SUPLib.cpp@ 22438

Last change on this file since 22438 was 22150, checked in by vboxsync, 15 years ago
IPRT,SUPDrv: Changed RTTHREADPREEMPTSTATE breaking binary compatibility - increased the major SUPDrv version.
Property svn:eol-style set to `native` Property svn:keywords set to `Author Date Id Revision`
File size: 72.8 KB

Line
1	/* $Id: SUPLib.cpp 22150 2009-08-11 09:41:58Z vboxsync $ */
2	/** @file
3	* VirtualBox Support Library - Common code.
4	*/
5
6	/*
7	* Copyright (C) 2006-2007 Sun Microsystems, Inc.
8	*
9	* This file is part of VirtualBox Open Source Edition (OSE), as
10	* available from http://www.virtualbox.org. This file is free software;
11	* you can redistribute it and/or modify it under the terms of the GNU
12	* General Public License (GPL) as published by the Free Software
13	* Foundation, in version 2 as it comes in the "COPYING" file of the
14	* VirtualBox OSE distribution. VirtualBox OSE is distributed in the
15	* hope that it will be useful, but WITHOUT ANY WARRANTY of any kind.
16	*
17	* The contents of this file may alternatively be used under the terms
18	* of the Common Development and Distribution License Version 1.0
19	* (CDDL) only, as it comes in the "COPYING.CDDL" file of the
20	* VirtualBox OSE distribution, in which case the provisions of the
21	* CDDL are applicable instead of those of the GPL.
22	*
23	* You may elect to license modified versions of this file under the
24	* terms and conditions of either the GPL or the CDDL or both.
25	*
26	* Please contact Sun Microsystems, Inc., 4150 Network Circle, Santa
27	* Clara, CA 95054 USA or visit http://www.sun.com if you need
28	* additional information or have any questions.
29	*/
30
31	/** @page pg_sup SUP - The Support Library
32	*
33	* The support library is responsible for providing facilities to load
34	* VMM Host Ring-0 code, to call Host VMM Ring-0 code from Ring-3 Host
35	* code, to pin down physical memory, and more.
36	*
37	* The VMM Host Ring-0 code can be combined in the support driver if
38	* permitted by kernel module license policies. If it is not combined
39	* it will be externalized in a .r0 module that will be loaded using
40	* the IPRT loader.
41	*
42	* The Ring-0 calling is done thru a generic SUP interface which will
43	* tranfer an argument set and call a predefined entry point in the Host
44	* VMM Ring-0 code.
45	*
46	* See @ref grp_sup "SUP - Support APIs" for API details.
47	*/
48
49	/*******************************************************************************
50	* Header Files *
51	*******************************************************************************/
52	#define LOG_GROUP LOG_GROUP_SUP
53	#include <VBox/sup.h>
54	#include <VBox/err.h>
55	#include <VBox/param.h>
56	#include <VBox/vmm.h>
57	#include <VBox/log.h>
58	#include <VBox/x86.h>
59
60	#include <iprt/assert.h>
61	#include <iprt/alloc.h>
62	#include <iprt/alloca.h>
63	#include <iprt/ldr.h>
64	#include <iprt/asm.h>
65	#include <iprt/mp.h>
66	#include <iprt/cpuset.h>
67	#include <iprt/thread.h>
68	#include <iprt/process.h>
69	#include <iprt/path.h>
70	#include <iprt/string.h>
71	#include <iprt/env.h>
72	#include <iprt/rand.h>
73
74	#include "SUPLibInternal.h"
75	#include "SUPDrvIOC.h"
76
77
78	/*******************************************************************************
79	* Defined Constants And Macros *
80	*******************************************************************************/
81	/** R0 VMM module name. */
82	#define VMMR0_NAME "VMMR0"
83
84
85	/*******************************************************************************
86	* Structures and Typedefs *
87	*******************************************************************************/
88	typedef DECLCALLBACK(int) FNCALLVMMR0(PVMR0 pVMR0, unsigned uOperation, void *pvArg);
89	typedef FNCALLVMMR0 *PFNCALLVMMR0;
90
91
92	/*******************************************************************************
93	* Global Variables *
94	*******************************************************************************/
95	/** Init counter. */
96	static uint32_t g_cInits = 0;
97	/** Whether we've been preinitied. */
98	static bool g_fPreInited = false;
99	/** The SUPLib instance data.
100	* Well, at least parts of it, specificly the parts that are being handed over
101	* via the pre-init mechanism from the hardened executable stub. */
102	SUPLIBDATA g_supLibData =
103	{
104	NIL_RTFILE
105	#if defined(RT_OS_DARWIN)
106	, NULL
107	#elif defined(RT_OS_LINUX)
108	, false
109	#endif
110	};
111
112	/** Pointer to the Global Information Page.
113	*
114	* This pointer is valid as long as SUPLib has a open session. Anyone using
115	* the page must treat this pointer as higly volatile and not trust it beyond
116	* one transaction.
117	*
118	* @todo This will probably deserve it's own session or some other good solution...
119	*/
120	DECLEXPORT(PSUPGLOBALINFOPAGE) g_pSUPGlobalInfoPage;
121	/** Address of the ring-0 mapping of the GIP. */
122	static PSUPGLOBALINFOPAGE g_pSUPGlobalInfoPageR0;
123	/** The physical address of the GIP. */
124	static RTHCPHYS g_HCPhysSUPGlobalInfoPage = NIL_RTHCPHYS;
125
126	/** The negotiated cookie. */
127	uint32_t g_u32Cookie = 0;
128	/** The negotiated session cookie. */
129	uint32_t g_u32SessionCookie;
130	/** Session handle. */
131	PSUPDRVSESSION g_pSession;
132	/** R0 SUP Functions used for resolving referenced to the SUPR0 module. */
133	static PSUPQUERYFUNCS g_pFunctions;
134
135	/** VMMR0 Load Address. */
136	static RTR0PTR g_pvVMMR0 = NIL_RTR0PTR;
137	/** PAGE_ALLOC_EX sans kernel mapping support indicator. */
138	static bool g_fSupportsPageAllocNoKernel = true;
139	/** Fake mode indicator. (~0 at first, 0 or 1 after first test) */
140	static uint32_t g_u32FakeMode = ~0;
141
142
143	/*******************************************************************************
144	* Internal Functions *
145	*******************************************************************************/
146	static int supInitFake(PSUPDRVSESSION *ppSession);
147	static int supLoadModule(const char pszFilename, const char pszModule, const char pszSrvReqHandler, void *ppvImageBase);
148	static DECLCALLBACK(int) supLoadModuleResolveImport(RTLDRMOD hLdrMod, const char pszModule, const char pszSymbol, unsigned uSymbol, RTUINTPTR pValue, void pvUser);
149
150
151	/** Touch a range of pages. */
152	DECLINLINE(void) supR3TouchPages(void *pv, size_t cPages)
153	{
154	uint32_t volatile pu32 = (uint32_t volatile )pv;
155	while (cPages-- > 0)
156	{
157	ASMAtomicCmpXchgU32(pu32, 0, 0);
158	pu32 += PAGE_SIZE / sizeof(uint32_t);
159	}
160	}
161
162
163	SUPR3DECL(int) SUPR3Install(void)
164	{
165	return suplibOsInstall();
166	}
167
168
169	SUPR3DECL(int) SUPR3Uninstall(void)
170	{
171	return suplibOsUninstall();
172	}
173
174
175	DECLEXPORT(int) supR3PreInit(PSUPPREINITDATA pPreInitData, uint32_t fFlags)
176	{
177	/*
178	* The caller is kind of trustworthy, just perform some basic checks.
179	*
180	* Note! Do not do any fancy stuff here because IPRT has NOT been
181	* initialized at this point.
182	*/
183	if (!VALID_PTR(pPreInitData))
184	return VERR_INVALID_POINTER;
185	if (g_fPreInited \|\| g_cInits > 0)
186	return VERR_WRONG_ORDER;
187
188	if ( pPreInitData->u32Magic != SUPPREINITDATA_MAGIC
189	\|\| pPreInitData->u32EndMagic != SUPPREINITDATA_MAGIC)
190	return VERR_INVALID_MAGIC;
191	if ( !(fFlags & SUPSECMAIN_FLAGS_DONT_OPEN_DEV)
192	&& pPreInitData->Data.hDevice == NIL_RTFILE)
193	return VERR_INVALID_HANDLE;
194	if ( (fFlags & SUPSECMAIN_FLAGS_DONT_OPEN_DEV)
195	&& pPreInitData->Data.hDevice != NIL_RTFILE)
196	return VERR_INVALID_PARAMETER;
197
198	/*
199	* Hand out the data.
200	*/
201	int rc = supR3HardenedRecvPreInitData(pPreInitData);
202	if (RT_FAILURE(rc))
203	return rc;
204
205	/** @todo This may need some small restructuring later, it doesn't quite work with a root service flag... */
206	if (!(fFlags & SUPSECMAIN_FLAGS_DONT_OPEN_DEV))
207	{
208	g_supLibData = pPreInitData->Data;
209	g_fPreInited = true;
210	}
211
212	return VINF_SUCCESS;
213	}
214
215
216	SUPR3DECL(int) SUPR3Init(PSUPDRVSESSION *ppSession)
217	{
218	/*
219	* Perform some sanity checks.
220	* (Got some trouble with compile time member alignment assertions.)
221	*/
222	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, u64NanoTSLastUpdateHz) & 0x7));
223	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, aCPUs) & 0x1f));
224	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, aCPUs[1]) & 0x1f));
225	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, aCPUs[0].u64NanoTS) & 0x7));
226	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, aCPUs[0].u64TSC) & 0x7));
227	Assert(!(RT_OFFSETOF(SUPGLOBALINFOPAGE, aCPUs[0].u64CpuHz) & 0x7));
228
229	/*
230	* Check if already initialized.
231	*/
232	if (ppSession)
233	*ppSession = g_pSession;
234	if (g_cInits++ > 0)
235	return VINF_SUCCESS;
236
237	/*
238	* Check for fake mode.
239	*
240	* Fake mode is used when we're doing smoke testing and debugging.
241	* It's also useful on platforms where we haven't root access or which
242	* we haven't ported the support driver to.
243	*/
244	if (g_u32FakeMode == ~0U)
245	{
246	const char *psz = RTEnvGet("VBOX_SUPLIB_FAKE");
247	if (psz && !strcmp(psz, "fake"))
248	ASMAtomicCmpXchgU32(&g_u32FakeMode, 1, ~0U);
249	else
250	ASMAtomicCmpXchgU32(&g_u32FakeMode, 0, ~0U);
251	}
252	if (RT_UNLIKELY(g_u32FakeMode))
253	return supInitFake(ppSession);
254
255	/*
256	* Open the support driver.
257	*/
258	int rc = suplibOsInit(&g_supLibData, g_fPreInited);
259	if (RT_SUCCESS(rc))
260	{
261	/*
262	* Negotiate the cookie.
263	*/
264	SUPCOOKIE CookieReq;
265	memset(&CookieReq, 0xff, sizeof(CookieReq));
266	CookieReq.Hdr.u32Cookie = SUPCOOKIE_INITIAL_COOKIE;
267	CookieReq.Hdr.u32SessionCookie = RTRandU32();
268	CookieReq.Hdr.cbIn = SUP_IOCTL_COOKIE_SIZE_IN;
269	CookieReq.Hdr.cbOut = SUP_IOCTL_COOKIE_SIZE_OUT;
270	CookieReq.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
271	CookieReq.Hdr.rc = VERR_INTERNAL_ERROR;
272	strcpy(CookieReq.u.In.szMagic, SUPCOOKIE_MAGIC);
273	CookieReq.u.In.u32ReqVersion = SUPDRV_IOC_VERSION;
274	const uint32_t MinVersion = (SUPDRV_IOC_VERSION & 0xffff0000) == 0x000f0000
275	? 0x000f0000
276	: SUPDRV_IOC_VERSION & 0xffff0000;
277	CookieReq.u.In.u32MinVersion = MinVersion;
278	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_COOKIE, &CookieReq, SUP_IOCTL_COOKIE_SIZE);
279	if ( RT_SUCCESS(rc)
280	&& RT_SUCCESS(CookieReq.Hdr.rc))
281	{
282	if ( (CookieReq.u.Out.u32SessionVersion & 0xffff0000) == (SUPDRV_IOC_VERSION & 0xffff0000)
283	&& CookieReq.u.Out.u32SessionVersion >= MinVersion)
284	{
285	/*
286	* Query the functions.
