seL4/include/object/structures_32.bf
Thibaut Perami 3df00ea4d7 SELFOUR-6: Add GrantReply to the rights system.
GrantReply is a new access right added to endpoint capabilities, which
allows seL4_Call to be used on those capabilities (specifically, it
allows reply caps *only* to be granted across endpoints).

Prior to the addition of GrantReply, endpoint capabilities required the
Grant access right, which allowed any arbitrary capabilitiy to be
transferred over an endpoint. Using GrantReply, systems can now be
constructed where threads using seL4_Call over an endpoint do not need to be in the same
security subsystem.
2018-12-12 14:04:28 +11:00

294 lines
5.5 KiB
Brainfuck

--
-- Copyright 2014, General Dynamics C4 Systems
--
-- This software may be distributed and modified according to the terms of
-- the GNU General Public License version 2. Note that NO WARRANTY is provided.
-- See "LICENSE_GPLv2.txt" for details.
--
-- @TAG(GD_GPL)
--
-- Default base size: uint32_t
base 32
block null_cap {
padding 32
padding 28
field capType 4
}
-- The combination of freeIndex and blockSize must match up with the
-- definitions of MIN_SIZE_BITS and MAX_SIZE_BITS
block untyped_cap {
field capFreeIndex 26
field capIsDevice 1
field capBlockSize 5
field_high capPtr 28
field capType 4
}
block endpoint_cap(capEPBadge, capCanGrantReply, capCanGrant, capCanSend,
capCanReceive, capEPPtr, capType) {
field_high capEPPtr 28
field capCanGrantReply 1
field capCanGrant 1
field capCanReceive 1
field capCanSend 1
field capEPBadge 28
field capType 4
}
block notification_cap {
field capNtfnBadge 28
padding 2
field capNtfnCanReceive 1
field capNtfnCanSend 1
field_high capNtfnPtr 28
field capType 4
}
block reply_cap(capReplyCanGrant, capReplyMaster, capTCBPtr, capType) {
padding 32
field_high capTCBPtr 26
field capReplyCanGrant 1
field capReplyMaster 1
field capType 4
}
-- The user-visible format of the data word is defined by cnode_capdata, below.
block cnode_cap(capCNodeRadix, capCNodeGuardSize, capCNodeGuard,
capCNodePtr, capType) {
padding 4
field capCNodeGuardSize 5
field capCNodeRadix 5
field capCNodeGuard 18
field_high capCNodePtr 27
padding 1
field capType 4
}
block thread_cap {
padding 32
field_high capTCBPtr 28
field capType 4
}
block irq_control_cap {
padding 32
padding 24
field capType 8
}
block irq_handler_cap {
padding 24
field capIRQ 8
padding 24
field capType 8
}
block zombie_cap {
field capZombieID 32
padding 18
field capZombieType 6
field capType 8
}
block domain_cap {
padding 32
padding 24
field capType 8
}
---- Arch-independent object types
-- Endpoint: size = 16 bytes
block endpoint {
padding 64
field_high epQueue_head 28
padding 4
field_high epQueue_tail 28
padding 2
field state 2
}
-- Notification object: size = 16 bytes
block notification {
field_high ntfnBoundTCB 28
padding 4
field ntfnMsgIdentifier 32
field_high ntfnQueue_head 28
padding 4
field_high ntfnQueue_tail 28
padding 2
field state 2
}
-- Mapping database (MDB) node: size = 8 bytes
block mdb_node {
field_high mdbNext 29
padding 1
field mdbRevocable 1
field mdbFirstBadged 1
field_high mdbPrev 29
padding 3
}
-- Thread state data
--
-- tsType
-- * Running
-- * Restart
-- * Inactive
-- * BlockedOnReceive
-- - Endpoint
-- - CanGrant
-- * BlockedOnSend
-- - Endpoint
-- - CanGrant
-- - CanGrantReply
-- - IsCall
-- - IPCBadge
-- - Fault
-- - faultType
-- * CapFault
-- - Address
-- - InReceivePhase
-- - LookupFailure
-- - lufType
-- * InvalidRoot
-- * MissingCapability
-- - BitsLeft
-- * DepthMismatch
-- - BitsFound
-- - BitsLeft
-- * GuardMismatch
-- - GuardFound
-- - BitsLeft
-- - GuardSize
-- * VMFault
-- - Address
-- - FSR
-- - FaultType
-- * UnknownSyscall
-- - Number
-- * UserException
-- - Number
-- - Code
-- * BlockedOnReply
-- * BlockedOnFault
-- - Fault
-- * BlockedOnNotification
-- - Notification
-- * Idle
-- Lookup fault: size = 8 bytes
block invalid_root {
padding 62
field lufType 2
}
block missing_capability {
padding 56
field bitsLeft 6
field lufType 2
}
block depth_mismatch {
padding 50
field bitsFound 6
field bitsLeft 6
field lufType 2
}
block guard_mismatch {
field guardFound 32
padding 18
field bitsLeft 6
field bitsFound 6
field lufType 2
}
tagged_union lookup_fault lufType {
tag invalid_root 0
tag missing_capability 1
tag depth_mismatch 2
tag guard_mismatch 3
}
-- Fault: size = 8 bytes
block NullFault {
padding 61
field seL4_FaultType 3
}
block CapFault {
field address 32
field inReceivePhase 1
padding 28
field seL4_FaultType 3
}
block UnknownSyscall {
field syscallNumber 32
padding 29
field seL4_FaultType 3
}
block UserException {
field number 32
field code 29
field seL4_FaultType 3
}
#ifdef CONFIG_HARDWARE_DEBUG_API
block DebugException {
field breakpointAddress 32
padding 21
-- X86 has 4 breakpoints (DR0-3).
-- ARM has between 2 and 16 breakpoints
-- ( ARM Ref manual, C3.3).
-- So we just use 4 bits to cater for both.
field breakpointNumber 4
field exceptionReason 4
field seL4_FaultType 3
}
#endif
-- Thread state: size = 12 bytes
block thread_state(blockingIPCBadge, blockingIPCCanGrant,
blockingIPCCanGrantReply, blockingIPCIsCall,
tcbQueued, blockingObject,
tsType) {
field blockingIPCBadge 28
field blockingIPCCanGrant 1
field blockingIPCCanGrantReply 1
field blockingIPCIsCall 1
padding 1
-- this is fastpath-specific. it is useful to be able to write
-- tsType and without changing tcbQueued
padding 31
field tcbQueued 1
field_high blockingObject 28
field tsType 4
}