
(define (cpointer? v)
  (or (authentic-cpointer? v)
      (not v)
      (bytes? v)
      (has-cpointer-property? v)))

;; A cpointer's `memory` is either a raw foreign address (i.e., a
;; number), a vector, or a byte string. A bytevector is used
;; for GCable atomic memory, and a vector is used for GCable
;; non-atomic memory.
(define-record-type (cpointer make-cpointer authentic-cpointer?)
  (fields memory (mutable tags)))
(define-record-type cpointer+offset
  (parent cpointer)
  (fields (mutable offset)))

(define-values (prop:cpointer has-cpointer-property? cpointer-property-ref)
  (make-struct-type-property 'cpointer
                             (lambda (v info)
                               (cond
                                [(exact-nonnegative-integer? v)
                                 (unless (< v (list-ref info 1))
                                   (raise-arguments-error 'prop:cpointer
                                                          "index is out of range"
                                                          "index" v))
                                 (unless (chez:memv v (list-ref info 5))
                                   (raise-arguments-error 'prop:cpointer
                                                          "index does not refer to an immutable field"
                                                          "index" v))
                                 (+ v (let ([p (list-ref info 6)])
                                        (if p
                                            (struct-type-total*-field-count p)
                                            0)))]
                                [(and (procedure? v)
                                      (procedure-arity-includes? v 1))
                                 v]
                                [(cpointer? v) v]
                                [else
                                 (raise-argument-error 'prop:cpointer
                                                       (string-append
                                                        "(or/c exact-nonnegative-integer?\n"
                                                        "      (procedure-arity-includes/c 1)\n"
                                                        "      cpointer?)")
                                                       v)]))))

;; Gets a primitive cpointer type by following a `prop:evt` property
;; as needed. Call with function *before* disabling GC interrupts.
(define (unwrap-cpointer who p)
  (cond
   [(authentic-cpointer? p) p]
   [(not p) p]
   [(bytes? p) p]
   [(ffi-callback? p) p]
   [else (let ([v (cpointer-property-ref p)])
           (cond
            [(exact-nonnegative-integer? v)
             (let ([v (unsafe-struct-ref p v)])
               (if (cpointer? v)
                   (unwrap-cpointer who v)
                   #f))]
            [(procedure? v)
             (let ([p2 (v p)])
               (unless (cpointer? p2)
                 (raise-result-error 'prop:cpointer-accessor
                                     "cpointer?"
                                     p2))
               (unwrap-cpointer who p2))]
            [else
             (unwrap-cpointer who v)]))]))

;; Like `unwrap-cpointer*`, but also allows an integer as a raw
;; foreign address:
(define (unwrap-cpointer* who p)
  (if (integer? p)
      p
      (unwrap-cpointer who p)))

(define (offset-ptr? p)
  (unless (cpointer? p)
    (raise-argument-error 'offset-ptr? "cpointer?" p))
  (cpointer+offset? p))

(define/who (set-cpointer-tag! p t)
  (if (authentic-cpointer? p)
      (cpointer-tags-set! p t)
      (if (cpointer? p)
          (let ([q (unwrap-cpointer who p)])
            (if (authentic-cpointer? q)
                (set-cpointer-tag! q t)
                (raise-arguments-error who
                                       "cannot set tag on given cpointer"
                                       "given" p
                                       "tag" t)))
          (raise-argument-error who "cpointer?" p))))

(define/who (cpointer-tag p)
  (if (authentic-cpointer? p)
      (cpointer-tags p)
      (if (cpointer? p)
          (let ([q (unwrap-cpointer who p)])
            (if (authentic-cpointer? q)
                (cpointer-tag q)
                #f))
          (raise-argument-error who "cpointer?" p))))

;; Convert a `memory` --- typically a raw foreign address, but possibly
;; a byte string or vector --- to a cpointer, using #f for a NULL
;; address:
(define (memory->cpointer x)
  (cond
   [(or (not x) (authentic-cpointer? x))
    ;; This happens when a pointer is converted without going through
    ;; `cpointer-address` such as a `ptr-ref` on a struct or array type
    x]
   [(eqv? x 0) #f]
   [else (make-cpointer x #f)]))

;; Works on unwrapped cpointers:
(define (cpointer-nonatomic? p)
  (and (authentic-cpointer? p)
       (#%vector? (cpointer-memory p))))

;; ----------------------------------------

;; Hack: use `s_fxmul` as an identity function
;; to corece a bytevector's start to an address
(define bytevector->addr ; call with GC disabled
  (foreign-procedure "(cs)fxmul"
    (u8* uptr)
    uptr))
(define object->addr ; call with GC disabled
  (foreign-procedure "(cs)fxmul"
    (scheme-object uptr)
    uptr))
(define address->object ; call with GC disabled
  (foreign-procedure "(cs)fxmul"
    (uptr uptr)
    scheme-object))

(define vector-content-offset
  ;; Hack: we rely on the implementation detail of bytevectors and vectors
  ;; having the same offset from the address to the content.
  (let ([s (make-bytevector 1)])
    ;; Disable interrupts to avoid a GC:
    (with-interrupts-disabled
     (- (bytevector->addr s 1)
        (object->addr s 1)))))

;; Converts a primitive cpointer (normally the result of
;; `unwrap-cpointer`) to a raw foreign address. The
;; GC must be disabled while extracting an address,
;; which might be the address of a byte string that
;; could otherwise change due to a GC.
(define (cpointer-address p) ; call with GC disabled
  (cond
   [(not p) 0]
   [(bytes? p) (memory-address p)]
   [(cpointer+offset? p)
    (let ([memory (cpointer-memory p)])
      (+ (memory-address memory) (cpointer+offset-offset p)))]
   [(authentic-cpointer? p)
    (memory-address (cpointer-memory p))]
   [(ffi-callback? p)
    (foreign-callable-entry-point (callback-code p))]
   [else
    (raise-arguments-error 'internal-error "bad case extracting a cpointer address"
                           "value" p)]))

;; Like `cpointer-address`, but allows a raw foreign
;; address to pass through:
(define (cpointer*-address p) ; call with GC disabled
  (if (number? p)
      p
      (cpointer-address p)))

;; Convert a `memory` (as in a cpointer) to a raw foreign address.
(define (memory-address memory) ; call with GC disabled
  (cond
   [(integer? memory) memory]
   [(bytes? memory) (bytevector->addr memory 1)]
   [else
    (+ (object->addr memory 1)
       vector-content-offset)]))

;; Convert a raw foreign address to a Scheme value on the
;; assumption that the address is the payload of a byte
;; string or vector:
(define (addr->gcpointer-memory v)  ; call with GC disabled
  (address->object (- v vector-content-offset) 1))

;; ----------------------------------------

(define (cpointer-strip p)
  (cond
   [(not p) 0]
   [(bytes? p) p]
   [(and (authentic-cpointer? p)
         (or (not (cpointer+offset? p))
             (zero? (cpointer+offset-offset p))))
    (cpointer-memory p)]
   [else none]))

(define (stripped-cpointer? v)
  (or (eqv? v 0)
      (bytes? v)
      (vector? v)))

;; ----------------------------------------

(define/who (ptr-equal? p1 p2)
  (let ([p1 (unwrap-cpointer who p1)]
        [p2 (unwrap-cpointer who p2)])
    (with-interrupts-disabled ; disable GC while extracting addresses
     (= (cpointer-address p1) (cpointer-address p2)))))

(define/who (ptr-offset p)
  (let ([p (unwrap-cpointer who p)])
    (ptr-offset* p)))

(define (ptr-offset* p)
  (if (cpointer+offset? p)
      (cpointer+offset-offset p)
      0))

(define (set-ptr-offset! p n)
  (unless (cpointer+offset? p)
    (raise-argument-error 'ptr-offset "(and/c cpointer? ptr-offset?)" p))
  (unless (exact-integer? n)
    (raise-argument-error 'ptr-offset "exact-integer?" n))
  (cpointer+offset-offset-set! p n))

