1 // SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause)
2 /* Copyright (c) 2021 Facebook */
3 #include <stdio.h>
4 #include <stdlib.h>
5 #include <string.h>
6 #include <errno.h>
7 #include <linux/filter.h>
8 #include <sys/param.h>
9 #include "btf.h"
10 #include "bpf.h"
11 #include "libbpf.h"
12 #include "libbpf_internal.h"
13 #include "hashmap.h"
14 #include "bpf_gen_internal.h"
15 #include "skel_internal.h"
16 #include <asm/byteorder.h>
17
18 #define MAX_USED_MAPS 64
19 #define MAX_USED_PROGS 32
20 #define MAX_KFUNC_DESCS 256
21 #define MAX_FD_ARRAY_SZ (MAX_USED_MAPS + MAX_KFUNC_DESCS)
22
23 /* The following structure describes the stack layout of the loader program.
24 * In addition R6 contains the pointer to context.
25 * R7 contains the result of the last sys_bpf command (typically error or FD).
26 * R9 contains the result of the last sys_close command.
27 *
28 * Naming convention:
29 * ctx - bpf program context
30 * stack - bpf program stack
31 * blob - bpf_attr-s, strings, insns, map data.
32 * All the bytes that loader prog will use for read/write.
33 */
34 struct loader_stack {
35 __u32 btf_fd;
36 __u32 inner_map_fd;
37 __u32 prog_fd[MAX_USED_PROGS];
38 };
39
40 #define stack_off(field) \
41 (__s16)(-sizeof(struct loader_stack) + offsetof(struct loader_stack, field))
42
43 #define attr_field(attr, field) (attr + offsetof(union bpf_attr, field))
44
blob_fd_array_off(struct bpf_gen * gen,int index)45 static int blob_fd_array_off(struct bpf_gen *gen, int index)
46 {
47 return gen->fd_array + index * sizeof(int);
48 }
49
realloc_insn_buf(struct bpf_gen * gen,__u32 size)50 static int realloc_insn_buf(struct bpf_gen *gen, __u32 size)
51 {
52 size_t off = gen->insn_cur - gen->insn_start;
53 void *insn_start;
54
55 if (gen->error)
56 return gen->error;
57 if (size > INT32_MAX || off + size > INT32_MAX) {
58 gen->error = -ERANGE;
59 return -ERANGE;
60 }
61 insn_start = realloc(gen->insn_start, off + size);
62 if (!insn_start) {
63 gen->error = -ENOMEM;
64 free(gen->insn_start);
65 gen->insn_start = NULL;
66 return -ENOMEM;
67 }
68 gen->insn_start = insn_start;
69 gen->insn_cur = insn_start + off;
70 return 0;
71 }
72
realloc_data_buf(struct bpf_gen * gen,__u32 size)73 static int realloc_data_buf(struct bpf_gen *gen, __u32 size)
74 {
75 size_t off = gen->data_cur - gen->data_start;
76 void *data_start;
77
78 if (gen->error)
79 return gen->error;
80 if (size > INT32_MAX || off + size > INT32_MAX) {
81 gen->error = -ERANGE;
82 return -ERANGE;
83 }
84 data_start = realloc(gen->data_start, off + size);
85 if (!data_start) {
86 gen->error = -ENOMEM;
87 free(gen->data_start);
88 gen->data_start = NULL;
89 return -ENOMEM;
90 }
91 gen->data_start = data_start;
92 gen->data_cur = data_start + off;
93 return 0;
94 }
95
emit(struct bpf_gen * gen,struct bpf_insn insn)96 static void emit(struct bpf_gen *gen, struct bpf_insn insn)
97 {
98 if (realloc_insn_buf(gen, sizeof(insn)))
99 return;
100 memcpy(gen->insn_cur, &insn, sizeof(insn));
101 gen->insn_cur += sizeof(insn);
102 }
103
emit2(struct bpf_gen * gen,struct bpf_insn insn1,struct bpf_insn insn2)104 static void emit2(struct bpf_gen *gen, struct bpf_insn insn1, struct bpf_insn insn2)
105 {
106 emit(gen, insn1);
107 emit(gen, insn2);
108 }
109
110 static int add_data(struct bpf_gen *gen, const void *data, __u32 size);
111 static void emit_sys_close_blob(struct bpf_gen *gen, int blob_off);
112
bpf_gen__init(struct bpf_gen * gen,int log_level,int nr_progs,int nr_maps)113 void bpf_gen__init(struct bpf_gen *gen, int log_level, int nr_progs, int nr_maps)
114 {
115 size_t stack_sz = sizeof(struct loader_stack), nr_progs_sz;
116 int i;
117
118 gen->fd_array = add_data(gen, NULL, MAX_FD_ARRAY_SZ * sizeof(int));
119 gen->log_level = log_level;
120 /* save ctx pointer into R6 */
121 emit(gen, BPF_MOV64_REG(BPF_REG_6, BPF_REG_1));
122
123 /* bzero stack */
124 emit(gen, BPF_MOV64_REG(BPF_REG_1, BPF_REG_10));
125 emit(gen, BPF_ALU64_IMM(BPF_ADD, BPF_REG_1, -stack_sz));
126 emit(gen, BPF_MOV64_IMM(BPF_REG_2, stack_sz));
127 emit(gen, BPF_MOV64_IMM(BPF_REG_3, 0));
128 emit(gen, BPF_EMIT_CALL(BPF_FUNC_probe_read_kernel));
129
130 /* amount of stack actually used, only used to calculate iterations, not stack offset */
131 nr_progs_sz = offsetof(struct loader_stack, prog_fd[nr_progs]);
132 /* jump over cleanup code */
133 emit(gen, BPF_JMP_IMM(BPF_JA, 0, 0,
134 /* size of cleanup code below (including map fd cleanup) */
135 (nr_progs_sz / 4) * 3 + 2 +
136 /* 6 insns for emit_sys_close_blob,
137 * 6 insns for debug_regs in emit_sys_close_blob
138 */
139 nr_maps * (6 + (gen->log_level ? 6 : 0))));
140
141 /* remember the label where all error branches will jump to */
142 gen->cleanup_label = gen->insn_cur - gen->insn_start;
143 /* emit cleanup code: close all temp FDs */
144 for (i = 0; i < nr_progs_sz; i += 4) {
145 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_1, BPF_REG_10, -stack_sz + i));
146 emit(gen, BPF_JMP_IMM(BPF_JSLE, BPF_REG_1, 0, 1));
147 emit(gen, BPF_EMIT_CALL(BPF_FUNC_sys_close));
148 }
149 for (i = 0; i < nr_maps; i++)
150 emit_sys_close_blob(gen, blob_fd_array_off(gen, i));
151 /* R7 contains the error code from sys_bpf. Copy it into R0 and exit. */
152 emit(gen, BPF_MOV64_REG(BPF_REG_0, BPF_REG_7));
153 emit(gen, BPF_EXIT_INSN());
154 }
155
add_data(struct bpf_gen * gen,const void * data,__u32 size)156 static int add_data(struct bpf_gen *gen, const void *data, __u32 size)
157 {
158 __u32 size8 = roundup(size, 8);
159 __u64 zero = 0;
160 void *prev;
161
162 if (realloc_data_buf(gen, size8))
163 return 0;
164 prev = gen->data_cur;
165 if (data) {
166 memcpy(gen->data_cur, data, size);
167 memcpy(gen->data_cur + size, &zero, size8 - size);
168 } else {
169 memset(gen->data_cur, 0, size8);
170 }
171 gen->data_cur += size8;
172 return prev - gen->data_start;
173 }
174
175 /* Get index for map_fd/btf_fd slot in reserved fd_array, or in data relative
176 * to start of fd_array. Caller can decide if it is usable or not.
