xnu-4570.51.1.tar.gz

[apple/xnu.git] / bsd / dev / memdev.c

diff --git a/bsd/dev/memdev.c b/bsd/dev/memdev.c
index 789249397c7a2ae3c049044e0eb644364449be87..434fcbdf7ad6b2c7d68171cf953ff325bbb5ea95 100644 (file)
--- a/bsd/dev/memdev.c
+++ b/bsd/dev/memdev.c
@@ -1,14 +1,19 @@
 /*
 /*

- * Copyright (c) 2004 Apple Computer, Inc. All rights reserved.
+ * Copyright (c) 2004-2006 Apple Computer, Inc. All rights reserved.

  *
  *

- * @APPLE_LICENSE_HEADER_START@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_START@

  * 
  * This file contains Original Code and/or Modifications of Original Code
  * as defined in and that are subject to the Apple Public Source License
  * Version 2.0 (the 'License'). You may not use this file except in
  * 
  * This file contains Original Code and/or Modifications of Original Code
  * as defined in and that are subject to the Apple Public Source License
  * Version 2.0 (the 'License'). You may not use this file except in

- * compliance with the License. Please obtain a copy of the License at
- * http://www.opensource.apple.com/apsl/ and read it before using this
- * file.
+ * compliance with the License. The rights granted to you under the License
+ * may not be used to create, or enable the creation or redistribution of,
+ * unlawful or unlicensed copies of an Apple operating system, or to
+ * circumvent, violate, or enable the circumvention or violation of, any
+ * terms of an Apple operating system software license agreement.
+ * 
+ * Please obtain a copy of the License at
+ * http://www.opensource.apple.com/apsl/ and read it before using this file.

  * 
  * The Original Code and all software distributed under the License are
  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
  * 
  * The Original Code and all software distributed under the License are
  * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER


@@ -18,7 +23,7 @@
  * Please see the License for the specific language governing rights and
  * limitations under the License.
  * 
  * Please see the License for the specific language governing rights and
  * limitations under the License.
  * 

- * @APPLE_LICENSE_HEADER_END@
+ * @APPLE_OSREFERENCE_LICENSE_HEADER_END@

  */
 /*
  * Copyright (c) 1988 University of Utah.
  */
 /*
  * Copyright (c) 1988 University of Utah.


@@ -89,6 +94,7 @@
 #include <vm/pmap.h>
 #include <vm/vm_pager.h>
 #include <mach/memory_object_types.h>
 #include <vm/pmap.h>
 #include <vm/vm_pager.h>
 #include <mach/memory_object_types.h>

+#include <kern/debug.h>

 
 #include <miscfs/devfs/devfs.h>
 
 
 #include <miscfs/devfs/devfs.h>
 


@@ -102,14 +108,21 @@ static strategy_fcn_t     mdevstrategy;
 static int                             mdevbioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p);
 static int                             mdevcioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p);
 static int                             mdevrw(dev_t dev, struct uio *uio, int ioflag);
 static int                             mdevbioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p);
 static int                             mdevcioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p);
 static int                             mdevrw(dev_t dev, struct uio *uio, int ioflag);

+
+#ifdef CONFIG_MEMDEV_INSECURE

 static char *                  nonspace(char *pos, char *end);
 static char *                  getspace(char *pos, char *end);
 static char *                  nonspace(char *pos, char *end);
 static char *                  getspace(char *pos, char *end);

-static char *                  cvtnum(char *pos, char *end, unsigned int *num);
+static char *                  cvtnum(char *pos, char *end, uint64_t *num);
+#endif /* CONFIG_MEMDEV_INSECURE */

 
 extern void            bcopy_phys(addr64_t from, addr64_t to, vm_size_t bytes);
 extern void            mapping_set_mod(ppnum_t pn);
 extern ppnum_t         pmap_find_phys(pmap_t pmap, addr64_t va);
 
 
 extern void            bcopy_phys(addr64_t from, addr64_t to, vm_size_t bytes);
 extern void            mapping_set_mod(ppnum_t pn);
 extern ppnum_t         pmap_find_phys(pmap_t pmap, addr64_t va);
 

+/*
+ * Maximal number of memory devices.
+ */
+#define NB_MAX_MDEVICES (16)

