June 2003 - Darwin-kernel - lists.apple.com

Re: getting process info for a kext
by Chris Silverberg 11 Jun '03

11 Jun '03

on 6/10/03 4:49 PM, Garth Cummings at gcummings(a)apple.com wrote: > If a function is not in Kernel.framework/Headers/, you can't use it in > a kernel extension. And, if a function is defined for kernel use only, > you can't use it in user space. > And in my case I've tried to use one of those functions, namely 'kernel_sysctl' which would *seem* to be a kernel replacement for 'sysctl'... yet it doesn't seem to work. So, I'm still hoping someone can give me some advice on getting process information from within a kernel extension. Anyone? thanks much, Chris >> I have an existing kext that needs to be modified slightly to look at >> process information. The process information I need is performed >> elsewhere >> by calling 'sysctl' ala: >> >> mib[0] = CTL_KERN; >> mib[1] = KERN_PROC; >> mib[2] = KERN_PROC_ALL; >> error = sysctl(mib, 3, procInfo, &buffersize, NULL, NULL); >> >> This code works fine in the user land application, but now I want to >> do the >> same in the kext. It doesn't appear that I can directly call 'sysctl' >> from >> a kext, so can anyone help me determine the proper way of retrieving >> this >> information? Advice is greatly appreciated. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: getting process info for a kext
by Garth Cummings 10 Jun '03

10 Jun '03

Hi all, Since this flavor of question has been cropping up lately, it may be time to reiterate a point about kernel programming interfaces. If a function is not in Kernel.framework/Headers/, you can't use it in a kernel extension. And, if a function is defined for kernel use only, you can't use it in user space. Now back to our regular scheduled email. --gc On Tuesday, June 10, 2003, at 01:33 PM, Chris Silverberg wrote: Hi folks I have an existing kext that needs to be modified slightly to look at process information. The process information I need is performed elsewhere by calling 'sysctl' ala: mib[0] = CTL_KERN; mib[1] = KERN_PROC; mib[2] = KERN_PROC_ALL; error = sysctl(mib, 3, procInfo, &buffersize, NULL, NULL); This code works fine in the user land application, but now I want to do the same in the kext. It doesn't appear that I can directly call 'sysctl' from a kext, so can anyone help me determine the proper way of retrieving this information? Advice is greatly appreciated. thanks, Chris _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Joey Echeverria 10 Jun '03

10 Jun '03

I'm sorry, the function I used was current_proc(), not currentProcess(). -Joey On Tuesday, June 10, 2003, at 01:50 PM, Kevin Van Vechten wrote: That doesn't follow BSD naming convention, and a search through /usr/include comes up empty. Can you be more specific? What do you expect the "current process" to be when you call currentProcess() in your kext? (i.e. what do you plan on doing with the information about the current process?). - Kevin On Tuesday, June 10, 2003, at 10:35 AM, Joseph Gabriel Echeverria wrote: currentProcess() is in the BSD api I believe. It returns a struct proc *. -Joey On Tue, 10 Jun 2003, Kevin Van Vechten wrote: Hi Joey, What API contains currentProcess()? What are you hoping for currentProcess() to return? - Kevin On Tuesday, June 10, 2003, at 09:53 AM, Joseph Gabriel Echeverria wrote: How can I get the current process from inside a kernel extension? I've tried calling currentProcess(), but when that is included, the KEXT won't load becuase of unresolved symbols. Thanks, Joey Joseph G. Echeverria Department of Electrical and Computer Engineering Carnegie Mellon University _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

getting process info for a kext
by Chris Silverberg 10 Jun '03

10 Jun '03

Hi folks I have an existing kext that needs to be modified slightly to look at process information. The process information I need is performed elsewhere by calling 'sysctl' ala: mib[0] = CTL_KERN; mib[1] = KERN_PROC; mib[2] = KERN_PROC_ALL; error = sysctl(mib, 3, procInfo, &buffersize, NULL, NULL); This code works fine in the user land application, but now I want to do the same in the kext. It doesn't appear that I can directly call 'sysctl' from a kext, so can anyone help me determine the proper way of retrieving this information? Advice is greatly appreciated. thanks, Chris _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

