1 ------------------------------------------------------------------------------
3 -- GNAT COMPILER COMPONENTS --
5 -- S Y S T E M . R I D E N T --
9 -- Copyright (C) 1992-2017, Free Software Foundation, Inc. --
11 -- GNAT is free software; you can redistribute it and/or modify it under --
12 -- terms of the GNU General Public License as published by the Free Soft- --
13 -- ware Foundation; either version 3, or (at your option) any later ver- --
14 -- sion. GNAT is distributed in the hope that it will be useful, but WITH- --
15 -- OUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY --
16 -- or FITNESS FOR A PARTICULAR PURPOSE. --
18 -- As a special exception under Section 7 of GPL version 3, you are granted --
19 -- additional permissions described in the GCC Runtime Library Exception, --
20 -- version 3.1, as published by the Free Software Foundation. --
22 -- You should have received a copy of the GNU General Public License and --
23 -- a copy of the GCC Runtime Library Exception along with this program; --
24 -- see the files COPYING3 and COPYING.RUNTIME respectively. If not, see --
25 -- <http://www.gnu.org/licenses/>. --
27 -- GNAT was originally developed by the GNAT team at New York University. --
28 -- Extensive contributions were provided by Ada Core Technologies Inc. --
30 ------------------------------------------------------------------------------
32 -- This package defines the set of restriction identifiers. It is a generic
33 -- package that is instantiated by the compiler/binder in package Rident, and
34 -- is instantiated in package System.Restrictions for use at run-time.
36 -- The reason that we make this a generic package is so that in the case of
37 -- the instantiation in Rident for use at compile time and bind time, we can
38 -- generate normal image tables for the enumeration types, which are needed
39 -- for diagnostic and informational messages. At run-time we really do not
40 -- want to waste the space for these image tables, and they are not needed,
41 -- so we can do the instantiation under control of Discard_Names to remove
44 ---------------------------------------------------
45 -- Note On Compile/Run-Time Consistency Checking --
46 ---------------------------------------------------
48 -- This unit is with'ed by the run-time (to make System.Restrictions which is
49 -- used for run-time access to restriction information), by the compiler (to
50 -- determine what restrictions are implemented and what their category is) and
51 -- by the binder (in processing ali files, and generating the information used
52 -- at run-time to access restriction information).
54 -- Normally the version of System.Rident referenced in all three contexts
55 -- should be the same. However, problems could arise in certain inconsistent
56 -- builds that used inconsistent versions of the compiler and run-time. This
57 -- sort of thing is not strictly correct, but it does arise when short-cuts
58 -- are taken in build procedures.
60 -- Previously, this kind of inconsistency could cause a significant problem.
61 -- If versions of System.Rident accessed by the compiler and binder differed,
62 -- then the binder could fail to recognize the R (restrictions line) in the
63 -- ali file, leading to bind errors when restrictions were added or removed.
65 -- The latest implementation avoids both this problem by using a named
66 -- scheme for recording restrictions, rather than a positional scheme which
67 -- fails completely if restrictions are added or subtracted. Now the worst
68 -- that happens at bind time in inconsistent builds is that unrecognized
69 -- restrictions are ignored, and the consistency checking for restrictions
70 -- might be incomplete, which is no big deal.
72 pragma Compiler_Unit_Warning
;
75 package System
.Rident
is
78 -- The following enumeration type defines the set of restriction
79 -- identifiers that are implemented in GNAT.
81 -- To add a new restriction identifier, add an entry with the name to be
82 -- used in the pragma, and add calls to the Restrict.Check_Restriction
83 -- routine as appropriate.
85 type Restriction_Id
is
87 -- The following cases are checked for consistency in the binder. The
88 -- binder will check that every unit either has the restriction set, or
89 -- does not violate the restriction.