 
 /*
  * cdevsw
 
 /*
  * cdevsw


@@ -135,7 +148,7 @@ static struct cdevsw mdevcdevsw = {
        /* ioctl */     mdevcioctl,
        /* stop */      eno_stop,
        /* reset */     eno_reset,
        /* ioctl */     mdevcioctl,
        /* stop */      eno_stop,
        /* reset */     eno_reset,

-       /* ttys */      0,
+       /* ttys */      NULL,

        /* select */    eno_select,
        /* mmap */      eno_mmap,
        /* strategy */  eno_strat,
        /* select */    eno_select,
        /* mmap */      eno_mmap,
        /* strategy */  eno_strat,


@@ -145,7 +158,7 @@ static struct cdevsw mdevcdevsw = {
 };
 
 struct mdev {
 };
 
 struct mdev {

-       vm_offset_t     mdBase;         /* file size in bytes */
+       uint64_t        mdBase;         /* file size in bytes */

        uint32_t        mdSize;         /* file size in bytes */
        int                     mdFlags;        /* flags */
        int                     mdSecsize;      /* sector size */
        uint32_t        mdSize;         /* file size in bytes */
        int                     mdFlags;        /* flags */
        int                     mdSecsize;      /* sector size */


@@ -153,7 +166,7 @@ struct mdev {
        int                     mdCDev;         /* Character device number */
        void *          mdbdevb;
        void *          mdcdevb;
        int                     mdCDev;         /* Character device number */
        void *          mdbdevb;
        void *          mdcdevb;

-} mdev[16];
+} mdev[NB_MAX_MDEVICES];

 
 /* mdFlags */
 #define mdInited       0x01    /* This device defined */
 
 /* mdFlags */
 #define mdInited       0x01    /* This device defined */


@@ -163,9 +176,11 @@ struct mdev {
 int mdevBMajor = -1;
 int mdevCMajor = -1;
 
 int mdevBMajor = -1;
 int mdevCMajor = -1;
 

-static int mdevioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p, int is_char);
-dev_t mdevadd(int devid, ppnum_t base, unsigned int size, int phys);
-dev_t mdevlookup(int devid);
+static int     mdevioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc *p, int is_char);
+dev_t          mdevadd(int devid, uint64_t base, unsigned int size, int phys);
+dev_t          mdevlookup(int devid);
+void           mdevremoveall(void);
+int            mdevgetrange(int devid, uint64_t *base, uint64_t *size);

 
 static int mdevclose(__unused dev_t dev, __unused int flags, 
                                          __unused int devtype, __unused struct proc *p) {
 
 static int mdevclose(__unused dev_t dev, __unused int flags, 
                                          __unused int devtype, __unused struct proc *p) {


@@ -179,7 +194,7 @@ static      int mdevopen(dev_t dev, int flags, __unused int devtype, __unused struct
 
        devid = minor(dev);                                                                     /* Get minor device number */
 
 
        devid = minor(dev);                                                                     /* Get minor device number */
 

-       if (devid > 16) return (ENXIO);                                         /* Not valid */
+       if (devid >= NB_MAX_MDEVICES) return (ENXIO);                                           /* Not valid */

 
        if ((flags & FWRITE) && (mdev[devid].mdFlags & mdRO)) return (EACCES);  /* Currently mounted RO */
 
 
        if ((flags & FWRITE) && (mdev[devid].mdFlags & mdRO)) return (EACCES);  /* Currently mounted RO */
 


@@ -194,14 +209,14 @@ static int mdevrw(dev_t dev, struct uio *uio, __unused int ioflag) {
 
        devid = minor(dev);                                                                     /* Get minor device number */
 
 
        devid = minor(dev);                                                                     /* Get minor device number */
 

