| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <c62985530910120310m386e9289v29e71fee1992476b@mail.gmail.com>
Date: Mon, 12 Oct 2009 12:10:51 +0200
From: Frédéric Weisbecker <fweisbec@...il.com>
To: Masami Hiramatsu <mhiramat@...hat.com>
Cc: Steven Rostedt <rostedt@...dmis.org>, Ingo Molnar <mingo@...e.hu>,
lkml <linux-kernel@...r.kernel.org>,
systemtap <systemtap@...rces.redhat.com>,
DLE <dle-develop@...ts.sourceforge.net>,
Thomas Gleixner <tglx@...utronix.de>,
Arnaldo Carvalho de Melo <acme@...hat.com>,
Mike Galbraith <efault@....de>,
Paul Mackerras <paulus@...ba.org>,
Peter Zijlstra <a.p.zijlstra@...llo.nl>,
Christoph Hellwig <hch@...radead.org>,
Ananth N Mavinakayanahalli <ananth@...ibm.com>,
Jim Keniston <jkenisto@...ibm.com>,
"Frank Ch. Eigler" <fche@...hat.com>
Subject: Re: [PATCH tracing/kprobes v3 4/7] tracing/kprobes: Avoid field name
confliction
2009/10/8 Masami Hiramatsu <mhiramat@...hat.com>:
> Check whether the argument name is conflict with other field names.
>
> Changes in v3:
> - Check strcmp() == 0 instead of !strcmp().
>
> Changes in v2:
> - Add common_lock_depth to reserved name list.
>
> Signed-off-by: Masami Hiramatsu <mhiramat@...hat.com>
> Cc: Frederic Weisbecker <fweisbec@...il.com>
> Cc: Ingo Molnar <mingo@...e.hu>
> Cc: Thomas Gleixner <tglx@...utronix.de>
> Cc: Arnaldo Carvalho de Melo <acme@...hat.com>
> Cc: Steven Rostedt <rostedt@...dmis.org>
> Cc: Mike Galbraith <efault@....de>
> Cc: Paul Mackerras <paulus@...ba.org>
> Cc: Peter Zijlstra <a.p.zijlstra@...llo.nl>
> Cc: Christoph Hellwig <hch@...radead.org>
> Cc: Ananth N Mavinakayanahalli <ananth@...ibm.com>
> Cc: Jim Keniston <jkenisto@...ibm.com>
> Cc: Frank Ch. Eigler <fche@...hat.com>
> ---
>
> kernel/trace/trace_kprobe.c | 65 +++++++++++++++++++++++++++++++++++--------
> 1 files changed, 53 insertions(+), 12 deletions(-)
>
> diff --git a/kernel/trace/trace_kprobe.c b/kernel/trace/trace_kprobe.c
> index 030f28c..e3b824a 100644
> --- a/kernel/trace/trace_kprobe.c
> +++ b/kernel/trace/trace_kprobe.c
> @@ -38,6 +38,25 @@
> #define MAX_EVENT_NAME_LEN 64
> #define KPROBE_EVENT_SYSTEM "kprobes"
>
> +/* Reserved field names */
> +#define FIELD_STRING_IP "ip"
> +#define FIELD_STRING_NARGS "nargs"
> +#define FIELD_STRING_RETIP "ret_ip"
> +#define FIELD_STRING_FUNC "func"
If it might conflict, then we should minimize the possibilities for
that to happen.
What if we prefix these fields with kprobed_ ?
kprobed_ip
kprobed_nargs
kprobed_ret_ip
kprobed_func
We are lucky there in that kprobe functions in the kernel can't be kprobed
so it's safe wrt the conflict in the same namespace.
And we can further schrink the kprobed prefixes in userspace post processing.
(If you agree with the above, that can be done incrementally).
Thanks.