91 (Simple_Barriers
, -- Ada 2012 (D.7 (10.9/3))
92 Pure_Barriers
, -- GNAT
93 No_Abort_Statements
, -- (RM D.7(5), H.4(3))
94 No_Access_Parameter_Allocators
, -- Ada 2012 (RM H.4 (8.3/3))
95 No_Access_Subprograms
, -- (RM H.4(17))
96 No_Allocators
, -- (RM H.4(7))
97 No_Anonymous_Allocators
, -- Ada 2012 (RM H.4(8/1))
98 No_Asynchronous_Control
, -- (RM J.13(3/2)
100 No_Coextensions
, -- Ada 2012 (RM H.4(8.2/3))
101 No_Default_Stream_Attributes
, -- Ada 2012 (RM 13.12.1(4/2))
102 No_Delay
, -- (RM H.4(21))
103 No_Direct_Boolean_Operators
, -- GNAT
104 No_Dispatch
, -- (RM H.4(19))
105 No_Dispatching_Calls
, -- GNAT
106 No_Dynamic_Attachment
, -- Ada 2012 (RM E.7(10/3))
107 No_Dynamic_Priorities
, -- (RM D.9(9))
108 No_Enumeration_Maps
, -- GNAT
109 No_Entry_Calls_In_Elaboration_Code
, -- GNAT
110 No_Entry_Queue
, -- GNAT (Ravenscar)
111 No_Exception_Handlers
, -- GNAT
112 No_Exception_Propagation
, -- GNAT
113 No_Exception_Registration
, -- GNAT
114 No_Exceptions
, -- (RM H.4(12))
115 No_Finalization
, -- GNAT
117 No_Fixed_Point
, -- (RM H.4(15))
118 No_Floating_Point
, -- (RM H.4(14))
119 No_IO
, -- (RM H.4(20))
120 No_Implicit_Conditionals
, -- GNAT
121 No_Implicit_Dynamic_Code
, -- GNAT
122 No_Implicit_Heap_Allocations
, -- (RM D.8(8), H.4(3))
123 No_Implicit_Task_Allocations
, -- GNAT
124 No_Implicit_Protected_Object_Allocations
, -- GNAT
125 No_Initialize_Scalars
, -- GNAT
126 No_Local_Allocators
, -- (RM H.4(8))
127 No_Local_Timing_Events
, -- (RM D.7(10.2/2))
128 No_Local_Protected_Objects
, -- Ada 2012 (D.7(10/1.3))
129 No_Long_Long_Integers
, -- GNAT
130 No_Multiple_Elaboration
, -- GNAT
131 No_Nested_Finalization
, -- (RM D.7(4))
132 No_Protected_Type_Allocators
, -- Ada 2012 (D.7 (10.3/2))
133 No_Protected_Types
, -- (RM H.4(5))
134 No_Recursion
, -- (RM H.4(22))
135 No_Reentrancy
, -- (RM H.4(23))
136 No_Relative_Delay
, -- Ada 2012 (D.7 (10.5/3))
137 No_Requeue_Statements
, -- Ada 2012 (D.7 (10.6/3))
138 No_Secondary_Stack
, -- GNAT
139 No_Select_Statements
, -- Ada 2012 (D.7 (10.7/4))
140 No_Specific_Termination_Handlers
, -- (RM D.7(10.7/2))
141 No_Standard_Allocators_After_Elaboration
, -- Ada 2012 (RM D.7(19.1/2))
142 No_Standard_Storage_Pools
, -- GNAT
143 No_Stream_Optimizations
, -- GNAT
145 No_Task_Allocators
, -- (RM D.7(7))
146 No_Task_Attributes_Package
, -- GNAT
147 No_Task_At_Interrupt_Priority
, -- GNAT
148 No_Task_Hierarchy
, -- (RM D.7(3), H.4(3))
149 No_Task_Termination
, -- GNAT (Ravenscar)
151 No_Terminate_Alternatives
, -- (RM D.7(6))
152 No_Unchecked_Access
, -- (RM H.4(18))
153 No_Unchecked_Conversion
, -- (RM J.13(4/2))
154 No_Unchecked_Deallocation
, -- (RM J.13(5/2))
155 Static_Priorities
, -- GNAT
156 Static_Storage_Size
, -- GNAT
158 -- The following require consistency checking with special rules. See
159 -- individual routines in unit Bcheck for details of what is required.
