xnu-2050.48.11.tar.gz

[apple/xnu.git] / osfmk / ipc / ipc_init.c

diff --git a/osfmk/ipc/ipc_init.c b/osfmk/ipc/ipc_init.c
index 9036ae222a30d4dd84000093aed9d9f55ad6b916..11dd9dafcbe809841a7e1d305c7d3f113f07a7af 100644 (file)
--- a/osfmk/ipc/ipc_init.c
+++ b/osfmk/ipc/ipc_init.c
@@ -1,5 +1,5 @@
 /*
- * Copyright (c) 2000-2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2000-2012 Apple Inc. All rights reserved.
  *
  * @APPLE_OSREFERENCE_LICENSE_HEADER_START@
  * 
@@ -53,6 +53,13 @@
  * any improvements or extensions that they make and grant Carnegie Mellon
  * the rights to redistribute these changes.
  */
+/*
+ * NOTICE: This file was modified by McAfee Research in 2004 to introduce
+ * support for mandatory and extensible security protections.  This notice
+ * is included in support of clause 2.2 (b) of the Apple Public License,
+ * Version 2.0.
+ * Copyright (c) 2005 SPARTA, Inc.
+ */
 /*
  */
 /*
@@ -67,6 +74,7 @@
 #include <mach_rt.h>
 
 #include <mach/port.h>
+#include <mach/message.h>
 #include <mach/kern_return.h>
 
 #include <kern/kern_types.h>
@@ -94,19 +102,33 @@
 #include <ipc/ipc_table.h>
 
 #include <mach/machine/ndr_def.h>   /* NDR_record */
+#include <ipc/ipc_labelh.h>
 
 vm_map_t ipc_kernel_map;
 vm_size_t ipc_kernel_map_size = 1024 * 1024;
 
+/* values to limit physical copy out-of-line memory descriptors */
 vm_map_t ipc_kernel_copy_map;
 #define IPC_KERNEL_COPY_MAP_SIZE (8 * 1024 * 1024)
 vm_size_t ipc_kernel_copy_map_size = IPC_KERNEL_COPY_MAP_SIZE;
-vm_size_t ipc_kmsg_max_vm_space = (IPC_KERNEL_COPY_MAP_SIZE * 7)/8;
+vm_size_t ipc_kmsg_max_vm_space = ((IPC_KERNEL_COPY_MAP_SIZE * 7) / 8);
+
+/* 
+ * values to limit inline message body handling
+ * avoid copyin/out limits - even after accounting for maximum descriptor expansion.
+ */
+#define IPC_KMSG_MAX_SPACE (64 * 1024 * 1024) /* keep in sync with COPYSIZELIMIT_PANIC */
+vm_size_t ipc_kmsg_max_body_space = ((IPC_KMSG_MAX_SPACE * 3)/4 - MAX_TRAILER_SIZE);
 
-int ipc_space_max = SPACE_MAX;
-int ipc_tree_entry_max = ITE_MAX;
-int ipc_port_max = PORT_MAX;
-int ipc_pset_max = SET_MAX;
+int ipc_space_max;
+int ipc_port_max;
+int ipc_pset_max;
+
+
+lck_grp_t              ipc_lck_grp;
+lck_attr_t             ipc_lck_attr;
+
+static lck_grp_attr_t  ipc_lck_grp_attr;
 
 extern void ikm_cache_init(void);
 
@@ -121,10 +143,13 @@ void
 ipc_bootstrap(void)
 {
        kern_return_t kr;
-
+       
+       lck_grp_attr_setdefault(&ipc_lck_grp_attr);
+       lck_grp_init(&ipc_lck_grp, "ipc", &ipc_lck_grp_attr);
+       lck_attr_setdefault(&ipc_lck_attr);
+       
        ipc_port_multiple_lock_init();
 
-       ipc_port_timestamp_lock_init();
        ipc_port_timestamp_data = 0;
 
        /* all IPC zones should be exhaustible */
@@ -133,20 +158,7 @@ ipc_bootstrap(void)
                               ipc_space_max * sizeof(struct ipc_space),
                               sizeof(struct ipc_space),
                               "ipc spaces");
-#if 0
-       /* make it exhaustible */
-       zone_change(ipc_space_zone, Z_EXHAUST, TRUE);
-#endif
-
-       ipc_tree_entry_zone =
-               zinit(sizeof(struct ipc_tree_entry),
-                       ipc_tree_entry_max * sizeof(struct ipc_tree_entry),
-                       sizeof(struct ipc_tree_entry),
-                       "ipc tree entries");
-#if 0
-       /* make it exhaustible */
-       zone_change(ipc_tree_entry_zone, Z_EXHAUST, TRUE);
-#endif
+       zone_change(ipc_space_zone, Z_NOENCRYPT, TRUE);
 
        /*
         * populate all port(set) zones
@@ -156,29 +168,38 @@ ipc_bootstrap(void)
                      ipc_port_max * sizeof(struct ipc_port),
                      sizeof(struct ipc_port),
                      "ipc ports");
-       /*
-        * XXX  Can't make the port zone exhaustible because the kernel
-        * XXX  panics when port allocation for an internal object fails.
-        *zone_change(ipc_object_zones[IOT_PORT], Z_EXHAUST, TRUE);
-        */
+       /* cant charge callers for port allocations (references passed) */
+       zone_change(ipc_object_zones[IOT_PORT], Z_CALLERACCT, FALSE);
+       zone_change(ipc_object_zones[IOT_PORT], Z_NOENCRYPT, TRUE);
 
        ipc_object_zones[IOT_PORT_SET] =
                zinit(sizeof(struct ipc_pset),
                      ipc_pset_max * sizeof(struct ipc_pset),
                      sizeof(struct ipc_pset),
                      "ipc port sets");
-       /* make it exhaustible */
-       zone_change(ipc_object_zones[IOT_PORT_SET], Z_EXHAUST, TRUE);
+       zone_change(ipc_object_zones[IOT_PORT_SET], Z_NOENCRYPT, TRUE);
 
        /*
         * Create the basic ipc_kmsg_t zone (the one we also cache)
         * elements at the processor-level to avoid the locking.
         */
        ipc_kmsg_zone = zinit(IKM_SAVED_KMSG_SIZE,
-                             ipc_port_max * MACH_PORT_QLIMIT_MAX *
+                             ipc_port_max * MACH_PORT_QLIMIT_DEFAULT *
                              IKM_SAVED_KMSG_SIZE,
                              IKM_SAVED_KMSG_SIZE,
                              "ipc kmsgs");
+       zone_change(ipc_kmsg_zone, Z_CALLERACCT, FALSE);
+
+#if CONFIG_MACF_MACH
+       ipc_labelh_zone = 
+               zinit(sizeof(struct ipc_labelh),
+                     ipc_port_max * sizeof(struct ipc_labelh),
+                     sizeof(struct ipc_labelh),
+                     "label handles");
+       /* cant charge callers for label allocations (port refs passed) */
+       zone_change(ipc_labelh_zone, Z_CALLERACCT, FALSE);
+
+#endif
 
        /* create special spaces */
 
@@ -196,7 +217,7 @@ ipc_bootstrap(void)
 #endif
        mig_init();
        ipc_table_init();
-       ipc_hash_init();
+
        semaphore_init();
        lock_set_init();
        mk_timer_init();