-       if (devid > 16) return (ENXIO);                                         /* Not valid */
+       if (devid >= NB_MAX_MDEVICES) return (ENXIO);                                           /* Not valid */

        if (!(mdev[devid].mdFlags & mdInited))  return (ENXIO); /* Have we actually been defined yet? */
 
        mdata = ((addr64_t)mdev[devid].mdBase << 12) + uio->uio_offset; /* Point to the area in "file" */
        
        saveflag = uio->uio_segflg;                                                     /* Remember what the request is */
 #if LP64_DEBUG
        if (!(mdev[devid].mdFlags & mdInited))  return (ENXIO); /* Have we actually been defined yet? */
 
        mdata = ((addr64_t)mdev[devid].mdBase << 12) + uio->uio_offset; /* Point to the area in "file" */
        
        saveflag = uio->uio_segflg;                                                     /* Remember what the request is */
 #if LP64_DEBUG

-       if (IS_VALID_UIO_SEGFLG(uio->uio_segflg) == 0) {
+       if (UIO_IS_USER_SPACE(uio) == 0 && UIO_IS_SYS_SPACE(uio) == 0) {

          panic("mdevrw - invalid uio_segflg\n"); 
        }
 #endif /* LP64_DEBUG */
          panic("mdevrw - invalid uio_segflg\n"); 
        }
 #endif /* LP64_DEBUG */


@@ -276,9 +291,9 @@ static void mdevstrategy(struct buf *bp) {
                                lop = min((4096 - (vaddr & 4095)), (4096 - (fvaddr & 4095)));   /* Get smallest amount left on sink and source */
                                csize = min(lop, left);                                 /* Don't move more than we need to */
                                
                                lop = min((4096 - (vaddr & 4095)), (4096 - (fvaddr & 4095)));   /* Get smallest amount left on sink and source */
                                csize = min(lop, left);                                 /* Don't move more than we need to */
                                

-                               pp = pmap_find_phys(kernel_pmap, (addr64_t)((unsigned int)vaddr));      /* Get the sink physical address */
+                               pp = pmap_find_phys(kernel_pmap, (addr64_t)((uintptr_t)vaddr)); /* Get the sink physical address */

                                if(!pp) {                                                               /* Not found, what gives? */
                                if(!pp) {                                                               /* Not found, what gives? */

-                                       panic("mdevstrategy: sink address %016llX not mapped\n", (addr64_t)((unsigned int)vaddr));
+                                       panic("mdevstrategy: sink address %016llX not mapped\n", (addr64_t)((uintptr_t)vaddr));

                                }
                                paddr = (addr64_t)(((addr64_t)pp << 12) | (addr64_t)(vaddr & 4095));    /* Get actual address */
                                bcopy_phys(fvaddr, paddr, csize);               /* Copy this on in */
                                }
                                paddr = (addr64_t)(((addr64_t)pp << 12) | (addr64_t)(vaddr & 4095));    /* Get actual address */
                                bcopy_phys(fvaddr, paddr, csize);               /* Copy this on in */


@@ -302,9 +317,9 @@ static void mdevstrategy(struct buf *bp) {
                                lop = min((4096 - (vaddr & 4095)), (4096 - (fvaddr & 4095)));   /* Get smallest amount left on sink and source */
                                csize = min(lop, left);                                 /* Don't move more than we need to */
                                
                                lop = min((4096 - (vaddr & 4095)), (4096 - (fvaddr & 4095)));   /* Get smallest amount left on sink and source */
                                csize = min(lop, left);                                 /* Don't move more than we need to */
                                

-                               pp = pmap_find_phys(kernel_pmap, (addr64_t)((unsigned int)vaddr));      /* Get the source physical address */
+                               pp = pmap_find_phys(kernel_pmap, (addr64_t)((uintptr_t)vaddr)); /* Get the source physical address */

                                if(!pp) {                                                               /* Not found, what gives? */
                                if(!pp) {                                                               /* Not found, what gives? */

-                                       panic("mdevstrategy: source address %016llX not mapped\n", (addr64_t)((unsigned int)vaddr));
+                                       panic("mdevstrategy: source address %016llX not mapped\n", (addr64_t)((uintptr_t)vaddr));

                                }
                                paddr = (addr64_t)(((addr64_t)pp << 12) | (addr64_t)(vaddr & 4095));    /* Get actual address */
                        
                                }
                                paddr = (addr64_t)(((addr64_t)pp << 12) | (addr64_t)(vaddr & 4095));    /* Get actual address */
                        


