A portion of the disclosure of this patent document contains material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction by anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark Office patent files or records, but otherwise reserves all copyright rights whatsoever.
The disclosure relates generally to the field of electronics devices, as well as networks thereof. More particularly, in one exemplary aspect, the disclosure is directed to methods and apparatus for memory access protection between processors with shared memory resources.
The consumer electronics industry continuously strives to meet consumer demands for increased device functionality. In order to keep costs low and maximize supply chain diversity, most manufacturers design their consumer electronics devices to be constructed from generic and/or commodity components that are sourced from a number of 3rd party vendors. Thus, manufacturers have historically struggled to implement an increasing set of features on embedded platforms where components are sub-optimal (e.g., low memory resources, etc.). Additionally, processor architectures have evolved to include multiple processors from multiple sources within a single device.
More recently, many extant consumer devices commonly include both an application processor as well as one or more peripheral chipsets. Furthermore, these disparate processors have evolved towards the use of a shared memory mapped bus interface. As a result of this evolution, peripheral chipsets commonly have access to host memory (e.g., random access memory (RAM) technologies including dynamic RAM (DRAM)). Accordingly, when a peripheral chipset attempts to access an illegal address in host memory, it can result in various violations which ultimately can result in, for example, kernel panic situations thus resulting in undesirable device operation such as, for example, a reboot of the entire system.
Over time, it has been determined that the logging of these violations (e.g., in kernel panic logs) are not always adequate in determining the root cause or issue which resulted in the undesirable device operation. To these ends, improved methods and apparatus are needed for hardware solutions that guard against illegal host memory accesses, thereby improving upon perceived product quality as well as improving upon user experiences with these devices.
The present disclosure satisfies the foregoing needs by providing, inter alia, methods and apparatus for guarding against illegal host memory accesses.
In a first aspect, a method for providing access to a shared memory resource is disclosed. In one embodiment, the method includes: generating, by a first processor, a first window register associated with the shared memory resource; and transmitting the first window register from the first processor to a second processor, the first window register defining a first extent of address space within the shared memory resource that is directly accessible by the second processor without requiring a performance of arbitration operations by the first processor.
In a first variant, the generation of the first window register includes generating, by the first processor, a base address that corresponds to a starting location within the shared memory resource; and generating, by the first processor, a window length that corresponds to the first extent of address space within the shared memory resource from the starting location within the shared memory resource.
In another variant, the generation of the window register comprises generating the window register upon occurrence of a predefined event.
In yet another variant, the predefined event includes a second processor boot process.
In yet another variant, the method further includes generating, by the first processor, a second window register associated with the shared memory resource; and transmitting the second window register from the first processor to the second processor, the second window register defining a second extent of address space within the shared memory resource that is directly accessible by the second processor without requiring the performance of arbitration operations by the first processor.
In yet another variant, responsive to an attempt to access an extent of address space outside of the extent of accessible address space, receiving a nullified packet transmitted by the second processor.
In yet another variant, the reception of the nullified packet by the first processor, further includes receiving an inverted data link layer cyclic redundancy check (LCRC) value for the nullified packet.
In yet another variant, the method further includes upon reception of the nullified packet by the first processor, disregarding the nullified packet.
In a second aspect, a method for registering access violations of host memory is disclosed. In one embodiment, the method includes receiving one or more window registers defining an extent of address space within the host memory that is accessible by a peripheral processor from a host processor; responsive to an attempt to access an extent of address space outside of the extent of accessible address space, generating an error message by the peripheral processor; storing the error message within a violation register; and preventing access of the host memory by the peripheral processor until the host processor has cleared the error message.
In one variant, the generation of the error message includes: generating a memory address for the extent of address space outside of the extent of accessible address space; generating a source for the attempt to access the extent of address space outside of the extent of accessible address space; and generating a violation type for the attempt to access the extent of address space outside of the extent of accessible address space.
In another variant, the method includes the generation of the violation type that includes determining whether an access violation comprises a write violation or a read violation.
In yet another variant, the generation of the source includes determining one of a direct memory access (DMA) unit or a central processing unit (CPU) as the source of an illegal access attempt.
In yet another variant, the generation of the memory address includes: determining whether a start address for the memory address falls outside the extent of accessible address space; and determining whether an end address for the memory address falls outside the extent of accessible address space.
In yet another aspect, the prevention of access to the host memory includes: generating a nullified packet by the peripheral processor; and transmitting the nullified packet to the host processor.
In yet another aspect, the generation of the nullified packet by the peripheral processor further includes generating an inverted data link layer cyclic redundancy check (LCRC) value for the nullified packet.
In a third aspect, a method for handling detected violations of host memory is disclosed. In one embodiment, the method includes detecting a violation of access of a defined extent of address within host memory; storing a violation message within a violation register; and transmitting a nullified packet in response to the detection of the violation.
In a fourth aspect, a memory mapped system is disclosed. In one embodiment, the memory mapped system includes a host processor and one or more peripheral processors. In a variant, the memory mapped system is configured to register access violations of host memory. In another variant, the memory mapped system is configured to handle detected violations of host memory.
In a fifth aspect, host memory access protection registers are disclosed. In one embodiment, the host memory access protection registers includes a window register, a window configuration register and a violation register.
In a sixth aspect, a computer readable medium is disclosed. In one embodiment, the computer readable medium includes a non-transitory storage medium having one or more computable executable instructions stored thereon, the one or more instructions when executed configured to: receive one or more window registers defining an extent of address space within a host memory that is accessible by a peripheral processor from a host processor; generate an error message responsive to an attempt to access an extent of address space outside of the extent of accessible address space; store the error message within a violation register; and prevent access of the host memory by the peripheral processor until the host processor has cleared the error message.
In a seventh aspect, a peripheral processor is disclosed. In one embodiment, the peripheral processing device is configured to access host memory within a memory mapped system and includes: a peripheral CPU, a peripheral MMU, peripheral memory and a peripheral direct memory access (DMA) unit and further includes logic configured to: receive a first window register from a host processing device, the first window register defining a first extent of address space within the host memory resource that is directly accessible by the peripheral processing device without requiring a performance of arbitration operations by the host processing device.
