2 * Copyright (C) 2002-2005 ReactOS Team (and the authors from the programmers section)
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version 2
7 * of the License, or (at your option) any later version.
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
19 * PROJECT: ReactOS kernel
20 * FILE: ntoskrnl/mm/anonmem.c
21 * PURPOSE: Implementing anonymous memory.
23 * PROGRAMMERS: David Welch
32 * Gunnar Andre' Dalsnes
34 * Thomas Weidenmueller
40 /* INCLUDE *****************************************************************/
46 /* FUNCTIONS *****************************************************************/
50 MmWritePageVirtualMemory(PMMSUPPORT AddressSpace
,
51 PMEMORY_AREA MemoryArea
,
58 PEPROCESS Process
= MmGetAddressSpaceOwner(AddressSpace
);
61 * Check for paging out from a deleted virtual memory area.
63 if (MemoryArea
->DeleteInProgress
)
65 PageOp
->Status
= STATUS_UNSUCCESSFUL
;
66 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
67 MmReleasePageOp(PageOp
);
68 return(STATUS_UNSUCCESSFUL
);
71 Page
= MmGetPfnForProcess(Process
, Address
);
74 * Get that the page actually is dirty.
76 if (!MmIsDirtyPage(Process
, Address
))
78 PageOp
->Status
= STATUS_SUCCESS
;
79 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
80 MmReleasePageOp(PageOp
);
81 return(STATUS_SUCCESS
);
85 * Speculatively set the mapping to clean.
87 MmSetCleanPage(Process
, Address
);
90 * If necessary, allocate an entry in the paging file for this page
92 SwapEntry
= MmGetSavedSwapEntryPage(Page
);
95 SwapEntry
= MmAllocSwapPage();
98 MmSetDirtyPage(Process
, Address
);
99 PageOp
->Status
= STATUS_PAGEFILE_QUOTA_EXCEEDED
;
100 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
101 MmReleasePageOp(PageOp
);
102 return(STATUS_PAGEFILE_QUOTA_EXCEEDED
);
107 * Write the page to the pagefile
109 Status
= MmWriteToSwapPage(SwapEntry
, Page
);
110 if (!NT_SUCCESS(Status
))
112 DPRINT1("MM: Failed to write to swap page (Status was 0x%.8X)\n",
114 MmSetDirtyPage(Process
, Address
);
115 PageOp
->Status
= STATUS_UNSUCCESSFUL
;
116 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
117 MmReleasePageOp(PageOp
);
118 return(STATUS_UNSUCCESSFUL
);
122 * Otherwise we have succeeded.
124 MmSetSavedSwapEntryPage(Page
, SwapEntry
);
125 PageOp
->Status
= STATUS_SUCCESS
;
126 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
127 MmReleasePageOp(PageOp
);
128 return(STATUS_SUCCESS
);
133 MmPageOutVirtualMemory(PMMSUPPORT AddressSpace
,
134 PMEMORY_AREA MemoryArea
,
142 PEPROCESS Process
= MmGetAddressSpaceOwner(AddressSpace
);
144 DPRINT("MmPageOutVirtualMemory(Address 0x%.8X) PID %d\n",
145 Address
, Process
->UniqueProcessId
);
148 * Check for paging out from a deleted virtual memory area.
150 if (MemoryArea
->DeleteInProgress
)
152 PageOp
->Status
= STATUS_UNSUCCESSFUL
;
153 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
154 MmReleasePageOp(PageOp
);
155 return(STATUS_UNSUCCESSFUL
);
159 * Disable the virtual mapping.
161 MmDisableVirtualMapping(Process
, Address
,
166 KeBugCheck(MEMORY_MANAGEMENT
);
170 * Paging out non-dirty data is easy.