161 No_Default_Initialization
, -- GNAT
163 -- The following cases do not require consistency checking and if used
164 -- as a configuration pragma within a specific unit, apply only to that
165 -- unit (e.g. if used in the package spec, do not apply to the body)
167 -- Note: No_Elaboration_Code is handled specially. Like the other
168 -- non-partition-wide restrictions, it can only be set in a unit that
169 -- is part of the extended main source unit (body/spec/subunits). But
170 -- it is sticky, in that if it is found anywhere within any of these
171 -- units, it applies to all units in this extended main source.
173 Immediate_Reclamation
, -- (RM H.4(10))
174 No_Dynamic_Sized_Objects
, -- GNAT
175 No_Implementation_Aspect_Specifications
, -- Ada 2012 AI-241
176 No_Implementation_Attributes
, -- Ada 2005 AI-257
177 No_Implementation_Identifiers
, -- Ada 2012 AI-246
178 No_Implementation_Pragmas
, -- Ada 2005 AI-257
179 No_Implementation_Restrictions
, -- GNAT
180 No_Implementation_Units
, -- Ada 2012 AI-242
181 No_Implicit_Aliasing
, -- GNAT
182 No_Implicit_Loops
, -- GNAT
183 No_Elaboration_Code
, -- GNAT
184 No_Obsolescent_Features
, -- Ada 2005 AI-368
185 No_Wide_Characters
, -- GNAT
186 Static_Dispatch_Tables
, -- GNAT
189 -- The following cases require a parameter value
191 No_Specification_Of_Aspect
, -- 2012 (RM 13.12.1 (6.1/3))
192 No_Use_Of_Attribute
, -- 2012 (RM 13.12.1 (6.2/3))
193 No_Use_Of_Pragma
, -- 2012 (RM 13.12.1 (6.3/3))
195 -- The following entries are fully checked at compile/bind time, which
196 -- means that the compiler can in general tell the minimum value which
197 -- could be used with a restrictions pragma. The binder can deduce the
198 -- appropriate minimum value for the partition by taking the maximum
199 -- value required by any unit.
201 Max_Protected_Entries
, -- (RM D.7(14))
202 Max_Select_Alternatives
, -- (RM D.7(12))
203 Max_Task_Entries
, -- (RM D.7(13), H.4(3))
205 -- The following entries are also fully checked at compile/bind time,
206 -- and the compiler can also at least in some cases tell the minimum
207 -- value which could be used with a restriction pragma. The difference
208 -- is that the contributions are additive, so the binder deduces this
209 -- value by adding the unit contributions.
211 Max_Tasks
, -- (RM D.7(19), H.4(3))
213 -- The following entries are checked at compile time only for zero/
214 -- nonzero entries. This means that the compiler can tell at compile
215 -- time if a restriction value of zero is (would be) violated, but that
216 -- the compiler cannot distinguish between different non-zero values.
218 Max_Asynchronous_Select_Nesting
, -- (RM D.7(18), H.4(3))
219 Max_Entry_Queue_Length
, -- Ada 2012 (RM D.7 (19.1/2))
221 -- The remaining entries are not checked at compile/bind time
223 Max_Storage_At_Blocking
, -- (RM D.7(17))
225 Not_A_Restriction_Id
);
227 -- Synonyms permitted for historical purposes of compatibility.
228 -- Must be coordinated with Restrict.Process_Restriction_Synonym.
