Changeset eadaeae8 in mainline for abi/include

Timestamp:

2018-03-21T20:58:49Z (8 years ago)

Author:

Jakub Jermar <jakub@…>

Branches:

lfn, master, serial, ticket/834-toolchain-update, topic/msim-upgrade, topic/simplify-dev-export

Children:

3be9d10

Parents:

874381a

Message:

Make capability handles type-safe

Define distinct pointer types for the handles of the supported
capability types and use them instead of integer handles. This makes it
virtually impossible to pass a non-handle or a handle of different type
instead of the proper handle. Also turn cap_handle_t into an "untyped"
capability handle that can be assigned to and from the "typed" handles.

This commit also fixes a bug in msim-con driver, which wrongly used the
IRQ number instead of the IRQ capability handle to unregister the IRQ.

This commit also fixes the wrong use of the capability handle instead
of error code in libusbhost.

Location:

abi/include/abi

Files:

• cap.h (modified) (1 diff)
• ipc/methods.h (modified) (1 diff)
• mm/as.h (modified) (2 diffs)

abi/include/abi/cap.h

@@ -38 +38 @@
 #define CAP_NIL         0
 
-typedef int cap_handle_t;
+#define CAP_HANDLE_VALID(handle)        ((handle) != CAP_NIL)
+#define CAP_HANDLE_RAW(handle)          ((intptr_t) (handle))
+
+typedef void *cap_handle_t;
+
+typedef struct {} *cap_call_handle_t;
+typedef struct {} *cap_phone_handle_t;
+typedef struct {} *cap_irq_handle_t;
 
 #endif

abi/include/abi/ipc/methods.h

@@ -39 +39 @@
 
 /* Well known phone descriptors */
-#define PHONE_NS  (CAP_NIL + 1)
+#define PHONE_NS  ((cap_phone_handle_t) (CAP_NIL + 1))
 
 /** Kernel IPC interfaces

abi/include/abi/mm/as.h

@@ -36 +36 @@
 #define ABI_AS_H_
 
+#include <abi/cap.h>
+
 /** Address space area flags. */
 #define AS_AREA_READ         0x01
@@ -62 +64 @@
 
 typedef struct {
-        int pager;
+        cap_phone_handle_t pager;
         sysarg_t id1;
         sysarg_t id2;