287	*/
288	PSUPQUERYFUNCS pFuncsReq = (PSUPQUERYFUNCS)RTMemAllocZ(SUP_IOCTL_QUERY_FUNCS_SIZE(CookieReq.u.Out.cFunctions));
289	if (pFuncsReq)
290	{
291	pFuncsReq->Hdr.u32Cookie = CookieReq.u.Out.u32Cookie;
292	pFuncsReq->Hdr.u32SessionCookie = CookieReq.u.Out.u32SessionCookie;
293	pFuncsReq->Hdr.cbIn = SUP_IOCTL_QUERY_FUNCS_SIZE_IN;
294	pFuncsReq->Hdr.cbOut = SUP_IOCTL_QUERY_FUNCS_SIZE_OUT(CookieReq.u.Out.cFunctions);
295	pFuncsReq->Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
296	pFuncsReq->Hdr.rc = VERR_INTERNAL_ERROR;
297	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_QUERY_FUNCS(CookieReq.u.Out.cFunctions), pFuncsReq, SUP_IOCTL_QUERY_FUNCS_SIZE(CookieReq.u.Out.cFunctions));
298	if (RT_SUCCESS(rc))
299	rc = pFuncsReq->Hdr.rc;
300	if (RT_SUCCESS(rc))
301	{
302	/*
303	* Map the GIP into userspace.
304	*/
305	Assert(!g_pSUPGlobalInfoPage);
306	SUPGIPMAP GipMapReq;
307	GipMapReq.Hdr.u32Cookie = CookieReq.u.Out.u32Cookie;
308	GipMapReq.Hdr.u32SessionCookie = CookieReq.u.Out.u32SessionCookie;
309	GipMapReq.Hdr.cbIn = SUP_IOCTL_GIP_MAP_SIZE_IN;
310	GipMapReq.Hdr.cbOut = SUP_IOCTL_GIP_MAP_SIZE_OUT;
311	GipMapReq.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
312	GipMapReq.Hdr.rc = VERR_INTERNAL_ERROR;
313	GipMapReq.u.Out.HCPhysGip = NIL_RTHCPHYS;
314	GipMapReq.u.Out.pGipR0 = NIL_RTR0PTR;
315	GipMapReq.u.Out.pGipR3 = NULL;
316	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_GIP_MAP, &GipMapReq, SUP_IOCTL_GIP_MAP_SIZE);
317	if (RT_SUCCESS(rc))
318	rc = GipMapReq.Hdr.rc;
319	if (RT_SUCCESS(rc))
320	{
321	AssertRelease(GipMapReq.u.Out.pGipR3->u32Magic == SUPGLOBALINFOPAGE_MAGIC);
322	AssertRelease(GipMapReq.u.Out.pGipR3->u32Version >= SUPGLOBALINFOPAGE_VERSION);
323
324	/*
325	* Set the globals and return success.
326	*/
327	ASMAtomicXchgSize(&g_HCPhysSUPGlobalInfoPage, GipMapReq.u.Out.HCPhysGip);
328	ASMAtomicCmpXchgPtr((void * volatile *)&g_pSUPGlobalInfoPage, GipMapReq.u.Out.pGipR3, NULL);
329	ASMAtomicCmpXchgPtr((void * volatile )&g_pSUPGlobalInfoPageR0, (void )GipMapReq.u.Out.pGipR0, NULL);
330
331	g_u32Cookie = CookieReq.u.Out.u32Cookie;
332	g_u32SessionCookie = CookieReq.u.Out.u32SessionCookie;
333	g_pSession = CookieReq.u.Out.pSession;
334	g_pFunctions = pFuncsReq;
335	if (ppSession)
336	*ppSession = CookieReq.u.Out.pSession;
337	return VINF_SUCCESS;
338	}
339	}
340
341	/* bailout */
342	RTMemFree(pFuncsReq);
343	}
344	else
345	rc = VERR_NO_MEMORY;
346	}
347	else
348	{
349	LogRel(("Support driver version mismatch: SessionVersion=%#x DriverVersion=%#x ClientVersion=%#x MinVersion=%#x\n",
350	CookieReq.u.Out.u32SessionVersion, CookieReq.u.Out.u32DriverVersion, SUPDRV_IOC_VERSION, MinVersion));
351	rc = VERR_VM_DRIVER_VERSION_MISMATCH;
352	}
353	}
354	else
355	{
356	if (RT_SUCCESS(rc))
357	{
358	rc = CookieReq.Hdr.rc;
359	LogRel(("Support driver version mismatch: DriverVersion=%#x ClientVersion=%#x rc=%Rrc\n",
360	CookieReq.u.Out.u32DriverVersion, SUPDRV_IOC_VERSION, rc));
361	if (rc != VERR_VM_DRIVER_VERSION_MISMATCH)
362	rc = VERR_VM_DRIVER_VERSION_MISMATCH;
363	}
364	else
365	{
366	/* for pre 0x00060000 drivers */
367	LogRel(("Support driver version mismatch: DriverVersion=too-old ClientVersion=%#x\n", SUPDRV_IOC_VERSION));
368	rc = VERR_VM_DRIVER_VERSION_MISMATCH;
369	}
370	}
371
372	suplibOsTerm(&g_supLibData);
373	}
374	g_cInits--;
375
376	return rc;
377	}
378
379	/**
380	* Fake mode init.
381	*/
382	static int supInitFake(PSUPDRVSESSION *ppSession)
383	{
384	Log(("SUP: Fake mode!\n"));
385	static const SUPFUNC s_aFakeFunctions[] =
386	{
387	/* name function */
388	{ "SUPR0AbsIs64bit", 0 },
389	{ "SUPR0Abs64bitKernelCS", 0 },
390	{ "SUPR0Abs64bitKernelSS", 0 },
391	{ "SUPR0Abs64bitKernelDS", 0 },
392	{ "SUPR0AbsKernelCS", 8 },
393	{ "SUPR0AbsKernelSS", 16 },
394	{ "SUPR0AbsKernelDS", 16 },
395	{ "SUPR0AbsKernelES", 16 },
396	{ "SUPR0AbsKernelFS", 24 },
397	{ "SUPR0AbsKernelGS", 32 },
398	{ "SUPR0ComponentRegisterFactory", 0xefeefffd },
399	{ "SUPR0ComponentDeregisterFactory", 0xefeefffe },
400	{ "SUPR0ComponentQueryFactory", 0xefeeffff },
401	{ "SUPR0ObjRegister", 0xefef0000 },
402	{ "SUPR0ObjAddRef", 0xefef0001 },
403	{ "SUPR0ObjAddRefEx", 0xefef0001 },
404	{ "SUPR0ObjRelease", 0xefef0002 },
405	{ "SUPR0ObjVerifyAccess", 0xefef0003 },
406	{ "SUPR0LockMem", 0xefef0004 },
407	{ "SUPR0UnlockMem", 0xefef0005 },
408	{ "SUPR0ContAlloc", 0xefef0006 },
409	{ "SUPR0ContFree", 0xefef0007 },
410	{ "SUPR0MemAlloc", 0xefef0008 },
411	{ "SUPR0MemGetPhys", 0xefef0009 },
412	{ "SUPR0MemFree", 0xefef000a },
413	{ "SUPR0Printf", 0xefef000b },
414	{ "SUPR0GetPagingMode", 0xefef000c },
415	{ "SUPR0EnableVTx", 0xefef000c },
416	{ "RTMemAlloc", 0xefef000d },
417	{ "RTMemAllocZ", 0xefef000e },
418	{ "RTMemFree", 0xefef000f },
419	{ "RTR0MemObjAddress", 0xefef0010 },
420	{ "RTR0MemObjAddressR3", 0xefef0011 },
421	{ "RTR0MemObjAllocPage", 0xefef0012 },
422	{ "RTR0MemObjAllocPhysNC", 0xefef0013 },
423	{ "RTR0MemObjAllocLow", 0xefef0014 },
424	{ "RTR0MemObjEnterPhys", 0xefef0014 },
425	{ "RTR0MemObjFree", 0xefef0015 },
426	{ "RTR0MemObjGetPagePhysAddr", 0xefef0016 },
427	{ "RTR0MemObjMapUser", 0xefef0017 },
428	{ "RTR0MemObjMapKernel", 0xefef0017 },
429	{ "RTR0MemObjMapKernelEx", 0xefef0017 },
430	{ "RTProcSelf", 0xefef0038 },
431	{ "RTR0ProcHandleSelf", 0xefef0039 },
432	{ "RTSemEventCreate", 0xefef0018 },
433	{ "RTSemEventSignal", 0xefef0019 },
434	{ "RTSemEventWait", 0xefef001a },
435	{ "RTSemEventWaitNoResume", 0xefef001b },
436	{ "RTSemEventDestroy", 0xefef001c },
437	{ "RTSemEventMultiCreate", 0xefef001d },
438	{ "RTSemEventMultiSignal", 0xefef001e },
439	{ "RTSemEventMultiReset", 0xefef001f },
440	{ "RTSemEventMultiWait", 0xefef0020 },
441	{ "RTSemEventMultiWaitNoResume", 0xefef0021 },
442	{ "RTSemEventMultiDestroy", 0xefef0022 },
443	{ "RTSemFastMutexCreate", 0xefef0023 },
444	{ "RTSemFastMutexDestroy", 0xefef0024 },
445	{ "RTSemFastMutexRequest", 0xefef0025 },
446	{ "RTSemFastMutexRelease", 0xefef0026 },
447	{ "RTSpinlockCreate", 0xefef0027 },
448	{ "RTSpinlockDestroy", 0xefef0028 },
449	{ "RTSpinlockAcquire", 0xefef0029 },
450	{ "RTSpinlockRelease", 0xefef002a },
451	{ "RTSpinlockAcquireNoInts", 0xefef002b },
452	{ "RTSpinlockReleaseNoInts", 0xefef002c },
453	{ "RTTimeNanoTS", 0xefef002d },
454	{ "RTTimeMillieTS", 0xefef002e },
455	{ "RTTimeSystemNanoTS", 0xefef002f },
456	{ "RTTimeSystemMillieTS", 0xefef0030 },
457	{ "RTThreadNativeSelf", 0xefef0031 },
458	{ "RTThreadSleep", 0xefef0032 },
459	{ "RTThreadYield", 0xefef0033 },
460	{ "RTLogDefaultInstance", 0xefef0034 },
461	{ "RTLogRelDefaultInstance", 0xefef0035 },
462	{ "RTLogSetDefaultInstanceThread", 0xefef0036 },
463	{ "RTLogLogger", 0xefef0037 },
464	{ "RTLogLoggerEx", 0xefef0038 },
465	{ "RTLogLoggerExV", 0xefef0039 },
466	{ "AssertMsg1", 0xefef003a },
467	{ "AssertMsg2", 0xefef003b },
468	{ "RTAssertMsg1", 0xefef003c },
469	{ "RTAssertMsg2", 0xefef003d },
470	{ "RTAssertMsg2V", 0xefef003e },
471	};
472
473	/* fake r0 functions. */
474	g_pFunctions = (PSUPQUERYFUNCS)RTMemAllocZ(SUP_IOCTL_QUERY_FUNCS_SIZE(RT_ELEMENTS(s_aFakeFunctions)));
475	if (g_pFunctions)
476	{
477	g_pFunctions->u.Out.cFunctions = RT_ELEMENTS(s_aFakeFunctions);
478	memcpy(&g_pFunctions->u.Out.aFunctions[0], &s_aFakeFunctions[0], sizeof(s_aFakeFunctions));
479	g_pSession = (PSUPDRVSESSION)(void *)g_pFunctions;
480	if (ppSession)
481	*ppSession = g_pSession;
482
483	/* fake the GIP. */
484	g_pSUPGlobalInfoPage = (PSUPGLOBALINFOPAGE)RTMemPageAllocZ(PAGE_SIZE);
485	if (g_pSUPGlobalInfoPage)
486	{
487	g_pSUPGlobalInfoPageR0 = g_pSUPGlobalInfoPage;
488	g_HCPhysSUPGlobalInfoPage = NIL_RTHCPHYS & ~(RTHCPHYS)PAGE_OFFSET_MASK;
489	/* the page is supposed to be invalid, so don't set the magic. */
490	return VINF_SUCCESS;
491	}
492
493	RTMemFree(g_pFunctions);
494	g_pFunctions = NULL;
495	}
496	return VERR_NO_MEMORY;
497	}
498
499
500	SUPR3DECL(int) SUPR3Term(bool fForced)
501	{
502	/*
503	* Verify state.
