|
| 1 | +//! 类型安全的架构地址抽象 |
| 2 | +//! |
| 3 | +//! 借鉴 moss-kernel 的地址类型体系设计: |
| 4 | +//! - Sealed trait 防止外部实现(安全边界) |
| 5 | +//! - 泛型 `Address<K, T>` 带 `MemKind` 和数据类型标记 |
| 6 | +//! - 编译期防止地址空间混用 |
| 7 | +//! - 安全访问控制:`PA::as_ptr()` unsafe, `VA::as_ptr()` safe, `UA` 不能直接转指针 |
| 8 | +
|
| 9 | +use core::marker::PhantomData; |
| 10 | + |
| 11 | +// ============================================================================ |
| 12 | +// Sealed trait — 外部无法实现 MemKind |
| 13 | +// ============================================================================ |
| 14 | +mod sealed { |
| 15 | + pub trait Sealed {} |
| 16 | +} |
| 17 | + |
| 18 | +/// 内存地址种类标记 trait(sealed — 外部无法实现) |
| 19 | +pub trait MemKind: |
| 20 | + sealed::Sealed + Ord + Clone + Copy + PartialEq + Eq + core::fmt::Debug |
| 21 | +{ |
| 22 | +} |
| 23 | + |
| 24 | +// ============================================================================ |
| 25 | +// 地址种类标记类型 |
| 26 | +// ============================================================================ |
| 27 | + |
| 28 | +/// 虚拟地址标记 |
| 29 | +#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)] |
| 30 | +pub struct Virtual; |
| 31 | +impl sealed::Sealed for Virtual {} |
| 32 | +impl MemKind for Virtual {} |
| 33 | + |
| 34 | +/// 物理地址标记 |
| 35 | +#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)] |
| 36 | +pub struct Physical; |
| 37 | +impl sealed::Sealed for Physical {} |
| 38 | +impl MemKind for Physical {} |
| 39 | + |
| 40 | +/// 用户空间地址标记 |
| 41 | +#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)] |
| 42 | +pub struct User; |
| 43 | +impl sealed::Sealed for User {} |
| 44 | +impl MemKind for User {} |
| 45 | + |
| 46 | +// ============================================================================ |
| 47 | +// 泛型地址类型 |
| 48 | +// ============================================================================ |
| 49 | + |
| 50 | +/// 带地址种类 `K` 和数据类型 `T` 标记的地址 |
| 51 | +/// |
| 52 | +/// - `K`: 地址空间种类(Virtual / Physical / User) |
| 53 | +/// - `T`: 指向的数据类型(`()` 表示无类型标记) |
| 54 | +#[repr(transparent)] |
| 55 | +#[derive(Clone, Copy, PartialEq, Eq, PartialOrd, Ord)] |
| 56 | +pub struct Address<K: MemKind, T> { |
| 57 | + inner: usize, |
| 58 | + _phantom: PhantomData<(K, T)>, |
| 59 | +} |
| 60 | + |
| 61 | +impl<K: MemKind, T> core::fmt::Debug for Address<K, T> { |
| 62 | + fn fmt(&self, f: &mut core::fmt::Formatter<'_>) -> core::fmt::Result { |
| 63 | + f.debug_struct("Address") |
| 64 | + .field("inner", &format_args!("0x{:x}", self.inner)) |
| 65 | + .finish() |
| 66 | + } |
| 67 | +} |
| 68 | + |
| 69 | +// ============================================================================ |
| 70 | +// 类型别名 |
| 71 | +// ============================================================================ |
| 72 | + |
| 73 | +/// 无类型标记的物理地址 |
| 74 | +pub type PA = Address<Physical, ()>; |
| 75 | +/// 无类型标记的虚拟地址 |
| 76 | +pub type VA = Address<Virtual, ()>; |
| 77 | +/// 无类型标记的用户空间地址 |
| 78 | +pub type UA = Address<User, ()>; |
| 79 | + |
| 80 | +/// 带类型标记的物理地址指针 |
| 81 | +pub type TPA<T> = Address<Physical, T>; |
