trace_uprobe.c 29.0 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
/*
 * uprobes-based tracing events
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 * Copyright (C) IBM Corporation, 2010-2012
 * Author:	Srikar Dronamraju <srikar@linux.vnet.ibm.com>
 */

#include <linux/module.h>
#include <linux/uaccess.h>
#include <linux/uprobes.h>
#include <linux/namei.h>
A
Andy Shevchenko 已提交
25
#include <linux/string.h>
26 27 28 29 30

#include "trace_probe.h"

#define UPROBE_EVENT_SYSTEM	"uprobes"

31 32 33 34 35 36 37 38 39 40 41 42
struct uprobe_trace_entry_head {
	struct trace_entry	ent;
	unsigned long		vaddr[];
};

#define SIZEOF_TRACE_ENTRY(is_return)			\
	(sizeof(struct uprobe_trace_entry_head) +	\
	 sizeof(unsigned long) * (is_return ? 2 : 1))

#define DATAOF_TRACE_ENTRY(entry, is_return)		\
	((void*)(entry) + SIZEOF_TRACE_ENTRY(is_return))

43 44 45 46 47 48
struct trace_uprobe_filter {
	rwlock_t		rwlock;
	int			nr_systemwide;
	struct list_head	perf_events;
};

49 50 51 52 53
/*
 * uprobe event core functions
 */
struct trace_uprobe {
	struct list_head		list;
54
	struct trace_uprobe_filter	filter;
55
	struct uprobe_consumer		consumer;
56 57 58 59
	struct inode			*inode;
	char				*filename;
	unsigned long			offset;
	unsigned long			nhit;
60
	struct trace_probe		tp;
61 62
};

63 64
#define SIZEOF_TRACE_UPROBE(n)				\
	(offsetof(struct trace_uprobe, tp.args) +	\
65 66 67
	(sizeof(struct probe_arg) * (n)))

static int register_uprobe_event(struct trace_uprobe *tu);
68
static int unregister_uprobe_event(struct trace_uprobe *tu);
69 70 71 72

static DEFINE_MUTEX(uprobe_lock);
static LIST_HEAD(uprobe_list);

73 74 75 76 77
struct uprobe_dispatch_data {
	struct trace_uprobe	*tu;
	unsigned long		bp_addr;
};

78
static int uprobe_dispatcher(struct uprobe_consumer *con, struct pt_regs *regs);
79 80
static int uretprobe_dispatcher(struct uprobe_consumer *con,
				unsigned long func, struct pt_regs *regs);
81

82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121
#ifdef CONFIG_STACK_GROWSUP
static unsigned long adjust_stack_addr(unsigned long addr, unsigned int n)
{
	return addr - (n * sizeof(long));
}
#else
static unsigned long adjust_stack_addr(unsigned long addr, unsigned int n)
{
	return addr + (n * sizeof(long));
}
#endif

static unsigned long get_user_stack_nth(struct pt_regs *regs, unsigned int n)
{
	unsigned long ret;
	unsigned long addr = user_stack_pointer(regs);

	addr = adjust_stack_addr(addr, n);

	if (copy_from_user(&ret, (void __force __user *) addr, sizeof(ret)))
		return 0;

	return ret;
}

/*
 * Uprobes-specific fetch functions
 */
#define DEFINE_FETCH_stack(type)					\
static __kprobes void FETCH_FUNC_NAME(stack, type)(struct pt_regs *regs,\
					  void *offset, void *dest)	\
{									\
	*(type *)dest = (type)get_user_stack_nth(regs,			\
					      ((unsigned long)offset)); \
}
DEFINE_BASIC_FETCH_FUNCS(stack)
/* No string on the stack entry */
#define fetch_stack_string	NULL
#define fetch_stack_string_size	NULL

122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173
#define DEFINE_FETCH_memory(type)					\
static __kprobes void FETCH_FUNC_NAME(memory, type)(struct pt_regs *regs,\
						void *addr, void *dest) \
{									\
	type retval;							\
	void __user *vaddr = (void __force __user *) addr;		\
									\
	if (copy_from_user(&retval, vaddr, sizeof(type)))		\
		*(type *)dest = 0;					\
	else								\
		*(type *) dest = retval;				\
}
DEFINE_BASIC_FETCH_FUNCS(memory)
/*
 * Fetch a null-terminated string. Caller MUST set *(u32 *)dest with max
 * length and relative data location.
 */
static __kprobes void FETCH_FUNC_NAME(memory, string)(struct pt_regs *regs,
						      void *addr, void *dest)
{
	long ret;
	u32 rloc = *(u32 *)dest;
	int maxlen  = get_rloc_len(rloc);
	u8 *dst = get_rloc_data(dest);
	void __user *src = (void __force __user *) addr;

	if (!maxlen)
		return;

	ret = strncpy_from_user(dst, src, maxlen);

	if (ret < 0) {	/* Failed to fetch string */
		((u8 *)get_rloc_data(dest))[0] = '\0';
		*(u32 *)dest = make_data_rloc(0, get_rloc_offs(rloc));
	} else {
		*(u32 *)dest = make_data_rloc(ret, get_rloc_offs(rloc));
	}
}

static __kprobes void FETCH_FUNC_NAME(memory, string_size)(struct pt_regs *regs,
						      void *addr, void *dest)
{
	int len;
	void __user *vaddr = (void __force __user *) addr;

	len = strnlen_user(vaddr, MAX_STRING_SIZE);

	if (len == 0 || len > MAX_STRING_SIZE)  /* Failed to check length */
		*(u32 *)dest = 0;
	else
		*(u32 *)dest = len;
}
174

