// Copyright (c) 1994-2009 Nokia Corporation and/or its subsidiary(-ies).
// All rights reserved.
// This component and the accompanying materials are made available
// under the terms of the License "Eclipse Public License v1.0"
// which accompanies this distribution, and is available
// at the URL "http://www.eclipse.org/legal/epl-v10.html".
//
// Initial Contributors:
// Nokia Corporation - initial contribution.
//
// Contributors:
//
// Description:
// e32\memmodel\epoc\multiple\mprocess.cpp
// 
//

#include "memmodel.h"
#include "mmboot.h"
#include "cache_maintenance.h"
#include <demand_paging.h>

#define iMState		iWaitLink.iSpare1

// just for convenience...
#define KAmSelfMod	(DMemModelChunk::ECode | DMemModelChunk::EAddressLocal)

_LIT(KDollarDat,"$DAT");
_LIT(KLitDollarCode,"$CODE");
_LIT(KLitDllDollarData,"DLL$DATA");

#ifdef __CPU_HAS_BTB
extern void __FlushBtb();
#endif

const TInt KChunkGranularity=4;

/********************************************
 * Process
 ********************************************/
void DMemModelProcess::Destruct()
	{
	__ASSERT_ALWAYS(!iChunkCount && !iCodeChunk && !iDllDataChunk, MM::Panic(MM::EProcessDestructChunksRemaining));
	Kern::Free(iChunks);
	Kern::Free(iLocalSection);
	if (iOsAsid)
		{
		Mmu& m=Mmu::Get();
		MmuBase::Wait();
		m.FreeOsAsid(iOsAsid);
		iOsAsid=0;
		MmuBase::Signal();
#ifndef __SMP__
		LastUserSelfMod=0;  // must force a BTB flush when next selfmod chunk switched in
#endif
		}
#ifdef __CPU_HAS_BTB
	__FlushBtb();
#endif
	DProcess::Destruct();
	}

TInt DMemModelProcess::NewChunk(DChunk*& aChunk, SChunkCreateInfo& aInfo, TLinAddr& aRunAddr)
	{
	aChunk=NULL;
	DMemModelChunk* pC=NULL;
	TInt r=GetNewChunk(pC,aInfo);
	if (r!=KErrNone)
		{
		if (pC)
			pC->Close(NULL);
		return r;
		}
	TInt mapType=pC->iAttributes & DMemModelChunk::EMapTypeMask;
	pC->iOwningProcess=(mapType==DMemModelChunk::EMapTypeLocal)?this:NULL;
#ifdef __CPU_HAS_BTB
	if ((pC->iAttributes & KAmSelfMod) == KAmSelfMod)  // it's a potentially overlapping self-mod
		{
		iSelfModChunks++;
#ifndef __SMP__
		LastUserSelfMod = this;  // we become the last selfmodding process
#endif
		__FlushBtb();		// we need to do this, as there may be bad branches already in the btb
		}
#endif
	r=pC->Create(aInfo);
	if (r==KErrNone && (aInfo.iOperations & SChunkCreateInfo::EAdjust))
		{
		if (aInfo.iRunAddress!=0)
			pC->SetFixedAddress(aInfo.iRunAddress,aInfo.iPreallocated);
		if (aInfo.iPreallocated==0 && aInfo.iInitialTop!=0)
			{
			if (pC->iAttributes & DChunk::EDisconnected)
				{
				r=pC->Commit(aInfo.iInitialBottom,aInfo.iInitialTop-aInfo.iInitialBottom);
				}
			else if (pC->iAttributes & DChunk::EDoubleEnded)
				{
				r=pC->AdjustDoubleEnded(aInfo.iInitialBottom,aInfo.iInitialTop);
				}
			else
				{
				r=pC->Adjust(aInfo.iInitialTop);
				}
			}
		}
	if (r==KErrNone && (aInfo.iOperations & SChunkCreateInfo::EAdd))
		{
//			if (pC->iAttributes & DMemModelChunk::ECode)
//				MM::TheMmu->SyncCodeMappings();
		if (mapType!=DMemModelChunk::EMapTypeGlobal)
			{
			r=WaitProcessLock();
			if (r==KErrNone)
				{
				r=AddChunk(pC,aRunAddr,EFalse);
				SignalProcessLock();
				}
			}
		else
			aRunAddr=(TLinAddr)pC->Base();
		}
	if (r==KErrNone)
		{
		if(r==KErrNone)
			if(pC->iKernelMirror)
				aRunAddr = (TLinAddr)pC->iKernelMirror->Base();
		pC->iDestroyedDfc = aInfo.iDestroyedDfc;
		aChunk=(DChunk*)pC;
		}
	else
		pC->Close(NULL);	// NULL since chunk can't have been added to process
	return r;
	}

TInt DMemModelProcess::DoCreate(TBool aKernelProcess, TProcessCreateInfo& aInfo)
	{
	__KTRACE_OPT(KPROC,Kern::Printf(">DMemModelProcess::DoCreate %O",this));

	Mmu& m=Mmu::Get();
	TInt r=KErrNone;

	iSelfModChunks=0;  // we don't have any yet.

