/*
- * Copyright (c) 2000-2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2009 Apple Inc. All rights reserved.
*
* @APPLE_OSREFERENCE_LICENSE_HEADER_START@
*
#include <mach/host_priv_server.h>
#include <kern/host.h>
#include <kern/processor.h>
-#include <kern/lock.h>
#include <kern/task.h>
#include <kern/thread.h>
#include <kern/ipc_host.h>
#include <ipc/ipc_port.h>
#include <ipc/ipc_space.h>
+#if CONFIG_MACF
+#include <security/mac_mach_internal.h>
+#endif
+
/*
* Forward declarations
*/
-void
-ipc_processor_terminate(
- processor_t processor);
-
-void
-ipc_processor_disable(
- processor_t processor);
-
boolean_t
ref_pset_port_locked(
ipc_port_t port, boolean_t matchn, processor_set_t *ppset);
* ipc_host_init: set up various things.
*/
+extern lck_grp_t host_notify_lock_grp;
+extern lck_attr_t host_notify_lock_attr;
+
void ipc_host_init(void)
{
ipc_port_t port;
int i;
- mutex_init(&realhost.lock, 0);
+ lck_mtx_init(&realhost.lock, &host_notify_lock_grp, &host_notify_lock_attr);
/*
* Allocate and set up the two host ports.
/*
* Set up ipc for default processor set.
*/
- ipc_pset_init(&default_pset);
- ipc_pset_enable(&default_pset);
+ ipc_pset_init(&pset0);
+ ipc_pset_enable(&pset0);
/*
* And for master processor
myport = processor->processor_self;
ipc_kobject_set(myport, (ipc_kobject_t) processor, IKOT_PROCESSOR);
}
-
-/*
- * ipc_processor_disable:
- *
- * Disable ipc control of processor by clearing port object.
- */
-void
-ipc_processor_disable(
- processor_t processor)
-{
- ipc_port_t myport;
-
- myport = processor->processor_self;
- if (myport == IP_NULL)
- return;
- ipc_kobject_set(myport, IKO_NULL, IKOT_NONE);
-}
-
-/*
- * ipc_processor_terminate:
- *
- * Processor is off-line. Destroy ipc control port.
- */
-void
-ipc_processor_terminate(
- processor_t processor)
-{
- ipc_port_t myport;
- spl_t s;
-
- s = splsched();
- processor_lock(processor);
- myport = processor->processor_self;
- if (myport == IP_NULL) {
- processor_unlock(processor);
- splx(s);
- return;
- }
-
- processor->processor_self = IP_NULL;
- processor_unlock(processor);
- splx(s);
-
- ipc_port_dealloc_kernel(myport);
-}
/*
* ipc_pset_init:
ipc_pset_enable(
processor_set_t pset)
{
- pset_lock(pset);
- if (pset->active) {
- ipc_kobject_set(pset->pset_self,
- (ipc_kobject_t) pset, IKOT_PSET);
- ipc_kobject_set(pset->pset_name_self,
- (ipc_kobject_t) pset, IKOT_PSET_NAME);
- pset->ref_count += 2;
- }
- pset_unlock(pset);
-}
-
-/*
- * ipc_pset_disable:
- *
- * Disable ipc access to a processor set by clearing the port objects.
- * Caller must hold pset lock and a reference to the pset. Ok to
- * just decrement pset reference count as a result.
- */
-void
-ipc_pset_disable(
- processor_set_t pset)
-{
- ipc_kobject_set(pset->pset_self, IKO_NULL, IKOT_NONE);
- ipc_kobject_set(pset->pset_name_self, IKO_NULL, IKOT_NONE);
- pset->ref_count -= 2;
+ ipc_kobject_set(pset->pset_self, (ipc_kobject_t) pset, IKOT_PSET);
+ ipc_kobject_set(pset->pset_name_self, (ipc_kobject_t) pset, IKOT_PSET_NAME);
}
/*
- * ipc_pset_terminate:
+ * processor_set_default:
*
- * Processor set is dead. Deallocate the ipc control structures.
