November 2004 - Darwin-dev - lists.apple.com

Re: processing IOService in kext
by calcmach＠actcom.net.il 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com gc, -DM- Hello DM, On Nov 17, 2004, at 2:04 AM, calcmach(a)actcom.net.il wrote: -- Hi, I am trying to further implement the following Apple Kernel sample. How do I parse / filter / the IOService which is handed to me? Why do you want to intercept file I/O calls? --gc Note: this is a kext with KERNEL = 1, so not all api's are accessible. Thanks, DM ======= Apple Code ======= void com_apple_dts_driver_SampleFilterScheme::read(IOService* client , UInt64 byteStart, IOMemoryDescriptor* buffer, IOStorageCompletion completion) { getProvider()->read(this, byteStart, buffer, completion); } _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/gcummings%40apple.com This email sent to gcummings(a)apple.com __________________________________________________________________ Garth Cummings Apple Developer Technical Support gcummings(a)apple.com http://developer.apple.com/technicalsupport -- =========================== Erez Kaplan Collector and Researcher Mechanical Calculating Machines Virtual Museum: http://www.webcom.com/calc =========================== _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Why do you want to intercept file I/O calls? I am implementing this over a disk image. Then I copy ANY application into the disk image in order to cache / optimize / re route it's requests. (say its looking for a certain file on the disk, which is not there, but I can get it from else where) Mime-Version: 1.0 (Apple Message framework v619) Content-Type: multipart/signed; micalg=sha1; boundary=Apple-Mail-41--2092227; protocol="application/pkcs7-signature" I have tried several options, but am getting nowhere. I need to know the name of the class (open, create, etc) and the specific params for each call client->serviceMatching( "open", table ); A filter scheme is located well below the filesystem, so it has no knowledge of UNIX syscalls or files. A filter scheme only knows about reading/writing a buffer at a particular location on an IOMedia object. An IOMedia object is typically either a partition or the entire medium. The IOService handed to you is the IOMedia object published by the filter scheme. P.S. Please do not cross-post to multiple lists. If you do, people on one list don't know anything about the responses on the other list. I'm replying to the darwin-dev list only. // Read data from the storage object at the specified byte offset into the // specified buffer, asynchronously. When the read completes, the caller // will be notified via the specified completion action. // // The buffer will be retained for the duration of the read. // // For simple partition schemes, the default behavior is to simply pass the // read through to the provider media. More complex partition schemes such // as RAID will need to do extra processing here. // Attachment converted: ek disk:smime 1.p7s ( / ) (001184FC) This email sent to site_archiver(a)lists.apple.com

1 0

Re: processing IOService in kext
by Garth Cummings 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hello DM, On Nov 17, 2004, at 2:04 AM, calcmach(a)actcom.net.il wrote: -- Hi, I am trying to further implement the following Apple Kernel sample. How do I parse / filter / the IOService which is handed to me? Why do you want to intercept file I/O calls? --gc Note: this is a kext with KERNEL = 1, so not all api's are accessible. Thanks, DM getProvider()->read(this, byteStart, buffer, completion); } _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/gcummings%40apple.com This email sent to gcummings(a)apple.com __________________________________________________________________ Garth Cummings Apple Developer Technical Support gcummings(a)apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com I have tried several options, but am getting nowhere. I need to know the name of the class (open, create, etc) and the specific params for each call client->serviceMatching( "open", table ); A filter scheme is located well below the filesystem, so it has no knowledge of UNIX syscalls or files. A filter scheme only knows about reading/writing a buffer at a particular location on an IOMedia object. An IOMedia object is typically either a partition or the entire medium. The IOService handed to you is the IOMedia object published by the filter scheme. P.S. Please do not cross-post to multiple lists. If you do, people on one list don't know anything about the responses on the other list. I'm replying to the darwin-dev list only. ======= Apple Code ======= void com_apple_dts_driver_SampleFilterScheme::read(IOService* client , UInt64 byteStart, IOMemoryDescriptor* buffer, IOStorageCompletion completion) { // Read data from the storage object at the specified byte offset into the // specified buffer, asynchronously. When the read completes, the caller // will be notified via the specified completion action. // // The buffer will be retained for the duration of the read. // // For simple partition schemes, the default behavior is to simply pass the // read through to the provider media. More complex partition schemes such // as RAID will need to do extra processing here. // http://developer.apple.com/technicalsupport smime.p7s

