Skip to main content

UserPtConfig

Struct UserPtConfig 

Source
pub struct UserPtConfig {}
Expand description

The configuration for user page tables.

Trait Implementations§

Source§

impl Clone for UserPtConfig

Source§

fn clone(&self) -> UserPtConfig

Returns a duplicate of the value. Read more
1.0.0 (const: unstable) · Source§

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source. Read more
Source§

impl Debug for UserPtConfig

Source§

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter. Read more
Source§

impl PageTableConfig for UserPtConfig

Source§

open spec fn TOP_LEVEL_INDEX_RANGE_spec() -> Range<usize>

{ 0..256 }
Source§

open spec fn TOP_LEVEL_CAN_UNMAP_spec() -> b : bool

{ true }
Source§

exec fn TOP_LEVEL_INDEX_RANGE() -> Range<usize>

Source§

exec fn TOP_LEVEL_CAN_UNMAP() -> b : bool

Source§

open spec fn perm_well_formed_with_region( pa: Paddr, perm: Tracked<Option<Self::Perm>>, regions: MetaRegionOwners, ) -> bool

{
    perm@ is Some
        ==> {
            let idx = crate::specs::mm::frame::mapping::frame_to_index(pa);
            let frame_perm = perm@->0;
            &&& frame_perm.0 == regions.slots[idx]
            &&& frame_perm.1.frac() == 1
            &&& frame_perm.1.id() == regions.slot_owners[idx].metadata_perm.id()
            &&& MetaSlot::perms_related(*frame_perm.0, frame_perm.1.resource())

        }
}
Source§

proof fn lemma_none_perm_well_formed(pa: Paddr, regions: MetaRegionOwners)

Source§

open spec fn item_into_raw_spec( item: Self::Item, ) -> (Paddr, PagingLevel, PageProperty, Tracked<Option<Self::Perm>>)

{
    (
        item.frame.start_paddr_spec(),
        1,
        item.prop,
        Tracked(
            Some((item.frame.tracked_slot_perm@, item.frame.tracked_metadata_perm@->0)),
        ),
    )
}
Source§

exec fn item_into_raw( item: Self::Item, ) -> res : (Paddr, PagingLevel, PageProperty, Tracked<Option<Self::Perm>>)

Source§

open spec fn item_from_raw_spec( paddr: Paddr, _level: PagingLevel, prop: PageProperty, perm: Tracked<Option<Self::Perm>>, ) -> Self::Item

{
    MappedItem {
        frame: UFrame {
            ptr: vstd::simple_pptr::PPtr(
                crate::mm::frame::meta::mapping::frame_to_meta(paddr),
                PhantomData,
            ),
            _marker: PhantomData,
            #[cfg(verus_keep_ghost_body)]
            tracked_slot_perm: Tracked((perm@->0).0),
            #[cfg(verus_keep_ghost_body)]
            tracked_metadata_perm: Tracked(Some((perm@->0).1)),
        },
        prop,
    }
}
Source§

unsafe exec fn item_from_raw( paddr: Paddr, level: PagingLevel, prop: PageProperty, Tracked(perm): Tracked<Option<Self::Perm>>, ) -> Self::Item

Source§

proof fn lemma_item_into_raw_roundtrip( pa: Paddr, level: PagingLevel, prop: PageProperty, perm: Tracked<Option<Self::Perm>>, )

Source§

proof fn lemma_item_from_raw_roundtrip( item: Self::Item, paddr: Paddr, level: PagingLevel, prop: PageProperty, perm: Tracked<Option<Self::Perm>>, )

Source§

open spec fn item_well_formed(item: Self::Item) -> bool

{ item.frame.inv() }
Source§

open spec fn raw_item_well_formed( item: (Paddr, PagingLevel, PageProperty, Tracked<Option<Self::Perm>>), ) -> bool