175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197
static unsigned long translate_user_vaddr(void *file_offset)
{
	unsigned long base_addr;
	struct uprobe_dispatch_data *udd;

	udd = (void *) current->utask->vaddr;

	base_addr = udd->bp_addr - udd->tu->offset;
	return base_addr + (unsigned long)file_offset;
}

#define DEFINE_FETCH_file_offset(type)					\
static __kprobes void FETCH_FUNC_NAME(file_offset, type)(struct pt_regs *regs,\
					void *offset, void *dest) 	\
{									\
	void *vaddr = (void *)translate_user_vaddr(offset);		\
									\
	FETCH_FUNC_NAME(memory, type)(regs, vaddr, dest);		\
}
DEFINE_BASIC_FETCH_FUNCS(file_offset)
DEFINE_FETCH_file_offset(string)
DEFINE_FETCH_file_offset(string_size)

198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217
/* Fetch type information table */
const struct fetch_type uprobes_fetch_type_table[] = {
	/* Special types */
	[FETCH_TYPE_STRING] = __ASSIGN_FETCH_TYPE("string", string, string,
					sizeof(u32), 1, "__data_loc char[]"),
	[FETCH_TYPE_STRSIZE] = __ASSIGN_FETCH_TYPE("string_size", u32,
					string_size, sizeof(u32), 0, "u32"),
	/* Basic types */
	ASSIGN_FETCH_TYPE(u8,  u8,  0),
	ASSIGN_FETCH_TYPE(u16, u16, 0),
	ASSIGN_FETCH_TYPE(u32, u32, 0),
	ASSIGN_FETCH_TYPE(u64, u64, 0),
	ASSIGN_FETCH_TYPE(s8,  u8,  1),
	ASSIGN_FETCH_TYPE(s16, u16, 1),
	ASSIGN_FETCH_TYPE(s32, u32, 1),
	ASSIGN_FETCH_TYPE(s64, u64, 1),

	ASSIGN_FETCH_TYPE_END
};

218 219 220 221 222 223 224 225 226 227 228 229
static inline void init_trace_uprobe_filter(struct trace_uprobe_filter *filter)
{
	rwlock_init(&filter->rwlock);
	filter->nr_systemwide = 0;
	INIT_LIST_HEAD(&filter->perf_events);
}

static inline bool uprobe_filter_is_empty(struct trace_uprobe_filter *filter)
{
	return !filter->nr_systemwide && list_empty(&filter->perf_events);
}

230 231 232 233 234
static inline bool is_ret_probe(struct trace_uprobe *tu)
{
	return tu->consumer.ret_handler != NULL;
}

235 236 237 238
/*
 * Allocate new trace_uprobe and initialize it (including uprobes).
 */
static struct trace_uprobe *
239
alloc_trace_uprobe(const char *group, const char *event, int nargs, bool is_ret)
240 241 242 243 244 245 246 247 248 249 250 251 252
{
	struct trace_uprobe *tu;

	if (!event || !is_good_name(event))
		return ERR_PTR(-EINVAL);

	if (!group || !is_good_name(group))
		return ERR_PTR(-EINVAL);

	tu = kzalloc(SIZEOF_TRACE_UPROBE(nargs), GFP_KERNEL);
	if (!tu)
		return ERR_PTR(-ENOMEM);

253 254 255
	tu->tp.call.class = &tu->tp.class;
	tu->tp.call.name = kstrdup(event, GFP_KERNEL);
	if (!tu->tp.call.name)
256 257
		goto error;

258 259
	tu->tp.class.system = kstrdup(group, GFP_KERNEL);
	if (!tu->tp.class.system)
260 261 262
		goto error;

	INIT_LIST_HEAD(&tu->list);
263
	tu->consumer.handler = uprobe_dispatcher;
264 265
	if (is_ret)
		tu->consumer.ret_handler = uretprobe_dispatcher;
266
	init_trace_uprobe_filter(&tu->filter);
267
	tu->tp.call.flags |= TRACE_EVENT_FL_USE_CALL_FILTER;
268 269 270
	return tu;

error:
271
	kfree(tu->tp.call.name);
272 273 274 275 276 277 278 279 280
	kfree(tu);

	return ERR_PTR(-ENOMEM);
}

static void free_trace_uprobe(struct trace_uprobe *tu)
{
	int i;

281 282
	for (i = 0; i < tu->tp.nr_args; i++)
		traceprobe_free_probe_arg(&tu->tp.args[i]);
283 284

	iput(tu->inode);
285 286
	kfree(tu->tp.call.class->system);
	kfree(tu->tp.call.name);
287 288 289 290 291 292 293 294 295
	kfree(tu->filename);
	kfree(tu);
}

static struct trace_uprobe *find_probe_event(const char *event, const char *group)
{
	struct trace_uprobe *tu;

	list_for_each_entry(tu, &uprobe_list, list)
296 297
		if (strcmp(tu->tp.call.name, event) == 0 &&
		    strcmp(tu->tp.call.class->system, group) == 0)
298 299 300 301 302 303
			return tu;

	return NULL;
}

/* Unregister a trace_uprobe and probe_event: call with locking uprobe_lock */
304
static int unregister_trace_uprobe(struct trace_uprobe *tu)
305
{
306 307 308 309 310 311
	int ret;

	ret = unregister_uprobe_event(tu);
	if (ret)
		return ret;

312 313
	list_del(&tu->list);
	free_trace_uprobe(tu);
314
	return 0;
315 316 317 318 319
}

/* Register a trace_uprobe and probe_event */
static int register_trace_uprobe(struct trace_uprobe *tu)
{
320
	struct trace_uprobe *old_tu;
321 322 323 324 325
	int ret;

	mutex_lock(&uprobe_lock);