> +
> +const char *reserved_field_names[] = {
> + "common_type",
> + "common_flags",
> + "common_preempt_count",
> + "common_pid",
> + "common_tgid",
> + "common_lock_depth",
> + FIELD_STRING_IP,
> + FIELD_STRING_NARGS,
> + FIELD_STRING_RETIP,
> + FIELD_STRING_FUNC,
> +};
> +
> /* currently, trace_kprobe only supports X86. */
>
> struct fetch_func {
> @@ -537,6 +556,20 @@ static int parse_probe_arg(char *arg, struct fetch_func *ff, int is_return)
> return ret;
> }
>
> +/* Return 1 if name is reserved or already used by another argument */
> +static int conflict_field_name(const char *name,
> + struct probe_arg *args, int narg)
> +{
> + int i;
> + for (i = 0; i < ARRAY_SIZE(reserved_field_names); i++)
> + if (strcmp(reserved_field_names[i], name) == 0)
> + return 1;
> + for (i = 0; i < narg; i++)
> + if (strcmp(args[i].name, name) == 0)
> + return 1;
> + return 0;
> +}
> +
> static int create_trace_probe(int argc, char **argv)
> {
> /*
> @@ -637,6 +670,12 @@ static int create_trace_probe(int argc, char **argv)
> *arg++ = '\0';
> else
> arg = argv[i];
> +
> + if (conflict_field_name(argv[i], tp->args, i)) {
> + ret = -EINVAL;
> + goto error;
> + }
> +
> tp->args[i].name = kstrdup(argv[i], GFP_KERNEL);
>
> /* Parse fetch argument */
> @@ -1039,8 +1078,8 @@ static int kprobe_event_define_fields(struct ftrace_event_call *event_call)
> if (!ret)
> return ret;
>
> - DEFINE_FIELD(unsigned long, ip, "ip", 0);
> - DEFINE_FIELD(int, nargs, "nargs", 1);
> + DEFINE_FIELD(unsigned long, ip, FIELD_STRING_IP, 0);
> + DEFINE_FIELD(int, nargs, FIELD_STRING_NARGS, 1);
> /* Set argument names as fields */
> for (i = 0; i < tp->nr_args; i++)
> DEFINE_FIELD(unsigned long, args[i], tp->args[i].name, 0);
> @@ -1057,9 +1096,9 @@ static int kretprobe_event_define_fields(struct ftrace_event_call *event_call)
> if (!ret)
> return ret;
>
> - DEFINE_FIELD(unsigned long, func, "func", 0);
> - DEFINE_FIELD(unsigned long, ret_ip, "ret_ip", 0);
> - DEFINE_FIELD(int, nargs, "nargs", 1);
> + DEFINE_FIELD(unsigned long, func, FIELD_STRING_FUNC, 0);
> + DEFINE_FIELD(unsigned long, ret_ip, FIELD_STRING_RETIP, 0);
> + DEFINE_FIELD(int, nargs, FIELD_STRING_NARGS, 1);
> /* Set argument names as fields */
> for (i = 0; i < tp->nr_args; i++)
> DEFINE_FIELD(unsigned long, args[i], tp->args[i].name, 0);
> @@ -1108,15 +1147,16 @@ static int kprobe_event_show_format(struct ftrace_event_call *call,
> int ret, i;
> struct trace_probe *tp = (struct trace_probe *)call->data;
>
> - SHOW_FIELD(unsigned long, ip, "ip");
> - SHOW_FIELD(int, nargs, "nargs");
> + SHOW_FIELD(unsigned long, ip, FIELD_STRING_IP);
> + SHOW_FIELD(int, nargs, FIELD_STRING_NARGS);
>
> /* Show fields */
> for (i = 0; i < tp->nr_args; i++)
> SHOW_FIELD(unsigned long, args[i], tp->args[i].name);
> trace_seq_puts(s, "\n");
>
> - return __probe_event_show_format(s, tp, "(%lx)", "REC->ip");
> + return __probe_event_show_format(s, tp, "(%lx)",
> + "REC->" FIELD_STRING_IP);
> }
>
> static int kretprobe_event_show_format(struct ftrace_event_call *call,
> @@ -1126,9 +1166,9 @@ static int kretprobe_event_show_format(struct ftrace_event_call *call,
> int ret, i;
> struct trace_probe *tp = (struct trace_probe *)call->data;
>
> - SHOW_FIELD(unsigned long, func, "func");
> - SHOW_FIELD(unsigned long, ret_ip, "ret_ip");
> - SHOW_FIELD(int, nargs, "nargs");
> + SHOW_FIELD(unsigned long, func, FIELD_STRING_FUNC);
> + SHOW_FIELD(unsigned long, ret_ip, FIELD_STRING_RETIP);
> + SHOW_FIELD(int, nargs, FIELD_STRING_NARGS);
>
> /* Show fields */
> for (i = 0; i < tp->nr_args; i++)
> @@ -1136,7 +1176,8 @@ static int kretprobe_event_show_format(struct ftrace_event_call *call,
> trace_seq_puts(s, "\n");
>
> return __probe_event_show_format(s, tp, "(%lx <- %lx)",
> - "REC->func, REC->ret_ip");
> + "REC->" FIELD_STRING_FUNC
> + ", REC->" FIELD_STRING_RETIP);
> }
>
> #ifdef CONFIG_EVENT_PROFILE
>
>
> --
> Masami Hiramatsu
>
> Software Engineer
> Hitachi Computer Products (America), Inc.
> Software Solutions Division
>
> e-mail: mhiramat@...hat.com
>
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/
Powered by blists - more mailing lists