1 0

Re: -fno-leading-underscore
by Shantonu Sen 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com Try gcc 4.0? Either the FSF version, or the Apple version? Shantonu On Nov 17, 2004, at 8:40 AM, Michael Hogsett wrote: So your solution is to rewrite the C code. What I want is for GCC to behave as indicated in the man pages, and behave as elsewhere, that is not to muck with the symbols by preprending an underscore. Anyone else have any suggestions? - Mike Steve Checkoway wrote: On Nov 16, 2004, at 1:53 PM, Michael Hogsett wrote: The -fno-leading-underscore to GCC appears to have no effect. I don't know about this. We have some lisp code which calls foreign functions. The foreign function calls fail because all of the symbols have an underscore prepended to their name. ... How do I resolve this other than rewriting our lisp code? This does not occur on Solaris, Linux, or FreeBSD. $ cat foo.c void foo() asm ("foo"); void foo() { } $ gcc -c foo.c $ nm foo.o 00000000 T foo That should work for you. - Steve _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/ssen%40opendarwin.org This email sent to ssen(a)opendarwin.org _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: -fno-leading-underscore
by Michael Hogsett 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com User-agent: Mozilla Thunderbird 0.8 (Macintosh/20040913) So your solution is to rewrite the C code. What I want is for GCC to behave as indicated in the man pages, and behave as elsewhere, that is not to muck with the symbols by preprending an underscore. Anyone else have any suggestions? - Mike On Nov 16, 2004, at 1:53 PM, Michael Hogsett wrote: I don't know about this. We have some lisp code which calls foreign functions. The foreign function calls fail because all of the symbols have an underscore prepended to their name. ... How do I resolve this other than rewriting our lisp code? This does not occur on Solaris, Linux, or FreeBSD. $ cat foo.c void foo() asm ("foo"); void foo() { } $ gcc -c foo.c $ nm foo.o 00000000 T foo That should work for you. _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… Steve Checkoway wrote: The -fno-leading-underscore to GCC appears to have no effect. - Steve This email sent to site_archiver(a)lists.apple.com

1 0

processing IOService in kext
by calcmach＠actcom.net.il 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com -- Hi, I am trying to further implement the following Apple Kernel sample. How do I parse / filter / the IOService which is handed to me? Note: this is a kext with KERNEL = 1, so not all api's are accessible. Thanks, DM ======= Apple Code ======= void com_apple_dts_driver_SampleFilterScheme::read(IOService* client , UInt64 byteStart, IOMemoryDescriptor* buffer, IOStorageCompletion completion) { getProvider()->read(this, byteStart, buffer, completion); } _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… I have tried several options, but am getting nowhere. I need to know the name of the class (open, create, etc) and the specific params for each call client->serviceMatching( "open", table ); // Read data from the storage object at the specified byte offset into the // specified buffer, asynchronously. When the read completes, the caller // will be notified via the specified completion action. // // The buffer will be retained for the duration of the read. // // For simple partition schemes, the default behavior is to simply pass the // read through to the provider media. More complex partition schemes such // as RAID will need to do extra processing here. // This email sent to site_archiver(a)lists.apple.com

