Library mcertikos.mm.MPTOp


This file defines the abstract data and the primitives for the MPTOp layer, which will introduce high-level primitives to operate on page table
Require Import Coqlib.
Require Import Maps.
Require Import ASTExtra.
Require Import Integers.
Require Import Floats.
Require Import Values.
Require Import Memory.
Require Import Events.
Require Import Stacklayout.
Require Import Globalenvs.
Require Import AsmX.
Require Import Smallstep.
Require Import AuxStateDataType.
Require Import Constant.
Require Import GlobIdent.
Require Import FlatMemory.
Require Import CommonTactic.
Require Import AuxLemma.
Require Import RealParams.
Require Import PrimSemantics.
Require Import LAsm.
Require Import LoadStoreSem2.


Require Import liblayers.logic.PTreeModules.
Require Import liblayers.logic.LayerLogicImpl.
Require Import liblayers.compat.CompatLayers.
Require Import liblayers.compat.CompatGenSem.

Require Import INVLemmaContainer.
Require Import INVLemmaMemory.

Require Import CalRealIDPDE.
Require Import CalRealInitPTE.
Require Import CalRealPTPool.

Require Export MPTIntro.
Require Import AbstractDataType.

Require Import INVLemmaQLock.
Require Import INVLemmaInterrupt.
Require Import INVLemmaDriver.
Require Import DeviceStateDataType.
Require Import FutureTactic.

Section WITHMEM.

  Local Open Scope Z_scope.

  Context `{real_params: RealParams}.
  Context `{oracle_prop: MultiOracleProp}.

  Context `{Hstencil: Stencil}.
  Context `{Hmem: Mem.MemoryModelX}.
  Context `{Hmwd: UseMemWithData mem}.

Proofs that the primitives satisfies the invariants at this layer

  Section INV.

    Global Instance ptInsertAux_inv: PreservesInvariants ptInsertAux_spec.
    Proof.
      unfold ptInsertAux_spec.
      preserves_invariants_simpl_auto;
      subdestruct; try (inv H8; rewrite ZMap.gso; auto).
    Qed.

    Global Instance ptInsertPDE_inv: PreservesInvariants ptInsertPDE_spec.
    Proof.
      unfold ptInsertPDE_spec.
      preserves_invariants_simpl_auto;
      try (rewrite ZMap.gso; eauto; fail).
      - apply consistent_ppage_log_alloc_hide; assumption.
      - apply dirty_ppage_gss; assumption.
    Qed.

Proofs that the primitives satisfies the invariants at this layer

    Global Instance ptRmvAux_inv: PreservesInvariants ptRmvAux_spec.
    Proof.
      unfold ptRmvAux_spec.
      preserves_invariants_simpl_auto;
      subdestruct; try (inv H7; rewrite ZMap.gso; auto).
    Qed.

Proofs that the primitives satisfies the invariants at this layer

    Global Instance ptRmvPDE_inv: PreservesInvariants ptRmvPDE_spec.
    Proof.
      unfold ptRmvPDE_spec; constructor; simpl;
      intros until ; intros Hsem Hinv;
      inv_generic_sem Hsem.
      - inv Hinv. unfold rmvPDE_spec in H0.
        subdestruct; inv H0; subst; constructor; simpl; trivial; intros; try congruence.
      - assert (Htrue: true = true) by reflexivity.
        inv Hinv. unfold rmvPDE_spec in H0.
        subdestruct; inv H0; subst; constructor; simpl; trivial; intros; try congruence; eauto;
          try (rewrite ZMap.gso; eauto; fail).
        + eapply consistent_ppage_log_hide_alloc; eassumption.
        + eapply dirty_ppage_gso_alloc; eauto.
        + eapply consistent_ppage_log_hide_alloc; eassumption.
        + eapply dirty_ppage_gso_alloc; eauto.
      - inv Hinv. unfold rmvPDE_spec in H0.
        subdestruct; inv H0; subst; constructor; simpl; trivial; intros; try congruence.
    Qed.

    Global Instance idpde_init_inv: PreservesInvariants idpde_init_spec.
    Proof.
      preserves_invariants_simpl low_level_invariant high_level_invariant.
      - apply real_nps_range.
      - apply AC_init_container_valid.
      - rewrite init_pperm; [|try assumption].
        apply real_pperm_log_valid.
      - eauto.
      - eauto.
      - eapply real_valid_hlock_pool1; eauto.
      - eauto.
      - eapply real_valid_AT_log_pool_H; eauto.
    Qed.

  End INV.

Layer Definition

Layer Definition newly introduced

  Definition mptop_fresh : compatlayer (cdata RData) :=
    pt_read gensem ptRead_spec
             pt_read_pde gensem ptReadPDE_spec
             pt_insert_aux gensem ptInsertAux_spec
             pt_insert_pde gensem ptInsertPDE_spec
             pt_rmv_aux gensem ptRmvAux_spec
             pt_rmv_pde gensem ptRmvPDE_spec
             idpde_init gensem idpde_init_spec.

Layer Definition passthrough

  Definition mptop_passthrough : compatlayer (cdata RData) :=
    fload gensem fload_spec
           fstore gensem fstore_spec
          
           page_copy gensem page_copy_spec
           page_copy_back gensem page_copy_back_spec

           vmxinfo_get gensem vmxinfo_get_spec
           set_pg gensem setPG1_spec
           at_get_c gensem get_at_c_spec
           at_set_c gensem set_at_c0_spec
           palloc gensem lpalloc_spec
          
           set_pt gensem setPT´_spec
           set_PDE gensem setPDE_spec
           rmv_PDE gensem rmvPDE_spec
           rmv_PTE gensem rmvPTE_spec
           pt_in primcall_general_compatsem´ ptin´_spec (prim_ident:= pt_in)
           pt_out primcall_general_compatsem´ ptout_spec (prim_ident:= pt_out)
           container_get_parent gensem container_get_parent_spec
           container_get_nchildren gensem container_get_nchildren_spec
           container_get_quota gensem container_get_quota_spec
           container_get_usage gensem container_get_usage_spec
           container_can_consume gensem container_can_consume_spec
           container_split gensem container_split_spec
           get_CPU_ID gensem get_CPU_ID_spec
           get_curid gensem get_curid_spec
           set_curid gensem set_curid_spec
           set_curid_init gensem set_curid_init_spec
           release_lock primcall_release_lock_compatsem release_lock release_lock_spec1
           acquire_lock primcall_acquire_lock_compatsem acquire_lock_spec1
          

           cli gensem cli_spec
           sti gensem sti_spec
           serial_intr_disable gensem serial_intr_disable_spec
           serial_intr_enable gensem serial_intr_enable_spec
           serial_putc gensem serial_putc_spec
           cons_buf_read gensem cons_buf_read_spec

           trap_in primcall_general_compatsem trapin_spec
           trap_out primcall_general_compatsem trapout_spec
           host_in primcall_general_compatsem hostin_spec
           host_out primcall_general_compatsem hostout_spec
           proc_create_postinit gensem proc_create_postinit_spec
           trap_get primcall_trap_info_get_compatsem trap_info_get_spec
           trap_set primcall_trap_info_ret_compatsem trap_info_ret_spec
           accessors {| exec_load := (@exec_loadex _ _ _ _ _ _ _ _ _ _ _ _ _ _ Hmwd);
                           exec_store := (@exec_storeex _ _ _ _ _ _ _ _ _ _ _ _ _ _ Hmwd) |}.

Layer Definition

  Definition mptop : compatlayer (cdata RData) := mptop_fresh mptop_passthrough.

End WITHMEM.