Linux Audio

Check our new training course

Loading...
v3.5.6
 
  1/*******************************************************************************
  2 *
  3 * Module Name: utdelete - object deletion and reference count utilities
  4 *
  5 ******************************************************************************/
  6
  7/*
  8 * Copyright (C) 2000 - 2012, Intel Corp.
  9 * All rights reserved.
 10 *
 11 * Redistribution and use in source and binary forms, with or without
 12 * modification, are permitted provided that the following conditions
 13 * are met:
 14 * 1. Redistributions of source code must retain the above copyright
 15 *    notice, this list of conditions, and the following disclaimer,
 16 *    without modification.
 17 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
 18 *    substantially similar to the "NO WARRANTY" disclaimer below
 19 *    ("Disclaimer") and any redistribution must be conditioned upon
 20 *    including a substantially similar Disclaimer requirement for further
 21 *    binary redistribution.
 22 * 3. Neither the names of the above-listed copyright holders nor the names
 23 *    of any contributors may be used to endorse or promote products derived
 24 *    from this software without specific prior written permission.
 25 *
 26 * Alternatively, this software may be distributed under the terms of the
 27 * GNU General Public License ("GPL") version 2 as published by the Free
 28 * Software Foundation.
 29 *
 30 * NO WARRANTY
 31 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 32 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 33 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR
 34 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
 35 * HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 36 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 37 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 38 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
 39 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING
 40 * IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 41 * POSSIBILITY OF SUCH DAMAGES.
 42 */
 43
 44#include <acpi/acpi.h>
 45#include "accommon.h"
 46#include "acinterp.h"
 47#include "acnamesp.h"
 48#include "acevents.h"
 49
 50#define _COMPONENT          ACPI_UTILITIES
 51ACPI_MODULE_NAME("utdelete")
 52
 53/* Local prototypes */
 54static void acpi_ut_delete_internal_obj(union acpi_operand_object *object);
 55
 56static void
 57acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action);
 58
 59/*******************************************************************************
 60 *
 61 * FUNCTION:    acpi_ut_delete_internal_obj
 62 *
 63 * PARAMETERS:  Object         - Object to be deleted
 64 *
 65 * RETURN:      None
 66 *
 67 * DESCRIPTION: Low level object deletion, after reference counts have been
 68 *              updated (All reference counts, including sub-objects!)
 69 *
 70 ******************************************************************************/
 71
 72static void acpi_ut_delete_internal_obj(union acpi_operand_object *object)
 73{
 74	void *obj_pointer = NULL;
 75	union acpi_operand_object *handler_desc;
 76	union acpi_operand_object *second_desc;
 77	union acpi_operand_object *next_desc;
 
 78	union acpi_operand_object **last_obj_ptr;
 79
 80	ACPI_FUNCTION_TRACE_PTR(ut_delete_internal_obj, object);
 81
 82	if (!object) {
 83		return_VOID;
 84	}
 85
 86	/*
 87	 * Must delete or free any pointers within the object that are not
 88	 * actual ACPI objects (for example, a raw buffer pointer).
 89	 */
 90	switch (object->common.type) {
 91	case ACPI_TYPE_STRING:
 92
 93		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
 94				  "**** String %p, ptr %p\n", object,
 95				  object->string.pointer));
 96
 97		/* Free the actual string buffer */
 98
 99		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
100
101			/* But only if it is NOT a pointer into an ACPI table */
102
103			obj_pointer = object->string.pointer;
104		}
105		break;
106
107	case ACPI_TYPE_BUFFER:
108
109		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
110				  "**** Buffer %p, ptr %p\n", object,
111				  object->buffer.pointer));
112
113		/* Free the actual buffer */
114
115		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
116
117			/* But only if it is NOT a pointer into an ACPI table */
118
119			obj_pointer = object->buffer.pointer;
120		}
121		break;
122
123	case ACPI_TYPE_PACKAGE:
124
125		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
126				  " **** Package of count %X\n",
127				  object->package.count));
128
129		/*
130		 * Elements of the package are not handled here, they are deleted
131		 * separately
132		 */
133
134		/* Free the (variable length) element pointer array */
135
136		obj_pointer = object->package.elements;
137		break;
138
139		/*
140		 * These objects have a possible list of notify handlers.
141		 * Device object also may have a GPE block.
142		 */
143	case ACPI_TYPE_DEVICE:
144
145		if (object->device.gpe_block) {
146			(void)acpi_ev_delete_gpe_block(object->device.
147						       gpe_block);
148		}
149
150		/*lint -fallthrough */
151
152	case ACPI_TYPE_PROCESSOR:
153	case ACPI_TYPE_THERMAL:
154
155		/* Walk the notify handler list for this object */
156
157		handler_desc = object->common_notify.handler;
158		while (handler_desc) {
159			next_desc = handler_desc->address_space.next;
160			acpi_ut_remove_reference(handler_desc);
161			handler_desc = next_desc;
162		}
163		break;
164
165	case ACPI_TYPE_MUTEX:
166
167		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
168				  "***** Mutex %p, OS Mutex %p\n",
169				  object, object->mutex.os_mutex));
170
171		if (object == acpi_gbl_global_lock_mutex) {
172
173			/* Global Lock has extra semaphore */
174
175			(void)
176			    acpi_os_delete_semaphore
177			    (acpi_gbl_global_lock_semaphore);
178			acpi_gbl_global_lock_semaphore = NULL;
179
180			acpi_os_delete_mutex(object->mutex.os_mutex);
181			acpi_gbl_global_lock_mutex = NULL;
182		} else {
183			acpi_ex_unlink_mutex(object);
184			acpi_os_delete_mutex(object->mutex.os_mutex);
185		}
186		break;
187
188	case ACPI_TYPE_EVENT:
189
190		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
191				  "***** Event %p, OS Semaphore %p\n",
192				  object, object->event.os_semaphore));
193
194		(void)acpi_os_delete_semaphore(object->event.os_semaphore);
195		object->event.os_semaphore = NULL;
196		break;
197
198	case ACPI_TYPE_METHOD:
199
200		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
201				  "***** Method %p\n", object));
202
203		/* Delete the method mutex if it exists */
204
205		if (object->method.mutex) {
206			acpi_os_delete_mutex(object->method.mutex->mutex.
207					     os_mutex);
208			acpi_ut_delete_object_desc(object->method.mutex);
209			object->method.mutex = NULL;
210		}
 
