Remove the system device's IO port access

ostd/src/arch/x86/device/cmos.rs

@@ -12,13 +12,17 @@
 use acpi::fadt::Fadt;
 use x86_64::instructions::port::{ReadOnlyAccess, WriteOnlyAccess};
 
-use crate::{arch::x86::kernel::acpi::get_acpi_tables, io::IoPort};
+use crate::{
+    arch::x86::kernel::acpi::get_acpi_tables,
+    io::{sensitive_io_port, IoPort},
+};
 
+sensitive_io_port!(unsafe {
     /// CMOS address I/O port
-pub static CMOS_ADDRESS: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x70) };
+    pub static CMOS_ADDRESS: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x70);
-
     /// CMOS data I/O port
-pub static CMOS_DATA: IoPort<u8, ReadOnlyAccess> = unsafe { IoPort::new(0x71) };
+    pub static CMOS_DATA: IoPort<u8, ReadOnlyAccess> = IoPort::new(0x71);
+});
 
 /// Gets the century register location. This function is used in RTC(Real Time Clock) module initialization.
 pub fn century_register() -> Option<u8> {

ostd/src/arch/x86/kernel/pic.rs

@@ -6,12 +6,20 @@ use core::sync::atomic::{AtomicBool, AtomicU8, Ordering::Relaxed};
 
 use log::info;
 
-use crate::{arch::x86::device::io_port::WriteOnlyAccess, io::IoPort, trap::IrqLine};
+use crate::{
+    arch::x86::device::io_port::WriteOnlyAccess,
+    io::{sensitive_io_port, IoPort},
+    trap::IrqLine,
+};
 
-static MASTER_CMD: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x20) };
+sensitive_io_port! {
-static MASTER_DATA: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x21) };
+    unsafe{
-static SLAVE_CMD: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0xA0) };
+        static MASTER_CMD: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x20);
-static SLAVE_DATA: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0xA1) };
+        static MASTER_DATA: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x21);
+        static SLAVE_CMD: IoPort<u8, WriteOnlyAccess> = IoPort::new(0xA0);
+        static SLAVE_DATA: IoPort<u8, WriteOnlyAccess> = IoPort::new(0xA1);
+    }
+}
 
 const IRQ_OFFSET: u8 = 0x20;
 

ostd/src/arch/x86/serial.rs

@@ -13,6 +13,7 @@ use super::{
     kernel::{self, IO_APIC},
 };
 use crate::{
+    io::reserve_io_port_range,
     sync::SpinLock,
     trap::{IrqLine, TrapFrame},
 };
@@ -53,6 +54,7 @@ bitflags::bitflags! {
 }
 
 static CONSOLE_COM1_PORT: SerialPort = unsafe { SerialPort::new(0x3F8) };
+reserve_io_port_range!(0x3F8..0x400);
 
 static CONSOLE_IRQ_CALLBACK: Once<SpinLock<IrqLine>> = Once::new();
 static SERIAL_INPUT_CALLBACKS: SpinLock<Vec<Arc<InputCallback>>> = SpinLock::new(Vec::new());

ostd/src/arch/x86/timer/pit.rs

@@ -11,7 +11,7 @@
 
 use crate::{
     arch::{kernel::IO_APIC, timer::TIMER_FREQ, x86::device::io_port::WriteOnlyAccess},
-    io::IoPort,
+    io::{sensitive_io_port, IoPort},
     trap::IrqLine,
 };
 
@@ -131,23 +131,23 @@ enum Channel {
     ReadBackCommand = 0b11,
 }
 
+sensitive_io_port! {
+    unsafe {
         /// The output from PIT channel 0 is connected to the PIC chip and generate "IRQ 0".
         /// If connected to PIC, the IRQ0 will generate by the **rising edge** of the output voltage.
-static CHANNEL0_PORT: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x40) };
+        static CHANNEL0_PORT: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x40);
 
         /// The output from PIT channel 1 was once used for refreshing the DRAM or RAM so that
         /// the capacitors don't forget their state.
         ///
         /// On later machines, the DRAM refresh is done with dedicated hardware and this channel
         /// is no longer used.
-#[expect(unused)]
+        static CHANNEL1_PORT: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x41);
-static CHANNEL1_PORT: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x41) };
 
         /// The output from PIT channel 2 is connected to the PC speaker, so the frequency of the
         /// output determines the frequency of the sound produced by the speaker. For more information,
         /// check https://wiki.osdev.org/PC_Speaker.
-#[expect(unused)]
+        static CHANNEL2_PORT: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x42);
-static CHANNEL2_PORT: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x42) };
 
         /// PIT command port.
         /// ```text
@@ -157,7 +157,10 @@ static CHANNEL2_PORT: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x42) }
         /// 1 to 3       Operating mode
         /// 0            BCD/Binary mode: 0 = 16-bit binary, 1 = four-digit BCD
         /// ```
-static MODE_COMMAND_PORT: IoPort<u8, WriteOnlyAccess> = unsafe { IoPort::new(0x43) };
+        static MODE_COMMAND_PORT: IoPort<u8, WriteOnlyAccess> = IoPort::new(0x43);
+    }
+}
+
 const TIMER_RATE: u32 = 1193182;
 
 pub(crate) fn init(operating_mode: OperatingMode) {