Struct enarx_shim_kvm::hostcall::UserMemScope

pub struct UserMemScope;

Memory validation scope

Trait Implementations

impl Platform for UserMemScope

fn validate_mut<T>(&self, ptr: usize) -> Result<&mut T, c_int>

Validates that the memory pointed to by ptr of the type T is:

• in valid address space and writable for the lifetime of self.
• “dereferenceable” in the sense defined in the ptr module documentation.
• ptr is non-null and aligned
• not borrowed already and registers the memory as borrowed mutably.

Returns a mutable borrow if valid, otherwise EINVAL.

fn validate<T>(&self, ptr: usize) -> Result<&T, c_int>

Validates that the memory pointed to by ptr of the type T is:

• in valid address space and readable for the lifetime of self.
• “dereferenceable” in the sense defined in the ptr module documentation.
• ptr is non-null and aligned
• not borrowed already and registers the memory as borrowed.

Returns an immutable borrow if valid, otherwise EINVAL.

fn validate_slice_mut<T: Sized>(
    &self,
    ptr: usize,
    count: usize
) -> Result<&mut [T]>

Validates that a region for len elements of type T is:

• in valid address space and writable for the lifetime of self.
• “dereferenceable” in the sense defined in the ptr module documentation.
• ptr is non-null and aligned
• not borrowed already and registers the memory as borrowed mutably.

Returns a mutable borrow if valid, otherwise EINVAL.

fn validate_slice<T: Sized>(&self, ptr: usize, count: usize) -> Result<&[T]>

Validates that a region of memory is valid for read-only access for len elements of type T.

• in valid address space and writable for the lifetime of self.
• “dereferenceable” in the sense defined in the ptr module documentation.
• ptr is non-null and aligned
• not borrowed already and registers the memory as borrowed.

Returns an immutable borrow if valid, otherwise EINVAL.

fn validate_iovec_slice_mut(
    &self,
    iov: usize,
    iovcnt: usize
) -> Result<&mut [&mut [u8]], i32>

Validates that pointer iov points to represents a slice of iovcnt pointers to [libc::iovec] structures valid for read-write access.

fn validate_iovec_slice(&self, iov: usize, iovcnt: usize) -> Result<&[&[u8]], i32>

Validates that pointer iov points to represents a slice of iovcnt pointers to [libc::iovec] structures valid for read-only access.

fn validate_str(&self, ptr: usize) -> Result<&[u8], i32>

Validates that a region of memory represents a C string and is valid for read-only access.

fn validate_sockaddr_output(
    &self,
    addr: usize,
    addrlen: usize
) -> Result<SockaddrOutput<'_>, i32>

Validates that pointer addrlen points to socklen_t and addr points to a byte array of size *addrlen and is valid for read-write access.