- Wine-Devel - list.winehq.org

Re: Add documentation on the address space layout in Wine
by Pouech Eric DMI AEI CAEN May 28, 2004

May 28, 2004

Hi Mike I've started to revisit the architecture.sgml file, and started to write also about this matters (and a few others). For coherency reasons, if you don't mind, I'll reintegrate your bits in the architecture.sgml file (what you wrote covers also process image loading...). A+ > Message du 28/05/04 01:35 > De : "Mike Hearn" > A : wine-patches(a)winehq.com > Copie à : > Objet : Add documentation on the address space layout in Wine > Mike Hearn > Add documentation on the address space layout in Wine > > Generated from: > * mike(a)navi.cx--2004/wine--mainline--0.9--patch-25 > > --- /dev/null 2003-09-15 14:40:47.000000000 +0100 > +++ documentation/address-space.sgml 2004-05-28 00:26:06.000000000 +0100 > @@ -0,0 +1,175 @@ > + > + > + > + > + Every Win32 process in Wine has its own dedicated native process on the host system, and > + therefore its own address space. This section explores the layout of the Windows address space > + and how it is emulated. > + > + > + > + Firstly, a quick recap of how virtual memory works. Physical memory in RAM chips is split > + into frames, and the memory that each process sees is split > + into pages. Each process has its own 4 gigabytes of address space (4gig > + being the maximum space addressable with a 32 bit pointer). Pages can be mapped or unmapped: > + attempts to access an unmapped page cause an EXCEPTION_ACCESS_VIOLATION which has the > + easily recognizable code of 0xC0000005. Any page can be mapped to any frame, therefore you can > + have multiple addresses which actually "contain" the same memory. Pages can also be mapped to > + things like files or swap space, in which case accessing that page will cause a disk access to > + read the contents into a free frame. > + > + > + > + > + > + > + When a Win32 process starts, it does not have a clear address space to use as it pleases. Many pages > + are already mapped by the operating system. In particular, the EXE file itself and any DLLs it > + needs are mapped into memory, and space has been reserved for the stack and a couple of heaps > + (zones used to allocate memory to the app from). Some of these things need to be at a fixed > + address, and others can be placed anywhere. > + > + > + > + The EXE file itself is almost always mapped at address 0x400000 and up: indeed, most EXEs have > + their relocation records stripped which means they must be loaded at their base address and > + cannot be loaded at any other address. > + > + > + > + DLLs are internally much the same as EXE files but they have relocation records, which means > + that they can be mapped at any address in the address space. Remember we are not dealing with > + physical memory here, but rather virtual memory which is different for each > + process. Therefore OLEAUT32.DLL may be loaded at one address in one process, and a totally > + different one in another. Ensuring all the functions loaded into memory can find each other > + is the job of the Windows dynamic linker, which is a part of NTDLL. > + > + > + > + So, we have the EXE and its DLLs mapped into memory. Two other very important regions also > + exist: the stack and the process heap. The process heap is simply the equivalent of the libc > + malloc arena on UNIX: it's a region of memory managed by the OS which malloc/HeapAlloc > + partitions and hands out to the application. Windows applications can create several heaps but > + the process heap always exists. It's created as part of process initialization in > + dlls/ntdll/thread.c:thread_init(). > + > + > + > + There is another heap created as part of process startup, the so-called shared or system > + heap. This is an undocumented service that exists only on Windows 9x: it is implemented in > + Wine so native win9x DLLs can be used. The shared heap is unusual in that anything allocated > + from it will be visible in every other process. This heap is always created at the > + SYSTEM_HEAP_BASE address or 0x65430000 and defaults to a megabyte in size. > + > + > + > + So far we've assumed the entire 4 gigs of address space is available for the application. In > + fact that's not so: only the lower 2 gigs are available, the upper 2 gigs are on Windows NT > + used by the operating system and hold the kernel (from 0x80000000). Why is the kernel mapped > + into every address space? Mostly for performance: while it's possible to give the kernel its > + own address space too - this is what Ingo Molnars 4G/4G VM split patch does for Linux - it > + requires that every system call into the kernel switches address space. As that is a fairly > + expensive operation (requires flushing the translation lookaside buffers etc) and syscalls are > + made frequently it's best avoided by keeping the kernel mapped at a constant position in every > + processes address space. > + > + > + > + On Windows 9x, in fact only the upper gigabyte (0xC0000000 and up) is used by the kernel, the > + region from 2 to 3 gigs is a shared area used for loading system DLLs and for file > + mappings. The bottom 2 gigs on both NT and 9x are available for the programs memory allocation > + and stack. > + > + > + > + There are a few other magic locations. The bottom 64k of memory is