Library mcertikos.virt.intel.VEPTInit
*********************************************************************** * * * The CertiKOS Certified Kit Operating System * * * * The FLINT Group, Yale University * * * * Copyright The FLINT Group, Yale University. All rights reserved. * * This file is distributed under the terms of the Yale University * * Non-Commercial License Agreement. * * * ***********************************************************************
Require Import Coqlib.
Require Import Maps.
Require Import ASTExtra.
Require Import Integers.
Require Import Floats.
Require Import Values.
Require Import Memory.
Require Import Events.
Require Import Stacklayout.
Require Import Globalenvs.
Require Import AsmX.
Require Import Smallstep.
Require Import AuxStateDataType.
Require Import Constant.
Require Import GlobIdent.
Require Import FlatMemory.
Require Import CommonTactic.
Require Import AuxLemma.
Require Import RealParams.
Require Import PrimSemantics.
Require Import LAsm.
Require Import XOmega.
Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.
Require Import CalRealPTPool.
Require Import CalRealPT.
Require Import CalRealIDPDE.
Require Import CalRealInitPTE.
Require Import CalRealPTB.
Require Import CalRealSMSPool.
Require Import CalRealProcModule.
Require Import INVLemmaMemory.
Require Import INVLemmaThread.
Require Import INVLemmaProc.
Require Import AbstractDataType.
Require Export VEPTOp.
Require Import LoadStoreSem3.
Section WITHMEM.
Local Open Scope Z_scope.
Context `{real_params: RealParams}.
Context `{Hstencil: Stencil}.
Context `{Hmem: Mem.MemoryModel}.
Context `{Hmwd: UseMemWithData mem}.
Local Open Scope Z_scope.
Context `{real_params: RealParams}.
Context `{Hstencil: Stencil}.
Context `{Hmem: Mem.MemoryModel}.
Context `{Hmwd: UseMemWithData mem}.
Section INV.
Global Instance ept_mmap_inv: PreservesInvariants ept_mmap_spec.
Proof.
constructor; intros; inv_generic_sem H;
functional inversion H2; subst; trivial.
-
inv H0; functional inversion H.
constructor; trivial; intros; simpl in ×.
-
inv H0; functional inversion H.
constructor; simpl; eauto 2; try congruence; intros.
-
functional inversion H.
split; trivial.
Qed.
Global Instance ept_set_permission_inv: PreservesInvariants ept_set_permission_spec.
Proof.
constructor; intros; inv_generic_sem H;
functional inversion H2; subst; trivial.
-
inv H0; functional inversion H.
constructor; trivial; intros; simpl in ×.
-
inv H0; functional inversion H.
constructor; simpl; eauto 2; try congruence; intros.
-
functional inversion H.
split; trivial.
Qed.
End INV.
Global Instance ept_mmap_inv: PreservesInvariants ept_mmap_spec.
Proof.
constructor; intros; inv_generic_sem H;
functional inversion H2; subst; trivial.
-
inv H0; functional inversion H.
constructor; trivial; intros; simpl in ×.
-
inv H0; functional inversion H.
constructor; simpl; eauto 2; try congruence; intros.
-
functional inversion H.
split; trivial.
Qed.
Global Instance ept_set_permission_inv: PreservesInvariants ept_set_permission_spec.
Proof.
constructor; intros; inv_generic_sem H;
functional inversion H2; subst; trivial.
-
inv H0; functional inversion H.
constructor; trivial; intros; simpl in ×.
-
inv H0; functional inversion H.
constructor; simpl; eauto 2; try congruence; intros.
-
functional inversion H.
split; trivial.
Qed.
End INV.
Definition eptinit_fresh : compatlayer (cdata RData) :=
ept_gpa_to_hpa ↦ gensem ept_gpa_to_hpa_spec
⊕ ept_mmap ↦ gensem ept_mmap_spec
⊕ ept_set_permission ↦ gensem ept_set_permission_spec.
