2015-01-02 20:16:49 +01:00
|
|
|
/*
|
|
|
|
|
* \brief Some platform tests for the base-nova
|
|
|
|
|
* \author Alexander Boettcher
|
|
|
|
|
* \date 2015-01-02
|
|
|
|
|
*
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
/*
|
2017-02-20 13:23:52 +01:00
|
|
|
* Copyright (C) 2015-2017 Genode Labs GmbH
|
2015-01-02 20:16:49 +01:00
|
|
|
*
|
|
|
|
|
* This file is part of the Genode OS framework, which is distributed
|
2017-02-20 13:23:52 +01:00
|
|
|
* under the terms of the GNU Affero General Public License version 3.
|
2015-01-02 20:16:49 +01:00
|
|
|
*/
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
#include <base/heap.h>
|
2015-01-02 20:16:49 +01:00
|
|
|
#include <base/thread.h>
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
#include <base/log.h>
|
2015-01-02 20:16:49 +01:00
|
|
|
#include <base/snprintf.h>
|
2016-11-28 15:13:14 +01:00
|
|
|
#include <base/component.h>
|
2015-01-02 20:16:49 +01:00
|
|
|
|
2015-06-05 21:55:18 +02:00
|
|
|
#include <util/touch.h>
|
2016-11-10 11:46:30 +01:00
|
|
|
#include <util/retry.h>
|
2015-06-05 21:55:18 +02:00
|
|
|
#include <rm_session/connection.h>
|
2016-04-15 15:19:22 +02:00
|
|
|
#include <region_map/client.h>
|
2015-06-05 21:55:18 +02:00
|
|
|
|
2017-01-30 11:35:12 +01:00
|
|
|
#include <base/attached_rom_dataspace.h>
|
2015-08-25 15:20:54 +02:00
|
|
|
|
|
|
|
|
#include <trace/timestamp.h>
|
2016-09-02 10:40:08 +02:00
|
|
|
|
2016-03-11 17:32:43 +01:00
|
|
|
#include <nova/native_thread.h>
|
2016-09-02 10:40:08 +02:00
|
|
|
#include <nova_native_pd/client.h>
|
2015-08-25 15:20:54 +02:00
|
|
|
|
2015-06-05 21:55:18 +02:00
|
|
|
#include "server.h"
|
2015-01-02 20:16:49 +01:00
|
|
|
|
|
|
|
|
static unsigned failed = 0;
|
|
|
|
|
|
2015-08-25 15:20:54 +02:00
|
|
|
static unsigned check_pat = 1;
|
|
|
|
|
|
2015-06-05 21:55:18 +02:00
|
|
|
using namespace Genode;
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
void test_translate(Genode::Env &env)
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
enum { STACK_SIZE = 4096 };
|
2016-09-01 08:39:56 +02:00
|
|
|
static Rpc_entrypoint ep(&env.pd(), STACK_SIZE, "rpc_ep_translate");
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
Test::Component component;
|
|
|
|
|
Test::Capability session_cap = ep.manage(&component);
|
|
|
|
|
Test::Client client(session_cap);
|
|
|
|
|
|
|
|
|
|
Genode::addr_t local_name = Native_thread::INVALID_INDEX;
|
|
|
|
|
|
|
|
|
|
long rpc = Test::cap_void_manual(session_cap, session_cap, local_name);
|
|
|
|
|
if (rpc != Genode::Rpc_exception_code::SUCCESS ||
|
2016-06-15 15:04:54 +02:00
|
|
|
local_name == (addr_t)session_cap.local_name() ||
|
|
|
|
|
local_name == (addr_t)Native_thread::INVALID_INDEX)
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__func__, ": ipc call failed ", Hex(rpc));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
2016-06-15 15:04:54 +02:00
|
|
|
Genode::Native_capability copy1 = Capability_space::import(local_name);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
rpc = Test::cap_void_manual(session_cap, copy1, local_name);
|
|
|
|
|
if (rpc != Genode::Rpc_exception_code::SUCCESS ||
|
2016-06-15 15:04:54 +02:00
|
|
|
local_name == (addr_t)copy1.local_name() ||
|
|
|
|
|
local_name == (addr_t)Native_thread::INVALID_INDEX)
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__func__, ": ipc call failed ", Hex(rpc));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
2016-06-15 15:04:54 +02:00
|
|
|
Genode::Native_capability copy2 = Capability_space::import(local_name);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("delegation session_cap->copy1->copy2 ",
|
|
|
|
|
session_cap, "->", copy1, "->", copy2);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
/* sanity checks translate which must work */
|
|
|
|
|
Genode::Native_capability got_cap = client.cap_cap(copy2.local_name());
|
|
|
|
|
if (got_cap.local_name() != copy1.local_name()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, ":", __func__, " translate failed");
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
got_cap = client.cap_cap(copy1.local_name());
|
|
|
|
|
if (got_cap.local_name() != session_cap.local_name()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, ":", __func__, " translate failed");
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
got_cap = client.cap_cap(session_cap.local_name());
|
|
|
|
|
if (got_cap.local_name() != session_cap.local_name()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, ":", __func__, " translate failed");
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/**
|
|
|
|
|
* Test special revoke by make the intermediate cap (copy1) inaccessible
|
|
|
|
|
* and check that translate of copy2 get the right results.