{
    let (pa, level, _prop, perm) = item;
    &&& level == 1
    &&& perm@ is Some
    &&& (perm@->0).0.addr() == crate::mm::frame::meta::mapping::frame_to_meta(pa)
    &&& (perm@->0).0.is_init()
    &&& (perm@->0).1.frac() == 1
    &&& MetaSlot::perms_related(*(perm@->0).0, (perm@->0).1.resource())

}
Source§

proof fn lemma_perm_well_formed_with_region_preserved( pa: Paddr, perm: Tracked<Option<Self::Perm>>, old_regions: MetaRegionOwners, new_regions: MetaRegionOwners, )

Source§

proof fn lemma_raw_item_well_formed_preserved( pa: Paddr, level: PagingLevel, old_prop: PageProperty, new_prop: PageProperty, perm: Tracked<Option<Self::Perm>>, )

Source§

proof fn lemma_raw_item_well_formed_split( pa: Paddr, level: PagingLevel, prop: PageProperty, child_pa: Paddr, child_idx: usize, perm: Tracked<Option<Self::Perm>>, )

Source§

proof fn lemma_huge_raw_item_untracked( pa: Paddr, level: PagingLevel, prop: PageProperty, perm: Tracked<Option<Self::Perm>>, )

Source§

proof fn lemma_item_from_raw_well_formed( pa: Paddr, level: PagingLevel, prop: PageProperty, perm: Tracked<Option<Self::Perm>>, )

Source§

proof fn lemma_clone_ensures_concrete( item: Self::Item, pa: Paddr, old_regions: MetaRegionOwners, new_regions: MetaRegionOwners, res: Self::Item, )

Source§

proof fn lemma_clone_requires_concrete( item: Self::Item, pa: Paddr, level: PagingLevel, prop: PageProperty, regions: MetaRegionOwners, )

Source§

proof fn lemma_page_table_config_constant_requirements()

Source§

type E = PageTableEntry

The type of the page table entry.
Source§

type C = PagingConsts

The paging constants.
Source§

type Item = MappedItem

The item that can be mapped into the virtual memory space using the page table. Read more
Source§

type Perm = (&'static PointsTo<MetaSlot>, Count<MetadataPerm, REF_COUNT_MAX_USIZE>)

Verification-only type of the permission carried by a tracked item. An untracked item carries None in its raw representation.
Source§

fn LEADING_BITS_spec() -> usize

Source§

fn LOCKED_END_BOUND_spec() -> int

Source§

fn lemma_page_table_config_constant_properties()

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> CloneToUninit for T
where T: Clone,

Source§

unsafe fn clone_to_uninit(&self, dest: *mut u8)

🔬This is a nightly-only experimental API. (clone_to_uninit)
Performs copy-assignment from self to dest. Read more
§

impl<T> Conv for T

§

fn conv<T>(self) -> T
where Self: Into<T>,

Converts self into T using Into<T>. Read more
§

impl<VERUS_SPEC__A> DebugSpec for VERUS_SPEC__A
where VERUS_SPEC__A: Debug + ?Sized,