230 Boolean_Entry_Barriers
: Restriction_Id
renames Simple_Barriers
;
231 Max_Entry_Queue_Depth
: Restriction_Id
renames Max_Entry_Queue_Length
;
232 No_Dynamic_Interrupts
: Restriction_Id
renames No_Dynamic_Attachment
;
233 No_Requeue
: Restriction_Id
renames No_Requeue_Statements
;
234 No_Task_Attributes
: Restriction_Id
renames No_Task_Attributes_Package
;
235 SPARK
: Restriction_Id
renames SPARK_05
;
237 subtype All_Restrictions
is Restriction_Id
range
238 Simple_Barriers
.. Max_Storage_At_Blocking
;
239 -- All restrictions (excluding only Not_A_Restriction_Id)
241 subtype All_Boolean_Restrictions
is Restriction_Id
range
242 Simple_Barriers
.. SPARK_05
;
243 -- All restrictions which do not take a parameter
245 subtype Partition_Boolean_Restrictions
is All_Boolean_Restrictions
range
246 Simple_Barriers
.. Static_Storage_Size
;
247 -- Boolean restrictions that are checked for partition consistency.
248 -- Note that all parameter restrictions are checked for partition
249 -- consistency by default, so this distinction is only needed in the
250 -- case of Boolean restrictions.
252 subtype Cunit_Boolean_Restrictions
is All_Boolean_Restrictions
range
253 Immediate_Reclamation
.. SPARK_05
;
254 -- Boolean restrictions that are not checked for partition consistency
255 -- and that thus apply only to the current unit. Note that for these
256 -- restrictions, the compiler does not apply restrictions found in
257 -- with'ed units, parent specs etc. to the main unit, and vice versa.
259 subtype All_Parameter_Restrictions
is
261 No_Specification_Of_Aspect
.. Max_Storage_At_Blocking
;
262 -- All restrictions that take a parameter
264 subtype Integer_Parameter_Restrictions
is
266 Max_Protected_Entries
.. Max_Storage_At_Blocking
;
267 -- All restrictions taking an integer parameter
269 subtype Checked_Parameter_Restrictions
is
270 All_Parameter_Restrictions
range
271 Max_Protected_Entries
.. Max_Entry_Queue_Length
;
272 -- These are the parameter restrictions that can be at least partially
273 -- checked at compile/binder time. Minimally, the compiler can detect
274 -- violations of a restriction pragma with a value of zero reliably.
276 subtype Checked_Max_Parameter_Restrictions
is
277 Checked_Parameter_Restrictions
range
278 Max_Protected_Entries
.. Max_Task_Entries
;
279 -- Restrictions with parameters that can be checked in some cases by
280 -- maximizing among statically detected instances where the compiler
281 -- can determine the count.
283 subtype Checked_Add_Parameter_Restrictions
is
284 Checked_Parameter_Restrictions
range
285 Max_Tasks
.. Max_Tasks
;
286 -- Restrictions with parameters that can be checked in some cases by
287 -- summing the statically detected instances where the compiler can
288 -- determine the count.
290 subtype Checked_Val_Parameter_Restrictions
is
291 Checked_Parameter_Restrictions
range
292 Max_Protected_Entries
.. Max_Tasks
;
293 -- Restrictions with parameter where the count is known at least in some
294 -- cases by the compiler/binder.
296 subtype Checked_Zero_Parameter_Restrictions
is
297 Checked_Parameter_Restrictions
range
298 Max_Asynchronous_Select_Nesting
.. Max_Entry_Queue_Length
;
299 -- Restrictions with parameters where the compiler can detect the use of
300 -- the feature, and hence violations of a restriction specifying a value
301 -- of zero, but cannot detect specific values other than zero/nonzero.
303 subtype Unchecked_Parameter_Restrictions
is
304 All_Parameter_Restrictions
range
305 Max_Storage_At_Blocking
.. Max_Storage_At_Blocking
;
306 -- Restrictions with parameters where the compiler cannot ever detect
307 -- corresponding compile time usage, so the binder and compiler never
308 -- detect violations of any restriction.
310 -------------------------------------
311 -- Restriction Status Declarations --
312 -------------------------------------
314 -- The following declarations are used to record the current status or
315 -- restrictions (for the current unit, or related units, at compile time,
316 -- and for all units in a partition at bind time or run time).