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
Nova::Obj_crd crd_ses(copy1.local_name(), 0);
|
|
|
|
|
enum { SELF = true, LOCAL_REVOKE = false, LOCAL_PD = 0, NO_BLOCKING = 0, KEEP_IN_MDB = true };
|
|
|
|
|
Nova::revoke(crd_ses, SELF, LOCAL_REVOKE, LOCAL_PD, NO_BLOCKING, KEEP_IN_MDB);
|
|
|
|
|
|
|
|
|
|
crd_ses = Nova::Obj_crd(copy1.local_name(), 0);
|
|
|
|
|
Genode::uint8_t res = Nova::lookup(crd_ses);
|
|
|
|
|
if (res != Nova::NOVA_OK || !crd_ses.is_null()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* copy1 should be skipped and session_cap is the valid response */
|
|
|
|
|
got_cap = client.cap_cap(copy2.local_name());
|
|
|
|
|
if (got_cap.local_name() != session_cap.local_name()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, ":", __func__, " translate failed");
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
ep.dissolve(&component);
|
|
|
|
|
}
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
void test_revoke(Genode::Env &env)
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
enum { STACK_SIZE = 4096 };
|
2016-09-01 08:39:56 +02:00
|
|
|
static Rpc_entrypoint ep(&env.pd(), STACK_SIZE, "rpc_ep_revoke");
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
Test::Component component;
|
|
|
|
|
Test::Capability session_cap = ep.manage(&component);
|
|
|
|
|
Test::Client client(session_cap);
|
|
|
|
|
|
|
|
|
|
Genode::addr_t local_name = Native_thread::INVALID_INDEX;
|
|
|
|
|
|
|
|
|
|
long rpc = Test::cap_void_manual(session_cap, session_cap, local_name);
|
|
|
|
|
if (rpc != Genode::Rpc_exception_code::SUCCESS ||
|
2016-06-15 15:04:54 +02:00
|
|
|
local_name == (addr_t)session_cap.local_name() ||
|
|
|
|
|
local_name == (addr_t)Native_thread::INVALID_INDEX)
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error("test_revoke ipc call failed ", Hex(rpc));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
2016-06-15 15:04:54 +02:00
|
|
|
Genode::Native_capability copy_session_cap = Capability_space::import(local_name);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
2016-10-08 04:37:32 +02:00
|
|
|
local_name = Native_thread::INVALID_INDEX;
|
2016-04-19 17:48:04 +02:00
|
|
|
rpc = Test::cap_void_manual(copy_session_cap, copy_session_cap, local_name);
|
|
|
|
|
if (rpc != Genode::Rpc_exception_code::SUCCESS ||
|
2016-06-15 15:04:54 +02:00
|
|
|
local_name == (addr_t)copy_session_cap.local_name() ||
|
2016-10-08 04:37:32 +02:00
|
|
|
local_name == (addr_t)Native_thread::INVALID_INDEX ||
|
|
|
|
|
local_name == (addr_t)session_cap.local_name())
|
2016-04-19 17:48:04 +02:00
|
|
|
{
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error("test_revoke ipc call failed ", Hex(rpc));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
Nova::Obj_crd crd_dst(local_name, 0);
|
|
|
|
|
Genode::uint8_t res = Nova::lookup(crd_dst);
|
|
|
|
|
if (res != Nova::NOVA_OK || crd_dst.base() != local_name || crd_dst.type() != 3 ||
|
|
|
|
|
crd_dst.order() != 0) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed ", Hex(res));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
Nova::Obj_crd crd_ses(copy_session_cap.local_name(), 0);
|
|
|
|
|
res = Nova::lookup(crd_ses);
|
2016-06-15 15:04:54 +02:00
|
|
|
if (res != Nova::NOVA_OK || crd_ses.base() != (addr_t)copy_session_cap.local_name()
|
|
|
|
|
|| crd_ses.type() != 3 || crd_ses.order() != 0) {
|
2016-04-19 17:48:04 +02:00
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_ses.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
res = Nova::lookup(crd_dst);
|
|
|
|
|
if (res != Nova::NOVA_OK || crd_dst.base() != local_name || crd_dst.type() != 3 ||
|
|
|
|
|
crd_dst.order() != 0) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_dst.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
crd_ses = Nova::Obj_crd(copy_session_cap.local_name(), 0);
|
|
|
|
|
enum { SELF = true, LOCAL_REVOKE = false, LOCAL_PD = 0, NO_BLOCKING = 0, KEEP_IN_MDB = true };
|
|
|
|
|
Nova::revoke(crd_ses, SELF, LOCAL_REVOKE, LOCAL_PD, NO_BLOCKING, KEEP_IN_MDB);
|
|
|
|
|
|
|
|
|
|
crd_ses = Nova::Obj_crd(copy_session_cap.local_name(), 0);
|
|
|
|
|
res = Nova::lookup(crd_ses);
|
|
|
|
|
if (res != Nova::NOVA_OK || !crd_ses.is_null()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res));
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
res = Nova::lookup(crd_dst);
|
|
|
|
|
if (res != Nova::NOVA_OK || crd_dst.base() != local_name || crd_dst.type() != 3 ||
|
|
|
|
|
crd_dst.order() != 0) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_dst.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Request some other capability and place it on very same selector
|
|
|
|
|