In one variant, the peripheral processing device further includes logic configured to: expose a capability register which the host processing device can access, the capability register comprising a windows enabled field and a windows available field.
In yet another variant, the peripheral processing device further includes logic configured to: write a first value into the windows available field, the first value comprising a maximum number of windows supported by the peripheral processing device.
In yet another variant, the peripheral processing device further includes logic configured to: read a second value from the windows enabled field, the second value indicating to the peripheral processing device a number of windows enabled by the host processing device.
In another embodiment, the peripheral processor is configured to register access violations of host memory within a memory mapped system, the peripheral processing device further including a peripheral CPU, a peripheral MMU, peripheral memory and a peripheral direct memory access (DMA) unit and further comprising logic configured to: receive one or more window registers defining an extent of address space within the host memory that is accessible by the peripheral processor from a host processor; generate an error message responsive to an attempt to access an extent of address space outside of the extent of accessible address space; store the error message within a violation register; and prevent access of the host memory by the peripheral processor until the host processor has cleared the error message.
In one variant, the prevention of access to the host memory includes the generation of a nullified packet by the peripheral processor and transmission of the nullified packet to the host processor.
In another variant, the generation of the nullified packet by the peripheral processing device further includes generation of an inverted data link layer cyclic redundancy check (LCRC) value for the nullified packet.
In yet another variant, the generation of the error message includes a generation of a memory address for the extent of address space outside of the extent of accessible address space; a generation of a source for the attempt to access the extent of address space outside of the extent of accessible address space; and a generation of a violation type for the attempt to access the extent of address space outside of the extent of accessible address space.
In yet another variant, the generation of the source includes the determination of one of the peripheral DMA or the peripheral CPU as the source of an illegal access attempt.
In an eighth aspect, a host processor is disclosed. In one embodiment, the host processor is configured to define one or more window registers containing the extent of address space within a host memory that is accessible by a peripheral processing device; and transmit the one or more window registers to the peripheral processing device.
In one variant, the one or more window registers is defined by the host processor during a boot process for the memory mapped system.
In another variant, each of the one or more window registers comprises both a base address and a window length, the base address and the window length configured to define an address space within the host memory that are to be accessible by the peripheral processing device.
In yet another variant, the memory mapped system further includes a window configuration register, the window configuration register configured to be read and/or written by the host processor and the peripheral processing device.
In yet another variant, the window configuration register further includes an available window field and the peripheral processing device is further configured to write a value into the available window field; and wherein the host processor is further configured to read the value in the available window field, the read value being utilized by the host processor in order to determine whether the host processor should write a value to a windows enabled field of the window configuration register.
In yet another variant, the host processor is further configured to write a default value to the windows enabled field of the window configuration register, the default value being indicative of a legacy peripheral processing device that is incompatible with support of the one or more window registers.
In yet another variant, the host processor is further configured to write to one or more locking bits of the window configuration register, the one or more locking bits configured to prevent the update of any fields located within the one or more window registers.
In a ninth aspect, a computing device is disclosed. In one embodiment, the computing device includes a host processing device comprising a host CPU and a host memory management unit (MMU); a peripheral processing device comprising a peripheral CPU, a peripheral MMU, peripheral memory and a peripheral direct memory access (DMA) unit; and a host memory accessible by both the host processing device and the peripheral processing device. The host processing device further includes logic configured to: generate a first window register associated with the host memory; and transmit the first window register from the host processing device to the peripheral processing device, the first window register defining a first extent of address space within the host memory that is directly accessible by the peripheral processing device without requiring a performance of arbitration operations by the host processing device.
In one variant, the host processing device further includes logic configured to prevent access of the first extent of address space within the host memory by the host processing device.
In another variant, the first window register is defined by the host processing device during a boot process for the memory mapped system.
In yet another variant, the first window register includes both a base address and a window length, the base address and the window length configured to define the first extent of address space within the host memory.
In yet another variant, the memory mapped system further includes a window configuration register, the window configuration register configured to be read and/or written by the host processing device and the peripheral processing device.
In yet another variant, the window configuration register further includes an available window field and the peripheral processing device is further configured to write a value into the available window field; and the host processing device is further configured to read the value in the available window field, the read value being utilized by the host processing device in order to determine whether the host processing device should write a value to a windows enabled field of the window configuration register.
In yet another variant, the host processing device is further configured to write a default value to the windows enabled field of the window configuration register, the default value being indicative of a legacy peripheral processing device that is incompatible with support of the one or more window registers.
In yet another variant, the host processing device is further configured to write to one or more locking bits of the window configuration register, the one or more locking bits configured to prevent the update of any fields located within one or more window registers.
In another embodiment, the computing device includes a memory mapped system and further includes a host processing device having a host CPU and a host memory management unit (MMU); a peripheral processing device having a peripheral CPU, a peripheral MMU, peripheral memory and a peripheral direct memory access (DMA) unit; and a host memory accessible by both the host processing device and the peripheral processing device. The peripheral processing device further comprises logic configured to: receive one or more window registers defining an extent of address space within the host memory that is accessible by the peripheral processing device from the host processing device; generate an error message responsive to an attempt to access an extent of address space outside of the extent of accessible address space; store the error message within a violation register located within the peripheral memory; and prevent access of the host memory by the peripheral processing device until the host processing device has cleared the error message.
In another embodiment, the computing device includes a memory mapped system, and further includes: a host processing device; a peripheral processing device; and a host memory accessible by both the host processing device and the peripheral processing device. The peripheral processing device is configured to: detect an access violation outside of a defined extent of address space within the host memory; in response to the detected access violation, transmit a nullified packet to the host processing device; store a violation message within a violation register; while the violation message has not been cleared, prevent transmission of one or more data packets by the peripheral processing device to the host processing device; and responsive to the violation message being cleared, enable transmission of the one or more data packets to the host processing device by the peripheral processing device.