174 MmLockAddressSpace(AddressSpace
);
175 MmDeleteVirtualMapping(Process
, Address
, FALSE
, NULL
, NULL
);
176 MmDeleteAllRmaps(Page
, NULL
, NULL
);
177 if ((SwapEntry
= MmGetSavedSwapEntryPage(Page
)) != 0)
179 MmCreatePageFileMapping(Process
, Address
, SwapEntry
);
180 MmSetSavedSwapEntryPage(Page
, 0);
182 MmUnlockAddressSpace(AddressSpace
);
183 MmReleasePageMemoryConsumer(MC_USER
, Page
);
184 PageOp
->Status
= STATUS_SUCCESS
;
185 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
186 MmReleasePageOp(PageOp
);
187 return(STATUS_SUCCESS
);
191 * If necessary, allocate an entry in the paging file for this page
193 SwapEntry
= MmGetSavedSwapEntryPage(Page
);
196 SwapEntry
= MmAllocSwapPage();
199 MmShowOutOfSpaceMessagePagingFile();
200 MmEnableVirtualMapping(Process
, Address
);
201 PageOp
->Status
= STATUS_UNSUCCESSFUL
;
202 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
203 MmReleasePageOp(PageOp
);
204 return(STATUS_PAGEFILE_QUOTA
);
209 * Write the page to the pagefile
211 Status
= MmWriteToSwapPage(SwapEntry
, Page
);
212 if (!NT_SUCCESS(Status
))
214 DPRINT1("MM: Failed to write to swap page (Status was 0x%.8X)\n",
216 MmEnableVirtualMapping(Process
, Address
);
217 PageOp
->Status
= STATUS_UNSUCCESSFUL
;
218 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
219 MmReleasePageOp(PageOp
);
220 return(STATUS_UNSUCCESSFUL
);
224 * Otherwise we have succeeded, free the page
226 DPRINT("MM: Swapped out virtual memory page 0x%.8X!\n", Page
<< PAGE_SHIFT
);
227 MmLockAddressSpace(AddressSpace
);
228 MmDeleteVirtualMapping(Process
, Address
, FALSE
, NULL
, NULL
);
229 MmCreatePageFileMapping(Process
, Address
, SwapEntry
);
230 MmUnlockAddressSpace(AddressSpace
);
231 MmDeleteAllRmaps(Page
, NULL
, NULL
);
232 MmSetSavedSwapEntryPage(Page
, 0);
233 MmReleasePageMemoryConsumer(MC_USER
, Page
);
234 PageOp
->Status
= STATUS_SUCCESS
;
235 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
236 MmReleasePageOp(PageOp
);
237 return(STATUS_SUCCESS
);
242 MmNotPresentFaultVirtualMemory(PMMSUPPORT AddressSpace
,
243 MEMORY_AREA
* MemoryArea
,
247 * FUNCTION: Move data into memory to satisfy a page not present fault
249 * AddressSpace = Address space within which the fault occurred
250 * MemoryArea = The memory area within which the fault occurred
251 * Address = The absolute address of fault
253 * NOTES: This function is called with the address space lock held.
260 PEPROCESS Process
= MmGetAddressSpaceOwner(AddressSpace
);
263 * There is a window between taking the page fault and locking the
264 * address space when another thread could load the page so we check
267 if (MmIsPagePresent(NULL
, Address
))
271 MmLockPage(MmGetPfnForProcess(NULL
, Address
));
273 return(STATUS_SUCCESS
);
277 * Check for the virtual memory area being deleted.
279 if (MemoryArea
->DeleteInProgress
)
281 return(STATUS_UNSUCCESSFUL
);
285 * Get the segment corresponding to the virtual address
287 Region
= MmFindRegion(MemoryArea
->StartingAddress
,
288 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
291 if (Region
->Type
== MEM_RESERVE
|| Region
->Protect
== PAGE_NOACCESS
)
293 return(STATUS_ACCESS_VIOLATION
);
299 if (Region
->Protect
& PAGE_GUARD
)
301 return(STATUS_GUARD_PAGE_VIOLATION
);
305 * Get or create a page operation
307 PageOp
= MmGetPageOp(MemoryArea
, Process
->UniqueProcessId
,
308 (PVOID
)PAGE_ROUND_DOWN(Address
), NULL
, 0,
309 MM_PAGEOP_PAGEIN
, FALSE
);
312 DPRINT1("MmGetPageOp failed");
313 KeBugCheck(MEMORY_MANAGEMENT
);