	if (aKernelProcess)
		{
		iAttributes |= ESupervisor;
		//iOsAsid=0;
//		Leave these till Mmu::Init2
//		if (m.iLocalPdSize)
//			iLocalPageDir=m.LinearToPhysical(TLinAddr(m.LocalPageDir(0)));
//		iGlobalPageDir=m.LinearToPhysical(TLinAddr(m.GlobalPageDir(0)));
		m.iAsidInfo[0]=((TUint32)this)|1;
		iAddressCheckMaskR=0xffffffff;
		iAddressCheckMaskW=0xffffffff;
		}
	else
		{
		MmuBase::Wait();
		r=m.NewOsAsid(EFalse);
		if (r>=0)
			{
			iOsAsid=r;
			if (m.iLocalPdSize)
				iLocalPageDir=m.LinearToPhysical(TLinAddr(m.LocalPageDir(r)));
			else
				iGlobalPageDir=m.LinearToPhysical(TLinAddr(m.GlobalPageDir(r)));
			m.iAsidInfo[r] |= (TUint32)this;
			r=KErrNone;
			}
		MmuBase::Signal();
		if (r==KErrNone && 0==(iLocalSection=TLinearSection::New(m.iUserLocalBase, m.iUserLocalEnd)) )
			r=KErrNoMemory;
		}

	__KTRACE_OPT(KPROC,Kern::Printf("OS ASID=%d, LPD=%08x, GPD=%08x, ASID info=%08x",iOsAsid,iLocalPageDir,
											iGlobalPageDir,m.iAsidInfo[iOsAsid]));
	__KTRACE_OPT(KPROC,Kern::Printf("<DMemModelProcess::DoCreate %d",r));
	return r;
	}

TInt DMemModelProcess::CreateDataBssStackArea(TProcessCreateInfo& aInfo)
	{
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess::CreateDataBssStackArea %O",this));
	Mmu& m=Mmu::Get();
	TInt dataBssSize=Mmu::RoundToPageSize(aInfo.iTotalDataSize);
	TInt maxSize=dataBssSize+PP::MaxStackSpacePerProcess;
	TLinAddr dataRunAddress=m.iUserLocalBase;
	iDataBssRunAddress=dataRunAddress;

	__KTRACE_OPT(KPROC,Kern::Printf("DataBssSize=%x, chunk max size %x",dataBssSize,maxSize));

	SChunkCreateInfo cinfo;
	cinfo.iGlobal=EFalse;
	cinfo.iAtt=TChunkCreate::EDisconnected;
	cinfo.iForceFixed=EFalse;
	cinfo.iOperations=SChunkCreateInfo::EAdjust|SChunkCreateInfo::EAdd;
	cinfo.iType=EUserData;
	cinfo.iMaxSize=maxSize;
	cinfo.iInitialBottom=0;
	cinfo.iInitialTop=dataBssSize;
	cinfo.iPreallocated=0;
	cinfo.iName.Set(KDollarDat);
	cinfo.iOwner=this;
	cinfo.iRunAddress=0;
	TLinAddr cb;
	TInt r=NewChunk((DChunk*&)iDataBssStackChunk,cinfo,cb);
	return r;
	}

TInt DMemModelProcess::AddChunk(DChunk* aChunk, TBool isReadOnly)
	{
	DMemModelChunk* pC=(DMemModelChunk*)aChunk;
	if ((pC->iAttributes & DMemModelChunk::EPrivate) && this!=pC->iOwningProcess)
		return KErrAccessDenied;
	TInt r=WaitProcessLock();
	if (r==KErrNone)
		{
		TInt pos=0;
		r=ChunkIndex(pC,pos);
		TLinAddr dataSectionBase=0;
		if (r==0) // Found the chunk in this process, just up its count
			{
			iChunks[pos].iAccessCount++;
			__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess::AddChunk %08x to %08x (Access count incremented to %d)",aChunk,this,iChunks[pos].iAccessCount));
			SignalProcessLock();
			return KErrNone;
			}
		r=AddChunk(pC,dataSectionBase,isReadOnly);
		SignalProcessLock();
		}
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess::AddChunk returns %d",r));
	return r;
	}

void M::FsRegisterThread()
	{
	DMemModelChunk* pC=(DMemModelChunk*)PP::TheRamDriveChunk;
	TInt mapType=pC->iAttributes & DMemModelChunk::EMapTypeMask;
	if (mapType!=DMemModelChunk::EMapTypeLocal)
		{
		DMemModelProcess* pP=(DMemModelProcess*)TheCurrentThread->iOwningProcess;
		TLinAddr dataSectionBase;
		TInt r=pP->WaitProcessLock();
		if (r==KErrNone)
			r=pP->AddChunk(pC,dataSectionBase,EFalse);
		__ASSERT_ALWAYS(r==KErrNone, MM::Panic(MM::EFsRegisterThread));
		pP->SignalProcessLock();
		}
	}

TInt DMemModelProcess::AddChunk(DMemModelChunk* aChunk, TLinAddr& aDataSectionBase, TBool isReadOnly)
	{
	//
	// Must hold the process $LOCK mutex before calling this
	//
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess::AddChunk %O to %O",aChunk,this));
	SChunkInfo *pC=iChunks;
	SChunkInfo *pE=pC+iChunkCount-1;
	TLinAddr base=TLinAddr(aChunk->iBase);
	TInt i=0;