In another aspect, a peripheral processor apparatus is disclosed. In one embodiment, the peripheral processor apparatus is for use in a system that includes the peripheral processor apparatus and a host processor apparatus, and the peripheral processor apparatus is configured to: detect an access violation outside a defined extent of address space within host memory; in response to the detected access violation, transmit a nullified packet to the host processor apparatus; transmit a violation message to a violation register; and responsive to the violation message being cleared, cause transmission of one or more data packets to the host processor apparatus.
Other features and advantages of the present disclosure will immediately be recognized by persons of ordinary skill in the art with reference to the attached drawings and detailed description of exemplary embodiments as given below.
All Figures © Copyright 2015-2016 Apple Inc. All rights reserved.
Reference is now made to the drawings, wherein like numerals refer to like parts throughout.
Exemplary embodiments of the present disclosure are now described in detail. While these embodiments are primarily discussed in the context of detecting and registering host memory access violations by peripheral chipset manufacturers, it will be recognized by those of ordinary skill that the present disclosure is not so limited. In fact, the various aspects of the disclosure are useful for detecting and registering host memory access violations by the applications processor. Further, while the following embodiments describe specific implementations of e.g., dedicated address spaces, dedicated violation registers, and specific protocols, those of ordinary skill in the related arts will readily appreciate that such descriptions are purely illustrative of the broader principles described herein.
Moreover, while embodiments described herein are primarily discussed in the context of an inter-processor communication (IPC) link, it will be recognized by those of ordinary skill that the present disclosure is not so limited. In fact, the various aspects of the disclosure are useful in any device or network of devices that may benefit from providing memory access protection for memory-mapped architectures, as is disclosed herein. Further, while the following embodiments describe specific implementations of e.g., dedicated address spaces, legacy support capabilities, and specific protocols, those of ordinary skill in the related arts will readily appreciate that such descriptions are purely illustrative.
Exemplary Processor and Memory Architecture—
Referring now to
The system includes, in the illustrated embodiment, host memory 160 which may include either volatile (e.g., DRAM, etc.) or non-volatile memory (e.g., non-volatile RAM (NVRAM), etc., as well as a host processor 120 (e.g., an applications processor (AP)) and a peripheral processor 140 or peripheral chipset. The following discussions will be described in reference to a “host” processor, and a “peripheral” (or “peripheral device”) processor. For reasons which will become apparent below, it is appreciated that the designation as to host or peripheral processor is used to simplify and/or clarify the following explanations, and does not imply existing host or peripheral functionality, or that such roles cannot be reversed.
While illustrated in the context of a system having a single host processor and a single peripheral processor, it is readily appreciated that embodiments are envisioned herein that include additional processing chipsets (e.g., additional peripheral processors). The host processor 120 includes a central processing unit (CPU) 122 as well as a memory management unit (MMU) 124 in the illustrated embodiment, while the peripheral processor 140 includes a CPU 142, a MMU 144 as well as memory 146 and a direct memory access (DMA) unit 148. As is shown, the peripheral processor can access host memory 160 via a CPU access over a first communications link 172 or via DMA access over a second communications link 174.
In one exemplary embodiment, host memory 160 is accessible to the peripheral processor via a peripheral memory map representation 146, as shown in
In one exemplary implementation, the peripheral processor maps these data structures as part of the peripheral boot process, although it is appreciated that the memory mapping between data structures in host memory and peripheral memory can occur at during normal operation. For example, firmware and/or software applications may dynamically allocate and/or de-allocate memory windows between the host and peripheral processors so as to facilitate data transactions with minimal overhead. Common examples of memory mapped access include without limitation, e.g., device driver allocations, mailbox allocations, bulk memory transfers, etc.
HMAP Registers—
Exemplary embodiments of the HMAP registers are now described in detail. While these embodiments are primarily discussed in the context of being stored within dedicated hardware registers, it will be recognized that the present disclosure is not so limited. For example, artisans of ordinary skill in the related arts, given the contents of the present disclosure, will readily appreciate that register locations may be virtualized and/or mapped to memory locations within e.g., the peripheral memory management unit (MMU) 144, the host MMU 124, the peripheral memory 146, and/or the host memory 160, etc. In fact, the various HMAP registers described herein may be stored anywhere within the memory mapped system 100 with equivalent success.
Additionally, while primarily discussed in the context of a specific ordering for fields located within individual ones of these HMAP registers, it is appreciated that the specific ordering of these fields is not important. For example, and referring to
Referring now to
Optionally, or alternatively, the peripheral software alone or in combination with the host software, may define what locations in host memory are accessible by writing to these HMAP window registers. For example, in some embodiments, the peripheral chipset may implement even stricter host memory access windows than the host's default settings. Stricter windowing can further minimize accesses to the host memory in the event of a trap or crash. In this manner, the peripheral software can guarantee that no host memory would be touched by any DMA engines subsequent to the trap or crash. In another example, the peripheral chipset may require more memory than the host has provided; in such cases, the peripheral may request more memory (and responsively the host may determine how much (if any) additional memory can be allocated to the peripheral). Still other variants may be implemented with equivalent success by artisans of ordinary skill in the related arts, given the contents of the present disclosure.
In the context of an exemplary 128-bit implementation, the first 64-bits of the HMAP window register define the base address 202 for an accessible portion of host memory. In one or more implementations, the base address is aligned to 4K for easier hardware implementation. In some embodiments, the HMAP window registers can only be written by the host processor; in other embodiments, the HMAP window registers may also be written by the peripheral processor, or alternatively, only be written via the peripheral processor. In implementations in which the base address field 214 can only be written by one of the processors (e.g., the peripheral or the host), mechanisms for identifying improper write attempts to the HMAP window register fields can be flagged and logged (see the discussion of the HMAP violation registers discussed infra).