177 */
add_map_fd(struct bpf_gen * gen)178 static int add_map_fd(struct bpf_gen *gen)
179 {
180 if (gen->nr_maps == MAX_USED_MAPS) {
181 pr_warn("Total maps exceeds %d\n", MAX_USED_MAPS);
182 gen->error = -E2BIG;
183 return 0;
184 }
185 return gen->nr_maps++;
186 }
187
add_kfunc_btf_fd(struct bpf_gen * gen)188 static int add_kfunc_btf_fd(struct bpf_gen *gen)
189 {
190 int cur;
191
192 if (gen->nr_fd_array == MAX_KFUNC_DESCS) {
193 cur = add_data(gen, NULL, sizeof(int));
194 return (cur - gen->fd_array) / sizeof(int);
195 }
196 return MAX_USED_MAPS + gen->nr_fd_array++;
197 }
198
insn_bytes_to_bpf_size(__u32 sz)199 static int insn_bytes_to_bpf_size(__u32 sz)
200 {
201 switch (sz) {
202 case 8: return BPF_DW;
203 case 4: return BPF_W;
204 case 2: return BPF_H;
205 case 1: return BPF_B;
206 default: return -1;
207 }
208 }
209
210 /* *(u64 *)(blob + off) = (u64)(void *)(blob + data) */
emit_rel_store(struct bpf_gen * gen,int off,int data)211 static void emit_rel_store(struct bpf_gen *gen, int off, int data)
212 {
213 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_0, BPF_PSEUDO_MAP_IDX_VALUE,
214 0, 0, 0, data));
215 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
216 0, 0, 0, off));
217 emit(gen, BPF_STX_MEM(BPF_DW, BPF_REG_1, BPF_REG_0, 0));
218 }
219
move_blob2blob(struct bpf_gen * gen,int off,int size,int blob_off)220 static void move_blob2blob(struct bpf_gen *gen, int off, int size, int blob_off)
221 {
222 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_2, BPF_PSEUDO_MAP_IDX_VALUE,
223 0, 0, 0, blob_off));
224 emit(gen, BPF_LDX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_0, BPF_REG_2, 0));
225 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
226 0, 0, 0, off));
227 emit(gen, BPF_STX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_1, BPF_REG_0, 0));
228 }
229
move_blob2ctx(struct bpf_gen * gen,int ctx_off,int size,int blob_off)230 static void move_blob2ctx(struct bpf_gen *gen, int ctx_off, int size, int blob_off)
231 {
232 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
233 0, 0, 0, blob_off));
234 emit(gen, BPF_LDX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_0, BPF_REG_1, 0));
235 emit(gen, BPF_STX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_6, BPF_REG_0, ctx_off));
236 }
237
move_ctx2blob(struct bpf_gen * gen,int off,int size,int ctx_off,bool check_non_zero)238 static void move_ctx2blob(struct bpf_gen *gen, int off, int size, int ctx_off,
239 bool check_non_zero)
240 {
241 emit(gen, BPF_LDX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_0, BPF_REG_6, ctx_off));
242 if (check_non_zero)
243 /* If value in ctx is zero don't update the blob.
244 * For example: when ctx->map.max_entries == 0, keep default max_entries from bpf.c
245 */
246 emit(gen, BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 3));
247 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
248 0, 0, 0, off));
249 emit(gen, BPF_STX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_1, BPF_REG_0, 0));
250 }
251
move_stack2blob(struct bpf_gen * gen,int off,int size,int stack_off)252 static void move_stack2blob(struct bpf_gen *gen, int off, int size, int stack_off)
253 {
254 emit(gen, BPF_LDX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_0, BPF_REG_10, stack_off));
255 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
256 0, 0, 0, off));
257 emit(gen, BPF_STX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_1, BPF_REG_0, 0));
258 }
259
move_stack2ctx(struct bpf_gen * gen,int ctx_off,int size,int stack_off)260 static void move_stack2ctx(struct bpf_gen *gen, int ctx_off, int size, int stack_off)
261 {
262 emit(gen, BPF_LDX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_0, BPF_REG_10, stack_off));
263 emit(gen, BPF_STX_MEM(insn_bytes_to_bpf_size(size), BPF_REG_6, BPF_REG_0, ctx_off));
264 }
265
emit_sys_bpf(struct bpf_gen * gen,int cmd,int attr,int attr_size)266 static void emit_sys_bpf(struct bpf_gen *gen, int cmd, int attr, int attr_size)
267 {
268 emit(gen, BPF_MOV64_IMM(BPF_REG_1, cmd));
269 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_2, BPF_PSEUDO_MAP_IDX_VALUE,
270 0, 0, 0, attr));
271 emit(gen, BPF_MOV64_IMM(BPF_REG_3, attr_size));
272 emit(gen, BPF_EMIT_CALL(BPF_FUNC_sys_bpf));
273 /* remember the result in R7 */
274 emit(gen, BPF_MOV64_REG(BPF_REG_7, BPF_REG_0));
275 }
276
is_simm16(__s64 value)277 static bool is_simm16(__s64 value)
278 {
279 return value == (__s64)(__s16)value;
280 }
281
emit_check_err(struct bpf_gen * gen)282 static void emit_check_err(struct bpf_gen *gen)
283 {
284 __s64 off = -(gen->insn_cur - gen->insn_start - gen->cleanup_label) / 8 - 1;
285
286 /* R7 contains result of last sys_bpf command.