317 * Check if someone else is already handling this fault, if so wait
320 if (PageOp
->Thread
!= PsGetCurrentThread())
322 MmUnlockAddressSpace(AddressSpace
);
323 Status
= KeWaitForSingleObject(&PageOp
->CompletionEvent
,
329 * Check for various strange conditions
331 if (Status
!= STATUS_SUCCESS
)
333 DPRINT1("Failed to wait for page op\n");
334 KeBugCheck(MEMORY_MANAGEMENT
);
336 if (PageOp
->Status
== STATUS_PENDING
)
338 DPRINT1("Woke for page op before completion\n");
339 KeBugCheck(MEMORY_MANAGEMENT
);
342 * If this wasn't a pagein then we need to restart the handling
344 if (PageOp
->OpType
!= MM_PAGEOP_PAGEIN
)
346 MmLockAddressSpace(AddressSpace
);
347 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
348 MmReleasePageOp(PageOp
);
349 return(STATUS_MM_RESTART_OPERATION
);
352 * If the thread handling this fault has failed then we don't retry
354 if (!NT_SUCCESS(PageOp
->Status
))
356 MmLockAddressSpace(AddressSpace
);
357 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
358 Status
= PageOp
->Status
;
359 MmReleasePageOp(PageOp
);
362 MmLockAddressSpace(AddressSpace
);
365 MmLockPage(MmGetPfnForProcess(NULL
, Address
));
367 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
368 MmReleasePageOp(PageOp
);
369 return(STATUS_SUCCESS
);
373 * Try to allocate a page
375 Status
= MmRequestPageMemoryConsumer(MC_USER
, FALSE
, &Page
);
376 if (Status
== STATUS_NO_MEMORY
)
378 MmUnlockAddressSpace(AddressSpace
);
379 Status
= MmRequestPageMemoryConsumer(MC_USER
, TRUE
, &Page
);
380 MmLockAddressSpace(AddressSpace
);
382 if (!NT_SUCCESS(Status
))
384 DPRINT1("MmRequestPageMemoryConsumer failed, status = %x\n", Status
);
385 KeBugCheck(MEMORY_MANAGEMENT
);
389 * Handle swapped out pages.
391 if (MmIsPageSwapEntry(NULL
, Address
))
395 MmDeletePageFileMapping(Process
, Address
, &SwapEntry
);
396 Status
= MmReadFromSwapPage(SwapEntry
, Page
);
397 if (!NT_SUCCESS(Status
))
399 KeBugCheck(MEMORY_MANAGEMENT
);
401 MmSetSavedSwapEntryPage(Page
, SwapEntry
);
405 * Set the page. If we fail because we are out of memory then
408 Status
= MmCreateVirtualMapping(Process
,
409 (PVOID
)PAGE_ROUND_DOWN(Address
),
413 while (Status
== STATUS_NO_MEMORY
)
415 MmUnlockAddressSpace(AddressSpace
);
416 Status
= MmCreateVirtualMapping(Process
,
421 MmLockAddressSpace(AddressSpace
);
423 if (!NT_SUCCESS(Status
))
425 DPRINT1("MmCreateVirtualMapping failed, not out of memory\n");
426 KeBugCheck(MEMORY_MANAGEMENT
);
431 * Add the page to the process's working set
433 MmInsertRmap(Page
, Process
, (PVOID
)PAGE_ROUND_DOWN(Address
));
436 * Finish the operation
442 PageOp
->Status
= STATUS_SUCCESS
;
443 KeSetEvent(&PageOp
->CompletionEvent
, IO_NO_INCREMENT
, FALSE
);
444 MmReleasePageOp(PageOp
);
445 return(STATUS_SUCCESS
);
449 MmModifyAttributes(PMMSUPPORT AddressSpace
,
457 * FUNCTION: Modify the attributes of a memory region
460 PEPROCESS Process
= MmGetAddressSpaceOwner(AddressSpace
);
463 * If we are switching a previously committed region to reserved then
464 * free any allocated pages within the region
466 if (NewType
== MEM_RESERVE
&& OldType
== MEM_COMMIT
)
470 for (i
=0; i
< PAGE_ROUND_UP(RegionSize
)/PAGE_SIZE
; i
++)
474 if (MmIsPageSwapEntry(Process
,
475 (char*)BaseAddress
+ (i
* PAGE_SIZE
)))
479 MmDeletePageFileMapping(Process
,
480 (char*)BaseAddress
+ (i
* PAGE_SIZE
),
482 MmFreeSwapPage(SwapEntry
);
486 MmDeleteVirtualMapping(Process
,
487 (char*)BaseAddress
+ (i
*PAGE_SIZE
),
491 SWAPENTRY SavedSwapEntry
;
492 SavedSwapEntry
= MmGetSavedSwapEntryPage(Page