§

fn fmt_req(&self, f: &Formatter<'_>) -> bool

§

impl<T> FmtForward for T

§

fn fmt_binary(self) -> FmtBinary<Self>
where Self: Binary,

Causes self to use its Binary implementation when Debug-formatted.
§

fn fmt_display(self) -> FmtDisplay<Self>
where Self: Display,

Causes self to use its Display implementation when Debug-formatted.
§

fn fmt_lower_exp(self) -> FmtLowerExp<Self>
where Self: LowerExp,

Causes self to use its LowerExp implementation when Debug-formatted.
§

fn fmt_lower_hex(self) -> FmtLowerHex<Self>
where Self: LowerHex,

Causes self to use its LowerHex implementation when Debug-formatted.
§

fn fmt_octal(self) -> FmtOctal<Self>
where Self: Octal,

Causes self to use its Octal implementation when Debug-formatted.
§

fn fmt_pointer(self) -> FmtPointer<Self>
where Self: Pointer,

Causes self to use its Pointer implementation when Debug-formatted.
§

fn fmt_upper_exp(self) -> FmtUpperExp<Self>
where Self: UpperExp,

Causes self to use its UpperExp implementation when Debug-formatted.
§

fn fmt_upper_hex(self) -> FmtUpperHex<Self>
where Self: UpperHex,

Causes self to use its UpperHex implementation when Debug-formatted.
§

fn fmt_list(self) -> FmtList<Self>
where &'a Self: for<'a> IntoIterator,

Formats each item in a sequence. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> VERUS_SPEC__A

§

impl<T> FromSpecImpl<T> for T

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> T

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> T

§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> U

Source§

impl<C> PagingConstsTrait for C
where C: PageTableConfig,

Source§

open spec fn BASE_PAGE_SIZE_spec() -> usize

{ C::C::BASE_PAGE_SIZE_spec() }
Source§

exec fn BASE_PAGE_SIZE() -> usize

Source§

open spec fn NR_LEVELS_spec() -> u8

{ C::C::NR_LEVELS_spec() }
Source§

exec fn NR_LEVELS() -> u8

Source§

open spec fn HIGHEST_TRANSLATION_LEVEL_spec() -> u8

{ C::C::HIGHEST_TRANSLATION_LEVEL_spec() }
Source§

exec fn HIGHEST_TRANSLATION_LEVEL() -> u8

Source§

open spec fn PTE_SIZE_spec() -> usize

{ C::C::PTE_SIZE_spec() }
Source§

exec fn PTE_SIZE() -> usize

Source§

open spec fn ADDRESS_WIDTH_spec() -> usize

{ C::C::ADDRESS_WIDTH_spec() }
Source§

exec fn ADDRESS_WIDTH() -> usize

Source§

open spec fn VA_SIGN_EXT_spec() -> bool

{ C::C::VA_SIGN_EXT_spec() }
Source§

exec fn VA_SIGN_EXT() -> bool

Source§

proof fn lemma_paging_consts_requirements()

Source§

fn lemma_paging_consts_properties()

§

impl<T> Pipe for T
where T: ?Sized,

§

fn pipe<R>(self, func: impl FnOnce(Self) -> R) -> R
where Self: Sized,

Pipes by value. This is generally the method you want to use. Read more
§

fn pipe_ref<'a, R>(&'a self, func: impl FnOnce(&'a Self) -> R) -> R
where R: 'a,

Borrows self and passes that borrow into the pipe function. Read more
§

fn pipe_ref_mut<'a, R>(&'a mut self, func: impl FnOnce(&'a mut Self) -> R) -> R
where R: 'a,

Mutably borrows self and passes that borrow into the pipe function. Read more
§

fn pipe_borrow<'a, B, R>(&'a self, func: impl FnOnce(&'a B) -> R) -> R
where Self: Borrow<B>, B: 'a + ?Sized, R: 'a,

Borrows self, then passes self.borrow() into the pipe function. Read more
§

fn pipe_borrow_mut<'a, B, R>( &'a mut self, func: impl FnOnce(&'a mut B) -> R, ) -> R
where Self: BorrowMut<B>, B: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.borrow_mut() into the pipe function. Read more
§

fn pipe_as_ref<'a, U, R>(&'a self, func: impl FnOnce(&'a U) -> R) -> R
where Self: AsRef<U>, U: 'a + ?Sized, R: 'a,

Borrows self, then passes self.as_ref() into the pipe function.
§

fn pipe_as_mut<'a, U, R>(&'a mut self, func: impl FnOnce(&'a mut U) -> R) -> R
where Self: AsMut<U>, U: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.as_mut() into the pipe function.
§

fn pipe_deref<'a, T, R>(&'a self, func: impl FnOnce(&'a T) -> R) -> R
where Self: Deref<Target = T>, T: 'a + ?Sized, R: 'a,