(define ptr-add
  (case-lambda
   [(p n type)
    (unless (cpointer? p)
      (raise-argument-error 'ptr-add "cpointer?" p))
    (unless (exact-integer? n)
      (raise-argument-error 'ptr-add "exact-integer?" n))
    (unless (ctype? type)
      (raise-argument-error 'ptr-add "ctype?" type))
    (do-ptr-add p (* n (ctype-sizeof type)) #t)]
   [(p n)
    (unless (cpointer? p)
      (raise-argument-error 'ptr-add "cpointer?" p))
    (unless (exact-integer? n)
      (raise-argument-error 'ptr-add "exact-integer?" n))
    (do-ptr-add p n #t)]))

(define (do-ptr-add p n save-tags?)
  (cond
   [(authentic-cpointer? p)
    (make-cpointer+offset (cpointer-memory p)
                          (and save-tags? (cpointer-tag p))
                          (+ n (ptr-offset* p)))]
   [(has-cpointer-property? p)
    (do-ptr-add (unwrap-cpointer 'do-ptr-add p) n save-tags?)]
   [else
    (make-cpointer+offset (or p 0) #f n)]))

(define ptr-add!
  (case-lambda
   [(p n type)
    (unless (cpointer+offset? p)
      (raise-argument-error 'ptr-add! "(and/c cpointer? offset-ptr?)" p))
    (unless (exact-integer? n)
      (raise-argument-error 'ptr-add! "exact-integer?" n))
    (unless (ctype? type)
      (raise-argument-error 'ptr-add! "ctype?" type))
    (do-ptr-add! p (* n (ctype-sizeof type)))]
   [(p n)
    (unless (cpointer+offset? p)
      (raise-argument-error 'ptr-add! "(and/c cpointer? offset-ptr?)" p))
    (unless (exact-integer? n)
      (raise-argument-error 'ptr-add! "exact-integer?" n))
    (do-ptr-add! p n)]))

(define (do-ptr-add! p n)
  (unless (cpointer+offset? p)
    (raise-arguments-error 'ptr-add!
                           "given cpointer does not have an offset"
                           "given" p))
  (cpointer+offset-offset-set! p (+ n (cpointer+offset-offset p))))

;; ----------------------------------------

(define-record-type (ctype create-ctype ctype?)
  (fields host-rep    ; host-Scheme representation description, 'struct, 'union, or 'array
          our-rep     ; Racket representation description
          basetype    ; parent ctype or the same as `our-rep`
          scheme->c   ; converter of values to `basetype`
          c->scheme)) ; converter of values from `basetype`

;; A `compound-ctype` is used for structs, unions, and arrays
(define-record-type (compound-ctype create-compound-ctype compound-ctype?)
  (parent ctype)
  (fields get-decls
          size
          alignment))

(define/who (make-ctype type racket-to-c c-to-racket)
  (check who ctype? type)
  (check who (procedure-arity-includes/c 1) :or-false racket-to-c)
  (check who (procedure-arity-includes/c 1) :or-false c-to-racket)
  (cond
   [(compound-ctype? type)
    (create-compound-ctype (ctype-host-rep type)
                           (ctype-our-rep type)
                           type
                           racket-to-c
                           c-to-racket
                           (compound-ctype-get-decls type)
                           (compound-ctype-size type)
                           (compound-ctype-alignment type))]
   [else
    (create-ctype (ctype-host-rep type)
                  (ctype-our-rep type)
                  type
                  racket-to-c
                  c-to-racket)]))

;; Apply all the conversion wrappers of `type` to the Scheme value `v`
(define (s->c type v)
  (let* ([racket-to-c (ctype-scheme->c type)]
         [v (if racket-to-c
                (|#%app| racket-to-c v)
                v)]
         [next (ctype-basetype type)])
    (if (ctype? next)
        (s->c next v)
        v)))

;; Apply all the conversion wrapper of `type` to the C value `v`
(define (c->s type v)
  (let* ([next (ctype-basetype type)]
         [v (if (ctype? next)
                (c->s next v)
                v)]
         [c-to-racket (ctype-c->scheme type)])
    (if c-to-racket
        (|#%app| c-to-racket v)
        v)))

;; ----------------------------------------

(define-syntax define-ctype
  (syntax-rules ()
    [(_ id host-rep basetype)
     (define/who id (create-ctype host-rep basetype basetype #f #f))]
    [(_ id host-rep basetype s->c)
     (define/who id (create-ctype host-rep basetype basetype s->c #f))]
    [(_ id host-rep basetype s->c c->s)
     (define/who id (create-ctype host-rep basetype basetype s->c c->s))]))

;; We need `s->c` checks, even if they seem redundant, to make sure
;; that the checks happen early enough --- outside of atomic and
;; foreign-thread regions. Also, the integer checks built into Chez
;; Scheme are more permissive than Racket's.

(define-syntax-rule (checker who ?) (lambda (x) (if (? x) x (bad-ctype-value who x))))
(define-syntax integer-checker
  (syntax-rules (signed unsigned)
    [(_ who signed n int?) (checker who (lambda (x) (and (int? x) (<= (- (expt 2 (- n 1))) x  (- (expt 2 (- n 1)) 1)))))]
    [(_ who unsigned n int?) (checker who (lambda (x) (and (int? x) (<= 0 x  (- (expt 2 n) 1)))))]))

(define-ctype _bool 'boolean 'bool)
(define-ctype _double 'double 'double (checker who flonum?))
(define-ctype _fixnum 'fixnum 'fixnum (checker who fixnum?))
(define-ctype _float 'float 'float (checker who flonum?))
(define-ctype _int8 'integer-8 'int8 (integer-checker who signed 8 fixnum?))
(define-ctype _int16 'integer-16 'int16 (integer-checker who signed 16 fixnum?))
(define-ctype _int32 'integer-32 'int32 (integer-checker who signed 32 exact-integer?))
(define-ctype _int64 'integer-64 'int64 (integer-checker who signed 64 exact-integer?))
(define-ctype _uint8 'unsigned-8 'uint8 (integer-checker who unsigned 8 fixnum?))
(define-ctype _uint16 'unsigned-16 'uint16 (integer-checker who unsigned 16 fixnum?))
(define-ctype _uint32 'unsigned-32 'uint32 (integer-checker who unsigned 32 exact-integer?))
(define-ctype _uint64 'unsigned-64 'uint64 (integer-checker who unsigned 64 exact-integer?))
(define-ctype _scheme 'scheme-object 'scheme)
(define-ctype _string/ucs-4 (if (system-big-endian?) 'utf-32be 'utf-32le) 'string/ucs-4
  (checker who (lambda (x) (or (not x) (string? x)))))
(define-ctype _string/utf-16 (if (system-big-endian?) 'utf-16be 'utf-16le) 'string/utf-16
  (checker who (lambda (x) (or (not x) (string? x)))))
(define-ctype _void 'void 'void (checker who void))

(define (bad-ctype-value type-name v)
  (raise-arguments-error 'apply
                         "bad value for conversion"
                         "ctype" (make-unquoted-printing-string (symbol->string type-name))
                         "value" v))

;; Unlike traditional Racket, copies when converting from C:
(define-ctype _bytes 'void* 'bytes
  (checker who (lambda (x) (or (not x) (bytes? x))))
  (lambda (x)
    (cond
     [(not x) ; happens with non-atomic memory reference
      x]
     [(bytes? x) ; happens with non-atomic memory reference
      ;; For consistency, truncate byte string at any NUL byte
      (let ([len (bytes-length x)])
        (let loop ([i 0])
          (cond
           [(fx= i len) x]
           [(fx= 0 (bytes-ref x i))
            (subbytes x 0 i)]
           [else (loop (fx+ i 1))])))]
     [(eqv? x 0) #f]
     [else
      (let loop ([i 0])
        (if (fx= 0 (foreign-ref 'unsigned-8 x i))
            (let ([bstr (make-bytes i)])
              (memcpy* bstr 0 x 0 i #f)
              bstr)
            (loop (add1 i))))])))

(define-ctype _short_bytes 'void* 'bytes
  (lambda (x) x)
  (lambda (x) (let loop ([i 0])
                (if (fx= 0 (foreign-ref 'unsigned-16 x i))
                    (let ([bstr (make-bytes i)])
                      (memcpy* bstr 0 x 0 i #f)
                      bstr)
                    (loop (+ i 2))))))

(define-ctype _double* 'double 'double
  (lambda (x) (if (real? x)
                  (exact->inexact x)
                  (bad-ctype-value who x))))