	/* register as an event */
326 327
	old_tu = find_probe_event(tu->tp.call.name, tu->tp.call.class->system);
	if (old_tu) {
328
		/* delete old event */
329
		ret = unregister_trace_uprobe(old_tu);
330 331 332
		if (ret)
			goto end;
	}
333 334 335 336 337 338 339 340 341 342 343 344 345 346 347 348 349

	ret = register_uprobe_event(tu);
	if (ret) {
		pr_warning("Failed to register probe event(%d)\n", ret);
		goto end;
	}

	list_add_tail(&tu->list, &uprobe_list);

end:
	mutex_unlock(&uprobe_lock);

	return ret;
}

/*
 * Argument syntax:
350
 *  - Add uprobe: p|r[:[GRP/]EVENT] PATH:OFFSET [FETCHARGS]
351 352 353 354 355 356 357 358 359 360 361
 *
 *  - Remove uprobe: -:[GRP/]EVENT
 */
static int create_trace_uprobe(int argc, char **argv)
{
	struct trace_uprobe *tu;
	struct inode *inode;
	char *arg, *event, *group, *filename;
	char buf[MAX_EVENT_NAME_LEN];
	struct path path;
	unsigned long offset;
362
	bool is_delete, is_return;
363 364 365 366 367
	int i, ret;

	inode = NULL;
	ret = 0;
	is_delete = false;
368
	is_return = false;
369 370 371 372 373 374
	event = NULL;
	group = NULL;

	/* argc must be >= 1 */
	if (argv[0][0] == '-')
		is_delete = true;
375 376
	else if (argv[0][0] == 'r')
		is_return = true;
377
	else if (argv[0][0] != 'p') {
378
		pr_info("Probe definition must be started with 'p', 'r' or '-'.\n");
379 380 381 382 383 384 385 386 387 388 389 390 391 392 393 394 395 396 397 398 399 400 401 402 403 404
		return -EINVAL;
	}

	if (argv[0][1] == ':') {
		event = &argv[0][2];
		arg = strchr(event, '/');

		if (arg) {
			group = event;
			event = arg + 1;
			event[-1] = '\0';

			if (strlen(group) == 0) {
				pr_info("Group name is not specified\n");
				return -EINVAL;
			}
		}
		if (strlen(event) == 0) {
			pr_info("Event name is not specified\n");
			return -EINVAL;
		}
	}
	if (!group)
		group = UPROBE_EVENT_SYSTEM;

	if (is_delete) {
405 406
		int ret;

407 408 409 410 411 412 413 414 415 416 417 418 419
		if (!event) {
			pr_info("Delete command needs an event name.\n");
			return -EINVAL;
		}
		mutex_lock(&uprobe_lock);
		tu = find_probe_event(event, group);

		if (!tu) {
			mutex_unlock(&uprobe_lock);
			pr_info("Event %s/%s doesn't exist.\n", group, event);
			return -ENOENT;
		}
		/* delete an event */
420
		ret = unregister_trace_uprobe(tu);
421
		mutex_unlock(&uprobe_lock);
422
		return ret;
423 424 425 426 427 428 429 430 431 432 433
	}

	if (argc < 2) {
		pr_info("Probe point is not specified.\n");
		return -EINVAL;
	}
	if (isdigit(argv[1][0])) {
		pr_info("probe point must be have a filename.\n");
		return -EINVAL;
	}
	arg = strchr(argv[1], ':');
434 435
	if (!arg) {
		ret = -EINVAL;
436
		goto fail_address_parse;
437
	}
438 439 440 441 442 443 444 445

	*arg++ = '\0';
	filename = argv[1];
	ret = kern_path(filename, LOOKUP_FOLLOW, &path);
	if (ret)
		goto fail_address_parse;

	inode = igrab(path.dentry->d_inode);
446 447
	path_put(&path);

448
	if (!inode || !S_ISREG(inode->i_mode)) {
449 450 451
		ret = -EINVAL;
		goto fail_address_parse;
	}
452

453 454 455 456
	ret = kstrtoul(arg, 0, &offset);
	if (ret)
		goto fail_address_parse;

457 458 459 460 461
	argc -= 2;
	argv += 2;

	/* setup a probe */
	if (!event) {
A
Andy Shevchenko 已提交
462
		char *tail;
463 464
		char *ptr;

A
Andy Shevchenko 已提交
465 466
		tail = kstrdup(kbasename(filename), GFP_KERNEL);
		if (!tail) {
467 468 469 470 471 472 473 474 475 476 477 478 479
			ret = -ENOMEM;
			goto fail_address_parse;
		}

		ptr = strpbrk(tail, ".-_");
		if (ptr)
			*ptr = '\0';

		snprintf(buf, MAX_EVENT_NAME_LEN, "%c_%s_0x%lx", 'p', tail, offset);
		event = buf;
		kfree(tail);
	}

480
	tu = alloc_trace_uprobe(group, event, argc, is_return);
481 482 483 484 485 486 487 488 489 490 491 492 493 494 495 496 497 498
	if (IS_ERR(tu)) {
		pr_info("Failed to allocate trace_uprobe.(%d)\n", (int)PTR_ERR(tu));
		ret = PTR_ERR(tu);
		goto fail_address_parse;
	}
	tu->offset = offset;
	tu->inode = inode;
	tu->filename = kstrdup(filename, GFP_KERNEL);

	if (!tu->filename) {
		pr_info("Failed to allocate filename.\n");
		ret = -ENOMEM;
		goto error;
	}