Borrows self, then passes self.deref() into the pipe function.
§

fn pipe_deref_mut<'a, T, R>( &'a mut self, func: impl FnOnce(&'a mut T) -> R, ) -> R
where Self: DerefMut<Target = T> + Deref, T: 'a + ?Sized, R: 'a,

Mutably borrows self, then passes self.deref_mut() into the pipe function.
§

impl<A> SpecEq<&A> for A
where A: ?Sized,

§

impl<A> SpecEq<&mut A> for A
where A: ?Sized,

§

impl<A> SpecEq<A> for A
where A: ?Sized,

§

impl<A> SpecEq<Ghost<A>> for A

§

impl<A> SpecEq<Tracked<A>> for A

§

impl<T> Tap for T

§

fn tap(self, func: impl FnOnce(&Self)) -> Self

Immutable access to a value. Read more
§

fn tap_mut(self, func: impl FnOnce(&mut Self)) -> Self

Mutable access to a value. Read more
§

fn tap_borrow<B>(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow<B>, B: ?Sized,

Immutable access to the Borrow<B> of a value. Read more
§

fn tap_borrow_mut<B>(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut<B>, B: ?Sized,

Mutable access to the BorrowMut<B> of a value. Read more
§

fn tap_ref<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Immutable access to the AsRef<R> view of a value. Read more
§

fn tap_ref_mut<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Mutable access to the AsMut<R> view of a value. Read more
§

fn tap_deref<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Immutable access to the Deref::Target of a value. Read more
§

fn tap_deref_mut<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Mutable access to the Deref::Target of a value. Read more
§

fn tap_dbg(self, func: impl FnOnce(&Self)) -> Self

Calls .tap() only in debug builds, and is erased in release builds.
§

fn tap_mut_dbg(self, func: impl FnOnce(&mut Self)) -> Self

Calls .tap_mut() only in debug builds, and is erased in release builds.
§

fn tap_borrow_dbg<B>(self, func: impl FnOnce(&B)) -> Self
where Self: Borrow<B>, B: ?Sized,

Calls .tap_borrow() only in debug builds, and is erased in release builds.
§

fn tap_borrow_mut_dbg<B>(self, func: impl FnOnce(&mut B)) -> Self
where Self: BorrowMut<B>, B: ?Sized,

Calls .tap_borrow_mut() only in debug builds, and is erased in release builds.
§

fn tap_ref_dbg<R>(self, func: impl FnOnce(&R)) -> Self
where Self: AsRef<R>, R: ?Sized,

Calls .tap_ref() only in debug builds, and is erased in release builds.
§

fn tap_ref_mut_dbg<R>(self, func: impl FnOnce(&mut R)) -> Self
where Self: AsMut<R>, R: ?Sized,

Calls .tap_ref_mut() only in debug builds, and is erased in release builds.
§

fn tap_deref_dbg<T>(self, func: impl FnOnce(&T)) -> Self
where Self: Deref<Target = T>, T: ?Sized,

Calls .tap_deref() only in debug builds, and is erased in release builds.
§

fn tap_deref_mut_dbg<T>(self, func: impl FnOnce(&mut T)) -> Self
where Self: DerefMut<Target = T> + Deref, T: ?Sized,

Calls .tap_deref_mut() only in debug builds, and is erased in release builds.
Source§

impl<T> ToOwned for T
where T: Clone,

Source§

type Owned = T

The resulting type after obtaining ownership.
Source§

fn to_owned(&self) -> T

Creates owned data from borrowed data, usually by cloning. Read more
Source§

fn clone_into(&self, target: &mut T)

Uses borrowed data to replace owned data, usually by cloning. Read more
§

impl<T> TryConv for T

§

fn try_conv<T>(self) -> Result<T, Self::Error>
where Self: TryInto<T>,

Attempts to convert self into T using TryInto<T>. Read more
Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

§

fn obeys_try_from_spec() -> bool

§

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>