1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69

use crate::event::Command;
use crate::rmi;

#[allow(dead_code)]
#[derive(Default, Copy, Clone)]
pub struct Constraint {
    pub cmd: Command,
    pub arg_num: usize, // number of args including fid
    pub ret_num: usize,
    // TODO: add validate function for each RMI command (validate type or value inside registers)
}

impl Constraint {
    pub fn new(cmd: Command, arg_num: usize, ret_num: usize) -> Constraint {
        Constraint {
            cmd,
            arg_num,
            ret_num,
        }
    }
}

fn pick(cmd: Command) -> Option<Constraint> {
    let constraint = match cmd {
        rmi::VERSION => Constraint::new(rmi::VERSION, 2, 3),
        rmi::GRANULE_DELEGATE => Constraint::new(rmi::GRANULE_DELEGATE, 2, 1),
        rmi::GRANULE_UNDELEGATE => Constraint::new(rmi::GRANULE_UNDELEGATE, 2, 1),
        rmi::DATA_CREATE => Constraint::new(rmi::DATA_CREATE, 6, 1),
        rmi::DATA_CREATE_UNKNOWN => Constraint::new(rmi::DATA_CREATE_UNKNOWN, 4, 1),
        rmi::DATA_DESTROY => Constraint::new(rmi::DATA_DESTROY, 3, 3),
        rmi::REALM_ACTIVATE => Constraint::new(rmi::REALM_ACTIVATE, 2, 1),
        // NOTE: REALM_CREATE has 3 of arg_num and 1 of ret_num according to the specification,
        //       but we're using one more return value for our own purpose.
        rmi::REALM_CREATE => Constraint::new(rmi::REALM_CREATE, 3, 2),
        rmi::REALM_DESTROY => Constraint::new(rmi::REALM_DESTROY, 2, 1),
        // NOTE: REC_CREATE has 4 of arg_num and 1 of ret_num according to the specification,
        //       but we're using one more return value for our own purpose.
        rmi::REC_CREATE => Constraint::new(rmi::REC_CREATE, 4, 2),
        rmi::REC_DESTROY => Constraint::new(rmi::REC_DESTROY, 4, 1),
        rmi::REC_ENTER => Constraint::new(rmi::REC_ENTER, 3, 1),
        rmi::RTT_MAP_UNPROTECTED => Constraint::new(rmi::RTT_MAP_UNPROTECTED, 5, 1),
        rmi::RTT_UNMAP_UNPROTECTED => Constraint::new(rmi::RTT_UNMAP_UNPROTECTED, 4, 2),
        rmi::RTT_READ_ENTRY => Constraint::new(rmi::RTT_READ_ENTRY, 4, 5),
        rmi::FEATURES => Constraint::new(rmi::FEATURES, 2, 2),
        rmi::REC_AUX_COUNT => Constraint::new(rmi::REC_AUX_COUNT, 2, 2),
        rmi::RTT_CREATE => Constraint::new(rmi::RTT_CREATE, 5, 1),
        rmi::RTT_DESTROY => Constraint::new(rmi::RTT_DESTROY, 4, 3),
        rmi::RTT_INIT_RIPAS => Constraint::new(rmi::RTT_INIT_RIPAS, 4, 2),
        rmi::RTT_SET_RIPAS => Constraint::new(rmi::RTT_SET_RIPAS, 5, 2),
        rmi::RTT_FOLD => Constraint::new(rmi::RTT_FOLD, 4, 2),
        rmi::REQ_COMPLETE => Constraint::new(rmi::REQ_COMPLETE, 4, 2),
        rmi::PSCI_COMPLETE => Constraint::new(rmi::PSCI_COMPLETE, 4, 1),
        _ => return None,
    };
    Some(constraint)
}

pub fn validate<T, G>(cmd: Command, ok_func: T, else_func: G)
where
    T: Fn(usize, usize),
    G: FnOnce(), // TODO: error command?
{
    if let Some(c) = pick(cmd) {
        // TODO: command-specific validation routine if needed
        ok_func(c.arg_num, c.ret_num);
    } else {
        else_func();
    }
}