287 * if (R7 < 0) goto cleanup;
288 */
289 if (is_simm16(off)) {
290 emit(gen, BPF_JMP_IMM(BPF_JSLT, BPF_REG_7, 0, off));
291 } else {
292 gen->error = -ERANGE;
293 emit(gen, BPF_JMP_IMM(BPF_JA, 0, 0, -1));
294 }
295 }
296
297 /* reg1 and reg2 should not be R1 - R5. They can be R0, R6 - R10 */
emit_debug(struct bpf_gen * gen,int reg1,int reg2,const char * fmt,va_list args)298 static void emit_debug(struct bpf_gen *gen, int reg1, int reg2,
299 const char *fmt, va_list args)
300 {
301 char buf[1024];
302 int addr, len, ret;
303
304 if (!gen->log_level)
305 return;
306 ret = vsnprintf(buf, sizeof(buf), fmt, args);
307 if (ret < 1024 - 7 && reg1 >= 0 && reg2 < 0)
308 /* The special case to accommodate common debug_ret():
309 * to avoid specifying BPF_REG_7 and adding " r=%%d" to
310 * prints explicitly.
311 */
312 strcat(buf, " r=%d");
313 len = strlen(buf) + 1;
314 addr = add_data(gen, buf, len);
315
316 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
317 0, 0, 0, addr));
318 emit(gen, BPF_MOV64_IMM(BPF_REG_2, len));
319 if (reg1 >= 0)
320 emit(gen, BPF_MOV64_REG(BPF_REG_3, reg1));
321 if (reg2 >= 0)
322 emit(gen, BPF_MOV64_REG(BPF_REG_4, reg2));
323 emit(gen, BPF_EMIT_CALL(BPF_FUNC_trace_printk));
324 }
325
debug_regs(struct bpf_gen * gen,int reg1,int reg2,const char * fmt,...)326 static void debug_regs(struct bpf_gen *gen, int reg1, int reg2, const char *fmt, ...)
327 {
328 va_list args;
329
330 va_start(args, fmt);
331 emit_debug(gen, reg1, reg2, fmt, args);
332 va_end(args);
333 }
334
debug_ret(struct bpf_gen * gen,const char * fmt,...)335 static void debug_ret(struct bpf_gen *gen, const char *fmt, ...)
336 {
337 va_list args;
338
339 va_start(args, fmt);
340 emit_debug(gen, BPF_REG_7, -1, fmt, args);
341 va_end(args);
342 }
343
__emit_sys_close(struct bpf_gen * gen)344 static void __emit_sys_close(struct bpf_gen *gen)
345 {
346 emit(gen, BPF_JMP_IMM(BPF_JSLE, BPF_REG_1, 0,
347 /* 2 is the number of the following insns
348 * * 6 is additional insns in debug_regs
349 */
350 2 + (gen->log_level ? 6 : 0)));
351 emit(gen, BPF_MOV64_REG(BPF_REG_9, BPF_REG_1));
352 emit(gen, BPF_EMIT_CALL(BPF_FUNC_sys_close));
353 debug_regs(gen, BPF_REG_9, BPF_REG_0, "close(%%d) = %%d");
354 }
355
emit_sys_close_stack(struct bpf_gen * gen,int stack_off)356 static void emit_sys_close_stack(struct bpf_gen *gen, int stack_off)
357 {
358 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_1, BPF_REG_10, stack_off));
359 __emit_sys_close(gen);
360 }
361
emit_sys_close_blob(struct bpf_gen * gen,int blob_off)362 static void emit_sys_close_blob(struct bpf_gen *gen, int blob_off)
363 {
364 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_0, BPF_PSEUDO_MAP_IDX_VALUE,
365 0, 0, 0, blob_off));
366 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_1, BPF_REG_0, 0));
367 __emit_sys_close(gen);
368 }
369
bpf_gen__finish(struct bpf_gen * gen,int nr_progs,int nr_maps)370 int bpf_gen__finish(struct bpf_gen *gen, int nr_progs, int nr_maps)
371 {
372 int i;
373
374 if (nr_progs != gen->nr_progs || nr_maps != gen->nr_maps) {
375 pr_warn("progs/maps mismatch\n");
376 gen->error = -EFAULT;
377 return gen->error;
378 }
379 emit_sys_close_stack(gen, stack_off(btf_fd));
380 for (i = 0; i < gen->nr_progs; i++)
381 move_stack2ctx(gen,
382 sizeof(struct bpf_loader_ctx) +
383 sizeof(struct bpf_map_desc) * gen->nr_maps +
384 sizeof(struct bpf_prog_desc) * i +
385 offsetof(struct bpf_prog_desc, prog_fd), 4,
386 stack_off(prog_fd[i]));
387 for (i = 0; i < gen->nr_maps; i++)
388 move_blob2ctx(gen,
389 sizeof(struct bpf_loader_ctx) +
390 sizeof(struct bpf_map_desc) * i +
391 offsetof(struct bpf_map_desc, map_fd), 4,
392 blob_fd_array_off(gen, i));
393 emit(gen, BPF_MOV64_IMM(BPF_REG_0, 0));
394 emit(gen, BPF_EXIT_INSN());
395 pr_debug("gen: finish %d\n", gen->error);
396 if (!gen->error) {
397 struct gen_loader_opts *opts = gen->opts;
398
399 opts->insns = gen->insn_start;
400 opts->insns_sz = gen->insn_cur - gen->insn_start;
401 opts->data = gen->data_start;
402 opts->data_sz = gen->data_cur - gen->data_start;
403 }
404 return gen->error;
405 }
406
bpf_gen__free(struct bpf_gen * gen)407 void bpf_gen__free(struct bpf_gen *gen)
408 {
409 if (!gen)
410 return;
411 free(gen->data_start);
412 free(gen->insn_start);
413 free(gen);
414 }
415
bpf_gen__load_btf(struct bpf_gen * gen,const void * btf_raw_data,__u32 btf_raw_size)416 void bpf_gen__load_btf(struct bpf_gen *gen, const void *btf_raw_data,
417 __u32 btf_raw_size)
418 {
419 int attr_size = offsetofend(union bpf_attr, btf_log_level);
420 int btf_data, btf_load_attr;
421 union bpf_attr attr;
422
423 memset(&attr, 0, attr_size);
424 pr_debug("gen: load_btf: size %d\n", btf_raw_size);
425 btf_data = add_data(gen, btf_raw_data, btf_raw_size);
426
427 attr.btf_size = btf_raw_size;
428 btf_load_attr = add_data(gen, &attr, attr_size);
429