504	*/
505	AssertMsg(g_cInits > 0, ("SUPR3Term() is called before SUPR3Init()!\n"));
506	if (g_cInits == 0)
507	return VERR_WRONG_ORDER;
508	if (g_cInits == 1 \|\| fForced)
509	{
510	/*
511	* NULL the GIP pointer.
512	*/
513	if (g_pSUPGlobalInfoPage)
514	{
515	ASMAtomicXchgPtr((void * volatile *)&g_pSUPGlobalInfoPage, NULL);
516	ASMAtomicXchgPtr((void * volatile *)&g_pSUPGlobalInfoPageR0, NULL);
517	ASMAtomicXchgSize(&g_HCPhysSUPGlobalInfoPage, NIL_RTHCPHYS);
518	/* just a little safe guard against threads using the page. */
519	RTThreadSleep(50);
520	}
521
522	/*
523	* Close the support driver.
524	*/
525	int rc = suplibOsTerm(&g_supLibData);
526	if (rc)
527	return rc;
528
529	g_u32Cookie = 0;
530	g_u32SessionCookie = 0;
531	g_cInits = 0;
532	}
533	else
534	g_cInits--;
535
536	return 0;
537	}
538
539
540	SUPR3DECL(SUPPAGINGMODE) SUPR3GetPagingMode(void)
541	{
542	/* fake */
543	if (RT_UNLIKELY(g_u32FakeMode))
544	#ifdef RT_ARCH_AMD64
545	return SUPPAGINGMODE_AMD64_GLOBAL_NX;
546	#else
547	return SUPPAGINGMODE_32_BIT_GLOBAL;
548	#endif
549
550	/*
551	* Issue IOCtl to the SUPDRV kernel module.
552	*/
553	SUPGETPAGINGMODE Req;
554	Req.Hdr.u32Cookie = g_u32Cookie;
555	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
556	Req.Hdr.cbIn = SUP_IOCTL_GET_PAGING_MODE_SIZE_IN;
557	Req.Hdr.cbOut = SUP_IOCTL_GET_PAGING_MODE_SIZE_OUT;
558	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
559	Req.Hdr.rc = VERR_INTERNAL_ERROR;
560	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_GET_PAGING_MODE, &Req, SUP_IOCTL_GET_PAGING_MODE_SIZE);
561	if ( RT_FAILURE(rc)
562	\|\| RT_FAILURE(Req.Hdr.rc))
563	{
564	LogRel(("SUPR3GetPagingMode: %Rrc %Rrc\n", rc, Req.Hdr.rc));
565	Req.u.Out.enmMode = SUPPAGINGMODE_INVALID;
566	}
567
568	return Req.u.Out.enmMode;
569	}
570
571
572	/**
573	* For later.
574	*/
575	static int supCallVMMR0ExFake(PVMR0 pVMR0, unsigned uOperation, uint64_t u64Arg, PSUPVMMR0REQHDR pReqHdr)
576	{
577	AssertMsgFailed(("%d\n", uOperation));
578	return VERR_NOT_SUPPORTED;
579	}
580
581
582	SUPR3DECL(int) SUPR3CallVMMR0Fast(PVMR0 pVMR0, unsigned uOperation, VMCPUID idCpu)
583	{
584	if (RT_LIKELY(uOperation == SUP_VMMR0_DO_RAW_RUN))
585	return suplibOsIOCtlFast(&g_supLibData, SUP_IOCTL_FAST_DO_RAW_RUN, idCpu);
586	if (RT_LIKELY(uOperation == SUP_VMMR0_DO_HWACC_RUN))
587	return suplibOsIOCtlFast(&g_supLibData, SUP_IOCTL_FAST_DO_HWACC_RUN, idCpu);
588	if (RT_LIKELY(uOperation == SUP_VMMR0_DO_NOP))
589	return suplibOsIOCtlFast(&g_supLibData, SUP_IOCTL_FAST_DO_NOP, idCpu);
590
591	AssertMsgFailed(("%#x\n", uOperation));
592	return VERR_INTERNAL_ERROR;
593	}
594
595
596	SUPR3DECL(int) SUPR3CallVMMR0Ex(PVMR0 pVMR0, VMCPUID idCpu, unsigned uOperation, uint64_t u64Arg, PSUPVMMR0REQHDR pReqHdr)
597	{
598	/*
599	* The following operations don't belong here.
600	*/
601	AssertMsgReturn( uOperation != SUP_VMMR0_DO_RAW_RUN
602	&& uOperation != SUP_VMMR0_DO_HWACC_RUN
603	&& uOperation != SUP_VMMR0_DO_NOP,
604	("%#x\n", uOperation),
605	VERR_INTERNAL_ERROR);
606
607	/* fake */
608	if (RT_UNLIKELY(g_u32FakeMode))
609	return supCallVMMR0ExFake(pVMR0, uOperation, u64Arg, pReqHdr);
610
611	int rc;
612	if (!pReqHdr)
613	{
614	/* no data. */
615	SUPCALLVMMR0 Req;
616	Req.Hdr.u32Cookie = g_u32Cookie;
617	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
618	Req.Hdr.cbIn = SUP_IOCTL_CALL_VMMR0_SIZE_IN(0);
619	Req.Hdr.cbOut = SUP_IOCTL_CALL_VMMR0_SIZE_OUT(0);
620	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
621	Req.Hdr.rc = VERR_INTERNAL_ERROR;
622	Req.u.In.pVMR0 = pVMR0;
623	Req.u.In.idCpu = idCpu;
624	Req.u.In.uOperation = uOperation;
625	Req.u.In.u64Arg = u64Arg;
626	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CALL_VMMR0(0), &Req, SUP_IOCTL_CALL_VMMR0_SIZE(0));
627	if (RT_SUCCESS(rc))
628	rc = Req.Hdr.rc;
629	}
630	else if (SUP_IOCTL_CALL_VMMR0_SIZE(pReqHdr->cbReq) < _4K) /* FreeBSD won't copy more than 4K. */
631	{
632	AssertPtrReturn(pReqHdr, VERR_INVALID_POINTER);
633	AssertReturn(pReqHdr->u32Magic == SUPVMMR0REQHDR_MAGIC, VERR_INVALID_MAGIC);
634	const size_t cbReq = pReqHdr->cbReq;
635
636	PSUPCALLVMMR0 pReq = (PSUPCALLVMMR0)alloca(SUP_IOCTL_CALL_VMMR0_SIZE(cbReq));
637	pReq->Hdr.u32Cookie = g_u32Cookie;
638	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
639	pReq->Hdr.cbIn = SUP_IOCTL_CALL_VMMR0_SIZE_IN(cbReq);
640	pReq->Hdr.cbOut = SUP_IOCTL_CALL_VMMR0_SIZE_OUT(cbReq);
641	pReq->Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
642	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
643	pReq->u.In.pVMR0 = pVMR0;
644	pReq->u.In.idCpu = idCpu;
645	pReq->u.In.uOperation = uOperation;
646	pReq->u.In.u64Arg = u64Arg;
647	memcpy(&pReq->abReqPkt[0], pReqHdr, cbReq);
648	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CALL_VMMR0(cbReq), pReq, SUP_IOCTL_CALL_VMMR0_SIZE(cbReq));
649	if (RT_SUCCESS(rc))
650	rc = pReq->Hdr.rc;
651	memcpy(pReqHdr, &pReq->abReqPkt[0], cbReq);
652	}
653	else /** @todo may have to remove the size limits one this request... */
654	AssertMsgFailedReturn(("cbReq=%#x\n", pReqHdr->cbReq), VERR_INTERNAL_ERROR);
655	return rc;
656	}
657
658
659	SUPR3DECL(int) SUPR3CallVMMR0(PVMR0 pVMR0, VMCPUID idCpu, unsigned uOperation, void *pvArg)
660	{
661	/*
662	* The following operations don't belong here.
663	*/
664	AssertMsgReturn( uOperation != SUP_VMMR0_DO_RAW_RUN
665	&& uOperation != SUP_VMMR0_DO_HWACC_RUN
666	&& uOperation != SUP_VMMR0_DO_NOP,
667	("%#x\n", uOperation),
668	VERR_INTERNAL_ERROR);
669	return SUPR3CallVMMR0Ex(pVMR0, idCpu, uOperation, (uintptr_t)pvArg, NULL);
670	}
671
672
673	SUPR3DECL(int) SUPR3SetVMForFastIOCtl(PVMR0 pVMR0)
674	{
675	if (RT_UNLIKELY(g_u32FakeMode))
676	return VINF_SUCCESS;
677
678	SUPSETVMFORFAST Req;
679	Req.Hdr.u32Cookie = g_u32Cookie;
680	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
681	Req.Hdr.cbIn = SUP_IOCTL_SET_VM_FOR_FAST_SIZE_IN;
682	Req.Hdr.cbOut = SUP_IOCTL_SET_VM_FOR_FAST_SIZE_OUT;
683	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
684	Req.Hdr.rc = VERR_INTERNAL_ERROR;
685	Req.u.In.pVMR0 = pVMR0;
686	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_SET_VM_FOR_FAST, &Req, SUP_IOCTL_SET_VM_FOR_FAST_SIZE);
687	if (RT_SUCCESS(rc))
688	rc = Req.Hdr.rc;
689	return rc;
690	}
691
692
693	SUPR3DECL(int) SUPR3CallR0Service(const char *pszService, size_t cchService, uint32_t uOperation, uint64_t u64Arg, PSUPR0SERVICEREQHDR pReqHdr)
694	{
695	AssertReturn(cchService < RT_SIZEOFMEMB(SUPCALLSERVICE, u.In.szName), VERR_INVALID_PARAMETER);
696	Assert(strlen(pszService) == cchService);
697
698	/* fake */
699	if (RT_UNLIKELY(g_u32FakeMode))
700	return VERR_NOT_SUPPORTED;
701
702	int rc;
703	if (!pReqHdr)
704	{
705	/* no data. */
706	SUPCALLSERVICE Req;
707	Req.Hdr.u32Cookie = g_u32Cookie;
708	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
709	Req.Hdr.cbIn = SUP_IOCTL_CALL_SERVICE_SIZE_IN(0);
710	Req.Hdr.cbOut = SUP_IOCTL_CALL_SERVICE_SIZE_OUT(0);
711	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
712	Req.Hdr.rc = VERR_INTERNAL_ERROR;
713	memcpy(Req.u.In.szName, pszService, cchService);
714	Req.u.In.szName[cchService] = '\0';
715	Req.u.In.uOperation = uOperation;
716	Req.u.In.u64Arg = u64Arg;
717	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CALL_SERVICE(0), &Req, SUP_IOCTL_CALL_SERVICE_SIZE(0));
718	if (RT_SUCCESS(rc))
719	rc = Req.Hdr.rc;
720	}
721	else if (SUP_IOCTL_CALL_SERVICE_SIZE(pReqHdr->cbReq) < _4K) /* FreeBSD won't copy more than 4K. */
722	{
723	AssertPtrReturn(pReqHdr, VERR_INVALID_POINTER);
724	AssertReturn(pReqHdr->u32Magic == SUPR0SERVICEREQHDR_MAGIC, VERR_INVALID_MAGIC);
725	const size_t cbReq = pReqHdr->cbReq;
726
727	PSUPCALLSERVICE pReq = (PSUPCALLSERVICE)alloca(SUP_IOCTL_CALL_SERVICE_SIZE(cbReq));
728	pReq->Hdr.u32Cookie = g_u32Cookie;
729	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
730	pReq->Hdr.cbIn = SUP_IOCTL_CALL_SERVICE_SIZE_IN(cbReq);
731	pReq->Hdr.cbOut = SUP_IOCTL_CALL_SERVICE_SIZE_OUT(cbReq);
732	pReq->Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
733	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
734	memcpy(pReq->u.In.szName, pszService, cchService);
735	pReq->u.In.szName[cchService] = '\0';
736	pReq->u.In.uOperation = uOperation;
737	pReq->u.In.u64Arg = u64Arg;
738	memcpy(&pReq->abReqPkt[0], pReqHdr, cbReq);
739	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CALL_SERVICE(cbReq), pReq, SUP_IOCTL_CALL_SERVICE_SIZE(cbReq));
740	if (RT_SUCCESS(rc))
741	rc = pReq->Hdr.rc;
742	memcpy(pReqHdr, &pReq->abReqPkt[0], cbReq);
743	}
744	else /** @todo may have to remove the size limits one this request... */
745	AssertMsgFailedReturn(("cbReq=%#x\n", pReqHdr->cbReq), VERR_INTERNAL_ERROR);
746	return rc;
747	}
748
749
750	/**
751	* Worker for the SUPR3Logger* APIs.