	/* parse arguments */
	ret = 0;
	for (i = 0; i < argc && i < MAX_TRACE_ARGS; i++) {
499 500
		struct probe_arg *parg = &tu->tp.args[i];

501
		/* Increment count for freeing args in error case */
502
		tu->tp.nr_args++;
503 504 505 506 507

		/* Parse argument name */
		arg = strchr(argv[i], '=');
		if (arg) {
			*arg++ = '\0';
508
			parg->name = kstrdup(argv[i], GFP_KERNEL);
509 510 511 512
		} else {
			arg = argv[i];
			/* If argument name is omitted, set "argN" */
			snprintf(buf, MAX_EVENT_NAME_LEN, "arg%d", i + 1);
513
			parg->name = kstrdup(buf, GFP_KERNEL);
514 515
		}

516
		if (!parg->name) {
517 518 519 520 521
			pr_info("Failed to allocate argument[%d] name.\n", i);
			ret = -ENOMEM;
			goto error;
		}

522 523
		if (!is_good_name(parg->name)) {
			pr_info("Invalid argument[%d] name: %s\n", i, parg->name);
524 525 526 527
			ret = -EINVAL;
			goto error;
		}

528
		if (traceprobe_conflict_field_name(parg->name, tu->tp.args, i)) {
529 530 531 532 533 534 535
			pr_info("Argument[%d] name '%s' conflicts with "
				"another field.\n", i, argv[i]);
			ret = -EINVAL;
			goto error;
		}

		/* Parse fetch argument */
536
		ret = traceprobe_parse_probe_arg(arg, &tu->tp.size, parg,
537
						 is_return, false);
538 539 540 541 542 543 544 545 546 547 548 549 550 551 552 553 554 555 556
		if (ret) {
			pr_info("Parse error at argument[%d]. (%d)\n", i, ret);
			goto error;
		}
	}

	ret = register_trace_uprobe(tu);
	if (ret)
		goto error;
	return 0;

error:
	free_trace_uprobe(tu);
	return ret;

fail_address_parse:
	if (inode)
		iput(inode);

557
	pr_info("Failed to parse address or file.\n");
558 559 560 561

	return ret;
}

562
static int cleanup_all_probes(void)
563 564
{
	struct trace_uprobe *tu;
565
	int ret = 0;
566 567 568 569

	mutex_lock(&uprobe_lock);
	while (!list_empty(&uprobe_list)) {
		tu = list_entry(uprobe_list.next, struct trace_uprobe, list);
570 571 572
		ret = unregister_trace_uprobe(tu);
		if (ret)
			break;
573 574
	}
	mutex_unlock(&uprobe_lock);
575
	return ret;
576 577 578 579 580 581 582 583 584 585 586 587 588 589 590 591 592 593 594 595 596 597
}

/* Probes listing interfaces */
static void *probes_seq_start(struct seq_file *m, loff_t *pos)
{
	mutex_lock(&uprobe_lock);
	return seq_list_start(&uprobe_list, *pos);
}

static void *probes_seq_next(struct seq_file *m, void *v, loff_t *pos)
{
	return seq_list_next(v, &uprobe_list, pos);
}

static void probes_seq_stop(struct seq_file *m, void *v)
{
	mutex_unlock(&uprobe_lock);
}

static int probes_seq_show(struct seq_file *m, void *v)
{
	struct trace_uprobe *tu = v;
598
	char c = is_ret_probe(tu) ? 'r' : 'p';
599 600
	int i;

601
	seq_printf(m, "%c:%s/%s", c, tu->tp.call.class->system, tu->tp.call.name);
602 603
	seq_printf(m, " %s:0x%p", tu->filename, (void *)tu->offset);

604 605
	for (i = 0; i < tu->tp.nr_args; i++)
		seq_printf(m, " %s=%s", tu->tp.args[i].name, tu->tp.args[i].comm);
606 607 608 609 610 611 612 613 614 615 616 617 618 619

	seq_printf(m, "\n");
	return 0;
}

static const struct seq_operations probes_seq_op = {
	.start	= probes_seq_start,
	.next	= probes_seq_next,
	.stop	= probes_seq_stop,
	.show	= probes_seq_show
};

static int probes_open(struct inode *inode, struct file *file)
{
620 621 622 623 624 625 626
	int ret;

	if ((file->f_mode & FMODE_WRITE) && (file->f_flags & O_TRUNC)) {
		ret = cleanup_all_probes();
		if (ret)
			return ret;
	}
627 628 629 630 631 632 633 634 635 636 637 638 639 640 641 642 643 644 645 646 647 648 649 650

	return seq_open(file, &probes_seq_op);
}

static ssize_t probes_write(struct file *file, const char __user *buffer,
			    size_t count, loff_t *ppos)
{
	return traceprobe_probes_write(file, buffer, count, ppos, create_trace_uprobe);
}

static const struct file_operations uprobe_events_ops = {
	.owner		= THIS_MODULE,
	.open		= probes_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
	.release	= seq_release,
	.write		= probes_write,
};

/* Probes profiling interfaces */
static int probes_profile_seq_show(struct seq_file *m, void *v)
{
	struct trace_uprobe *tu = v;

651
	seq_printf(m, "  %s %-44s %15lu\n", tu->filename, tu->tp.call.name, tu->nhit);
652 653 654 655 656 657 658 659 660 661 662 663 664 665 666 667 668 669 670 671 672 673 674
	return 0;
}

static const struct seq_operations profile_seq_op = {
	.start	= probes_seq_start,
	.next	= probes_seq_next,
	.stop	= probes_seq_stop,
	.show	= probes_profile_seq_show
};

static int profile_open(struct inode *inode, struct file *file)
{
	return seq_open(file, &profile_seq_op);
}

static const struct file_operations uprobe_profile_ops = {
	.owner		= THIS_MODULE,
	.open		= profile_open,
	.read		= seq_read,
	.llseek		= seq_lseek,
	.release	= seq_release,
};