@@ -339,19 +354,21 @@ static int mdevcioctl(dev_t dev, u_long cmd, caddr_t data, int flag, struct proc
 static int mdevioctl(dev_t dev, u_long cmd, caddr_t data, __unused int flag, 
                                         struct proc *p, int is_char) {
        int error;
 static int mdevioctl(dev_t dev, u_long cmd, caddr_t data, __unused int flag, 
                                         struct proc *p, int is_char) {
        int error;

-       u_long *f;
+       u_int32_t *f;

        u_int64_t *o;
        int devid;
        u_int64_t *o;
        int devid;

+       dk_memdev_info_t * memdev_info;

 
        devid = minor(dev);                                                                     /* Get minor device number */
 
 
        devid = minor(dev);                                                                     /* Get minor device number */
 

-       if (devid > 16) return (ENXIO);                                         /* Not valid */
+       if (devid >= NB_MAX_MDEVICES) return (ENXIO);                                           /* Not valid */

 
        error = proc_suser(p);                  /* Are we superman? */
        if (error) return (error);                                                      /* Nope... */
 
 
        error = proc_suser(p);                  /* Are we superman? */
        if (error) return (error);                                                      /* Nope... */
 

-       f = (u_long*)data;
+       f = (u_int32_t*)data;

        o = (u_int64_t *)data;
        o = (u_int64_t *)data;

+       memdev_info = (dk_memdev_info_t *) data;

 
        switch (cmd) {
 
 
        switch (cmd) {
 


@@ -387,16 +404,26 @@ static int mdevioctl(dev_t dev, u_long cmd, caddr_t data, __unused int flag,
                        *f = 1;
                        break;
                        
                        *f = 1;
                        break;
                        

-               case DKIOCGETBLOCKCOUNT32:
-                       if(!(mdev[devid].mdFlags & mdInited)) return (ENXIO);
-                       *f = ((mdev[devid].mdSize << 12) + mdev[devid].mdSecsize - 1) / mdev[devid].mdSecsize;
-                       break;
-                       

                case DKIOCGETBLOCKCOUNT:
                        if(!(mdev[devid].mdFlags & mdInited)) return (ENXIO);
                        *o = ((mdev[devid].mdSize << 12) + mdev[devid].mdSecsize - 1) / mdev[devid].mdSecsize;
                        break;
                case DKIOCGETBLOCKCOUNT:
                        if(!(mdev[devid].mdFlags & mdInited)) return (ENXIO);
                        *o = ((mdev[devid].mdSize << 12) + mdev[devid].mdSecsize - 1) / mdev[devid].mdSecsize;
                        break;

-                       
+
+               /*
+                * We're interested in the following bits of information:
+                *   Are you a memory-backed device (always yes, in this case)?
+                *   Physical memory (mdPhys)?
+                *   What is your base page?
+                *   What is your size?
+                */
+               case DKIOCGETMEMDEVINFO:
+                       if (!(mdev[devid].mdFlags & mdInited)) return (ENXIO);
+                       memdev_info->mi_mdev = TRUE;
+                       memdev_info->mi_phys = (mdev[devid].mdFlags & mdPhys) ? TRUE : FALSE;
+                       memdev_info->mi_base = mdev[devid].mdBase;
+                       memdev_info->mi_size = mdev[devid].mdSize;
+                       break;
+

                default:
                        error = ENOTTY;
                        break;
                default:
                        error = ENOTTY;
                        break;


@@ -410,7 +437,7 @@ static      int mdevsize(dev_t dev) {
        int devid;
 
        devid = minor(dev);                                                                     /* Get minor device number */
        int devid;
 
        devid = minor(dev);                                                                     /* Get minor device number */

-       if (devid > 16) return (ENXIO);                                         /* Not valid */
+       if (devid >= NB_MAX_MDEVICES) return (ENXIO);                                           /* Not valid */

 
        if ((mdev[devid].mdFlags & mdInited) == 0) return(-1);          /* Not inited yet */
 
 
        if ((mdev[devid].mdFlags & mdInited) == 0) return(-1);          /* Not inited yet */
 


@@ -421,9 +448,11 @@ static     int mdevsize(dev_t dev) {
 
 void mdevinit(__unused int the_cnt) {
 
 
 void mdevinit(__unused int the_cnt) {
 

+#ifdef CONFIG_MEMDEV_INSECURE
+

        int devid, phys;
        int devid, phys;