* as used before by copy_session_cap
|
|
|
|
|
*/
|
|
|
|
|
Genode::Thread * myself = Genode::Thread::myself();
|
2016-11-30 19:36:32 +01:00
|
|
|
request_native_ec_cap(myself->native_thread().exc_pt_sel + Nova::PT_SEL_PAGE_FAULT,
|
|
|
|
|
copy_session_cap.local_name());
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
/* check whether the requested cap before is valid and placed well */
|
|
|
|
|
crd_ses = Nova::Obj_crd(copy_session_cap.local_name(), 0);
|
|
|
|
|
res = Nova::lookup(crd_ses);
|
2016-06-15 15:04:54 +02:00
|
|
|
if (res != Nova::NOVA_OK || crd_ses.base() != (addr_t)copy_session_cap.local_name() ||
|
2016-04-19 17:48:04 +02:00
|
|
|
crd_ses.type() != 3 || crd_ses.order() != 0) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_ses.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* revoke it */
|
|
|
|
|
Nova::revoke(crd_ses, SELF, LOCAL_REVOKE, LOCAL_PD, NO_BLOCKING);
|
|
|
|
|
|
|
|
|
|
/* the delegated cap to the client should still be there */
|
|
|
|
|
res = Nova::lookup(crd_dst);
|
|
|
|
|
if (res != Nova::NOVA_OK || crd_dst.base() != local_name || crd_dst.type() != 3 ||
|
|
|
|
|
crd_dst.order() != 0) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_dst.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
ep.dissolve(&component);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* kill the original session capability */
|
|
|
|
|
ep.dissolve(&component);
|
|
|
|
|
/* manually: cap.free_rpc_cap(session_cap); */
|
|
|
|
|
|
|
|
|
|
/* the delegated cap to the client should be now invalid */
|
|
|
|
|
res = Nova::lookup(crd_dst);
|
|
|
|
|
if (res != Nova::NOVA_OK || !crd_dst.is_null()) {
|
|
|
|
|
failed ++;
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(__LINE__, " - lookup call failed err=", Hex(res), " is_null=", crd_dst.is_null());
|
2016-04-19 17:48:04 +02:00
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
void test_pat(Genode::Env &env)
|
2015-08-25 15:20:54 +02:00
|
|
|
{
|
|
|
|
|
/* read out the tsc frequenzy once */
|
2018-03-08 11:34:59 +01:00
|
|
|
Attached_rom_dataspace const platform_info (env, "platform_info");
|
|
|
|
|
Xml_node const hardware = platform_info.xml().sub_node("hardware");
|
|
|
|
|
uint64_t const tsc_freq = hardware.sub_node("tsc").attribute_value("freq_khz", 1ULL);
|
2015-08-25 15:20:54 +02:00
|
|
|
|
|
|
|
|
enum { DS_ORDER = 12, PAGE_4K = 12 };
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
Ram_dataspace_capability ds = env.ram().alloc (1 << (DS_ORDER + PAGE_4K),
|
|
|
|
|
WRITE_COMBINED);
|
|
|
|
|
addr_t map_addr = env.rm().attach(ds);
|
2015-08-25 15:20:54 +02:00
|
|
|
|
|
|
|
|
enum { STACK_SIZE = 4096 };
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
static Rpc_entrypoint ep(&env.pd(), STACK_SIZE, "rpc_ep_pat");
|
2015-08-25 15:20:54 +02:00
|
|
|
|
|
|
|
|
Test::Component component;
|
|
|
|
|
Test::Capability session_cap = ep.manage(&component);
|
|
|
|
|
Test::Client client(session_cap);
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
Genode::Rm_connection rm(env);
|
2016-04-15 15:19:22 +02:00
|
|
|
Genode::Region_map_client rm_free_area(rm.create(1 << (DS_ORDER + PAGE_4K)));
|
2016-09-01 08:39:56 +02:00
|
|
|
addr_t remap_addr = env.rm().attach(rm_free_area.dataspace());
|
2015-08-25 15:20:54 +02:00
|
|
|
|
|
|
|
|
/* trigger mapping of whole area */
|
|
|
|
|
for (addr_t i = map_addr; i < map_addr + (1 << (DS_ORDER + PAGE_4K)); i += (1 << PAGE_4K))
|
|
|
|
|
touch_read(reinterpret_cast<unsigned char *>(map_addr));
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Manipulate entrypoint
|
|
|
|
|
*/
|
|
|
|
|
Nova::Rights all(true, true, true);
|
|
|
|
|
Genode::addr_t utcb_ep_addr_t = client.leak_utcb_address();
|
|
|
|
|
Nova::Utcb *utcb_ep = reinterpret_cast<Nova::Utcb *>(utcb_ep_addr_t);
|
|
|
|
|
/* overwrite receive window of entrypoint */
|
|
|
|
|
utcb_ep->crd_rcv = Nova::Mem_crd(remap_addr >> PAGE_4K, DS_ORDER, all);
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Set-up current (client) thread to delegate write-combined memory
|
|
|
|
|
*/
|
|
|
|
|
Nova::Mem_crd snd_crd(map_addr >> PAGE_4K, DS_ORDER, all);
|
|
|
|
|
|
2016-05-04 12:27:17 +02:00
|
|
|
Nova::Utcb *utcb = reinterpret_cast<Nova::Utcb *>(Thread::myself()->utcb());
|
2015-08-25 15:20:54 +02:00
|
|
|
enum {
|
|
|
|
|
HOTSPOT = 0, USER_PD = false, HOST_PGT = false, SOLELY_MAP = false,
|
|
|
|
|
NO_DMA = false, EVILLY_DONT_WRITE_COMBINE = false
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
Nova::Crd old = utcb->crd_rcv;
|
|
|
|
|
|
|
|
|
|
utcb->set_msg_word(0);
|
|
|
|
|
bool ok = utcb->append_item(snd_crd, HOTSPOT, USER_PD, HOST_PGT,
|
|
|
|
|