675 676 677 678 679 680 681 682 683 684 685 686 687 688 689 690 691 692 693 694 695 696 697 698 699 700 701 702 703 704 705 706 707 708 709 710 711 712 713 714 715 716 717 718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733 734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760
struct uprobe_cpu_buffer {
	struct mutex mutex;
	void *buf;
};
static struct uprobe_cpu_buffer __percpu *uprobe_cpu_buffer;
static int uprobe_buffer_refcnt;

static int uprobe_buffer_init(void)
{
	int cpu, err_cpu;

	uprobe_cpu_buffer = alloc_percpu(struct uprobe_cpu_buffer);
	if (uprobe_cpu_buffer == NULL)
		return -ENOMEM;

	for_each_possible_cpu(cpu) {
		struct page *p = alloc_pages_node(cpu_to_node(cpu),
						  GFP_KERNEL, 0);
		if (p == NULL) {
			err_cpu = cpu;
			goto err;
		}
		per_cpu_ptr(uprobe_cpu_buffer, cpu)->buf = page_address(p);
		mutex_init(&per_cpu_ptr(uprobe_cpu_buffer, cpu)->mutex);
	}

	return 0;

err:
	for_each_possible_cpu(cpu) {
		if (cpu == err_cpu)
			break;
		free_page((unsigned long)per_cpu_ptr(uprobe_cpu_buffer, cpu)->buf);
	}

	free_percpu(uprobe_cpu_buffer);
	return -ENOMEM;
}

static int uprobe_buffer_enable(void)
{
	int ret = 0;

	BUG_ON(!mutex_is_locked(&event_mutex));

	if (uprobe_buffer_refcnt++ == 0) {
		ret = uprobe_buffer_init();
		if (ret < 0)
			uprobe_buffer_refcnt--;
	}

	return ret;
}

static void uprobe_buffer_disable(void)
{
	BUG_ON(!mutex_is_locked(&event_mutex));

	if (--uprobe_buffer_refcnt == 0) {
		free_percpu(uprobe_cpu_buffer);
		uprobe_cpu_buffer = NULL;
	}
}

static struct uprobe_cpu_buffer *uprobe_buffer_get(void)
{
	struct uprobe_cpu_buffer *ucb;
	int cpu;

	cpu = raw_smp_processor_id();
	ucb = per_cpu_ptr(uprobe_cpu_buffer, cpu);

	/*
	 * Use per-cpu buffers for fastest access, but we might migrate
	 * so the mutex makes sure we have sole access to it.
	 */
	mutex_lock(&ucb->mutex);

	return ucb;
}

static void uprobe_buffer_put(struct uprobe_cpu_buffer *ucb)
{
	mutex_unlock(&ucb->mutex);
}

761
static void __uprobe_trace_func(struct trace_uprobe *tu,
762 763
				unsigned long func, struct pt_regs *regs,
				struct uprobe_cpu_buffer *ucb, int dsize)
764 765 766 767
{
	struct uprobe_trace_entry_head *entry;
	struct ring_buffer_event *event;
	struct ring_buffer *buffer;
768
	void *data;
769
	int size, esize;
770
	struct ftrace_event_call *call = &tu->tp.call;
771

772
	if (WARN_ON_ONCE(tu->tp.size + dsize > PAGE_SIZE))
773 774
		return;

775
	esize = SIZEOF_TRACE_ENTRY(is_ret_probe(tu));
776
	size = esize + tu->tp.size + dsize;
777
	event = trace_current_buffer_lock_reserve(&buffer, call->event.type,
778
						  size, 0, 0);
779
	if (!event)
780
		return;
781 782

	entry = ring_buffer_event_data(event);
783 784 785 786 787 788 789 790 791
	if (is_ret_probe(tu)) {
		entry->vaddr[0] = func;
		entry->vaddr[1] = instruction_pointer(regs);
		data = DATAOF_TRACE_ENTRY(entry, true);
	} else {
		entry->vaddr[0] = instruction_pointer(regs);
		data = DATAOF_TRACE_ENTRY(entry, false);
	}

792
	memcpy(data, ucb->buf, tu->tp.size + dsize);
793

794
	if (!call_filter_check_discard(call, entry, buffer, event))
795
		trace_buffer_unlock_commit(buffer, event, 0, 0);
796
}
797

798
/* uprobe handler */
799 800
static int uprobe_trace_func(struct trace_uprobe *tu, struct pt_regs *regs,
			     struct uprobe_cpu_buffer *ucb, int dsize)
801
{
802
	if (!is_ret_probe(tu))
803
		__uprobe_trace_func(tu, 0, regs, ucb, dsize);
804
	return 0;
805 806
}

807
static void uretprobe_trace_func(struct trace_uprobe *tu, unsigned long func,
808 809
				 struct pt_regs *regs,
				 struct uprobe_cpu_buffer *ucb, int dsize)
810
{
811
	__uprobe_trace_func(tu, func, regs, ucb, dsize);
812 813
}

814 815 816 817
/* Event entry printers */
static enum print_line_t
print_uprobe_event(struct trace_iterator *iter, int flags, struct trace_event *event)
{
818
	struct uprobe_trace_entry_head *entry;
819 820 821 822 823
	struct trace_seq *s = &iter->seq;
	struct trace_uprobe *tu;
	u8 *data;
	int i;