The following 32-bits (i.e., the window length field 212) are reserved for defining the window length 216 of accessible space in host memory. Similar to the discussion of the base address field 214, the window length field can be defined by host software running on the host processor and optionally, or alternatively, be defined by peripheral software running on the peripheral processor. In one or more implementations, the window size defined by the window length field 212 will only occur in multiples of 512-bytes in order to facilitate easier hardware implementation. As the length of the window length field in this example embodiment is 32-bits, the largest window length in host memory is defined as 232 bits in length minus a reset value that is defined in an exemplary implementation as ‘0’ (i.e., a maximum window length of 4,294,967,295 within the 128-bit host memory space). The use of a set reset value (e.g., zero (0)) enables, inter alia, the HMAP window register to be updated and/or reset. For example, by setting the window length field 212 to ‘0’, the base address field 214 can be subsequently updated and a new window length field 212 can be set.
As a brief aside, the aforementioned embodiments use a 4K alignment for the base and require window sizes to be a multiple of 512-bytes so as to allow the hardware implementation to ignore the low 9 bits of an address when checking whether it falls within a window. The exemplary sizes are selected to optimize a specific hardware implementation (e.g., the hardware check can be performed faster and/or manufactured more cheaply). A person having ordinary skill in the related arts, given the contents of the present disclosure, may readily apply the principles described herein to implementations with different alignments, window sizes and/or addressing schemes, the foregoing being purely illustrative.
Referring now to
In the context of an exemplary 32-bit implementation for the HMAP window configuration register 220, the first 8-bits are reserved for the so-called HMAP windows available field 228. In one embodiment, the peripheral processor defines the number of windows that are available, while the host processor accesses this register field 228 in order to determine the number of windows currently available. The following 8-bits are reserved for the so-called HMAP windows enabled field 226. In one embodiment, the host processor writes this register in order to program the number of windows that have been enabled by the host processor. Moreover, by specifying a reset value of, for example, ‘0’, this enables the peripheral processor (and the host processor) to determine when the HMAP window register functionality has been disabled. The following bit indicates the locking bit field 224 for the HMAP window configuration register. For example, in one embodiment, a value of ‘1’ within this locking bit field 224 indicates to the peripheral processor that any attempted writes to the HMAP window register 210 is an error. In other words, the purpose of the locking bit field is to freeze the state of the programmed window registers 210 and trap any further accesses. In one or more implementations, the host processor has exclusive access to change the value of this field in order to ensure that it has exclusive control over the creation/modification of HMAP window registers 210.
Referring now to
In one exemplary implementation, once host software has enabled the HMAP window registers, the peripheral processor detects HMAP violations and updates the HMAP violation register whenever an access is made to host memory that is outside of the defined protected range. More directly, the peripheral processor can readily monitor its own transactions; transactions that fall outside the defined protected range are assumed to be errant accesses due to corrupted software execution, etc. In this manner, error detection and recovery can be handled and prevented directly by the peripheral processor (rather than the host processor which is unaware of the peripheral processor's independent operation).
Moreover, in one or more embodiments, the peripheral processor will not generate any bus-level packets when it detects a violation until the detected violation is later cleared by the host processor. Violations are flagged for the host processor within the HMAP violation register. The HMAP violation register consists of a number of fields including a memory address field 250, a violation source field 248, a violation type field 246, an error bit(s) field 244.
In the context of an exemplary 128-bit implementation for the HMAP violation register 240, the memory address field 250 consists of 64-bits that are indicative of the memory address of host memory that was caught during an attempted access outside of the range of addresses defined by the HMAP window registers. The subsequent 16-bits represent the violation source field 248 which defines the source of the attempted access violation. For example, in one exemplary implementation, a value of ‘1’ is indicative of an attempted rewrite of a window register 210 when the locking bit(s) field 224 of the HMAP configuration register 220 is set to a ‘locked’ state. Moreover, a value of ‘2’ is indicative of a violation by the peripheral processor CPU; a value of ‘3’ is indicative of a violation by a first DMA unit; a value of ‘4’ is indicative of a violation by a second DMA unit and so forth. More bits can be defined by the vendor of the peripheral processor in order to precisely define which unit (e.g., CPU, DMA, etc.) of the peripheral processor caused the memory violation/illegal access attempt. For example, this field can be modified so as to capture other implementation-specific identifiers such as an exemplary Advance eXtensible identifier (AXID), etc.
The violation type field 246 is utilized to identify the type of violation that has occurred. For example, in the context of an exemplary ‘1’ bit field length for the violation type field 246, a value of ‘0’ can be used to signify a read violation of the host memory, while a value of ‘1’ can be used to signify a write violation of the host memory. The error bit(s) field 244 is utilized in order to determine the number of errors detected. For example, in the context of an exemplary ‘2’ bit field length for the error bit(s) field, a value of ‘00’ indicates no errors; a value of ‘01’ indicates a single violation that has been detected by the peripheral; a value of ‘11’ indicates that multiple violations were detected (e.g., the detection of both a read and a write violation to the same memory address, etc.). In one exemplary embodiment, the value of ‘10’ is unused as there is no need to track any additional types of errors within the error bit(s) field. In other embodiments, the value of ‘10’ may be used to track other types of errors, statuses, or conditions (e.g., internal errors, successful recovery, internally hung/unknown state, etc.) Exemplary implementations for the HMAP window register 210; the HMAP window configuration register 220; and the HMAP violation register 240 are included within APPENDIXES A, B and C, respectively.
In one embodiment, the peripheral processor exposes the HMAP window register 210, the HMAP window configuration register 220, and the HMAP violation register 240 to the host processor via a configuration space. By allowing these registers to be located within a configuration space, the host processor has the ability to write to these registers as early as possible during the boot process of the peripheral processor as part of, for example, the Peripheral Component Interconnect Express (PCIe) enumeration process. Moreover, the updating of the HMAP registers dynamically can result in race condition (i.e., when both processors attempt to update the registers at the same time, resulting in an unknown condition). Hence, mechanisms to update these registers may be defined by a specific protocol or other alternative means so as to avoid access contention and/or race conditions. Generally speaking, it is anticipated that the host software will update the HMAP window registers once upon initial start-up, although it is appreciated that the aforementioned HMAP window registers may in certain implementations be updated on a dynamic basis.