 
 
 
211		break;
212
213	case ACPI_TYPE_REGION:
214
215		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
216				  "***** Region %p\n", object));
217
218		/*
219		 * Update address_range list. However, only permanent regions
220		 * are installed in this list. (Not created within a method)
221		 */
222		if (!(object->region.node->flags & ANOBJ_TEMPORARY)) {
223			acpi_ut_remove_address_range(object->region.space_id,
224						     object->region.node);
225		}
226
227		second_desc = acpi_ns_get_secondary_object(object);
228		if (second_desc) {
229			/*
230			 * Free the region_context if and only if the handler is one of the
231			 * default handlers -- and therefore, we created the context object
232			 * locally, it was not created by an external caller.
233			 */
234			handler_desc = object->region.handler;
235			if (handler_desc) {
236				next_desc =
237				    handler_desc->address_space.region_list;
 
238				last_obj_ptr =
239				    &handler_desc->address_space.region_list;
240
241				/* Remove the region object from the handler's list */
242
243				while (next_desc) {
244					if (next_desc == object) {
245						*last_obj_ptr =
246						    next_desc->region.next;
247						break;
248					}
249
250					/* Walk the linked list of handler */
251
252					last_obj_ptr = &next_desc->region.next;
253					next_desc = next_desc->region.next;
 
 
 
 
 
 
 
 
 
254				}
255
256				if (handler_desc->address_space.handler_flags &
257				    ACPI_ADDR_HANDLER_DEFAULT_INSTALLED) {
258
259					/* Deactivate region and free region context */
260
261					if (handler_desc->address_space.setup) {
262						(void)handler_desc->
263						    address_space.setup(object,
264									ACPI_REGION_DEACTIVATE,
265									handler_desc->
266									address_space.
267									context,
268									&second_desc->
269									extra.
270									region_context);
271					}
272				}
273
274				acpi_ut_remove_reference(handler_desc);
275			}
276
277			/* Now we can free the Extra object */
278
279			acpi_ut_delete_object_desc(second_desc);
280		}
 
 
 
 
281		break;
282
283	case ACPI_TYPE_BUFFER_FIELD:
284
285		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
286				  "***** Buffer Field %p\n", object));
287
288		second_desc = acpi_ns_get_secondary_object(object);
289		if (second_desc) {
290			acpi_ut_delete_object_desc(second_desc);
291		}
292		break;
293
294	case ACPI_TYPE_LOCAL_BANK_FIELD:
295
296		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
297				  "***** Bank Field %p\n", object));
298
299		second_desc = acpi_ns_get_secondary_object(object);
300		if (second_desc) {
301			acpi_ut_delete_object_desc(second_desc);
302		}
303		break;
304
 
 
 
 
 
 
 
 
305	default:
 
306		break;
307	}
308
309	/* Free any allocated memory (pointer within the object) found above */
310
311	if (obj_pointer) {
312		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
313				  "Deleting Object Subptr %p\n", obj_pointer));
314		ACPI_FREE(obj_pointer);
315	}
316
317	/* Now the object can be safely deleted */
318
319	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS, "Deleting Object %p [%s]\n",
320			  object, acpi_ut_get_object_type_name(object)));
 
 
321
322	acpi_ut_delete_object_desc(object);
323	return_VOID;
324}
325
326/*******************************************************************************
327 *
328 * FUNCTION:    acpi_ut_delete_internal_object_list
329 *
330 * PARAMETERS:  obj_list        - Pointer to the list to be deleted
331 *
332 * RETURN:      None
333 *
334 * DESCRIPTION: This function deletes an internal object list, including both
335 *              simple objects and package objects
336 *
337 ******************************************************************************/
338
339void acpi_ut_delete_internal_object_list(union acpi_operand_object **obj_list)
340{
341	union acpi_operand_object **internal_obj;
342
343	ACPI_FUNCTION_TRACE(ut_delete_internal_object_list);
344
345	/* Walk the null-terminated internal list */
346
347	for (internal_obj = obj_list; *internal_obj; internal_obj++) {
348		acpi_ut_remove_reference(*internal_obj);
349	}
350
351	/* Free the combined parameter pointer list and object array */
352
353	ACPI_FREE(obj_list);
354	return_VOID;
355}
356
357/*******************************************************************************
358 *
359 * FUNCTION:    acpi_ut_update_ref_count
360 *
361 * PARAMETERS:  Object          - Object whose ref count is to be updated
362 *              Action          - What to do
363 *
364 * RETURN:      New ref count
365 *
366 * DESCRIPTION: Modify the ref count and return it.
367 *
368 ******************************************************************************/
369
370static void
371acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action)
372{
373	u16 count;
374	u16 new_count;
 