IOKit Network Subclass Guidance
by Michael Cashwell 10 Jun '03

10 Jun '03

Greetings all, I've been tasked with developing an IOKit driver for an ATM PCI card. I've worked on NKEs before and have done some preliminary development on another Ethernet driver that never got very far. My basic question at present is where in IOKit to subclass. If I were developing a full blown ATM driver (with support for ATM routing and all manner of other ATM-specific interfaces and protocols) I expect I'd want to subclass IONetworkController. But this project is more limited. It only needs to be a LANE (LAN Emulation) Client and perhaps someday to support MPOA (Multiprotocol over ATM; essentially adding a next-hop resolution protocol that allows for direct ATM connections across routers). The key element here is that the OS's view of a LANE Client ATM interface is exactly the same as an 802.x-based Ethernet interface: 6-octet MAC addresses, roughly 1500-octet MTU, unicast, multicast, and broadcast support, and so forth. This makes me think I should subclass IOEthernetController. There will be a private interface (via a specialized ATM-aware User Client I expect) between my driver and a userland daemon which runs a LANE ARP state machine. But the rest of the OS would just see a published nub that looks, smells and tastes like a normal Ethernet interface. At least, that's what I'm thinking presently. Does this seem like the right approach? And if so, which superclass would be better? My hunch is IOEthernetController but I'm concerned about subclassing what is already a concrete class. If I have to fight it at every step then its parent is probably a better choice. For example, I want the interface name(s) (like those listed by ifconfig) to be "lec#" (standing for LANE Client) not "en#". Lastly, how might IONetworkInterface and IOEthernetInterface figure into this? Do these classes abstract things like topology (bus, point to point, ring) and medium (UTP, fiber) or is it more than that? Thanks for any input. -Mike _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Justin C. Walker 10 Jun '03

10 Jun '03

On Tuesday, June 10, 2003, at 10:47 AM, Joseph Gabriel Echeverria wrote: I'm trying to find away to dump some info to a file from within a driver, I know this isn't a good idea in general, but it's the best way to go about it in my situation because I don't want to have another user process to do it for me. No, actually, it's not the best way to go. For one thing, there's no guarantee that the ability to do this sort of thing will be preserved across releases. For another, there really are better ways to do it. If this is a localized, "I'm just doing it for my own amusement" kind of hack, you can get away with it. If this is intended to be part of an application "architecture", you aren't doing yourself or your customers any favors. The method I'm trying is something that was sugested on one of the darwin lists (don't remember which one or when). The person sugested calling the entry point for the open syscall and the writing to the file with the entry point for the write syscall. These entry points require a struct proc * to be passed in. Is there another way my KEXT can get output to a file that isn't system.log? You can go where no man has gone before, and tackle syslog.conf. It's not for the timid, but by judiciously choosing selector and levels, and arranging the file 'syslog.conf' just so, you can have your messages end up in a file of your choosing. Be wary of changing this, though. The relationship between entries is delicate, and some things (logging) might stop working (and it could be a long time before you'd notice). Regards, Justin -- Justin C. Walker, Curmudgeon-At-Large * Institute for General Semantics | When LuteFisk is outlawed | Only outlaws will have | LuteFisk *--------------------------------------*-------------------------------* _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Kevin Van Vechten 10 Jun '03

