| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <20190111184412.GA22483@kernel.org>
Date: Fri, 11 Jan 2019 15:44:12 -0300
From: Arnaldo Carvalho de Melo <acme@...nel.org>
To: Song Liu <songliubraving@...com>
Cc: linux-kernel@...r.kernel.org, netdev@...r.kernel.org,
peterz@...radead.org, ast@...nel.org, daniel@...earbox.net,
kernel-team@...com, dsahern@...il.com
Subject: Re: [PATCH v7 perf, bpf-next 8/8] perf tools: synthesize
PERF_RECORD_* for loaded BPF programs
Em Thu, Jan 10, 2019 at 04:19:33PM -0800, Song Liu escreveu:
> This patch synthesize PERF_RECORD_KSYMBOL and PERF_RECORD_BPF_EVENT for
> BPF programs loaded before perf-record. This is achieved by gathering
> information about all BPF programs via sys_bpf.
>
> Signed-off-by: Song Liu <songliubraving@...com>
> ---
> tools/perf/builtin-record.c | 6 ++
> tools/perf/util/bpf-event.c | 205 ++++++++++++++++++++++++++++++++++++
> tools/perf/util/bpf-event.h | 5 +
> 3 files changed, 216 insertions(+)
>
> diff --git a/tools/perf/builtin-record.c b/tools/perf/builtin-record.c
> index deaf9b902094..88ea11d57c6f 100644
> --- a/tools/perf/builtin-record.c
> +++ b/tools/perf/builtin-record.c
> @@ -41,6 +41,7 @@
> #include "util/perf-hooks.h"
> #include "util/time-utils.h"
> #include "util/units.h"
> +#include "util/bpf-event.h"
> #include "asm/bug.h"
>
> #include <errno.h>
> @@ -1082,6 +1083,11 @@ static int record__synthesize(struct record *rec, bool tail)
> return err;
> }
>
> + err = perf_event__synthesize_bpf_events(tool, process_synthesized_event,
> + machine, opts);
> + if (err < 0)
> + pr_warning("Couldn't synthesize bpf events.\n");
> +
There should be no warnings on older systems, I build a kernel and tools
with your changes and then, before rebooting, I tried:
[root@...co ~]# perf record ls
Couldn't synthesize bpf events.
<SNIP>
[root@...co ~]# uname -a
Linux quaco 4.19.13-300.fc29.x86_64 #1 SMP Sat Dec 29 22:54:28 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux
[root@...co ~]#
At most this should be a pr_debug(), but then it should check if the
system is bpf capable and if not only warn if the user explicitely asked
for bpf events.
- Arnaldo
> err = __machine__synthesize_threads(machine, tool, &opts->target, rec->evlist->threads,
> process_synthesized_event, opts->sample_address,
> 1);
> diff --git a/tools/perf/util/bpf-event.c b/tools/perf/util/bpf-event.c
> index f24f75506f51..ee60c8b1e636 100644
> --- a/tools/perf/util/bpf-event.c
> +++ b/tools/perf/util/bpf-event.c
> @@ -1,10 +1,24 @@
> // SPDX-License-Identifier: GPL-2.0
> #include <errno.h>
> #include <bpf/bpf.h>
> +#include <bpf/btf.h>
> +#include <linux/btf.h>
> #include "bpf-event.h"
> #include "debug.h"
> #include "symbol.h"
>
> +#define ptr_to_u64(ptr) ((__u64)(unsigned long)(ptr))
> +
> +static int snprintf_hex(char *buf, size_t size, unsigned char *data, size_t len)
> +{
> + int ret = 0;
> + size_t i;
> +
> + for (i = 0; i < len; i++)
> + ret += snprintf(buf + ret, size - ret, "%02x", data[i]);
> + return ret;
> +}
> +
> int machine__process_bpf_event(struct machine *machine __maybe_unused,
> union perf_event *event,
> struct perf_sample *sample __maybe_unused)
> @@ -13,3 +27,194 @@ int machine__process_bpf_event(struct machine *machine __maybe_unused,
> perf_event__fprintf_bpf_event(event, stderr);
> return 0;
> }
> +
> +/*
> + * Synthesize PERF_RECORD_KSYMBOL and PERF_RECORD_BPF_EVENT for one bpf
> + * program. One PERF_RECORD_BPF_EVENT is generated for the program. And
> + * one PERF_RECORD_KSYMBOL is generated for each sub program.