);
493 if (SavedSwapEntry
!= 0)
495 MmFreeSwapPage(SavedSwapEntry
);
496 MmSetSavedSwapEntryPage(Page
, 0);
498 MmDeleteRmap(Page
, Process
,
499 (char*)BaseAddress
+ (i
* PAGE_SIZE
));
500 MmReleasePageMemoryConsumer(MC_USER
, Page
);
507 * If we are changing the protection attributes of a committed region then
508 * alter the attributes for any allocated pages within the region
510 if (NewType
== MEM_COMMIT
&& OldType
== MEM_COMMIT
&&
511 OldProtect
!= NewProtect
)
515 for (i
=0; i
< PAGE_ROUND_UP(RegionSize
)/PAGE_SIZE
; i
++)
517 if (MmIsPagePresent(Process
,
518 (char*)BaseAddress
+ (i
*PAGE_SIZE
)))
520 MmSetPageProtect(Process
,
521 (char*)BaseAddress
+ (i
*PAGE_SIZE
),
532 NtAllocateVirtualMemory(IN HANDLE ProcessHandle
,
533 IN OUT PVOID
* UBaseAddress
,
534 IN ULONG_PTR ZeroBits
,
535 IN OUT PSIZE_T URegionSize
,
536 IN ULONG AllocationType
,
539 * FUNCTION: Allocates a block of virtual memory in the process address space
541 * ProcessHandle = The handle of the process which owns the virtual memory
542 * BaseAddress = A pointer to the virtual memory allocated. If you
543 * supply a non zero value the system will try to
544 * allocate the memory at the address supplied. It round
545 * it down to a multiple of the page size.
546 * ZeroBits = (OPTIONAL) You can specify the number of high order bits
547 * that must be zero, ensuring that the memory will be
548 * allocated at a address below a certain value.
549 * RegionSize = The number of bytes to allocate
550 * AllocationType = Indicates the type of virtual memory you like to
551 * allocated, can be a combination of MEM_COMMIT,
552 * MEM_RESERVE, MEM_RESET, MEM_TOP_DOWN.
553 * Protect = Indicates the protection type of the pages allocated.
558 MEMORY_AREA
* MemoryArea
;
559 ULONG_PTR MemoryAreaLength
;
562 PMMSUPPORT AddressSpace
;
568 PHYSICAL_ADDRESS BoundaryAddressMultiple
;
569 KPROCESSOR_MODE PreviousMode
;
573 DPRINT("NtAllocateVirtualMemory(*UBaseAddress %x, "
574 "ZeroBits %d, *URegionSize %x, AllocationType %x, Protect %x)\n",
575 *UBaseAddress
,ZeroBits
,*URegionSize
,AllocationType
,
578 /* Check for valid protection flags */
579 MemProtection
= Protect
& ~(PAGE_GUARD
|PAGE_NOCACHE
);
580 if (MemProtection
!= PAGE_NOACCESS
&&
581 MemProtection
!= PAGE_READONLY
&&
582 MemProtection
!= PAGE_READWRITE
&&
583 MemProtection
!= PAGE_WRITECOPY
&&
584 MemProtection
!= PAGE_EXECUTE
&&
585 MemProtection
!= PAGE_EXECUTE_READ
&&
586 MemProtection
!= PAGE_EXECUTE_READWRITE
&&
587 MemProtection
!= PAGE_EXECUTE_WRITECOPY
)
589 DPRINT1("Invalid page protection\n");
590 return STATUS_INVALID_PAGE_PROTECTION
;
593 /* Check for valid Zero bits */
596 DPRINT1("Too many zero bits\n");
597 return STATUS_INVALID_PARAMETER_3
;
600 /* Check for valid Allocation Types */
601 if ((AllocationType
& ~(MEM_COMMIT
| MEM_RESERVE
| MEM_RESET
| MEM_PHYSICAL
|
602 MEM_TOP_DOWN
| MEM_WRITE_WATCH
)))
604 DPRINT1("Invalid Allocation Type\n");
605 return STATUS_INVALID_PARAMETER_5
;
608 /* Check for at least one of these Allocation Types to be set */
609 if (!(AllocationType
& (MEM_COMMIT
| MEM_RESERVE
| MEM_RESET
)))
611 DPRINT1("No memory allocation base type\n");
612 return STATUS_INVALID_PARAMETER_5
;
615 /* MEM_RESET is an exclusive flag, make sure that is valid too */
616 if ((AllocationType
& MEM_RESET
) && (AllocationType
!= MEM_RESET
))
618 DPRINT1("Invalid use of MEM_RESET\n");
619 return STATUS_INVALID_PARAMETER_5
;
622 /* MEM_WRITE_WATCH can only be used if MEM_RESERVE is also used */
623 if ((AllocationType
