December 2007 - Darwin-kernel

Re: Determining which kernel extension is being opened
by Terry Lambert 30 Dec '07

30 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com There isn't. KEXTs basically come from three places: 1) The cache 2) Autoloaded from /System/Library/Extensions 3) Explictly loaded by an application -- Terry _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… On Dec 27, 2007, at 12:29 PM, Kevin Elliott <kelliott(a)mac.com> wrote: Kext's are not loaded bundles from the perspective of CFBundleGetBundleWithIdentifier. The function KextManagerCreateURLForBundleIdentifier will map Bundle Identifier to a system path, but it only works if the kext is at the top level of /System/Library/Extensions (not in a sub folder, and not located in a different directory). It's also user space only. I don't know if you there is an equivalent function within the kernel. In cases (2) and (3), the information on path is known to kextd, and you can ask it (this is how kextstat works when you ask it for a path). Case (2) includes non-required KEXTs loaded from an accessible cache by kextd. It also includes kexts loaded from removable or network media that has subsequently gone away. In case (1), the information may not be inaccessible. For example, if you did a netboot or a boot into an ASR restore image, the cache you booted out of may not be accessible to the booted kernel and KEXTs after the boot. In this case, only required KEXTs will have come from the cache. So the closest you can get is whatever kextd can tell you, and, due to potential inaccessibility, that information could be incomplete and unknown to kextd, or known but not useful (e.g. because you unplugged the keychain drive from which it was loaded, etc.). This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by Michael Smith 28 Dec '07

28 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Dec 27, 2007, at 4:03 PM, David Rose wrote: I was trying to replace one of Apple's open source drivers with a modified version and noticed none of my changes were being executed. I came to the conclusion that my driver was not running and the original Apple driver was still running. setProperty("new-driver", 1); = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Ah, well in that case your best bet would have been to modify the driver further to set a property of some sort, or similar would have done it. Then you could have looked for the property with ioreg. Anyways, sorry for the noise. No worries; just always best to ask "how do I achieve <objective>", rather than "how do I do <thing that seems difficult or unsupported>", since it will tend to get you more complete solutions as a consequence... This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by David Rose 28 Dec '07

28 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:Cc:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=zjrxfNMvVv84A6ykjYhf7GbmK+kGz4N5wVCLwQaBkPpA87kqULlE2hDrycPFhgRdhgTI+1bvC2qBJ7ryzCjtPWueHHtSYwnnNhXzPsFBGRvDAGmThcxGCjAJbvKCXlxPM7kysvwlSFlbAPkFPAfThREYICmER4chIN0oFTmmKh0=; > > On Dec 27, 2007, at 9:32 AM, David Rose wrote: > > > Is there any way to associate a filename to an > > IOServiceOpen call? Is there a way to tell which > > kernel extension (kext) an IOServiceOpen will > > open. > > If you mean "which bundle contains the file which in > turn contains the > code implementing the class which publishes a given > service"? then the > answer is no. > > In fact, you have no guarantee that there is an > answer to the question > that you are asking. > > In the common case, you can scan the Info.plist > files in /S/L/E and > look for one that mentions a class with the same > name in one of its > personalities, but there is no guarantee that you'll > find it, and even > then all you know is that you're looking at a file > that contains *an* > implementation of a class that has the same name as > the one you're > interested in; there's no guarantee that it's the > one that you're > currently matched to, or that there is only one of > them. > OK, thanks. This answers my question. > As Herb asks, what are you actually trying to do? I > can't think of > anything you could do with the answer to your > question that doesn't > require a number of other assumptions. > > = Mike > I was trying to replace one of Apple's open source drivers with a modified version and noticed none of my changes were being executed. I came to the conclusion that my driver was not running and the original Apple driver was still running. Anyways, sorry for the noise. David Rose ____________________________________________________________________________________ Looking for last minute shopping deals? Find them fast with Yahoo! Search. http://tools.search.yahoo.com/newsearch/category.php?category=shopping _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by Kevin Elliott 27 Dec '07