- */
-void
-ipc_pset_terminate(
- processor_set_t pset)
-{
- ipc_port_dealloc_kernel(pset->pset_self);
- ipc_port_dealloc_kernel(pset->pset_name_self);
-}
-
-/*
- * processor_set_default, processor_set_default_priv:
- *
- * Return ports for manipulating default_processor set. MiG code
- * differentiates between these two routines.
+ * Return ports for manipulating default_processor set.
*/
kern_return_t
processor_set_default(
if (host == HOST_NULL)
return(KERN_INVALID_ARGUMENT);
- *pset = &default_pset;
- pset_reference(*pset);
- return(KERN_SUCCESS);
+ *pset = &pset0;
+
+ return (KERN_SUCCESS);
}
/*
pset = PROCESSOR_SET_NULL;
if (ip_active(port) &&
((ip_kotype(port) == IKOT_PSET) ||
- (matchn && (ip_kotype(port) == IKOT_PSET_NAME)))) {
+ (matchn && (ip_kotype(port) == IKOT_PSET_NAME)))) {
pset = (processor_set_t) port->ip_kobject;
- if (!pset_lock_try(pset)) {
- ip_unlock(port);
- mutex_pause();
- return (FALSE);
- }
- pset->ref_count++;
- pset_unlock(pset);
}
+
*ppset = pset;
ip_unlock(port);
+
return (TRUE);
}
* Purpose:
* Convert from a processor to a port.
* Produces a naked send right which may be invalid.
+ * Processors are not reference counted, so nothing to release.
* Conditions:
* Nothing locked.
*/
convert_processor_to_port(
processor_t processor)
{
- ipc_port_t port;
- spl_t s;
-
- s = splsched();
- processor_lock(processor);
-
- if (processor->processor_self != IP_NULL)
- port = ipc_port_make_send(processor->processor_self);
- else
- port = IP_NULL;
-
- processor_unlock(processor);
- splx(s);
+ ipc_port_t port = processor->processor_self;
+ if (port != IP_NULL)
+ port = ipc_port_make_send(port);
return port;
}
* Routine: convert_pset_to_port
* Purpose:
* Convert from a pset to a port.
- * Consumes a pset ref; produces a naked send right
- * which may be invalid.
+ * Produces a naked send right which may be invalid.
+ * Processor sets are not reference counted, so nothing to release.
* Conditions:
* Nothing locked.
*/
convert_pset_to_port(
processor_set_t pset)
{
- ipc_port_t port;
+ ipc_port_t port = pset->pset_self;
- pset_lock(pset);
- if (pset->active)
- port = ipc_port_make_send(pset->pset_self);
- else
- port = IP_NULL;
- pset_unlock(pset);
+ if (port != IP_NULL)
+ port = ipc_port_make_send(port);
- pset_deallocate(pset);
return port;
}
* Routine: convert_pset_name_to_port
* Purpose:
* Convert from a pset to a port.
- * Consumes a pset ref; produces a naked send right
- * which may be invalid.
+ * Produces a naked send right which may be invalid.
+ * Processor sets are not reference counted, so nothing to release.
* Conditions:
* Nothing locked.