752	*
753	* @returns VBox status code.
754	* @param enmWhich Which logger.
755	* @param fWhat What to do with the logger.
756	* @param pszFlags The flags settings.
757	* @param pszGroups The groups settings.
758	* @param pszDest The destionation specificier.
759	*/
760	static int supR3LoggerSettings(SUPLOGGER enmWhich, uint32_t fWhat, const char pszFlags, const char pszGroups, const char *pszDest)
761	{
762	uint32_t const cchFlags = pszFlags ? (uint32_t)strlen(pszFlags) : 0;
763	uint32_t const cchGroups = pszGroups ? (uint32_t)strlen(pszGroups) : 0;
764	uint32_t const cchDest = pszDest ? (uint32_t)strlen(pszDest) : 0;
765	uint32_t const cbStrTab = cchFlags + !!cchFlags
766	+ cchGroups + !!cchGroups
767	+ cchDest + !!cchDest
768	+ (!cchFlags && !cchGroups && !cchDest);
769
770	PSUPLOGGERSETTINGS pReq = (PSUPLOGGERSETTINGS)alloca(SUP_IOCTL_LOGGER_SETTINGS_SIZE(cbStrTab));
771	pReq->Hdr.u32Cookie = g_u32Cookie;
772	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
773	pReq->Hdr.cbIn = SUP_IOCTL_LOGGER_SETTINGS_SIZE_IN(cbStrTab);
774	pReq->Hdr.cbOut = SUP_IOCTL_LOGGER_SETTINGS_SIZE_OUT;
775	pReq->Hdr.fFlags= SUPREQHDR_FLAGS_DEFAULT;
776	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
777	switch (enmWhich)
778	{
779	case SUPLOGGER_DEBUG: pReq->u.In.fWhich = SUPLOGGERSETTINGS_WHICH_DEBUG; break;
780	case SUPLOGGER_RELEASE: pReq->u.In.fWhich = SUPLOGGERSETTINGS_WHICH_RELEASE; break;
781	default:
782	return VERR_INVALID_PARAMETER;
783	}
784	pReq->u.In.fWhat = fWhat;
785
786	uint32_t off = 0;
787	if (cchFlags)
788	{
789	pReq->u.In.offFlags = off;
790	memcpy(&pReq->u.In.szStrings[off], pszFlags, cchFlags + 1);
791	off += cchFlags + 1;
792	}
793	else
794	pReq->u.In.offFlags = cbStrTab - 1;
795
796	if (cchGroups)
797	{
798	pReq->u.In.offGroups = off;
799	memcpy(&pReq->u.In.szStrings[off], pszGroups, cchGroups + 1);
800	off += cchGroups + 1;
801	}
802	else
803	pReq->u.In.offGroups = cbStrTab - 1;
804
805	if (cchDest)
806	{
807	pReq->u.In.offDestination = off;
808	memcpy(&pReq->u.In.szStrings[off], pszDest, cchDest + 1);
809	off += cchDest + 1;
810	}
811	else
812	pReq->u.In.offDestination = cbStrTab - 1;
813
814	if (!off)
815	{
816	pReq->u.In.szStrings[0] = '\0';
817	off++;
818	}
819	Assert(off == cbStrTab);
820	Assert(pReq->u.In.szStrings[cbStrTab - 1] == '\0');
821
822
823	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LOGGER_SETTINGS(cbStrTab), pReq, SUP_IOCTL_LOGGER_SETTINGS_SIZE(cbStrTab));
824	if (RT_SUCCESS(rc))
825	rc = pReq->Hdr.rc;
826	return rc;
827	}
828
829
830	SUPR3DECL(int) SUPR3LoggerSettings(SUPLOGGER enmWhich, const char pszFlags, const char pszGroups, const char *pszDest)
831	{
832	return supR3LoggerSettings(enmWhich, SUPLOGGERSETTINGS_WHAT_SETTINGS, pszFlags, pszGroups, pszDest);
833	}
834
835
836	SUPR3DECL(int) SUPR3LoggerCreate(SUPLOGGER enmWhich, const char pszFlags, const char pszGroups, const char *pszDest)
837	{
838	return supR3LoggerSettings(enmWhich, SUPLOGGERSETTINGS_WHAT_CREATE, pszFlags, pszGroups, pszDest);
839	}
840
841
842	SUPR3DECL(int) SUPR3LoggerDestroy(SUPLOGGER enmWhich)
843	{
844	return supR3LoggerSettings(enmWhich, SUPLOGGERSETTINGS_WHAT_DESTROY, NULL, NULL, NULL);
845	}
846
847
848	SUPR3DECL(int) SUPR3PageAlloc(size_t cPages, void **ppvPages)
849	{
850	/*
851	* Validate.
852	*/
853	AssertPtrReturn(ppvPages, VERR_INVALID_POINTER);
854	*ppvPages = NULL;
855	AssertReturn(cPages > 0, VERR_PAGE_COUNT_OUT_OF_RANGE);
856
857	/*
858	* Call OS specific worker.
859	*/
860	return suplibOsPageAlloc(&g_supLibData, cPages, ppvPages);
861	}
862
863
864	SUPR3DECL(int) SUPR3PageFree(void *pvPages, size_t cPages)
865	{
866	/*
867	* Validate.
868	*/
869	AssertPtrReturn(pvPages, VERR_INVALID_POINTER);
870	AssertReturn(cPages > 0, VERR_PAGE_COUNT_OUT_OF_RANGE);
871
872	/*
873	* Call OS specific worker.
874	*/
875	return suplibOsPageFree(&g_supLibData, pvPages, cPages);
876	}
877
878
879	/**
880	* Locks down the physical memory backing a virtual memory
881	* range in the current process.
882	*
883	* @returns VBox status code.
884	* @param pvStart Start of virtual memory range.
885	* Must be page aligned.
886	* @param cPages Number of pages.
887	* @param paPages Where to store the physical page addresses returned.
888	* On entry this will point to an array of with cbMemory >> PAGE_SHIFT entries.
889	*/
890	SUPR3DECL(int) supR3PageLock(void *pvStart, size_t cPages, PSUPPAGE paPages)
891	{
892	/*
893	* Validate.
894	*/
895	AssertPtr(pvStart);
896	AssertMsg(RT_ALIGN_P(pvStart, PAGE_SIZE) == pvStart, ("pvStart (%p) must be page aligned\n", pvStart));
897	AssertPtr(paPages);
898
899	/* fake */
900	if (RT_UNLIKELY(g_u32FakeMode))
901	{
902	RTHCPHYS Phys = (uintptr_t)pvStart + PAGE_SIZE * 1024;
903	size_t iPage = cPages;
904	while (iPage-- > 0)
905	paPages[iPage].Phys = Phys + (iPage << PAGE_SHIFT);
906	return VINF_SUCCESS;
907	}
908
909	/*
910	* Issue IOCtl to the SUPDRV kernel module.
911	*/
912	int rc;
913	PSUPPAGELOCK pReq = (PSUPPAGELOCK)RTMemTmpAllocZ(SUP_IOCTL_PAGE_LOCK_SIZE(cPages));
914	if (RT_LIKELY(pReq))
915	{
916	pReq->Hdr.u32Cookie = g_u32Cookie;
917	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
918	pReq->Hdr.cbIn = SUP_IOCTL_PAGE_LOCK_SIZE_IN;
919	pReq->Hdr.cbOut = SUP_IOCTL_PAGE_LOCK_SIZE_OUT(cPages);
920	pReq->Hdr.fFlags = SUPREQHDR_FLAGS_MAGIC \| SUPREQHDR_FLAGS_EXTRA_OUT;
921	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
922	pReq->u.In.pvR3 = pvStart;
923	pReq->u.In.cPages = (uint32_t)cPages; AssertRelease(pReq->u.In.cPages == cPages);
924	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_LOCK, pReq, SUP_IOCTL_PAGE_LOCK_SIZE(cPages));
925	if (RT_SUCCESS(rc))
926	rc = pReq->Hdr.rc;
927	if (RT_SUCCESS(rc))
928	{
929	for (uint32_t iPage = 0; iPage < cPages; iPage++)
930	{
931	paPages[iPage].uReserved = 0;
932	paPages[iPage].Phys = pReq->u.Out.aPages[iPage];
933	Assert(!(paPages[iPage].Phys & ~X86_PTE_PAE_PG_MASK));
934	}
935	}
936	RTMemTmpFree(pReq);
937	}
938	else
939	rc = VERR_NO_TMP_MEMORY;
940
941	return rc;
942	}
943
944
945	/**
946	* Releases locked down pages.
947	*
948	* @returns VBox status code.
949	* @param pvStart Start of virtual memory range previously locked
950	* down by SUPPageLock().
951	*/
952	SUPR3DECL(int) supR3PageUnlock(void *pvStart)
953	{
954	/*
955	* Validate.
956	*/
957	AssertPtr(pvStart);
958	AssertMsg(RT_ALIGN_P(pvStart, PAGE_SIZE) == pvStart, ("pvStart (%p) must be page aligned\n", pvStart));
959
960	/* fake */
961	if (RT_UNLIKELY(g_u32FakeMode))
962	return VINF_SUCCESS;
963
964	/*
965	* Issue IOCtl to the SUPDRV kernel module.
966	*/
967	SUPPAGEUNLOCK Req;
968	Req.Hdr.u32Cookie = g_u32Cookie;
969	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
970	Req.Hdr.cbIn = SUP_IOCTL_PAGE_UNLOCK_SIZE_IN;
971	Req.Hdr.cbOut = SUP_IOCTL_PAGE_UNLOCK_SIZE_OUT;
972	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
973	Req.Hdr.rc = VERR_INTERNAL_ERROR;
974	Req.u.In.pvR3 = pvStart;
975	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_UNLOCK, &Req, SUP_IOCTL_PAGE_UNLOCK_SIZE);
976	if (RT_SUCCESS(rc))
977	rc = Req.Hdr.rc;
978	return rc;
979	}
980
981
982	/**
983	* Fallback for SUPR3PageAllocEx on systems where RTR0MemObjPhysAllocNC isn't
984	* supported.
985	*/
986	static int supPagePageAllocNoKernelFallback(size_t cPages, void **ppvPages, PSUPPAGE paPages)
987	{
988	int rc = suplibOsPageAlloc(&g_supLibData, cPages, ppvPages);
989	if (RT_SUCCESS(rc))
990	{
991	if (!paPages)
992	paPages = (PSUPPAGE)alloca(sizeof(paPages[0]) * cPages);
993	rc = supR3PageLock(*ppvPages, cPages, paPages);
994	if (RT_FAILURE(rc))
995	suplibOsPageFree(&g_supLibData, *ppvPages, cPages);
996	}
997	return rc;
998	}
999
1000
1001	SUPR3DECL(int) SUPR3PageAllocEx(size_t cPages, uint32_t fFlags, void **ppvPages, PRTR0PTR pR0Ptr, PSUPPAGE paPages)
1002	{
1003	/*
1004	* Validate.