(define-ctype _ufixnum 'fixnum 'fixnum (checker who fixnum?)) ; historically, no sign check
(define-ctype _fixint 'integer-32 'fixint (checker who fixnum?))
(define-ctype _ufixint 'unsigned-32 'ufixint (checker who fixnum?)) ; historically, no sign check

(define-ctype _symbol 'string 'string
  (lambda (x) (if (symbol? x)
                  (symbol->string x)
                  (bad-ctype-value who x)))
  (lambda (s) (string->symbol s)))

(define-ctype _longdouble 'double 'double
  (lambda (x) (bad-ctype-value who x)))

(define-ctype _pointer 'void* 'pointer
  (lambda (v) (unwrap-cpointer who v)) ; resolved to an address later (with the GC disabled)
  (lambda (x) (memory->cpointer x)))

;; Treated specially by `ptr-ref`
(define-ctype _fpointer 'void* 'fpointer
  (lambda (v) (unwrap-cpointer who v)) ; resolved to an address later (with the GC disabled)
  (lambda (x)
    (if (ffi-obj? x) ; check for `ptr-ref` special case on `ffi-obj`s
        x
        (memory->cpointer x))))

(define-ctype _gcpointer 'void* 'gcpointer
  (lambda (v) (unwrap-cpointer who v)) ; like `_pointer`: resolved later
  (lambda (x)
    ;; `x` must have been converted to a bytevector or vector before
    ;; the GC was re-enabled
    (memory->cpointer x)))

;; FIXME:
(define-ctype _stdbool 'integer-8 'stdbool
  (lambda (x) (and x 0))
  (lambda (v) (not (zero? v))))

(define make-cstruct-type
  (case-lambda
   [(types) (make-cstruct-type types #f #f)]
   [(types abi) (make-cstruct-type types abi #f)]
   [(types abi alignment)
    (let ([make-decls
           (escapes-ok
             (lambda (id)
               (let-values ([(reps decls) (types->reps types)])
                 (append decls
                         `((define-ftype ,id
                             (struct ,@(map (lambda (rep)
                                              `[,(gensym) ,rep])
                                            reps))))))))])
      (let-values ([(size alignment) (ctypes-sizeof+alignof types alignment)])
        (create-compound-ctype 'struct
                               'struct
                               types
                               (lambda (s) (unwrap-cpointer '_struct s)) ; like `_pointer`: resolved later
                               (lambda (c) (memory->cpointer c))
                               make-decls
                               size
                               alignment)))]))

(define/who (make-union-type . types)
  (for-each (lambda (type) (check who ctype? type))
            types)
  (let ([make-decls
         (escapes-ok
           (lambda (id)
             (let-values ([(reps decls) (types->reps types)])
               (append decls
                       `((define-ftype ,id
                           (union ,@(map (lambda (rep)
                                           `[,(gensym) ,rep])
                                         reps))))))))]
        [size (apply max (map ctype-sizeof types))]
        [alignment (apply max (map ctype-alignof types))])
    (create-compound-ctype 'union
                           'union
                           types
                           (lambda (s) (unwrap-cpointer '_union s)) ; like `_pointer`: resolved later
                           (lambda (c) (memory->cpointer c))
                           make-decls
                           size
                           alignment)))

(define/who (make-array-type type count)
  (check who ctype? type)
  (check who exact-nonnegative-integer? count)
  (let ([make-decls
         (escapes-ok
           (lambda (id)
             (let-values ([(reps decls) (types->reps (list type))])
               (append decls
                       `((define-ftype ,id
                           (array ,count ,(car reps))))))))]
        [size (* count (ctype-sizeof type))]
        [alignment (ctype-alignof type)])
    (create-compound-ctype 'array
                           'array
                           (vector type count)
                           (lambda (s) (unwrap-cpointer '_array s)) ; like `_pointer`: resolved later
                           (lambda (c) (memory->cpointer c))
                           make-decls
                           size
                           alignment)))

(define (compiler-sizeof sl)
  (let ([rest (lambda (sl) (if (pair? sl) (cdr sl) '()))])
    (unless (or (symbol? sl)
                (list? sl))
      (raise-argument-error 'compiler-sizeof
                            "(or/c ctype-symbol? (listof ctype-symbol?))"
                            sl))
    (let loop ([sl sl] [base-type #f] [star? #f] [size #f])
      (cond
       [(null? sl)
        (cond
         [(eq? base-type 'void)
          (when size
            (raise-arguments-error 'compiler-sizeof "cannot qualify 'void"))
          (if star?
              (foreign-sizeof 'void*)
              (raise-arguments-error 'compiler-sizeof "cannot use 'void without a '*"))]
         [(or (not base-type)
              (eq? base-type 'int))
          (if star?
              (foreign-sizeof 'void*)
              (foreign-sizeof (or size 'int)))]
         [(eq? base-type 'double)
          (case size
            [(long)
             (if star?
                 (foreign-sizeof 'void*)
                 ;; FIXME:
                 (foreign-sizeof 'double))]
            [(#f)
             (if star?
                 (foreign-sizeof 'void*)
                 (foreign-sizeof 'double))]
            [else
             (raise-arguments-error 'compiler-sizeof "bad qualifiers for 'double")])]
         [(eq? base-type 'float)
          (case size
            [(#f)
             (if star?
                 (foreign-sizeof 'void*)
                 (foreign-sizeof 'float))]
            [else
             (raise-arguments-error 'compiler-sizeof "bad qualifiers for 'float")])]
         [size
          (raise-arguments-error 'compiler-sizeof (format "cannot qualify '~a" base-type))])]
       [else
        (let ([s (if (pair? sl) (car sl) sl)])
          (case s
            [(int char float double void)
             (cond
              [base-type
               (raise-arguments-error 'compiler-sizeof
                                      (format "extraneous type: '~a" s))]
              [else
               (loop (rest sl) s star? size)])]
            [(short)
             (case size
               [(short)
                (raise-arguments-error 'compiler-sizeof
                                       "cannot handle more than one 'short")]
               [(long)
                (raise-arguments-error 'compiler-sizeof
                                       "cannot use both 'short and 'long")]
               [(#f) (loop (rest sl) base-type star? 'short)])]
            [(long)
             (case size
               [(short)
                (raise-arguments-error 'compiler-sizeof
                                       "cannot use both 'short and 'long")]
               [(long-long)
                (raise-arguments-error 'compiler-sizeof
                                       "cannot handle more than two 'long")]
               [(long)
                (loop (rest sl) base-type star? 'long-long)]
               [(#f)
                (loop (rest sl) base-type star? 'long)])]
            [(*)
             (if star?
                 (raise-arguments-error 'compiler-sizeof
                                        "cannot handle more than one '*")
                 (loop (rest sl) base-type #t size))]
            [else
             (raise-argument-error 'compiler-sizeof
                                   "(or/c ctype-symbol? (listof ctype-symbol?))"
                                   sl)]))]))))

(define (ctype-malloc-mode c)
  (let ([t (ctype-our-rep c)])
    (if (or (eq? t 'gcpointer) (eq? t 'scheme))
        'nonatomic
        'atomic)))

(define/who (ctype-sizeof c)
  (check who ctype? c)
  (case (ctype-host-rep c)
    [(void) 0]
    [(boolean int) 4]
    [(double) 8]
    [(float) 4]
    [(integer-8 unsigned-8) 1]
    [(integer-16 unsigned-16) 2]
    [(integer-32 unsigned-32) 4]
    [(integer-64 unsigned-64) 8]
    [else
     (if (compound-ctype? c)
         (compound-ctype-size c)
         ;; Everything else is pointer-sized:
         (foreign-sizeof 'void*))]))

(define (ctypes-sizeof+alignof base alignment)
  (let ([align (lambda (size algn)
                 (let ([amt (modulo size (or alignment algn))])
                   (if (zero? amt)
                       size
                       (+ size (- algn amt)))))])
    (let loop ([types base] [size 0] [max-align 1])
      (cond
       [(null? types) (values (align size max-align)
                              max-align)]
       [else (let ([sz (ctype-sizeof (car types))]
                   [algn (ctype-alignof (car types))])
               (loop (cdr types)
                     (+ (align size algn)
                        sz)
                     (max algn max-align)))]))))