#ifdef __CPU_HAS_BTB
	if ((aChunk->iAttributes & KAmSelfMod)==KAmSelfMod)  // it's a potentially overlapping self-mod
		{
		iSelfModChunks++;
#ifndef __SMP__
		LastUserSelfMod = this;  // we become the last selfmodding process
#endif
		__FlushBtb();		// we need to do this, as there may be bad branches already in the btb
		}
#endif
	if (iChunkCount)
		{
		for (; pE>=pC && TLinAddr(pE->iChunk->iBase)>base; --pE);
		if (pE>=pC && TLinAddr(pE->iChunk->iBase)+pE->iChunk->iMaxSize>base)
			return KErrInUse;
		pC=pE+1;
		if (pC<iChunks+iChunkCount && base+aChunk->iMaxSize>TLinAddr(pC->iChunk->iBase))
			return KErrInUse;
		i=pC-iChunks;
		}
	if (iChunkCount==iChunkAlloc)
		{
		TInt newAlloc=iChunkAlloc+KChunkGranularity;
		TInt r=Kern::SafeReAlloc((TAny*&)iChunks,iChunkAlloc*sizeof(SChunkInfo),newAlloc*sizeof(SChunkInfo));
		if (r!=KErrNone)
			return r;
		pC=iChunks+i;
		iChunkAlloc=newAlloc;
		}
	memmove(pC+1,pC,(iChunkCount-i)*sizeof(SChunkInfo));
	++iChunkCount;
	pC->isReadOnly=isReadOnly;
	pC->iAccessCount=1;
	pC->iChunk=aChunk;
	aDataSectionBase=base;
	Mmu& m=Mmu::Get();
	if (aChunk->iOsAsids)
		{
		// only need to do address space manipulation for shared chunks
		MmuBase::Wait();
		aChunk->iOsAsids->Alloc(iOsAsid,1);
		TLinAddr a;
		TInt i=0;
		for (a=TLinAddr(aChunk->iBase); a<TLinAddr(aChunk->iBase)+aChunk->iMaxSize; a+=m.iChunkSize, ++i)
			{
			TInt ptid=aChunk->iPageTables[i];
			if (ptid!=0xffff)
				m.DoAssignPageTable(ptid,a,aChunk->iPdePermissions,(const TAny*)iOsAsid);
			}
		MmuBase::Signal();
		}
	if (aChunk->iChunkType==ERamDrive)
		{
		NKern::LockSystem();
		iAddressCheckMaskR |= m.iRamDriveMask;
		iAddressCheckMaskW |= m.iRamDriveMask;
		NKern::UnlockSystem();
		}
	__DEBUG_EVENT(EEventUpdateProcess, this);
	return KErrNone;
	}

void DMemModelProcess::DoRemoveChunk(TInt aIndex)
	{
	__DEBUG_EVENT(EEventUpdateProcess, this);
	DMemModelChunk* chunk = iChunks[aIndex].iChunk;
	memmove(iChunks+aIndex, iChunks+aIndex+1, (iChunkCount-aIndex-1)*sizeof(SChunkInfo));
	--iChunkCount;
	Mmu& m=Mmu::Get();
	if (chunk->iOsAsids)
		{
		// only need to do address space manipulation for shared chunks
		MmuBase::Wait();
		chunk->iOsAsids->Free(iOsAsid);
		TLinAddr a;
		for (a=TLinAddr(chunk->iBase); a<TLinAddr(chunk->iBase)+chunk->iMaxSize; a+=m.iChunkSize)
			m.DoUnassignPageTable(a,(const TAny*)iOsAsid);
		TUint32 mask=(chunk->iAttributes&DMemModelChunk::ECode)?Mmu::EFlushITLB:0;
		m.GenericFlush(mask|Mmu::EFlushDTLB);

		MmuBase::Signal();
		}
	if (chunk->iChunkType==ERamDrive)
		{
		NKern::LockSystem();
		iAddressCheckMaskR &= ~m.iRamDriveMask;
		iAddressCheckMaskW &= ~m.iRamDriveMask;
		NKern::UnlockSystem();
		}
	}

/**
Final chance for process to release resources during its death.

Called with process $LOCK mutex held (if it exists).
This mutex will not be released before it is deleted.
I.e. no other thread will ever hold the mutex again.
*/
void DMemModelProcess::FinalRelease()
	{
	// Clean up any left over chunks (such as SharedIo buffers)
	if(iProcessLock)
		while(iChunkCount)
			DoRemoveChunk(0);
	}

void DMemModelProcess::RemoveChunk(DMemModelChunk *aChunk)
	{
	// note that this can't be called after the process $LOCK mutex has been deleted
	// since it can only be called by a thread in this process doing a handle close or
	// dying, or by the process handles array being deleted due to the process dying,
	// all of which happen before $LOCK is deleted.
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess %O RemoveChunk %O",this,aChunk));
	Kern::MutexWait(*iProcessLock);
	TInt pos=0;
	TInt r=ChunkIndex(aChunk,pos);

	if (r==KErrNone) // Found the chunk
		{
		__KTRACE_OPT(KPROC,Kern::Printf("Chunk access count %d",iChunks[pos].iAccessCount));
		if (--iChunks[pos].iAccessCount==0)
			{
			DoRemoveChunk(pos);
#ifdef __CPU_HAS_BTB
			if ((aChunk->iAttributes & KAmSelfMod)==KAmSelfMod)  // was a self-mod code chunk
				if (iSelfModChunks)
					iSelfModChunks--;
#endif
			}
		}
	Kern::MutexSignal(*iProcessLock);
	}

