Initial implementation of IRT for non-SFI mode.

components/nacl/loader/nonsfi/irt/irt_basic.cc

+// Copyright 2014 The Chromium Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style license that can be
+// found in the LICENSE file.
+
+#include <errno.h>
+#include <sched.h>
+#include <stdlib.h>
+#include <sys/time.h>
+#include <time.h>
+#include <unistd.h>
+
+#include "components/nacl/loader/nonsfi/irt/irt_interfaces.h"
+#include "native_client/src/trusted/service_runtime/include/sys/time.h"
+
+namespace nacl {
+namespace nonsfi {
+namespace {
+
+void IrtExit(int status) {
+  // Note: when we start to support threads, here we need to join them.

[Mark Seaborn, 2014/01/07 09:45:06]

That's not the case.  There's no need to join threads, and you can't join
threads that don't terminate anyway.

[hidehiko, 2014/01/07 11:52:29]

Oops, I misunderstood. Done.

+  ::exit(status);

[Mark Seaborn, 2014/01/07 09:45:06]

This should really call _exit(), because exit() does some finalisation that can
break running threads.

[hidehiko, 2014/01/07 11:52:29]

Done.

+  while (1) *(volatile int *) 0 = 0;  // Crash.

[Mark Seaborn, 2014/01/07 09:45:06]

Not really necessary, since _exit() is generally declared as "noreturn", so this
will get optimised away by the compiler anyway.

[hidehiko, 2014/01/07 11:52:29]

Ok, removed. This is extracted from native_client/src/untrusted/irt/irt_basic.c.

+}
+
+int IrtGetToD(struct nacl_abi_timeval* tv) {
+  struct timeval host_tv;
+  int result = ::gettimeofday(&host_tv, NULL);
+  if (result)
+    return errno;
+  tv->nacl_abi_tv_sec = host_tv.tv_sec;
+  tv->nacl_abi_tv_usec = host_tv.tv_usec;
+  return 0;
+}
+
+int IrtClock(nacl_abi_clock_t* ticks) {
+  *ticks = ::clock();  // No failure.

[Mark Seaborn, 2014/01/07 09:45:06]

The man page says this can return (clock_t)-1 on failure...

[hidehiko, 2014/01/07 11:52:29]

Good catch. I just mimic'ed
native_client/src/trusted/service_runtime/posix/nacl_syscall_impl.c and
native_client/src/untrusted/irt/irt_basic.c&l=21 ...
There seem no errno change spec for clock(). So I use EOVERFLOW for the error
code, according to man's comment. WDYT?

[Mark Seaborn, 2014/01/10 05:12:20]

Oh, you're right. 
http://pubs.opengroup.org/onlinepubs/007904975/functions/clock.html doesn't
specify that errno should be set on error, and neither does "man 3 clock" on
Linux.  So the original code is OK -- sorry for nit-picking.

[hidehiko, 2014/01/10 07:27:47]

Done.

+  return 0;
+}
+
+int IrtNanoSleep(const struct nacl_abi_timespec* req,
+                 struct nacl_abi_timespec* rem) {
+  // We should be able to call nanosleep(NULL, &host_rem) for this.

[Mark Seaborn, 2014/01/07 09:45:06]

Why do you expect req==NULL to work?  This isn't part of the NaCl IRT interface,
so I don't think you should check for this.

[hamaji, 2014/01/07 11:32:09]

Let me reply as I wrote this.

I think both linux and nacl service runtime don't crash for req==NULL. I think
NaClSysNanosleep returns -NACL_ABI_EFAULT for NULL req. If you think this
compatibility for error case is not important, I'm fine with removing this. We
will workaround this issue in our side.

[hidehiko, 2014/01/07 11:52:29]

Thank you for your comment, Shinichiro.
So, according to man of nanosleep, it returns EFAULT when "Problem with copying
information from user space", and IMHO, req==NULL is such a case.
I removed comments, because it seems not directly related to nacl, but kept the
code as is.
I'm also fine to remove it, as Shinichiro said above. WDYT, Mark?

[Mark Seaborn, 2014/01/10 05:12:20]

Out of curiosity, what's the case you need the workaround for?  Is there some
code that passes NULL here?
If we checked for a NULL pointer here, we'd have to check for NULL pointers in
every IRT call, but that would just be working around broken programs. 
service_runtime happens to check for NULL, but that's rather unfortunate.

I filed a related bug about this ages ago:
https://code.google.com/p/nativeclient/issues/detail?id=1046

Linux returns EFAULT on any error copying to/from user space and doesn't check
for NULL specifically, but handling all copying errors is not very practical for
NaCl.

So yes, please do remove the NULL check. :-)

[hidehiko, 2014/01/10 07:27:47]

It turned out that it was just our test code. We'll fix our side separately.
Ok, done.

+  // However, the user mode qemu-arm does not handle this case
+  // properly. It just runs nanosleep with the parameter for the
+  // previous nanosleep call. To work-around this issue, we handle
+  // this case by ourselves.
+  if (!req)
+    return EFAULT;
+
+  struct timespec host_req;
+  host_req.tv_sec = req->tv_sec;
+  host_req.tv_nsec = req->tv_nsec;
+  struct timespec host_rem;
+  int result = ::nanosleep(&host_req, &host_rem);
+  if (result)
+    return errno;
+
+  if (rem) {
+    rem->tv_sec = host_rem.tv_sec;
+    rem->tv_nsec = host_rem.tv_nsec;
+  }
+  return 0;
+}
+
+int IrtSchedYield() {
+  int result = ::sched_yield();
+  if (result)
+    return errno;
+
+  return 0;
+}
+
+int IrtSysconf(int name, int* value) {
+  errno = 0;
+  *value = ::sysconf(name);

[Mark Seaborn, 2014/01/07 09:45:06]

Calling through to sysconf() isn't valid because the NaCl interface has a
different set of supported values.  This should handle NACL_ABI__SC_PAGESIZE and
NACL_ABI__SC_NPROCESSORS_ONLN.

[hidehiko, 2014/01/07 11:52:29]

Great to know. Done.

+  if (*value == -1 && errno == EINVAL)
+    return EINVAL;
+  return 0;
+}
+
+}  // namespace
+
+// For gettod, clock and nanosleep, their argument types should be nacl_abi_X,
+// rather than host type, such as timeval or clock_t etc. However, the
+// definition of nacl_irt_basic uses host types, so here we need to cast them.
+const nacl_irt_basic kIrtBasic = {
+  IrtExit,
+  reinterpret_cast<int(*)(struct timeval*)>(IrtGetToD),
+  reinterpret_cast<int(*)(clock_t*)>(IrtClock),
+  reinterpret_cast<int(*)(const struct timespec*, struct timespec*)>(
+      IrtNanoSleep),
+  IrtSchedYield,
+  IrtSysconf,
+};
+
+}  // namespace nonsfi
+}  // namespace nacl