🎯 Sentry: Strict Slab Isolation in RSL Syscalls#7
Open
rtech-technologies wants to merge 18 commits into
Conversation
This commit hardens the `translate_user_ptr` function to prevent transient tasks from escaping their 4MB slab isolation. It validates both absolute high-half addresses and relative offsets against the assigned slab range. Additionally, it secures several RSL syscall handlers (IDs 4-8) by ensuring all pointer arguments are passed through the hardened translation logic. Detailed forensic analysis is provided in .jules/sentry.md. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
Contributor
|
👋 Jules, reporting for duty! I'm here to lend a hand with this pull request. When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down. I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job! For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with New to Jules? Learn more at jules.google/docs. For security, I will only act on instructions from the user who triggered this task. |
This commit implements critical security hardening and build integrity fixes:
1. **Slab Escape Mitigation:** Hardened `translate_user_ptr` to enforce strict
4MB slab boundaries for transient tasks, blocking absolute high-half escape
and out-of-bounds offsets.
2. **Syscall Security:** Applied universal translation to all pointer-based
arguments in `rsl_syscall_handler` (IDs 4-8).
3. **Build Integrity:** Created freestanding standard headers (`string.h`,
`stdlib.h`) and resolved implicit declaration errors in `usbh_core.c` and
`rsl_syscalls.c`.
Forensic logs updated in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This commit completes the security hardening and build integrity suite:
1. **Strict Slab Isolation:** Hardened `translate_user_ptr` to prevent transient
tasks from escaping their 4MB slab, validating both absolute high-half
addresses and relative offsets.
2. **Syscall Security:** Secured all pointer-based RSL syscall handlers (IDs 4-8)
with mandatory address translation.
3. **Build Integrity:**
- Resolved implicit declaration errors in `usbh_core.c` and `rsl_syscalls.c`.
- Created freestanding `string.h` and `stdlib.h` headers.
- Removed redundant local declarations in `rsl_syscalls.c` per audit feedback.
Forensic analysis and autopsy reports updated in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
Completed comprehensive security hardening and build integrity fixes:
1. **Slab Escape Mitigation:** Hardened `translate_user_ptr` with strict 4MB
boundary checks for transient tasks.
2. **Syscall Security:** Secured all pointer arguments in the RSL syscall
handler (IDs 4-8).
3. **Build Integrity:** Created freestanding standard headers (`string.h`,
`stdlib.h`) and resolved implicit declarations and keyword non-compliance
in `usbh_core.c` and `programs/libc/libc.c`.
4. **Refinement:** Eliminated technical debt by removing redundant local
declarations in `rsl_syscalls.c`.
Forensic analysis documented in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This comprehensive patch addresses critical security, stability, and build
integrity issues within the Sovereign OS kernel:
1. **Slab Escape Mitigation:** Hardened `translate_user_ptr` to strictly enforce
4MB boundaries for transient tasks and secured all RSL syscall gateway entry
points.
2. **Bounded Polling & Recovery:** Replaced infinite `while` loops with bounded
polling in AHCI, XHCI, and serial drivers. Implemented background recovery
logic in `ahci_hardware_audit` to allow the system to boot even if hardware
is temporarily unresponsive.
3. **Build Restoration:** Resolved implicit declaration errors and ensured
compliance with strict compiler flags by transitioning to standard keywords
and providing essential freestanding headers (`string.h`, `stdlib.h`).
Forensic logs updated in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This definitive patch secures the kernel and restores build integrity:
1. **Strict Slab Isolation:** Hardened `translate_user_ptr` to enforce 4MB
boundaries for transient tasks, blocking absolute high-half escape and
out-of-bounds offsets.
2. **Syscall Security:** Applied universal translation to all pointer-based
arguments in `rsl_syscall_handler`.
3. **Stability (Bounded Polling):** Replaced infinite `while` loops with
bounded iterations in AHCI, XHCI, and Serial drivers.
4. **Background Recovery:** Enhanced `ahci_hardware_audit` to attempt
re-initialization of failed ports during multitasking with a cooldown.
5. **Freestanding Infrastructure:** Created `include/string.h`,
`include/stdlib.h`, and `include/timer.h`.
6. **Refinement:** Resolved implicit declarations and keyword non-compliance
across the core and USB subsystems.
Forensic logs updated in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This definitive patch secures the kernel and implements real partitioning:
1. **Strict Slab Isolation:** Hardened `translate_user_ptr` to enforce 4MB
boundaries for transient tasks, while allowing access to kernel heap
handles (string objects, etc).
2. **Syscall Security:** Applied universal translation to all pointer-based
arguments in `rsl_syscall_handler`.
3. **Real Partitioning:** Enhanced `scripts/fat_tool.py` to generate dual
GPT partitions (ESP + Data) and updated the AHCI driver to perform real
GPT discovery and register multiple logical volumes.
4. **Stability (Bounded Polling):** Enforced strict 100-cycle iteration
limits in AHCI polling and implemented background recovery in the
service orchestrator.