TInt DMemModelProcess::ChunkIndex(DMemModelChunk* aChunk,TInt& aPos)
	{
	if (!aChunk)
		return KErrNotFound;
	SChunkInfo *pC=iChunks;
	SChunkInfo *pE=pC+iChunkCount;
	for (; pC<pE && pC->iChunk!=aChunk; ++pC);
	if (pC==pE)
		return KErrNotFound;
	aPos=pC-iChunks;
	return KErrNone;
	}

TInt DMemModelProcess::MapCodeSeg(DCodeSeg* aSeg)
	{
	DMemModelCodeSeg& seg=*(DMemModelCodeSeg*)aSeg;
	__KTRACE_OPT(KDLL,Kern::Printf("Process %O MapCodeSeg %C", this, aSeg));
	TBool kernel_only=( (seg.iAttr&(ECodeSegAttKernel|ECodeSegAttGlobal)) == ECodeSegAttKernel );
	if (kernel_only && !(iAttributes&ESupervisor))
		return KErrNotSupported;
	if (seg.iAttr&ECodeSegAttKernel)
		return KErrNone;	// no extra mappings needed for kernel code
	TInt r=KErrNone;
	if (seg.Pages())
		r=MapUserRamCode(seg.Memory(),EFalse);
	if (seg.IsDll())
		{
		TInt total_data_size;
		TLinAddr data_base;
		seg.GetDataSizeAndBase(total_data_size, data_base);
		if (r==KErrNone && total_data_size)
			{
			TInt size=Mmu::RoundToPageSize(total_data_size);
			r=CommitDllData(data_base, size);
			if (r!=KErrNone && seg.Pages())
				UnmapUserRamCode(seg.Memory(), EFalse);
			}
		}
	return r;
	}

void DMemModelProcess::UnmapCodeSeg(DCodeSeg* aSeg)
	{
	DMemModelCodeSeg& seg=*(DMemModelCodeSeg*)aSeg;
	__KTRACE_OPT(KDLL,Kern::Printf("Process %O UnmapCodeSeg %C", this, aSeg));
	if (seg.iAttr&ECodeSegAttKernel)
		return;	// no extra mappings needed for kernel code
	if (seg.IsDll())
		{
		TInt total_data_size;
		TLinAddr data_base;
		seg.GetDataSizeAndBase(total_data_size, data_base);
		if (total_data_size)
			DecommitDllData(data_base, Mmu::RoundToPageSize(total_data_size));
		}
	if (seg.Pages())
		UnmapUserRamCode(seg.Memory(), EFalse);
	}

void DMemModelProcess::RemoveDllData()
//
// Call with CodeSegLock held
//
	{
	}

TInt DMemModelProcess::CreateCodeChunk()
	{
	__KTRACE_OPT(KDLL,Kern::Printf("DMemModelProcess %O CreateCodeChunk",this));
	TBool kernel=iAttributes&ESupervisor;
	Mmu& m=Mmu::Get();
	SChunkCreateInfo c;
	c.iGlobal=kernel;
	c.iAtt = TChunkCreate::EDisconnected | (kernel? 0 : TChunkCreate::EMemoryNotOwned);
	c.iForceFixed=EFalse;
	c.iOperations=SChunkCreateInfo::EAdjust|SChunkCreateInfo::EAdd;
	c.iRunAddress=kernel ? 0 : m.iUserCodeBase;
	c.iPreallocated=0;
	c.iType=kernel ? EKernelCode : EUserCode;
	c.iMaxSize=m.iMaxUserCodeSize;
	c.iName.Set(KLitDollarCode);
	c.iOwner=this;
	c.iInitialTop=0;
	TLinAddr runAddr;
	TInt r = NewChunk((DChunk*&)iCodeChunk,c,runAddr);
	return r;
	}

void DMemModelProcess::FreeCodeChunk()
	{
	iCodeChunk->Close(this);
	iCodeChunk=NULL;
	}

TInt DMemModelProcess::MapUserRamCode(DMemModelCodeSegMemory* aMemory, TBool aLoading)
	{
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess %O MapUserRamCode %C %d %d %d",
									this, aMemory->iCodeSeg, aLoading, iOsAsid, aMemory->iIsDemandPaged));
	__ASSERT_MUTEX(DCodeSeg::CodeSegLock);

	TInt r;

	if (!iCodeChunk)
		{
		r=CreateCodeChunk();
		__KTRACE_OPT(KPROC,Kern::Printf("CreateCodeChunk returns %d", r));
		if (r!=KErrNone)
			return r;
		}

	MmuBase::Wait();