SOLELY_MAP, NO_DMA, EVILLY_DONT_WRITE_COMBINE);
|
|
|
|
|
(void)ok;
|
|
|
|
|
|
|
|
|
|
uint8_t res = Nova::call(session_cap.local_name());
|
|
|
|
|
(void)res;
|
|
|
|
|
|
|
|
|
|
utcb->crd_rcv = old;
|
|
|
|
|
|
|
|
|
|
/* sanity check - touch re-mapped area */
|
|
|
|
|
for (addr_t i = remap_addr; i < remap_addr + (1 << (DS_ORDER + PAGE_4K)); i += (1 << PAGE_4K))
|
|
|
|
|
touch_read(reinterpret_cast<unsigned char *>(remap_addr));
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* measure time to write to the memory
|
|
|
|
|
*/
|
|
|
|
|
memset(reinterpret_cast<void *>(map_addr), 0, 1 << (DS_ORDER + PAGE_4K));
|
|
|
|
|
Trace::Timestamp map_start = Trace::timestamp();
|
|
|
|
|
memset(reinterpret_cast<void *>(map_addr), 0, 1 << (DS_ORDER + PAGE_4K));
|
|
|
|
|
Trace::Timestamp map_end = Trace::timestamp();
|
|
|
|
|
|
|
|
|
|
memset(reinterpret_cast<void *>(remap_addr), 0, 1 << (DS_ORDER + PAGE_4K));
|
|
|
|
|
Trace::Timestamp remap_start = Trace::timestamp();
|
|
|
|
|
memset(reinterpret_cast<void *>(remap_addr), 0, 1 << (DS_ORDER + PAGE_4K));
|
|
|
|
|
Trace::Timestamp remap_end = Trace::timestamp();
|
|
|
|
|
|
|
|
|
|
Trace::Timestamp map_run = map_end - map_start;
|
|
|
|
|
Trace::Timestamp remap_run = remap_end - remap_start;
|
|
|
|
|
|
|
|
|
|
Trace::Timestamp diff_run = map_run > remap_run ? map_run - remap_run : remap_run - map_run;
|
|
|
|
|
|
2018-03-08 11:34:59 +01:00
|
|
|
if (check_pat && diff_run * 100 / tsc_freq) {
|
2015-08-25 15:20:54 +02:00
|
|
|
failed ++;
|
|
|
|
|
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error("map=", Hex(map_run), " remap=", Hex(remap_run), " --> "
|
2018-03-08 11:34:59 +01:00
|
|
|
"diff=", Hex(diff_run), " freq_tsc=", tsc_freq, " ",
|
|
|
|
|
diff_run * 1000 / tsc_freq, " us");
|
2015-08-25 15:20:54 +02:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
Nova::revoke(Nova::Mem_crd(remap_addr >> PAGE_4K, DS_ORDER, all));
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* note: server entrypoint died because of unexpected receive window
|
|
|
|
|
* state - that is expected
|
|
|
|
|
*/
|
|
|
|
|
}
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
void test_server_oom(Genode::Env &env)
|
2015-06-05 21:55:18 +02:00
|
|
|
{
|
|
|
|
|
using namespace Genode;
|
|
|
|
|
|
|
|
|
|
enum { STACK_SIZE = 4096 };
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
static Rpc_entrypoint ep(&env.pd(), STACK_SIZE, "rpc_ep_oom");
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
Test::Component component;
|
|
|
|
|
Test::Capability session_cap = ep.manage(&component);
|
|
|
|
|
Test::Client client(session_cap);
|
|
|
|
|
|
|
|
|
|
/* case that during reply we get oom */
|
|
|
|
|
for (unsigned i = 0; i < 20000; i++) {
|
|
|
|
|
Genode::Native_capability got_cap = client.void_cap();
|
|
|
|
|
|
|
|
|
|
if (!got_cap.valid()) {
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error(i, " cap id ", Hex(got_cap.local_name()), " invalid");
|
2015-06-05 21:55:18 +02:00
|
|
|
failed ++;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* be evil and keep this cap by manually incrementing the ref count */
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
Cap_index idx(cap_map().find(got_cap.local_name()));
|
2015-06-05 21:55:18 +02:00
|
|
|
idx.inc();
|
|
|
|
|
|
|
|
|
|
if (i % 5000 == 4999)
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("received ", i, ". cap");
|
2015-06-05 21:55:18 +02:00
|
|
|
}
|
|
|
|
|
|
2016-03-18 22:53:25 +01:00
|
|
|
/* XXX this code does does no longer work since the removal of 'solely_map' */
|
|
|
|
|
#if 0
|
|
|
|
|
|
2015-06-05 21:55:18 +02:00
|
|
|
/* case that during send we get oom */
|
|
|
|
|
for (unsigned i = 0; i < 20000; i++) {
|
|
|
|
|
/* be evil and switch translation off - server ever uses a new selector */
|
|
|
|
|
Genode::Native_capability send_cap = session_cap;
|
|
|
|
|
send_cap.solely_map();
|
|
|
|
|
|
|
|
|
|
if (!client.cap_void(send_cap)) {
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error("sending ", i, ". cap failed");
|
2015-06-05 21:55:18 +02:00
|
|
|
failed ++;
|
|
|
|
|
break;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
if (i % 5000 == 4999)
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("sent ", i, ". cap");
|
2015-06-05 21:55:18 +02:00
|
|
|
}
|
2016-03-18 22:53:25 +01:00
|
|
|
#endif
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
ep.dissolve(&component);
|
|
|
|
|
}
|
|
|
|
|
|
2016-09-02 10:40:08 +02:00
|
|
|
class Pager : private Genode::Thread {
|
|
|
|
|
|
|
|
|
|
private:
|
|
|
|
|
|
Follow practices suggested by "Effective C++"
The patch adjust the code of the base, base-<kernel>, and os repository.
