Hi all
I am writing a program (API server which implements API and support for LX format executables found in OS/2 operating system). So, it parses an executable, applies
fixups and starts it. At the moment it loads a simple executable which calls a single API printing a string on a screen. It generally works, but I got strange IPC problems.
There is a function in a server, trampoline() which starts a previously prepared executable in a separate task (it is a kind of wrapper around that executable). After
executable termination, trampoline() must synchronize with the server, passing it a message about termination. Then the API server can terminate itself.
For synchronization, I tried two ways:
1)
sending a message to main server thread through DICE interfaces. As I understand, a problem can be with that client and server stubs are linked to a single program. A
code of trampoline() looks like that:
static void
trampoline(unsigned long esp_data, unsigned long eip_data)
{
CORBA_Environment env = dice_default_environment;
l4_threadid_t dest;
l4_msgdope_t result;
l4_umword_t w0, w1;
int err;
asm(
"pop %%eax\n"
"pop %%eax\n"
"movl %[esp_data], %%eax \n" /* Put old esp in eax */
"movl %[eip_data], %%ecx \n"
"movl %%ebp, %%edx \n" /* Copy ebp to edx. Base pointer for this functions local variables.*/
"movl %%eax, %%esp \n" /* Copy eax to esp. Stack pointer*/
/* We have changed the stack so it now points to out LX image.*/
"call *%%ecx \n" /* Call our main() */
:
:[esp_data] "m" (esp_data), /* esp+ data_mmap+8+*/
[ebp_data] "m" (ebp_data), /* esp+ data_mmap+8+*/
[eip_data] "m" (eip_data));
LOG("task end");
// query OS/2 server task id
names_query_name("os2server", &dest) ;
LOG("os2server uid=%x.%x", dest.id.task, dest.id.lthread);
// send a signal about termination to OS/2 server
env.utcb = l4_utcb_get();
os2server_wakeup_call (&dest, &env);
if (DICE_HAS_EXCEPTION(&env))
printf("Error: %d.%d",
DICE_EXCEPTION_MAJOR(&env),
DICE_EXCEPTION_MINOR(&env));
}
Without setting env.utcb to UTCB pointer, it traps because of null pointer dereferencing. (In os2server_wakeup_call() function code generated by DICE. This is the
disassembly code:
_os2server_wakeup_wakeup_wakeup_msg_buffer_t *_dice_msg_buffer = (_os2server_wakeup_wakeup_wakeup_msg_buffer_t*)_dice_corba_env->utcb->values;
1806a19: 8b 45 0c mov 0xc(%ebp),%eax
1806a1c: 8b 40 10 mov 0x10(%eax),%eax
1806a1f: 89 45 dc mov %eax,0xffffffdc(%ebp)
l4_umword_t _exception __attribute__ ((unused));
l4_umword_t _dummy __attribute__ ((unused));
l4_msgtag_t tag_dummy __attribute__ ((unused)) = l4_msgtag(0,0,0,0);
l4_msgdope_t _dice_result = { raw: 0 };
_dice_msg_buffer->wakeup_wakeup_in._dice_opcode = _OS2SERVER_WAKEUP_WAKEUP_OPCODE;
1806a22: c7 00 01 00 10 00 movl $0x100001,(%eax)
-- it traps when assigning an opcode at the last instruction. I thought this is because of UTCB pointer in env points to OS/2 server's main thread UTCB but trampoline()
executes in different task, so UTCB is other. When I added UTCB pointer, it stopped trapping but I got DICEexception with MAJOR code 2 and MINOR 2 (IPC error).
On server side, a function os2server_wakeup_component() must be called which intended to reset a semaphore, on which a main thread waits for trampoline()
termination:
void DICE_CV
os2server_wakeup_component (CORBA_Object _dice_corba_obj,
CORBA_Server_Environment *_dice_corba_env)
{
LOG("wakeup called");
l4semaphore_up(&sem);
}
-- It never gets called because of IPC error in os2server_wakeup_call ().
2)
Also, I tried another way -- there is a thread on the server side waiting for a message (I decided to create another thread besides the main one to not interfere with DICE):
static void
os2server_wakeup_thread (void)
{
l4_msgdope_t result;
l4_threadid_t src, id;
l4_umword_t w0, w1;
/* because of l4thread_create(..., L4THREAD_CREATE_SYNC) */
l4thread_started(0);
names_register("os2server.wakeup");
while (1)
{
LOG("waiting for message");
l4_ipc_wait (&src,
L4_IPC_SHORT_MSG, &w0, &w1,
L4_IPC_NEVER, &result);
LOG("message received");
if (w0 == 0 && w1 == 0)
{
l4semaphore_up(&sem);
LOG("semaphore reset");
}
}
}
trampoline() code is modified this way:
static void
trampoline(unsigned long esp_data, unsigned long eip_data)
{
l4_threadid_t dest;
l4_msgdope_t result;
l4_umword_t w0, w1;
int err;
asm(
"pop %%eax\n"
"pop %%eax\n"
"movl %[esp_data], %%eax \n" /* Put old esp in eax */
"movl %[eip_data], %%ecx \n"
"movl %%ebp, %%edx \n" /* Copy ebp to edx. Base pointer for this functions local variables.*/
"movl %%eax, %%esp \n" /* Copy eax to esp. Stack pointer*/
/* We have changed the stack so it now points to out LX image.*/
"call *%%ecx \n" /* Call our main() */
:
:[esp_data] "m" (esp_data), /* esp+ data_mmap+8+*/
[ebp_data] "m" (ebp_data), /* esp+ data_mmap+8+*/
[eip_data] "m" (eip_data));
LOG("task end");
if (!names_waitfor_name("os2server.wakeup", &dest, 10000))
LOG("wakeup thread not found");
else
LOG("wakeup thread found, uid=%x.%x", dest.id.task, dest.id.lthread);
w0 = 0; w1 = 0;
err = l4_ipc_send(dest,
L4_IPC_SHORT_MSG,
w0,
w1,
L4_IPC_NEVER,
&result);
if (err)
LOG("error: %ld", err);
else
LOG("message transmitted");
LOG("msgdope = %lu", result);
LOG("mini33 exit");
}
This way I get an IPC error too. The return code from l4_ipc_send() is equal to 16 but msgdope is clear (zeroes). I found a description of errors returned in message
dopes but what means a return code of 16, I don't know. (For message dope, a error code of 0x10 means that source or destination does not exist, but I am sure it
exists) So, l4_ipc_send() exits and l4_ipc_wait() on other side never exits.
Maybe, someone can help understanding why it won't work?
Thanks in advance.