	Mmu& m=Mmu::Get();
	TInt offset=aMemory->iRamInfo.iCodeRunAddr-TLinAddr(iCodeChunk->iBase);
	TInt codeSize = aMemory->iPageCount<<m.iPageShift;
	TBool paged = aMemory->iIsDemandPaged;
	DChunk::TCommitType commitType = paged ? DChunk::ECommitVirtual : DChunk::ECommitDiscontiguousPhysical;
	r=iCodeChunk->Commit(offset, codeSize, commitType, aMemory->iPages);
	__KTRACE_OPT(KPROC,Kern::Printf("Commit Pages returns %d", r));
	if(r==KErrNone)
		{
		if (aLoading && !paged)
			{
			iCodeChunk->ApplyPermissions(offset, codeSize, m.iUserCodeLoadPtePerm);
			UNLOCK_USER_MEMORY();
			memset((TAny*)(aMemory->iRamInfo.iCodeLoadAddr+aMemory->iRamInfo.iCodeSize+aMemory->iRamInfo.iDataSize), 0x03, codeSize-(aMemory->iRamInfo.iCodeSize+aMemory->iRamInfo.iDataSize));
			LOCK_USER_MEMORY();
			}
		if(aLoading && aMemory->iDataPageCount)
			{
			TInt dataSize = aMemory->iDataPageCount<<m.iPageShift;
			r=iCodeChunk->Commit(offset+codeSize, dataSize, DChunk::ECommitDiscontiguousPhysical, aMemory->iPages+aMemory->iPageCount);
			if(r==KErrNone)
				{
				iCodeChunk->ApplyPermissions(offset+codeSize, dataSize, m.iUserCodeLoadPtePerm);
				UNLOCK_USER_MEMORY();
				memset((TAny*)(aMemory->iRamInfo.iDataLoadAddr+aMemory->iRamInfo.iDataSize), 0x03, dataSize-aMemory->iRamInfo.iDataSize);
				LOCK_USER_MEMORY();
				}
			}
		if(r!=KErrNone)
			{
			// error, so decommit up code pages we had already committed...
			DChunk::TDecommitType decommitType = paged ? DChunk::EDecommitVirtual : DChunk::EDecommitNormal;
			iCodeChunk->Decommit(offset, codeSize, decommitType);
			}
		else
			{
			// indicate codeseg is now successfully mapped into the process...
			NKern::LockSystem();
			aMemory->iOsAsids->Free(iOsAsid);
			NKern::UnlockSystem();
			}
		}

	MmuBase::Signal();

	if(r!=KErrNone && iCodeChunk->iSize==0)
		FreeCodeChunk(); // cleanup any unused code chunk we would otherwise leave lying around

	return r;
	}

void DMemModelProcess::UnmapUserRamCode(DMemModelCodeSegMemory* aMemory, TBool aLoading)
	{
	__KTRACE_OPT(KPROC,Kern::Printf("DMemModelProcess %O UnmapUserRamCode %C %d %d",
									this, aMemory->iCodeSeg, iOsAsid, aMemory->iIsDemandPaged != 0));

	__ASSERT_MUTEX(DCodeSeg::CodeSegLock);

	MmuBase::Wait();

	NKern::LockSystem();
	aMemory->iOsAsids->Alloc(iOsAsid, 1);
	NKern::UnlockSystem();

	Mmu& m=Mmu::Get();
	__NK_ASSERT_DEBUG(iCodeChunk);
	TInt offset=aMemory->iRamInfo.iCodeRunAddr-TLinAddr(iCodeChunk->iBase);
	TInt codeSize = aMemory->iPageCount<<m.iPageShift;
	TBool paged = aMemory->iIsDemandPaged;
	DChunk::TDecommitType decommitType = paged ? DChunk::EDecommitVirtual : DChunk::EDecommitNormal;
	TInt r=iCodeChunk->Decommit(offset, codeSize, decommitType);
	__ASSERT_DEBUG(r==KErrNone, MM::Panic(MM::EDecommitFailed));
	(void)r; //Supress the warning in urel build

	if(aLoading && aMemory->iDataPageCount)
		{
		// decommit pages used to store data section...
		TInt dataSize = aMemory->iDataPageCount<<m.iPageShift;
		r=iCodeChunk->Decommit(offset+codeSize, dataSize);
		__ASSERT_DEBUG(r==KErrNone, MM::Panic(MM::EDecommitFailed));
		(void)r; //Supress the warning in urel build
		}
	__NK_ASSERT_DEBUG(iCodeChunk->iSize >= 0);

	MmuBase::Signal();

	if (iCodeChunk->iSize==0)
		FreeCodeChunk();
	}

TInt DMemModelProcess::CreateDllDataChunk()
	{
	__KTRACE_OPT(KDLL,Kern::Printf("DMemModelProcess %O CreateDllDataChunk",this));
	Mmu& m=Mmu::Get();
	SChunkCreateInfo c;
	c.iGlobal=EFalse;
	c.iAtt=TChunkCreate::EDisconnected;
	c.iForceFixed=EFalse;
	c.iOperations=SChunkCreateInfo::EAdjust|SChunkCreateInfo::EAdd;
	c.iRunAddress=m.iDllDataBase;
	c.iPreallocated=0;
	c.iType=EDllData;
	c.iMaxSize=m.iMaxDllDataSize;
	c.iName.Set(KLitDllDollarData);
	c.iOwner=this;
	c.iInitialTop=0;
	TLinAddr runAddr;
	return NewChunk((DChunk*&)iDllDataChunk,c,runAddr);
	}

void DMemModelProcess::FreeDllDataChunk()
	{
	iDllDataChunk->Close(this);
	iDllDataChunk=NULL;
	}

