl_qlimit; /* number of msgs */
#define MACH_PORT_RECEIVE_STATUS 2 /* uses mach_port_limits_t */
#define MACH_PORT_DNREQUESTS_SIZE 3 /* info is int */
-#define MACH_PORT_LIMITS_INFO_COUNT \
- (sizeof(mach_port_limits_t)/sizeof(natural_t))
-#define MACH_PORT_RECEIVE_STATUS_COUNT \
- (sizeof(mach_port_status_t)/sizeof(natural_t))
+#define MACH_PORT_LIMITS_INFO_COUNT ((natural_t) \
+ (sizeof(mach_port_limits_t)/sizeof(natural_t)))
+#define MACH_PORT_RECEIVE_STATUS_COUNT ((natural_t) \
+ (sizeof(mach_port_status_t)/sizeof(natural_t)))
#define MACH_PORT_DNREQUESTS_SIZE_COUNT 1
/*
* Structure used to pass information about port allocation requests.
* Must be padded to 64-bits total length.
*/
-
typedef struct mach_port_qos {
- boolean_t name:1; /* name given */
- boolean_t prealloc:1; /* prealloced message */
+ unsigned int name:1; /* name given */
+ unsigned int prealloc:1; /* prealloced message */
boolean_t pad1:30;
natural_t len;
} mach_port_qos_t;
+#if !__DARWIN_UNIX03 && !defined(_NO_PORT_T_FROM_MACH)
+/*
+ * Mach 3.0 renamed everything to have mach_ in front of it.
+ * These types and macros are provided for backward compatibility
+ * but are deprecated.
+ */
+typedef mach_port_t port_t;
+typedef mach_port_name_t port_name_t;
+typedef mach_port_name_t *port_name_array_t;
+
+#define PORT_NULL ((port_t) 0)
+#define PORT_DEAD ((port_t) ~0)
+#define PORT_VALID(name) \
+ ((port_t)(name) != PORT_NULL && (port_t)(name) != PORT_DEAD)
+
+#endif /* !__DARWIN_UNIX03 && !_NO_PORT_T_FROM_MACH */
+
#endif /* _MACH_PORT_H_ */
projects / apple / xnu.git / blobdiff