1005	*/
1006	AssertPtrReturn(ppvPages, VERR_INVALID_POINTER);
1007	*ppvPages = NULL;
1008	AssertPtrNullReturn(pR0Ptr, VERR_INVALID_POINTER);
1009	if (pR0Ptr)
1010	*pR0Ptr = NIL_RTR0PTR;
1011	AssertPtrNullReturn(paPages, VERR_INVALID_POINTER);
1012	AssertMsgReturn(cPages > 0 && cPages <= VBOX_MAX_ALLOC_PAGE_COUNT, ("cPages=%zu\n", cPages), VERR_PAGE_COUNT_OUT_OF_RANGE);
1013
1014	/* fake */
1015	if (RT_UNLIKELY(g_u32FakeMode))
1016	{
1017	void pv = RTMemPageAllocZ(cPages PAGE_SIZE);
1018	if (!pv)
1019	return VERR_NO_MEMORY;
1020	*ppvPages = pv;
1021	if (pR0Ptr)
1022	*pR0Ptr = (RTR0PTR)pv;
1023	if (paPages)
1024	for (size_t iPage = 0; iPage < cPages; iPage++)
1025	{
1026	paPages[iPage].uReserved = 0;
1027	paPages[iPage].Phys = (iPage + 4321) << PAGE_SHIFT;
1028	Assert(!(paPages[iPage].Phys & ~X86_PTE_PAE_PG_MASK));
1029	}
1030	return VINF_SUCCESS;
1031	}
1032
1033	/*
1034	* Use fallback for non-R0 mapping?
1035	*/
1036	if ( !pR0Ptr
1037	&& !g_fSupportsPageAllocNoKernel)
1038	return supPagePageAllocNoKernelFallback(cPages, ppvPages, paPages);
1039
1040	/*
1041	* Issue IOCtl to the SUPDRV kernel module.
1042	*/
1043	int rc;
1044	PSUPPAGEALLOCEX pReq = (PSUPPAGEALLOCEX)RTMemTmpAllocZ(SUP_IOCTL_PAGE_ALLOC_EX_SIZE(cPages));
1045	if (pReq)
1046	{
1047	pReq->Hdr.u32Cookie = g_u32Cookie;
1048	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
1049	pReq->Hdr.cbIn = SUP_IOCTL_PAGE_ALLOC_EX_SIZE_IN;
1050	pReq->Hdr.cbOut = SUP_IOCTL_PAGE_ALLOC_EX_SIZE_OUT(cPages);
1051	pReq->Hdr.fFlags = SUPREQHDR_FLAGS_MAGIC \| SUPREQHDR_FLAGS_EXTRA_OUT;
1052	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
1053	pReq->u.In.cPages = (uint32_t)cPages; AssertRelease(pReq->u.In.cPages == cPages);
1054	pReq->u.In.fKernelMapping = pR0Ptr != NULL;
1055	pReq->u.In.fUserMapping = true;
1056	pReq->u.In.fReserved0 = false;
1057	pReq->u.In.fReserved1 = false;
1058	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_ALLOC_EX, pReq, SUP_IOCTL_PAGE_ALLOC_EX_SIZE(cPages));
1059	if (RT_SUCCESS(rc))
1060	{
1061	rc = pReq->Hdr.rc;
1062	if (RT_SUCCESS(rc))
1063	{
1064	*ppvPages = pReq->u.Out.pvR3;
1065	if (pR0Ptr)
1066	*pR0Ptr = pReq->u.Out.pvR0;
1067	if (paPages)
1068	for (size_t iPage = 0; iPage < cPages; iPage++)
1069	{
1070	paPages[iPage].uReserved = 0;
1071	paPages[iPage].Phys = pReq->u.Out.aPages[iPage];
1072	Assert(!(paPages[iPage].Phys & ~X86_PTE_PAE_PG_MASK));
1073	}
1074	#ifdef RT_OS_DARWIN /* HACK ALERT! */
1075	supR3TouchPages(pReq->u.Out.pvR3, cPages);
1076	#endif
1077	}
1078	else if ( rc == VERR_NOT_SUPPORTED
1079	&& !pR0Ptr)
1080	{
1081	g_fSupportsPageAllocNoKernel = false;
1082	rc = supPagePageAllocNoKernelFallback(cPages, ppvPages, paPages);
1083	}
1084	}
1085
1086	RTMemTmpFree(pReq);
1087	}
1088	else
1089	rc = VERR_NO_TMP_MEMORY;
1090	return rc;
1091
1092	}
1093
1094
1095	SUPR3DECL(int) SUPR3PageMapKernel(void *pvR3, uint32_t off, uint32_t cb, uint32_t fFlags, PRTR0PTR pR0Ptr)
1096	{
1097	/*
1098	* Validate.
1099	*/
1100	AssertPtrReturn(pvR3, VERR_INVALID_POINTER);
1101	AssertPtrReturn(pR0Ptr, VERR_INVALID_POINTER);
1102	Assert(!(off & PAGE_OFFSET_MASK));
1103	Assert(!(cb & PAGE_OFFSET_MASK) && cb);
1104	Assert(!fFlags);
1105	*pR0Ptr = NIL_RTR0PTR;
1106
1107	/* fake */
1108	if (RT_UNLIKELY(g_u32FakeMode))
1109	return VERR_NOT_SUPPORTED;
1110
1111	/*
1112	* Issue IOCtl to the SUPDRV kernel module.
1113	*/
1114	SUPPAGEMAPKERNEL Req;
1115	Req.Hdr.u32Cookie = g_u32Cookie;
1116	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1117	Req.Hdr.cbIn = SUP_IOCTL_PAGE_MAP_KERNEL_SIZE_IN;
1118	Req.Hdr.cbOut = SUP_IOCTL_PAGE_MAP_KERNEL_SIZE_OUT;
1119	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1120	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1121	Req.u.In.pvR3 = pvR3;
1122	Req.u.In.offSub = off;
1123	Req.u.In.cbSub = cb;
1124	Req.u.In.fFlags = fFlags;
1125	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_MAP_KERNEL, &Req, SUP_IOCTL_PAGE_MAP_KERNEL_SIZE);
1126	if (RT_SUCCESS(rc))
1127	rc = Req.Hdr.rc;
1128	if (RT_SUCCESS(rc))
1129	*pR0Ptr = Req.u.Out.pvR0;
1130	return rc;
1131	}
1132
1133
1134	SUPR3DECL(int) SUPR3PageProtect(void *pvR3, RTR0PTR R0Ptr, uint32_t off, uint32_t cb, uint32_t fProt)
1135	{
1136	/*
1137	* Validate.
1138	*/
1139	AssertPtrReturn(pvR3, VERR_INVALID_POINTER);
1140	Assert(!(off & PAGE_OFFSET_MASK));
1141	Assert(!(cb & PAGE_OFFSET_MASK) && cb);
1142	AssertReturn(!(fProt & ~(RTMEM_PROT_NONE \| RTMEM_PROT_READ \| RTMEM_PROT_WRITE \| RTMEM_PROT_EXEC)), VERR_INVALID_PARAMETER);
1143
1144	/* fake */
1145	if (RT_UNLIKELY(g_u32FakeMode))
1146	return RTMemProtect((uint8_t *)pvR3 + off, cb, fProt);
1147
1148	/*
1149	* Some OSes can do this from ring-3, so try that before we
1150	* issue the IOCtl to the SUPDRV kernel module.
1151	* (Yea, this isn't very nice, but just try get the job done for now.)
1152	*/
1153	#if !defined(RT_OS_SOLARIS)
1154	RTMemProtect((uint8_t *)pvR3 + off, cb, fProt);
1155	#endif
1156
1157	SUPPAGEPROTECT Req;
1158	Req.Hdr.u32Cookie = g_u32Cookie;
1159	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1160	Req.Hdr.cbIn = SUP_IOCTL_PAGE_PROTECT_SIZE_IN;
1161	Req.Hdr.cbOut = SUP_IOCTL_PAGE_PROTECT_SIZE_OUT;
1162	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1163	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1164	Req.u.In.pvR3 = pvR3;
1165	Req.u.In.pvR0 = R0Ptr;
1166	Req.u.In.offSub = off;
1167	Req.u.In.cbSub = cb;
1168	Req.u.In.fProt = fProt;
1169	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_PROTECT, &Req, SUP_IOCTL_PAGE_PROTECT_SIZE);
1170	if (RT_SUCCESS(rc))
1171	rc = Req.Hdr.rc;
1172	return rc;
1173	}
1174
1175
1176	SUPR3DECL(int) SUPR3PageFreeEx(void *pvPages, size_t cPages)
1177	{
1178	/*
1179	* Validate.
1180	*/
1181	AssertPtrReturn(pvPages, VERR_INVALID_POINTER);
1182	AssertReturn(cPages > 0, VERR_PAGE_COUNT_OUT_OF_RANGE);
1183
1184	/* fake */
1185	if (RT_UNLIKELY(g_u32FakeMode))
1186	{
1187	RTMemPageFree(pvPages);
1188	return VINF_SUCCESS;
1189	}
1190
1191	/*
1192	* Try normal free first, then if it fails check if we're using the fallback .
1193	* for the allocations without kernel mappings and attempt unlocking it.
1194	*/
1195	NOREF(cPages);
1196	SUPPAGEFREE Req;
1197	Req.Hdr.u32Cookie = g_u32Cookie;
1198	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1199	Req.Hdr.cbIn = SUP_IOCTL_PAGE_FREE_SIZE_IN;
1200	Req.Hdr.cbOut = SUP_IOCTL_PAGE_FREE_SIZE_OUT;
1201	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1202	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1203	Req.u.In.pvR3 = pvPages;
1204	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_PAGE_FREE, &Req, SUP_IOCTL_PAGE_FREE_SIZE);
1205	if (RT_SUCCESS(rc))
1206	{
1207	rc = Req.Hdr.rc;
1208	if ( rc == VERR_INVALID_PARAMETER
1209	&& !g_fSupportsPageAllocNoKernel)
1210	{
1211	int rc2 = supR3PageUnlock(pvPages);
1212	if (RT_SUCCESS(rc2))
1213	rc = suplibOsPageFree(&g_supLibData, pvPages, cPages);
1214	}
1215	}
1216	return rc;
1217	}
1218
1219
1220	SUPR3DECL(void *) SUPR3ContAlloc(size_t cPages, PRTR0PTR pR0Ptr, PRTHCPHYS pHCPhys)
1221	{
1222	/*
1223	* Validate.
1224	*/
1225	AssertPtrReturn(pHCPhys, NULL);
1226	*pHCPhys = NIL_RTHCPHYS;
1227	AssertPtrNullReturn(pR0Ptr, NULL);
1228	if (pR0Ptr)
1229	*pR0Ptr = NIL_RTR0PTR;
1230	AssertPtrNullReturn(pHCPhys, NULL);
1231	AssertMsgReturn(cPages > 0 && cPages < 256, ("cPages=%d must be > 0 and < 256\n", cPages), NULL);
1232
1233	/* fake */
1234	if (RT_UNLIKELY(g_u32FakeMode))
1235	{
1236	void pv = RTMemPageAllocZ(cPages PAGE_SIZE);
1237	if (pR0Ptr)
1238	*pR0Ptr = (RTR0PTR)pv;
1239	if (pHCPhys)
1240	pHCPhys = (uintptr_t)pv + (PAGE_SHIFT 1024);
1241	return pv;
1242	}
1243
1244	/*
1245	* Issue IOCtl to the SUPDRV kernel module.
1246	*/
1247	SUPCONTALLOC Req;
1248	Req.Hdr.u32Cookie = g_u32Cookie;
1249	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1250	Req.Hdr.cbIn = SUP_IOCTL_CONT_ALLOC_SIZE_IN;
1251	Req.Hdr.cbOut = SUP_IOCTL_CONT_ALLOC_SIZE_OUT;
1252	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1253	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1254	Req.u.In.cPages = (uint32_t)cPages;
1255	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CONT_ALLOC, &Req, SUP_IOCTL_CONT_ALLOC_SIZE);
1256	if ( RT_SUCCESS(rc)
1257	&& RT_SUCCESS(Req.Hdr.rc))
1258	{
1259	*pHCPhys = Req.u.Out.HCPhys;
1260	if (pR0Ptr)
1261	*pR0Ptr = Req.u.Out.pvR0;
1262	#ifdef RT_OS_DARWIN /* HACK ALERT! */
1263	supR3TouchPages(Req.u.Out.pvR3, cPages);
1264	#endif
1265	return Req.u.Out.pvR3;
1266	}
1267
1268	return NULL;
1269	}
1270
1271
1272	SUPR3DECL(int) SUPR3ContFree(void *pv, size_t cPages)
1273	{
1274	/*
1275	* Validate.
