X-Git-Url: https://git.saurik.com/apple/xnu.git/blobdiff_plain/ff6e181ae92fc6f1e89841290f461d1f2f9badd9..7ddcb079202367355dddccdfa4318e57d50318be:/osfmk/ipc/ipc_mqueue.c diff --git a/osfmk/ipc/ipc_mqueue.c b/osfmk/ipc/ipc_mqueue.c index 2a43e089d..406b5ae93 100644 --- a/osfmk/ipc/ipc_mqueue.c +++ b/osfmk/ipc/ipc_mqueue.c @@ -1,14 +1,19 @@ /* - * Copyright (c) 2000-2004 Apple Computer, Inc. All rights reserved. + * Copyright (c) 2000-2007 Apple Inc. All rights reserved. * - * @APPLE_LICENSE_HEADER_START@ + * @APPLE_OSREFERENCE_LICENSE_HEADER_START@ * * This file contains Original Code and/or Modifications of Original Code * as defined in and that are subject to the Apple Public Source License * Version 2.0 (the 'License'). You may not use this file except in - * compliance with the License. Please obtain a copy of the License at - * http://www.opensource.apple.com/apsl/ and read it before using this - * file. + * compliance with the License. The rights granted to you under the License + * may not be used to create, or enable the creation or redistribution of, + * unlawful or unlicensed copies of an Apple operating system, or to + * circumvent, violate, or enable the circumvention or violation of, any + * terms of an Apple operating system software license agreement. + * + * Please obtain a copy of the License at + * http://www.opensource.apple.com/apsl/ and read it before using this file. * * The Original Code and all software distributed under the License are * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER @@ -18,7 +23,7 @@ * Please see the License for the specific language governing rights and * limitations under the License. * - * @APPLE_LICENSE_HEADER_END@ + * @APPLE_OSREFERENCE_LICENSE_HEADER_END@ */ /* * @OSF_FREE_COPYRIGHT@ @@ -57,6 +62,13 @@ * * Functions to manipulate IPC message queues. */ +/* + * NOTICE: This file was modified by SPARTA, Inc. in 2006 to introduce + * support for mandatory and extensible security protections. This notice + * is included in support of clause 2.2 (b) of the Apple Public License, + * Version 2.0. + */ + #include #include @@ -78,13 +90,17 @@ #include #include -#include +#ifdef __LP64__ +#include +#endif + +#if CONFIG_MACF_MACH +#include +#endif int ipc_mqueue_full; /* address is event for queue space */ int ipc_mqueue_rcv; /* address is event for message arrival */ -#define TR_ENABLE 0 - /* forward declarations */ void ipc_mqueue_receive_results(wait_result_t result); @@ -99,7 +115,7 @@ ipc_mqueue_init( boolean_t is_set) { if (is_set) { - wait_queue_set_init(&mqueue->imq_set_queue, SYNC_POLICY_FIFO); + wait_queue_set_init(&mqueue->imq_set_queue, SYNC_POLICY_FIFO|SYNC_POLICY_PREPOST); } else { wait_queue_init(&mqueue->imq_wait_queue, SYNC_POLICY_FIFO); ipc_kmsg_queue_init(&mqueue->imq_messages); @@ -229,6 +245,7 @@ ipc_mqueue_add( for (;;) { thread_t th; + mach_msg_size_t msize; th = wait_queue_wakeup64_identity_locked( port_waitq, @@ -240,6 +257,17 @@ ipc_mqueue_add( if (th == THREAD_NULL) goto leave; + /* + * If the receiver waited with a facility not directly + * related to Mach messaging, then it isn't prepared to get + * handed the message directly. Just set it running, and + * go look for another thread that can. + */ + if (th->ith_state != MACH_RCV_IN_PROGRESS) { + thread_unlock(th); + continue; + } + /* * Found a receiver. see if they can handle the message * correctly (the message is not too large for them, or @@ -248,15 +276,16 @@ ipc_mqueue_add( * the list and let them go back and figure it out and * just move onto the next. */ + msize = ipc_kmsg_copyout_size(kmsg, th->map); if (th->ith_msize < - kmsg->ikm_header->msgh_size + - REQUESTED_TRAILER_SIZE(th->ith_option)) { + (msize + REQUESTED_TRAILER_SIZE(th->ith_option))) { th->ith_state = MACH_RCV_TOO_LARGE; - th->ith_msize = kmsg->ikm_header->msgh_size; + th->ith_msize = msize; if (th->ith_option & MACH_RCV_LARGE) { /* * let him go without message */ + th->ith_receiver_name = port_mqueue->imq_receiver_name; th->ith_kmsg = IKM_NULL; th->ith_seqno = 0; thread_unlock(th); @@ -328,12 +357,12 @@ ipc_mqueue_changed( mach_msg_return_t ipc_mqueue_send( ipc_mqueue_t mqueue, - ipc_kmsg_t kmsg, + ipc_kmsg_t kmsg, mach_msg_option_t option, - mach_msg_timeout_t send_timeout) + mach_msg_timeout_t send_timeout, + spl_t s) { int wresult; - spl_t s; /* * Don't block if: @@ -341,13 +370,11 @@ ipc_mqueue_send( * 2) Caller used the MACH_SEND_ALWAYS internal option. * 3) Message is sent to a send-once right. */ - s = splsched(); - imq_lock(mqueue); - if (!imq_full(mqueue) || - (option & MACH_SEND_ALWAYS) || - (MACH_MSGH_BITS_REMOTE(kmsg->ikm_header->msgh_bits) == - MACH_MSG_TYPE_PORT_SEND_ONCE)) { + (!imq_full_kernel(mqueue) && + ((option & MACH_SEND_ALWAYS) || + (MACH_MSGH_BITS_REMOTE(kmsg->ikm_header->msgh_bits) == + MACH_MSG_TYPE_PORT_SEND_ONCE)))) { mqueue->imq_msgcount++; assert(mqueue->imq_msgcount > 0); imq_unlock(mqueue); @@ -364,6 +391,11 @@ ipc_mqueue_send( splx(s); return MACH_SEND_TIMED_OUT; } + if (imq_full_kernel(mqueue)) { + imq_unlock(mqueue); + splx(s); + return MACH_SEND_NO_BUFFER; + } mqueue->imq_fullwaiters = TRUE; thread_lock(cur_thread); if (option & MACH_SEND_TIMEOUT) @@ -398,6 +430,8 @@ ipc_mqueue_send( return MACH_SEND_INTERRUPTED; case THREAD_RESTART: + /* mqueue is being destroyed */ + return MACH_SEND_INVALID_DEST; default: panic("ipc_mqueue_send"); } @@ -455,7 +489,6 @@ ipc_mqueue_post( register ipc_mqueue_t mqueue, register ipc_kmsg_t kmsg) { - spl_t s; /* @@ -469,6 +502,7 @@ ipc_mqueue_post( for (;;) { wait_queue_t waitq = &mqueue->imq_wait_queue; thread_t receiver; + mach_msg_size_t msize; receiver = wait_queue_wakeup64_identity_locked( waitq, @@ -485,16 +519,28 @@ ipc_mqueue_post( ipc_kmsg_enqueue_macro(&mqueue->imq_messages, kmsg); break; } - + + /* + * If the receiver waited with a facility not directly + * related to Mach messaging, then it isn't prepared to get + * handed the message directly. Just set it running, and + * go look for another thread that can. + */ + if (receiver->ith_state != MACH_RCV_IN_PROGRESS) { + thread_unlock(receiver); + continue; + } + + /* * We found a waiting thread. * If the message is too large or the scatter list is too small * the thread we wake up will get that as its status. */ + msize = ipc_kmsg_copyout_size(kmsg, receiver->map); if (receiver->ith_msize < - (kmsg->ikm_header->msgh_size) + - REQUESTED_TRAILER_SIZE(receiver->ith_option)) { - receiver->ith_msize = kmsg->ikm_header->msgh_size; + (msize + REQUESTED_TRAILER_SIZE(receiver->ith_option))) { + receiver->ith_msize = msize; receiver->ith_state = MACH_RCV_TOO_LARGE; } else { receiver->ith_state = MACH_MSG_SUCCESS; @@ -540,7 +586,6 @@ ipc_mqueue_receive_results(wait_result_t saved_wait_result) { thread_t self = current_thread(); mach_msg_option_t option = self->ith_option; - kern_return_t mr; /* * why did we wake up? @@ -564,8 +609,6 @@ ipc_mqueue_receive_results(wait_result_t saved_wait_result) * We do not need to go select a message, somebody * handed us one (or a too-large indication). */ - mr = MACH_MSG_SUCCESS; - switch (self->ith_state) { case MACH_RCV_SCATTER_SMALL: case MACH_RCV_TOO_LARGE: @@ -631,76 +674,139 @@ ipc_mqueue_receive_continue( void ipc_mqueue_receive( - ipc_mqueue_t mqueue, - mach_msg_option_t option, - mach_msg_size_t max_size, - mach_msg_timeout_t rcv_timeout, - int interruptible) + ipc_mqueue_t