 
375
376	ACPI_FUNCTION_NAME(ut_update_ref_count);
377
378	if (!object) {
379		return;
380	}
381
382	count = object->common.reference_count;
383	new_count = count;
384
385	/*
386	 * Perform the reference count action (increment, decrement, force delete)
 
387	 */
 
 
 
 
 
388	switch (action) {
389	case REF_INCREMENT:
390
391		new_count++;
392		object->common.reference_count = new_count;
 
 
 
 
 
 
 
 
 
393
394		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
395				  "Obj %p Refs=%X, [Incremented]\n",
396				  object, new_count));
 
 
 
397		break;
398
399	case REF_DECREMENT:
400
401		if (count < 1) {
402			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
403					  "Obj %p Refs=%X, can't decrement! (Set to 0)\n",
404					  object, new_count));
405
406			new_count = 0;
407		} else {
408			new_count--;
409
410			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
411					  "Obj %p Refs=%X, [Decremented]\n",
412					  object, new_count));
413		}
414
415		if (object->common.type == ACPI_TYPE_METHOD) {
416			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
417					  "Method Obj %p Refs=%X, [Decremented]\n",
418					  object, new_count));
419		}
420
421		object->common.reference_count = new_count;
422		if (new_count == 0) {
423			acpi_ut_delete_internal_obj(object);
 
 
424		}
425		break;
426
427	case REF_FORCE_DELETE:
 
 
 
428
429		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
430				  "Obj %p Refs=%X, Force delete! (Set to 0)\n",
431				  object, count));
432
433		new_count = 0;
434		object->common.reference_count = new_count;
435		acpi_ut_delete_internal_obj(object);
 
436		break;
437
438	default:
439
440		ACPI_ERROR((AE_INFO, "Unknown action (0x%X)", action));
441		break;
 
 
442	}
443
444	/*
445	 * Sanity check the reference count, for debug purposes only.
446	 * (A deleted object will have a huge reference count)
447	 */
448	if (count > ACPI_MAX_REFERENCE_COUNT) {
449		ACPI_WARNING((AE_INFO,
450			      "Large Reference Count (0x%X) in object %p",
451			      count, object));
452	}
453}
454
455/*******************************************************************************
456 *
457 * FUNCTION:    acpi_ut_update_object_reference
458 *
459 * PARAMETERS:  Object              - Increment ref count for this object
460 *                                    and all sub-objects
461 *              Action              - Either REF_INCREMENT or REF_DECREMENT or
462 *                                    REF_FORCE_DELETE
463 *
464 * RETURN:      Status
465 *
466 * DESCRIPTION: Increment the object reference count
467 *
468 * Object references are incremented when:
469 * 1) An object is attached to a Node (namespace object)
470 * 2) An object is copied (all subobjects must be incremented)
471 *
472 * Object references are decremented when:
473 * 1) An object is detached from an Node
474 *
475 ******************************************************************************/
476
477acpi_status
478acpi_ut_update_object_reference(union acpi_operand_object *object, u16 action)
479{
480	acpi_status status = AE_OK;
481	union acpi_generic_state *state_list = NULL;
482	union acpi_operand_object *next_object = NULL;
 
483	union acpi_generic_state *state;
484	u32 i;
485
486	ACPI_FUNCTION_TRACE_PTR(ut_update_object_reference, object);
487
488	while (object) {
489
490		/* Make sure that this isn't a namespace handle */
491
492		if (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED) {
493			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
494					  "Object %p is NS handle\n", object));
495			return_ACPI_STATUS(AE_OK);
496		}
497
498		/*
499		 * All sub-objects must have their reference count incremented also.
500		 * Different object types have different subobjects.
501		 */
502		switch (object->common.type) {
503		case ACPI_TYPE_DEVICE:
504		case ACPI_TYPE_PROCESSOR:
505		case ACPI_TYPE_POWER:
506		case ACPI_TYPE_THERMAL:
507
508			/* Update the notify objects for these types (if present) */
509
510			acpi_ut_update_ref_count(object->common_notify.
511						 system_notify, action);
512			acpi_ut_update_ref_count(object->common_notify.
513						 device_notify, action);
 
 
 
 
 
 
 
 
514			break;
515
516		case ACPI_TYPE_PACKAGE:
517			/*
518			 * We must update all the sub-objects of the package,
519			 * each of whom may have their own sub-objects.
520			 */
521			for (i = 0; i < object->package.count; i++) {
522				/*
523				 * Push each element onto the stack for later processing.
524				 * Note: There can be null elements within the package,
525				 * these are simply ignored
526				 */
527				status =
528				    acpi_ut_create_update_state_and_push
529				    (object->package.elements[i], action,
530				     &state_list);
531				if (ACPI_FAILURE(status)) {
532					goto error_exit;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
533				}
534			}
 