318 type Restriction_Flags
is array (All_Restrictions
) of Boolean;
319 type Restriction_Values
is array (All_Parameter_Restrictions
) of Natural;
320 type Parameter_Flags
is array (All_Parameter_Restrictions
) of Boolean;
322 type Restrictions_Info
is record
323 Set
: Restriction_Flags
;
324 -- An entry is True in the Set array if a restrictions pragma has been
325 -- encountered for the given restriction. If the value is True for a
326 -- parameter restriction, then the corresponding entry in the Value
327 -- array gives the minimum value encountered for any such restriction.
329 Value
: Restriction_Values
;
330 -- If the entry for a parameter restriction in Set is True (i.e. a
331 -- restrictions pragma for the restriction has been encountered), then
332 -- the corresponding entry in the Value array is the minimum value
333 -- specified by any such restrictions pragma. Note that a restrictions
334 -- pragma specifying a value greater than Int'Last is simply ignored.
336 Violated
: Restriction_Flags
;
337 -- An entry is True in the violations array if the compiler has detected
338 -- a violation of the restriction. For a parameter restriction, the
339 -- Count and Unknown arrays have additional information.
341 Count
: Restriction_Values
;
342 -- If an entry for a parameter restriction is True in Violated, the
343 -- corresponding entry in the Count array may record additional
344 -- information. If the actual minimum count is known (by taking
345 -- maximums, or sums, depending on the restriction), it will be
346 -- recorded in this array. If not, then the value will remain zero.
347 -- The value is also zero for a non-violated restriction.
349 Unknown
: Parameter_Flags
;
350 -- If an entry for a parameter restriction is True in Violated, the
351 -- corresponding entry in the Unknown array may record additional
352 -- information. If the actual count is not known by the compiler (but
353 -- is known to be non-zero), then the entry in Unknown will be True.
354 -- This indicates that the value in Count is not known to be exact,
355 -- and the actual violation count may be higher.
357 -- Note: If Violated (K) is True, then either Count (K) > 0 or
358 -- Unknown (K) = True. It is possible for both these to be set.
359 -- For example, if Count (K) = 3 and Unknown (K) is True, it means
360 -- that the actual violation count is at least 3 but might be higher.
363 No_Restrictions
: constant Restrictions_Info
:=
364 (Set
=> (others => False),
365 Value
=> (others => 0),
366 Violated
=> (others => False),
367 Count
=> (others => 0),
368 Unknown
=> (others => False));
369 -- Used to initialize Restrictions_Info variables
371 ----------------------------------
372 -- Profile Definitions and Data --
373 ----------------------------------
375 -- Note: to add a profile, modify the following declarations appropriately,
376 -- add Name_xxx to Snames, and add a branch to the conditions for pragmas
377 -- Profile and Profile_Warnings in the body of Sem_Prag.
381 No_Implementation_Extensions
,
385 GNAT_Extended_Ravenscar
,
387 -- Names of recognized profiles. No_Profile is used to indicate that a
388 -- restriction came from pragma Restrictions[_Warning], as opposed to
389 -- pragma Profile[_Warning]. Restricted_Tasking is a non-user profile that
390 -- contaings the minimal set of restrictions to trigger the user of the
391 -- restricted tasking runtime. Restricted is the corresponding user profile
392 -- that also restrict protected types.
394 subtype Profile_Name_Actual
is Profile_Name
395 range No_Implementation_Extensions
.. Profile_Name
'Last;
396 -- Actual used profile names
398 type Profile_Data
is record
399 Set
: Restriction_Flags
;
400 -- Set to True if given restriction must be set for the profile, and
401 -- False if it need not be set (False does not mean that it must not be
402 -- set, just that it need not be set). If the flag is True for a
403 -- parameter restriction, then the Value array gives the maximum value
404 -- permitted by the profile.
406 Value
: Restriction_Values
;
407 -- An entry in this array is meaningful only if the corresponding flag
408 -- in Set is True. In that case, the value in this array is the maximum
409 -- value of the parameter permitted by the profile.