| 82 | +/// 带类型标记的虚拟地址指针 |
| 83 | +pub type TVA<T> = Address<Virtual, T>; |
| 84 | + |
| 85 | +// ============================================================================ |
| 86 | +// Address 基本方法 |
| 87 | +// ============================================================================ |
| 88 | + |
| 89 | +impl<K: MemKind, T> Address<K, T> { |
| 90 | + /// 从 `usize` 创建地址 |
| 91 | + pub const fn from_usize(addr: usize) -> Self { |
| 92 | + Self { |
| 93 | + inner: addr, |
| 94 | + _phantom: PhantomData, |
| 95 | + } |
| 96 | + } |
| 97 | + |
| 98 | + /// 获取地址的 `usize` 值 |
| 99 | + pub const fn as_usize(&self) -> usize { |
| 100 | + self.inner |
| 101 | + } |
| 102 | + |
| 103 | + /// 检查地址是否为零 |
| 104 | + pub fn is_null(self) -> bool { |
| 105 | + self.inner == 0 |
| 106 | + } |
| 107 | + |
| 108 | + /// 返回零地址 |
| 109 | + pub const fn null() -> Self { |
| 110 | + Self::from_usize(0) |
| 111 | + } |
| 112 | + |
| 113 | + /// 获取页内偏移 |
| 114 | + pub fn page_offset(self) -> usize { |
| 115 | + self.inner & (crate::config::PAGE_SIZE - 1) |
| 116 | + } |
| 117 | + |
| 118 | + /// 检查地址是否页对齐 |
| 119 | + pub fn is_page_aligned(self) -> bool { |
| 120 | + self.page_offset() == 0 |
| 121 | + } |
| 122 | + |
| 123 | + /// 向上对齐到页边界 |
| 124 | + pub fn page_aligned(self) -> Self { |
| 125 | + let page_size = crate::config::PAGE_SIZE; |
| 126 | + Self::from_usize((self.inner + page_size - 1) & !(page_size - 1)) |
| 127 | + } |
| 128 | + |
| 129 | + /// 向下对齐到页边界 |
| 130 | + pub fn align_down_to_page(self) -> Self { |
| 131 | + let page_size = crate::config::PAGE_SIZE; |
| 132 | + Self::from_usize(self.inner & !(page_size - 1)) |
| 133 | + } |
| 134 | + |
| 135 | + /// 向上对齐到指定对齐值 |
| 136 | + pub fn align_up(self, align: usize) -> Self { |
| 137 | + Self::from_usize((self.inner + align - 1) & !(align - 1)) |
| 138 | + } |
| 139 | + |
| 140 | + /// 增加字节偏移 |
| 141 | + pub fn add(self, offset: usize) -> Self { |
| 142 | + Self::from_usize(self.inner + offset) |
| 143 | + } |
| 144 | + |
| 145 | + /// 减去字节偏移 |
| 146 | + pub fn sub(self, offset: usize) -> Self { |
| 147 | + Self::from_usize(self.inner - offset) |
| 148 | + } |
| 149 | + |
| 150 | + /// 增加页数 |
| 151 | + pub fn add_pages(self, count: usize) -> Self { |
| 152 | + self.add(count * crate::config::PAGE_SIZE) |
| 153 | + } |
| 154 | + |
| 155 | + /// 计算与另一地址的差值 |
| 156 | + pub fn diff(self, other: Self) -> isize { |
| 157 | + self.inner as isize - other.inner as isize |
| 158 | + } |
| 159 | +} |
| 160 | + |
| 161 | +// ============================================================================ |
| 162 | +// 物理地址 (PA) 特有方法 |
| 163 | +// ============================================================================ |
| 164 | + |
| 165 | +impl<T> Address<Physical, T> { |
| 166 | + /// 将物理地址转换为裸指针(只读) |
| 167 | + /// |
| 168 | + /// # Safety |
| 169 | + /// |
| 170 | + /// 裸物理地址访问需要显式承诺:调用者必须确保物理地址有效且已映射。 |
| 171 | + pub unsafe fn as_ptr(&self) -> *const T { |
| 172 | + self.inner as *const T |
| 173 | + } |
| 174 | + |
| 175 | + /// 将物理地址转换为可变裸指针 |
| 176 | + /// |