430 /* populate union bpf_attr with user provided log details */
431 move_ctx2blob(gen, attr_field(btf_load_attr, btf_log_level), 4,
432 offsetof(struct bpf_loader_ctx, log_level), false);
433 move_ctx2blob(gen, attr_field(btf_load_attr, btf_log_size), 4,
434 offsetof(struct bpf_loader_ctx, log_size), false);
435 move_ctx2blob(gen, attr_field(btf_load_attr, btf_log_buf), 8,
436 offsetof(struct bpf_loader_ctx, log_buf), false);
437 /* populate union bpf_attr with a pointer to the BTF data */
438 emit_rel_store(gen, attr_field(btf_load_attr, btf), btf_data);
439 /* emit BTF_LOAD command */
440 emit_sys_bpf(gen, BPF_BTF_LOAD, btf_load_attr, attr_size);
441 debug_ret(gen, "btf_load size %d", btf_raw_size);
442 emit_check_err(gen);
443 /* remember btf_fd in the stack, if successful */
444 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_10, BPF_REG_7, stack_off(btf_fd)));
445 }
446
bpf_gen__map_create(struct bpf_gen * gen,struct bpf_create_map_params * map_attr,int map_idx)447 void bpf_gen__map_create(struct bpf_gen *gen,
448 struct bpf_create_map_params *map_attr, int map_idx)
449 {
450 int attr_size = offsetofend(union bpf_attr, btf_vmlinux_value_type_id);
451 bool close_inner_map_fd = false;
452 int map_create_attr, idx;
453 union bpf_attr attr;
454
455 memset(&attr, 0, attr_size);
456 attr.map_type = map_attr->map_type;
457 attr.key_size = map_attr->key_size;
458 attr.value_size = map_attr->value_size;
459 attr.map_flags = map_attr->map_flags;
460 attr.map_extra = map_attr->map_extra;
461 memcpy(attr.map_name, map_attr->name,
462 min((unsigned)strlen(map_attr->name), BPF_OBJ_NAME_LEN - 1));
463 attr.numa_node = map_attr->numa_node;
464 attr.map_ifindex = map_attr->map_ifindex;
465 attr.max_entries = map_attr->max_entries;
466 switch (attr.map_type) {
467 case BPF_MAP_TYPE_PERF_EVENT_ARRAY:
468 case BPF_MAP_TYPE_CGROUP_ARRAY:
469 case BPF_MAP_TYPE_STACK_TRACE:
470 case BPF_MAP_TYPE_ARRAY_OF_MAPS:
471 case BPF_MAP_TYPE_HASH_OF_MAPS:
472 case BPF_MAP_TYPE_DEVMAP:
473 case BPF_MAP_TYPE_DEVMAP_HASH:
474 case BPF_MAP_TYPE_CPUMAP:
475 case BPF_MAP_TYPE_XSKMAP:
476 case BPF_MAP_TYPE_SOCKMAP:
477 case BPF_MAP_TYPE_SOCKHASH:
478 case BPF_MAP_TYPE_QUEUE:
479 case BPF_MAP_TYPE_STACK:
480 case BPF_MAP_TYPE_RINGBUF:
481 break;
482 default:
483 attr.btf_key_type_id = map_attr->btf_key_type_id;
484 attr.btf_value_type_id = map_attr->btf_value_type_id;
485 }
486
487 pr_debug("gen: map_create: %s idx %d type %d value_type_id %d\n",
488 attr.map_name, map_idx, map_attr->map_type, attr.btf_value_type_id);
489
490 map_create_attr = add_data(gen, &attr, attr_size);
491 if (attr.btf_value_type_id)
492 /* populate union bpf_attr with btf_fd saved in the stack earlier */
493 move_stack2blob(gen, attr_field(map_create_attr, btf_fd), 4,
494 stack_off(btf_fd));
495 switch (attr.map_type) {
496 case BPF_MAP_TYPE_ARRAY_OF_MAPS:
497 case BPF_MAP_TYPE_HASH_OF_MAPS:
498 move_stack2blob(gen, attr_field(map_create_attr, inner_map_fd), 4,
499 stack_off(inner_map_fd));
500 close_inner_map_fd = true;
501 break;
502 default:
503 break;
504 }
505 /* conditionally update max_entries */
506 if (map_idx >= 0)
507 move_ctx2blob(gen, attr_field(map_create_attr, max_entries), 4,
508 sizeof(struct bpf_loader_ctx) +
509 sizeof(struct bpf_map_desc) * map_idx +
510 offsetof(struct bpf_map_desc, max_entries),
511 true /* check that max_entries != 0 */);
512 /* emit MAP_CREATE command */
513 emit_sys_bpf(gen, BPF_MAP_CREATE, map_create_attr, attr_size);
514 debug_ret(gen, "map_create %s idx %d type %d value_size %d value_btf_id %d",
515 attr.map_name, map_idx, map_attr->map_type, attr.value_size,
516 attr.btf_value_type_id);
517 emit_check_err(gen);
518 /* remember map_fd in the stack, if successful */
519 if (map_idx < 0) {
520 /* This bpf_gen__map_create() function is called with map_idx >= 0
521 * for all maps that libbpf loading logic tracks.
522 * It's called with -1 to create an inner map.
523 */
524 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_10, BPF_REG_7,
525 stack_off(inner_map_fd)));
526 } else if (map_idx != gen->nr_maps) {
527 gen->error = -EDOM; /* internal bug */
528 return;
529 } else {
530 /* add_map_fd does gen->nr_maps++ */
531 idx = add_map_fd(gen);
532 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
533 0, 0, 0, blob_fd_array_off(gen, idx)));
534 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_1, BPF_REG_7, 0));
535 }
536 if (close_inner_map_fd)
537 emit_sys_close_stack(gen, stack_off(inner_map_fd));
538 }
539
bpf_gen__record_attach_target(struct bpf_gen * gen,const char * attach_name,enum bpf_attach_type type)540 void bpf_gen__record_attach_target(struct bpf_gen *gen, const char *attach_name,
541 enum bpf_attach_type type)
542 {
543 const char *prefix;
544 int kind, ret;
545
546 btf_get_kernel_prefix_kind(type, &prefix, &kind);
547 gen->attach_kind = kind;
548 ret = snprintf(gen->attach_target, sizeof(gen->attach_target), "%s%s",
