| commit | 363c3b59940783ac0c79db47d84e79a5cb0e75e6 | [log] [tgz] |
|---|---|---|
| author | Andrew Walbran <[email protected]> | Mon Jul 22 17:41:56 2024 +0100 |
| committer | Andrew Walbran <[email protected]> | Wed Jul 24 17:19:43 2024 +0100 |
| tree | 70366a0807e4349038bf29091a4d05bf1471cd2a | |
| parent | f16bc91862ceb3cb2b0ae63ac71636913e131861 [diff] |
Import 'percore' crate Request Document: go/android-rust-importing-crates For CL Reviewers: go/android3p#cl-review For Build Team: go/ab-third-party-imports Bug: 354713044 Test: m libpercore Change-Id: Ifb2d820da67717a03bf5d9da4de68102e69e6069
Safe per-CPU core mutable state on no_std platforms through exception masking.
This crate provides two main wrapper types: PerCore to provide an instance of a value per CPU core, where each core can access only its instance, and ExceptionLock to guard a value so that it can only be accessed while exceptions are masked. These may be combined with RefCell to provide safe per-core mutable state.
ExceptionLock may also be combined with a spinlock-based mutex (such as one provided by the spin crate) to avoid deadlocks when accessing global mutable state from exception handlers.
use core::cell::RefCell; use percore::{exception_free, Cores, ExceptionLock, PerCore}; /// The total number of CPU cores in the target system. const CORE_COUNT: usize = 2; struct CoresImpl; unsafe impl Cores for CoresImpl { fn core_index() -> usize { todo!("Return the index of the current CPU core, 0 or 1") } } struct CoreState { // Your per-core mutable state goes here... foo: u32, } const EMPTY_CORE_STATE: ExceptionLock<RefCell<CoreState>> = ExceptionLock::new(RefCell::new(CoreState { foo: 0 })); static CORE_STATE: PerCore<ExceptionLock<RefCell<CoreState>>, CoresImpl, CORE_COUNT> = PerCore::new([EMPTY_CORE_STATE; CORE_COUNT]); fn main() { // Mask exceptions while accessing mutable state. exception_free(|token| { // `token` proves that interrupts are masked, so we can safely access per-core mutable // state. CORE_STATE.get().borrow_mut(token).foo = 42; }); }
This is not an officially supported Google product.
Currently only aarch64 is fully supported. The crate will build for other architectures, but you'll need to provide your own implementation of the exception_free function. Patches are welcome to add support for other architectures.
Licensed under either of
at your option.
If you want to contribute to the project, see details of how we accept contributions.