*/
convert_pset_name_to_port(
processor_set_name_t pset)
{
- ipc_port_t port;
+ ipc_port_t port = pset->pset_name_self;
- pset_lock(pset);
- if (pset->active)
- port = ipc_port_make_send(pset->pset_name_self);
- else
- port = IP_NULL;
- pset_unlock(pset);
+ if (port != IP_NULL)
+ port = ipc_port_make_send(port);
- pset_deallocate(pset);
return port;
}
*/
kern_return_t
host_set_exception_ports(
- host_priv_t host_priv,
+ host_priv_t host_priv,
exception_mask_t exception_mask,
ipc_port_t new_port,
exception_behavior_t new_behavior,
return KERN_INVALID_ARGUMENT;
}
- assert(host_priv == &realhost);
-
- if (exception_mask & ~EXC_MASK_ALL) {
+ if (exception_mask & ~EXC_MASK_VALID) {
return KERN_INVALID_ARGUMENT;
}
if (IP_VALID(new_port)) {
- switch (new_behavior) {
+ switch (new_behavior & ~MACH_EXCEPTION_CODES) {
case EXCEPTION_DEFAULT:
case EXCEPTION_STATE:
case EXCEPTION_STATE_IDENTITY:
return KERN_INVALID_ARGUMENT;
}
}
- /* Cannot easily check "new_flavor", but that just means that
- * the flavor in the generated exception message might be garbage:
- * GIGO
+
+ /*
+ * Check the validity of the thread_state_flavor by calling the
+ * VALID_THREAD_STATE_FLAVOR architecture dependent macro defined in
+ * osfmk/mach/ARCHITECTURE/thread_status.h
*/
+ if (new_flavor != 0 && !VALID_THREAD_STATE_FLAVOR(new_flavor))
+ return (KERN_INVALID_ARGUMENT);
+
+#if CONFIG_MACF
+ if (mac_task_check_set_host_exception_ports(current_task(), exception_mask) != 0)
+ return KERN_NO_ACCESS;
+#endif
+
+ assert(host_priv == &realhost);
+
host_lock(host_priv);
for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
if (host_priv == HOST_PRIV_NULL)
return KERN_INVALID_ARGUMENT;
- if (exception_mask & ~EXC_MASK_ALL) {
+ if (exception_mask & ~EXC_MASK_VALID) {
return KERN_INVALID_ARGUMENT;
}
kern_return_t
host_swap_exception_ports(
- host_priv_t host_priv,
+ host_priv_t host_priv,
exception_mask_t exception_mask,
ipc_port_t new_port,
exception_behavior_t new_behavior,
if (host_priv == HOST_PRIV_NULL)
return KERN_INVALID_ARGUMENT;
- if (exception_mask & ~EXC_MASK_ALL) {
+ if (exception_mask & ~EXC_MASK_VALID) {
return KERN_INVALID_ARGUMENT;
}
return KERN_INVALID_ARGUMENT;
}
}
- /* Cannot easily check "new_flavor", but that just means that
- * the flavor in the generated exception message might be garbage:
- * GIGO */
- host_lock(host_priv);
+ if (new_flavor != 0 && !VALID_THREAD_STATE_FLAVOR(new_flavor))
+ return (KERN_INVALID_ARGUMENT);
- count = 0;
+#if CONFIG_MACF
+ if (mac_task_check_set_host_exception_ports(current_task(), exception_mask) != 0)
+ return KERN_NO_ACCESS;
+#endif /* CONFIG_MACF */
- for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++) {
+ host_lock(host_priv);
+
+ assert(EXC_TYPES_COUNT > FIRST_EXCEPTION);
+ for (count=0, i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT && count < *CountCnt; i++) {
if (exception_mask & (1 << i)) {
for (j = 0; j < count; j++) {
/*
ipc_port_copy_send(new_port);
host_priv->exc_actions[i].behavior = new_behavior;
host_priv->exc_actions[i].flavor = new_flavor;
- if (count > *CountCnt) {
- break;
- }
} else
old_port[i] = IP_NULL;
}/* for */
/*
* Consume send rights without any lock held.
*/
- for (i = FIRST_EXCEPTION; i < EXC_TYPES_COUNT; i++)
+ while (--i >= FIRST_EXCEPTION) {
if (IP_VALID(old_port[i]))
ipc_port_release_send(old_port[i]);
+ }
+
if (IP_VALID(new_port)) /* consume send right */
ipc_port_release_send(new_port);
*CountCnt = count;
projects / apple / xnu.git / blobdiff