TInt DMemModelProcess::CommitDllData(TLinAddr aBase, TInt aSize)
	{
	__KTRACE_OPT(KDLL,Kern::Printf("DMemModelProcess %O CommitDllData %08x+%x",this,aBase,aSize));
	TInt r=KErrNone;
	if (!iDllDataChunk)
		r=CreateDllDataChunk();
	if (r==KErrNone)
		{
		TInt offset=aBase-(TLinAddr)iDllDataChunk->iBase;
		__ASSERT_ALWAYS(TUint32(offset)<TUint32(iDllDataChunk->iMaxSize),MM::Panic(MM::ECommitInvalidDllDataAddress));
		r=iDllDataChunk->Commit(offset, aSize);
		if (r!=KErrNone && iDllDataChunk->iSize==0)
			FreeDllDataChunk();
		}
	__KTRACE_OPT(KDLL,Kern::Printf("CommitDllData returns %d",r));
	return r;
	}

void DMemModelProcess::DecommitDllData(TLinAddr aBase, TInt aSize)
	{
	__KTRACE_OPT(KDLL,Kern::Printf("DMemModelProcess %O DecommitDllData %08x+%x",this,aBase,aSize));
	TInt offset=aBase-(TLinAddr)iDllDataChunk->iBase;
	TInt r=iDllDataChunk->Decommit(offset, aSize);
	__ASSERT_ALWAYS(r==KErrNone,MM::Panic(MM::EDecommitInvalidDllDataAddress));
	if (iDllDataChunk->iSize==0)
		FreeDllDataChunk();
	}

TInt DMemModelProcess::NewShPool(DShPool*& /* aPool */, TShPoolCreateInfo& /* aInfo */)
	{
	return KErrNotSupported;
	}


TInt DThread::RawRead(const TAny* aSrc, TAny* aDest, TInt aLength, TInt aFlags, TIpcExcTrap* /*aExcTrap*/)
//
// Read from the thread's process.
// Enter and return with system locked
// aSrc      Run address of memory to read
// aDest     Current address of destination
// aExcTrap  Exception trap object to be updated if the actual memory access is performed on other memory area then specified.
//           It happens when  reading is performed on un-aligned memory area.
//
	{
	Mmu& m=Mmu::Get();
	DMemModelThread& t=*(DMemModelThread*)TheCurrentThread;
	DMemModelProcess* pP=(DMemModelProcess*)iOwningProcess;
	TLinAddr src=(TLinAddr)aSrc;
	TLinAddr dest=(TLinAddr)aDest;
	TBool localIsSafe=ETrue;
	TInt result = KErrNone;

	while (aLength)
		{
		if (iMState==EDead)
			{
			result = KErrDied;
			break;
			}
		TLinAddr alias_src;
		TInt alias_size;
		TInt alias_result=t.Alias(src, pP, aLength, EMapAttrReadUser, alias_src, alias_size);
		if (alias_result<0)
			{
			result = KErrBadDescriptor;	// bad permissions
			break;
			}
		NKern::UnlockSystem();

		__KTRACE_OPT(KTHREAD2,Kern::Printf("DThread::RawRead %08x<-%08x+%x",dest,alias_src,alias_size));
		if(aFlags&KCheckLocalAddress)
			localIsSafe = m.ValidateLocalIpcAddress(dest,alias_size,ETrue);

		CHECK_PAGING_SAFE;

		COND_UNLOCK_USER_MEMORY(localIsSafe);

		if(alias_result)
			{
			// remote address is safe for direct access...
			if (localIsSafe)
				memcpy( (TAny*)dest, (const TAny*)alias_src, alias_size);
			else
				umemput( (TAny*)dest, (const TAny*)alias_src, alias_size);
			}
		else
			{
			// remote address is NOT safe for direct access, so use user permision checks when reading...
			if (localIsSafe)
				umemget( (TAny*)dest, (const TAny*)alias_src, alias_size);
			else
				uumemcpy( (TAny*)dest, (const TAny*)alias_src, alias_size);
			}

		LOCK_USER_MEMORY();

		src+=alias_size;
		dest+=alias_size;
		aLength-=alias_size;
		NKern::LockSystem();
		}
	t.RemoveAlias();
	return result;
	}

TInt DThread::RawWrite(const TAny* aDest, const TAny* aSrc, TInt aLength, TInt aFlags, DThread* anOriginatingThread, TIpcExcTrap* /*aExcTrap*/)
//
// Write to the thread's process.
// Enter and return with system locked
// aDest               Run address of memory to write
// aSrc                Current address of destination
// anOriginatingThread The thread on behalf of which this operation is performed (eg client of device driver).
// aExcTrap            Exception trap object to be updated if the actual memory access is performed on other memory area then specified.
//                     It happens when reading is performed on un-aligned memory area.
//
	{
	Mmu& m=Mmu::Get();
	DMemModelThread& t=*(DMemModelThread*)TheCurrentThread;
	DMemModelProcess* pP=(DMemModelProcess*)iOwningProcess;
	TLinAddr src=(TLinAddr)aSrc;
	TLinAddr dest=(TLinAddr)aDest;
	TBool localIsSafe=ETrue;
	DThread* pO=anOriginatingThread?anOriginatingThread:&t;
	DProcess* pF=K::TheFileServerProcess;
	TBool special=(iOwningProcess==pF && pO->iOwningProcess==pF);
	TUint32 perm=special ? EMapAttrWriteSup : EMapAttrWriteUser;
	TInt result = KErrNone;

	while (aLength)
		{
		if (iMState==EDead)
			{
			result = KErrDied;
			break;
			}
		TLinAddr alias_dest;
		TInt alias_size;
		TInt alias_result=t.Alias(dest, pP, aLength, perm, alias_dest, alias_size);
		if (alias_result<0)
			{
			result = KErrBadDescriptor;	// bad permissions
			break;
			}
		NKern::UnlockSystem();

