mirror of
https://github.com/genodelabs/genode.git
synced 2025-04-25 13:29:56 +00:00
ff83de2bbc
With this patch, the 'Pd_session' interface no longer implements the 'Ram_allocator' interface, which allows us to change the 'Genode::Ram_allocator' semantics (as a subsequent step) without affecting core's PD service. The patch also replaces the client-local implementation of 'Pd_session_client::dataspace_size' by the proper RPC call 'ram_size' to core, which mitigates the potential risk of de-referencing a dataspace cap of an untrusted origin. E.g., in scenarios where the monitor component requests the size of a dataspace allocated by the debugging target. Since 'ram_size' is an RPC call, it cannot be const. Hence, the 'Ram_alloctor::dataspace_size' has become non-const. The new 'Pd_ram_allocator' implements the 'Ram_allocator' interface by using a PD session. Issue #5502
110 lines
3.4 KiB
C++
110 lines
3.4 KiB
C++
/*
|
|
* \brief Client-side pd session interface
|
|
* \author Christian Helmuth
|
|
* \date 2006-07-12
|
|
*/
|
|
|
|
/*
|
|
* Copyright (C) 2006-2017 Genode Labs GmbH
|
|
*
|
|
* This file is part of the Genode OS framework, which is distributed
|
|
* under the terms of the GNU Affero General Public License version 3.
|
|
*/
|
|
|
|
#ifndef _INCLUDE__PD_SESSION__CLIENT_H_
|
|
#define _INCLUDE__PD_SESSION__CLIENT_H_
|
|
|
|
#include <pd_session/capability.h>
|
|
#include <dataspace/client.h>
|
|
|
|
namespace Genode { struct Pd_session_client; }
|
|
|
|
|
|
struct Genode::Pd_session_client : Rpc_client<Pd_session>
|
|
{
|
|
explicit Pd_session_client(Pd_session_capability session)
|
|
: Rpc_client<Pd_session>(session) { }
|
|
|
|
void assign_parent(Capability<Parent> parent) override {
|
|
call<Rpc_assign_parent>(parent); }
|
|
|
|
bool assign_pci(addr_t pci_config_memory_address, uint16_t bdf) override {
|
|
return call<Rpc_assign_pci>(pci_config_memory_address, bdf); }
|
|
|
|
Map_result map(Virt_range range) override { return call<Rpc_map>(range); }
|
|
|
|
Signal_source_result signal_source() override {
|
|
return call<Rpc_signal_source>(); }
|
|
|
|
void free_signal_source(Capability<Signal_source> cap) override {
|
|
call<Rpc_free_signal_source>(cap); }
|
|
|
|
Alloc_context_result alloc_context(Capability<Signal_source> source,
|
|
Imprint imprint) override {
|
|
return call<Rpc_alloc_context>(source, imprint); }
|
|
|
|
void free_context(Signal_context_capability cap) override {
|
|
call<Rpc_free_context>(cap); }
|
|
|
|
void submit(Signal_context_capability receiver, unsigned cnt = 1) override {
|
|
call<Rpc_submit>(receiver, cnt); }
|
|
|
|
Alloc_rpc_cap_result alloc_rpc_cap(Native_capability ep) override {
|
|
return call<Rpc_alloc_rpc_cap>(ep); }
|
|
|
|
void free_rpc_cap(Native_capability cap) override {
|
|
call<Rpc_free_rpc_cap>(cap); }
|
|
|
|
Capability<Region_map> address_space() override {
|
|
return call<Rpc_address_space>(); }
|
|
|
|
Capability<Region_map> stack_area() override {
|
|
return call<Rpc_stack_area>(); }
|
|
|
|
Capability<Region_map> linker_area() override {
|
|
return call<Rpc_linker_area>(); }
|
|
|
|
Ref_account_result ref_account(Capability<Pd_account> pd) override {
|
|
return call<Rpc_ref_account>(pd); }
|
|
|
|
Transfer_result transfer_quota(Capability<Pd_account> pd, Cap_quota amount) override
|
|
{
|
|
return call<Rpc_transfer_cap_quota>(pd, amount);
|
|
}
|
|
|
|
Cap_quota cap_quota() const override { return call<Rpc_cap_quota>(); }
|
|
Cap_quota used_caps() const override { return call<Rpc_used_caps>(); }
|
|
|
|
Alloc_ram_result alloc_ram(size_t size, Cache cache = CACHED) override
|
|
{
|
|
return call<Rpc_alloc_ram>(size, cache);
|
|
}
|
|
|
|
void free_ram(Ram_dataspace_capability ds) override { call<Rpc_free_ram>(ds); }
|
|
|
|
size_t ram_size(Ram_dataspace_capability cap) override
|
|
{
|
|
return call<Rpc_ram_size>(cap);
|
|
}
|
|
|
|
Transfer_result transfer_quota(Capability<Pd_account> pd, Ram_quota amount) override
|
|
{
|
|
return call<Rpc_transfer_ram_quota>(pd, amount);
|
|
}
|
|
|
|
Ram_quota ram_quota() const override { return call<Rpc_ram_quota>(); }
|
|
Ram_quota used_ram() const override { return call<Rpc_used_ram>(); }
|
|
|
|
Capability<Native_pd> native_pd() override { return call<Rpc_native_pd>(); }
|
|
|
|
Capability<System_control> system_control_cap(Affinity::Location const location) override {
|
|
return call<Rpc_system_control_cap>(location); }
|
|
|
|
addr_t dma_addr(Ram_dataspace_capability ds) override { return call<Rpc_dma_addr>(ds); }
|
|
|
|
Attach_dma_result attach_dma(Dataspace_capability ds, addr_t at) override {
|
|
return call<Rpc_attach_dma>(ds, at); }
|
|
};
|
|
|
|
#endif /* _INCLUDE__PD_SESSION__CLIENT_H_ */
|