Finally, it is appreciated that within the context of PCIe, transaction layer packets (TLP) contain a maximum packet size (MPS) as a number of bytes. Accordingly, when a given peripheral processor attempts to access host memory, the start address of a TLP may occur within a defined HMAP window register while the end address of the TLP may occur outside of the defined HMAP window register. Therefore, it is appreciated that in certain implementations both the start and end address for a given TLP should be checked to ensure that the entire memory address for a given TLP falls within a defined HMAP window. However, in alternative implementations and/or under different design constraints (e.g., performance, reduced size/silicon, etc.), a given TLP may only be checked based on the starting address of the TLP packet or some other specific transaction scenario/condition, etc. Generalized methodologies for using the aforementioned HMAP registers are now described.
Methods—
Referring now to
If however, the access attempt does result in an access violation, then the peripheral processor generates an error message at step 308. In one embodiment, this error message will include one or more of: a memory address for the violation, a source for the violation, a type of the violation (e.g., a write violation, a read violation, etc.) and/or the type of error that has occurred.
At step 310, the generated error message is stored in a violation register. In one embodiment, the violation register is of the form illustrated in
Referring now to
Either contemporaneously with step 404, or alternatively at a time other than the transmission of the nullified packet, the peripheral processor will store a violation message within a violation register. In one embodiment, the violation register is of the form illustrated in
In the exemplary context of PCIe, any subsequent TLP generation will be suspended upon the detection of a violation at step 402. As part of the error handling process, the peripheral processor will generate an internal error trap which will run a software error handler. As part of this error handling procedure, peripheral software will clear the error bits and resume peripheral processor operation. It is important that hardware operation resume normal operation so that the host software can collect debugging information if necessary without resetting/rebooting the peripheral processor. In such instances in which violations of host memory are detected, the peripheral processor is not expected to generate a link down or completion time out, etc. for detection of an address violation. Any PCIe bus level error (e.g., credit loss, etc.) are not expected upon detection of a memory access violation and the root complex at the host processor is expected to be unaware of the memory access violation. Additionally, the peripheral processor is not expected to access the link and update any host memory to report the error.
It will be recognized that while certain embodiments of the present disclosure are described in terms of a specific sequence of steps of a method, these descriptions are only illustrative of the broader methods described herein, and may be modified as required by the particular application. Certain steps may be rendered unnecessary or optional under certain circumstances. Additionally, certain steps or functionality may be added to the disclosed embodiments, or the order of performance of two or more steps permuted. All such variations are considered to be encompassed within the disclosure and claimed herein.
While the above detailed description has shown, described, and pointed out novel features as applied to various embodiments, it will be understood that various omissions, substitutions, and changes in the form and details of the device or process illustrated may be made by those skilled in the art without departing from principles described herein. The foregoing description is of the best mode presently contemplated. This description is in no way meant to be limiting, but rather should be taken as illustrative of the general principles described herein. The scope of the disclosure should be determined with reference to the claims.
This application is a divisional of and claims the benefit of priority to U.S. patent application Ser. No. 15/271,102 filed Sep. 20, 2016 and entitled “MEMORY ACCESS PROTECTION APPARATUS AND METHODS FOR MEMORY MAPPED ACCESS BETWEEN INDEPENDENTLY OPERABLE PROCESSORS”, which claims the benefit of priority to U.S. Provisional Patent Application Ser. No. 62/316,326 filed Mar. 31, 2016 and entitled “MEMORY ACCESS PROTECTION APPARATUS AND METHODS”, each of the foregoing being incorporated herein by reference in its entirety. This application is related to commonly owned U.S. patent application Ser. No. 15/271,109 filed on Sep. 20, 2016 and entitled “MEMORY ACCESS PROTECTION APPARATUS AND METHODS FOR MEMORY MAPPED ACCESS BETWEEN INDEPENDENTLY OPERABLE PROCESSORS”, the contents of which are incorporated herein by reference in their entirety. This application is also related to commonly owned and co-pending U.S. patent application Ser. No. 14/879,024 entitled “METHODS AND APPARATUS FOR RUNNING AND BOOTING AN INTER-PROCESSOR COMMUNICATION LINK BETWEEN INDEPENDENTLY OPERABLE PROCESSORS”, filed Oct. 8, 2015, Ser. No. 14/879,027 entitled “METHODS AND APPARATUS FOR MANAGING POWER WITH AN INTER-PROCESSOR COMMUNICATION LINK BETWEEN INDEPENDENTLY OPERABLE PROCESSORS”, filed Oct. 8, 2015, Ser. No. 14/879,030 entitled “METHODS AND APPARATUS FOR RECOVERING ERRORS WITH AN INTER-PROCESSOR COMMUNICATION LINK BETWEEN INDEPENDENTLY OPERABLE PROCESSORS”, filed Oct. 8, 2015, each of the foregoing incorporated herein by reference in its entirety.