10 Jun '03

That doesn't follow BSD naming convention, and a search through /usr/include comes up empty. Can you be more specific? What do you expect the "current process" to be when you call currentProcess() in your kext? (i.e. what do you plan on doing with the information about the current process?). - Kevin On Tuesday, June 10, 2003, at 10:35 AM, Joseph Gabriel Echeverria wrote: currentProcess() is in the BSD api I believe. It returns a struct proc *. -Joey On Tue, 10 Jun 2003, Kevin Van Vechten wrote: Hi Joey, What API contains currentProcess()? What are you hoping for currentProcess() to return? - Kevin On Tuesday, June 10, 2003, at 09:53 AM, Joseph Gabriel Echeverria wrote: How can I get the current process from inside a kernel extension? I've tried calling currentProcess(), but when that is included, the KEXT won't load becuase of unresolved symbols. Thanks, Joey Joseph G. Echeverria Department of Electrical and Computer Engineering Carnegie Mellon University _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Joseph Gabriel Echeverria 10 Jun '03

10 Jun '03

I'm trying to find away to dump some info to a file from within a driver, I know this isn't a good idea in general, but it's the best way to go about it in my situation because I don't want to have another user process to do it for me. The method I'm trying is something that was sugested on one of the darwin lists (don't remember which one or when). The person sugested calling the entry point for the open syscall and the writing to the file with the entry point for the write syscall. These entry points require a struct proc * to be passed in. Is there another way my KEXT can get output to a file that isn't system.log? -Joey On Tue, 10 Jun 2003, Justin C. Walker wrote: > > On Tuesday, June 10, 2003, at 09:53 AM, Joseph Gabriel Echeverria wrote: > > > How can I get the current process from inside a kernel extension? I've > > tried calling currentProcess(), but when that is included, the KEXT > > won't > > load becuase of unresolved symbols. > > The call is current_proc_EXTERNAL(), which gets you a 'struct proc *'. > You have to be *very* careful in using the result; check for NULL, and > make sure that you fully understand the context in which your driver is > running when you call it. Getting the identity of the current process > at random points in your driver's execution path may give you an > equally random process. > > What are you trying to do? > > Regards, > > Justin > > -- > /~\ The ASCII Justin C. Walker, Curmudgeon-at-Large > \ / Ribbon Campaign > X Help cure HTML Email > / \ _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Justin C. Walker 10 Jun '03

10 Jun '03

On Tuesday, June 10, 2003, at 09:53 AM, Joseph Gabriel Echeverria wrote: How can I get the current process from inside a kernel extension? I've tried calling currentProcess(), but when that is included, the KEXT won't load becuase of unresolved symbols. The call is current_proc_EXTERNAL(), which gets you a 'struct proc *'. You have to be *very* careful in using the result; check for NULL, and make sure that you fully understand the context in which your driver is running when you call it. Getting the identity of the current process at random points in your driver's execution path may give you an equally random process. What are you trying to do? Regards, Justin -- /~\ The ASCII Justin C. Walker, Curmudgeon-at-Large \ / Ribbon Campaign X Help cure HTML Email / \ _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0

Re: Current Process
by Joseph Gabriel Echeverria 10 Jun '03

10 Jun '03

currentProcess() is in the BSD api I believe. It returns a struct proc *. -Joey On Tue, 10 Jun 2003, Kevin Van Vechten wrote: > Hi Joey, > > What API contains currentProcess()? > What are you hoping for currentProcess() to return? > > - Kevin > > On Tuesday, June 10, 2003, at 09:53 AM, Joseph Gabriel Echeverria wrote: > > > How can I get the current process from inside a kernel extension? I've > > tried calling currentProcess(), but when that is included, the KEXT > > won't > > load becuase of unresolved symbols. > > > > Thanks, > > > > Joey > > > > Joseph G. Echeverria > > Department of Electrical and Computer Engineering > > Carnegie Mellon University > > _______________________________________________ > > darwin-kernel mailing list | darwin-kernel(a)lists.apple.com > > Help/Unsubscribe/Archives: > > http://www.lists.apple.com/mailman/listinfo/darwin-kernel > > Do not post admin requests to the list. They will be ignored. _______________________________________________ darwin-kernel mailing list | darwin-kernel(a)lists.apple.com Help/Unsubscribe/Archives: http://www.lists.apple.com/mailman/listinfo/darwin-kernel Do not post admin requests to the list. They will be ignored.

1 0