824
	entry = (struct uprobe_trace_entry_head *)iter->ent;
825
	tu = container_of(event, struct trace_uprobe, tp.call.event);
826

827
	if (is_ret_probe(tu)) {
828
		if (!trace_seq_printf(s, "%s: (0x%lx <- 0x%lx)", tu->tp.call.name,
829 830 831 832
					entry->vaddr[1], entry->vaddr[0]))
			goto partial;
		data = DATAOF_TRACE_ENTRY(entry, true);
	} else {
833
		if (!trace_seq_printf(s, "%s: (0x%lx)", tu->tp.call.name,
834 835 836 837
					entry->vaddr[0]))
			goto partial;
		data = DATAOF_TRACE_ENTRY(entry, false);
	}
838

839 840 841 842
	for (i = 0; i < tu->tp.nr_args; i++) {
		struct probe_arg *parg = &tu->tp.args[i];

		if (!parg->type->print(s, parg->name, data + parg->offset, entry))
843 844 845 846 847 848 849 850 851 852
			goto partial;
	}

	if (trace_seq_puts(s, "\n"))
		return TRACE_TYPE_HANDLED;

partial:
	return TRACE_TYPE_PARTIAL_LINE;
}

853 854 855 856 857 858
typedef bool (*filter_func_t)(struct uprobe_consumer *self,
				enum uprobe_filter_ctx ctx,
				struct mm_struct *mm);

static int
probe_event_enable(struct trace_uprobe *tu, int flag, filter_func_t filter)
859 860 861
{
	int ret = 0;

862
	if (trace_probe_is_enabled(&tu->tp))
863 864
		return -EINTR;

865 866 867 868
	ret = uprobe_buffer_enable();
	if (ret < 0)
		return ret;

869 870
	WARN_ON(!uprobe_filter_is_empty(&tu->filter));

871
	tu->tp.flags |= flag;
872
	tu->consumer.filter = filter;
873 874
	ret = uprobe_register(tu->inode, tu->offset, &tu->consumer);
	if (ret)
875
		tu->tp.flags &= ~flag;
876

877
	return ret;
878 879 880 881
}

static void probe_event_disable(struct trace_uprobe *tu, int flag)
{
882
	if (!trace_probe_is_enabled(&tu->tp))
883 884
		return;

885 886
	WARN_ON(!uprobe_filter_is_empty(&tu->filter));

887
	uprobe_unregister(tu->inode, tu->offset, &tu->consumer);
888
	tu->tp.flags &= ~flag;
889 890

	uprobe_buffer_disable();
891 892 893 894
}

static int uprobe_event_define_fields(struct ftrace_event_call *event_call)
{
895
	int ret, i, size;
896
	struct uprobe_trace_entry_head field;
897
	struct trace_uprobe *tu = event_call->data;
898

899 900 901 902 903 904 905 906
	if (is_ret_probe(tu)) {
		DEFINE_FIELD(unsigned long, vaddr[0], FIELD_STRING_FUNC, 0);
		DEFINE_FIELD(unsigned long, vaddr[1], FIELD_STRING_RETIP, 0);
		size = SIZEOF_TRACE_ENTRY(true);
	} else {
		DEFINE_FIELD(unsigned long, vaddr[0], FIELD_STRING_IP, 0);
		size = SIZEOF_TRACE_ENTRY(false);
	}
907
	/* Set argument names as fields */
908 909 910 911 912 913
	for (i = 0; i < tu->tp.nr_args; i++) {
		struct probe_arg *parg = &tu->tp.args[i];

		ret = trace_define_field(event_call, parg->type->fmttype,
					 parg->name, size + parg->offset,
					 parg->type->size, parg->type->is_signed,
914 915 916 917 918 919 920 921 922
					 FILTER_OTHER);

		if (ret)
			return ret;
	}
	return 0;
}

#ifdef CONFIG_PERF_EVENTS
923 924 925 926 927 928 929 930 931 932 933 934 935 936 937 938
static bool
__uprobe_perf_filter(struct trace_uprobe_filter *filter, struct mm_struct *mm)
{
	struct perf_event *event;

	if (filter->nr_systemwide)
		return true;

	list_for_each_entry(event, &filter->perf_events, hw.tp_list) {
		if (event->hw.tp_target->mm == mm)
			return true;
	}

	return false;
}

939 940 941 942 943 944
static inline bool
uprobe_filter_event(struct trace_uprobe *tu, struct perf_event *event)
{
	return __uprobe_perf_filter(&tu->filter, event->hw.tp_target->mm);
}

945 946
static int uprobe_perf_open(struct trace_uprobe *tu, struct perf_event *event)
{
947 948
	bool done;

949
	write_lock(&tu->filter.rwlock);
950 951 952 953 954 955 956 957 958 959 960 961
	if (event->hw.tp_target) {
		/*
		 * event->parent != NULL means copy_process(), we can avoid
		 * uprobe_apply(). current->mm must be probed and we can rely
		 * on dup_mmap() which preserves the already installed bp's.
		 *
		 * attr.enable_on_exec means that exec/mmap will install the
		 * breakpoints we need.
		 */
		done = tu->filter.nr_systemwide ||
			event->parent || event->attr.enable_on_exec ||
			uprobe_filter_event(tu, event);
962
		list_add(&event->hw.tp_list, &tu->filter.perf_events);
963 964
	} else {
		done = tu->filter.nr_systemwide;
965
		tu->filter.nr_systemwide++;
966
	}
967 968
	write_unlock(&tu->filter.rwlock);

969 970
	if (!done)
		uprobe_apply(tu->inode, tu->offset, &tu->consumer, true);
971