1 0

Re: -fno-leading-underscore
by Steve Checkoway 17 Nov '04

17 Nov '04

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com I don't know about this. We have some lisp code which calls foreign functions. The foreign function calls fail because all of the symbols have an underscore prepended to their name. How do I resolve this other than rewriting our lisp code? This does not occur on Solaris, Linux, or FreeBSD. $ cat foo.c void foo() asm ("foo"); void foo() { } $ gcc -c foo.c $ nm foo.o 00000000 T foo That should work for you. - Steve _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… On Nov 16, 2004, at 1:53 PM, Michael Hogsett wrote: The -fno-leading-underscore to GCC appears to have no effect. ... This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by Garth Cummings 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Hi Andrew, On Nov 16, 2004, at 12:35 PM, Andrew Downs wrote: On Nov 16, 2004, at 2:05 PM, Al Ameen Shah wrote: You might want to read Technical Q&A 1242 "Developing for VFS": <http://developer.apple.com/qa/qa2001/qa1242.html>. --gc -- Andrew __________________________________________________________________ Garth Cummings Apple Developer Technical Support gcummings(a)apple.com http://developer.apple.com/technicalsupport _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com 1. Try VFS Stacking ? Or over-riding V-node ops ? Was support for VFS stacking removed? I was warned of such a year or two ago, and stopped my VFS efforts at that point (also trying to intercept file system calls). One problem was my module did not get triggered when the user manipulated files in the Finder, which I wanted to capture. But the BSD side worked okay. smime.p7s

1 0

-fno-leading-underscore
by Michael Hogsett 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: Darwin-dev(a)lists.apple.com User-agent: Mozilla Thunderbird 0.8 (Macintosh/20040913) The -fno-leading-underscore to GCC appears to have no effect. We have some lisp code which calls foreign functions. The foreign function calls fail because all of the symbols have an underscore prepended to their name. e.g. [dh-7-13] [hogsett] [~] --> gcc -fno-leading-underscore -c -o foo.o foo.c [dh-7-13] [hogsett] [~] --> nm foo.o 0000003c b _b.0 00000000 T _foo [dh-7-13] [hogsett] [~] --> gcc -c -o foo.o foo.c [dh-7-13] [hogsett] [~] --> nm foo.o 0000003c b _b.0 00000000 T _foo How do I resolve this other than rewriting our lisp code? This does not occur on Solaris, Linux, or FreeBSD. - Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by Andrew Downs 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com On Nov 16, 2004, at 2:05 PM, Al Ameen Shah wrote: -- Andrew _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… 1. Try VFS Stacking ? Or over-riding V-node ops ? Was support for VFS stacking removed? I was warned of such a year or two ago, and stopped my VFS efforts at that point (also trying to intercept file system calls). One problem was my module did not get triggered when the user manipulated files in the Finder, which I wanted to capture. But the BSD side worked okay. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Intercepting file system calls (read, write, open, close, etc)
by David Leimbach 16 Nov '04

16 Nov '04

site_archiver(a)lists.apple.com Delivered-To: darwin-dev(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=Ve1nJFJu9IRcrnSWcI+RiRFnE4tmzUU1SUn3w4fZE34jdx3WbONYaar/J7uyYiWsfMI6kIU53LgX/8pLu8K5hUCcKi3DUXD/sYabnS2Fr5TnCOyPhUjB5zFZU+sSqjmwFAVFB4JddY0buGMXTs3ow1UJewYT+IRwB0eO1/ilttg= Try mach_inject and mach_override before building a new libSystem. http://rentzsch.com/mach_override/ Dave On Tue, 16 Nov 2004 10:07:38 -0800, Mike Smith <msmith(a)freebsd.org> wrote: > > On Nov 15, 2004, at 10:58 PM, calcmach(a)actcom.net.il wrote: > > > Hi Mike, > > > > Let's make things harder. > > I have NO control over the building of the application I want to > > intercept..... > > Let's make things easier; read the dyld manpage. > > At the worst, you'll have to build a replacement for libSystem that > simply patches through > to the system copy in 99% of the cases. > > = Mike > > > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-dev/leimy2k%40gmail.com > > This email sent to leimy2k(a)gmail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-dev mailing list (Darwin-dev(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-dev/site_archiver%40lists.app… This email sent to site_archiver(a)lists.apple.com

1 0