& MEM_WRITE_WATCH
) && !(AllocationType
& MEM_RESERVE
))
625 DPRINT1("MEM_WRITE_WATCH used without MEM_RESERVE\n");
626 return STATUS_INVALID_PARAMETER_5
;
629 /* MEM_PHYSICAL can only be used with MEM_RESERVE, and can only be R/W */
630 if (AllocationType
& MEM_PHYSICAL
)
632 /* First check for MEM_RESERVE exclusivity */
633 if (AllocationType
!= (MEM_RESERVE
| MEM_PHYSICAL
))
635 DPRINT1("MEM_PHYSICAL used with other flags then MEM_RESERVE or"
636 "MEM_RESERVE was not present at all\n");
637 return STATUS_INVALID_PARAMETER_5
;
640 /* Then make sure PAGE_READWRITE is used */
641 if (Protect
!= PAGE_READWRITE
)
643 DPRINT1("MEM_PHYSICAL used without PAGE_READWRITE\n");
644 return STATUS_INVALID_PAGE_PROTECTION
;
648 PreviousMode
= KeGetPreviousMode();
652 if (PreviousMode
!= KernelMode
)
654 ProbeForWritePointer(UBaseAddress
);
655 ProbeForWriteUlong(URegionSize
);
657 PBaseAddress
= *UBaseAddress
;
658 PRegionSize
= *URegionSize
;
660 _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER
)
662 /* Return the exception code */
663 _SEH2_YIELD(return _SEH2_GetExceptionCode());
667 BoundaryAddressMultiple
.QuadPart
= 0;
669 BaseAddress
= (PVOID
)PAGE_ROUND_DOWN(PBaseAddress
);
670 RegionSize
= PAGE_ROUND_UP((ULONG_PTR
)PBaseAddress
+ PRegionSize
) -
671 PAGE_ROUND_DOWN(PBaseAddress
);
674 * We've captured and calculated the data, now do more checks
675 * Yes, MmCreateMemoryArea does similar checks, but they don't return
676 * the right status codes that a caller of this routine would expect.
678 if ((ULONG_PTR
)BaseAddress
>= USER_SHARED_DATA
)
680 DPRINT1("Virtual allocation base above User Space\n");
681 return STATUS_INVALID_PARAMETER_2
;
685 DPRINT1("Region size is invalid (zero)\n");
686 return STATUS_INVALID_PARAMETER_4
;
688 if ((USER_SHARED_DATA
- (ULONG_PTR
)BaseAddress
) < RegionSize
)
690 DPRINT1("Region size would overflow into kernel-memory\n");
691 return STATUS_INVALID_PARAMETER_4
;
695 * Copy on Write is reserved for system use. This case is a certain failure
696 * but there may be other cases...needs more testing
698 if ((!BaseAddress
|| (AllocationType
& MEM_RESERVE
)) &&
699 (Protect
& (PAGE_WRITECOPY
| PAGE_EXECUTE_WRITECOPY
)))
701 DPRINT1("Copy on write is not supported by VirtualAlloc\n");
702 return STATUS_INVALID_PAGE_PROTECTION
;
706 Status
= ObReferenceObjectByHandle(ProcessHandle
,
707 PROCESS_VM_OPERATION
,
712 if (!NT_SUCCESS(Status
))
714 DPRINT("NtAllocateVirtualMemory() = %x\n",Status
);
718 Type
= (AllocationType
& MEM_COMMIT
) ? MEM_COMMIT
: MEM_RESERVE
;
719 DPRINT("Type %x\n", Type
);
721 AddressSpace
= &Process
->Vm
;
722 MmLockAddressSpace(AddressSpace
);
724 if (PBaseAddress
!= 0)
726 MemoryArea
= MmLocateMemoryAreaByAddress(AddressSpace
, BaseAddress
);
728 if (MemoryArea
!= NULL
)
730 MemoryAreaLength
= (ULONG_PTR
)MemoryArea
->EndingAddress
-
731 (ULONG_PTR
)MemoryArea
->StartingAddress
;
733 if (((ULONG
)BaseAddress
+ RegionSize
) > (ULONG
)MemoryArea
->EndingAddress
)
735 DPRINT("BaseAddress + RegionSize %x is larger than MemoryArea's EndingAddress %x\n",
736 (ULONG
)BaseAddress
+ RegionSize
, MemoryArea
->EndingAddress
);
738 MmUnlockAddressSpace(AddressSpace
);
739 ObDereferenceObject(Process
);
741 return STATUS_MEMORY_NOT_ALLOCATED
;
744 if (AllocationType
== MEM_RESET
)
746 if (MmIsPagePresent(Process
, BaseAddress
))
748 /* FIXME: mark pages as not modified */
752 /* FIXME: if pages are in paging file discard them and bring in pages of zeros */
755 MmUnlockAddressSpace(AddressSpace
);
756 ObDereferenceObject(Process