mqueue, + mach_msg_option_t option, + mach_msg_size_t max_size, + mach_msg_timeout_t rcv_timeout, + int interruptible) +{ + wait_result_t wresult; + thread_t self = current_thread(); + + wresult = ipc_mqueue_receive_on_thread(mqueue, option, max_size, + rcv_timeout, interruptible, + self); + if (wresult == THREAD_NOT_WAITING) + return; + + if (wresult == THREAD_WAITING) { + counter((interruptible == THREAD_ABORTSAFE) ? + c_ipc_mqueue_receive_block_user++ : + c_ipc_mqueue_receive_block_kernel++); + + if (self->ith_continuation) + thread_block(ipc_mqueue_receive_continue); + /* NOTREACHED */ + + wresult = thread_block(THREAD_CONTINUE_NULL); + } + ipc_mqueue_receive_results(wresult); +} + +wait_result_t +ipc_mqueue_receive_on_thread( + ipc_mqueue_t mqueue, + mach_msg_option_t option, + mach_msg_size_t max_size, + mach_msg_timeout_t rcv_timeout, + int interruptible, + thread_t thread) { ipc_kmsg_queue_t kmsgs; wait_result_t wresult; - thread_t self; - uint64_t deadline; + uint64_t deadline; spl_t s; +#if CONFIG_MACF_MACH + ipc_labelh_t lh; + task_t task; + int rc; +#endif s = splsched(); imq_lock(mqueue); if (imq_is_set(mqueue)) { - wait_queue_link_t wql; - ipc_mqueue_t port_mq; queue_t q; - q = &mqueue->imq_setlinks; + q = &mqueue->imq_preposts; /* * If we are waiting on a portset mqueue, we need to see if - * any of the member ports have work for us. If so, try to - * deliver one of those messages. By holding the portset's + * any of the member ports have work for us. Ports that + * have (or recently had) messages will be linked in the + * prepost queue for the portset. By holding the portset's * mqueue lock during the search, we tie up any attempts by * mqueue_deliver or portset membership changes that may - * cross our path. But this is a lock order violation, so we - * have to do it "softly." If we don't find a message waiting - * for us, we will assert our intention to wait while still - * holding that lock. When we release the lock, the deliver/ - * change will succeed and find us. + * cross our path. */ search_set: - queue_iterate(q, wql, wait_queue_link_t, wql_setlinks) { + while(!queue_empty(q)) { + wait_queue_link_t wql; + ipc_mqueue_t port_mq; + + queue_remove_first(q, wql, wait_queue_link_t, wql_preposts); + assert(!wql_is_preposted(wql)); + + /* + * This is a lock order violation, so we have to do it + * "softly," putting the link back on the prepost list + * if it fails (at the tail is fine since the order of + * handling messages from different sources in a set is + * not guaranteed and we'd like to skip to the next source + * if one is available). + */ port_mq = (ipc_mqueue_t)wql->wql_queue; - kmsgs = &port_mq->imq_messages; - if (!imq_lock_try(port_mq)) { + queue_enter(q, wql, wait_queue_link_t, wql_preposts); imq_unlock(mqueue); splx(s); - delay(1); + mutex_pause(0); s = splsched(); imq_lock(mqueue); goto search_set; /* start again at beginning - SMP */ } /* - * If there is still a message to be had, we will - * try to select it (may not succeed because of size - * and options). In any case, we deliver those - * results back to the user. - * - * We also move the port's linkage to the tail of the - * list for this set (fairness). Future versions will - * sort by timestamp or priority. + * If there are no messages on this queue, just skip it + * (we already removed the link from the set's prepost queue). */ + kmsgs = &port_mq->imq_messages; if (ipc_kmsg_queue_first(kmsgs) == IKM_NULL) { imq_unlock(port_mq); continue; } - queue_remove(q, wql, wait_queue_link_t, wql_setlinks); - queue_enter(q, wql, wait_queue_link_t, wql_setlinks); + + /* + * There are messages, so reinsert the link