To adapt existing components to fix violations of the best practices
suggested by "Effective C++" as reported by the -Weffc++ compiler
argument. The changes follow the patterns outlined below:
* A class with virtual functions can no longer publicly inherit base
classed without a vtable. The inherited object may either be moved
to a member variable, or inherited privately. The latter would be
used for classes that inherit 'List::Element' or 'Avl_node'. In order
to enable the 'List' and 'Avl_tree' to access the meta data, the
'List' must become a friend.
* Instead of adding a virtual destructor to abstract base classes,
we inherit the new 'Interface' class, which contains a virtual
destructor. This way, single-line abstract base classes can stay
as compact as they are now. The 'Interface' utility resides in
base/include/util/interface.h.
* With the new warnings enabled, all member variables must be explicitly
initialized. Basic types may be initialized with '='. All other types
are initialized with braces '{ ... }' or as class initializers. If
basic types and non-basic types appear in a row, it is nice to only
use the brace syntax (also for basic types) and align the braces.
* If a class contains pointers as members, it must now also provide a
copy constructor and assignment operator. In the most cases, one
would make them private, effectively disallowing the objects to be
copied. Unfortunately, this warning cannot be fixed be inheriting
our existing 'Noncopyable' class (the compiler fails to detect that
the inheriting class cannot be copied and still gives the error).
For now, we have to manually add declarations for both the copy
constructor and assignment operator as private class members. Those
declarations should be prepended with a comment like this:
/*
* Noncopyable
*/
Thread(Thread const &);
Thread &operator = (Thread const &);
In the future, we should revisit these places and try to replace
the pointers with references. In the presence of at least one
reference member, the compiler would no longer implicitly generate
a copy constructor. So we could remove the manual declaration.
Issue #465
2017-12-21 15:42:15 +01:00
|
|
|
Native_capability _call_to_map { };
|
2016-09-02 10:40:08 +02:00
|
|
|
Ram_dataspace_capability _ds;
|
|
|
|
|
static addr_t _ds_mem;
|
|
|
|
|
|
|
|
|
|
void entry() { }
|
|
|
|
|
|
|
|
|
|
static void page_fault()
|
|
|
|
|
{
|
|
|
|
|
Thread * myself = Thread::myself();
|
|
|
|
|
Nova::Utcb * utcb = reinterpret_cast<Nova::Utcb *>(myself->utcb());
|
|
|
|
|
|
|
|
|
|
if (utcb->msg_words() != 1) {
|
|
|
|
|
Genode::error("unexpected");
|
|
|
|
|
while (1) { }
|
|
|
|
|
}
|
|
|
|
|
|
2017-04-12 11:55:08 +02:00
|
|
|
Genode::addr_t map_from = utcb->msg()[0];
|
2016-09-02 10:40:08 +02:00
|
|
|
// Genode::error("pager: got map request ", Genode::Hex(map_from));
|
|
|
|
|
|
|
|
|
|
utcb->set_msg_word(0);
|
|
|
|
|
utcb->mtd = 0;
|
|
|
|
|
|
|
|
|
|
Nova::Mem_crd crd_map(map_from >> 12, 0, Nova::Rights(true, true, true));
|
|
|
|
|
bool res = utcb->append_item(crd_map, 0);
|
|
|
|
|
(void)res;
|
|
|
|
|
|
|
|
|
|
Nova::reply(myself->stack_top());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
public:
|
|
|
|
|
|
|
|
|
|
Pager(Genode::Env &env, Location location)
|
|
|
|
|
:
|
|
|
|
|
Thread(env, "pager", 0x1000, location, Weight(), env.cpu()),
|
|
|
|
|
_ds(env.ram().alloc (4096))
|
|
|
|
|
{
|
|
|
|
|
_ds_mem = env.rm().attach(_ds);
|
|
|
|
|
touch_read(reinterpret_cast<unsigned char *>(_ds_mem));
|
|
|
|
|
|
|
|
|
|
/* request creation of a 'local' EC */
|
|
|
|
|
Thread::native_thread().ec_sel = Native_thread::INVALID_INDEX - 1;
|
|
|
|
|
Thread::start();
|
|
|
|
|
|
|
|
|
|
Genode::warning("pager: created");
|
|
|
|
|
|
|
|
|
|
Native_capability thread_cap =
|
|
|
|
|
Capability_space::import(Thread::native_thread().ec_sel);
|
|
|
|
|
|
|
|
|
|
Genode::Nova_native_pd_client native_pd(env.pd().native_pd());
|
|
|
|
|
Nova::Mtd mtd (Nova::Mtd::QUAL | Nova::Mtd::EIP | Nova::Mtd::ESP);
|
|
|
|
|
Genode::addr_t entry = reinterpret_cast<Genode::addr_t>(page_fault);
|
|
|
|
|
|
|
|
|
|
_call_to_map = native_pd.alloc_rpc_cap(thread_cap, entry,
|
|
|
|
|
mtd.value());
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
Native_capability call_to_map() { return _call_to_map; }
|
|
|
|
|
addr_t mem_st() { return _ds_mem; }
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
addr_t Pager::_ds_mem;
|
|
|
|
|
|
|
|
|
|
class Cause_mapping : public Genode::Thread {
|
|
|
|
|
|
|
|
|
|
private:
|
|
|
|
|
|
Follow practices suggested by "Effective C++"
The patch adjust the code of the base, base-<kernel>, and os repository.
To adapt existing components to fix violations of the best practices
suggested by "Effective C++" as reported by the -Weffc++ compiler
argument. The changes follow the patterns outlined below:
* A class with virtual functions can no longer publicly inherit base
classed without a vtable. The inherited object may either be moved
to a member variable, or inherited privately. The latter would be
used for classes that inherit 'List::Element' or 'Avl_node'. In order
to enable the 'List' and 'Avl_tree' to access the meta data, the
'List' must become a friend.