);
758 /* MEM_RESET does not modify any attributes of region */
759 return STATUS_SUCCESS
;
762 if (MemoryArea
->Type
== MEMORY_AREA_VIRTUAL_MEMORY
&&
763 MemoryAreaLength
>= RegionSize
)
766 MmAlterRegion(AddressSpace
,
767 MemoryArea
->StartingAddress
,
768 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
769 BaseAddress
, RegionSize
,
770 Type
, Protect
, MmModifyAttributes
);
771 MmUnlockAddressSpace(AddressSpace
);
772 ObDereferenceObject(Process
);
773 DPRINT("NtAllocateVirtualMemory() = %x\n",Status
);
775 /* Give the caller rounded BaseAddress and area length */
776 if (NT_SUCCESS(Status
))
778 *UBaseAddress
= BaseAddress
;
779 *URegionSize
= RegionSize
;
780 DPRINT("*UBaseAddress %x *URegionSize %x\n", BaseAddress
, RegionSize
);
785 else if (MemoryAreaLength
>= RegionSize
)
787 /* Region list initialized? */
788 if (MemoryArea
->Data
.SectionData
.RegionListHead
.Flink
)
791 MmAlterRegion(AddressSpace
,
792 MemoryArea
->StartingAddress
,
793 &MemoryArea
->Data
.SectionData
.RegionListHead
,
794 BaseAddress
, RegionSize
,
795 Type
, Protect
, MmModifyAttributes
);
799 Status
= STATUS_ACCESS_VIOLATION
;
802 MmUnlockAddressSpace(AddressSpace
);
803 ObDereferenceObject(Process
);
804 DPRINT("NtAllocateVirtualMemory() = %x\n",Status
);
806 /* Give the caller rounded BaseAddress and area length */
807 if (NT_SUCCESS(Status
))
809 *UBaseAddress
= BaseAddress
;
810 *URegionSize
= RegionSize
;
811 DPRINT("*UBaseAddress %x *URegionSize %x\n", BaseAddress
, RegionSize
);
818 MmUnlockAddressSpace(AddressSpace
);
819 ObDereferenceObject(Process
);
820 return(STATUS_UNSUCCESSFUL
);
825 Status
= MmCreateMemoryArea(AddressSpace
,
826 MEMORY_AREA_VIRTUAL_MEMORY
,
832 AllocationType
& MEM_TOP_DOWN
,
833 BoundaryAddressMultiple
);
834 if (!NT_SUCCESS(Status
))
836 MmUnlockAddressSpace(AddressSpace
);
837 ObDereferenceObject(Process
);
838 DPRINT("NtAllocateVirtualMemory() = %x\n",Status
);
842 MemoryAreaLength
= (ULONG_PTR
)MemoryArea
->EndingAddress
-
843 (ULONG_PTR
)MemoryArea
->StartingAddress
;
845 MmInitializeRegion(&MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
846 MemoryAreaLength
, Type
, Protect
);
848 if ((AllocationType
& MEM_COMMIT
) &&
849 (Protect
& (PAGE_READWRITE
| PAGE_EXECUTE_READWRITE
)))
851 const ULONG nPages
= PAGE_ROUND_UP(MemoryAreaLength
) >> PAGE_SHIFT
;
852 MmReserveSwapPages(nPages
);
855 *UBaseAddress
= BaseAddress
;
856 *URegionSize
= MemoryAreaLength
;
857 DPRINT("*UBaseAddress %x *URegionSize %x\n", BaseAddress
, RegionSize
);
859 MmUnlockAddressSpace(AddressSpace
);
860 ObDereferenceObject(Process
);
861 return(STATUS_SUCCESS
);
865 MmFreeVirtualMemoryPage(PVOID Context
,
866 MEMORY_AREA
* MemoryArea
,
872 PEPROCESS Process
= (PEPROCESS
)Context
;
876 SWAPENTRY SavedSwapEntry
;
877 SavedSwapEntry
= MmGetSavedSwapEntryPage(Page
);
878 if (SavedSwapEntry
!= 0)
880 MmFreeSwapPage(SavedSwapEntry
);
881 MmSetSavedSwapEntryPage(Page
, 0);
883 MmDeleteRmap(Page
, Process
, Address
);
884 MmReleasePageMemoryConsumer(MC_USER
, Page
);
886 else if (SwapEntry
!= 0)
888 MmFreeSwapPage(SwapEntry
);
894 MmFreeVirtualMemory(PEPROCESS Process
,
895 PMEMORY_AREA MemoryArea
)
897 PLIST_ENTRY current_entry
;
901 DPRINT("MmFreeVirtualMemory(Process %p MemoryArea %p)\n", Process
,
904 /* Mark this memory area as about to be deleted. */
905 MemoryArea
->DeleteInProgress
= TRUE
;
908 * Wait for any ongoing paging operations. Notice that since we have
909 * flagged this memory area as deleted no more page ops will be added.