(define/who (ctype-alignof c)
  (check who ctype? c)
  (cond
   [(compound-ctype? c)
    (compound-ctype-alignment c)]
   [else
    (ctype-sizeof c)]))

(define/who (cpointer-gcable? p)
  (let ([p (unwrap-cpointer who p)])
    (or (bytes? p)
        (and (authentic-cpointer? p)
             (let ([memory (cpointer-memory p)])
               (or (bytes? memory)
                   (#%vector? memory)))))))

;; ----------------------------------------

(define-record-type (ffi-lib make-ffi-lib ffi-lib?)
  (fields handle name))

(define ffi-lib*
  (case-lambda
   [(name) (ffi-lib* name #f #f)]
   [(name fail-as-false?) (ffi-lib* name fail-as-false? #f)]
   [(name fail-as-false? as-global?)
    (let ([name (if (string? name)
                    (string->immutable-string name)
                    name)])
      (ffi-get-lib 'ffi-lib
                   name
                   as-global?
                   fail-as-false?
                   (lambda (h)
                     (make-ffi-lib h name))))]))

(define-record-type (cpointer/ffi-obj make-ffi-obj ffi-obj?)
  (parent cpointer)
  (fields lib name))

(define/who (ffi-obj name lib)
  (check who bytes? name)
  (check who ffi-lib? lib)
  (let ([name (bytes->immutable-bytes name)])
    (ffi-get-obj who
                 (ffi-lib-handle lib)
                 (ffi-lib-name lib)
                 name
                 (lambda (ptr)
                   (make-ffi-obj (ffi-ptr->address ptr) #f lib name)))))

(define (ffi-obj-name obj)
  (cpointer/ffi-obj-name obj))

(define (ffi-obj-lib obj)
  (cpointer/ffi-obj-lib obj))

(define ffi-get-lib
  ;; Placeholder implementation that either fails
  ;; or returns a dummy value:
  (lambda (who name as-global? fail-as-false? success-k)
    (if fail-as-false?
        #f
        (success-k #f))))

(define ffi-get-obj
  ;; Placeholder implementation that always fails:
  (lambda (who lib lib-name name success-k)
    (raise
     (|#%app|
      exn:fail:filesystem
      (format "~a: not yet ready\n  name: ~a" who name)
      (current-continuation-marks)))))

(define ffi-ptr->address
  ;; Placeholder implementation
  (lambda (p) p))

(define (set-ffi-get-lib-and-obj! do-ffi-get-lib do-ffi-get-obj do-ffi-ptr->address)
  (set! ffi-get-lib do-ffi-get-lib)
  (set! ffi-get-obj do-ffi-get-obj)
  (set! ffi-ptr->address do-ffi-ptr->address))

;; ----------------------------------------

(define/who ptr-ref
  (case-lambda
   [(p type)
    (check who cpointer? p)
    (check who ctype? type)
    (c->s type (foreign-ref* type p 0))]
   [(p type offset)
    (check who cpointer? p)
    (check who ctype? type)
    (check who exact-integer? offset)
    (c->s type (foreign-ref* type
                             p
                             (* (ctype-sizeof type) offset)))]
   [(p type abs-tag offset)
    (check who cpointer? p)
    (check who ctype? type)
    (check who (lambda (p) (eq? p 'abs)) :contract "'abs" abs-tag)
    (check who exact-integer? offset)
    (c->s type (foreign-ref* type p offset))]))

(define (foreign-ref* type orig-p offset)
  (cond
   [(and (ffi-obj? orig-p)
         (eq? 'fpointer (ctype-our-rep type)))
    ;; Special case for `ptr-ref` on a function-type ffi-object:
    ;; cancel a level of indirection and preserve `ffi-obj`ness
    ;; to keep its name
    orig-p]
   [else
    (cond
     [(compound-ctype? type)
      ;; Instead of copying, get a pointer within `p`:
      (do-ptr-add orig-p offset #f)]
     [else
      (let ([p (unwrap-cpointer 'foreign-ref* orig-p)]
            [host-rep (ctype-host-rep type)])
        (cond
         [(cpointer-nonatomic? p)
          (let ([offset (+ offset (ptr-offset* p))])
            (cond
             [(and (word-aligned? offset)
                   (or (eq? 'void* host-rep)
                       (eq? 'scheme-object host-rep)))
              (let* ([i (fxsrl offset log-ptr-size-in-bytes)]
                     [v (vector-ref (cpointer-memory p) i)])
                (cond
                 [(eq? 'scheme-object host-rep) v]
                 [(stripped-cpointer? v) v]
                 [else
                  (raise-arguments-error 'ptr-ref
                                         "cannot convert value to a cpointer"
                                         "extracted value" v
                                         "source" orig-p)]))]
             [else
              (raise-arguments-error 'ptr-ref "unsupported access into non-atomic memory"
                                     "offset" offset
                                     "representation" host-rep
                                     "source" orig-p)]))]
         [else
          ;; Disable interrupts to avoid a GC:
          (with-interrupts-disabled
           ;; Special treatment is needed for 'scheme-object, since the
           ;; host Scheme rejects the use of 'scheme-object with
           ;; `foreign-ref`
           (let ([v (foreign-ref (if (eq? host-rep 'scheme-object)
                                     'uptr
                                     host-rep)
                                 (cpointer-address p)
                                 offset)])
             (case host-rep
               [(scheme-object) (address->object v 1)]
               [else
                (case (ctype-our-rep type)
                  [(gcpointer) (addr->gcpointer-memory v)]
                  [else v])])))]))])]))

(define/who ptr-set!
  (case-lambda
   [(p type v)
    (check who cpointer? p)
    (check who ctype? type)
    (foreign-set!* type
                   p
                   0
                   v)]
   [(p type offset v)
    (check who cpointer? p)
    (check who ctype? type)
    (check who exact-integer? offset)
    (foreign-set!* type
                   p
                   (* (ctype-sizeof type) offset)
                   v)]
   [(p type abs-tag offset v)
    (check who cpointer? p)
    (check who ctype? type)
    (check who (lambda (p) (eq? p 'abs)) :contract "'abs" abs-tag)
    (check who exact-integer? offset)
    (foreign-set!* type
                   p
                   offset
                   v)]))

(define ptr-size-in-bytes (foreign-sizeof 'void*))
(define log-ptr-size-in-bytes (- (integer-length ptr-size-in-bytes) 1))

(define (word-aligned? offset)
  (zero? (fxand offset (fx- ptr-size-in-bytes 1))))

(define (foreign-set!* type orig-p offset orig-v)
  (let ([p (unwrap-cpointer 'foreign-set!* orig-p)])
    (cond
     [(compound-ctype? type)
      ;; Corresponds to a copy, since `v` is represented by a pointer
      (memcpy* p offset
               (s->c type orig-v) 0
               (compound-ctype-size type)
               #f)]
     [else
      (let ([host-rep (ctype-host-rep type)]
            [v (s->c type orig-v)])
        (cond
         [(cpointer-nonatomic? p)
          (let ([offset (+ offset (ptr-offset* p))])
            (cond
             [(and (word-aligned? offset)
                   (or (eq? 'void* host-rep)
                       (eq? 'scheme-object host-rep)))
              (let ([i (fxsrl offset log-ptr-size-in-bytes)])
                (if (eq? host-rep 'scheme-object)
                    (vector-set! (cpointer-memory p) i v)
                    (let ([v (cpointer-strip v)])
                      (if (eq? v none)
                          (raise-arguments-error 'ptr-set!
                                                 "cannot install value into non-atomic memory"
                                                 "value" orig-v
                                                 "destination" orig-p)
                          (vector-set! (cpointer-memory p) i v)))))]
             [else
              (raise-arguments-error 'ptr-set! "unsupported access into non-atomic memory"
                                     "offset" offset
                                     "representation" host-rep
                                     "value" orig-v
                                     "destination" orig-p)]))]
         [(and (cpointer-nonatomic? v)
               (not (cpointer/cell? v)))
          (raise-arguments-error 'ptr-set!
                                 "cannot install non-atomic pointer into atomic memory"
                                 "non-atomic pointer" orig-v
                                 "destination" orig-p)]
         [else
          ;; Disable interrupts to avoid a GC:
          (with-interrupts-disabled
           ;; Special treatment is needed for 'scheme-object, since
           ;; the host Scheme rejects the use of 'scheme-object with
           ;; `foreign-set!`
           (foreign-set! (if (eq? host-rep 'scheme-object)
                             'uptr
                             host-rep)
                         (cpointer-address p)
                         offset
                         (case host-rep
                           [(scheme-object) (object->addr v 1)]
                           [(void*) (cpointer-address v)]
                           [else v])))]))])))