		__KTRACE_OPT(KTHREAD2,Kern::Printf("DThread::RawWrite %08x+%x->%08x",src,alias_size,alias_dest));
		if(aFlags&KCheckLocalAddress)
			localIsSafe = m.ValidateLocalIpcAddress(src,alias_size,EFalse);

		// Must check that it is safe to page, unless we are reading from unpaged ROM in which case
		// we allow it.  umemget and uumemcpy do this anyway, so we just need to check if
		// localIsSafe is set.
		if (localIsSafe)
			{
			CHECK_PAGING_SAFE_RANGE(src, aLength);
			CHECK_DATA_PAGING_SAFE_RANGE(dest, aLength);
			}

		COND_UNLOCK_USER_MEMORY(localIsSafe);

		if(alias_result)
			{
			// remote address is safe for direct access...
			if (localIsSafe)
				memcpy( (TAny*)alias_dest, (const TAny*)src, alias_size);
			else
				umemget( (TAny*)alias_dest, (const TAny*)src, alias_size);
			}
		else
			{
			// remote address is NOT safe for direct access, so use user permision checks when writing...
			if (localIsSafe)
				umemput( (TAny*)alias_dest, (const TAny*)src, alias_size);
			else
				uumemcpy( (TAny*)alias_dest, (const TAny*)src, alias_size);
			}

		LOCK_USER_MEMORY();

		src+=alias_size;
		dest+=alias_size;
		aLength-=alias_size;
		NKern::LockSystem();
		}
	t.RemoveAlias();
	return result;
	}

#ifdef __DEBUGGER_SUPPORT__

/**
@pre Calling thread must be in critical section
@pre CodeSeg mutex held
*/
TInt CodeModifier::SafeWriteCode(DProcess* aProcess, TLinAddr aAddress, TInt aSize, TUint aValue, void* aOldValue)
	{
	Mmu& m=Mmu::Get();
	MmuBase::Wait();

	NKern::LockSystem();

	// Find physical address of the page, the breakpoint belongs to
	TPhysAddr physAddr = m.LinearToPhysical(aAddress,((DMemModelProcess*)aProcess)->iOsAsid);
	__KTRACE_OPT(KDEBUGGER,Kern::Printf("CodeModifier::SafeWriteCode - PA:%x", physAddr));
	if (physAddr==KPhysAddrInvalid)
		{
		__KTRACE_OPT(KDEBUGGER,Kern::Printf("CodeModifier::SafeWriteCode - invalid VA"));
		NKern::UnlockSystem();
		MmuBase::Signal();
		return KErrBadDescriptor;
		}

	// Temporarily map physical page
	TLinAddr tempAddr = m.MapTemp (physAddr&~m.iPageMask, aAddress);
	tempAddr |=  aAddress & m.iPageMask;
	__KTRACE_OPT(KDEBUGGER,Kern::Printf("CodeModifier::SafeWriteCode - tempAddr:%x",tempAddr));

	//Set exception handler. Make sure the boundaries cover the worst case (aSize = 4)
	TIpcExcTrap xt;
	xt.iLocalBase=0;
	xt.iRemoteBase=(TLinAddr)tempAddr&~3; //word aligned.
	xt.iSize=sizeof(TInt);
	xt.iDir=1;

	TInt r=xt.Trap(NULL);
	if (r==0)
		{
		r = WriteCode(tempAddr, aSize, aValue, aOldValue);
		xt.UnTrap();
		}

	m.UnmapTemp();
	NKern::UnlockSystem();
	MmuBase::Signal();
	return r;	
	}

/**
@pre Calling thread must be in critical section
@pre CodeSeg mutex held
*/
TInt CodeModifier::WriteCode(TLinAddr aAddress, TInt aSize, TUint aValue, void* aOldValue)
	{
	// We do not want to be interrupted by e.g. ISR that will run altered code before IMB-Range.
	// Therefore, copy data and clean/invalidate caches with interrupts disabled.
	TInt irq=NKern::DisableAllInterrupts();
	switch(aSize)
		{
		case 1:
			*(TUint8*) aOldValue = *(TUint8*)aAddress;
			*(TUint8*) aAddress  = (TUint8)aValue;
			 break;
		case 2:
			*(TUint16*) aOldValue = *(TUint16*)aAddress;
			*(TUint16*) aAddress  = (TUint16)aValue;
			 break;
		default://It is 4 otherwise
			*(TUint32*) aOldValue = *(TUint32*)aAddress;
			*(TUint32*) aAddress  = (TUint32)aValue;
			 break;
		};
	CacheMaintenance::CodeChanged(aAddress, aSize, CacheMaintenance::ECodeModifier);
	NKern::RestoreInterrupts(irq);
	return KErrNone;
	}
#endif //__DEBUGGER_SUPPORT__


