// K1385 development probe: the registry runs in EL0; this boundary supplies // the authenticated ProcessId and carries requests between two real tasks. use super::*; use turkos_kernel::runtime::process_table::Outcome; use turkos_kernel::runtime::syscall_abi as abi; static mut OS_K1385_REQUEST: Option<(u64, u64, turkos_kernel::runtime::process_table::ProcessId)> = None; static mut OS_K1385_REPLIED: bool = false; static mut OS_K1385_RESPONSE: u64 = 0; static mut OS_K1385_COUNT: u64 = 0; static mut OS_K1385_CANARY: [u8; 16] = *b"REGISTRY-GUARD!!"; fn count() -> u64 { unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_COUNT)) } } fn request() -> Option<(u64, u64, turkos_kernel::runtime::process_table::ProcessId)> { unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REQUEST)) } } pub(super) fn begin() { unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1385_REQUEST), None); write_volatile(core::ptr::addr_of_mut!(OS_K1385_REPLIED), false); write_volatile(core::ptr::addr_of_mut!(OS_K1385_RESPONSE), 0); write_volatile(core::ptr::addr_of_mut!(OS_K1385_COUNT), 0); write_volatile(core::ptr::addr_of_mut!(OS_K1385_CANARY), *b"REGISTRY-GUARD!!"); write_volatile(core::ptr::addr_of_mut!(OS_K1380_SAVED_FRAME), os_k920_exception::Frame::EMPTY); write_volatile(core::ptr::addr_of_mut!(OS_K1380_SAVED_VALID), false); write_volatile(core::ptr::addr_of_mut!(OS_K1380_SUSPENDED), false); } } pub(super) fn finish() -> Result<(), &'static str> { if count() != 3 || request().is_some() || unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REPLIED)) } || unsafe { read_volatile(core::ptr::addr_of!(OS_K1380_SAVED_VALID)) } || unsafe { read_volatile(core::ptr::addr_of!(OS_K1380_SUSPENDED)) } || unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_CANARY)) } != *b"REGISTRY-GUARD!!" { return Err("registry-incomplete-or-state-corrupt"); } Ok(()) } pub(super) fn dispatch(episode: &mut OsK1215AEl0Episode, frame: &mut os_k920_exception::Frame, table: &mut OsK1105Table<'_>) -> u64 { if frame.elr < episode.launch.user_pc || frame.elr >= episode.launch.user_pc + 4096 || !frame.elr.is_multiple_of(4) { park(); } let pid = episode.pid; if frame.x[7] == 3 { match frame.x[8] { 210 => { if episode.calls == 0 || frame.x[0] != 0 || frame.x[1] != 0 || pid.slot() >= u32::MAX as usize { park(); } frame.x[0] = pid.slot() as u64 + 1; frame.x[1] = pid.generation().checked_add(1) .unwrap_or_else(|| park()); } 220 => { let kind = frame.x[0]; let endpoint = frame.x[1]; if episode.case != 1 || episode.calls != 1 || kind != count() || kind > 2 || endpoint != [0x92, 0x99, 0][kind as usize] || request().is_some() { park(); } let before = table.snapshot(); let resources = table.record(pid).unwrap_or_else(|_| park()).resources; // x2/x3 are deliberately ignored: the guest cannot assert // a caller identity, even when they contain a forged PID. unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1385_REQUEST), Some((kind, endpoint, pid))); write_volatile(core::ptr::addr_of_mut!(OS_K1380_SAVED_FRAME), *frame); write_volatile(core::ptr::addr_of_mut!(OS_K1380_SAVED_VALID), true); } if kind == 1 { if table.snapshot() != before || table.record(pid).map(|r| r.resources) != Ok(resources) || unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_CANARY)) } != *b"REGISTRY-GUARD!!" { park(); } write_line("TURKOS/OS/K1385S-TRACE: FORGED-IDENTITY-IGNORED-STATE-STABLE"); } // Resume returns success from this exact saved SVC frame. unsafe { (*core::ptr::addr_of_mut!