(define (memcpy* to to-offset from from-offset len move?)
  (let ([to (unwrap-cpointer* 'memcpy to)]
        [from (unwrap-cpointer* 'memcpy from)])
    (cond
     [(or (cpointer-nonatomic? to)
          (cpointer-nonatomic? from))
      (cond
       [(and (cpointer-nonatomic? to)
             (cpointer-nonatomic? from))
        (let ([to-offset (+ to-offset (ptr-offset* to))]
              [from-offset (+ from-offset (ptr-offset* from))])
          (cond
           [(and (word-aligned? to-offset)
                 (word-aligned? from-offset)
                 (word-aligned? len))
            (let ([to-i (fxsrl to-offset log-ptr-size-in-bytes)]
                  [from-i (fxsrl from-offset log-ptr-size-in-bytes)]
                  [n (fxsrl len log-ptr-size-in-bytes)])
              (vector-copy! (cpointer-memory to) to-i
                            (cpointer-memory from) from-i
                            (+ from-i n)))]
           [else
            (raise-arguments-error (if move? 'memmove 'memcpy) "unaligned non-atomic memory transfer"
                                   "destination" to
                                   "source" from
                                   "destination offset" to-offset
                                   "source offset" from-offset
                                   "count" len)]))]
       [else
        (raise-arguments-error (if move? 'memmove 'memcpy) "cannot copy non-atomic to/from atomic"
                               "destination" to
                               "source" from)])]
     [else
      (with-interrupts-disabled
       (let ([to (fx+ (cpointer*-address to) to-offset)]
             [from (fx+ (cpointer*-address from) from-offset)])
       (cond
        [(and move?
              ;; overlap?
              (or (<= to from (fx+ to len -1))
                  (<= from to (fx+ from len -1)))
              ;; shifting up?
              (< from to))
         ;; Copy from high to low to move in overlapping region
         (let loop ([to (+ to len)] [from (+ from len)] [len len])
           (unless (fx= len 0)
             (cond
              #;
              [(fx>= len 8)
               (let ([to (fx- to 8)]
                     [from (fx- from 8)])
                 (foreign-set! 'integer-64 to 0
                               (foreign-ref 'integer-64 from 0))
                 (loop to from (fx- len 8)))]
              [(and (meta-cond [(> (fixnum-width) 32) #t] [else #f])
                    (fx>= len 4))
               (let ([to (fx- to 4)]
                     [from (fx- from 4)])
                 (foreign-set! 'integer-32 to 0
                               (foreign-ref 'integer-32 from 0))
                 (loop to from (fx- len 4)))]
              [(fx>= len 2)
               (let ([to (fx- to 2)]
                     [from (fx- from 2)])
                 (foreign-set! 'integer-16 to 0
                               (foreign-ref 'integer-16 from 0))
                 (loop to from (fx- len 2)))]
              [else
               (let ([to (fx- to 1)]
                     [from (fx- from 1)])
                 (foreign-set! 'integer-8 to 0
                               (foreign-ref 'integer-8 from 0))
                 (loop to from (fx- len 1)))])))]
        [else
         (let loop ([to to] [from from] [len len])
           (unless (fx= len 0)
             (cond
              #;
              [(fx>= len 8)
               (foreign-set! 'integer-64 to 0
                             (foreign-ref 'integer-64 from 0))
               (loop (fx+ to 8) (fx+ from 8) (fx- len 8))]
              [(and (meta-cond [(> (fixnum-width) 32) #t] [else #f])
                    (fx>= len 4))
               (foreign-set! 'integer-32 to 0
                             (foreign-ref 'integer-32 from 0))
               (loop (fx+ to 4) (fx+ from 4) (fx- len 4))]
              [(fx>= len 2)
               (foreign-set! 'integer-16 to 0
                             (foreign-ref 'integer-16 from 0))
               (loop (fx+ to 2) (fx+ from 2) (fx- len 2))]
              [else
               (foreign-set! 'integer-8 to 0
                             (foreign-ref 'integer-8 from 0))
               (loop (fx+ to 1) (fx+ from 1) (fx- len 1))])))])))])))

(define memcpy/memmove
  (case-lambda
   [(who cptr src-cptr count)
    (check who cpointer? cptr)
    (check who cpointer? src-cptr)
    (check who exact-nonnegative-integer? count)
    (memcpy* cptr 0 src-cptr 0 count (eq? who 'memmove))]
   [(who cptr offset/src-cptr/src-cptr src-cptr/offset/count count/count/type)
    (check who cpointer? cptr)
    (cond
     [(cpointer? offset/src-cptr/src-cptr)
      ;; use y or z of x/y/z
      (cond
       [(ctype? count/count/type)
        ;; use z of x/y/z
        (check who exact-nonnegative-integer? src-cptr/offset/count)
        (memcpy* cptr 0 (unwrap-cpointer who offset/src-cptr/src-cptr) 0 (* src-cptr/offset/count (ctype-sizeof count/count/type)) (eq? who 'memmove))]
       [else
        ;; use y of x/y/z
        (check who exact-integer? src-cptr/offset/count)
        (check who exact-nonnegative-integer? count/count/type)
        (memcpy* cptr 0 (unwrap-cpointer who offset/src-cptr/src-cptr) src-cptr/offset/count src-cptr/offset/count (eq? who 'memmove))])]
     [else
      ;; use x of x/y/z
      (check who exact-integer? offset/src-cptr/src-cptr)
      (check who cpointer? src-cptr/offset/count)
      (check who exact-nonnegative-integer? count/count/type)
      (memcpy* cptr offset/src-cptr/src-cptr src-cptr/offset/count 0 count/count/type (eq? who 'memmove))])]
   [(who cptr offset src-cptr src-offset/count count/type)
    (check who cpointer? cptr)
    (check who exact-integer? offset)
    (check who cpointer? src-cptr)
    (cond
     [(ctype? count/type)
      ;; use y of x/y
      (check who exact-nonnegative-integer? src-offset/count)
      (let ([sz (ctype-sizeof count/type)])
        (memcpy* cptr (* sz offset) src-cptr 0 (* src-offset/count sz) (eq? who 'memmove)))]
     [else
      ;; use x of x/y
      (check who exact-integer? src-offset/count)
      (check who exact-nonnegative-integer? count/type)
      (memcpy* cptr offset src-cptr src-offset/count count/type (eq? who 'memmove))])]
   [(who cptr offset src-cptr src-offset count type)
    (check who cpointer? cptr)
    (check who exact-integer? offset)
    (check who cpointer? src-cptr)
    (check who exact-integer? src-offset)
    (check who ctype? type)
    (let ([sz (ctype-sizeof type)])
      (memcpy* cptr (* offset sz) src-cptr (* src-offset sz) (* count sz) (eq? who 'memmove)))]))

(define/who memcpy
  (case-lambda
   [(cptr src-cptr count)
    (memcpy/memmove who cptr src-cptr count)]
   [(cptr offset/src-cptr src-cptr/count count/type)
    (memcpy/memmove who cptr offset/src-cptr src-cptr/count count/type)]
   [(cptr offset src-cptr src-offset/count count/type)
    (memcpy/memmove who cptr offset src-cptr src-offset/count count/type)]
   [(cptr offset src-cptr src-offset count type)
    (memcpy/memmove who cptr offset src-cptr src-offset count type)]))

(define/who memmove
  (case-lambda
   [(cptr src-cptr count)
    (memcpy/memmove who cptr src-cptr count)]
   [(cptr offset/src-cptr src-cptr/count count/type)
    (memcpy/memmove who cptr offset/src-cptr src-cptr/count count/type)]
   [(cptr offset src-cptr src-offset/count count/type)
    (memcpy/memmove who cptr offset src-cptr src-offset/count count/type)]
   [(cptr offset src-cptr src-offset count type)
    (memcpy/memmove who cptr offset src-cptr src-offset count type)]))