Number | Name | Date | Kind |
---|---|---|---|
4805137 | Grant et al. | Feb 1989 | A |
4949299 | Pickett | Aug 1990 | A |
4987529 | Craft et al. | Jan 1991 | A |
5367688 | Croll | Nov 1994 | A |
5467459 | Alexander et al. | Nov 1995 | A |
5485578 | Sweazey | Jan 1996 | A |
5613086 | Frey et al. | Mar 1997 | A |
5659542 | Bell et al. | Aug 1997 | A |
5708779 | Graziano et al. | Jan 1998 | A |
5731973 | Takaishi et al. | Mar 1998 | A |
5850395 | Hauser et al. | Dec 1998 | A |
5903564 | Ganmukhi et al. | May 1999 | A |
5943507 | Cornish et al. | Aug 1999 | A |
6008992 | Kawakami | Dec 1999 | A |
6212566 | Vanhoof et al. | Apr 2001 | B1 |
6216178 | Stracovsky et al. | Apr 2001 | B1 |
6233702 | Bunton et al. | May 2001 | B1 |
6260152 | Cole et al. | Jul 2001 | B1 |
6359863 | Varma et al. | Mar 2002 | B1 |
6411997 | Dawes et al. | Jun 2002 | B1 |
6434633 | Braun et al. | Aug 2002 | B1 |
6466898 | Chan | Oct 2002 | B1 |
6485081 | Bingle et al. | Nov 2002 | B1 |
6523073 | Kammer et al. | Feb 2003 | B1 |
6553446 | Miller | Apr 2003 | B1 |
6693895 | Crummey et al. | Feb 2004 | B1 |
6735642 | Kagan et al. | May 2004 | B2 |
6815873 | Johnson et al. | Nov 2004 | B2 |
6947442 | Sato et al. | Sep 2005 | B1 |
6948094 | Schultz et al. | Sep 2005 | B2 |
6973701 | Momoda et al. | Dec 2005 | B2 |
6990594 | Kim et al. | Jan 2006 | B2 |
7013536 | Golden et al. | Mar 2006 | B2 |
7032282 | Powell et al. | Apr 2006 | B2 |
7099949 | Vanhoof et al. | Aug 2006 | B1 |
7100020 | Brightman et al. | Aug 2006 | B1 |
7127600 | Zimmer et al. | Oct 2006 | B2 |
7159221 | Willen et al. | Jan 2007 | B1 |
7191240 | Johnson | Mar 2007 | B1 |
7281172 | Chujo | Oct 2007 | B2 |
7397774 | Holland et al. | Jul 2008 | B1 |
7398382 | Rothman et al. | Jul 2008 | B2 |
7506084 | Moerti et al. | Mar 2009 | B2 |
7509391 | Chauvel et al. | Mar 2009 | B1 |
7587575 | Moertl et al. | Sep 2009 | B2 |
7590817 | Moertl et al. | Sep 2009 | B2 |
7617377 | Moertl et al. | Nov 2009 | B2 |
7681012 | Verm et al. | Mar 2010 | B2 |
7685476 | Andre et al. | Mar 2010 | B2 |
7802256 | Havens et al. | Sep 2010 | B2 |
7813366 | Freimuth et al. | Oct 2010 | B2 |
7853731 | Zeng | Dec 2010 | B1 |
7864720 | Jeyaseelan | Jan 2011 | B2 |
7899941 | Hendry et al. | Mar 2011 | B2 |
7908335 | Citterelle et al. | Mar 2011 | B1 |
7941682 | Adams | May 2011 | B2 |
7957777 | Vu et al. | Jun 2011 | B1 |
8230248 | Dance et al. | Jul 2012 | B2 |
8255725 | Shimazaki et al. | Aug 2012 | B2 |
8310965 | Zhang et al. | Nov 2012 | B1 |
8352624 | Zimmerman et al. | Jan 2013 | B2 |
8359449 | Accapadi et al. | Jan 2013 | B2 |
8422404 | Taki | Apr 2013 | B2 |
8468285 | Kobayashi | Jun 2013 | B2 |
8555099 | Marinkovic et al. | Oct 2013 | B2 |
8600820 | Hoffman | Dec 2013 | B2 |
8635412 | Wilshire | Jan 2014 | B1 |
8656228 | Check et al. | Feb 2014 | B2 |
8756601 | Plondke et al. | Jun 2014 | B2 |
8769168 | Moertl et al. | Jul 2014 | B2 |
8788822 | Riddle | Jul 2014 | B1 |
8799537 | Zhu et al. | Aug 2014 | B1 |
8808091 | Shaw et al. | Aug 2014 | B2 |
8819386 | Mather | Aug 2014 | B1 |
8832331 | Co | Sep 2014 | B2 |
8848809 | Whitby-Strevens | Sep 2014 | B2 |
8876062 | Baghdasarian | Nov 2014 | B1 |
8914649 | So et al. | Dec 2014 | B2 |
9152580 | Chau et al. | Oct 2015 | B1 |
9170957 | Touzni et al. | Oct 2015 | B2 |
9280360 | Xu et al. | Mar 2016 | B2 |
9319090 | Whitby-Strevens | Apr 2016 | B2 |
9356844 | Kim et al. | May 2016 | B2 |
9544069 | Whitby-Strevens et al. | Jan 2017 | B2 |
9547535 | Wilt | Jan 2017 | B1 |
9568970 | Kaushal et al. | Feb 2017 | B1 |
9582448 | Saitou | Feb 2017 | B2 |
9594718 | Kaushik et al. | Mar 2017 | B2 |
9628211 | Stoler et al. | Apr 2017 | B1 |
9769756 | Cui et al. | Sep 2017 | B1 |
9830289 | Pulyala et al. | Nov 2017 | B2 |
9910475 | Kurts et al. | Mar 2018 | B2 |
9913305 | Pinheiro et al. | Mar 2018 | B2 |
9932757 | Hager et al. | Apr 2018 | B2 |
9946325 | Leucht-Roth et al. | Apr 2018 | B2 |
9959124 | Herbeck et al. | May 2018 | B1 |
10078361 | Sanghi et al. | Sep 2018 | B2 |
20020013868 | West | Jan 2002 | A1 |
20020044553 | Chakravorty | Apr 2002 | A1 |
20020065867 | Chauvel | May 2002 | A1 |
20020169938 | Scott et al. | Nov 2002 | A1 |
20020195177 | Hinkley et al. | Dec 2002 | A1 |
20030014607 | Slavin et al. | Jan 2003 | A1 |
20030086122 | Parry | May 2003 | A1 |
20030099221 | Rhee | May 2003 | A1 |
20030112758 | Pang et al. | Jun 2003 | A1 |