972 973 974 975 976
	return 0;
}

static int uprobe_perf_close(struct trace_uprobe *tu, struct perf_event *event)
{
977 978
	bool done;

979
	write_lock(&tu->filter.rwlock);
980
	if (event->hw.tp_target) {
981
		list_del(&event->hw.tp_list);
982 983 984 985
		done = tu->filter.nr_systemwide ||
			(event->hw.tp_target->flags & PF_EXITING) ||
			uprobe_filter_event(tu, event);
	} else {
986
		tu->filter.nr_systemwide--;
987 988
		done = tu->filter.nr_systemwide;
	}
989 990
	write_unlock(&tu->filter.rwlock);

991 992
	if (!done)
		uprobe_apply(tu->inode, tu->offset, &tu->consumer, false);
993

994 995 996
	return 0;
}

997 998 999 1000 1001 1002 1003 1004 1005 1006 1007 1008 1009 1010
static bool uprobe_perf_filter(struct uprobe_consumer *uc,
				enum uprobe_filter_ctx ctx, struct mm_struct *mm)
{
	struct trace_uprobe *tu;
	int ret;

	tu = container_of(uc, struct trace_uprobe, consumer);
	read_lock(&tu->filter.rwlock);
	ret = __uprobe_perf_filter(&tu->filter, mm);
	read_unlock(&tu->filter.rwlock);

	return ret;
}

1011
static void __uprobe_perf_func(struct trace_uprobe *tu,
1012 1013
			       unsigned long func, struct pt_regs *regs,
			       struct uprobe_cpu_buffer *ucb, int dsize)
1014
{
1015
	struct ftrace_event_call *call = &tu->tp.call;
1016 1017
	struct uprobe_trace_entry_head *entry;
	struct hlist_head *head;
1018
	void *data;
1019
	int size, esize;
1020 1021 1022
	int rctx;

	esize = SIZEOF_TRACE_ENTRY(is_ret_probe(tu));
1023

1024 1025 1026 1027 1028
	size = esize + tu->tp.size + dsize;
	size = ALIGN(size + sizeof(u32), sizeof(u64)) - sizeof(u32);
	if (WARN_ONCE(size > PERF_MAX_TRACE_SIZE, "profile buffer not large enough"))
		return;

1029
	preempt_disable();
1030 1031 1032 1033
	head = this_cpu_ptr(call->perf_events);
	if (hlist_empty(head))
		goto out;

1034 1035 1036 1037
	entry = perf_trace_buf_prepare(size, call->event.type, regs, &rctx);
	if (!entry)
		goto out;

1038 1039
	if (is_ret_probe(tu)) {
		entry->vaddr[0] = func;
1040
		entry->vaddr[1] = instruction_pointer(regs);
1041 1042
		data = DATAOF_TRACE_ENTRY(entry, true);
	} else {
1043
		entry->vaddr[0] = instruction_pointer(regs);
1044 1045 1046
		data = DATAOF_TRACE_ENTRY(entry, false);
	}

1047 1048 1049 1050
	memcpy(data, ucb->buf, tu->tp.size + dsize);

	if (size - esize > tu->tp.size + dsize) {
		int len = tu->tp.size + dsize;
1051

1052
		memset(data + len, 0, size - esize - len);
1053
	}
1054

1055
	perf_trace_buf_submit(entry, size, rctx, 0, 1, regs, head, NULL);
1056 1057
 out:
	preempt_enable();
1058 1059 1060
}

/* uprobe profile handler */
1061 1062
static int uprobe_perf_func(struct trace_uprobe *tu, struct pt_regs *regs,
			    struct uprobe_cpu_buffer *ucb, int dsize)
1063 1064 1065 1066
{
	if (!uprobe_perf_filter(&tu->consumer, 0, current->mm))
		return UPROBE_HANDLER_REMOVE;

1067
	if (!is_ret_probe(tu))
1068
		__uprobe_perf_func(tu, 0, regs, ucb, dsize);
1069
	return 0;
1070
}
1071 1072

static void uretprobe_perf_func(struct trace_uprobe *tu, unsigned long func,
1073 1074
				struct pt_regs *regs,
				struct uprobe_cpu_buffer *ucb, int dsize)
1075
{
1076
	__uprobe_perf_func(tu, func, regs, ucb, dsize);
1077
}
1078 1079 1080 1081 1082
#endif	/* CONFIG_PERF_EVENTS */

static
int trace_uprobe_register(struct ftrace_event_call *event, enum trace_reg type, void *data)
{
1083
	struct trace_uprobe *tu = event->data;
1084 1085 1086

	switch (type) {
	case TRACE_REG_REGISTER:
1087
		return probe_event_enable(tu, TP_FLAG_TRACE, NULL);
1088 1089 1090 1091 1092 1093 1094

	case TRACE_REG_UNREGISTER:
		probe_event_disable(tu, TP_FLAG_TRACE);
		return 0;

#ifdef CONFIG_PERF_EVENTS
	case TRACE_REG_PERF_REGISTER:
1095
		return probe_event_enable(tu, TP_FLAG_PROFILE, uprobe_perf_filter);
1096 1097 1098 1099

	case TRACE_REG_PERF_UNREGISTER:
		probe_event_disable(tu, TP_FLAG_PROFILE);
		return 0;
1100 1101 1102 1103 1104 1105 1106

	case TRACE_REG_PERF_OPEN:
		return uprobe_perf_open(tu, data);

	case TRACE_REG_PERF_CLOSE:
		return uprobe_perf_close(tu, data);