1276	*/
1277	if (!pv)
1278	return VINF_SUCCESS;
1279	AssertPtrReturn(pv, VERR_INVALID_POINTER);
1280	AssertReturn(cPages > 0, VERR_PAGE_COUNT_OUT_OF_RANGE);
1281
1282	/* fake */
1283	if (RT_UNLIKELY(g_u32FakeMode))
1284	{
1285	RTMemPageFree(pv);
1286	return VINF_SUCCESS;
1287	}
1288
1289	/*
1290	* Issue IOCtl to the SUPDRV kernel module.
1291	*/
1292	SUPCONTFREE Req;
1293	Req.Hdr.u32Cookie = g_u32Cookie;
1294	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1295	Req.Hdr.cbIn = SUP_IOCTL_CONT_FREE_SIZE_IN;
1296	Req.Hdr.cbOut = SUP_IOCTL_CONT_FREE_SIZE_OUT;
1297	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1298	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1299	Req.u.In.pvR3 = pv;
1300	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_CONT_FREE, &Req, SUP_IOCTL_CONT_FREE_SIZE);
1301	if (RT_SUCCESS(rc))
1302	rc = Req.Hdr.rc;
1303	return rc;
1304	}
1305
1306
1307	SUPR3DECL(int) SUPR3LowAlloc(size_t cPages, void **ppvPages, PRTR0PTR ppvPagesR0, PSUPPAGE paPages)
1308	{
1309	/*
1310	* Validate.
1311	*/
1312	AssertPtrReturn(ppvPages, VERR_INVALID_POINTER);
1313	*ppvPages = NULL;
1314	AssertPtrReturn(paPages, VERR_INVALID_POINTER);
1315	AssertMsgReturn(cPages > 0 && cPages < 256, ("cPages=%d must be > 0 and < 256\n", cPages), VERR_PAGE_COUNT_OUT_OF_RANGE);
1316
1317	/* fake */
1318	if (RT_UNLIKELY(g_u32FakeMode))
1319	{
1320	ppvPages = RTMemPageAllocZ((size_t)cPages PAGE_SIZE);
1321	if (!*ppvPages)
1322	return VERR_NO_LOW_MEMORY;
1323
1324	/* fake physical addresses. */
1325	RTHCPHYS Phys = (uintptr_t)ppvPages + PAGE_SIZE 1024;
1326	size_t iPage = cPages;
1327	while (iPage-- > 0)
1328	paPages[iPage].Phys = Phys + (iPage << PAGE_SHIFT);
1329	return VINF_SUCCESS;
1330	}
1331
1332	/*
1333	* Issue IOCtl to the SUPDRV kernel module.
1334	*/
1335	int rc;
1336	PSUPLOWALLOC pReq = (PSUPLOWALLOC)RTMemTmpAllocZ(SUP_IOCTL_LOW_ALLOC_SIZE(cPages));
1337	if (pReq)
1338	{
1339	pReq->Hdr.u32Cookie = g_u32Cookie;
1340	pReq->Hdr.u32SessionCookie = g_u32SessionCookie;
1341	pReq->Hdr.cbIn = SUP_IOCTL_LOW_ALLOC_SIZE_IN;
1342	pReq->Hdr.cbOut = SUP_IOCTL_LOW_ALLOC_SIZE_OUT(cPages);
1343	pReq->Hdr.fFlags = SUPREQHDR_FLAGS_MAGIC \| SUPREQHDR_FLAGS_EXTRA_OUT;
1344	pReq->Hdr.rc = VERR_INTERNAL_ERROR;
1345	pReq->u.In.cPages = (uint32_t)cPages; AssertRelease(pReq->u.In.cPages == cPages);
1346	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LOW_ALLOC, pReq, SUP_IOCTL_LOW_ALLOC_SIZE(cPages));
1347	if (RT_SUCCESS(rc))
1348	rc = pReq->Hdr.rc;
1349	if (RT_SUCCESS(rc))
1350	{
1351	*ppvPages = pReq->u.Out.pvR3;
1352	if (ppvPagesR0)
1353	*ppvPagesR0 = pReq->u.Out.pvR0;
1354	if (paPages)
1355	for (size_t iPage = 0; iPage < cPages; iPage++)
1356	{
1357	paPages[iPage].uReserved = 0;
1358	paPages[iPage].Phys = pReq->u.Out.aPages[iPage];
1359	Assert(!(paPages[iPage].Phys & ~X86_PTE_PAE_PG_MASK));
1360	Assert(paPages[iPage].Phys <= UINT32_C(0xfffff000));
1361	}
1362	#ifdef RT_OS_DARWIN /* HACK ALERT! */
1363	supR3TouchPages(pReq->u.Out.pvR3, cPages);
1364	#endif
1365	}
1366	RTMemTmpFree(pReq);
1367	}
1368	else
1369	rc = VERR_NO_TMP_MEMORY;
1370
1371	return rc;
1372	}
1373
1374
1375	SUPR3DECL(int) SUPR3LowFree(void *pv, size_t cPages)
1376	{
1377	/*
1378	* Validate.
1379	*/
1380	if (!pv)
1381	return VINF_SUCCESS;
1382	AssertPtrReturn(pv, VERR_INVALID_POINTER);
1383	AssertReturn(cPages > 0, VERR_PAGE_COUNT_OUT_OF_RANGE);
1384
1385	/* fake */
1386	if (RT_UNLIKELY(g_u32FakeMode))
1387	{
1388	RTMemPageFree(pv);
1389	return VINF_SUCCESS;
1390	}
1391
1392	/*
1393	* Issue IOCtl to the SUPDRV kernel module.
1394	*/
1395	SUPCONTFREE Req;
1396	Req.Hdr.u32Cookie = g_u32Cookie;
1397	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1398	Req.Hdr.cbIn = SUP_IOCTL_LOW_FREE_SIZE_IN;
1399	Req.Hdr.cbOut = SUP_IOCTL_LOW_FREE_SIZE_OUT;
1400	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1401	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1402	Req.u.In.pvR3 = pv;
1403	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LOW_FREE, &Req, SUP_IOCTL_LOW_FREE_SIZE);
1404	if (RT_SUCCESS(rc))
1405	rc = Req.Hdr.rc;
1406	return rc;
1407	}
1408
1409
1410	SUPR3DECL(int) SUPR3HardenedVerifyFile(const char pszFilename, const char pszMsg, PRTFILE phFile)
1411	{
1412	/*
1413	* Quick input validation.
1414	*/
1415	AssertPtr(pszFilename);
1416	AssertPtr(pszMsg);
1417	AssertReturn(!phFile, VERR_NOT_IMPLEMENTED); /** @todo Implement this. The deal is that we make sure the
1418	file is the same we verified after opening it. */
1419
1420	/*
1421	* Only do the actual check in hardened builds.
1422	*/
1423	#ifdef VBOX_WITH_HARDENING
1424	int rc = supR3HardenedVerifyFile(pszFilename, false /* fFatal */);
1425	if (RT_FAILURE(rc))
1426	LogRel(("SUPR3HardenedVerifyFile: %s: Verification of \"%s\" failed, rc=%Rrc\n", pszMsg, pszFilename, rc));
1427	return rc;
1428	#else
1429	return VINF_SUCCESS;
1430	#endif
1431	}
1432
1433
1434	SUPR3DECL(int) SUPR3LoadModule(const char pszFilename, const char pszModule, void **ppvImageBase)
1435	{
1436	int rc = VINF_SUCCESS;
1437	#ifdef VBOX_WITH_HARDENING
1438	/*
1439	* Check that the module can be trusted.
1440	*/
1441	rc = supR3HardenedVerifyFile(pszFilename, false /* fFatal */);
1442	#endif
1443	if (RT_SUCCESS(rc))
1444	rc = supLoadModule(pszFilename, pszModule, NULL, ppvImageBase);
1445	else
1446	LogRel(("SUPR3LoadModule: Verification of \"%s\" failed, rc=%Rrc\n", rc));
1447	return rc;
1448	}
1449
1450
1451	SUPR3DECL(int) SUPR3LoadServiceModule(const char pszFilename, const char pszModule,
1452	const char pszSrvReqHandler, void *ppvImageBase)
1453	{
1454	int rc = VINF_SUCCESS;
1455	AssertPtrReturn(pszSrvReqHandler, VERR_INVALID_PARAMETER);
1456
1457	#ifdef VBOX_WITH_HARDENING
1458	/*
1459	* Check that the module can be trusted.
1460	*/
1461	rc = supR3HardenedVerifyFile(pszFilename, false /* fFatal */);
1462	#endif
1463	if (RT_SUCCESS(rc))
1464	rc = supLoadModule(pszFilename, pszModule, pszSrvReqHandler, ppvImageBase);
1465	else
1466	LogRel(("SUPR3LoadServiceModule: Verification of \"%s\" failed, rc=%Rrc\n", rc));
1467	return rc;
1468	}
1469
1470
1471	/**
1472	* Resolve an external symbol during RTLdrGetBits().
1473	*
1474	* @returns VBox status code.
1475	* @param hLdrMod The loader module handle.
1476	* @param pszModule Module name.
1477	* @param pszSymbol Symbol name, NULL if uSymbol should be used.
1478	* @param uSymbol Symbol ordinal, ~0 if pszSymbol should be used.
1479	* @param pValue Where to store the symbol value (address).
1480	* @param pvUser User argument.
1481	*/
1482	static DECLCALLBACK(int) supLoadModuleResolveImport(RTLDRMOD hLdrMod, const char *pszModule,
1483	const char pszSymbol, unsigned uSymbol, RTUINTPTR pValue, void *pvUser)
1484	{
1485	AssertPtr(pValue);
1486	AssertPtr(pvUser);
1487
1488	/*
1489	* Only SUPR0 and VMMR0.r0
1490	*/
1491	if ( pszModule
1492	&& *pszModule
1493	&& strcmp(pszModule, "SUPR0.dll")
1494	&& strcmp(pszModule, "VMMR0.r0"))
1495	{
1496	AssertMsgFailed(("%s is importing from %s! (expected 'SUPR0.dll' or 'VMMR0.r0', case-sensitiv)\n", pvUser, pszModule));
1497	return VERR_SYMBOL_NOT_FOUND;
1498	}
1499
1500	/*
1501	* No ordinals.
1502	*/
1503	if (pszSymbol < (const char*)0x10000)
1504	{
1505	AssertMsgFailed(("%s is importing by ordinal (ord=%d)\n", pvUser, (int)(uintptr_t)pszSymbol));
1506	return VERR_SYMBOL_NOT_FOUND;
1507	}
1508
1509	/*
1510	* Lookup symbol.
1511	*/
1512	/* skip the 64-bit ELF import prefix first. */
1513	if (!strncmp(pszSymbol, "SUPR0$", sizeof("SUPR0$") - 1))
1514	pszSymbol += sizeof("SUPR0$") - 1;
1515
1516	/*
1517	* Check the VMMR0.r0 module if loaded.
1518	*/
1519	/** @todo call the SUPR3LoadModule caller.... */
1520	/** @todo proper reference counting and such. */
1521	if (g_pvVMMR0 != NIL_RTR0PTR)
1522	{
1523	void *pvValue;
1524	if (!SUPR3GetSymbolR0((void *)g_pvVMMR0, pszSymbol, &pvValue))
1525	{
1526	*pValue = (uintptr_t)pvValue;
1527	return VINF_SUCCESS;
1528	}
1529	}
1530
1531	/* iterate the function table. */
1532	int c = g_pFunctions->u.Out.cFunctions;
1533	PSUPFUNC pFunc = &g_pFunctions->u.Out.aFunctions[0];
1534	while (c-- > 0)
1535	{
1536	if (!strcmp(pFunc->szName, pszSymbol))
1537	{
1538	*pValue = (uintptr_t)pFunc->pfn;
1539	return VINF_SUCCESS;
1540	}
1541	pFunc++;
1542	}
1543
1544	/*
1545	* The GIP.
1546	*/
1547	/** @todo R0 mapping? */
1548	if ( pszSymbol
1549	&& g_pSUPGlobalInfoPage
1550	&& g_pSUPGlobalInfoPageR0
1551	&& !strcmp(pszSymbol, "g_SUPGlobalInfoPage"))
1552	{
1553	*pValue = (uintptr_t)g_pSUPGlobalInfoPageR0;
1554	return VINF_SUCCESS;
1555	}
1556
1557	/*
1558	* Despair.