412 Profile_Info
: constant array (Profile_Name_Actual
) of Profile_Data
:= (
414 -- No_Implementation_Extensions profile
416 No_Implementation_Extensions
=>
419 (No_Implementation_Aspect_Specifications
=> True,
420 No_Implementation_Attributes
=> True,
421 No_Implementation_Identifiers
=> True,
422 No_Implementation_Pragmas
=> True,
423 No_Implementation_Units
=> True,
426 -- Value settings for Restricted profile (none
431 -- Restricted_Tasking Profile
433 Restricted_Tasking
=>
435 -- Restrictions for Restricted_Tasking profile
438 (No_Abort_Statements
=> True,
439 No_Asynchronous_Control
=> True,
440 No_Dynamic_Attachment
=> True,
441 No_Dynamic_Priorities
=> True,
442 No_Local_Protected_Objects
=> True,
443 No_Protected_Type_Allocators
=> True,
444 No_Requeue_Statements
=> True,
445 No_Task_Allocators
=> True,
446 No_Task_Attributes_Package
=> True,
447 No_Task_Hierarchy
=> True,
448 No_Terminate_Alternatives
=> True,
449 Max_Asynchronous_Select_Nesting
=> True,
450 Max_Select_Alternatives
=> True,
451 Max_Task_Entries
=> True,
454 -- Value settings for Restricted_Tasking profile
457 (Max_Asynchronous_Select_Nesting
=> 0,
458 Max_Select_Alternatives
=> 0,
459 Max_Task_Entries
=> 0,
462 -- Restricted Profile
466 -- Restrictions for Restricted profile
469 (No_Abort_Statements
=> True,
470 No_Asynchronous_Control
=> True,
471 No_Dynamic_Attachment
=> True,
472 No_Dynamic_Priorities
=> True,
473 No_Entry_Queue
=> True,
474 No_Local_Protected_Objects
=> True,
475 No_Protected_Type_Allocators
=> True,
476 No_Requeue_Statements
=> True,
477 No_Task_Allocators
=> True,
478 No_Task_Attributes_Package
=> True,
479 No_Task_Hierarchy
=> True,
480 No_Terminate_Alternatives
=> True,
481 Max_Asynchronous_Select_Nesting
=> True,
482 Max_Protected_Entries
=> True,
483 Max_Select_Alternatives
=> True,
484 Max_Task_Entries
=> True,
487 -- Value settings for Restricted profile
490 (Max_Asynchronous_Select_Nesting
=> 0,
491 Max_Protected_Entries
=> 1,
492 Max_Select_Alternatives
=> 0,
493 Max_Task_Entries
=> 0,
498 -- Note: the table entries here only represent the
499 -- required restriction profile for Ravenscar. The
500 -- full Ravenscar profile also requires:
502 -- pragma Dispatching_Policy (FIFO_Within_Priorities);
503 -- pragma Locking_Policy (Ceiling_Locking);
504 -- pragma Detect_Blocking;
508 -- Restrictions for Ravenscar = Restricted profile ..
511 (No_Abort_Statements
=> True,
512 No_Asynchronous_Control
=> True,
513 No_Dynamic_Attachment
=> True,
514 No_Dynamic_Priorities
=> True,
515 No_Entry_Queue
=> True,
516 No_Local_Protected_Objects
=> True,
517 No_Protected_Type_Allocators
=> True,
518 No_Requeue_Statements
=> True,
519 No_Task_Allocators
=> True,
520 No_Task_Attributes_Package
=> True,
521 No_Task_Hierarchy
=> True,
522 No_Terminate_Alternatives
=> True,
523 Max_Asynchronous_Select_Nesting
=> True,
524 Max_Protected_Entries
=> True,
525 Max_Select_Alternatives
=> True,
526 Max_Task_Entries
=> True,
528 -- plus these additional restrictions:
531 No_Implicit_Heap_Allocations
=> True,
532 No_Local_Timing_Events
=> True,
533 No_Relative_Delay
=> True,
534 No_Select_Statements
=> True,
535 No_Specific_Termination_Handlers
=> True,
536 No_Task_Termination
=> True,
537 Simple_Barriers
=> True,
540 -- Value settings for Ravenscar (same as Restricted)
543 (Max_Asynchronous_Select_Nesting
=> 0,
544 Max_Protected_Entries
=> 1,
545 Max_Select_Alternatives
=> 0,
546 Max_Task_Entries
=> 0,
549 GNAT_Extended_Ravenscar
=>
551 -- Restrictions for GNAT_Extended_Ravenscar =
552 -- Restricted profile ..