549 prefix, attach_name);
550 if (ret == sizeof(gen->attach_target))
551 gen->error = -ENOSPC;
552 }
553
emit_find_attach_target(struct bpf_gen * gen)554 static void emit_find_attach_target(struct bpf_gen *gen)
555 {
556 int name, len = strlen(gen->attach_target) + 1;
557
558 pr_debug("gen: find_attach_tgt %s %d\n", gen->attach_target, gen->attach_kind);
559 name = add_data(gen, gen->attach_target, len);
560
561 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
562 0, 0, 0, name));
563 emit(gen, BPF_MOV64_IMM(BPF_REG_2, len));
564 emit(gen, BPF_MOV64_IMM(BPF_REG_3, gen->attach_kind));
565 emit(gen, BPF_MOV64_IMM(BPF_REG_4, 0));
566 emit(gen, BPF_EMIT_CALL(BPF_FUNC_btf_find_by_name_kind));
567 emit(gen, BPF_MOV64_REG(BPF_REG_7, BPF_REG_0));
568 debug_ret(gen, "find_by_name_kind(%s,%d)",
569 gen->attach_target, gen->attach_kind);
570 emit_check_err(gen);
571 /* if successful, btf_id is in lower 32-bit of R7 and
572 * btf_obj_fd is in upper 32-bit
573 */
574 }
575
bpf_gen__record_extern(struct bpf_gen * gen,const char * name,bool is_weak,bool is_typeless,int kind,int insn_idx)576 void bpf_gen__record_extern(struct bpf_gen *gen, const char *name, bool is_weak,
577 bool is_typeless, int kind, int insn_idx)
578 {
579 struct ksym_relo_desc *relo;
580
581 relo = libbpf_reallocarray(gen->relos, gen->relo_cnt + 1, sizeof(*relo));
582 if (!relo) {
583 gen->error = -ENOMEM;
584 return;
585 }
586 gen->relos = relo;
587 relo += gen->relo_cnt;
588 relo->name = name;
589 relo->is_weak = is_weak;
590 relo->is_typeless = is_typeless;
591 relo->kind = kind;
592 relo->insn_idx = insn_idx;
593 gen->relo_cnt++;
594 }
595
596 /* returns existing ksym_desc with ref incremented, or inserts a new one */
get_ksym_desc(struct bpf_gen * gen,struct ksym_relo_desc * relo)597 static struct ksym_desc *get_ksym_desc(struct bpf_gen *gen, struct ksym_relo_desc *relo)
598 {
599 struct ksym_desc *kdesc;
600
601 for (int i = 0; i < gen->nr_ksyms; i++) {
602 if (!strcmp(gen->ksyms[i].name, relo->name)) {
603 gen->ksyms[i].ref++;
604 return &gen->ksyms[i];
605 }
606 }
607 kdesc = libbpf_reallocarray(gen->ksyms, gen->nr_ksyms + 1, sizeof(*kdesc));
608 if (!kdesc) {
609 gen->error = -ENOMEM;
610 return NULL;
611 }
612 gen->ksyms = kdesc;
613 kdesc = &gen->ksyms[gen->nr_ksyms++];
614 kdesc->name = relo->name;
615 kdesc->kind = relo->kind;
616 kdesc->ref = 1;
617 kdesc->off = 0;
618 kdesc->insn = 0;
619 return kdesc;
620 }
621
622 /* Overwrites BPF_REG_{0, 1, 2, 3, 4, 7}
623 * Returns result in BPF_REG_7
624 */
emit_bpf_find_by_name_kind(struct bpf_gen * gen,struct ksym_relo_desc * relo)625 static void emit_bpf_find_by_name_kind(struct bpf_gen *gen, struct ksym_relo_desc *relo)
626 {
627 int name_off, len = strlen(relo->name) + 1;
628
629 name_off = add_data(gen, relo->name, len);
630 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
631 0, 0, 0, name_off));
632 emit(gen, BPF_MOV64_IMM(BPF_REG_2, len));
633 emit(gen, BPF_MOV64_IMM(BPF_REG_3, relo->kind));
634 emit(gen, BPF_MOV64_IMM(BPF_REG_4, 0));
635 emit(gen, BPF_EMIT_CALL(BPF_FUNC_btf_find_by_name_kind));
636 emit(gen, BPF_MOV64_REG(BPF_REG_7, BPF_REG_0));
637 debug_ret(gen, "find_by_name_kind(%s,%d)", relo->name, relo->kind);
638 }
639
640 /* Overwrites BPF_REG_{0, 1, 2, 3, 4, 7}
641 * Returns result in BPF_REG_7
642 * Returns u64 symbol addr in BPF_REG_9
643 */
emit_bpf_kallsyms_lookup_name(struct bpf_gen * gen,struct ksym_relo_desc * relo)644 static void emit_bpf_kallsyms_lookup_name(struct bpf_gen *gen, struct ksym_relo_desc *relo)
645 {
646 int name_off, len = strlen(relo->name) + 1, res_off;
647
648 name_off = add_data(gen, relo->name, len);
649 res_off = add_data(gen, NULL, 8); /* res is u64 */
650 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
651 0, 0, 0, name_off));
652 emit(gen, BPF_MOV64_IMM(BPF_REG_2, len));
653 emit(gen, BPF_MOV64_IMM(BPF_REG_3, 0));
654 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_4, BPF_PSEUDO_MAP_IDX_VALUE,
655 0, 0, 0, res_off));
656 emit(gen, BPF_MOV64_REG(BPF_REG_7, BPF_REG_4));
657 emit(gen, BPF_EMIT_CALL(BPF_FUNC_kallsyms_lookup_name));
658 emit(gen, BPF_LDX_MEM(BPF_DW, BPF_REG_9, BPF_REG_7, 0));
659 emit(gen, BPF_MOV64_REG(BPF_REG_7, BPF_REG_0));
660 debug_ret(gen, "kallsyms_lookup_name(%s,%d)", relo->name, relo->kind);
661 }
662
663 /* Expects:
664 * BPF_REG_8 - pointer to instruction
665 *
666 * We need to reuse BTF fd for same symbol otherwise each relocation takes a new
667 * index, while kernel limits total kfunc BTFs to 256. For duplicate symbols,
668 * this would mean a new BTF fd index for each entry. By pairing symbol name
669 * with index, we get the insn->imm, insn->off pairing that kernel uses for
670 * kfunc_tab, which becomes the effective limit even though all of them may
671 * share same index in fd_array (such that kfunc_btf_tab has 1 element).