Definition eptinit_passthrough : compatlayer (cdata RData) :=
fload ↦ gensem fload_spec
⊕ fstore ↦ gensem fstore_spec
⊕ vmxinfo_get ↦ gensem vmxinfo_get_spec
⊕ palloc ↦ gensem palloc_spec
⊕ pt_read ↦ gensem ptRead_spec
⊕ pt_resv ↦ gensem ptResv_spec
⊕ shared_mem_status ↦ gensem shared_mem_status_spec
⊕ offer_shared_mem ↦ gensem offer_shared_mem_spec
⊕ get_curid ↦ gensem get_curid_spec
⊕ thread_wakeup ↦ gensem thread_wakeup_spec
⊕ syncreceive_chan ↦ gensem syncreceive_chan_spec
⊕ syncsendto_chan_pre ↦ gensem syncsendto_chan_pre_spec
⊕ syncsendto_chan_post ↦ gensem syncsendto_chan_post_spec
⊕ cli ↦ gensem cli_spec
⊕ sti ↦ gensem sti_spec
⊕ cons_buf_read ↦ gensem cons_buf_read_spec
⊕ serial_putc ↦ gensem serial_putc_spec
⊕ serial_intr_disable ↦ gensem serial_intr_disable_spec
⊕ serial_intr_enable ↦ gensem serial_intr_enable_spec
⊕ uctx_get ↦ gensem uctx_get_spec
⊕ uctx_set ↦ gensem uctx_set_spec
⊕ proc_create ↦ proc_create_compatsem proc_create_spec
⊕ ept_add_mapping ↦ gensem ept_add_mapping_spec
⊕ ept_init ↦ gensem ept_init_spec
⊕ ept_invalidate_mappings ↦ gensem ept_invalidate_mappings_spec
⊕ container_get_quota ↦ gensem container_get_quota_spec
⊕ container_get_usage ↦ gensem container_get_usage_spec
⊕ container_can_consume ↦ gensem container_can_consume_spec
⊕ host_in ↦ primcall_general_compatsem hostin_spec
⊕ host_out ↦ primcall_general_compatsem hostout_spec
⊕ trap_get ↦ primcall_trap_info_get_compatsem trap_info_get_spec
⊕ trap_set ↦ primcall_trap_info_ret_compatsem trap_info_ret_spec
⊕ thread_yield ↦ primcall_thread_schedule_compatsem thread_yield_spec (prim_ident:= thread_yield)
⊕ thread_sleep ↦ primcall_thread_transfer_compatsem thread_sleep_spec
⊕ proc_start_user ↦ primcall_start_user_compatsem proc_start_user_spec
⊕ proc_exit_user ↦ primcall_exit_user_compatsem proc_exit_user_spec
⊕ accessors ↦ {| exec_load := (@exec_loadex _ _ Hmwd);
exec_store := (@exec_storeex _ _ Hmwd) |}.
Definition eptinit : compatlayer (cdata RData) := eptinit_fresh ⊕ eptinit_passthrough.
End WITHMEM.
ept_gpa_to_hpa ↦ gensem ept_gpa_to_hpa_spec
⊕ ept_mmap ↦ gensem ept_mmap_spec
⊕ ept_set_permission ↦ gensem ept_set_permission_spec.
Definition eptinit_passthrough : compatlayer (cdata RData) :=
fload ↦ gensem fload_spec
⊕ fstore ↦ gensem fstore_spec
⊕ vmxinfo_get ↦ gensem vmxinfo_get_spec
⊕ palloc ↦ gensem palloc_spec
⊕ pt_read ↦ gensem ptRead_spec
⊕ pt_resv ↦ gensem ptResv_spec
⊕ shared_mem_status ↦ gensem shared_mem_status_spec
⊕ offer_shared_mem ↦ gensem offer_shared_mem_spec
⊕ get_curid ↦ gensem get_curid_spec
⊕ thread_wakeup ↦ gensem thread_wakeup_spec
⊕ syncreceive_chan ↦ gensem syncreceive_chan_spec
⊕ syncsendto_chan_pre ↦ gensem syncsendto_chan_pre_spec
⊕ syncsendto_chan_post ↦ gensem syncsendto_chan_post_spec
⊕ cli ↦ gensem cli_spec
⊕ sti ↦ gensem sti_spec
⊕ cons_buf_read ↦ gensem cons_buf_read_spec
⊕ serial_putc ↦ gensem serial_putc_spec
⊕ serial_intr_disable ↦ gensem serial_intr_disable_spec
⊕ serial_intr_enable ↦ gensem serial_intr_enable_spec
⊕ uctx_get ↦ gensem uctx_get_spec
⊕ uctx_set ↦ gensem uctx_set_spec
⊕ proc_create ↦ proc_create_compatsem proc_create_spec
⊕ ept_add_mapping ↦ gensem ept_add_mapping_spec
⊕ ept_init ↦ gensem ept_init_spec
⊕ ept_invalidate_mappings ↦ gensem ept_invalidate_mappings_spec
⊕ container_get_quota ↦ gensem container_get_quota_spec
⊕ container_get_usage ↦ gensem container_get_usage_spec
⊕ container_can_consume ↦ gensem container_can_consume_spec
⊕ host_in ↦ primcall_general_compatsem hostin_spec
⊕ host_out ↦ primcall_general_compatsem hostout_spec
⊕ trap_get ↦ primcall_trap_info_get_compatsem trap_info_get_spec
⊕ trap_set ↦ primcall_trap_info_ret_compatsem trap_info_ret_spec
⊕ thread_yield ↦ primcall_thread_schedule_compatsem thread_yield_spec (prim_ident:= thread_yield)
⊕ thread_sleep ↦ primcall_thread_transfer_compatsem thread_sleep_spec
⊕ proc_start_user ↦ primcall_start_user_compatsem proc_start_user_spec
⊕ proc_exit_user ↦ primcall_exit_user_compatsem proc_exit_user_spec
⊕ accessors ↦ {| exec_load := (@exec_loadex _ _ Hmwd);
exec_store := (@exec_storeex _ _ Hmwd) |}.
Definition eptinit : compatlayer (cdata RData) := eptinit_fresh ⊕ eptinit_passthrough.
End WITHMEM.