 
535			break;
536
537		case ACPI_TYPE_BUFFER_FIELD:
538
539			next_object = object->buffer_field.buffer_obj;
540			break;
541
542		case ACPI_TYPE_LOCAL_REGION_FIELD:
543
544			next_object = object->field.region_obj;
545			break;
546
547		case ACPI_TYPE_LOCAL_BANK_FIELD:
548
549			next_object = object->bank_field.bank_obj;
550			status =
551			    acpi_ut_create_update_state_and_push(object->
552								 bank_field.
553								 region_obj,
554								 action,
555								 &state_list);
556			if (ACPI_FAILURE(status)) {
557				goto error_exit;
558			}
559			break;
560
561		case ACPI_TYPE_LOCAL_INDEX_FIELD:
562
563			next_object = object->index_field.index_obj;
564			status =
565			    acpi_ut_create_update_state_and_push(object->
566								 index_field.
567								 data_obj,
568								 action,
569								 &state_list);
570			if (ACPI_FAILURE(status)) {
571				goto error_exit;
572			}
573			break;
574
575		case ACPI_TYPE_LOCAL_REFERENCE:
576			/*
577			 * The target of an Index (a package, string, or buffer) or a named
578			 * reference must track changes to the ref count of the index or
579			 * target object.
580			 */
581			if ((object->reference.class == ACPI_REFCLASS_INDEX) ||
582			    (object->reference.class == ACPI_REFCLASS_NAME)) {
583				next_object = object->reference.object;
584			}
585			break;
586
 
587		case ACPI_TYPE_REGION:
588		default:
 
589			break;	/* No subobjects for all other types */
590		}
591
592		/*
593		 * Now we can update the count in the main object. This can only
594		 * happen after we update the sub-objects in case this causes the
595		 * main object to be deleted.
596		 */
597		acpi_ut_update_ref_count(object, action);
598		object = NULL;
599
600		/* Move on to the next object to be updated */
601
602		if (next_object) {
603			object = next_object;
604			next_object = NULL;
605		} else if (state_list) {
606			state = acpi_ut_pop_generic_state(&state_list);
607			object = state->update.object;
608			acpi_ut_delete_generic_state(state);
609		}
610	}
611
612	return_ACPI_STATUS(AE_OK);
613
614      error_exit:
615
616	ACPI_EXCEPTION((AE_INFO, status,
617			"Could not update object reference count"));
618
619	/* Free any stacked Update State objects */
620
621	while (state_list) {
622		state = acpi_ut_pop_generic_state(&state_list);
623		acpi_ut_delete_generic_state(state);
624	}
625
626	return_ACPI_STATUS(status);
627}
628
629/*******************************************************************************
630 *
631 * FUNCTION:    acpi_ut_add_reference
632 *
633 * PARAMETERS:  Object          - Object whose reference count is to be
634 *                                incremented
635 *
636 * RETURN:      None
637 *
638 * DESCRIPTION: Add one reference to an ACPI object
639 *
640 ******************************************************************************/
641
642void acpi_ut_add_reference(union acpi_operand_object *object)
643{
644
645	ACPI_FUNCTION_TRACE_PTR(ut_add_reference, object);
646
647	/* Ensure that we have a valid object */
648
649	if (!acpi_ut_valid_internal_object(object)) {
650		return_VOID;
651	}
652
653	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
654			  "Obj %p Current Refs=%X [To Be Incremented]\n",
655			  object, object->common.reference_count));
656
657	/* Increment the reference count */
658
659	(void)acpi_ut_update_object_reference(object, REF_INCREMENT);
660	return_VOID;
661}
662
663/*******************************************************************************
664 *
665 * FUNCTION:    acpi_ut_remove_reference
666 *
667 * PARAMETERS:  Object         - Object whose ref count will be decremented
668 *
669 * RETURN:      None
670 *
671 * DESCRIPTION: Decrement the reference count of an ACPI internal object
672 *
673 ******************************************************************************/
674
675void acpi_ut_remove_reference(union acpi_operand_object *object)
676{
677
678	ACPI_FUNCTION_TRACE_PTR(ut_remove_reference, object);
679
680	/*
681	 * Allow a NULL pointer to be passed in, just ignore it. This saves
682	 * each caller from having to check. Also, ignore NS nodes.
683	 *
684	 */
685	if (!object ||
686	    (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED)) {
687		return_VOID;
688	}
689
690	/* Ensure that we have a valid object */
691
692	if (!acpi_ut_valid_internal_object(object)) {
693		return_VOID;
694	}
695
696	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
697			  "Obj %p Current Refs=%X [To Be Decremented]\n",
698			  object, object->common.reference_count));
 