672 */
emit_relo_kfunc_btf(struct bpf_gen * gen,struct ksym_relo_desc * relo,int insn)673 static void emit_relo_kfunc_btf(struct bpf_gen *gen, struct ksym_relo_desc *relo, int insn)
674 {
675 struct ksym_desc *kdesc;
676 int btf_fd_idx;
677
678 kdesc = get_ksym_desc(gen, relo);
679 if (!kdesc)
680 return;
681 /* try to copy from existing bpf_insn */
682 if (kdesc->ref > 1) {
683 move_blob2blob(gen, insn + offsetof(struct bpf_insn, imm), 4,
684 kdesc->insn + offsetof(struct bpf_insn, imm));
685 move_blob2blob(gen, insn + offsetof(struct bpf_insn, off), 2,
686 kdesc->insn + offsetof(struct bpf_insn, off));
687 goto log;
688 }
689 /* remember insn offset, so we can copy BTF ID and FD later */
690 kdesc->insn = insn;
691 emit_bpf_find_by_name_kind(gen, relo);
692 if (!relo->is_weak)
693 emit_check_err(gen);
694 /* get index in fd_array to store BTF FD at */
695 btf_fd_idx = add_kfunc_btf_fd(gen);
696 if (btf_fd_idx > INT16_MAX) {
697 pr_warn("BTF fd off %d for kfunc %s exceeds INT16_MAX, cannot process relocation\n",
698 btf_fd_idx, relo->name);
699 gen->error = -E2BIG;
700 return;
701 }
702 kdesc->off = btf_fd_idx;
703 /* set a default value for imm */
704 emit(gen, BPF_ST_MEM(BPF_W, BPF_REG_8, offsetof(struct bpf_insn, imm), 0));
705 /* skip success case store if ret < 0 */
706 emit(gen, BPF_JMP_IMM(BPF_JSLT, BPF_REG_7, 0, 1));
707 /* store btf_id into insn[insn_idx].imm */
708 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_8, BPF_REG_7, offsetof(struct bpf_insn, imm)));
709 /* load fd_array slot pointer */
710 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_0, BPF_PSEUDO_MAP_IDX_VALUE,
711 0, 0, 0, blob_fd_array_off(gen, btf_fd_idx)));
712 /* skip store of BTF fd if ret < 0 */
713 emit(gen, BPF_JMP_IMM(BPF_JSLT, BPF_REG_7, 0, 3));
714 /* store BTF fd in slot */
715 emit(gen, BPF_MOV64_REG(BPF_REG_9, BPF_REG_7));
716 emit(gen, BPF_ALU64_IMM(BPF_RSH, BPF_REG_9, 32));
717 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_0, BPF_REG_9, 0));
718 /* set a default value for off */
719 emit(gen, BPF_ST_MEM(BPF_H, BPF_REG_8, offsetof(struct bpf_insn, off), 0));
720 /* skip insn->off store if ret < 0 */
721 emit(gen, BPF_JMP_IMM(BPF_JSLT, BPF_REG_7, 0, 2));
722 /* skip if vmlinux BTF */
723 emit(gen, BPF_JMP_IMM(BPF_JEQ, BPF_REG_9, 0, 1));
724 /* store index into insn[insn_idx].off */
725 emit(gen, BPF_ST_MEM(BPF_H, BPF_REG_8, offsetof(struct bpf_insn, off), btf_fd_idx));
726 log:
727 if (!gen->log_level)
728 return;
729 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_8,
730 offsetof(struct bpf_insn, imm)));
731 emit(gen, BPF_LDX_MEM(BPF_H, BPF_REG_9, BPF_REG_8,
732 offsetof(struct bpf_insn, off)));
733 debug_regs(gen, BPF_REG_7, BPF_REG_9, " func (%s:count=%d): imm: %%d, off: %%d",
734 relo->name, kdesc->ref);
735 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_0, BPF_PSEUDO_MAP_IDX_VALUE,
736 0, 0, 0, blob_fd_array_off(gen, kdesc->off)));
737 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_9, BPF_REG_0, 0));
738 debug_regs(gen, BPF_REG_9, -1, " func (%s:count=%d): btf_fd",
739 relo->name, kdesc->ref);
740 }
741
emit_ksym_relo_log(struct bpf_gen * gen,struct ksym_relo_desc * relo,int ref)742 static void emit_ksym_relo_log(struct bpf_gen *gen, struct ksym_relo_desc *relo,
743 int ref)
744 {
745 if (!gen->log_level)
746 return;
747 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_8,
748 offsetof(struct bpf_insn, imm)));
749 emit(gen, BPF_LDX_MEM(BPF_H, BPF_REG_9, BPF_REG_8, sizeof(struct bpf_insn) +
750 offsetof(struct bpf_insn, imm)));
751 debug_regs(gen, BPF_REG_7, BPF_REG_9, " var t=%d w=%d (%s:count=%d): imm[0]: %%d, imm[1]: %%d",
752 relo->is_typeless, relo->is_weak, relo->name, ref);
753 emit(gen, BPF_LDX_MEM(BPF_B, BPF_REG_9, BPF_REG_8, offsetofend(struct bpf_insn, code)));
754 debug_regs(gen, BPF_REG_9, -1, " var t=%d w=%d (%s:count=%d): insn.reg",
755 relo->is_typeless, relo->is_weak, relo->name, ref);
756 }
757
758 /* Expects:
759 * BPF_REG_8 - pointer to instruction
760 */
emit_relo_ksym_typeless(struct bpf_gen * gen,struct ksym_relo_desc * relo,int insn)761 static void emit_relo_ksym_typeless(struct bpf_gen *gen,
762 struct ksym_relo_desc *relo, int insn)
763 {
764 struct ksym_desc *kdesc;
765
766 kdesc = get_ksym_desc(gen, relo);
767 if (!kdesc)
768 return;
769 /* try to copy from existing ldimm64 insn */
770 if (kdesc->ref > 1) {
771 move_blob2blob(gen, insn + offsetof(struct bpf_insn, imm), 4,
772 kdesc->insn + offsetof(struct bpf_insn, imm));
773 move_blob2blob(gen, insn + sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm), 4,
774 kdesc->insn + sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm));
775 goto log;
776 }
777 /* remember insn offset, so we can copy ksym addr later */
778 kdesc->insn = insn;
779 /* skip typeless ksym_desc in fd closing loop in cleanup_relos */
780 kdesc->typeless = true;
781 emit_bpf_kallsyms_lookup_name(gen, relo);
782 emit(gen, BPF_JMP_IMM(BPF_JEQ, BPF_REG_7, -ENOENT, 1));
783 emit_check_err(gen);
784 /* store lower half of addr into insn[insn_idx].imm */
785 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_8, BPF_REG_9, offsetof(struct bpf_insn, imm)));
786 /* store upper half of addr into insn[insn_idx + 1].imm */
787 emit(gen, BPF_ALU64_IMM(BPF_RSH, BPF_REG_9, 32));
788 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_8, BPF_REG_9,
789 sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm)));
790 log:
791 emit_ksym_relo_log(gen, relo, kdesc->ref);
792 }
793
src_reg_mask(void)794 static __u32 src_reg_mask(void)
795 {