* Instead of adding a virtual destructor to abstract base classes,
we inherit the new 'Interface' class, which contains a virtual
destructor. This way, single-line abstract base classes can stay
as compact as they are now. The 'Interface' utility resides in
base/include/util/interface.h.
* With the new warnings enabled, all member variables must be explicitly
initialized. Basic types may be initialized with '='. All other types
are initialized with braces '{ ... }' or as class initializers. If
basic types and non-basic types appear in a row, it is nice to only
use the brace syntax (also for basic types) and align the braces.
* If a class contains pointers as members, it must now also provide a
copy constructor and assignment operator. In the most cases, one
would make them private, effectively disallowing the objects to be
copied. Unfortunately, this warning cannot be fixed be inheriting
our existing 'Noncopyable' class (the compiler fails to detect that
the inheriting class cannot be copied and still gives the error).
For now, we have to manually add declarations for both the copy
constructor and assignment operator as private class members. Those
declarations should be prepended with a comment like this:
/*
* Noncopyable
*/
Thread(Thread const &);
Thread &operator = (Thread const &);
In the future, we should revisit these places and try to replace
the pointers with references. In the presence of at least one
reference member, the compiler would no longer implicitly generate
a copy constructor. So we could remove the manual declaration.
Issue #465
2017-12-21 15:42:15 +01:00
|
|
|
Native_capability _call_to_map { };
|
2016-09-02 10:40:08 +02:00
|
|
|
Rm_connection _rm;
|
|
|
|
|
Region_map_client _sub_rm;
|
|
|
|
|
addr_t _mem_nd;
|
|
|
|
|
addr_t _mem_st;
|
|
|
|
|
Nova::Rights const _mapping_rwx = {true, true, true};
|
|
|
|
|
|
|
|
|
|
public:
|
|
|
|
|
|
|
|
|
|
unsigned volatile called = 0;
|
|
|
|
|
|
|
|
|
|
Cause_mapping(Genode::Env &env, Native_capability call_to_map,
|
|
|
|
|
Genode::addr_t mem_st, Location location)
|
|
|
|
|
:
|
|
|
|
|
Thread(env, "mapper", 0x1000, location, Weight(), env.cpu()),
|
|
|
|
|
_call_to_map(call_to_map),
|
|
|
|
|
_rm(env),
|
|
|
|
|
_sub_rm(_rm.create(0x2000)),
|
|
|
|
|
_mem_nd(env.rm().attach(_sub_rm.dataspace())),
|
|
|
|
|
_mem_st(mem_st)
|
|
|
|
|
{ }
|
|
|
|
|
|
|
|
|
|
void entry() {
|
|
|
|
|
|
|
|
|
|
log("mapper: hello");
|
|
|
|
|
|
|
|
|
|
Nova::Utcb * nova_utcb = reinterpret_cast<Nova::Utcb *>(utcb());
|
|
|
|
|
|
|
|
|
|
while (true) {
|
|
|
|
|
called ++;
|
|
|
|
|
// log("mapper: request mapping ", Hex(_mem_nd), " ", called);
|
|
|
|
|
|
|
|
|
|
Nova::Crd old = nova_utcb->crd_rcv;
|
|
|
|
|
|
|
|
|
|
// touch_read((unsigned char *)_mem_st);
|
|
|
|
|
|
2017-04-12 11:55:08 +02:00
|
|
|
nova_utcb->msg()[0] = _mem_st;
|
2016-09-02 10:40:08 +02:00
|
|
|
nova_utcb->set_msg_word(1);
|
|
|
|
|
nova_utcb->crd_rcv = Nova::Mem_crd(_mem_nd >> 12, 0,
|
|
|
|
|
_mapping_rwx);
|
|
|
|
|
Nova::call(_call_to_map.local_name());
|
|
|
|
|
//touch_read((unsigned char *)_mem_nd);
|
|
|
|
|
|
2017-04-12 11:55:08 +02:00
|
|
|
nova_utcb->msg()[0] = _mem_nd;
|
2016-09-02 10:40:08 +02:00
|
|
|
nova_utcb->set_msg_word(1);
|
|
|
|
|
nova_utcb->crd_rcv = Nova::Mem_crd((_mem_nd + 0x1000) >> 12, 0,
|
|
|
|
|
_mapping_rwx);
|
|
|
|
|
Nova::call(_call_to_map.local_name());
|
|
|
|
|
// touch_read((unsigned char *)_mem_nd + 0x1000);
|
|
|
|
|
|
|
|
|
|
nova_utcb->crd_rcv = old;
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
void revoke_remote()
|
|
|
|
|
{
|
|
|
|
|
Nova::revoke(Nova::Mem_crd(_mem_nd >> 12, 0, _mapping_rwx), true);
|
|
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
void test_delegate_revoke_smp(Genode::Env &env)
|
|
|
|
|
{
|
|
|
|
|
Affinity::Space cpus = env.cpu().affinity_space();
|
|
|
|
|
Genode::log("detected ", cpus.width(), "x", cpus.height(), " "
|
|
|
|
|
"CPU", cpus.total() > 1 ? "s." : ".");
|
|
|
|
|
|
|
|
|
|
Pager pager(env, cpus.location_of_index(1));
|
|
|
|
|
Cause_mapping mapper(env, pager.call_to_map(), pager.mem_st(),
|
|
|
|
|
cpus.location_of_index(1));
|
|
|
|
|
mapper.start();
|
|
|
|
|
|
|
|
|
|
for (unsigned i = 0; i < 2000; i++) {
|
|
|
|
|
mapper.revoke_remote();
|
|
|
|
|
if (i % 1000 == 0)
|
|
|
|
|
Genode::log("main ", i, " ", mapper.called);