699
700	/*
701	 * Decrement the reference count, and only actually delete the object
702	 * if the reference count becomes 0. (Must also decrement the ref count
703	 * of all subobjects!)
704	 */
705	(void)acpi_ut_update_object_reference(object, REF_DECREMENT);
706	return_VOID;
707}
v6.9.4
  1// SPDX-License-Identifier: BSD-3-Clause OR GPL-2.0
  2/*******************************************************************************
  3 *
  4 * Module Name: utdelete - object deletion and reference count utilities
  5 *
  6 ******************************************************************************/
  7
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
  8#include <acpi/acpi.h>
  9#include "accommon.h"
 10#include "acinterp.h"
 11#include "acnamesp.h"
 12#include "acevents.h"
 13
 14#define _COMPONENT          ACPI_UTILITIES
 15ACPI_MODULE_NAME("utdelete")
 16
 17/* Local prototypes */
 18static void acpi_ut_delete_internal_obj(union acpi_operand_object *object);
 19
 20static void
 21acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action);
 22
 23/*******************************************************************************
 24 *
 25 * FUNCTION:    acpi_ut_delete_internal_obj
 26 *
 27 * PARAMETERS:  object         - Object to be deleted
 28 *
 29 * RETURN:      None
 30 *
 31 * DESCRIPTION: Low level object deletion, after reference counts have been
 32 *              updated (All reference counts, including sub-objects!)
 33 *
 34 ******************************************************************************/
 35
 36static void acpi_ut_delete_internal_obj(union acpi_operand_object *object)
 37{
 38	void *obj_pointer = NULL;
 39	union acpi_operand_object *handler_desc;
 40	union acpi_operand_object *second_desc;
 41	union acpi_operand_object *next_desc;
 42	union acpi_operand_object *start_desc;
 43	union acpi_operand_object **last_obj_ptr;
 44
 45	ACPI_FUNCTION_TRACE_PTR(ut_delete_internal_obj, object);
 46
 47	if (!object) {
 48		return_VOID;
 49	}
 50
 51	/*
 52	 * Must delete or free any pointers within the object that are not
 53	 * actual ACPI objects (for example, a raw buffer pointer).
 54	 */
 55	switch (object->common.type) {
 56	case ACPI_TYPE_STRING:
 57
 58		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
 59				  "**** String %p, ptr %p\n", object,
 60				  object->string.pointer));
 61
 62		/* Free the actual string buffer */
 63
 64		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
 65
 66			/* But only if it is NOT a pointer into an ACPI table */
 67
 68			obj_pointer = object->string.pointer;
 69		}
 70		break;
 71
 72	case ACPI_TYPE_BUFFER:
 73
 74		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
 75				  "**** Buffer %p, ptr %p\n", object,
 76				  object->buffer.pointer));
 77
 78		/* Free the actual buffer */
 79
 80		if (!(object->common.flags & AOPOBJ_STATIC_POINTER)) {
 81
 82			/* But only if it is NOT a pointer into an ACPI table */
 83
 84			obj_pointer = object->buffer.pointer;
 85		}
 86		break;
 87
 88	case ACPI_TYPE_PACKAGE:
 89
 90		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
 91				  " **** Package of count %X\n",
 92				  object->package.count));
 93
 94		/*
 95		 * Elements of the package are not handled here, they are deleted
 96		 * separately
 97		 */
 98
 99		/* Free the (variable length) element pointer array */
100
101		obj_pointer = object->package.elements;
102		break;
103
104		/*
105		 * These objects have a possible list of notify handlers.
106		 * Device object also may have a GPE block.
107		 */
108	case ACPI_TYPE_DEVICE:
109
110		if (object->device.gpe_block) {
111			(void)acpi_ev_delete_gpe_block(object->device.
112						       gpe_block);
113		}
114
115		ACPI_FALLTHROUGH;
116
117	case ACPI_TYPE_PROCESSOR:
118	case ACPI_TYPE_THERMAL:
119
120		/* Walk the address handler list for this object */
121
122		handler_desc = object->common_notify.handler;
123		while (handler_desc) {
124			next_desc = handler_desc->address_space.next;
125			acpi_ut_remove_reference(handler_desc);
126			handler_desc = next_desc;
127		}
128		break;
129
130	case ACPI_TYPE_MUTEX:
131
132		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
133				  "***** Mutex %p, OS Mutex %p\n",
134				  object, object->mutex.os_mutex));
135
136		if (object == acpi_gbl_global_lock_mutex) {
137
138			/* Global Lock has extra semaphore */
139
140			(void)
141			    acpi_os_delete_semaphore
142			    (acpi_gbl_global_lock_semaphore);
143			acpi_gbl_global_lock_semaphore = NULL;
144
145			acpi_os_delete_mutex(object->mutex.os_mutex);
146			acpi_gbl_global_lock_mutex = NULL;
147		} else {
148			acpi_ex_unlink_mutex(object);
149			acpi_os_delete_mutex(object->mutex.os_mutex);
150		}
151		break;
152
153	case ACPI_TYPE_EVENT:
154
155		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
156				  "***** Event %p, OS Semaphore %p\n",
157				  object, object->event.os_semaphore));
158
159		(void)acpi_os_delete_semaphore(object->event.os_semaphore);
160		object->event.os_semaphore = NULL;
161		break;
162
163	case ACPI_TYPE_METHOD:
164
165		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
166				  "***** Method %p\n", object));
167
168		/* Delete the method mutex if it exists */
169
170		if (object->method.mutex) {
171			acpi_os_delete_mutex(object->method.mutex->mutex.
172					     os_mutex);
173			acpi_ut_delete_object_desc(object->method.mutex);
174			object->method.mutex = NULL;
175		}
176
177		if (object->method.node) {
178			object->method.node = NULL;
179		}
180		break;
181
182	case ACPI_TYPE_REGION:
183
184		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