20030200413 | Gurumoorthy et al. | Oct 2003 | A1 |
20040044929 | Chujo | Mar 2004 | A1 |
20040064589 | Boucher et al. | Apr 2004 | A1 |
20040128568 | O'Shea | Jul 2004 | A1 |
20040179546 | McDaniel et al. | Sep 2004 | A1 |
20040201749 | Malloy | Oct 2004 | A1 |
20040221056 | Kobayashi | Nov 2004 | A1 |
20040228365 | Kobayashi | Nov 2004 | A1 |
20040268172 | Kates et al. | Dec 2004 | A1 |
20050033947 | Morris et al. | Feb 2005 | A1 |
20050047356 | Fujii et al. | Mar 2005 | A1 |
20050076196 | Zimmer et al. | Apr 2005 | A1 |
20050108385 | Wechter et al. | May 2005 | A1 |
20050114620 | Justen | May 2005 | A1 |
20050117601 | Anderson et al. | Jun 2005 | A1 |
20050149711 | Zimmer et al. | Jul 2005 | A1 |
20050157781 | Ho et al. | Jul 2005 | A1 |
20050198777 | Mabe | Sep 2005 | A1 |
20050285862 | Noda et al. | Dec 2005 | A1 |
20060039285 | Chapman et al. | Feb 2006 | A1 |
20060047989 | Delgado et al. | Mar 2006 | A1 |
20060075269 | Liong et al. | Apr 2006 | A1 |
20060107071 | Girish et al. | May 2006 | A1 |
20060186700 | Browne et al. | Aug 2006 | A1 |
20060186706 | Browne et al. | Aug 2006 | A1 |
20060218301 | O'Toole et al. | Sep 2006 | A1 |
20060232051 | Morris et al. | Oct 2006 | A1 |
20070005869 | Balraj et al. | Jan 2007 | A1 |
20070043901 | Wu et al. | Feb 2007 | A1 |
20070063540 | Browne et al. | Mar 2007 | A1 |
20070063541 | Browne et al. | Mar 2007 | A1 |
20070070997 | Weitz et al. | Mar 2007 | A1 |
20070080013 | Melz et al. | Apr 2007 | A1 |
20070118831 | Kondo | May 2007 | A1 |
20070180041 | Suzuoki | Aug 2007 | A1 |
20070201492 | Kobayashi | Aug 2007 | A1 |
20070226417 | Davis | Sep 2007 | A1 |
20070261307 | Alexander et al. | Nov 2007 | A1 |
20070286246 | Kobayashi et al. | Dec 2007 | A1 |
20080007081 | Shibata et al. | Jan 2008 | A1 |
20080010563 | Nishimura | Jan 2008 | A1 |
20080046689 | Chen et al. | Feb 2008 | A1 |
20080077816 | Ravichandran | Mar 2008 | A1 |
20080100079 | Herrera et al. | May 2008 | A1 |
20080100092 | Gao et al. | May 2008 | A1 |
20080120911 | Browne et al. | May 2008 | A1 |
20080183931 | Verm et al. | Jul 2008 | A1 |
20080218225 | Shibayama | Sep 2008 | A1 |
20080231711 | Glen et al. | Sep 2008 | A1 |
20080235355 | Spanier et al. | Sep 2008 | A1 |
20080244259 | Zimmer et al. | Oct 2008 | A1 |
20080301148 | Lee et al. | Dec 2008 | A1 |
20090024924 | Kim | Jan 2009 | A1 |
20090083560 | O'Connell et al. | Mar 2009 | A1 |
20090109230 | Miller et al. | Apr 2009 | A1 |
20090113141 | Bullman et al. | Apr 2009 | A1 |
20090133016 | Brown et al. | May 2009 | A1 |
20090138650 | Lin et al. | May 2009 | A1 |
20090177847 | Ceze et al. | Jul 2009 | A1 |
20090189442 | Chi | Jul 2009 | A1 |
20090225818 | Dapper et al. | Sep 2009 | A1 |
20090282050 | Thomas et al. | Nov 2009 | A1 |
20090282088 | Thomas et al. | Nov 2009 | A1 |
20090310618 | Carter | Dec 2009 | A1 |
20090322531 | Estevez et al. | Dec 2009 | A1 |
20100017655 | Gooding et al. | Jan 2010 | A1 |
20100027729 | Murphy et al. | Feb 2010 | A1 |
20100030932 | Ergas et al. | Feb 2010 | A1 |
20100082859 | Hendry et al. | Apr 2010 | A1 |
20100097931 | Mustafa | Apr 2010 | A1 |
20100098419 | Levy et al. | Apr 2010 | A1 |
20100161959 | Sood | Jun 2010 | A1 |
20100329319 | Dai et al. | Dec 2010 | A1 |
20110022859 | More et al. | Jan 2011 | A1 |
20110029696 | Uehara | Feb 2011 | A1 |
20110035575 | Kwon et al. | Feb 2011 | A1 |
20110052142 | Sultenfuss et al. | Mar 2011 | A1 |
20110083002 | Albers et al. | Apr 2011 | A1 |
20110219208 | Asaad et al. | Sep 2011 | A1 |
20110242425 | Zeng | Oct 2011 | A1 |
20110248865 | Hong et al. | Oct 2011 | A1 |
20110257983 | Rathonyi et al. | Oct 2011 | A1 |
20110276710 | Mighani et al. | Nov 2011 | A1 |
20110283031 | Lee | Nov 2011 | A1 |
20110310296 | Lee et al. | Dec 2011 | A1 |
20110320861 | Bayer et al. | Dec 2011 | A1 |
20120017063 | Hummel et al. | Jan 2012 | A1 |
20120066523 | Kobayashi | Mar 2012 | A1 |
20120072658 | Hashimoto et al. | Mar 2012 | A1 |
20120084483 | Sanjive | Apr 2012 | A1 |
20120084484 | Post et al. | Apr 2012 | A1 |
20120102307 | Wong | Apr 2012 | A1 |
20120120959 | Krause | May 2012 | A1 |
20120124252 | Kayama et al. | May 2012 | A1 |
20120159513 | Pakhunov et al. | Jun 2012 | A1 |
20120224640 | Sole et al. | Sep 2012 | A1 |
20120229076 | Zhu et al. | Sep 2012 | A1 |
20120306553 | Kim et al. | Dec 2012 | A1 |
20130050216 | Whitby-Strevens et al. | Feb 2013 | A1 |