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
class Greedy : public Genode::Thread {
|
|
|
|
|
|
|
|
|
|
private:
|
|
|
|
|
|
|
|
|
|
Genode::Env &_env;
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
public:
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
Greedy(Genode::Env &env)
|
2015-06-05 21:55:18 +02:00
|
|
|
:
|
2016-09-01 08:39:56 +02:00
|
|
|
Thread(env, "greedy", 0x1000),
|
|
|
|
|
_env(env)
|
2015-06-05 21:55:18 +02:00
|
|
|
{ }
|
|
|
|
|
|
2016-04-15 15:19:22 +02:00
|
|
|
void entry()
|
|
|
|
|
{
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("starting");
|
2015-06-05 21:55:18 +02:00
|
|
|
|
2016-11-10 11:46:30 +01:00
|
|
|
enum { SUB_RM_SIZE = 1280 * 1024 * 1024 };
|
2015-06-05 21:55:18 +02:00
|
|
|
|
2016-11-10 11:46:30 +01:00
|
|
|
Genode::Ram_dataspace_capability ds = _env.ram().alloc(4096);
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
Nova::Rights const mapping_rwx(true, true, true);
|
|
|
|
|
|
2016-11-10 11:46:30 +01:00
|
|
|
log("cause mappings");
|
2015-06-05 21:55:18 +02:00
|
|
|
|
2016-11-10 11:46:30 +01:00
|
|
|
for (unsigned i = 0; i < SUB_RM_SIZE / 4096; i++) {
|
2015-06-05 21:55:18 +02:00
|
|
|
|
2016-11-10 11:46:30 +01:00
|
|
|
addr_t map_to = _env.rm().attach(ds);
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
/* check that we really got the mapping */
|
|
|
|
|
touch_read(reinterpret_cast<unsigned char *>(map_to));
|
|
|
|
|
|
|
|
|
|
/* print status information in interval of 32M */
|
2016-11-10 11:46:30 +01:00
|
|
|
if (i % 8192 == 0) {
|
|
|
|
|
log(Hex(i * 4096));
|
2015-06-05 21:55:18 +02:00
|
|
|
/* trigger some work to see quota in kernel decreasing */
|
|
|
|
|
// Nova::Rights rwx(true, true, true);
|
|
|
|
|
// Nova::revoke(Nova::Mem_crd((map_to - 32 * 1024 * 1024) >> 12, 12, rwx));
|
|
|
|
|
}
|
|
|
|
|
}
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("still alive - done");
|
2015-06-05 21:55:18 +02:00
|
|
|
}
|
|
|
|
|
};
|
|
|
|
|
|
2015-01-02 20:16:49 +01:00
|
|
|
void check(uint8_t res, const char *format, ...)
|
|
|
|
|
{
|
|
|
|
|
static char buf[128];
|
|
|
|
|
|
|
|
|
|
va_list list;
|
|
|
|
|
va_start(list, format);
|
|
|
|
|
|
|
|
|
|
String_console sc(buf, sizeof(buf));
|
|
|
|
|
sc.vprintf(format, list);
|
|
|
|
|
|
|
|
|
|
va_end(list);
|
|
|
|
|
|
|
|
|
|
if (res == Nova::NOVA_OK) {
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
error("res=", res, " ", Cstring(buf), " - TEST FAILED");
|
2015-01-02 20:16:49 +01:00
|
|
|
failed++;
|
|
|
|
|
}
|
|
|
|
|
else
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("res=", res, " ", Cstring(buf));
|
2015-01-02 20:16:49 +01:00
|
|
|
}
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
struct Main
|
|
|
|
|
{
|
|
|
|
|
Genode::Env &env;
|
|
|
|
|
Genode::Heap heap { env.ram(), env.rm() };
|
|
|
|
|
|
|
|
|
|
Main(Env &env);
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
Main::Main(Env &env) : env(env)
|
2015-01-02 20:16:49 +01:00
|
|
|
{
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("testing base-nova platform");
|
2015-01-02 20:16:49 +01:00
|
|
|
|
2015-08-25 15:20:54 +02:00
|
|
|
try {
|
2017-05-07 22:36:11 +02:00
|
|
|
Attached_rom_dataspace config(env, "config");
|
2019-01-30 17:53:16 +01:00
|
|
|
config.xml().attribute("check_pat").value(check_pat);
|
2017-05-07 22:36:11 +02:00
|
|
|
} catch (...) {
|
|
|
|
|
Genode::error("no check_pat attribute found");
|
|
|
|
|
env.parent().exit(-__LINE__);
|
|
|
|
|
return;
|
|
|
|
|
}
|
2015-08-25 15:20:54 +02:00
|
|
|
|
2016-05-04 12:27:17 +02:00
|
|
|
Thread * myself = Thread::myself();
|
2016-09-01 08:39:56 +02:00
|
|
|
if (!myself) {
|
|
|
|
|
env.parent().exit(-__LINE__);
|
|
|
|
|
return;
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
/* upgrade available capability indices for this process */
|
|
|
|
|
unsigned index = 512 * 1024;
|
|
|
|
|
static char local[128][sizeof(Cap_range)];
|
|
|
|
|
|
|
|
|
|
for (unsigned i = 0; i < sizeof(local) / sizeof (local[0]); i++) {
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
Cap_range &range = *construct_at<Cap_range>(local[i], index);
|
2016-09-01 08:39:56 +02:00
|
|
|
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
cap_map().insert(range);
|
2016-09-01 08:39:56 +02:00
|
|
|
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
index = range.base() + range.elements();