;; ----------------------------------------

(define (memset* to to-offset byte len)
  (let ([to (unwrap-cpointer* 'memset to)])
    (cond
     [(cpointer-nonatomic? to)
      (raise-arguments-error 'memset "cannot set non-atomic"
                             "destination" to)]
     [else
      (with-interrupts-disabled
       (let ([to (fx+ (cpointer*-address to) to-offset)])
         (let loop ([to to] [len len])
           (unless (fx= len 0)
             (foreign-set! 'unsigned-8 to 0 byte)
             (loop (fx+ to 1) (fx- len 1))))))])))

(define/who memset
  (case-lambda
   [(cptr byte count)
    (check who cpointer? cptr)
    (check who byte? byte)
    (check who exact-nonnegative-integer? count)
    (memset* cptr 0 byte count)]
   [(cptr byte/offset count/byte type/count)
    (check who cpointer? cptr)
    (cond
     [(ctype? type/count)
      (check who byte? byte/offset)
      (check who exact-nonnegative-integer? count/byte)
      (memset* cptr 0 byte/offset (fx* count/byte (ctype-sizeof type/count)))]
     [else
      (check who exact-integer? byte/offset)
      (check who byte? count/byte)
      (check who exact-nonnegative-integer? type/count)
      (memset* cptr byte/offset count/byte type/count)])]
   [(cptr offset byte count type)
    (check who cpointer? cptr)
    (check who exact-integer? offset)
    (check who byte? byte)
    (check who exact-nonnegative-integer? count)
    (check who ctype? type)
    (memset* cptr (fx* offset (ctype-sizeof type)) byte (fx* count (ctype-sizeof type)))]))

;; ----------------------------------------

;; With finalization through an ordered guardian,
;; a "late" weak hash table is just a hash table.
(define (make-late-weak-hasheq)
  (make-weak-hasheq))

;; Same for late weak boxes:
(define (make-late-weak-box b)
  (make-weak-box b))

(define malloc
  ;; Recognize common ordering as fast cases, and dispatch to
  ;; a general handler to arbtrary argument order
  (case-lambda
   [(arg1)
    (cond
     [(nonnegative-fixnum? arg1)
      (normalized-malloc arg1 'atomic)]
     [(ctype? arg1)
      (normalized-malloc (ctype-sizeof arg1) (ctype-malloc-mode arg1))]
     [else
      (do-malloc (list arg1))])]
   [(arg1 arg2)
    (cond
     [(and (nonnegative-fixnum? arg1)
           (ctype? arg2))
      (normalized-malloc (* arg1 (ctype-sizeof arg2)) (ctype-malloc-mode arg2))]
     [(and (ctype? arg1)
           (nonnegative-fixnum? arg2))
      (normalized-malloc (* arg2 (ctype-sizeof arg1)) (ctype-malloc-mode arg1))]
     [(and (nonnegative-fixnum? arg1)
           (malloc-mode? arg2))
      (normalized-malloc arg1 arg2)]
     [else
      (do-malloc (list arg1 arg2))])]
   [(arg1 arg2 arg3) (do-malloc (list arg1 arg2 arg3))]
   [(arg1 arg2 arg3 arg4) (do-malloc (list arg1 arg2 arg3 arg4))]
   [(arg1 arg2 arg3 arg4 arg5) (do-malloc (list arg1 arg2 arg3 arg4 arg5))]))

(define (do-malloc args)
  (let ([duplicate-argument
         (lambda (what a1 a2)
           (raise-arguments-error 'malloc
                                  (string-append "mulitple " what " arguments")
                                  "first" a1
                                  "second" a2))])
    (let loop ([args args] [count #f] [type #f] [copy-from #f] [mode #f] [fail-mode #f])
      (cond
       [(null? args)
        (let* ([len (* (or count 1) (if type (ctype-sizeof type) 1))]
               [p (normalized-malloc len
                                     (or mode (if type (ctype-malloc-mode type) 'atomic)))])
          (when copy-from
            (memcpy* p 0 copy-from 0 len #f))
          p)]
       [(nonnegative-fixnum? (car args))
        (if count
            (duplicate-argument "size" count (car args))
            (loop (cdr args) (car args) type copy-from mode fail-mode))]
       [(ctype? (car args))
        (if type
            (duplicate-argument "type" type (car args))
            (loop (cdr args) count (car args) copy-from mode fail-mode))]
       [(and (cpointer? (car args)) (car args))
        (if copy-from
            (duplicate-argument "source for copy" copy-from (car args))
            (loop (cdr args) count type (car args) mode fail-mode))]
       [(malloc-mode? (car args))
        (if copy-from
            (duplicate-argument "mode" mode (car args))
            (loop (cdr args) count type copy-from (car args) fail-mode))]
       [(eq? (car args) 'failok)
        (if copy-from
            (duplicate-argument "failure mode" fail-mode (car args))
            (loop (cdr args) count type copy-from mode (car args)))]
       [else
        (raise-argument-error 'malloc
                              (string-append "(or/c (and/c exact-nonnegative-integer? fixnum?)\n"
                                             "      ctype? cpointer?\n"
                                             "      (or/c 'raw 'atomic 'nonatomic 'tagged\n"
                                             "            'atomic-interior 'interior\n"
                                             "            'stubborn 'uncollectable 'eternal)\n"
                                             "      'fail-ok)")
                              (car args))]))))

(define (normalized-malloc size mode)
  (cond
   [(eqv? size 0) #f]
   [(eq? mode 'raw)
    (make-cpointer (foreign-alloc size) #f)]
   [(eq? mode 'atomic)
    (make-cpointer (make-bytevector size) #f)]
   [(eq? mode 'nonatomic)
    (make-cpointer (make-vector (quotient size 8) 0) #f)]
   [(eq? mode 'atomic-interior)
    ;; This is not quite the same as traditional Racket, because
    ;; a finalizer is associated with the cpointer (as opposed to
    ;; the address that is wrapped by the cpointer). Also, interior
    ;; pointers are not allowed as GCable pointers.
    (let* ([bstr (make-bytevector size)]
           [p (make-cpointer bstr #f)])
      (lock-object bstr)
      (the-foreign-guardian p (lambda () (unlock-object bstr)))
      p)]
   [else
    (raise-unsupported-error 'malloc
                             (format "'~a mode is not supported" mode))]))

(define/who (free p)
  (let ([p (unwrap-cpointer who p)])
    (with-interrupts-disabled
     (foreign-free (cpointer-address p)))))

(define-record-type (cpointer/cell make-cpointer/cell cpointer/cell?)
  (parent cpointer)
  (fields))

(define (malloc-immobile-cell v)
  (let ([vec (vector v)])
    (lock-object vec)
    (make-cpointer/cell vec #f)))

(define (free-immobile-cell b)
  (unlock-object (cpointer-memory b)))

(define (malloc-mode? v)
  (chez:memq v '(raw atomic nonatomic tagged
                     atomic-interior interior
                     stubborn uncollectable eternal)))

(define (end-stubborn-change p)
  (raise-unsupported-error 'end-stubborn-change))

(define (extflvector->cpointer extfl-vector)
  (raise-unsupported-error 'extflvector->cpointer))

(define (vector->cpointer vec)
  (make-cpointer vec #f))

(define (flvector->cpointer flvec)
  (make-cpointer (flvector-bstr flvec) #f))

;; ----------------------------------------

(define the-foreign-guardian (make-guardian))

;; Can be called in any host thread
(define (poll-foreign-guardian)
  (let ([v (the-foreign-guardian)])
    (when v
      (v)
      (poll-foreign-guardian))))