20130057567 | Frank et al. | Mar 2013 | A1 |
20130091772 | Berger et al. | Apr 2013 | A1 |
20130124895 | Saha et al. | May 2013 | A1 |
20130138840 | Kegel et al. | May 2013 | A1 |
20130162911 | Glen | Jun 2013 | A1 |
20130173950 | Banerjea | Jul 2013 | A1 |
20130188544 | Tiwari et al. | Jul 2013 | A1 |
20130290947 | Li | Oct 2013 | A1 |
20140033220 | Campbell et al. | Jan 2014 | A1 |
20140052976 | Marino et al. | Feb 2014 | A1 |
20140082242 | Murphy et al. | Mar 2014 | A1 |
20140122828 | Kagan et al. | May 2014 | A1 |
20140173236 | Kegel | Jun 2014 | A1 |
20140189057 | Sankoda et al. | Jul 2014 | A1 |
20140211894 | Yang et al. | Jul 2014 | A1 |
20140215236 | Heinrich et al. | Jul 2014 | A1 |
20140244866 | Manula et al. | Aug 2014 | A1 |
20140247983 | MacInnis et al. | Sep 2014 | A1 |
20140372656 | Sakurai et al. | Dec 2014 | A1 |
20150036051 | Broberg et al. | Feb 2015 | A1 |
20150189109 | Whitby-Strevens | Jul 2015 | A1 |
20150205749 | Whitby-Strevens et al. | Jul 2015 | A1 |
20150212806 | Hsieh | Jul 2015 | A1 |
20150293873 | Shao et al. | Oct 2015 | A1 |
20150293875 | Sala et al. | Oct 2015 | A1 |
20150309650 | Ahmed et al. | Oct 2015 | A1 |
20150309940 | Kumar et al. | Oct 2015 | A1 |
20150378737 | Debbage et al. | Dec 2015 | A1 |
20160034195 | Li et al. | Feb 2016 | A1 |
20160041852 | Suarez et al. | Feb 2016 | A1 |
20160070323 | Patil et al. | Mar 2016 | A1 |
20160077989 | Pulyala et al. | Mar 2016 | A1 |
20160091959 | Barak et al. | Mar 2016 | A1 |
20160103480 | Sanghi et al. | Apr 2016 | A1 |
20160103689 | Sanghi et al. | Apr 2016 | A1 |
20160103743 | Sanghi et al. | Apr 2016 | A1 |
20160142988 | Powell et al. | May 2016 | A1 |
20160179157 | Ardanaz et al. | Jun 2016 | A1 |
20160191400 | Sreeramoju | Jun 2016 | A1 |
20160208539 | Hofmann et al. | Jul 2016 | A1 |
20160224097 | Hirouchi | Aug 2016 | A1 |
20160224442 | Sanghi et al. | Aug 2016 | A1 |
20160266633 | Rabii | Sep 2016 | A1 |
20160269991 | Van et al. | Sep 2016 | A1 |
20160299860 | Harriman | Oct 2016 | A1 |
20160363955 | Stevens et al. | Dec 2016 | A1 |
20160364350 | Sanghi et al. | Dec 2016 | A1 |
20170026975 | Maric et al. | Jan 2017 | A1 |
20170089641 | Humfeld et al. | Mar 2017 | A1 |
20170108912 | Li et al. | Apr 2017 | A1 |
20170177222 | Singh et al. | Jun 2017 | A1 |
20170222943 | Yao et al. | Aug 2017 | A1 |
20170228481 | Pusuluri et al. | Aug 2017 | A1 |
20170249098 | Petkov et al. | Aug 2017 | A1 |
20170249164 | Petkov et al. | Aug 2017 | A1 |
20170269675 | Klacar et al. | Sep 2017 | A1 |
20170286300 | Doshi et al. | Oct 2017 | A1 |
20170286322 | Garg et al. | Oct 2017 | A1 |
20170286323 | Garg et al. | Oct 2017 | A1 |
20170325124 | Mitra | Nov 2017 | A1 |
20180074572 | Bauman et al. | Mar 2018 | A1 |
20180101498 | Cosby et al. | Apr 2018 | A1 |
20180129261 | Garg et al. | May 2018 | A1 |
20180129269 | Garg et al. | May 2018 | A1 |
20180129270 | Garg et al. | May 2018 | A1 |
20180160155 | Iguchi et al. | Jun 2018 | A1 |
20180162770 | Hawtof et al. | Jun 2018 | A1 |
20180225251 | Sthoeger et al. | Aug 2018 | A1 |
20180367460 | Gao et al. | Dec 2018 | A1 |
20190073011 | Paterson et al. | Mar 2019 | A1 |
Number | Date | Country |
---|---|---|
3013008 | Apr 2016 | EP |
H02306082 | Dec 1990 | JP |
H03169996 | Jul 1991 | JP |
2004086792 | Mar 2004 | JP |
2012108677 | Jun 2012 | JP |
2013246642 | Dec 2013 | JP |
2015001867 | Jan 2015 | JP |
20150041072 | Apr 2015 | KR |
20150079788 | Jul 2015 | KR |
WO-2008070138 | Jun 2008 | WO |
Entry |
---|
ECN L1 PM Substates with CLKREQ approved Aug. 23, 2012. |
Jackson, “PCI Express Technology”, Sep. 2012 (Sep. 2012), MindShare Press, XP002777351, pp. 49,86,87,712-723. |
PCI Express base Specification Revision 3.0, published Nov. 10, 2010. |
PCI Express Base Specification Revision 3.1, published Oct. 8, 2014. |
Universal Serial Bus, Communication Class, Subclass Specifications for Network Control Model (NCM) Devices; Revision 1.0 (Errata 1), Nov. 24, 2010, published by USB Implementers Forum, Inc. |
Example of System Topology, Principle and System Structure of PCI, PCI-X and PCI Express, Mingjin Ma, Apr. 30, 2007. |
Number | Date | Country | |
---|---|---|---|
20190155757 A1 | May 2019 | US |
Number | Date | Country | |
---|---|---|---|
62316326 | Mar 2016 | US |
Number | Date | Country | |
---|---|---|---|
Parent | 15271102 | Sep 2016 | US |
Child | 16259543 | US |