You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
97050a17aa
Memory Protection Unit (MPU) Enhancements
This commit introduces a new MPU wrapper that places additional
restrictions on unprivileged tasks. The following is the list of changes
introduced with the new MPU wrapper:
1. Opaque and indirectly verifiable integers for kernel object handles:
All the kernel object handles (for example, queue handles) are now
opaque integers. Previously object handles were raw pointers.
2. Saving the task context in Task Control Block (TCB): When a task is
swapped out by the scheduler, the task's context is now saved in its
TCB. Previously the task's context was saved on its stack.
3. Execute system calls on a separate privileged only stack: FreeRTOS
system calls, which execute with elevated privilege, now use a
separate privileged only stack. Previously system calls used the
calling task's stack. The application writer can control the size of
the system call stack using new configSYSTEM_CALL_STACK_SIZE config
macro.
4. Memory bounds checks: FreeRTOS system calls which accept a pointer
and de-reference it, now verify that the calling task has required
permissions to access the memory location referenced by the pointer.
5. System call restrictions: The following system calls are no longer
available to unprivileged tasks:
- vQueueDelete
- xQueueCreateMutex
- xQueueCreateMutexStatic
- xQueueCreateCountingSemaphore
- xQueueCreateCountingSemaphoreStatic
- xQueueGenericCreate
- xQueueGenericCreateStatic
- xQueueCreateSet
- xQueueRemoveFromSet
- xQueueGenericReset
- xTaskCreate
- xTaskCreateStatic
- vTaskDelete
- vTaskPrioritySet
- vTaskSuspendAll
- xTaskResumeAll
- xTaskGetHandle
- xTaskCallApplicationTaskHook
- vTaskList
- vTaskGetRunTimeStats
- xTaskCatchUpTicks
- xEventGroupCreate
- xEventGroupCreateStatic
- vEventGroupDelete
- xStreamBufferGenericCreate
- xStreamBufferGenericCreateStatic
- vStreamBufferDelete
- xStreamBufferReset
Also, an unprivileged task can no longer use vTaskSuspend to suspend
any task other than itself.
We thank the following people for their inputs in these enhancements:
- David Reiss of Meta Platforms, Inc.
- Lan Luo, Xinhui Shao, Yumeng Wei, Zixia Liu, Huaiyu Yan and Zhen Ling
of School of Computer Science and Engineering, Southeast University,
China.
- Xinwen Fu of Department of Computer Science, University of
Massachusetts Lowell, USA.
- Yuequi Chen, Zicheng Wang, Minghao Lin of University of Colorado
Boulder, USA.
|
2 years ago | |
|---|---|---|
| .. | ||
| 78K0R | 2 years ago | |
| ARM_CA5_No_GIC | 2 years ago | |
| ARM_CA9 | 2 years ago | |
| ARM_CM0 | 2 years ago | |
| ARM_CM3 | 2 years ago | |
| ARM_CM4F | 2 years ago | |
| ARM_CM4F_MPU | 2 years ago | |
| ARM_CM7 | 2 years ago | |
| ARM_CM23 | 2 years ago | |
| ARM_CM23_NTZ/non_secure | 2 years ago | |
| ARM_CM33 | 2 years ago | |
| ARM_CM33_NTZ/non_secure | 2 years ago | |
| ARM_CM35P | 2 years ago | |
| ARM_CM35P_NTZ/non_secure | 2 years ago | |
| ARM_CM55 | 2 years ago | |
| ARM_CM55_NTZ/non_secure | 2 years ago | |
| ARM_CM85 | 2 years ago | |
| ARM_CM85_NTZ/non_secure | 2 years ago | |
| ARM_CRx_No_GIC | 2 years ago | |
| ATMega323 | 2 years ago | |
| AVR32_UC3 | 2 years ago | |
| AVR_AVRDx | 2 years ago | |
| AVR_Mega0 | 2 years ago | |
| AtmelSAM7S64 | 2 years ago | |
| AtmelSAM9XE | 2 years ago | |
| LPC2000 | 2 years ago | |
| MSP430 | 2 years ago | |
| MSP430X | 2 years ago | |
| RISC-V | 2 years ago | |
| RL78 | 2 years ago | |
| RX100 | 2 years ago | |
| RX600 | 2 years ago | |
| RX700v3_DPFPU | 2 years ago | |
| RXv2 | 2 years ago | |
| STR71x | 2 years ago | |
| STR75x | 2 years ago | |
| STR91x | 2 years ago | |
| V850ES | 2 years ago | |