1559	*/
1560	c = g_pFunctions->u.Out.cFunctions;
1561	pFunc = &g_pFunctions->u.Out.aFunctions[0];
1562	while (c-- > 0)
1563	{
1564	AssertMsg2("%d: %s\n", g_pFunctions->u.Out.cFunctions - c, pFunc->szName);
1565	pFunc++;
1566	}
1567
1568	AssertMsg2("%s is importing %s which we couldn't find\n", pvUser, pszSymbol);
1569	AssertMsgFailed(("%s is importing %s which we couldn't find\n", pvUser, pszSymbol));
1570	if (g_u32FakeMode)
1571	{
1572	*pValue = 0xdeadbeef;
1573	return VINF_SUCCESS;
1574	}
1575	return VERR_SYMBOL_NOT_FOUND;
1576	}
1577
1578
1579	/** Argument package for supLoadModuleCalcSizeCB. */
1580	typedef struct SUPLDRCALCSIZEARGS
1581	{
1582	size_t cbStrings;
1583	uint32_t cSymbols;
1584	size_t cbImage;
1585	} SUPLDRCALCSIZEARGS, *PSUPLDRCALCSIZEARGS;
1586
1587	/**
1588	* Callback used to calculate the image size.
1589	* @return VINF_SUCCESS
1590	*/
1591	static DECLCALLBACK(int) supLoadModuleCalcSizeCB(RTLDRMOD hLdrMod, const char pszSymbol, unsigned uSymbol, RTUINTPTR Value, void pvUser)
1592	{
1593	PSUPLDRCALCSIZEARGS pArgs = (PSUPLDRCALCSIZEARGS)pvUser;
1594	if ( pszSymbol != NULL
1595	&& *pszSymbol
1596	&& Value <= pArgs->cbImage)
1597	{
1598	pArgs->cSymbols++;
1599	pArgs->cbStrings += strlen(pszSymbol) + 1;
1600	}
1601	return VINF_SUCCESS;
1602	}
1603
1604
1605	/** Argument package for supLoadModuleCreateTabsCB. */
1606	typedef struct SUPLDRCREATETABSARGS
1607	{
1608	size_t cbImage;
1609	PSUPLDRSYM pSym;
1610	char *pszBase;
1611	char *psz;
1612	} SUPLDRCREATETABSARGS, *PSUPLDRCREATETABSARGS;
1613
1614	/**
1615	* Callback used to calculate the image size.
1616	* @return VINF_SUCCESS
1617	*/
1618	static DECLCALLBACK(int) supLoadModuleCreateTabsCB(RTLDRMOD hLdrMod, const char pszSymbol, unsigned uSymbol, RTUINTPTR Value, void pvUser)
1619	{
1620	PSUPLDRCREATETABSARGS pArgs = (PSUPLDRCREATETABSARGS)pvUser;
1621	if ( pszSymbol != NULL
1622	&& *pszSymbol
1623	&& Value <= pArgs->cbImage)
1624	{
1625	pArgs->pSym->offSymbol = (uint32_t)Value;
1626	pArgs->pSym->offName = pArgs->psz - pArgs->pszBase;
1627	pArgs->pSym++;
1628
1629	size_t cbCopy = strlen(pszSymbol) + 1;
1630	memcpy(pArgs->psz, pszSymbol, cbCopy);
1631	pArgs->psz += cbCopy;
1632	}
1633	return VINF_SUCCESS;
1634	}
1635
1636
1637	/**
1638	* Worker for SUPR3LoadModule().
1639	*
1640	* @returns VBox status code.
1641	* @param pszFilename Name of the VMMR0 image file
1642	*/
1643	static int supLoadModule(const char pszFilename, const char pszModule, const char pszSrvReqHandler, void *ppvImageBase)
1644	{
1645	/*
1646	* Validate input.
1647	*/
1648	AssertPtrReturn(pszFilename, VERR_INVALID_PARAMETER);
1649	AssertPtrReturn(pszModule, VERR_INVALID_PARAMETER);
1650	AssertPtrReturn(ppvImageBase, VERR_INVALID_PARAMETER);
1651	AssertReturn(strlen(pszModule) < RT_SIZEOFMEMB(SUPLDROPEN, u.In.szName), VERR_FILENAME_TOO_LONG);
1652
1653	const bool fIsVMMR0 = !strcmp(pszModule, "VMMR0.r0");
1654	AssertReturn(!pszSrvReqHandler \|\| !fIsVMMR0, VERR_INTERNAL_ERROR);
1655	*ppvImageBase = NULL;
1656
1657	/*
1658	* Open image file and figure its size.
1659	*/
1660	RTLDRMOD hLdrMod;
1661	int rc = RTLdrOpen(pszFilename, 0, RTLDRARCH_HOST, &hLdrMod);
1662	if (!RT_SUCCESS(rc))
1663	return rc;
1664
1665	SUPLDRCALCSIZEARGS CalcArgs;
1666	CalcArgs.cbStrings = 0;
1667	CalcArgs.cSymbols = 0;
1668	CalcArgs.cbImage = RTLdrSize(hLdrMod);
1669	rc = RTLdrEnumSymbols(hLdrMod, 0, NULL, 0, supLoadModuleCalcSizeCB, &CalcArgs);
1670	if (RT_SUCCESS(rc))
1671	{
1672	const uint32_t offSymTab = RT_ALIGN_32(CalcArgs.cbImage, 8);
1673	const uint32_t offStrTab = offSymTab + CalcArgs.cSymbols * sizeof(SUPLDRSYM);
1674	const uint32_t cbImage = RT_ALIGN_32(offStrTab + CalcArgs.cbStrings, 8);
1675
1676	/*
1677	* Open the R0 image.
1678	*/
1679	SUPLDROPEN OpenReq;
1680	OpenReq.Hdr.u32Cookie = g_u32Cookie;
1681	OpenReq.Hdr.u32SessionCookie = g_u32SessionCookie;
1682	OpenReq.Hdr.cbIn = SUP_IOCTL_LDR_OPEN_SIZE_IN;
1683	OpenReq.Hdr.cbOut = SUP_IOCTL_LDR_OPEN_SIZE_OUT;
1684	OpenReq.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1685	OpenReq.Hdr.rc = VERR_INTERNAL_ERROR;
1686	OpenReq.u.In.cbImage = cbImage;
1687	strcpy(OpenReq.u.In.szName, pszModule);
1688	if (!g_u32FakeMode)
1689	{
1690	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LDR_OPEN, &OpenReq, SUP_IOCTL_LDR_OPEN_SIZE);
1691	if (RT_SUCCESS(rc))
1692	rc = OpenReq.Hdr.rc;
1693	}
1694	else
1695	{
1696	OpenReq.u.Out.fNeedsLoading = true;
1697	OpenReq.u.Out.pvImageBase = 0xef423420;
1698	}
1699	ppvImageBase = (void )OpenReq.u.Out.pvImageBase;
1700	if ( RT_SUCCESS(rc)
1701	&& OpenReq.u.Out.fNeedsLoading)
1702	{
1703	/*
1704	* We need to load it.
1705	* Allocate memory for the image bits.
1706	*/
1707	PSUPLDRLOAD pLoadReq = (PSUPLDRLOAD)RTMemTmpAlloc(SUP_IOCTL_LDR_LOAD_SIZE(cbImage));
1708	if (pLoadReq)
1709	{
1710	/*
1711	* Get the image bits.
1712	*/
1713	rc = RTLdrGetBits(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase,
1714	supLoadModuleResolveImport, (void *)pszModule);
1715
1716	if (RT_SUCCESS(rc))
1717	{
1718	/*
1719	* Get the entry points.
1720	*/
1721	RTUINTPTR VMMR0EntryInt = 0;
1722	RTUINTPTR VMMR0EntryFast = 0;
1723	RTUINTPTR VMMR0EntryEx = 0;
1724	RTUINTPTR SrvReqHandler = 0;
1725	RTUINTPTR ModuleInit = 0;
1726	RTUINTPTR ModuleTerm = 0;
1727	if (fIsVMMR0)
1728	{
1729	rc = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, "VMMR0EntryInt", &VMMR0EntryInt);
1730	if (RT_SUCCESS(rc))
1731	rc = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, "VMMR0EntryFast", &VMMR0EntryFast);
1732	if (RT_SUCCESS(rc))
1733	rc = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, "VMMR0EntryEx", &VMMR0EntryEx);
1734	}
1735	else if (pszSrvReqHandler)
1736	rc = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, pszSrvReqHandler, &SrvReqHandler);
1737	if (RT_SUCCESS(rc))
1738	{
1739	int rc2 = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, "ModuleInit", &ModuleInit);
1740	if (RT_FAILURE(rc2))
1741	ModuleInit = 0;
1742
1743	rc2 = RTLdrGetSymbolEx(hLdrMod, &pLoadReq->u.In.achImage[0], (uintptr_t)OpenReq.u.Out.pvImageBase, "ModuleTerm", &ModuleTerm);
1744	if (RT_FAILURE(rc2))
1745	ModuleTerm = 0;
1746	}
1747	if (RT_SUCCESS(rc))
1748	{
1749	/*
1750	* Create the symbol and string tables.
1751	*/
1752	SUPLDRCREATETABSARGS CreateArgs;
1753	CreateArgs.cbImage = CalcArgs.cbImage;
1754	CreateArgs.pSym = (PSUPLDRSYM)&pLoadReq->u.In.achImage[offSymTab];
1755	CreateArgs.pszBase = (char *)&pLoadReq->u.In.achImage[offStrTab];
1756	CreateArgs.psz = CreateArgs.pszBase;
1757	rc = RTLdrEnumSymbols(hLdrMod, 0, NULL, 0, supLoadModuleCreateTabsCB, &CreateArgs);
1758	if (RT_SUCCESS(rc))
1759	{
1760	AssertRelease((size_t)(CreateArgs.psz - CreateArgs.pszBase) <= CalcArgs.cbStrings);
1761	AssertRelease((size_t)(CreateArgs.pSym - (PSUPLDRSYM)&pLoadReq->u.In.achImage[offSymTab]) <= CalcArgs.cSymbols);
1762
1763	/*
1764	* Upload the image.
