Commit Graph

11 Commits

Author SHA1 Message Date
55758ae5b2 feat: kernel W^X (per-section perms, firmware unmapped, stack guard, boot check), halt on kernel faults, region W^X across processes 2026-10-27 00:13:00 +01:00
76f10ff1f1 feat(kernel): seL4-style IPC, notifications, status ABI
- badges + Mint, Call/Reply/ReplyRecv w/ gen-checked reply slot
- cap transfer (1/msg, copy, needs Delegate, rechecked at delivery)
- notifications: signal/wait/poll/bind, irq -> notification routing
- WaitAny/WaitForInterrupt removed; a0=status, ErrorCode
- libkos: single ecall primitive, compat wrappers + typed new api
- fix: trap return clobbered user t0 on every trap
- fix: wait queues FIFO, delegate keeps badge, fault cap checked
- docs/ipc.md spec, ipc tests, ipc fuzz, kani ntfn + waitqueue
2026-10-26 20:27:38 +01:00
d43421e33e feat(kernel): object lifetimes via slot generations
- SlotGenerations per table, never wraps, retires exhausted slots
- caps to dead/reused process, endpoint, region rejected
- endpoints owned, die w/ owner, waiters woken w/ error
- DropCap syscall + libkos wrapper
- irq table bounds-checked, routes dropped w/ thread
- self-kill terminates caller, exit_thread full cleanup
- sched run_now: switch to named thread, not queue head
- lifetime tests, fuzz kills/recreates, kani gen proofs
2026-10-26 19:54:23 +01:00
8d2c40cb1e feat(kernel): kernel-owned memory model
- FrameTable: per-frame owner/use, replaces PagePool + ProcessMemory
- Quota per process, page tables charged to owner
- Regions for shared mem + device MMIO, torn down w/ owner
- Platform: create/destroy AS, map/unmap, zero_frame; drop translate_va
- RequestPages/ReleasePages/MapPage(move) checked vs kernel records
- user window 0x1000..32MiB, private pts by construction
- boot loader + device setup go through kernel api
- kernel built in place, boot allocator bounded
- isolation tests, randomized invariant test, FrameTable kani proofs
- fixes: inflated release, unmapped release, dst va unchecked,
  heap overflow, unbounded pt alloc, unzeroed frames, double free
2026-10-26 19:40:50 +01:00
328708ed58 feat(domain): add EndpointTable, IrqRoutingTable, and remaining error variants 2026-10-17 23:51:56 +02:00
ed80fc43a6 feat(domain): add memory module with page pool, per-process tracking, and region table 2026-10-17 23:45:17 +02:00
14b18f7406 feat(domain): add ThreadTable with spawn, get, destroy, and process filtering 2026-10-17 23:29:46 +02:00
6444de69b8 feat(domain): add Thread constructor, accessors, and state machine transitions 2026-10-17 23:28:56 +02:00
42ed5ade29 feat(domain): add ProcessTable with create, get, and destroy 2026-10-17 23:27:28 +02:00
fe0fde7de1 feat(domain): add Process constructor, accessors, and thread slot management 2026-10-17 23:26:14 +02:00
06b51b6712 Implement domain and endpoint modules with capability management, message passing, and scheduling features 2026-10-17 23:09:21 +02:00