185				  "***** Region %p\n", object));
186
187		/*
188		 * Update address_range list. However, only permanent regions
189		 * are installed in this list. (Not created within a method)
190		 */
191		if (!(object->region.node->flags & ANOBJ_TEMPORARY)) {
192			acpi_ut_remove_address_range(object->region.space_id,
193						     object->region.node);
194		}
195
196		second_desc = acpi_ns_get_secondary_object(object);
197		if (second_desc) {
198			/*
199			 * Free the region_context if and only if the handler is one of the
200			 * default handlers -- and therefore, we created the context object
201			 * locally, it was not created by an external caller.
202			 */
203			handler_desc = object->region.handler;
204			if (handler_desc) {
205				next_desc =
206				    handler_desc->address_space.region_list;
207				start_desc = next_desc;
208				last_obj_ptr =
209				    &handler_desc->address_space.region_list;
210
211				/* Remove the region object from the handler list */
212
213				while (next_desc) {
214					if (next_desc == object) {
215						*last_obj_ptr =
216						    next_desc->region.next;
217						break;
218					}
219
220					/* Walk the linked list of handlers */
221
222					last_obj_ptr = &next_desc->region.next;
223					next_desc = next_desc->region.next;
224
225					/* Prevent infinite loop if list is corrupted */
226
227					if (next_desc == start_desc) {
228						ACPI_ERROR((AE_INFO,
229							    "Circular region list in address handler object %p",
230							    handler_desc));
231						return_VOID;
232					}
233				}
234
235				if (handler_desc->address_space.handler_flags &
236				    ACPI_ADDR_HANDLER_DEFAULT_INSTALLED) {
237
238					/* Deactivate region and free region context */
239
240					if (handler_desc->address_space.setup) {
241						(void)handler_desc->
242						    address_space.setup(object,
243									ACPI_REGION_DEACTIVATE,
244									handler_desc->
245									address_space.
246									context,
247									&second_desc->
248									extra.
249									region_context);
250					}
251				}
252
253				acpi_ut_remove_reference(handler_desc);
254			}
255
256			/* Now we can free the Extra object */
257
258			acpi_ut_delete_object_desc(second_desc);
259		}
260		if (object->field.internal_pcc_buffer) {
261			ACPI_FREE(object->field.internal_pcc_buffer);
262		}
263
264		break;
265
266	case ACPI_TYPE_BUFFER_FIELD:
267
268		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
269				  "***** Buffer Field %p\n", object));
270
271		second_desc = acpi_ns_get_secondary_object(object);
272		if (second_desc) {
273			acpi_ut_delete_object_desc(second_desc);
274		}
275		break;
276
277	case ACPI_TYPE_LOCAL_BANK_FIELD:
278
279		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
280				  "***** Bank Field %p\n", object));
281
282		second_desc = acpi_ns_get_secondary_object(object);
283		if (second_desc) {
284			acpi_ut_delete_object_desc(second_desc);
285		}
286		break;
287
288	case ACPI_TYPE_LOCAL_ADDRESS_HANDLER:
289
290		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
291				  "***** Address handler %p\n", object));
292
293		acpi_os_delete_mutex(object->address_space.context_mutex);
294		break;
295
296	default:
297
298		break;
299	}
300
301	/* Free any allocated memory (pointer within the object) found above */
302
303	if (obj_pointer) {
304		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
305				  "Deleting Object Subptr %p\n", obj_pointer));
306		ACPI_FREE(obj_pointer);
307	}
308
309	/* Now the object can be safely deleted */
310
311	ACPI_DEBUG_PRINT_RAW((ACPI_DB_ALLOCATIONS,
312			      "%s: Deleting Object %p [%s]\n",
313			      ACPI_GET_FUNCTION_NAME, object,
314			      acpi_ut_get_object_type_name(object)));
315
316	acpi_ut_delete_object_desc(object);
317	return_VOID;
318}
319
320/*******************************************************************************
321 *
322 * FUNCTION:    acpi_ut_delete_internal_object_list
323 *
324 * PARAMETERS:  obj_list        - Pointer to the list to be deleted
325 *
326 * RETURN:      None
327 *
328 * DESCRIPTION: This function deletes an internal object list, including both
329 *              simple objects and package objects
330 *
331 ******************************************************************************/
332
333void acpi_ut_delete_internal_object_list(union acpi_operand_object **obj_list)
334{
335	union acpi_operand_object **internal_obj;
336
337	ACPI_FUNCTION_ENTRY();
338
339	/* Walk the null-terminated internal list */
340
341	for (internal_obj = obj_list; *internal_obj; internal_obj++) {
342		acpi_ut_remove_reference(*internal_obj);
343	}
344
345	/* Free the combined parameter pointer list and object array */
346
347	ACPI_FREE(obj_list);
348	return;
349}
350
351/*******************************************************************************
352 *
353 * FUNCTION:    acpi_ut_update_ref_count
354 *
355 * PARAMETERS:  object          - Object whose ref count is to be updated
356 *              action          - What to do (REF_INCREMENT or REF_DECREMENT)
357 *
358 * RETURN:      None. Sets new reference count within the object
359 *
360 * DESCRIPTION: Modify the reference count for an internal acpi object
361 *
362 ******************************************************************************/
363
364static void
365acpi_ut_update_ref_count(union acpi_operand_object *object, u32 action)
366{
367	u16 original_count;
368	u16 new_count = 0;
369	acpi_cpu_flags lock_flags;
370	char *message;
371
372	ACPI_FUNCTION_NAME(ut_update_ref_count);
373
374	if (!object) {
375		return;
376	}
377
 