> + */
> +static int perf_event__synthesize_one_bpf_prog(struct perf_tool *tool,
> + perf_event__handler_t process,
> + struct machine *machine,
> + int fd,
> + union perf_event *event,
> + struct record_opts *opts)
> +{
> + struct ksymbol_event *ksymbol_event = &event->ksymbol_event;
> + struct bpf_event *bpf_event = &event->bpf_event;
> + u32 sub_prog_cnt, i, func_info_rec_size;
> + u8 (*prog_tags)[BPF_TAG_SIZE] = NULL;
> + struct bpf_prog_info info = {};
> + u32 info_len = sizeof(info);
> + void *func_infos = NULL;
> + u64 *prog_addrs = NULL;
> + struct btf *btf = NULL;
> + u32 *prog_lens = NULL;
> + bool has_btf = false;
> + int err = 0;
> +
> + /* Call bpf_obj_get_info_by_fd() to get sizes of arrays */
> + err = bpf_obj_get_info_by_fd(fd, &info, &info_len);
> +
> + if (err || info_len < 192 /* need field prog_tags */)
> + return -1;
> +
> + /* number of ksyms, func_lengths, and tags should match */
> + sub_prog_cnt = info.nr_jited_ksyms;
> + if (sub_prog_cnt != info.nr_prog_tags ||
> + sub_prog_cnt != info.nr_jited_func_lens)
> + return -1;
> +
> + /* check BTF func info support */
> + if (info.btf_id && info.nr_func_info && info.func_info_rec_size) {
> + /* btf func info number should be same as sub_prog_cnt */
> + if (sub_prog_cnt != info.nr_func_info)
> + return -1;
> + if (btf__get_from_id(info.btf_id, &btf))
> + return -1;
> + func_info_rec_size = info.func_info_rec_size;
> + func_infos = malloc(sub_prog_cnt * func_info_rec_size);
> + if (!func_infos)
> + return -1;
> + has_btf = true;
> + }
> +
> + /*
> + * We need address, length, and tag for each sub program.
> + * Allocate memory and call bpf_obj_get_info_by_fd() again
> + */
> + prog_addrs = (u64 *)malloc(sizeof(u64) * sub_prog_cnt);
> + prog_lens = (u32 *)malloc(sizeof(u64) * sub_prog_cnt);
> + prog_tags = malloc(sizeof(u8) * BPF_TAG_SIZE * sub_prog_cnt);
> +
> + err = !prog_addrs || !prog_lens || !prog_tags;
> + if (err)
> + goto out;
> +
> + memset(&info, 0, sizeof(info));
> + info.nr_jited_ksyms = sub_prog_cnt;
> + info.nr_jited_func_lens = sub_prog_cnt;
> + info.nr_prog_tags = sub_prog_cnt;
> + info.jited_ksyms = ptr_to_u64(prog_addrs);
> + info.jited_func_lens = ptr_to_u64(prog_lens);
> + info.prog_tags = ptr_to_u64(prog_tags);
> + info_len = sizeof(info);
> + if (has_btf) {
> + info.nr_func_info = sub_prog_cnt;
> + info.func_info_rec_size = func_info_rec_size;
> + info.func_info = ptr_to_u64(func_infos);
> + }
> +
> + err = bpf_obj_get_info_by_fd(fd, &info, &info_len);
> + if (err)
> + goto out;
> +
> + /* Synthesize PERF_RECORD_KSYMBOL */
> + for (i = 0; i < sub_prog_cnt; i++) {
> + const struct bpf_func_info *finfo;
> + const char *short_name = NULL;
> + const struct btf_type *t;
> + int name_len;
> +
> + *ksymbol_event = (struct ksymbol_event){
> + .header = {
> + .type = PERF_RECORD_KSYMBOL,
> + .size = sizeof(struct ksymbol_event),
> + },
> + .addr = prog_addrs[i],
> + .len = prog_lens[i],