911 if (MemoryArea
->PageOpCount
> 0)
913 ULONG_PTR MemoryAreaLength
= (ULONG_PTR
)MemoryArea
->EndingAddress
-
914 (ULONG_PTR
)MemoryArea
->StartingAddress
;
915 const ULONG nPages
= PAGE_ROUND_UP(MemoryAreaLength
) >> PAGE_SHIFT
;
917 for (i
= 0; i
< nPages
&& MemoryArea
->PageOpCount
!= 0; ++i
)
920 PageOp
= MmCheckForPageOp(MemoryArea
, Process
->UniqueProcessId
,
921 (PVOID
)((ULONG_PTR
)MemoryArea
->StartingAddress
+ (i
* PAGE_SIZE
)),
926 MmUnlockAddressSpace(&Process
->Vm
);
927 Status
= KeWaitForSingleObject(&PageOp
->CompletionEvent
,
932 if (Status
!= STATUS_SUCCESS
)
934 DPRINT1("Failed to wait for page op\n");
935 KeBugCheck(MEMORY_MANAGEMENT
);
937 MmLockAddressSpace(&Process
->Vm
);
938 MmReleasePageOp(PageOp
);
943 /* Free all the individual segments. */
944 current_entry
= MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
.Flink
;
945 while (current_entry
!= &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
)
947 current
= CONTAINING_RECORD(current_entry
, MM_REGION
, RegionListEntry
);
948 current_entry
= current_entry
->Flink
;
952 /* Actually free the memory area. */
953 MmFreeMemoryArea(&Process
->Vm
,
955 MmFreeVirtualMemoryPage
,
963 NtFreeVirtualMemory(IN HANDLE ProcessHandle
,
964 IN PVOID
* PBaseAddress
,
965 IN PSIZE_T PRegionSize
,
968 * FUNCTION: Frees a range of virtual memory
970 * ProcessHandle = Points to the process that allocated the virtual
972 * BaseAddress = Points to the memory address, rounded down to a
973 * multiple of the pagesize
974 * RegionSize = Limits the range to free, rounded up to a multiple of
976 * FreeType = Can be one of the values: MEM_DECOMMIT, or MEM_RELEASE
980 MEMORY_AREA
* MemoryArea
;
983 PMMSUPPORT AddressSpace
;
989 DPRINT("NtFreeVirtualMemory(ProcessHandle %x, *PBaseAddress %x, "
990 "*PRegionSize %x, FreeType %x)\n",ProcessHandle
,*PBaseAddress
,
991 *PRegionSize
,FreeType
);
993 if (!(FreeType
& (MEM_RELEASE
| MEM_DECOMMIT
)))
995 DPRINT1("Invalid FreeType\n");
996 return STATUS_INVALID_PARAMETER_4
;
999 if (ExGetPreviousMode() != KernelMode
)
1003 /* Probe user pointers */
1004 ProbeForWriteSize_t(PRegionSize
);
1005 ProbeForWritePointer(PBaseAddress
);
1007 _SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER
)
1009 /* Return the exception code */
1010 _SEH2_YIELD(return _SEH2_GetExceptionCode());
1015 BaseAddress
= (PVOID
)PAGE_ROUND_DOWN((*PBaseAddress
));
1016 RegionSize
= PAGE_ROUND_UP((ULONG_PTR
)(*PBaseAddress
) + (*PRegionSize
)) -
1017 PAGE_ROUND_DOWN((*PBaseAddress
));
1019 Status
= ObReferenceObjectByHandle(ProcessHandle
,
1020 PROCESS_VM_OPERATION
,
1025 if (!NT_SUCCESS(Status
))
1030 AddressSpace
= &Process
->Vm
;
1032 MmLockAddressSpace(AddressSpace
);
1033 MemoryArea
= MmLocateMemoryAreaByAddress(AddressSpace
, BaseAddress
);