1107 1108 1109 1110 1111 1112 1113 1114 1115 1116
#endif
	default:
		return 0;
	}
	return 0;
}

static int uprobe_dispatcher(struct uprobe_consumer *con, struct pt_regs *regs)
{
	struct trace_uprobe *tu;
1117
	struct uprobe_dispatch_data udd;
1118 1119
	struct uprobe_cpu_buffer *ucb;
	int dsize, esize;
1120
	int ret = 0;
1121

1122

1123
	tu = container_of(con, struct trace_uprobe, consumer);
1124
	tu->nhit++;
1125

1126 1127 1128 1129 1130
	udd.tu = tu;
	udd.bp_addr = instruction_pointer(regs);

	current->utask->vaddr = (unsigned long) &udd;

1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145
#ifdef CONFIG_PERF_EVENTS
	if ((tu->tp.flags & TP_FLAG_TRACE) == 0 &&
	    !uprobe_perf_filter(&tu->consumer, 0, current->mm))
		return UPROBE_HANDLER_REMOVE;
#endif

	if (WARN_ON_ONCE(!uprobe_cpu_buffer))
		return 0;

	dsize = __get_data_size(&tu->tp, regs);
	esize = SIZEOF_TRACE_ENTRY(is_ret_probe(tu));

	ucb = uprobe_buffer_get();
	store_trace_args(esize, &tu->tp, regs, ucb->buf, dsize);

1146
	if (tu->tp.flags & TP_FLAG_TRACE)
1147
		ret |= uprobe_trace_func(tu, regs, ucb, dsize);
1148 1149

#ifdef CONFIG_PERF_EVENTS
1150
	if (tu->tp.flags & TP_FLAG_PROFILE)
1151
		ret |= uprobe_perf_func(tu, regs, ucb, dsize);
1152
#endif
1153
	uprobe_buffer_put(ucb);
1154
	return ret;
1155 1156
}

1157 1158 1159 1160
static int uretprobe_dispatcher(struct uprobe_consumer *con,
				unsigned long func, struct pt_regs *regs)
{
	struct trace_uprobe *tu;
1161
	struct uprobe_dispatch_data udd;
1162 1163
	struct uprobe_cpu_buffer *ucb;
	int dsize, esize;
1164 1165 1166

	tu = container_of(con, struct trace_uprobe, consumer);

1167 1168 1169 1170 1171
	udd.tu = tu;
	udd.bp_addr = func;

	current->utask->vaddr = (unsigned long) &udd;

1172 1173 1174 1175 1176 1177 1178 1179 1180
	if (WARN_ON_ONCE(!uprobe_cpu_buffer))
		return 0;

	dsize = __get_data_size(&tu->tp, regs);
	esize = SIZEOF_TRACE_ENTRY(is_ret_probe(tu));

	ucb = uprobe_buffer_get();
	store_trace_args(esize, &tu->tp, regs, ucb->buf, dsize);

1181
	if (tu->tp.flags & TP_FLAG_TRACE)
1182
		uretprobe_trace_func(tu, func, regs, ucb, dsize);
1183 1184

#ifdef CONFIG_PERF_EVENTS
1185
	if (tu->tp.flags & TP_FLAG_PROFILE)
1186
		uretprobe_perf_func(tu, func, regs, ucb, dsize);
1187
#endif
1188
	uprobe_buffer_put(ucb);
1189 1190 1191
	return 0;
}

1192 1193 1194 1195 1196 1197
static struct trace_event_functions uprobe_funcs = {
	.trace		= print_uprobe_event
};

static int register_uprobe_event(struct trace_uprobe *tu)
{
1198
	struct ftrace_event_call *call = &tu->tp.call;
1199 1200 1201 1202 1203 1204 1205
	int ret;

	/* Initialize ftrace_event_call */
	INIT_LIST_HEAD(&call->class->fields);
	call->event.funcs = &uprobe_funcs;
	call->class->define_fields = uprobe_event_define_fields;

1206
	if (set_print_fmt(&tu->tp, is_ret_probe(tu)) < 0)
1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227
		return -ENOMEM;

	ret = register_ftrace_event(&call->event);
	if (!ret) {
		kfree(call->print_fmt);
		return -ENODEV;
	}
	call->flags = 0;
	call->class->reg = trace_uprobe_register;
	call->data = tu;
	ret = trace_add_event_call(call);

	if (ret) {
		pr_info("Failed to register uprobe event: %s\n", call->name);
		kfree(call->print_fmt);
		unregister_ftrace_event(&call->event);
	}

	return ret;
}

1228
static int unregister_uprobe_event(struct trace_uprobe *tu)
1229
{
1230 1231
	int ret;

1232
	/* tu->event is unregistered in trace_remove_event_call() */
1233
	ret = trace_remove_event_call(&tu->tp.call);
1234 1235
	if (ret)
		return ret;
1236 1237
	kfree(tu->tp.call.print_fmt);
	tu->tp.call.print_fmt = NULL;
1238
	return 0;
1239 1240 1241 1242 1243 1244 1245 1246 1247 1248 1249 1250 1251 1252 1253 1254 1255 1256 1257 1258
}

/* Make a trace interface for controling probe points */
static __init int init_uprobe_trace(void)
{
	struct dentry *d_tracer;

	d_tracer = tracing_init_dentry();
	if (!d_tracer)
		return 0;

	trace_create_file("uprobe_events", 0644, d_tracer,
				    NULL, &uprobe_events_ops);
	/* Profile interface */
	trace_create_file("uprobe_profile", 0444, d_tracer,
				    NULL, &uprobe_profile_ops);
	return 0;
}

fs_initcall(init_uprobe_trace);