796 #if defined(__LITTLE_ENDIAN_BITFIELD)
797 return 0x0f; /* src_reg,dst_reg,... */
798 #elif defined(__BIG_ENDIAN_BITFIELD)
799 return 0xf0; /* dst_reg,src_reg,... */
800 #else
801 #error "Unsupported bit endianness, cannot proceed"
802 #endif
803 }
804
805 /* Expects:
806 * BPF_REG_8 - pointer to instruction
807 */
emit_relo_ksym_btf(struct bpf_gen * gen,struct ksym_relo_desc * relo,int insn)808 static void emit_relo_ksym_btf(struct bpf_gen *gen, struct ksym_relo_desc *relo, int insn)
809 {
810 struct ksym_desc *kdesc;
811 __u32 reg_mask;
812
813 kdesc = get_ksym_desc(gen, relo);
814 if (!kdesc)
815 return;
816 /* try to copy from existing ldimm64 insn */
817 if (kdesc->ref > 1) {
818 move_blob2blob(gen, insn + offsetof(struct bpf_insn, imm), 4,
819 kdesc->insn + offsetof(struct bpf_insn, imm));
820 move_blob2blob(gen, insn + sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm), 4,
821 kdesc->insn + sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm));
822 emit(gen, BPF_LDX_MEM(BPF_W, BPF_REG_9, BPF_REG_8, offsetof(struct bpf_insn, imm)));
823 /* jump over src_reg adjustment if imm is not 0 */
824 emit(gen, BPF_JMP_IMM(BPF_JNE, BPF_REG_9, 0, 3));
825 goto clear_src_reg;
826 }
827 /* remember insn offset, so we can copy BTF ID and FD later */
828 kdesc->insn = insn;
829 emit_bpf_find_by_name_kind(gen, relo);
830 if (!relo->is_weak)
831 emit_check_err(gen);
832 /* set default values as 0 */
833 emit(gen, BPF_ST_MEM(BPF_W, BPF_REG_8, offsetof(struct bpf_insn, imm), 0));
834 emit(gen, BPF_ST_MEM(BPF_W, BPF_REG_8, sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm), 0));
835 /* skip success case stores if ret < 0 */
836 emit(gen, BPF_JMP_IMM(BPF_JSLT, BPF_REG_7, 0, 4));
837 /* store btf_id into insn[insn_idx].imm */
838 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_8, BPF_REG_7, offsetof(struct bpf_insn, imm)));
839 /* store btf_obj_fd into insn[insn_idx + 1].imm */
840 emit(gen, BPF_ALU64_IMM(BPF_RSH, BPF_REG_7, 32));
841 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_8, BPF_REG_7,
842 sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm)));
843 emit(gen, BPF_JMP_IMM(BPF_JSGE, BPF_REG_7, 0, 3));
844 clear_src_reg:
845 /* clear bpf_object__relocate_data's src_reg assignment, otherwise we get a verifier failure */
846 reg_mask = src_reg_mask();
847 emit(gen, BPF_LDX_MEM(BPF_B, BPF_REG_9, BPF_REG_8, offsetofend(struct bpf_insn, code)));
848 emit(gen, BPF_ALU32_IMM(BPF_AND, BPF_REG_9, reg_mask));
849 emit(gen, BPF_STX_MEM(BPF_B, BPF_REG_8, BPF_REG_9, offsetofend(struct bpf_insn, code)));
850
851 emit_ksym_relo_log(gen, relo, kdesc->ref);
852 }
853
emit_relo(struct bpf_gen * gen,struct ksym_relo_desc * relo,int insns)854 static void emit_relo(struct bpf_gen *gen, struct ksym_relo_desc *relo, int insns)
855 {
856 int insn;
857
858 pr_debug("gen: emit_relo (%d): %s at %d\n", relo->kind, relo->name, relo->insn_idx);
859 insn = insns + sizeof(struct bpf_insn) * relo->insn_idx;
860 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_8, BPF_PSEUDO_MAP_IDX_VALUE, 0, 0, 0, insn));
861 switch (relo->kind) {
862 case BTF_KIND_VAR:
863 if (relo->is_typeless)
864 emit_relo_ksym_typeless(gen, relo, insn);
865 else
866 emit_relo_ksym_btf(gen, relo, insn);
867 break;
868 case BTF_KIND_FUNC:
869 emit_relo_kfunc_btf(gen, relo, insn);
870 break;
871 default:
872 pr_warn("Unknown relocation kind '%d'\n", relo->kind);
873 gen->error = -EDOM;
874 return;
875 }
876 }
877
emit_relos(struct bpf_gen * gen,int insns)878 static void emit_relos(struct bpf_gen *gen, int insns)
879 {
880 int i;
881
882 for (i = 0; i < gen->relo_cnt; i++)
883 emit_relo(gen, gen->relos + i, insns);
884 }
885
cleanup_relos(struct bpf_gen * gen,int insns)886 static void cleanup_relos(struct bpf_gen *gen, int insns)
887 {
888 int i, insn;
889
890 for (i = 0; i < gen->nr_ksyms; i++) {
891 /* only close fds for typed ksyms and kfuncs */
892 if (gen->ksyms[i].kind == BTF_KIND_VAR && !gen->ksyms[i].typeless) {
893 /* close fd recorded in insn[insn_idx + 1].imm */
894 insn = gen->ksyms[i].insn;
895 insn += sizeof(struct bpf_insn) + offsetof(struct bpf_insn, imm);
896 emit_sys_close_blob(gen, insn);
897 } else if (gen->ksyms[i].kind == BTF_KIND_FUNC) {
898 emit_sys_close_blob(gen, blob_fd_array_off(gen, gen->ksyms[i].off));
899 if (gen->ksyms[i].off < MAX_FD_ARRAY_SZ)
900 gen->nr_fd_array--;
901 }
902 }
903 if (gen->nr_ksyms) {
904 free(gen->ksyms);
905 gen->nr_ksyms = 0;
906 gen->ksyms = NULL;
907 }
908 if (gen->relo_cnt) {
909 free(gen->relos);
910 gen->relo_cnt = 0;
911 gen->relos = NULL;
912 }
913 }
914
bpf_gen__prog_load(struct bpf_gen * gen,struct bpf_prog_load_params * load_attr,int prog_idx)915 void bpf_gen__prog_load(struct bpf_gen *gen,
916 struct bpf_prog_load_params *load_attr, int prog_idx)
917 {
918 int attr_size = offsetofend(union bpf_attr, fd_array);
919 int prog_load_attr, license, insns, func_info, line_info;
920 union bpf_attr attr;
921
922 memset(&attr, 0, attr_size);
923 pr_debug("gen: prog_load: type %d insns_cnt %zd\n",
924 load_attr->prog_type, load_attr->insn_cnt);
925 /* add license string to blob of bytes */
926 license = add_data(gen, load_attr->license, strlen(load_attr->license) + 1);
927 /* add insns to blob of bytes */
928 insns = add_data(gen, load_attr->insns,
929 load_attr->insn_cnt * sizeof(struct bpf_insn));
930
931 attr.prog_type = load_attr->prog_type;
932 attr.expected_attach_type = load_attr->expected_attach_type;
933 attr.attach_btf_id = load_attr->attach_btf_id;
934 attr.prog_ifindex = load_attr->prog_ifindex;
935 attr.kern_version = 0;
