| commit | 11a30a81554d13f62f1564a86e0c211a7022aa50 | [log] [tgz] |
|---|---|---|
| author | Android Build Coastguard Worker <[email protected]> | Thu Oct 03 01:12:04 2024 +0000 |
| committer | Android Build Coastguard Worker <[email protected]> | Thu Oct 03 01:12:04 2024 +0000 |
| tree | ee39b30414c05c5e89f77afeee7b030ad078f346 | |
| parent | 69eb5031f8c651846992e5ac1ec3b347c6e7c089 [diff] | |
| parent | 934409ba17bf517026e8b02455ad64baf3326e80 [diff] |
Snap for 12446955 from 934409ba17bf517026e8b02455ad64baf3326e80 to sdk-release Change-Id: I82b1d0a2d2072b4f4a4ea889ff602482c57299ee
Safe per-CPU core mutable state on no_std platforms through exception masking.
This crate provides two main wrapper types: PerCore to provide an instance of a value per CPU core, where each core can access only its instance, and ExceptionLock to guard a value so that it can only be accessed while exceptions are masked. These may be combined with RefCell to provide safe per-core mutable state.
ExceptionLock may also be combined with a spinlock-based mutex (such as one provided by the spin crate) to avoid deadlocks when accessing global mutable state from exception handlers.
use core::cell::RefCell; use percore::{exception_free, Cores, ExceptionLock, PerCore}; /// The total number of CPU cores in the target system. const CORE_COUNT: usize = 2; struct CoresImpl; unsafe impl Cores for CoresImpl { fn core_index() -> usize { todo!("Return the index of the current CPU core, 0 or 1") } } struct CoreState { // Your per-core mutable state goes here... foo: u32, } const EMPTY_CORE_STATE: ExceptionLock<RefCell<CoreState>> = ExceptionLock::new(RefCell::new(CoreState { foo: 0 })); static CORE_STATE: PerCore<ExceptionLock<RefCell<CoreState>>, CoresImpl, CORE_COUNT> = PerCore::new([EMPTY_CORE_STATE; CORE_COUNT]); fn main() { // Mask exceptions while accessing mutable state. exception_free(|token| { // `token` proves that interrupts are masked, so we can safely access per-core mutable // state. CORE_STATE.get().borrow_mut(token).foo = 42; }); }
This is not an officially supported Google product.
Currently only aarch64 is fully supported. The crate will build for other architectures, but you'll need to provide your own implementation of the exception_free function. Patches are welcome to add support for other architectures.
Licensed under either of
at your option.
If you want to contribute to the project, see details of how we accept contributions.