back + * at the tail of the preposted queue (for fairness) + * while we still have the portset mqueue locked. + */ + queue_enter(q, wql, wait_queue_link_t, wql_preposts); imq_unlock(mqueue); - ipc_mqueue_select(port_mq, option, max_size); + /* + * Continue on to handling the message with just + * the port mqueue locked. + */ + ipc_mqueue_select_on_thread(port_mq, option, max_size, thread); imq_unlock(port_mq); +#if CONFIG_MACF_MACH + if (thread->task != TASK_NULL && + thread->ith_kmsg != NULL && + thread->ith_kmsg->ikm_sender != NULL) { + lh = thread->ith_kmsg->ikm_sender->label; + tasklabel_lock(thread->task); + ip_lock(lh->lh_port); + rc = mac_port_check_receive(&thread->task->maclabel, + &lh->lh_label); + ip_unlock(lh->lh_port); + tasklabel_unlock(thread->task); + if (rc) + thread->ith_state = MACH_RCV_INVALID_DATA; + } +#endif splx(s); - return; + return THREAD_NOT_WAITING; } @@ -711,32 +817,46 @@ ipc_mqueue_receive( */ kmsgs = &mqueue->imq_messages; if (ipc_kmsg_queue_first(kmsgs) != IKM_NULL) { - ipc_mqueue_select(mqueue, option, max_size); + ipc_mqueue_select_on_thread(mqueue, option, max_size, thread); imq_unlock(mqueue); +#if CONFIG_MACF_MACH + if (thread->task != TASK_NULL && + thread->ith_kmsg != NULL && + thread->ith_kmsg->ikm_sender != NULL) { + lh = thread->ith_kmsg->ikm_sender->label; + tasklabel_lock(thread->task); + ip_lock(lh->lh_port); + rc = mac_port_check_receive(&thread->task->maclabel, + &lh->lh_label); + ip_unlock(lh->lh_port); + tasklabel_unlock(thread->task); + if (rc) + thread->ith_state = MACH_RCV_INVALID_DATA; + } +#endif splx(s); - return; + return THREAD_NOT_WAITING; } } - + /* * Looks like we'll have to block. The mqueue we will * block on (whether the set's or the local port's) is * still locked. */ - self = current_thread(); if (option & MACH_RCV_TIMEOUT) { if (rcv_timeout == 0) { imq_unlock(mqueue); splx(s); - self->ith_state = MACH_RCV_TIMED_OUT; - return; + thread->ith_state = MACH_RCV_TIMED_OUT; + return THREAD_NOT_WAITING; } } - thread_lock(self); - self->ith_state = MACH_RCV_IN_PROGRESS; - self->ith_option = option; - self->ith_msize = max_size; + thread_lock(thread); + thread->ith_state = MACH_RCV_IN_PROGRESS; + thread->ith_option = option; + thread->ith_msize = max_size; if (option & MACH_RCV_TIMEOUT) clock_interval_to_deadline(rcv_timeout, 1000*NSEC_PER_USEC, &deadline); @@ -744,55 +864,45 @@ ipc_mqueue_receive( deadline = 0; wresult = wait_queue_assert_wait64_locked(&mqueue->imq_wait_queue, - IPC_MQUEUE_RECEIVE, - interruptible, deadline, - self); - thread_unlock(self); + IPC_MQUEUE_RECEIVE, + interruptible, deadline, + thread); + /* preposts should be detected above, not here */ + if (wresult == THREAD_AWAKENED) + panic("ipc_mqueue_receive_on_thread: sleep walking"); + + thread_unlock(thread); imq_unlock(mqueue); splx(s); - - if (wresult == THREAD_WAITING) { - counter((interruptible == THREAD_ABORTSAFE) ? - c_ipc_mqueue_receive_block_user++ : - c_ipc_mqueue_receive_block_kernel++); - - if (self->ith_continuation) - thread_block(ipc_mqueue_receive_continue); - /* NOTREACHED */ - - wresult = thread_block(THREAD_CONTINUE_NULL); - } - ipc_mqueue_receive_results(wresult); + return wresult; } /* - * Routine: ipc_mqueue_select + * Routine: ipc_mqueue_select_on_thread * Purpose: * A receiver discovered that there was a message on the queue * before he had to block. Pick the message off the queue and - * "post" it to himself. + * "post" it to thread. * Conditions: * mqueue locked. + * thread not locked. * There is a message. * Returns: * MACH_MSG_SUCCESS Actually selected a message for ourselves. * MACH_RCV_TOO_LARGE May or may not have pull it, but it is large */ void -ipc_mqueue_select( +ipc_mqueue_select_on_thread( ipc_mqueue_t mqueue, mach_msg_option_t option, - mach_msg_size_t max_size) + mach_msg_size_t max_size, + thread_t thread) { - thread_t self = current_thread(); ipc_kmsg_t kmsg; - mach_msg_return_t mr; + mach_msg_return_t mr = MACH_MSG_SUCCESS; mach_msg_size_t rcv_size; - mr = MACH_MSG_SUCCESS; - - /* * Do some sanity checking of our ability to receive * before pulling the message off the queue. @@ -806,32 +916,81 @@ ipc_mqueue_select( * the queue, instead return the appropriate error * (and size needed). */ - rcv_size = ipc_kmsg_copyout_size(kmsg, self->map); + rcv_size = ipc_kmsg_copyout_size(kmsg, thread->map); if (rcv_size + REQUESTED_TRAILER_SIZE(option) > max_size) { mr = MACH_RCV_TOO_LARGE; if (option & MACH_RCV_LARGE) { - self->ith_kmsg = IKM_NULL; - self->ith_msize = rcv_size; - self->ith_seqno = 0; - self->ith_state = mr; + thread->ith_receiver_name = mqueue->imq_receiver_name; + thread->ith_kmsg = IKM_NULL; + thread->ith_msize = rcv_size; + thread->ith_seqno = 0; + thread->ith_state = mr; return; } } ipc_kmsg_rmqueue_first_macro(&mqueue->imq_messages, kmsg); ipc_mqueue_release_msgcount(mqueue); - self->ith_seqno = mqueue->imq_seqno++; - self->ith_kmsg = kmsg; - self->ith_state = mr; + thread->ith_seqno = mqueue->imq_seqno++; + thread->ith_kmsg = kmsg; + thread->ith_state = mr; current_task()->messages_received++; return; } +/* + * Routine: ipc_mqueue_peek + * Purpose: + * Peek at a message queue to see if it has any messages + * (in it or contained message queues for a set). + * + * Conditions: + * Locks may be held by callers, so this routine cannot block. + * Caller holds reference on the message queue. + */ +unsigned +ipc_mqueue_peek(ipc_mqueue_t mq) +{ + wait_queue_link_t wql; + queue_t q; + spl_t s; + + if (!imq_is_set(mq)) + return (ipc_kmsg_queue_first(&mq->imq_messages) != IKM_NULL); + + /* + * Don't block trying to get the lock. + */ + s = splsched(); + imq_lock(mq); + + /* + * peek at the contained port message queues, return as soon as + * we spot a message on one of the message queues linked on the + * prepost list. + */ + q = &mq->imq_preposts; + queue_iterate(q, wql, wait_queue_link_t, wql_preposts) { + ipc_mqueue_t port_mq = (ipc_mqueue_t)wql->wql_queue; + ipc_kmsg_queue_t kmsgs = &port_mq->imq_messages; + + if (ipc_kmsg_queue_first(kmsgs) != IKM_NULL) { + imq_unlock(mq); + splx(s); + return 1; + } + } + imq_unlock(mq); + splx(s); + return 0; +} + /* * Routine: ipc_mqueue_destroy * Purpose: - * Destroy a message queue. Set any blocked senders running. + * Destroy a (non-set) message queue. + * Set any blocked senders running. * Destroy the kmsgs in the queue. * Conditions: * Nothing locked. @@ -839,10 +998,11 @@ ipc_mqueue_select( */ void ipc_mqueue_destroy( - ipc_mqueue_t mqueue) + ipc_mqueue_t mqueue) { ipc_kmsg_queue_t kmqueue; ipc_kmsg_t kmsg; + boolean_t reap = FALSE; spl_t s; @@ -855,22 +1015,30 @@ ipc_mqueue_destroy( wait_queue_wakeup64_all_locked( &mqueue->imq_wait_queue, IPC_MQUEUE_FULL, - THREAD_AWAKENED, + THREAD_RESTART, FALSE); + /* + * Move messages from the specified queue to the per-thread + * clean/drain queue while we have the mqueue lock. + */ kmqueue = &mqueue->imq_messages; - while ((kmsg = ipc_kmsg_dequeue(kmqueue)) != IKM_NULL) { - imq_unlock(mqueue); - splx(s); - - ipc_kmsg_destroy_dest(kmsg); - - s = splsched(); - imq_lock(mqueue); + boolean_t first; + first = ipc_kmsg_delayed_destroy(kmsg); + if (first) + reap = first; } + imq_unlock(mqueue); splx(s); + + /* + * Destroy the messages we enqueued if we aren't nested + * inside some other attempt to drain the same queue. + */ + if (reap) + ipc_kmsg_reap_delayed(); } /*