source: mainline/kernel/generic/include/cap/cap.h@ c1f68b0

lfn serial ticket/834-toolchain-update topic/msim-upgrade topic/simplify-dev-export
Last change on this file since c1f68b0 was c1f68b0, checked in by Jakub Jermar <jakub@…>, 8 years ago

Use recursive mutex to protect task_t::cap_info

This makes it possible to use the mutex-protected capability APIs even
inside caps_apply_to_kobject_type() callbacks. Now there is no need to
provide eg. cap_unpublish_locked() and cap_free_locked(). Likewise,
ipc_irq_unsubscribe() can be used when the task's cap_info is already
locked by the current thread inside of a callback.

  • Property mode set to 100644
File size: 3.5 KB
RevLine 
[c8cec85]1/*
2 * Copyright (c) 2017 Jakub Jermar
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 *
9 * - Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * - Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 * - The name of the author may not be used to endorse or promote products
15 * derived from this software without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
18 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
19 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
20 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
21 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
22 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
23 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
24 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
25 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
26 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
27 */
28
29/** @addtogroup generic
30 * @{
31 */
32/** @file
33 */
34
[3f74275]35#ifndef KERN_CAP_H_
36#define KERN_CAP_H_
[c8cec85]37
38#include <typedefs.h>
[9e87562]39#include <adt/list.h>
[05913fe7]40#include <adt/hash.h>
41#include <adt/hash_table.h>
42#include <lib/ra.h>
[9e87562]43#include <synch/mutex.h>
[48bcf49]44#include <atomic.h>
[c8cec85]45
[48bcf49]46typedef int cap_handle_t;
47
48typedef enum {
49 CAP_STATE_FREE,
50 CAP_STATE_ALLOCATED,
51 CAP_STATE_PUBLISHED
52} cap_state_t;
53
[c8cec85]54typedef enum {
[48bcf49]55 KOBJECT_TYPE_PHONE,
56 KOBJECT_TYPE_IRQ,
57 KOBJECT_TYPE_MAX
58} kobject_type_t;
59
60struct task;
61struct phone;
62struct irq;
63
64struct kobject;
65typedef struct kobject_ops {
66 bool (*reclaim)(struct kobject *);
67 void (*destroy)(void *);
68} kobject_ops_t;
69
[6636fb19]70/*
71 * Everything in kobject_t except for the atomic reference count is imutable.
72 */
[48bcf49]73typedef struct kobject {
74 kobject_type_t type;
75 atomic_t refcnt;
76
77 kobject_ops_t *ops;
78
79 union {
80 void *raw;
81 struct phone *phone;
82 struct irq *irq;
83 };
84} kobject_t;
[c8cec85]85
[6636fb19]86/*
87 * A cap_t may only be accessed under the protection of the cap_info_t lock.
88 */
[3f74275]89typedef struct cap {
[48bcf49]90 cap_state_t state;
[e68765e]91
[05913fe7]92 struct task *task;
[48bcf49]93 cap_handle_t handle;
[05ffb41]94
[48bcf49]95 /* Link to the task's capabilities of the same kobject type. */
[05913fe7]96 link_t type_link;
97
98 ht_link_t caps_link;
[9e87562]99
[3f74275]100 /* The underlying kernel object. */
[48bcf49]101 kobject_t *kobject;
[3f74275]102} cap_t;
[c8cec85]103
[9e87562]104typedef struct cap_info {
105 mutex_t lock;
106
[48bcf49]107 list_t type_list[KOBJECT_TYPE_MAX];
[9e87562]108
[05913fe7]109 hash_table_t caps;
110 ra_arena_t *handles;
[9e87562]111} cap_info_t;
112
[ce732e74]113extern void caps_init(void);
[c46bfbc]114extern int caps_task_alloc(struct task *);
[9e87562]115extern void caps_task_free(struct task *);
116extern void caps_task_init(struct task *);
[48bcf49]117extern bool caps_apply_to_kobject_type(struct task *, kobject_type_t,
[9e87562]118 bool (*)(cap_t *, void *), void *);
[48bcf49]119
120extern cap_handle_t cap_alloc(struct task *);
121extern void cap_publish(struct task *, cap_handle_t, kobject_t *);
122extern kobject_t *cap_unpublish(struct task *, cap_handle_t, kobject_type_t);
123extern void cap_free(struct task *, cap_handle_t);
124
125extern void kobject_initialize(kobject_t *, kobject_type_t, void *,
126 kobject_ops_t *);
127extern kobject_t *kobject_get(struct task *, cap_handle_t, kobject_type_t);
[6636fb19]128extern void kobject_add_ref(kobject_t *);
[48bcf49]129extern void kobject_put(kobject_t *);
[c8cec85]130
131#endif
132
133/** @}
134 */
Note: See TracBrowser for help on using the repository browser.