;; ----------------------------------------

(define/who ffi-call
  (case-lambda
   [(p in-types out-type)
    (ffi-call p in-types out-type #f #f #f)]
   [(p in-types out-type abi)
    (ffi-call p in-types out-type abi #f #f)]
   [(p in-types out-type abi save-errno)
    (ffi-call p in-types out-type abi save-errno #f)]
   [(p in-types out-type abi save-errno orig-place?)
    (ffi-call p in-types out-type abi save-errno orig-place? #f)]
   [(p in-types out-type abi save-errno orig-place? lock-name)
    (ffi-call p in-types out-type abi save-errno orig-place? lock-name #f)]
   [(p in-types out-type abi save-errno orig-place? lock-name blocking?)
    (check who cpointer? p)
    (check who (lambda (l)
                 (and (list? l)
                      (andmap ctype? l)))
           :contract "(listof ctype?)"
           in-types)
    (check who ctype? out-type)
    ((ffi-call/callable #t in-types out-type abi save-errno blocking? #f #f) p)]))

(define/who ffi-call-maker
  (case-lambda
   [(in-types out-type)
    (ffi-call-maker in-types out-type #f #f #f)]
   [(in-types out-type abi)
    (ffi-call-maker in-types out-type abi #f #f)]
   [(in-types out-type abi save-errno)
    (ffi-call-maker in-types out-type abi save-errno #f)]
   [(in-types out-type abi save-errno orig-place?)
    (ffi-call-maker in-types out-type abi save-errno orig-place? #f)]
   [(in-types out-type abi save-errno orig-place? lock-name)
    (ffi-call-maker in-types out-type abi save-errno orig-place? lock-name #f)]
   [(in-types out-type abi save-errno orig-place? lock-name blocking?)
    (check who (lambda (l)
                 (and (list? l)
                      (andmap ctype? l)))
           :contract "(listof ctype?)"
           in-types)
    (check who ctype? out-type)
    (ffi-call/callable #t in-types out-type abi save-errno blocking? #f #f)]))

(define (ffi-call/callable call? in-types out-type abi save-errno blocking? atomic? async-apply)
  (let* ([conv (case abi
                 [(stdcall) '__stdcall]
                 [(sysv) '__cdecl]
                 [else #f])]
         [by-value? (lambda (type)
                      ;; An 'array rep is compound, but should be
                      ;; passed as a pointer, so only pass 'struct and
                      ;; 'union "by value":
                      (chez:memq (ctype-host-rep type) '(struct union)))]
         [array-rep-to-pointer-rep (lambda (host-rep)
                                     (if (eq? host-rep 'array)
                                         'void*
                                         host-rep))]
         [ids (map (lambda (in-type)
                     (and (by-value? in-type)
                          (gensym)))
                   in-types)]
         [ret-id (and (by-value? out-type)
                      (gensym))]
         [decls (let loop ([in-types in-types] [ids ids] [decls '()])
                  (cond
                   [(null? in-types) decls]
                   [(car ids)
                    (let ([id-decls ((compound-ctype-get-decls (car in-types)) (car ids))])
                      (loop (cdr in-types) (cdr ids) (append decls id-decls)))]
                   [else
                    (loop (cdr in-types) (cdr ids) decls)]))]
         [ret-decls (if ret-id
                        ((compound-ctype-get-decls out-type) ret-id)
                        '())]
         [ret-size (and ret-id (ctype-sizeof out-type))]
         [gen-proc+ret-maker+arg-makers
          (let ([expr `(let ()
                         ,@decls
                         ,@ret-decls
                         (list
                          (lambda (to-wrap)
                            (,(if call? 'foreign-procedure 'foreign-callable)
                             ,conv
                             ,@(if (or blocking? async-apply) '(__thread) '())
                             to-wrap
                             ,(map (lambda (in-type id)
                                     (if id
                                         `(& ,id)
                                         (array-rep-to-pointer-rep
                                          (ctype-host-rep in-type))))
                                   in-types ids)
                             ,(if ret-id
                                  `(& ,ret-id)
                                  (array-rep-to-pointer-rep
                                   (ctype-host-rep out-type)))))
                          ,(and call?
                                ret-id
                                `(lambda (p)
                                   (make-ftype-pointer ,ret-id p)))
                          ,@(if call?
                                (map (lambda (id)
                                       (and id
                                            `(lambda (p)
                                               (make-ftype-pointer ,id p))))
                                     ids)
                                '())))])
            (call-with-system-wind (lambda () (eval expr))))]
         [gen-proc (car gen-proc+ret-maker+arg-makers)]
         [ret-maker (cadr gen-proc+ret-maker+arg-makers)]
         [arg-makers (cddr gen-proc+ret-maker+arg-makers)]
         [async-callback-queue (and (procedure? async-apply) (current-async-callback-queue))])
    (cond
     [call?
      (lambda (to-wrap)
        (let* ([proc-p (unwrap-cpointer 'ffi-call to-wrap)])
          (lambda args
            (let* ([args (map (lambda (orig-arg in-type)
                                (let ([arg (s->c in-type orig-arg)])
                                  (if (and (cpointer? arg)
                                           (not (eq? 'scheme-object (ctype-host-rep in-type))))
                                      (let ([p (unwrap-cpointer 'ffi-call arg)])
                                        (when (and (cpointer-nonatomic? p)
                                                   (not (cpointer/cell? p)))
                                          (disallow-nonatomic-pointer 'argument orig-arg proc-p))
                                        p)
                                      arg)))
                              args in-types)]
                   [r (let ([ret-ptr (and ret-id
                                          ;; result is a struct type; need to allocate space for it
                                          (make-bytevector ret-size))])
                        (with-interrupts-disabled
                         (let ([r (#%apply (gen-proc (cpointer-address proc-p))
                                           (append
                                            (if ret-ptr
                                                (list (ret-maker (memory-address ret-ptr)))
                                                '())
                                            (map (lambda (arg in-type maker)
                                                   (let ([host-rep (array-rep-to-pointer-rep
                                                                    (ctype-host-rep in-type))])
                                                     (case host-rep
                                                       [(void*) (cpointer-address arg)]
                                                       [(struct union)
                                                        (maker (cpointer-address arg))]
                                                       [else arg])))
                                                 args in-types arg-makers)))])
                           (case save-errno
                             [(posix) (thread-cell-set! errno-cell (get-errno))]
                             [(windows) (thread-cell-set! errno-cell (get-last-error))])
                           (cond
                            [ret-ptr
                             (make-cpointer ret-ptr #f)]
                            [(eq? (ctype-our-rep out-type) 'gcpointer)
                             (addr->gcpointer-memory r)]
                            [else r]))))])
              (c->s out-type r)))))]
     [else ; callable
      (lambda (to-wrap)
        (gen-proc (lambda args ; if ret-id, includes an extra initial argument to receive the result
                    (let ([v (call-as-atomic-callback
                              (lambda ()
                                (s->c
                                 out-type
                                 (apply to-wrap
                                        (let loop ([args (if ret-id (cdr args) args)] [in-types in-types])
                                          (cond
                                           [(null? args) '()]
                                           [else
                                            (let* ([arg (car args)]
                                                   [type (car in-types)]
                                                   [arg (c->s type
                                                              (case (ctype-host-rep type)
                                                                [(struct union)
                                                                 (let* ([size (compound-ctype-size type)]
                                                                        [addr (ftype-pointer-address arg)]
                                                                        [bstr (make-bytevector size)])
                                                                   (memcpy* bstr 0 addr 0 size #f)
                                                                   (make-cpointer bstr #f))]
                                                                [else
                                                                 (cond
                                                                  [(eq? (ctype-our-rep type) 'gcpointer)
                                                                   (addr->gcpointer-memory arg)]
                                                                  [else arg])]))])
                                              (cons arg (loop (cdr args) (cdr in-types))))])))))
                              atomic?
                              async-apply
                              async-callback-queue)])
                      (if ret-id
                          (let* ([size (compound-ctype-size out-type)]
                                 [addr (ftype-pointer-address (car args))])
                            (memcpy* addr 0 v 0 size #f))
                          (case (ctype-host-rep out-type)
                            [(void*) (cpointer-address v)]
                            [else v]))))))])))

(define (types->reps types)
  (let loop ([types types] [reps '()] [decls '()])
    (cond
     [(null? types) (values (reverse reps) decls)]
     [else
      (let ([type (car types)])
        (if (compound-ctype? type)
            (let* ([id (gensym)]
                   [id-decls ((compound-ctype-get-decls type) id)])
              (loop (cdr types) (cons id reps) (append id-decls decls)))
            (loop (cdr types) (cons (ctype-host-rep type) reps) decls)))])))