deliberately left unmapped > + to catch null pointer dereferences. The region from 64k to 4mb are reserved for DOS > + compatibility and contain various DOS data structures. Finally, the address space also > + contains mappings for the Wine binary itself, any native libaries Wine is using, the glibc > + malloc arena and so on. > + > + > + > + > + > + > + > + > + Up until about the start of 2004, the Linux address space very much resembled the Windows 9x > + layout: the kernel sat in the top gigabyte, the bottom pages were unmapped to catch null > + pointer dereferences, and the rest was free. The kernels mmap algorithm was predictable: it > + would start by mapping files at low addresses and work up from there. > + > + > + > + The development of a series of new low level patches violated many of these assumptions, and > + resulted in Wine needing to force the Win32 address space layout upon the system. This > + section looks at why and how this is done. > + > + > + > + The exec-shield patch increases security by randomizing the kernels mmap algorithms. Rather > + than consistently choosing the same addresses given the same sequence of requests, the kernel > + will now choose randomized addresses. Because the Linux dynamic linker (ld-linux.so.2) loads > + DSOs into memory by using mmap, this means that DSOs are no longer loaded at predictable > + addresses, so making it harder to attack software by using buffer overflows. It also attempts > + to relocate certain binaries into a special low area of memory known as the ASCII armor so > + making it harder to jump into them when using string based attacks. > + > + > + > + Prelink is a technology that enhances startup times by precalculating ELF global offset > + tables then saving the results inside the native binaries themselves. By grid fitting each > + DSO into the address space, the dynamic linker does not have to perform as many relocations > + so allowing applications that heavily rely on dynamic linkage to be loaded into memory much > + quicker. Complex C++ applications such as Mozilla, OpenOffice and KDE can especially benefit > + from this technique. > + > + > + > + The 4G VM split patch was developed by Ingo Molnar. It gives the Linux kernel its own address > + space, thereby allowing processes to access the maximum addressable amount of memory on a > + 32-bit machine: 4 gigabytes. It allows people with lots of RAM to fully utilise that in any > + given process at the cost of performance: as mentioned previously the reason behind giving > + the kernel a part of each processes address space was to avoid the overhead of switching on > + each syscall. > + > + > + > + Each of these changes alter the address space in a way incompatible with Windows. Prelink and > + exec-shield mean that the libraries Wine uses can be placed at any point in the address > + space: typically this meant that a library was sitting in the region that the EXE you wanted > + to run had to be loaded (remember that unlike DLLs, EXE files cannot be moved around in > + memory). The 4G VM split means that programs could receive pointers to the top gigabyte of > + address space which some are not prepared for (they may store extra information in the high > + bits of a pointer, for instance). In particular, in combination with exec-shield this one is > + especially deadly as it's possible the process heap could be allocated beyond > + ADDRESS_SPACE_LIMIT which causes Wine initialization to fail. > + > + > + > + The solution to these problems is for Wine to reserve particular parts of the address space > + so that areas that we don't want the system to use will be avoided. We later on > + (re/de)allocate those areas as needed. One problem is that some of these mappings are put in > + place automatically by the dynamic linker: for instance any libraries that Wine > + is linked to (like libc, libwine, libpthread etc) will be mapped into memory before Wine even > + gets control. In order to solve that, Wine overrides the default ELF initialization sequence > + at a low level and reserves the needed areas by using direct syscalls into the kernel (ie > + without linking against any other code to do it) before restarting the standard > + initialization and letting the dynamic linker continue. This is referred to as the > + preloader and is found in ld-winepreload.so (loader/preloader.c) > + > + > + > + Once the usual ELF boot sequence has been completed, some native libraries may well have been > + mapped above the 3gig limit: however, this doesn't matter as 3G is a Windows limit, not a > + Linux limit. We still have to prevent the system from allocating anything else above there > + (like the heap or other DLLs) though so Wine performs a binary search over the upper gig of > + address space in order to iteratively fill in the holes with MAP_NORESERVE mappings so the > + address space is allocated but the memory to actually back it is not. This code can be found > + in libs/wine/mmap.c:reserve_area. > + > + > + > + > + > --- documentation/wine-devel.sgml > +++ documentation/wine-devel.sgml > @@ -13,6 +13,7 @@ > > > > + > > > > @@ -138,6 +139,7 @@ > &implementation; > &porting; > &consoles; > + &address-space; > &cvs-regression; > > > > >

1 0

[Fwd: winetest: copy and submit manually]
by Robert Reif May 28, 2004

May 28, 2004

oops, wrong list.