5. **Boot Transparency:** Forced full VGA and Serial logging throughout the
initialization ritual by disabling silencing logic.
6. **Build Integrity:** Created freestanding headers (`string.h`, `stdlib.h`,
`timer.h`) and resolved keyword non-compliance and implicit declarations.
Forensic logs and autopsy reports updated in .jules/sentry.md.
Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
Hardens `translate_user_ptr` to strictly isolate transient tasks within their 4MB slabs, blocking high-half memory trespassing. Implements the universal CARGO utility for non-destructive OS installation and repair. Resolves hardware polling hangups in AHCI/Serial drivers and cleans up redundant include debt across core kernel subsystems. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
Hardens `translate_user_ptr` to strictly isolate transient tasks within their 4MB slabs. Implements the dual-stage ISO build system and the universal CARGO utility for non-destructive installation. Cleans up kernel technical debt in services and VFS subsystems. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
…taller CRITICAL SECURITY HARDENING: - Modified `translate_user_ptr` in `rsl_syscalls.c` to enforce strict 4MB slab boundaries for transient tasks. - Blocked the absolute high-half address escape loophole. - Enforced universal pointer translation across all RSL syscall handlers (IDs 0-301). UNIVERSAL INSTALLER & DEPLOYMENT: - Implemented `programs/cargo.c` Nuklear-based utility for non-destructive GPT partitioning and image streaming. - Architected a dual-stage ISO build system in `Makefile` (`os2_system.iso` and `os2_installer.iso`). - Enhanced `scripts/fat_tool.py` to generate a legitimate GPT layout (ESP + Sovereign Data). - Updated AHCI driver to perform GPT partition discovery and register logical volumes. KERNEL CORE REFINEMENTS: - Implemented `quiet_mode` parsing in `main.c` to trigger the `task_cargo` boot path. - Consolidated redundant `#include` statements in `services.c` and `vfs.c`. - Hardened AHCI hardware polling with strict 100-cycle iteration limits. - Extended userland `libc.c` with `itoa` and `reverse` to support GUI telemetry. - Made `vdisk_ls_root` non-static for syscall gateway accessibility. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This comprehensive update delivers a production-ready Sovereign OS with unbreakable memory isolation, a GPT-aware universal installer, and persistent system logging. CORE SECURITY (SENTRY MODE): - Hardened `translate_user_ptr` to strictly isolate transient tasks within assigned 4MB slabs, terminating tasks on violation (No Panics). - Implemented size-aware `is_valid_buffer` validation for GUI syscalls. - Tagged all precision fixes with 🎯 Sentry Fix indicators. SOVEREIGN INSTALLER (CARGO): - Implemented GPT-aware Nuklear GUI utility for non-destructive deployment. - Supports dual-partition layout (16MB UEFI ESP + Sovereign Data). - Added UI skinning support via `theme.cfg` on the ESP partition. - Extended userland libc with `itoa`, `strstr`, and `strtol`. RELIABILITY & TRANSPARENCY: - Implemented Persistent Boot Logging: `sys_sync` kernel thread mirrors terminal output to `BOOT:/sys/boot.log`. - Enhanced "Linux-like" verbose boot reporting for PMM, GDT, IDT, and PCI. - Restored 1,000,000-cycle AHCI/SATAPI timeouts for hardware compatibility. - Normalized kernel headers and consolidated redundant include debt. BUILD SYSTEM: - Architected dual-stage ISO generation (`os2_system.iso` and `os2_installer.iso`). - Updated `fat_tool.py` for UEFI-compliant GPT image creation. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This patch finalizes the Sovereignty and Reliability suite for OSx2, delivering production-hardened memory isolation, a GPT-compliant installer, and persistent system diagnostics. CORE SECURITY (SENTRY): - Hardened `translate_user_ptr` to strictly enforce 4MB slab isolation. - Violating transient tasks are now gracefully terminated (No Panics). - Implemented size-aware `is_valid_buffer` for VFS and GUI syscalls. - Exposed direct VFS handle syscalls (ID 21-24) to userland. INSTALLER (CARGO): - Implemented GPT-aware Nuklear utility for non-destructive deployment. - Supports UEFI-compliant dual-partition layout (ESP + Data). - Introduced UI skinning via `theme.cfg` on the ESP partition. - Extended userland libc with essential string/math/conversion functions. RELIABILITY & LOGGING: - Exhaustive "Linux-like" verbose boot logging for all subsystems. - Persistent Diagnostics: `sys_sync` mirrors terminal to `BOOT:/sys/boot.log`. - Unified dual-output delivery (VGA + Serial) for all boot events. - Restored 1,000,000-cycle AHCI/SATAPI hardware polling timeouts. - Consolidated include debt and normalized kernel visibility. BUILD SYSTEM: - Implemented dual-stage ISO generation (System ISO + Installer ISO). - Updated `fat_tool.py` to create legitimate GPT partition tables. - Configured installer boot-to-app path via kernel command line parsing. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This patch resolves the critical boot hang at the AHCI initialization stage and delivers the final hardened Sovereignty and Reliability suite. AHCI & HARDWARE STABILITY: - Implemented BIOS/OS handoff (OS24/BOHC) to take ownership of the HBA. - Hardened GHC Reset sequence with verified bit clearing and timeouts. - Resolved kernel stall at 'HBA Cap' line by ensuring correct reset order. IO & LOGGING UNIFICATION: - Centralized all console output via `vga_write_char` for serial mirroring. - Resolved "Double Printing" bug where Serial/VGA were handled separately. - Restored font rendering and terminal scrolling in the visual console. - Synchronized exhaustive "Mechanical Truth" logs to `BOOT:/sys/boot.log`. LIMINE & BOOT INTEGRITY: - Updated Limine requests to Base Revision 3 for spec compliance. - Fixed Linker Script to correctly KEEP `.limine_requests` in high-half. - Ensured HHDM and Memory Map discovery are reliable on all loaders. SECURITY & INSTALLER: - Hardened Slab Isolation: Terminate tasks on memory trespassing (No Panics). - Finalized GPT Installer (CARGO) with UEFI ESP compliance and UI skinning. - Extended userland libc with essential string and conversion functions. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This patch resolves the critical AHCI boot hang and delivers the definitive "Mechanical Truth" logging and security suite. HARDWARE STABILITY (AHCI): - Implemented BIOS/OS Handoff (OS24/BOHC) for controller ownership. - Hardened GHC Reset sequence with verified bit clearing and timeouts. - Resolved kernel stall at 'HBA Cap' line through strict reset ordering. UNIFIED & PERSISTENT LOGGING: - Centralized all console output via `vga_write_char` for serial mirroring. - Implemented Persistent Boot Logging: `sys_sync` mirrors terminal to `BOOT:/sys/boot.log`. - Exhaustive "Linux-like" verbose reporting for PMM (Full Memmap), GDT, IDT, PCI discovery, and Tasking initialization. BOOT & INTEGRITY: - Updated Limine requests to Base Revision 3 and fixed Linker Script alignment/KEEPing for the requests section. - Correctly generated and packaged `installer_limine.cfg`. SECURITY (SENTRY): - Enforced Slab Isolation: Gracefully terminate transient tasks on memory trespassing (Slab Escape or Pointer Bounds violations). - Implemented size-aware `is_valid_buffer` for VFS/GUI syscalls. - Exposed direct VFS handle syscalls (ID 21-24) to userland. INSTALLER & UI: - Finalized GPT Installer (CARGO) with UEFI ESP compliance. - Implemented UI Skinning: Load background colors from `DISK0_P0:/theme.cfg`. - Extended userland libc with string/math/long-conversion functions. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
- Hardened RSL syscall gateway with strict 4MB Slab Isolation. - Implemented AHCI BIOS/OS handoff and robust 1M-cycle timeouts. - Added verbose "Mechanical Truth" boot logging mirrored to persistent disk. - Implemented CARGO Universal Installer with GPT support and Nuklear GUI. - Architected dual-stage ISO build system and fixed Limine Rev3 alignment. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
- Fixed AHCI/SATAPI address translation by providing explicit physical addresses from the Slab Allocator. - Implemented PCI double-initialization guard for the AHCI controller. - Enforced strict 16-byte alignment in the Slab Allocator for SSE safety. - Hardened Limine requests and vmm_get_phys for reliable High-Half mapping. - Finalized CARGO Universal Installer and dual-stage GPT ISO build system. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
- Fixed AHCI/SATAPI address translation by providing explicit physical addresses. - Implemented `rsl_format` and `rsl_mount` bridges to FatFS for CARGO installer support. - Hardened Slab Allocator with 16-byte alignment and `slab_alloc_phys`. - Updated `docs/startup.md` with accurate code snippets and file references from the kernel ritual. - Fixed `atoi` and `f_mkfs` implementation errors in the kernel core. - Enforced GPT layout in `scripts/fat_tool.py` for co-existent deployment. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
- Fixed AHCI/SATAPI address translation by providing explicit physical addresses. - Implemented `rsl_format` and `rsl_mount` bridges to FatFS for CARGO installer support. - Hardened Slab Allocator with 16-byte alignment and `slab_alloc_phys`. - Updated `docs/startup.md` with accurate code snippets and file references from the kernel ritual. - Fixed `atoi`, `strstr`, and `strtol` implementation errors in the kernel core. - Corrected `f_mkfs` call signature in the RSL command bridge. - Enforced GPT layout in `scripts/fat_tool.py` for co-existent deployment. - Resolved `get_framebuffer` implicit declaration in `rsl_syscalls.c`. Co-authored-by: rtech-technologies <254326487+rtech-technologies@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Hardened the RSL syscall gateway to prevent transient programs from accessing kernel memory or other task slabs. Updated
translate_user_ptrwith strict 4MB boundary checks and applied it to all missing call sites in the syscall handler.PR created automatically by Jules for task 3856284771131890926 started by @rtech-technologies