> + .ksym_type = PERF_RECORD_KSYMBOL_TYPE_BPF,
> + .flags = 0,
> + };
> + name_len = snprintf(ksymbol_event->name, KSYM_NAME_LEN,
> + "bpf_prog_");
> + name_len += snprintf_hex(ksymbol_event->name + name_len,
> + KSYM_NAME_LEN - name_len,
> + prog_tags[i], BPF_TAG_SIZE);
> + if (has_btf) {
> + finfo = func_infos + i * info.func_info_rec_size;
> + t = btf__type_by_id(btf, finfo->type_id);
> + short_name = btf__name_by_offset(btf, t->name_off);
> + } else if (i == 0 && sub_prog_cnt == 1) {
> + /* no subprog */
> + if (info.name[0])
> + short_name = info.name;
> + } else
> + short_name = "F";
> + if (short_name)
> + name_len += snprintf(ksymbol_event->name + name_len,
> + KSYM_NAME_LEN - name_len,
> + "_%s", short_name);
> +
> + ksymbol_event->header.size += PERF_ALIGN(name_len + 1,
> + sizeof(u64));
> + err = perf_tool__process_synth_event(tool, event,
> + machine, process);
> + }
> +
> + /* Synthesize PERF_RECORD_BPF_EVENT */
> + if (opts->bpf_event) {
> + *bpf_event = (struct bpf_event){
> + .header = {
> + .type = PERF_RECORD_BPF_EVENT,
> + .size = sizeof(struct bpf_event),
> + },
> + .type = PERF_BPF_EVENT_PROG_LOAD,
> + .flags = 0,
> + .id = info.id,
> + };
> + memcpy(bpf_event->tag, prog_tags[i], BPF_TAG_SIZE);
> + err = perf_tool__process_synth_event(tool, event,
> + machine, process);
> + }
> +
> +out:
> + free(prog_tags);
> + free(prog_lens);
> + free(prog_addrs);
> + free(func_infos);
> + free(btf);
> + return err ? -1 : 0;
> +}
> +
> +int perf_event__synthesize_bpf_events(struct perf_tool *tool,
> + perf_event__handler_t process,
> + struct machine *machine,
> + struct record_opts *opts)
> +{
> + union perf_event *event;
> + __u32 id = 0;
> + int err;
> + int fd;
> +
> + event = malloc(sizeof(event->bpf_event) + KSYM_NAME_LEN);
> + if (!event)
> + return -1;
> + while (true) {
> + err = bpf_prog_get_next_id(id, &id);
> + if (err) {
> + if (errno == ENOENT) {
> + err = 0;
> + break;
> + }
> + pr_err("can't get next program: %s%s",
> + strerror(errno),
> + errno == EINVAL ? " -- kernel too old?" : "");
> + err = -1;
> + break;
> + }
> + fd = bpf_prog_get_fd_by_id(id);
> + if (fd < 0) {
> + pr_debug("Failed to get fd for prog_id %u\n", id);
> + continue;
> + }
> +
> + err = perf_event__synthesize_one_bpf_prog(
> + tool, process, machine, fd, event, opts);
> + close(fd);
> + if (err)
> + break;
> + }
> + free(event);
> + return err;
> +}
> diff --git a/tools/perf/util/bpf-event.h b/tools/perf/util/bpf-event.h
> index d5ca355dd298..38aee4040f12 100644
> --- a/tools/perf/util/bpf-event.h
> +++ b/tools/perf/util/bpf-event.h
> @@ -8,4 +8,9 @@ int machine__process_bpf_event(struct machine *machine,
> union perf_event *event,
> struct perf_sample *sample);
>
> +int perf_event__synthesize_bpf_events(struct perf_tool *tool,
> + perf_event__handler_t process,
> + struct machine *machine,
> + struct record_opts *opts);
> +
> #endif
> --
> 2.17.1
--
- Arnaldo
Powered by blists - more mailing lists