| 177 | + /// # Safety |
| 178 | + /// |
| 179 | + /// 裸物理地址访问需要显式承诺:调用者必须确保物理地址有效且已映射, |
| 180 | + /// 并且没有其他活跃引用指向同一内存。 |
| 181 | + pub unsafe fn as_mut_ptr(&mut self) -> *mut T { |
| 182 | + self.inner as *mut T |
| 183 | + } |
| 184 | +} |
| 185 | + |
| 186 | +// ============================================================================ |
| 187 | +// 虚拟地址 (VA) 特有方法 |
| 188 | +// ============================================================================ |
| 189 | + |
| 190 | +impl<T> Address<Virtual, T> { |
| 191 | + /// 将虚拟地址转换为裸指针(只读) |
| 192 | + /// |
| 193 | + /// 虚拟地址已通过 MMU 映射,因此此操作不是 unsafe。 |
| 194 | + pub fn as_ptr(&self) -> *const T { |
| 195 | + self.inner as *const T |
| 196 | + } |
| 197 | + |
| 198 | + /// 将虚拟地址转换为可变裸指针 |
| 199 | + pub fn as_mut_ptr(&mut self) -> *mut T { |
| 200 | + self.inner as *mut T |
| 201 | + } |
| 202 | + |
| 203 | + /// 将虚拟地址转换为不可变引用 |
| 204 | + /// |
| 205 | + /// # Safety |
| 206 | + /// |
| 207 | + /// 调用者必须确保地址指向的内存已初始化且未被其他可变引用借用。 |
| 208 | + pub unsafe fn as_ref<'a>(&self) -> &'a T { |
| 209 | + unsafe { &*(self.inner as *const T) } |
| 210 | + } |
| 211 | + |
| 212 | + /// 将虚拟地址转换为可变引用 |
| 213 | + /// |
| 214 | + /// # Safety |
| 215 | + /// |
| 216 | + /// 调用者必须确保地址指向的内存已初始化且无其他活跃引用。 |
| 217 | + pub unsafe fn as_mut<'a>(&mut self) -> &'a mut T { |
| 218 | + unsafe { &mut *(self.inner as *mut T) } |
| 219 | + } |
| 220 | +} |
| 221 | + |
| 222 | +// ============================================================================ |
| 223 | +// 用户地址 (UA) — 不能直接转指针,必须通过安全机制访问 |
| 224 | +// ============================================================================ |
| 225 | + |
| 226 | +impl<T> Address<User, T> { |
| 227 | + /// 用户地址不能直接转换为裸指针。 |
| 228 | + /// 必须通过 `copy_from_user`/`copy_to_user` 等安全机制访问。 |
| 229 | + #[deprecated(note = "UA 不能直接转指针,请使用 copy_from_user/copy_to_user")] |
| 230 | + pub fn as_ptr(&self) -> *const T { |
| 231 | + panic!("UA::as_ptr() is forbidden; use copy_from_user/copy_to_user") |
| 232 | + } |
| 233 | +} |
| 234 | + |
| 235 | +// ============================================================================ |
| 236 | +// AddressTranslator — 跨地址空间转换 |
| 237 | +// ============================================================================ |
| 238 | + |
| 239 | +/// 地址转换器 trait。 |
| 240 | +/// |
| 241 | +/// 只有通过 `Translator` 才能跨地址空间转换。 |
| 242 | +/// |
| 243 | +/// # 类型参数 |
| 244 | +/// |
| 245 | +/// * `T` - 要转换的地址携带的数据类型 |
| 246 | +pub trait AddressTranslator<T>: 'static + Send + Sync { |
| 247 | + /// 虚拟地址 → 物理地址 |
| 248 | + fn virt_to_phys(va: TVA<T>) -> TPA<T>; |
| 249 | + |
| 250 | + /// 物理地址 → 虚拟地址 |
| 251 | + fn phys_to_virt(pa: TPA<T>) -> TVA<T>; |
| 252 | +} |
| 253 | + |
| 254 | +// ============================================================================ |
| 255 | +// unsafe impl Send/Sync |
| 256 | +// ============================================================================ |
| 257 | + |
| 258 | +unsafe impl<K: MemKind, T> Send for Address<K, T> {} |
| 259 | +unsafe impl<K: MemKind, T> Sync for Address<K, T> {} |
0 commit comments