(define (disallow-nonatomic-pointer what arg proc-p)
  (raise-arguments-error 'foreign-call "cannot pass non-atomic pointer to a function"
                         "pointer" arg
                         "function" (or (and (ffi-obj? proc-p)
                                             (cpointer/ffi-obj-name proc-p))
                                        'unknown)))

;; Rely on the fact that a virtual register defaults to 0 to detect a
;; thread that we didn't start. For a thread that we did start, a
(define PLACE-UNKNOWN-THREAD 0)
(define PLACE-KNOWN-THREAD 1)
(define PLACE-MAIN-THREAD 2)
(define-virtual-register place-thread-category PLACE-KNOWN-THREAD)
(define (register-as-place-main!)
  (place-thread-category PLACE-MAIN-THREAD)
  (current-async-callback-queue (make-async-callback-queue (make-mutex)
                                                           (make-condition)
                                                           '())))

;; Can be called in any Scheme thread
(define (call-as-atomic-callback thunk atomic? async-apply async-callback-queue)
  (cond
   [(eqv? (place-thread-category) PLACE-MAIN-THREAD)
    ;; In the main thread of a place. We must have gotten here by a
      ;; foreign call that called back, so interrupts are currently
      ;; disabled.
    (cond
     [(not atomic?)
      ;; reenable interrupts
      (enable-interrupts)
      (let ([v (thunk)])
        (disable-interrupts)
        v)]
     [else
      ;; Inform the scheduler that it's in atomic mode
      (scheduler-start-atomic)
      (let ([v (thunk)])
        (scheduler-end-atomic)
        v)])]
   [(box? async-apply)
    ;; Not in a place's main thread; return the box's content
    (unbox async-apply)]
   [else
    ;; Not in a place's main thread; queue an async callback
    ;; and wait for the response
    (let* ([result-done? (box #f)]
           [result #f]
           [q async-callback-queue]
           [m (async-callback-queue-lock q)]
           [need-interrupts?
            ;; If we created this therad by `fork-pthread`, we must
            ;; have gotten here by a foreign call, so interrupts are
            ;; currently disabled
            (eqv? (place-thread-category) PLACE-KNOWN-THREAD)])
      (mutex-acquire m)
      (set-async-callback-queue-in! q (cons (lambda ()
                                              (set! result (|#%app| async-apply thunk))
                                              (mutex-acquire m)
                                              (set-box! result-done? #t)
                                              (condition-broadcast (async-callback-queue-condition q))
                                              (mutex-release m))
                                            (async-callback-queue-in q)))
      (async-callback-poll-wakeup)
      (let loop ()
        (unless (unbox result-done?)
          (when need-interrupts?
            ;; Enable interrupts so that the thread is deactivated
            ;; when we wait on the condition
            (enable-interrupts))
          (condition-wait (async-callback-queue-condition q) m)
          (when need-interrupts? (disable-interrupts))
          (loop)))
      (mutex-release m)
      result)]))

(define scheduler-start-atomic void)
(define scheduler-end-atomic void)
(define (set-scheduler-atomicity-callbacks! start-atomic end-atomic)
  (set! scheduler-start-atomic start-atomic)
  (set! scheduler-end-atomic end-atomic))

(define async-callback-poll-wakeup void)
(define (set-async-callback-poll-wakeup! wakeup)
  (set! async-callback-poll-wakeup wakeup))

(define-record async-callback-queue (lock condition in))

(define-virtual-register current-async-callback-queue #f)

;; Returns callbacks to run in atomic mode
(define (poll-async-callbacks)
  (let ([q (current-async-callback-queue)])
    (mutex-acquire (async-callback-queue-lock q))
    (let ([in (async-callback-queue-in q)])
      (cond
       [(null? in)
        (mutex-release (async-callback-queue-lock q))
        '()]
       [else
        (set-async-callback-queue-in! q '())
        (mutex-release (async-callback-queue-lock q))
        (reverse in)]))))

;; ----------------------------------------

(define-record-type (callback create-callback ffi-callback?)
  (fields code))

(define/who ffi-callback
  (case-lambda
   [(proc in-types out-type)
    (ffi-callback proc in-types out-type #f #f #f)]
   [(proc in-types out-type abi)
    (ffi-callback proc in-types out-type abi #f #f)]
   [(proc in-types out-type abi atomic?)
    (ffi-callback proc in-types out-type abi atomic? #f)]
   [(proc in-types out-type abi atomic? async-apply)
    (check who procedure? proc)
    (check who (lambda (l)
                 (and (list? l)
                      (andmap ctype? l)))
           :contract "(listof ctype?)"
           in-types)
    (check who ctype? out-type)
    ((ffi-callback-maker in-types out-type abi atomic? async-apply) proc)]))

(define/who ffi-callback-maker
  (case-lambda
   [(in-types out-type)
    (ffi-callback-maker in-types out-type #f #f #f)]
   [(in-types out-type abi)
    (ffi-callback-maker in-types out-type abi #f #f)]
   [(in-types out-type abi atomic?)
    (ffi-callback-maker in-types out-type abi atomic? #f)]
   [(in-types out-type abi atomic? async-apply)
    (check who (lambda (l)
                 (and (list? l)
                      (andmap ctype? l)))
           :contract "(listof ctype?)"
           in-types)
    (check who ctype? out-type)
    (let ([make-code (ffi-call/callable #f in-types out-type abi #f #f (and atomic? #t) async-apply)])
      (lambda (proc)
        (check 'make-ffi-callback procedure? proc)
        (let* ([code (make-code proc)]
               [cb (create-callback code)])
          (lock-object code)
          (the-foreign-guardian cb (lambda () (unlock-object code)))
          cb)))]))

;; ----------------------------------------

(define/who (make-sized-byte-string cptr len)
  (check who cpointer? cptr)
  (check who exact-nonnegative-integer? len)
  (raise-unsupported-error who))

(define errno-cell (make-thread-cell 0))

(define/who saved-errno
  (case-lambda
   [() (thread-cell-ref errno-cell)]
   [(v)
    (check who exact-integer? v)
    (thread-cell-set! errno-cell v)]))

(define/who (lookup-errno sym)
  (check who symbol? sym)
  (raise-unsupported-error who))

;; function is called with interrupts disabled
(define get-errno
  (let ([get-&errno-name
         (case (machine-type)
           [(a6nt ta6nt i3nt ti3nt)
            (load-shared-object "msvcrt.dll")
            "_errno"]
           [(a6osx ta6osx i3osx ti3osx)
            (load-shared-object "libc.dylib")
            "__error"]
           [(a6le ta6le i3le ti3le)
            (load-shared-object "libc.so.6")
            "__errno_location"]
           [else
            ;; FIXME for more platforms
            (load-shared-object "libc.so")
            "__error"])])
    (let ([get-&errno (foreign-procedure get-&errno-name () void*)])
      (lambda ()
        (foreign-ref 'int (get-&errno) 0)))))

;; function is called with interrupts disabled
(define get-last-error
  (case (machine-type)
    [(a6nt ta6nt i3nt ti3nt)
     (load-shared-object "kernel32.dll")
     (foreign-procedure "GetLastError" () int)]
    [else (lambda () 0)]))

;; ----------------------------------------

(define process-global-table (make-hashtable equal-hash-code equal?))
(define process-table-lock (make-mutex))

(define (unsafe-register-process-global key val)
  (with-interrupts-disabled
   (mutex-acquire process-table-lock)
   (let ([result (cond
                  [(not val)
                   (hashtable-ref process-global-table key #f)]
                  [else
                   (let ([old-val (hashtable-ref process-global-table key #f)])
                     (cond
                      [(not old-val)
                       (hashtable-set! process-global-table key val)
                       #f]
                      [else old-val]))])])
     (mutex-release process-table-lock)
     result)))

;; ----------------------------------------

(define (set-cpointer-hash!)
  (record-type-equal-procedure (record-type-descriptor cpointer)
                               (lambda (a b eql?)
                                 (ptr-equal? a b)))
  (record-type-hash-procedure (record-type-descriptor cpointer)
                              (lambda (a hc)
                                (if (number? (cpointer-memory a))
                                    (hc (+ (cpointer-memory a)
                                           (ptr-offset* a)))
                                    (eq-hash-code (cpointer-memory a))))))
