Skip to main content

Mapping

ostd::specs::mm::page_table

Struct Mapping 

Source 
pub struct Mapping {
    pub va_range: Range<int>,
    pub pa_range: Range<Paddr>,
    pub page_size: usize,
    pub property: PageProperty,
}
Expand description

A Mapping maps a virtual address range to a physical address range. Its size, page_size, is fixed and must be one of 4096, 2097152, 1073741824. The va_range and pa_range must be of size page_size and aligned on a page boundary. The property is a bitfield of flags that describe the properties of the mapping.

va_range is Range<int> rather than Range<Vaddr> because the canonical upper-half kernel range can reach usize::MAX + 1 for its exclusive end (2^64), which cannot be represented in usize. The Mapping::inv predicate bounds va_range.end by pow2(64) so all concretely realized mappings stay within the addressable space; this is a no-op constraint for user mappings and the essential cap for kernel mappings.

Fields§

§va_range: Range<int>§pa_range: Range<Paddr>§page_size: usize§property: PageProperty

Implementations§

Source§

impl Mapping

Source

pub open spec fn disjoint_vaddrs(m1: Mapping, m2: Mapping) -> bool

{ m1.va_range.end <= m2.va_range.start || m2.va_range.end <= m1.va_range.start }
Source

pub open spec fn disjoint_paddrs(m1: Mapping, m2: Mapping) -> bool

{ m1.pa_range.end <= m2.pa_range.start || m2.pa_range.end <= m1.pa_range.start }
Source

pub open spec fn inv(self) -> bool

{
    &&& set![4096, 2097152, 1073741824].contains(self.page_size)
    &&& self.pa_range.start % self.page_size == 0
    &&& self.pa_range.end % self.page_size == 0
    &&& self.pa_range.start + self.page_size == self.pa_range.end
    &&& self.pa_range.start <= self.pa_range.end <= MAX_PADDR
    &&& self.va_range.start % self.page_size as int == 0
    &&& self.va_range.end % self.page_size as int == 0
    &&& self.va_range.start + self.page_size as int == self.va_range.end
    &&& 0 <= self.va_range.start <= self.va_range.end
    &&& self.va_range.end <= pow2(64)

}

Auto Trait Implementations§

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

§

impl<T, VERUS_SPEC__A> FromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: From<T>,

§

fn obeys_from_spec() -> bool

§

fn from_spec(v: T) -> VERUS_SPEC__A

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

§

impl<T, VERUS_SPEC__A> IntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: Into<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> T

§

impl<T, U> IntoSpecImpl<U> for T
where U: From<T>,

§

fn obeys_into_spec() -> bool

§

fn into_spec(self) -> U

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryFromSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryFrom<T>,

§

fn obeys_try_from_spec() -> bool

§

fn try_from_spec( v: T, ) -> Result<VERUS_SPEC__A, <VERUS_SPEC__A as TryFrom<T>>::Error>

Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.
§

impl<T, VERUS_SPEC__A> TryIntoSpec<T> for VERUS_SPEC__A
where VERUS_SPEC__A: TryInto<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<T, <VERUS_SPEC__A as TryInto<T>>::Error>

§

impl<T, U> TryIntoSpecImpl<U> for T
where U: TryFrom<T>,

§

fn obeys_try_into_spec() -> bool

§

fn try_into_spec(self) -> Result<U, <U as TryFrom<T>>::Error>