 
 
378	/*
379	 * Always get the reference count lock. Note: Interpreter and/or
380	 * Namespace is not always locked when this function is called.
381	 */
382	lock_flags = acpi_os_acquire_lock(acpi_gbl_reference_count_lock);
383	original_count = object->common.reference_count;
384
385	/* Perform the reference count action (increment, decrement) */
386
387	switch (action) {
388	case REF_INCREMENT:
389
390		new_count = original_count + 1;
391		object->common.reference_count = new_count;
392		acpi_os_release_lock(acpi_gbl_reference_count_lock, lock_flags);
393
394		/* The current reference count should never be zero here */
395
396		if (!original_count) {
397			ACPI_WARNING((AE_INFO,
398				      "Obj %p, Reference Count was zero before increment\n",
399				      object));
400		}
401
402		ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
403				  "Obj %p Type %.2X [%s] Refs %.2X [Incremented]\n",
404				  object, object->common.type,
405				  acpi_ut_get_object_type_name(object),
406				  new_count));
407		message = "Incremement";
408		break;
409
410	case REF_DECREMENT:
411
412		/* The current reference count must be non-zero */
 
 
 
 
 
 
 
413
414		if (original_count) {
415			new_count = original_count - 1;
416			object->common.reference_count = new_count;
417		}
418
419		acpi_os_release_lock(acpi_gbl_reference_count_lock, lock_flags);
 
 
 
 
420
421		if (!original_count) {
422			ACPI_WARNING((AE_INFO,
423				      "Obj %p, Reference Count is already zero, cannot decrement\n",
424				      object));
425			return;
426		}
 
427
428		ACPI_DEBUG_PRINT_RAW((ACPI_DB_ALLOCATIONS,
429				      "%s: Obj %p Type %.2X Refs %.2X [Decremented]\n",
430				      ACPI_GET_FUNCTION_NAME, object,
431				      object->common.type, new_count));
432
433		/* Actually delete the object on a reference count of zero */
 
 
434
435		if (new_count == 0) {
436			acpi_ut_delete_internal_obj(object);
437		}
438		message = "Decrement";
439		break;
440
441	default:
442
443		acpi_os_release_lock(acpi_gbl_reference_count_lock, lock_flags);
444		ACPI_ERROR((AE_INFO, "Unknown Reference Count action (0x%X)",
445			    action));
446		return;
447	}
448
449	/*
450	 * Sanity check the reference count, for debug purposes only.
451	 * (A deleted object will have a huge reference count)
452	 */
453	if (new_count > ACPI_MAX_REFERENCE_COUNT) {
454		ACPI_WARNING((AE_INFO,
455			      "Large Reference Count (0x%X) in object %p, Type=0x%.2X Operation=%s",
456			      new_count, object, object->common.type, message));
457	}
458}
459
460/*******************************************************************************
461 *
462 * FUNCTION:    acpi_ut_update_object_reference
463 *
464 * PARAMETERS:  object              - Increment or decrement the ref count for
465 *                                    this object and all sub-objects
466 *              action              - Either REF_INCREMENT or REF_DECREMENT
 
467 *
468 * RETURN:      Status
469 *
470 * DESCRIPTION: Increment or decrement the object reference count
471 *
472 * Object references are incremented when:
473 * 1) An object is attached to a Node (namespace object)
474 * 2) An object is copied (all subobjects must be incremented)
475 *
476 * Object references are decremented when:
477 * 1) An object is detached from an Node
478 *
479 ******************************************************************************/
480
481acpi_status
482acpi_ut_update_object_reference(union acpi_operand_object *object, u16 action)
483{
484	acpi_status status = AE_OK;
485	union acpi_generic_state *state_list = NULL;
486	union acpi_operand_object *next_object = NULL;
487	union acpi_operand_object *prev_object;
488	union acpi_generic_state *state;
489	u32 i;
490
491	ACPI_FUNCTION_NAME(ut_update_object_reference);
492
493	while (object) {
494
495		/* Make sure that this isn't a namespace handle */
496
497		if (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED) {
498			ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
499					  "Object %p is NS handle\n", object));
500			return (AE_OK);
501		}
502
503		/*
504		 * All sub-objects must have their reference count updated
505		 * also. Different object types have different subobjects.
506		 */
507		switch (object->common.type) {
508		case ACPI_TYPE_DEVICE:
509		case ACPI_TYPE_PROCESSOR:
510		case ACPI_TYPE_POWER:
511		case ACPI_TYPE_THERMAL:
512			/*
513			 * Update the notify objects for these types (if present)
514			 * Two lists, system and device notify handlers.
515			 */
516			for (i = 0; i < ACPI_NUM_NOTIFY_TYPES; i++) {
517				prev_object =
518				    object->common_notify.notify_list[i];
519				while (prev_object) {
520					next_object =
521					    prev_object->notify.next[i];
522					acpi_ut_update_ref_count(prev_object,
523								 action);
524					prev_object = next_object;
525				}
526			}
527			break;
528
529		case ACPI_TYPE_PACKAGE:
530			/*
531			 * We must update all the sub-objects of the package,
532			 * each of whom may have their own sub-objects.
533			 */
534			for (i = 0; i < object->package.count; i++) {
535				/*
536				 * Null package elements are legal and can be simply
537				 * ignored.
 