1034 if (MemoryArea
== NULL
)
1036 Status
= STATUS_UNSUCCESSFUL
;
1037 goto unlock_deref_and_return
;
1043 /* We can only free a memory area in one step. */
1044 if (MemoryArea
->StartingAddress
!= BaseAddress
||
1045 MemoryArea
->Type
!= MEMORY_AREA_VIRTUAL_MEMORY
)
1047 Status
= STATUS_UNSUCCESSFUL
;
1048 goto unlock_deref_and_return
;
1051 MmFreeVirtualMemory(Process
, MemoryArea
);
1052 Status
= STATUS_SUCCESS
;
1053 goto unlock_deref_and_return
;
1057 MmAlterRegion(AddressSpace
,
1058 MemoryArea
->StartingAddress
,
1059 (MemoryArea
->Type
== MEMORY_AREA_SECTION_VIEW
) ?
1060 &MemoryArea
->Data
.SectionData
.RegionListHead
:
1061 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
1066 MmModifyAttributes
);
1067 goto unlock_deref_and_return
;
1070 Status
= STATUS_NOT_IMPLEMENTED
;
1072 unlock_deref_and_return
:
1074 MmUnlockAddressSpace(AddressSpace
);
1075 ObDereferenceObject(Process
);
1082 MmProtectAnonMem(PMMSUPPORT AddressSpace
,
1083 PMEMORY_AREA MemoryArea
,
1090 NTSTATUS Status
= STATUS_SUCCESS
;
1091 ULONG LengthCount
= 0;
1093 /* Search all Regions in MemoryArea up to Length */
1094 /* Every Region up to Length must be committed for success */
1097 Region
= MmFindRegion(MemoryArea
->StartingAddress
,
1098 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
1099 (PVOID
)((ULONG_PTR
)BaseAddress
+ (ULONG_PTR
)LengthCount
), NULL
);
1101 /* If a Region was found and it is committed */
1102 if ((Region
) && (Region
->Type
== MEM_COMMIT
))
1104 LengthCount
+= Region
->Length
;
1105 if (Length
<= LengthCount
) break;
1108 /* If Region was found and it is not commited */
1111 Status
= STATUS_NOT_COMMITTED
;
1114 /* If no Region was found at all */
1115 else if (LengthCount
== 0)
1117 Status
= STATUS_INVALID_ADDRESS
;
1122 if (NT_SUCCESS(Status
))
1124 *OldProtect
= Region
->Protect
;
1125 Status
= MmAlterRegion(AddressSpace
, MemoryArea
->StartingAddress
,
1126 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
1127 BaseAddress
, Length
, Region
->Type
, Protect
,
1128 MmModifyAttributes
);
1135 MmQueryAnonMem(PMEMORY_AREA MemoryArea
,
1137 PMEMORY_BASIC_INFORMATION Info
,
1138 PULONG ResultLength
)
1141 PVOID RegionBase
= NULL
;
1143 Info
->BaseAddress
= (PVOID
)PAGE_ROUND_DOWN(Address
);
1145 Region
= MmFindRegion(MemoryArea
->StartingAddress
,
1146 &MemoryArea
->Data
.VirtualMemoryData
.RegionListHead
,
1147 Address
, &RegionBase
);
1148 Info
->BaseAddress
= RegionBase
;
1149 Info
->AllocationBase
= MemoryArea
->StartingAddress
;
1150 Info
->AllocationProtect
= MemoryArea
->Protect
;
1151 Info
->RegionSize
= Region
->Length
;
1152 Info
->State
= Region
->Type
;
1153 Info
->Protect
= Region
->Protect
;
1154 Info
->Type
= MEM_PRIVATE
;
1156 *ResultLength
= sizeof(MEMORY_BASIC_INFORMATION
);
1157 return(STATUS_SUCCESS
);