555 (No_Abort_Statements
=> True,
556 No_Asynchronous_Control
=> True,
557 No_Dynamic_Attachment
=> True,
558 No_Dynamic_Priorities
=> True,
559 No_Local_Protected_Objects
=> True,
560 No_Protected_Type_Allocators
=> True,
561 No_Requeue_Statements
=> True,
562 No_Task_Allocators
=> True,
563 No_Task_Attributes_Package
=> True,
564 No_Task_Hierarchy
=> True,
565 No_Terminate_Alternatives
=> True,
566 Max_Asynchronous_Select_Nesting
=> True,
567 Max_Select_Alternatives
=> True,
568 Max_Task_Entries
=> True,
570 -- plus these additional restrictions:
572 No_Implicit_Task_Allocations
=> True,
573 No_Implicit_Protected_Object_Allocations
575 No_Local_Timing_Events
=> True,
576 No_Select_Statements
=> True,
577 No_Specific_Termination_Handlers
=> True,
578 No_Task_Termination
=> True,
579 Pure_Barriers
=> True,
582 -- Value settings for Ravenscar (same as Restricted)
585 (Max_Asynchronous_Select_Nesting
=> 0,
586 Max_Select_Alternatives
=> 0,
587 Max_Task_Entries
=> 0,
590 -- GNAT_Ravenscar_EDF Profile
592 -- Note: the table entries here only represent the
593 -- required restriction profile for GNAT_Ravenscar_EDF.
594 -- The full GNAT_Ravenscar_EDF profile also requires:
596 -- pragma Dispatching_Policy (EDF_Across_Priorities);
597 -- pragma Locking_Policy (Ceiling_Locking);
598 -- pragma Detect_Blocking;
600 GNAT_Ravenscar_EDF
=>
602 -- Restrictions for Ravenscar = Restricted profile ..
605 (No_Abort_Statements
=> True,
606 No_Asynchronous_Control
=> True,
607 No_Dynamic_Attachment
=> True,
608 No_Dynamic_Priorities
=> True,
609 No_Entry_Queue
=> True,
610 No_Local_Protected_Objects
=> True,
611 No_Protected_Type_Allocators
=> True,
612 No_Requeue_Statements
=> True,
613 No_Task_Allocators
=> True,
614 No_Task_Attributes_Package
=> True,
615 No_Task_Hierarchy
=> True,
616 No_Terminate_Alternatives
=> True,
617 Max_Asynchronous_Select_Nesting
=> True,
618 Max_Protected_Entries
=> True,
619 Max_Select_Alternatives
=> True,
620 Max_Task_Entries
=> True,
622 -- plus these additional restrictions:
625 No_Implicit_Heap_Allocations
=> True,
626 No_Local_Timing_Events
=> True,
627 No_Relative_Delay
=> True,
628 No_Select_Statements
=> True,
629 No_Specific_Termination_Handlers
=> True,
630 No_Task_Termination
=> True,
631 Simple_Barriers
=> True,
634 -- Value settings for Ravenscar (same as Restricted)
637 (Max_Asynchronous_Select_Nesting
=> 0,
638 Max_Protected_Entries
=> 1,
639 Max_Select_Alternatives
=> 0,
640 Max_Task_Entries
=> 0,