(OS_K1380_SAVED_FRAME)).x[0] = 0; } if unsafe { table.release_actual_current_to_ready() }.is_err() { park(); } unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1380_SUSPENDED), true); } write_line("TURKOS/OS/K1385S-TRACE: CHILD-REQUEST-YIELDED"); return 1; } 221 => { if episode.case != 0 || episode.calls != 1 || unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REPLIED)) } { park(); } let (kind, endpoint, caller) = request().unwrap_or_else(|| park()); if table.record(caller).map(|r| r.parent) != Ok(Some(pid)) || caller.slot() >= u32::MAX as usize { park(); } frame.x[0] = kind; frame.x[1] = endpoint; frame.x[2] = caller.slot() as u64 + 1; frame.x[3] = caller.generation().checked_add(1) .unwrap_or_else(|| park()); if kind == 0 { write_line("TURKOS/OS/K1385S-TRACE: AUTHENTICATED-PUBLISHER-ID"); } } 222 => { if episode.case != 0 || episode.calls != 1 || unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REPLIED)) } || frame.x[1] != 0 { park(); } let (kind, _, caller) = request().unwrap_or_else(|| park()); if table.record(caller).map(|r| r.parent) != Ok(Some(pid)) || frame.x[0] != [0, 1, 0][kind as usize] { park(); } unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1385_RESPONSE), frame.x[0]); write_volatile(core::ptr::addr_of_mut!(OS_K1385_REPLIED), true); } frame.x[0] = 0; match kind { 0 => write_line("TURKOS/OS/K1385S-TRACE: FILE-PUBLISHED-BY-CHILD"), 1 => write_line("TURKOS/OS/K1385S-TRACE: CONSOLE-HIJACK-REJECTED"), 2 => write_line("TURKOS/OS/K1385S-TRACE: FILE-UNPUBLISHED-BY-CHILD"), _ => park(), } } 223 => { if episode.case != 1 || episode.calls != 1 || !unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REPLIED)) } || request().map(|(_, _, caller)| caller) != Some(pid) { park(); } frame.x[0] = unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_RESPONSE)) }; unsafe { write_volatile(core::ptr::addr_of_mut!(OS_K1385_REQUEST), None); write_volatile(core::ptr::addr_of_mut!(OS_K1385_REPLIED), false); write_volatile(core::ptr::addr_of_mut!(OS_K1385_COUNT), count() + 1); } } _ => frame.x[0] = abi::AbiResult::Err(abi::Errno::NoSys).encode(), } return 0; } if frame.x[7] == 2 && frame.x[8] == 3 { let request = turkos_os_user_runtime_abi::decode( frame.x[7], frame.x[8], core::array::from_fn(|i| frame.x[i])) .unwrap_or_else(|_| park()); let turkos_os_user_runtime_abi::Request::Exit(code) = request else { park(); }; if episode.case == 0 { if code != 0 || episode.calls != 2 || count() != 3 { park(); } } else if code != 42 || episode.calls != 1 || count() != 3 { park(); } table.exit_current(code).unwrap_or_else(|_| park()); let outcome = Outcome::Exited(code); if table.record(pid).map(|r| r.outcome) != Ok(Some(outcome)) { park(); } episode.outcome = Some(outcome); return 1; } if frame.x[7] != abi::ABI_VERSION { park(); } let mut abi_frame = turkos_os_exceptions::exceptions::Frame::EMPTY; abi_frame.x = frame.x; let call = abi::decode_call(&abi_frame).unwrap_or_else(|_| park()); if call == abi::Call::Role { if episode.calls != 0 { park(); } episode.calls = 1; frame.x[0] = episode.case as u64; return 0; } if let abi::Call::RunChild(1) = call { if episode.case != 0 || episode.calls == 0 || episode.calls > 2 || count() > 3 || request().is_some() && !unsafe { read_volatile(core::ptr::addr_of!(OS_K1385_REPLIED)) } { park(); } return os_k1215a_run_child(episode as *mut _, frame as *mut _, episode.launch.kernel_root); } park() }