|
2016-09-01 08:39:56 +02:00
|
|
|
};
|
2015-01-02 20:16:49 +01:00
|
|
|
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
addr_t sel_pd = cap_map().insert();
|
2016-03-11 17:32:43 +01:00
|
|
|
addr_t sel_ec = myself->native_thread().ec_sel;
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
addr_t sel_cap = cap_map().insert();
|
2015-01-02 20:16:49 +01:00
|
|
|
addr_t handler = 0UL;
|
|
|
|
|
uint8_t res = 0;
|
|
|
|
|
|
|
|
|
|
Nova::Mtd mtd(Nova::Mtd::ALL);
|
|
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
if (sel_cap == ~0UL || sel_ec == ~0UL || sel_cap == ~0UL) {
|
|
|
|
|
env.parent().exit(-__LINE__);
|
|
|
|
|
return;
|
|
|
|
|
}
|
2015-01-02 20:16:49 +01:00
|
|
|
|
|
|
|
|
/* negative syscall tests - they should not succeed */
|
|
|
|
|
res = Nova::create_pt(sel_cap, sel_pd, sel_ec, mtd, handler);
|
|
|
|
|
check(res, "create_pt");
|
|
|
|
|
|
|
|
|
|
res = Nova::create_sm(sel_cap, sel_pd, 0);
|
|
|
|
|
check(res, "create_sm");
|
|
|
|
|
|
|
|
|
|
/* changing the badge of one of the portal must fail */
|
|
|
|
|
for (unsigned i = 0; i < (1U << Nova::NUM_INITIAL_PT_LOG2); i++) {
|
2016-03-11 17:32:43 +01:00
|
|
|
addr_t sel_exc = myself->native_thread().exc_pt_sel + i;
|
2015-01-02 20:16:49 +01:00
|
|
|
res = Nova::pt_ctrl(sel_exc, 0xbadbad);
|
|
|
|
|
check(res, "pt_ctrl %2u", i);
|
|
|
|
|
}
|
|
|
|
|
|
2015-08-25 15:20:54 +02:00
|
|
|
/* test PAT kernel feature */
|
2016-09-01 08:39:56 +02:00
|
|
|
test_pat(env);
|
2015-08-25 15:20:54 +02:00
|
|
|
|
2016-04-19 17:48:04 +02:00
|
|
|
/* test special revoke */
|
2016-09-01 08:39:56 +02:00
|
|
|
test_revoke(env);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
|
|
|
|
/* test translate together with special revoke */
|
2016-09-01 08:39:56 +02:00
|
|
|
test_translate(env);
|
2016-04-19 17:48:04 +02:00
|
|
|
|
2019-01-30 11:05:18 +01:00
|
|
|
/* test SMP delegate/revoke - skip it on Qemu which takes too long */
|
|
|
|
|
if (check_pat)
|
|
|
|
|
test_delegate_revoke_smp(env);
|
2016-09-14 23:21:24 +02:00
|
|
|
|
2015-06-05 21:55:18 +02:00
|
|
|
/**
|
|
|
|
|
* Test to provoke out of memory during capability transfer of
|
|
|
|
|
* server/client.
|
|
|
|
|
*
|
|
|
|
|
* Set in hypervisor.ld the memory to a low value of about 1M to let
|
|
|
|
|
* trigger the test.
|
|
|
|
|
*/
|
2016-09-01 08:39:56 +02:00
|
|
|
test_server_oom(env);
|
2015-06-05 21:55:18 +02:00
|
|
|
|
|
|
|
|
/* Test to provoke out of memory in kernel during interaction with core */
|
2016-09-01 08:39:56 +02:00
|
|
|
static Greedy core_pagefault_oom(env);
|
2015-06-05 21:55:18 +02:00
|
|
|
core_pagefault_oom.start();
|
|
|
|
|
core_pagefault_oom.join();
|
|
|
|
|
|
2015-01-02 20:16:49 +01:00
|
|
|
if (!failed)
|
base: avoid use of deprecated base/printf.h
Besides adapting the components to the use of base/log.h, the patch
cleans up a few base headers, i.e., it removes unused includes from
root/component.h, specifically base/heap.h and
ram_session/ram_session.h. Hence, components that relied on the implicit
inclusion of those headers have to manually include those headers now.
While adjusting the log messages, I repeatedly stumbled over the problem
that printing char * arguments is ambiguous. It is unclear whether to
print the argument as pointer or null-terminated string. To overcome
this problem, the patch introduces a new type 'Cstring' that allows the
caller to express that the argument should be handled as null-terminated
string. As a nice side effect, with this type in place, the optional len
argument of the 'String' class could be removed. Instead of supplying a
pair of (char const *, size_t), the constructor accepts a 'Cstring'.
This, in turn, clears the way let the 'String' constructor use the new
output mechanism to assemble a string from multiple arguments (and
thereby getting rid of snprintf within Genode in the near future).
To enforce the explicit resolution of the char * ambiguity, the 'char *'
overload of the 'print' function is marked as deleted.
Issue #1987
2016-07-13 19:07:09 +02:00
|
|
|
log("Test finished");
|
2015-01-02 20:16:49 +01:00
|
|
|
|
2016-09-01 08:39:56 +02:00
|
|
|
env.parent().exit(-__LINE__);
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
2016-11-28 15:13:14 +01:00
|
|
|
void Component::construct(Genode::Env &env) { static Main main(env); }
|