1 0

RE: FW: Edit Paste operation does not behave same as MS Windows
by Krishna Murthy May 28, 2004

May 28, 2004

This means it is sufficient to return FALSE in EDIT_MakeFit if the honor limit is not set and size exceeds the buffer limit? static BOOL EDIT_MakeFit(EDITSTATE *es, UINT size, BOOL honor_limit) { HLOCAL hNew32W; if ((!honor_limit) && (es->buffer_limit > 0) && (size > es->buffer_limit)) { EDIT_NOTIFY_PARENT(es, EN_MAXTEXT, "EN_MAXTEXT"); return FALSE; } ... } I will verify with this change and if works in all condition, will submit the patch. Thanks for your help, Krishna -----Original Message----- From: Alexandre Julliard [mailto:julliard(a)winehq.org] Sent: Thursday, May 27, 2004 5:12 PM To: Krishna Murthy Cc: wine-devel(a)winehq.org Subject: Re: FW: Edit Paste operation does not behave same as MS Windows Krishna Murthy <Krishna.Murthy(a)guptaworldwide.com> writes: > Actually the logic truncates the data which exceeded the buffer. If > the honor limit is set and the size exceeded, the EDIT_MakeFit will return TRUE. > The following code after the EDIT_MakeFit will try to take limit to > the buffer size. > > + /* Only replace or insert that many characters that can fit into the > + edit control. Do this only if honor_limit is TRUE */ > + if(honor_limit && strl > es->buffer_limit) > + strl = es->buffer_limit - (tl - (e-s)); That only takes into account the limit, not the current buffer size. It's very possible that you need to grow the buffer even when the limit is not exceeded. Also you only check the length of the inserted string against the limit, you should check the total resulting length instead. -- Alexandre Julliard julliard(a)winehq.org

1 0

RE: FW: Edit Paste operation does not behave same as MS Windows
by Krishna Murthy May 28, 2004

May 28, 2004

Actually the logic truncates the data which exceeded the buffer. If the honor limit is set and the size exceeded, the EDIT_MakeFit will return TRUE. The following code after the EDIT_MakeFit will try to take limit to the buffer size. + /* Only replace or insert that many characters that can fit into the + edit control. Do this only if honor_limit is TRUE */ + if(honor_limit && strl > es->buffer_limit) + strl = es->buffer_limit - (tl - (e-s)); Krishna -----Original Message----- From: Alexandre Julliard [mailto:julliard(a)winehq.org] Sent: Thursday, May 27, 2004 2:30 PM To: Krishna Murthy Cc: wine-devel(a)winehq.org Subject: Re: FW: Edit Paste operation does not behave same as MS Windows Krishna Murthy <Krishna.Murthy(a)guptaworldwide.com> writes: > - Change log Entry: > EDIT_MakeFit should return TRUE when the honor_limit is set and paste > buffer exceeds the limit. Also EDIT_EM_ReplaceSel should compute size > which could fit in the edit control by truncating the extra characters > to behave similar to MS Windows paste operation. You are bypassing the reallocation of the buffer when the limit is exceeded, but still adding the data to the buffer. I don't think this will work right. -- Alexandre Julliard julliard(a)winehq.org

2 1

Re: Crash and corrupted registry
by Alexandre Julliard May 27, 2004

May 27, 2004

Christian Costa <titan.costa(a)wanadoo.fr> writes: > This seems to be more a filesytem issue then because the file is in a > really bad shape. > I use reiserfs on a Mandrake 2.4.21-0.13mdk kernel. > It seems to happend on files that are open when the crash (freeze + > reboot) occurs. Yes, it very much looks like a filesystem issue, I prefer that <g> If you feel like trying to reproduce it, maybe you could try to add an fsync() in the saving code and see if this makes a difference. -- Alexandre Julliard julliard(a)winehq.org