27 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Dec 27, 2007, at 11:21 AM, mm w wrote: Hi, take a look here if you need to know the list of kext loaded http://plumber.gnu-darwin.org/home/pub/snip-c/lsmod-101/lsmod.c Hi, Is there any way to associate a filename to an IOServiceOpen call? Is there a way to tell which kernel extension (kext) an IOServiceOpen will open. Consider the following code: kernResult = IOServiceGetMatchingServices( kIOMasterPortDefault, IOServiceMatching( "Foo" ), &iterator ); if( kernResult == kIOReturnSuccess ) { service = IOIteratorNext( iterator ); IOObjectRelease( iterator ); if( service ) { kernResult = IOServiceOpen( service, mach_task_self(), 0, &dataPort ); Is there any way to determine the kernel extension that will have its newUserClient method invoked based on the above code? Right now I can grep through plists in /System/Library/Extensions and search for Foo but is there any better way? Thanks, David Rose _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/openspecies%40gmail.com This email sent to openspecies(a)gmail.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… Kext's are not loaded bundles from the perspective of CFBundleGetBundleWithIdentifier. The function KextManagerCreateURLForBundleIdentifier will map Bundle Identifier to a system path, but it only works if the kext is at the top level of / System/Library/Extensions (not in a sub folder, and not located in a different directory). It's also user space only. I don't know if you there is an equivalent function within the kernel. and you could match your service by identifier from the user space, and maybe you could match the filename by using CFBundleGetBundleWithIdentifier, i don't know if you can match a kext like this, Cf is abble to return loaded bundles On Dec 27, 2007 6:32 PM, David Rose <david.rose43(a)yahoo.com> wrote: ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs -- -mmw _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/kelliott %40mac.com This email sent to kelliott(a)mac.com This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by mm w 27 Dec '07

27 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=+AgP2JQ36Z6n0AFzbiZGS6yHdToh6U5fqC4A0e8GmOM=; b=UKqISJovMhHMozJu6EP83GayfQ3yja33bM1J60hPZDa63j+0i52iYiCfS95ovN/4Uzs4Vags0g8KqaOTuc6z8ssXMs7UoRpAk93rx7uwyUfwn8XFDbrPbn2CBLaHSb77Hy2SS3ChqmjmfKgjWQf5yRHzoSYYUA1JTJ9m9vHDTi4= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=IOimryEhjEzzUdVJ8LPwuS88LF8P9cxB0Q2hXPQwVrwWZqho6JMuXpRzJfYyFWE+/mfZvPczHS+/4jeRDOQ4DVwvEv9IEXMAoVFmp/EMR9dYCLP2DO+lKoSns8EnmuK7a8ZJEx0Dy4PAXGVzqc1HjWXhlQgXo6ooOoY0nZJ8jao= Hi, take a look here if you need to know the list of kext loaded http://plumber.gnu-darwin.org/home/pub/snip-c/lsmod-101/lsmod.c and you could match your service by identifier from the user space, and maybe you could match the filename by using CFBundleGetBundleWithIdentifier, i don't know if you can match a kext like this, Cf is abble to return loaded bundles On Dec 27, 2007 6:32 PM, David Rose <david.rose43(a)yahoo.com> wrote: > Hi, > > Is there any way to associate a filename to an > IOServiceOpen call? Is there a way to tell which > kernel extension (kext) an IOServiceOpen will > open. > > Consider the following code: > > kernResult = IOServiceGetMatchingServices( > kIOMasterPortDefault, IOServiceMatching( "Foo" ), > &iterator ); > > if( kernResult == kIOReturnSuccess ) > { > service = IOIteratorNext( iterator ); > IOObjectRelease( iterator ); > > if( service ) > { > kernResult = IOServiceOpen( service, > mach_task_self(), 0, &dataPort ); > > Is there any way to determine the kernel extension > that will have its newUserClient method invoked based > on the above code? Right now I can grep through plists > in /System/Library/Extensions and search for Foo but > is there any better way? > > Thanks, > > David Rose > > > > ____________________________________________________________________________________ > Never miss a thing. Make Yahoo your home page. > http://www.yahoo.com/r/hs > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/openspecies%40gmail.com > > This email sent to openspecies(a)gmail.com > -- -mmw _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by Michael Smith 27 Dec '07

27 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com On Dec 27, 2007, at 9:32 AM, David Rose wrote: Is there any way to associate a filename to an IOServiceOpen call? Is there a way to tell which kernel extension (kext) an IOServiceOpen will open. = Mike _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… If you mean "which bundle contains the file which in turn contains the code implementing the class which publishes a given service"? then the answer is no. In fact, you have no guarantee that there is an answer to the question that you are asking. In the common case, you can scan the Info.plist files in /S/L/E and look for one that mentions a class with the same name in one of its personalities, but there is no guarantee that you'll find it, and even then all you know is that you're looking at a file that contains *an* implementation of a class that has the same name as the one you're interested in; there's no guarantee that it's the one that you're currently matched to, or that there is only one of them. As Herb asks, what are you actually trying to do? I can't think of anything you could do with the answer to your question that doesn't require a number of other assumptions. This email sent to site_archiver(a)lists.apple.com

1 0

Re: Determining which kernel extension is being opened
by Herb Petschauer 27 Dec '07

27 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; bh=/XAHKIY7yxSu3J5VYWOwld9Fn2QZxxp3MMNdNvPWghU=; b=dfh01PPw9SPX2CIxlFQMOfJsQqmQ4H+PnkOGlY2SP9q8TR9J6dX4uZ3hVSipTv/pG7u4Wm1a5qV+IFG7uR6Ep2Sb58/s1zNFf1onPUcaDnajp3Q5OSuuSCEwctOWN+ESf3YmWP/O4isozmRBOkFDsyzyPn7Su5YhdjE/rLATReM= Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:content-disposition:references; b=c5q0MfvjbNeTqPL/jy4sdY/NI/64L4dwss3b7z/mZqXrH/Ti55rPzpuUnueXib/BY6mUGAPVkl4uf0IxIiog6uUFR8BMs3sApFfX3utWMhCDUIujVrjlwRpuFatZIjcSnxoITg6aTnfpjBiGXPTHDHB5kLKjCu+fNxhL5EeEmJ0= Err... why? What's the root problem that you are trying to solve? On 27/12/2007, David Rose <david.rose43(a)yahoo.com> wrote: > Hi, > > Is there any way to associate a filename to an > IOServiceOpen call? Is there a way to tell which > kernel extension (kext) an IOServiceOpen will > open. > > Consider the following code: > > kernResult = IOServiceGetMatchingServices( > kIOMasterPortDefault, IOServiceMatching( "Foo" ), > &iterator ); > > if( kernResult == kIOReturnSuccess ) > { > service = IOIteratorNext( iterator ); > IOObjectRelease( iterator ); > > if( service ) > { > kernResult = IOServiceOpen( service, > mach_task_self(), 0, &dataPort ); > > Is there any way to determine the kernel extension > that will have its newUserClient method invoked based > on the above code? Right now I can grep through plists > in /System/Library/Extensions and search for Foo but > is there any better way? > > Thanks, > > David Rose > > > > ____________________________________________________________________________________ > Never miss a thing. Make Yahoo your home page. > http://www.yahoo.com/r/hs > > _______________________________________________ > Do not post admin requests to the list. They will be ignored. > Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) > Help/Unsubscribe/Update your Subscription: > http://lists.apple.com/mailman/options/darwin-kernel/bogvardi%40gmail.com > > This email sent to bogvardi(a)gmail.com > _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Determining which kernel extension is being opened
by David Rose 27 Dec '07

27 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=X-YMail-OSG:Received:Date:From:Subject:To:MIME-Version:Content-Type:Content-Transfer-Encoding:Message-ID; b=cRlrqa1OCG/Jlgqrm+E6TRRc28zHW1yFfowe5+0VVabe9yrrNtn3Y4QgHIHHfv0qIvRSNK0fXp9199nwo9og6minI1mCeeC7rra+g1r3/JozoXGlxur/JYD/xhwJq6r2gdxfWhznrPDt3T6uInPbMBjNwkOTGLGiUb9gYJ/IeYk=; Hi, Is there any way to associate a filename to an IOServiceOpen call? Is there a way to tell which kernel extension (kext) an IOServiceOpen will open. Consider the following code: kernResult = IOServiceGetMatchingServices( kIOMasterPortDefault, IOServiceMatching( "Foo" ), &iterator ); if( kernResult == kIOReturnSuccess ) { service = IOIteratorNext( iterator ); IOObjectRelease( iterator ); if( service ) { kernResult = IOServiceOpen( service, mach_task_self(), 0, &dataPort ); Is there any way to determine the kernel extension that will have its newUserClient method invoked based on the above code? Right now I can grep through plists in /System/Library/Extensions and search for Foo but is there any better way? Thanks, David Rose ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Kext Unload getting called automatically after waking Machine from sleep
by Andreas Fink 26 Dec '07

26 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0

Re: Kext Unload getting called automatically after waking Machine from sleep
by Michael Smith 26 Dec '07

26 Dec '07

site_archiver(a)lists.apple.com Delivered-To: darwin-kernel(a)lists.apple.com _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel(a)lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.… This email sent to site_archiver(a)lists.apple.com

1 0