2016-06-15 15:04:54 +02:00
|
|
|
/*
|
|
|
|
* \brief Capability lifetime management
|
|
|
|
* \author Norman Feske
|
|
|
|
* \date 2015-05-06
|
|
|
|
*/
|
|
|
|
|
|
|
|
/*
|
2017-02-20 13:23:52 +01:00
|
|
|
* Copyright (C) 2015-2017 Genode Labs GmbH
|
2016-06-15 15:04:54 +02:00
|
|
|
*
|
|
|
|
* This file is part of the Genode OS framework, which is distributed
|
2017-02-20 13:23:52 +01:00
|
|
|
* under the terms of the GNU Affero General Public License version 3.
|
2016-06-15 15:04:54 +02:00
|
|
|
*/
|
|
|
|
|
|
|
|
/* base-internal includes */
|
|
|
|
#include <base/internal/capability_data.h>
|
|
|
|
|
|
|
|
/* NOVA includes */
|
|
|
|
#include <nova/cap_map.h>
|
|
|
|
#include <nova/capability_space.h>
|
|
|
|
|
|
|
|
using namespace Genode;
|
|
|
|
|
|
|
|
|
|
|
|
Native_capability::Native_capability()
|
|
|
|
{
|
|
|
|
*this = Capability_space::import(Capability_space::INVALID_INDEX);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
void Native_capability::_inc()
|
|
|
|
{
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
Cap_index idx(cap_map().find(local_name()));
|
2016-06-15 15:04:54 +02:00
|
|
|
idx.inc();
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
void Native_capability::_dec()
|
|
|
|
{
|
base/core: use references instead of pointers
This patch replaces the former prominent use of pointers by references
wherever feasible. This has the following benefits:
* The contract between caller and callee becomes more obvious. When
passing a reference, the contract says that the argument cannot be
a null pointer. The caller is responsible to ensure that. Therefore,
the use of reference eliminates the need to add defensive null-pointer
checks at the callee site, which sometimes merely exist to be on the
safe side. The bottom line is that the code becomes easier to follow.
* Reference members must be initialized via an object initializer,
which promotes a programming style that avoids intermediate object-
construction states. Within core, there are still a few pointers
as member variables left though. E.g., caused by the late association
of 'Platform_thread' objects with their 'Platform_pd' objects.
* If no pointers are present as member variables, we don't need to
manually provide declarations of a private copy constructor and
an assignment operator to avoid -Weffc++ errors "class ... has
pointer data members [-Werror=effc++]".
This patch also changes a few system bindings on NOVA and Fiasco.OC,
e.g., the return value of the global 'cap_map' accessor has become a
reference. Hence, the patch touches a few places outside of core.
Fixes #3135
2019-01-24 22:00:01 +01:00
|
|
|
Cap_index idx(cap_map().find(local_name()));
|
2016-06-15 15:04:54 +02:00
|
|
|
idx.dec();
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
long Native_capability::local_name() const
|
|
|
|
{
|
|
|
|
if (valid())
|
|
|
|
return Capability_space::crd(*this).base();
|
|
|
|
else
|
|
|
|
return Capability_space::INVALID_INDEX;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
bool Native_capability::valid() const
|
|
|
|
{
|
|
|
|
return _data != nullptr;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
Native_capability::Raw Native_capability::raw() const
|
|
|
|
{
|
|
|
|
return { 0, 0, 0, 0 };
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
void Native_capability::print(Genode::Output &out) const
|
|
|
|
{
|
|
|
|
using Genode::print;
|
|
|
|
|
|
|
|
print(out, "cap<");
|
|
|
|
if (_data) {
|
|
|
|
print(out, local_name());
|
|
|
|
} else {
|
|
|
|
print(out, "invalid");
|
|
|
|
}
|
|
|
|
print(out, ">");
|
|
|
|
}
|