// K1305 development Image: native EL0 calls into the typed kernel table. // The three probe object names are minted here; this gate checks handle type, // process ownership and cleanup, not file bytes or channel delivery. use super::*; use turkos_kernel::runtime::handles::{Handle, Object, Table}; use turkos_kernel::runtime::process_table::{Outcome, ProcessId}; use turkos_kernel::runtime::syscall_abi as abi; static mut OS_K1305_HANDLES: Table = Table::new(); static mut OS_K1305_STAGE: u8 = 0; fn handles() -> &'static mut Table { // Mode 52 runs on one CPU with interrupts masked throughout the probe. // No other entry point borrows this table while the guest is active. unsafe { &mut *core::ptr::addr_of_mut!(OS_K1305_HANDLES) } } fn stage() -> u8 { unsafe { read_volatile(core::ptr::addr_of!(OS_K1305_STAGE)) } } fn set_stage(value: u8) { unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1305_STAGE), value); } } pub(super) fn begin() { unsafe { core::ptr::write(core::ptr::addr_of_mut!(OS_K1305_HANDLES), Table::new()); } set_stage(0); } pub(super) fn finish() -> Result<(), &'static str> { let snapshot = handles().snapshot(); if stage() != 11 || handles().len() != 0 || snapshot.next != 4 || snapshot.entries.iter().any(Option::is_some) { return Err("handles owner not released"); } Ok(()) } pub(super) fn dispatch( episode: &mut OsK1215AEl0Episode, frame: &mut os_k920_exception::Frame, process_table: &mut OsK1105Table<'_>, ) -> u64 { if frame.elr < episode.launch.user_pc || frame.elr >= episode.launch.user_pc + 4096 || !frame.elr.is_multiple_of(4) { park(); } if frame.x[7] == 3 { if episode.case != 1 || episode.calls != 1 || process_table.record(episode.pid).is_err() { park(); } let owner = episode.pid; let native = handles(); match frame.x[8] { 18 => { let (expected, object) = match frame.x[0] { 1 => (0, Object::File(41)), 2 => (1, Object::Channel(52)), 3 => { let parent = process_table.record(owner) .unwrap_or_else(|_| park()).parent.unwrap_or_else(|| park()); (2, Object::Task(parent.generation())) } _ => park(), }; if stage() != expected { park(); } let before = native.len(); let handle = native.open(owner, object).unwrap_or_else(|_| park()); if handle.raw() != u64::from(expected) + 1 || native.len() != before + 1 || native.owned(owner) != before + 1 { park(); } frame.x[0] = handle.raw(); set_stage(expected + 1); write_str("TURKOS/OS/K1305H-TRACE: OPEN KIND=0x"); write_hex((expected + 1) as usize); write_str(" HANDLE=0x"); write_hex(handle.raw() as usize); write_line(""); 0 } 19 => { let handle = Handle::from_raw(frame.x[0]); if stage() == 3 && handle.raw() == 1 { let before = native.snapshot(); let result = native.channel_send(owner, handle); if result != Err(turkos_kernel::runtime::handles::Error::BadFd) || native.snapshot() != before { park(); } frame.x[0] = abi::AbiResult::Err(abi::Errno::BadFd).encode(); set_stage(4); write_line("TURKOS/OS/K1305H-TRACE: FILE-IN-CHANNEL-EBADF-NO-OWNER-CHANGE"); } else if stage() == 4 && handle.raw() == 2 { if native.channel_send(owner, handle) != Ok(52) { park(); } frame.x[0] = 52; set_stage(5); write_line("TURKOS/OS/K1305H-TRACE: HEALTHY-CHANNEL-AFTER-DENIAL"); } else { park(); } 0 } 20 => { if stage() != 5 || frame.x[0] != 1 || native.file_read(owner, Handle::from_raw(frame.x[0])) != Ok(41) { park(); } frame.x[0] = 41; set_stage(6); 0 } 21 => { let parent = process_table.record(owner) .unwrap_or_else(|_| park()).parent.unwrap_or_else(|| park()); if stage() != 6 || frame.x[0] != 3 || native.task_inspect(owner, Handle::from_raw(frame.x[0])) != Ok(parent.generation()) { park(); } frame.x[0] = parent.generation(); set_stage(7); 0 } 22 => { let (expected, handle) = match stage() { 8 => (1, 1), 9 => (2, 2), _ => park(), }; if frame.x[0] != handle || native.close(owner, Handle::from_raw(handle)).is_err() || native.len() != 3 - expected { park(); } frame.x[0] = 0; set_stage(stage() + 1); 0 } _ => { frame.x[0] = abi::AbiResult::Err(abi::Errno::NoSys).encode(); 0 } } } else if frame.x[7] == 2 && frame.x[8] == 3 { let request = turkos_os_user_runtime_abi::decode( frame.x[7], frame.x[8], core::array::from_fn(|i| frame.x[i])) .unwrap_or_else(|_| park()); let turkos_os_user_runtime_abi::Request::Exit(code) = request else { park(); }; if episode.case == 0 { if code != 0 || episode.calls != 2 || stage() != 11 { park(); } } else { if code != 42 || episode.calls != 1 || stage() != 10 || handles().owned(episode.pid) != 1 { park(); } } process_table.exit_current(code).unwrap_or_else(|_| park()); let outcome = Outcome::Exited(code); if process_table.record(episode.pid).map(|r| r.outcome) != Ok(Some(outcome)) { park(); } if episode.case == 1 { if handles().close_owner(episode.pid) != 1 || handles().len() != 0 { park(); } set_stage(11); write_line("TURKOS/OS/K1305H-TRACE: EXIT-CLOSES-REMAINING-TASK-HANDLE"); } episode.outcome = Some(outcome); 1 } else { if frame.x[7] != abi::ABI_VERSION { park(); } let mut abi_frame = turkos_os_exceptions::exceptions::Frame::EMPTY; abi_frame.x = frame.x; let call = abi::decode_call(&abi_frame).unwrap_or_else(|_| park()); if call == abi::Call::Role { if episode.calls != 0 { park(); } episode.calls = 1; frame.x[0] = episode.case as u64; return 0; } if let abi::Call::RunChild(1) = call { if episode.case != 0 || episode.calls != 1 || stage() != 0 { park(); } return os_k1215a_run_child(episode as *mut _, frame as *mut _, episode.launch.kernel_root); } if let abi::Call::Write(request) = call { if episode.case != 1 || request.fd() != 1 || request.bytes() != 16 || stage() != 7 { park(); } let mut bytes = [0u8; 16]; process_table.copy_current_user_data(episode.pid, request.address(), &mut bytes) .unwrap_or_else(|_| park()); if &bytes != b"HANDLES:1,2,3,9\n" { park(); } for byte in bytes { write_byte(byte); } frame.x[0] = 16; set_stage(8); write_line("TURKOS/OS/K1305H-TRACE: USER-WROTE-TYPED-HANDLE-RESULT"); return 0; } park() } }