538				 */
539				next_object = object->package.elements[i];
540				if (!next_object) {
541					continue;
542				}
543
544				switch (next_object->common.type) {
545				case ACPI_TYPE_INTEGER:
546				case ACPI_TYPE_STRING:
547				case ACPI_TYPE_BUFFER:
548					/*
549					 * For these very simple sub-objects, we can just
550					 * update the reference count here and continue.
551					 * Greatly increases performance of this operation.
552					 */
553					acpi_ut_update_ref_count(next_object,
554								 action);
555					break;
556
557				default:
558					/*
559					 * For complex sub-objects, push them onto the stack
560					 * for later processing (this eliminates recursion.)
561					 */
562					status =
563					    acpi_ut_create_update_state_and_push
564					    (next_object, action, &state_list);
565					if (ACPI_FAILURE(status)) {
566						goto error_exit;
567					}
568					break;
569				}
570			}
571
572			next_object = NULL;
573			break;
574
575		case ACPI_TYPE_BUFFER_FIELD:
576
577			next_object = object->buffer_field.buffer_obj;
578			break;
579
 
 
 
 
 
580		case ACPI_TYPE_LOCAL_BANK_FIELD:
581
582			next_object = object->bank_field.bank_obj;
583			status =
584			    acpi_ut_create_update_state_and_push(object->
585								 bank_field.
586								 region_obj,
587								 action,
588								 &state_list);
589			if (ACPI_FAILURE(status)) {
590				goto error_exit;
591			}
592			break;
593
594		case ACPI_TYPE_LOCAL_INDEX_FIELD:
595
596			next_object = object->index_field.index_obj;
597			status =
598			    acpi_ut_create_update_state_and_push(object->
599								 index_field.
600								 data_obj,
601								 action,
602								 &state_list);
603			if (ACPI_FAILURE(status)) {
604				goto error_exit;
605			}
606			break;
607
608		case ACPI_TYPE_LOCAL_REFERENCE:
609			/*
610			 * The target of an Index (a package, string, or buffer) or a named
611			 * reference must track changes to the ref count of the index or
612			 * target object.
613			 */
614			if ((object->reference.class == ACPI_REFCLASS_INDEX) ||
615			    (object->reference.class == ACPI_REFCLASS_NAME)) {
616				next_object = object->reference.object;
617			}
618			break;
619
620		case ACPI_TYPE_LOCAL_REGION_FIELD:
621		case ACPI_TYPE_REGION:
622		default:
623
624			break;	/* No subobjects for all other types */
625		}
626
627		/*
628		 * Now we can update the count in the main object. This can only
629		 * happen after we update the sub-objects in case this causes the
630		 * main object to be deleted.
631		 */
632		acpi_ut_update_ref_count(object, action);
633		object = NULL;
634
635		/* Move on to the next object to be updated */
636
637		if (next_object) {
638			object = next_object;
639			next_object = NULL;
640		} else if (state_list) {
641			state = acpi_ut_pop_generic_state(&state_list);
642			object = state->update.object;
643			acpi_ut_delete_generic_state(state);
644		}
645	}
646
647	return (AE_OK);
648
649error_exit:
650
651	ACPI_EXCEPTION((AE_INFO, status,
652			"Could not update object reference count"));
653
654	/* Free any stacked Update State objects */
655
656	while (state_list) {
657		state = acpi_ut_pop_generic_state(&state_list);
658		acpi_ut_delete_generic_state(state);
659	}
660
661	return (status);
662}
663
664/*******************************************************************************
665 *
666 * FUNCTION:    acpi_ut_add_reference
667 *
668 * PARAMETERS:  object          - Object whose reference count is to be
669 *                                incremented
670 *
671 * RETURN:      None
672 *
673 * DESCRIPTION: Add one reference to an ACPI object
674 *
675 ******************************************************************************/
676
677void acpi_ut_add_reference(union acpi_operand_object *object)
678{
679
680	ACPI_FUNCTION_NAME(ut_add_reference);
681
682	/* Ensure that we have a valid object */
683
684	if (!acpi_ut_valid_internal_object(object)) {
685		return;
686	}
687
688	ACPI_DEBUG_PRINT((ACPI_DB_ALLOCATIONS,
689			  "Obj %p Current Refs=%X [To Be Incremented]\n",
690			  object, object->common.reference_count));
691
692	/* Increment the reference count */
693
694	(void)acpi_ut_update_object_reference(object, REF_INCREMENT);
695	return;
696}
697
698/*******************************************************************************
699 *
700 * FUNCTION:    acpi_ut_remove_reference
701 *
702 * PARAMETERS:  object         - Object whose ref count will be decremented
703 *
704 * RETURN:      None
705 *
706 * DESCRIPTION: Decrement the reference count of an ACPI internal object
707 *
708 ******************************************************************************/
709
710void acpi_ut_remove_reference(union acpi_operand_object *object)
711{
712
713	ACPI_FUNCTION_NAME(ut_remove_reference);
714
715	/*
716	 * Allow a NULL pointer to be passed in, just ignore it. This saves
717	 * each caller from having to check. Also, ignore NS nodes.
 
718	 */
719	if (!object ||
720	    (ACPI_GET_DESCRIPTOR_TYPE(object) == ACPI_DESC_TYPE_NAMED)) {
721		return;
722	}
723
724	/* Ensure that we have a valid object */
725
726	if (!acpi_ut_valid_internal_object(object)) {
727		return;
728	}
729
730	ACPI_DEBUG_PRINT_RAW((ACPI_DB_ALLOCATIONS,
731			      "%s: Obj %p Current Refs=%X [To Be Decremented]\n",
732			      ACPI_GET_FUNCTION_NAME, object,
733			      object->common.reference_count));
734
735	/*
736	 * Decrement the reference count, and only actually delete the object
737	 * if the reference count becomes 0. (Must also decrement the ref count
738	 * of all subobjects!)
739	 */
740	(void)acpi_ut_update_object_reference(object, REF_DECREMENT);
741	return;
742}