936 attr.insn_cnt = (__u32)load_attr->insn_cnt;
937 attr.prog_flags = load_attr->prog_flags;
938
939 attr.func_info_rec_size = load_attr->func_info_rec_size;
940 attr.func_info_cnt = load_attr->func_info_cnt;
941 func_info = add_data(gen, load_attr->func_info,
942 attr.func_info_cnt * attr.func_info_rec_size);
943
944 attr.line_info_rec_size = load_attr->line_info_rec_size;
945 attr.line_info_cnt = load_attr->line_info_cnt;
946 line_info = add_data(gen, load_attr->line_info,
947 attr.line_info_cnt * attr.line_info_rec_size);
948
949 memcpy(attr.prog_name, load_attr->name,
950 min((unsigned)strlen(load_attr->name), BPF_OBJ_NAME_LEN - 1));
951 prog_load_attr = add_data(gen, &attr, attr_size);
952
953 /* populate union bpf_attr with a pointer to license */
954 emit_rel_store(gen, attr_field(prog_load_attr, license), license);
955
956 /* populate union bpf_attr with a pointer to instructions */
957 emit_rel_store(gen, attr_field(prog_load_attr, insns), insns);
958
959 /* populate union bpf_attr with a pointer to func_info */
960 emit_rel_store(gen, attr_field(prog_load_attr, func_info), func_info);
961
962 /* populate union bpf_attr with a pointer to line_info */
963 emit_rel_store(gen, attr_field(prog_load_attr, line_info), line_info);
964
965 /* populate union bpf_attr fd_array with a pointer to data where map_fds are saved */
966 emit_rel_store(gen, attr_field(prog_load_attr, fd_array), gen->fd_array);
967
968 /* populate union bpf_attr with user provided log details */
969 move_ctx2blob(gen, attr_field(prog_load_attr, log_level), 4,
970 offsetof(struct bpf_loader_ctx, log_level), false);
971 move_ctx2blob(gen, attr_field(prog_load_attr, log_size), 4,
972 offsetof(struct bpf_loader_ctx, log_size), false);
973 move_ctx2blob(gen, attr_field(prog_load_attr, log_buf), 8,
974 offsetof(struct bpf_loader_ctx, log_buf), false);
975 /* populate union bpf_attr with btf_fd saved in the stack earlier */
976 move_stack2blob(gen, attr_field(prog_load_attr, prog_btf_fd), 4,
977 stack_off(btf_fd));
978 if (gen->attach_kind) {
979 emit_find_attach_target(gen);
980 /* populate union bpf_attr with btf_id and btf_obj_fd found by helper */
981 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_0, BPF_PSEUDO_MAP_IDX_VALUE,
982 0, 0, 0, prog_load_attr));
983 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_0, BPF_REG_7,
984 offsetof(union bpf_attr, attach_btf_id)));
985 emit(gen, BPF_ALU64_IMM(BPF_RSH, BPF_REG_7, 32));
986 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_0, BPF_REG_7,
987 offsetof(union bpf_attr, attach_btf_obj_fd)));
988 }
989 emit_relos(gen, insns);
990 /* emit PROG_LOAD command */
991 emit_sys_bpf(gen, BPF_PROG_LOAD, prog_load_attr, attr_size);
992 debug_ret(gen, "prog_load %s insn_cnt %d", attr.prog_name, attr.insn_cnt);
993 /* successful or not, close btf module FDs used in extern ksyms and attach_btf_obj_fd */
994 cleanup_relos(gen, insns);
995 if (gen->attach_kind)
996 emit_sys_close_blob(gen,
997 attr_field(prog_load_attr, attach_btf_obj_fd));
998 emit_check_err(gen);
999 /* remember prog_fd in the stack, if successful */
1000 emit(gen, BPF_STX_MEM(BPF_W, BPF_REG_10, BPF_REG_7,
1001 stack_off(prog_fd[gen->nr_progs])));
1002 gen->nr_progs++;
1003 }
1004
bpf_gen__map_update_elem(struct bpf_gen * gen,int map_idx,void * pvalue,__u32 value_size)1005 void bpf_gen__map_update_elem(struct bpf_gen *gen, int map_idx, void *pvalue,
1006 __u32 value_size)
1007 {
1008 int attr_size = offsetofend(union bpf_attr, flags);
1009 int map_update_attr, value, key;
1010 union bpf_attr attr;
1011 int zero = 0;
1012
1013 memset(&attr, 0, attr_size);
1014 pr_debug("gen: map_update_elem: idx %d\n", map_idx);
1015
1016 value = add_data(gen, pvalue, value_size);
1017 key = add_data(gen, &zero, sizeof(zero));
1018
1019 /* if (map_desc[map_idx].initial_value)
1020 * copy_from_user(value, initial_value, value_size);
1021 */
1022 emit(gen, BPF_LDX_MEM(BPF_DW, BPF_REG_3, BPF_REG_6,
1023 sizeof(struct bpf_loader_ctx) +
1024 sizeof(struct bpf_map_desc) * map_idx +
1025 offsetof(struct bpf_map_desc, initial_value)));
1026 emit(gen, BPF_JMP_IMM(BPF_JEQ, BPF_REG_3, 0, 4));
1027 emit2(gen, BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_IDX_VALUE,
1028 0, 0, 0, value));
1029 emit(gen, BPF_MOV64_IMM(BPF_REG_2, value_size));
1030 emit(gen, BPF_EMIT_CALL(BPF_FUNC_copy_from_user));
1031
1032 map_update_attr = add_data(gen, &attr, attr_size);
1033 move_blob2blob(gen, attr_field(map_update_attr, map_fd), 4,
1034 blob_fd_array_off(gen, map_idx));
1035 emit_rel_store(gen, attr_field(map_update_attr, key), key);
1036 emit_rel_store(gen, attr_field(map_update_attr, value), value);
1037 /* emit MAP_UPDATE_ELEM command */
1038 emit_sys_bpf(gen, BPF_MAP_UPDATE_ELEM, map_update_attr, attr_size);
1039 debug_ret(gen, "update_elem idx %d value_size %d", map_idx, value_size);
1040 emit_check_err(gen);
1041 }
1042
bpf_gen__map_freeze(struct bpf_gen * gen,int map_idx)1043 void bpf_gen__map_freeze(struct bpf_gen *gen, int map_idx)
1044 {
1045 int attr_size = offsetofend(union bpf_attr, map_fd);
1046 int map_freeze_attr;
1047 union bpf_attr attr;
1048
1049 memset(&attr, 0, attr_size);
1050 pr_debug("gen: map_freeze: idx %d\n", map_idx);
1051 map_freeze_attr = add_data(gen, &attr, attr_size);
1052 move_blob2blob(gen, attr_field(map_freeze_attr, map_fd), 4,
1053 blob_fd_array_off(gen, map_idx));
1054 /* emit MAP_FREEZE command */
1055 emit_sys_bpf(gen, BPF_MAP_FREEZE, map_freeze_attr, attr_size);
1056 debug_ret(gen, "map_freeze");
1057 emit_check_err(gen);
1058 }
1059