-       ppnum_t base;
-       unsigned int size;
+       uint64_t base;
+       uint64_t size;

        char *ba, *lp;
        dev_t dev;
        
        char *ba, *lp;
        dev_t dev;
        


@@ -462,13 +491,17 @@ void mdevinit(__unused int the_cnt) {
                        if((ba[0] != ' ') && (ba[0] != 0)) continue;    /* End must be null or space */
                }
                
                        if((ba[0] != ' ') && (ba[0] != 0)) continue;    /* End must be null or space */
                }
                

-               dev = mdevadd(devid, base >> 12, size >> 12, phys);     /* Go add the device */ 
+               dev = mdevadd(devid, base >> 12, (unsigned)size >> 12, phys);   /* Go add the device */ 

        }
 
        }
 

+#endif /* CONFIG_MEMDEV_INSECURE */
+

        return;
 
 }
 
        return;
 
 }
 

+#ifdef CONFIG_MEMDEV_INSECURE
+

 char *nonspace(char *pos, char *end) {                                 /* Find next non-space in string */
 
        if(pos >= end) return end;                                                      /* Don't go past end */
 char *nonspace(char *pos, char *end) {                                 /* Find next non-space in string */
 
        if(pos >= end) return end;                                                      /* Don't go past end */


@@ -491,7 +524,7 @@ char *getspace(char *pos, char *end) {                                      /* Find next non-space in string */
        }
 }
 
        }
 }
 

-char *cvtnum(char *pos, char *end, unsigned int *num) {                /* Convert to a number */
+char *cvtnum(char *pos, char *end, uint64_t *num) {            /* Convert to a number */

 
        int rad, dig;
        
 
        int rad, dig;
        


@@ -523,32 +556,34 @@ char *cvtnum(char *pos, char *end, unsigned int *num) {           /* Convert to a number
        }
 }
 
        }
 }
 

-dev_t mdevadd(int devid, ppnum_t base, unsigned int size, int phys) {
+#endif /* CONFIG_MEMDEV_INSECURE */
+
+dev_t mdevadd(int devid, uint64_t base, unsigned int size, int phys) {

        
        int i;
        
        if(devid < 0) {
 
                devid = -1;
        
        int i;
        
        if(devid < 0) {
 
                devid = -1;

-               for(i = 0; i < 16; i++) {                                               /* Search all known memory devices */
+               for(i = 0; i < NB_MAX_MDEVICES; i++) {                                          /* Search all known memory devices */

                        if(!(mdev[i].mdFlags & mdInited)) {                     /* Is this a free one? */
                                if(devid < 0)devid = i;                                 /* Remember first free one */
                                continue;                                                               /* Skip check */
                        }
                        if(!(((base + size -1 ) < mdev[i].mdBase) || ((mdev[i].mdBase + mdev[i].mdSize - 1) < base))) { /* Is there any overlap? */
                        if(!(mdev[i].mdFlags & mdInited)) {                     /* Is this a free one? */
                                if(devid < 0)devid = i;                                 /* Remember first free one */
                                continue;                                                               /* Skip check */
                        }
                        if(!(((base + size -1 ) < mdev[i].mdBase) || ((mdev[i].mdBase + mdev[i].mdSize - 1) < base))) { /* Is there any overlap? */

-                               panic("mdevadd: attempt to add overlapping memory device at %08X-%08X\n", mdev[i].mdBase, mdev[i].mdBase + mdev[i].mdSize - 1);
+                               panic("mdevadd: attempt to add overlapping memory device at %016llX-%016llX\n", mdev[i].mdBase, mdev[i].mdBase + mdev[i].mdSize - 1);

                        }
                }
                if(devid < 0) {                                                                 /* Do we have free slots? */
                        }
                }
                if(devid < 0) {                                                                 /* Do we have free slots? */

-                       panic("mdevadd: attempt to add more than 16 memory devices\n");
+                       panic("mdevadd: attempt to add more than %d memory devices\n", NB_MAX_MDEVICES);