3 3

Re: FW: Edit Paste operation does not behave same as MS Windows
by Alexandre Julliard May 27, 2004

May 27, 2004

Krishna Murthy <Krishna.Murthy(a)guptaworldwide.com> writes: > - Change log Entry: > EDIT_MakeFit should return TRUE when the honor_limit is set and paste buffer > exceeds the limit. Also EDIT_EM_ReplaceSel should compute size which could > fit in the edit control by truncating the extra characters to behave similar > to MS Windows paste operation. You are bypassing the reallocation of the buffer when the limit is exceeded, but still adding the data to the buffer. I don't think this will work right. -- Alexandre Julliard julliard(a)winehq.org

1 0

Re: Repaint the whole nonclient window area on SetWindowPos(SWP_FRAMECHANGED)
by Alexandre Julliard May 27, 2004

May 27, 2004

Dmitry Timoshkov <dmitry(a)baikal.ru> writes: > SetWindowPos(SWP_FRAMECHANGED) causes the whole nonclient window area > to be repainted. > > Also, according to the tests Windows always repaints windows before > SetWindowPos has finished. > > This patch reduces number of message test failures from 56 to 47. The message order is wrong because we rely on X expose events to repaint the window. This is one of the reasons we need to go back to not using X windows for every window; but until that is done, your fix is going to cause every window to be repainted twice. -- Alexandre Julliard julliard(a)winehq.org

1 0

Re: Add a test for accessing classes from another thread
by Alexandre Julliard May 27, 2004

May 27, 2004

Dmitry Timoshkov <dmitry(a)baikal.ru> writes: > somebody on the ReactOS mailing list mentioned that Windows stores class > information in the per thread list, not a per process or per module list. > That would effecively meant that accessing classes or creating windows > from other threads would fail. > > So, I decided to write a test for that. The test passes under Wine. Not for me: class.c:258: Test failed: GetLastError() should be set to ERROR_CLASS_HAS_WINDOWS class.c:258: Test failed: GetLastError() should be set to ERROR_CLASS_HAS_WINDOWS -- Alexandre Julliard julliard(a)winehq.org

1 0

atoi and undefined usage
by andrejoh＠c2i.net May 27, 2004

May 27, 2004

The atoi() function has undefined usage when trying to convert numbers outside the range of int. When parsing numbers >= 2^31, GNU libc seems to truncate the number to 2^31-1; however, with MSVC, such a number would wrap, and when cast to an unsigned integer, numbers within an unsigned int are preserved. Should Wine care about such undefined behaviour? Currently, it seems Wine uses the GNU libc implementation, giving a different result than when running in Windows. (In my case, an IP address was given as a string, and ended up as "127.255.255.255" when running in Wine. I've now fixed that specific bug in the source code, but with other programs, that might not be an option...) -- Try Anarchy Online http://www.anarchy-online.com/content/downloads/tryout/ Netiquette guidelines ftp://ftp.rfc-editor.org/in-notes/rfc1855.txt How to quote properly http://www.i-hate-computers.demon.co.uk/ Hvordan sitere riktig http://home.online.no/~vidaandr/news/OBSquoting.html

2 1

Re: test for GetAcceptLanguagesA
by Martin Fuchs May 27, 2004

May 27, 2004

On 27.05.2004 04:09:34 Alexandre Julliard wrote: > Stefan Leichter <Stefan.Leichter(a)camLine.com> writes: > > before removing the acsii calls from GetAcceptLanguagesW, i like to see > the > > results of the attached tests. This will hopefuly save me some work when > > rewriting the function. The tests passes on my Win2k system. > But they fail on Wine, so I can't apply the patch. I've seen some test cases wrapped in TODO sections, for example: todo_wine { SetWindowLong(hwnd1, GWL_EXSTYLE, GetWindowLong(hwnd1,GWL_EXSTYLE)|WS_EX_TOPMOST); ret = GetWindowLong(hwnd1,GWL_EXSTYLE)&WS_EX_TOPMOST? TRUE: FALSE; ok(!ret, "SetWindowExStyle(hwnd1, WS_EX_TOPMOST)\n"); } This prints a warning message about something yet to to in Wine, but the test doesn't fail. Can't you use this also for the patch in question? Regards, Martin

1 0