#ifdef __MARM__

// the body of ReadDesHeader is machine coded on ARM...
extern TInt ThreadDoReadAndParseDesHeader(DThread* aThread, const TAny* aSrc, TUint32* aDest);

TInt DThread::ReadAndParseDesHeader(const TAny* aSrc, TDesHeader& aDest)
//
// Read and parse the header of a remote descriptor.
// Enter and return with system locked
//
	{
	// todo: remove use of system lock from callers, when they have been un-exported from the kernel
	NKern::UnlockSystem();	
	TInt r = ThreadDoReadAndParseDesHeader(this,aSrc,(TUint32*)&aDest);
	NKern::LockSystem();
	return r;
	}


#else // !__MARM__


TInt DThread::ReadAndParseDesHeader(const TAny* aSrc, TDesHeader& aDest)
//
// Read and parse the header of a remote descriptor.
// Enter and return with system locked
//
	{
	static const TUint8 LengthLookup[16] = {4,8,12,8,12,0,0,0,0,0,0,0,0,0,0,0};

	DMemModelThread& t = *(DMemModelThread*)TheCurrentThread;
	TInt r = KErrBadDescriptor;

	CHECK_PAGING_SAFE;

	DMemModelProcess* pP = (DMemModelProcess*)iOwningProcess;
	TLinAddr src = (TLinAddr)aSrc;
	const TUint32* pAlias;
	TInt alias_size;
	TInt alias_result = t.Alias(src, pP, 12, EMapAttrReadUser, (TLinAddr&)pAlias, alias_size);
	if (alias_result<0)
		return KErrBadDescriptor;	// bad permissions
	NKern::UnlockSystem();
	t.iIpcClient = this;
	TUint32* dest = (TUint32*)&aDest;
	if (Kern::SafeRead(pAlias, dest, sizeof(TUint32)))
		goto fail;

	{
	TInt type=*dest>>KShiftDesType8;

	src += sizeof(TUint32);
	alias_size -=  sizeof(TUint32);
	++pAlias;
	++dest;

	TInt l=LengthLookup[type];
	if (l==0)
		goto fail;

	l -= sizeof(TUint32); // we've already read one word
	if (l>0 && alias_size)
		{
get_more:
		// more to go - get rest or as much as is currently aliased
		TInt ll = alias_size>=l ? l : alias_size;
		if(Kern::SafeRead(pAlias, dest, l))
			goto fail;
		l -= ll;
		src += TLinAddr(ll);
		dest = (TUint32*)(TLinAddr(dest) + TLinAddr(ll));
		}
	if (l>0)
		{
		// more to go - need to step alias on
		NKern::LockSystem();
		alias_result = t.Alias(src, pP, l, EMapAttrReadUser, (TLinAddr&)pAlias, alias_size);
		if (alias_result<0)
			goto fail_locked;
		NKern::UnlockSystem();
		goto get_more;
		}

	r = K::ParseDesHeader(aSrc, *(TRawDesHeader*)&aDest, aDest);
	}

fail:
	NKern::LockSystem();
fail_locked:
	t.RemoveAlias();
	t.iIpcClient = NULL;
	return r;
	}


#endif


DChunk* DThread::OpenSharedChunk(const TAny* aAddress, TBool aWrite, TInt& aOffset)
	{
	NKern::LockSystem();
	
	DMemModelProcess* pP = (DMemModelProcess*)iOwningProcess;
	DMemModelProcess::SChunkInfo* pS=pP->iChunks;
	DMemModelProcess::SChunkInfo* pC=pS+pP->iChunkCount;
	while(--pC>=pS && TUint(pC->iChunk->Base())>TUint(aAddress)) {};
	if(pC>=pS)
		{
		DMemModelChunk* chunk = pC->iChunk;
		if(chunk->iChunkType==ESharedKernelSingle || chunk->iChunkType==ESharedKernelMultiple)
			{
			TInt offset = (TInt)aAddress-(TInt)chunk->Base();
			if(TUint(offset)<TUint(chunk->iMaxSize) && chunk->Open()==KErrNone)
				{
				aOffset = offset;
				NKern::UnlockSystem();
				return chunk;
				}
			}
		}
	NKern::UnlockSystem();
	return 0;
	}

TInt DThread::PrepareMemoryForDMA(const TAny* aLinAddr, TInt aSize, TPhysAddr* aPhysicalPageList)
	{
	TInt asid = ((DMemModelProcess*)iOwningProcess)->iOsAsid;
	Mmu& m=(Mmu&)*MmuBase::TheMmu;
	return m.PreparePagesForDMA((TLinAddr)aLinAddr, aSize, asid, aPhysicalPageList);
	}

TInt DThread::ReleaseMemoryFromDMA(const TAny* aLinAddr, TInt aSize, TPhysAddr* aPhysicalPageList)
	{
	TInt pageCount = (((TInt)aLinAddr & KPageMask) + aSize + KPageMask) >> KPageShift;
	Mmu& m=(Mmu&)*MmuBase::TheMmu;
	return m.ReleasePagesFromDMA(aPhysicalPageList, pageCount);
	}