                }
        }
        else {
                }
        }
        else {

-               if(devid >= 16) {                                                               /* Giving us something bogus? */
-                       panic("mdevadd: attempt to explicitly add a bogus memory device: &08X\n", devid);
+               if(devid >= NB_MAX_MDEVICES) {                                                          /* Giving us something bogus? */
+                       panic("mdevadd: attempt to explicitly add a bogus memory device: %08X\n", devid);

                }
                }

-               if(mdev[devid].mdFlags &mdInited) {                             /* Already there? */
-                       panic("mdevadd: attempt to explicitly add a previously defined memory device: &08X\n", devid);
+               if(mdev[devid].mdFlags & mdInited) {                    /* Already there? */
+                       panic("mdevadd: attempt to explicitly add a previously defined memory device: %08X\n", devid);

                }
        }
        
                }
        }
        


@@ -591,15 +626,62 @@ dev_t mdevadd(int devid, ppnum_t base, unsigned int size, int phys) {
        mdev[devid].mdSecsize = DEV_BSIZE;                                      /* Set starting block size */
        if(phys) mdev[devid].mdFlags |= mdPhys;                         /* Show that we are in physical memory */
        mdev[devid].mdFlags |= mdInited;                                        /* Show we are all set up */
        mdev[devid].mdSecsize = DEV_BSIZE;                                      /* Set starting block size */
        if(phys) mdev[devid].mdFlags |= mdPhys;                         /* Show that we are in physical memory */
        mdev[devid].mdFlags |= mdInited;                                        /* Show we are all set up */

-       printf("Added memory device md%x/rmd%x (%08X/%08X) at %08X for %08X\n", 
-               devid, devid, mdev[devid].mdBDev, mdev[devid].mdCDev, base << 12, size << 12);
+       printf("Added memory device md%x/rmd%x (%08X/%08X) at %016llX for %016llX\n", 
+                  devid, devid, mdev[devid].mdBDev, mdev[devid].mdCDev, base << 12, (uint64_t)size << 12);

        return mdev[devid].mdBDev;
 }
 
 
 dev_t mdevlookup(int devid) {
        
        return mdev[devid].mdBDev;
 }
 
 
 dev_t mdevlookup(int devid) {
        

-       if((devid < 0) || (devid > 15)) return -1;                      /* Filter any bogus requests */
+       if((devid < 0) || (devid >= NB_MAX_MDEVICES)) return -1;                        /* Filter any bogus requests */

        if(!(mdev[devid].mdFlags & mdInited)) return -1;        /* This one hasn't been defined */
        return mdev[devid].mdBDev;                                                      /* Return the device number */
 }
        if(!(mdev[devid].mdFlags & mdInited)) return -1;        /* This one hasn't been defined */
        return mdev[devid].mdBDev;                                                      /* Return the device number */
 }

+
+void mdevremoveall(void) {
+
+       int i;
+
+       for(i = 0; i < NB_MAX_MDEVICES; i++) {
+               if(!(mdev[i].mdFlags & mdInited)) continue;     /* Ignore unused mdevs */
+
+               devfs_remove(mdev[i].mdbdevb);                  /* Remove the block device */
+               devfs_remove(mdev[i].mdcdevb);                  /* Remove the character device */
+
+               mdev[i].mdBase = 0;                             /* Clear the mdev's storage */
+               mdev[i].mdSize = 0;
+               mdev[i].mdSecsize = 0;
+               mdev[i].mdFlags = 0;
+               mdev[i].mdBDev = 0;
+               mdev[i].mdCDev = 0;
+               mdev[i].mdbdevb = 0;
+               mdev[i].mdcdevb = 0;
+       }
+}
+
+int
+mdevgetrange(int devid, uint64_t *base, uint64_t *size)
+{
+       assert(base);
+       assert(size);
+
+       /* filter invalid request */
+       if ((devid < 0) || (devid >= NB_MAX_MDEVICES)) {
+               return -1;
+       }
+
+       /* filter non-initialized memory devices */
+       if ((mdev[devid].mdFlags & mdInited) == 0) {
+               return -1;
+       }
+
+       *base = mdev[devid].mdBase << 12;
+       *size = mdev[devid].mdSize << 12;
+
+       /* make sure (base, size) is a valid range and will not overflow */
+       assert(*size < (UINT64_MAX - *base));
+
+       return 0;
+}
+