1765	*/
1766	pLoadReq->Hdr.u32Cookie = g_u32Cookie;
1767	pLoadReq->Hdr.u32SessionCookie = g_u32SessionCookie;
1768	pLoadReq->Hdr.cbIn = SUP_IOCTL_LDR_LOAD_SIZE_IN(cbImage);
1769	pLoadReq->Hdr.cbOut = SUP_IOCTL_LDR_LOAD_SIZE_OUT;
1770	pLoadReq->Hdr.fFlags = SUPREQHDR_FLAGS_MAGIC \| SUPREQHDR_FLAGS_EXTRA_IN;
1771	pLoadReq->Hdr.rc = VERR_INTERNAL_ERROR;
1772
1773	pLoadReq->u.In.pfnModuleInit = (RTR0PTR)ModuleInit;
1774	pLoadReq->u.In.pfnModuleTerm = (RTR0PTR)ModuleTerm;
1775	if (fIsVMMR0)
1776	{
1777	pLoadReq->u.In.eEPType = SUPLDRLOADEP_VMMR0;
1778	pLoadReq->u.In.EP.VMMR0.pvVMMR0 = OpenReq.u.Out.pvImageBase;
1779	pLoadReq->u.In.EP.VMMR0.pvVMMR0EntryInt = (RTR0PTR)VMMR0EntryInt;
1780	pLoadReq->u.In.EP.VMMR0.pvVMMR0EntryFast= (RTR0PTR)VMMR0EntryFast;
1781	pLoadReq->u.In.EP.VMMR0.pvVMMR0EntryEx = (RTR0PTR)VMMR0EntryEx;
1782	}
1783	else if (pszSrvReqHandler)
1784	{
1785	pLoadReq->u.In.eEPType = SUPLDRLOADEP_SERVICE;
1786	pLoadReq->u.In.EP.Service.pfnServiceReq = (RTR0PTR)SrvReqHandler;
1787	pLoadReq->u.In.EP.Service.apvReserved[0] = NIL_RTR0PTR;
1788	pLoadReq->u.In.EP.Service.apvReserved[1] = NIL_RTR0PTR;
1789	pLoadReq->u.In.EP.Service.apvReserved[2] = NIL_RTR0PTR;
1790	}
1791	else
1792	pLoadReq->u.In.eEPType = SUPLDRLOADEP_NOTHING;
1793	pLoadReq->u.In.offStrTab = offStrTab;
1794	pLoadReq->u.In.cbStrTab = (uint32_t)CalcArgs.cbStrings;
1795	AssertRelease(pLoadReq->u.In.cbStrTab == CalcArgs.cbStrings);
1796	pLoadReq->u.In.offSymbols = offSymTab;
1797	pLoadReq->u.In.cSymbols = CalcArgs.cSymbols;
1798	pLoadReq->u.In.cbImage = cbImage;
1799	pLoadReq->u.In.pvImageBase = OpenReq.u.Out.pvImageBase;
1800	if (!g_u32FakeMode)
1801	{
1802	rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LDR_LOAD, pLoadReq, SUP_IOCTL_LDR_LOAD_SIZE(cbImage));
1803	if (RT_SUCCESS(rc))
1804	rc = pLoadReq->Hdr.rc;
1805	}
1806	else
1807	rc = VINF_SUCCESS;
1808	if ( RT_SUCCESS(rc)
1809	\|\| rc == VERR_ALREADY_LOADED /* A competing process. */
1810	)
1811	{
1812	LogRel(("SUP: Loaded %s (%s) at %#p - ModuleInit at %RTptr and ModuleTerm at %RTptr\n", pszModule, pszFilename,
1813	OpenReq.u.Out.pvImageBase, ModuleInit, ModuleTerm));
1814	if (fIsVMMR0)
1815	{
1816	g_pvVMMR0 = OpenReq.u.Out.pvImageBase;
1817	LogRel(("SUP: VMMR0EntryEx located at %RTptr, VMMR0EntryFast at %RTptr and VMMR0EntryInt at %RTptr\n",
1818	VMMR0EntryEx, VMMR0EntryFast, VMMR0EntryInt));
1819	}
1820	#ifdef RT_OS_WINDOWS
1821	LogRel(("SUP: windbg> .reload /f %s=%#p\n", pszFilename, OpenReq.u.Out.pvImageBase));
1822	#endif
1823
1824	RTMemTmpFree(pLoadReq);
1825	RTLdrClose(hLdrMod);
1826	return VINF_SUCCESS;
1827	}
1828	}
1829	}
1830	}
1831	RTMemTmpFree(pLoadReq);
1832	}
1833	else
1834	{
1835	AssertMsgFailed(("failed to allocated %d bytes for SUPLDRLOAD_IN structure!\n", SUP_IOCTL_LDR_LOAD_SIZE(cbImage)));
1836	rc = VERR_NO_TMP_MEMORY;
1837	}
1838	}
1839	else if (RT_SUCCESS(rc))
1840	{
1841	if (fIsVMMR0)
1842	g_pvVMMR0 = OpenReq.u.Out.pvImageBase;
1843	LogRel(("SUP: Opened %s (%s) at %#p.\n", pszModule, pszFilename, OpenReq.u.Out.pvImageBase));
1844	#ifdef RT_OS_WINDOWS
1845	LogRel(("SUP: windbg> .reload /f %s=%#p\n", pszFilename, OpenReq.u.Out.pvImageBase));
1846	#endif
1847	}
1848	}
1849	RTLdrClose(hLdrMod);
1850	return rc;
1851	}
1852
1853
1854	SUPR3DECL(int) SUPR3FreeModule(void *pvImageBase)
1855	{
1856	/* fake */
1857	if (RT_UNLIKELY(g_u32FakeMode))
1858	{
1859	g_pvVMMR0 = NIL_RTR0PTR;
1860	return VINF_SUCCESS;
1861	}
1862
1863	/*
1864	* Free the requested module.
1865	*/
1866	SUPLDRFREE Req;
1867	Req.Hdr.u32Cookie = g_u32Cookie;
1868	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1869	Req.Hdr.cbIn = SUP_IOCTL_LDR_FREE_SIZE_IN;
1870	Req.Hdr.cbOut = SUP_IOCTL_LDR_FREE_SIZE_OUT;
1871	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1872	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1873	Req.u.In.pvImageBase = (RTR0PTR)pvImageBase;
1874	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LDR_FREE, &Req, SUP_IOCTL_LDR_FREE_SIZE);
1875	if (RT_SUCCESS(rc))
1876	rc = Req.Hdr.rc;
1877	if ( RT_SUCCESS(rc)
1878	&& (RTR0PTR)pvImageBase == g_pvVMMR0)
1879	g_pvVMMR0 = NIL_RTR0PTR;
1880	return rc;
1881	}
1882
1883
1884	SUPR3DECL(int) SUPR3GetSymbolR0(void pvImageBase, const char pszSymbol, void **ppvValue)
1885	{
1886	*ppvValue = NULL;
1887
1888	/* fake */
1889	if (RT_UNLIKELY(g_u32FakeMode))
1890	{
1891	ppvValue = (void )(uintptr_t)0xdeadf00d;
1892	return VINF_SUCCESS;
1893	}
1894
1895	/*
1896	* Do ioctl.
1897	*/
1898	SUPLDRGETSYMBOL Req;
1899	Req.Hdr.u32Cookie = g_u32Cookie;
1900	Req.Hdr.u32SessionCookie = g_u32SessionCookie;
1901	Req.Hdr.cbIn = SUP_IOCTL_LDR_GET_SYMBOL_SIZE_IN;
1902	Req.Hdr.cbOut = SUP_IOCTL_LDR_GET_SYMBOL_SIZE_OUT;
1903	Req.Hdr.fFlags = SUPREQHDR_FLAGS_DEFAULT;
1904	Req.Hdr.rc = VERR_INTERNAL_ERROR;
1905	Req.u.In.pvImageBase = (RTR0PTR)pvImageBase;
1906	size_t cchSymbol = strlen(pszSymbol);
1907	if (cchSymbol >= sizeof(Req.u.In.szSymbol))
1908	return VERR_SYMBOL_NOT_FOUND;
1909	memcpy(Req.u.In.szSymbol, pszSymbol, cchSymbol + 1);
1910	int rc = suplibOsIOCtl(&g_supLibData, SUP_IOCTL_LDR_GET_SYMBOL, &Req, SUP_IOCTL_LDR_GET_SYMBOL_SIZE);
1911	if (RT_SUCCESS(rc))
1912	rc = Req.Hdr.rc;
1913	if (RT_SUCCESS(rc))
1914	ppvValue = (void )Req.u.Out.pvSymbol;
1915	return rc;
1916	}
1917
1918
1919	SUPR3DECL(int) SUPR3LoadVMM(const char *pszFilename)
1920	{
1921	void *pvImageBase;
1922	return SUPR3LoadModule(pszFilename, "VMMR0.r0", &pvImageBase);
1923	}
1924
1925
1926	SUPR3DECL(int) SUPR3UnloadVMM(void)
1927	{
1928	return SUPR3FreeModule((void*)g_pvVMMR0);
1929	}
1930
1931
1932	SUPR3DECL(int) SUPR3GipGetPhys(PRTHCPHYS pHCPhys)
1933	{
1934	if (g_pSUPGlobalInfoPage)
1935	{
1936	*pHCPhys = g_HCPhysSUPGlobalInfoPage;
1937	return VINF_SUCCESS;
1938	}
1939	*pHCPhys = NIL_RTHCPHYS;
1940	return VERR_WRONG_ORDER;
1941	}
1942
1943
1944	/**
1945	* Worker for SUPR3HardenedLdrLoad and SUPR3HardenedLdrLoadAppPriv.
1946	*
1947	* @returns iprt status code.
1948	* @param pszFilename The full file name.
1949	* @param phLdrMod Where to store the handle to the loaded module.
1950	*/
1951	static int supR3HardenedLdrLoadIt(const char *pszFilename, PRTLDRMOD phLdrMod)
1952	{
1953	#ifdef VBOX_WITH_HARDENING
1954	/*
1955	* Verify the image file.
1956	*/
1957	int rc = supR3HardenedVerifyFile(pszFilename, false /* fFatal */);
1958	if (RT_FAILURE(rc))
1959	{
1960	LogRel(("supR3HardenedLdrLoadIt: Verification of \"%s\" failed, rc=%Rrc\n", pszFilename, rc));
1961	return rc;
1962	}
1963	#endif
1964
1965	/*
1966	* Try load it.
1967	*/
1968	return RTLdrLoad(pszFilename, phLdrMod);
1969	}
1970
1971
1972	SUPR3DECL(int) SUPR3HardenedLdrLoad(const char *pszFilename, PRTLDRMOD phLdrMod)
1973	{
1974	/*
1975	* Validate input.
1976	*/
1977	AssertPtrReturn(pszFilename, VERR_INVALID_PARAMETER);
1978	AssertPtrReturn(phLdrMod, VERR_INVALID_PARAMETER);
1979	*phLdrMod = NIL_RTLDRMOD;
1980	AssertReturn(RTPathHavePath(pszFilename), VERR_INVALID_PARAMETER);
1981
1982	/*
1983	* Add the default extension if it's missing.
1984	*/
1985	if (!RTPathHaveExt(pszFilename))
1986	{
1987	const char *pszSuff = RTLdrGetSuff();
1988	size_t cchSuff = strlen(pszSuff);
1989	size_t cchFilename = strlen(pszFilename);
1990	char psz = (char )alloca(cchFilename + cchSuff + 1);
1991	AssertReturn(psz, VERR_NO_TMP_MEMORY);
1992	memcpy(psz, pszFilename, cchFilename);
1993	memcpy(psz + cchFilename, pszSuff, cchSuff + 1);
1994	pszFilename = psz;
1995	}
1996
1997	/*
1998	* Pass it on to the common library loader.
1999	*/
2000	return supR3HardenedLdrLoadIt(pszFilename, phLdrMod);
2001	}
2002
2003
2004	SUPR3DECL(int) SUPR3HardenedLdrLoadAppPriv(const char *pszFilename, PRTLDRMOD phLdrMod)
2005	{
2006	LogFlow(("SUPR3HardenedLdrLoadAppPriv: pszFilename=%p:{%s} phLdrMod=%p\n", pszFilename, pszFilename, phLdrMod));
2007
2008	/*
2009	* Validate input.
2010	*/
2011	AssertPtrReturn(phLdrMod, VERR_INVALID_PARAMETER);
2012	*phLdrMod = NIL_RTLDRMOD;
2013	AssertPtrReturn(pszFilename, VERR_INVALID_PARAMETER);
2014	AssertMsgReturn(!RTPathHavePath(pszFilename), ("%s\n", pszFilename), VERR_INVALID_PARAMETER);
2015
2016	/*
2017	* Check the filename.
2018	*/
2019	size_t cchFilename = strlen(pszFilename);
2020	AssertMsgReturn(cchFilename < (RTPATH_MAX / 4) * 3, ("%zu\n", cchFilename), VERR_INVALID_PARAMETER);
2021
2022	const char *pszExt = "";
2023	size_t cchExt = 0;
2024	if (!RTPathHaveExt(pszFilename))
2025	{
2026	pszExt = RTLdrGetSuff();
2027	cchExt = strlen(pszExt);
2028	}
2029
2030	/*
2031	* Construct the private arch path and check if the file exists.
2032	*/
2033	char szPath[RTPATH_MAX];
2034	int rc = RTPathAppPrivateArch(szPath, sizeof(szPath) - 1 - cchExt - cchFilename);
2035	AssertRCReturn(rc, rc);
2036
2037	char *psz = strchr(szPath, '\0');
2038	*psz++ = RTPATH_SLASH;
2039	memcpy(psz, pszFilename, cchFilename);
2040	psz += cchFilename;
2041	memcpy(psz, pszExt, cchExt + 1);
2042
2043	if (!RTPathExists(szPath))
2044	{
2045	LogRel(("SUPR3HardenedLdrLoadAppPriv: \"%s\" not found\n", szPath));
2046	return VERR_FILE_NOT_FOUND;
2047	}
2048
2049	/*
2050	* Pass it on to SUPR3HardenedLdrLoad.
2051	*/
2052	rc = SUPR3HardenedLdrLoad(szPath, phLdrMod);
2053
2054	LogFlow(("SUPR3HardenedLdrLoadAppPriv: returns %Rrc\n", rc));
2055	return rc;
2056	}
2057

Note: See TracBrowser for help on using the repository browser.

source: vbox/trunk/src/VBox/HostDrivers/Support/SUPLib.cpp@ 22438

Download in other formats: