| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Wed, 5 Aug 2020 17:14:27 -0700
From: Jonathan Adams <jwadams@...gle.com>
To: linux-kernel@...r.kernel.org
Cc: kvm@...r.kernel.org, Paolo Bonzini <pbonzini@...hat.com>,
Jim Mattson <jmattson@...gle.com>,
David Rientjes <rientjes@...gle.com>,
Jonathan Adams <jwadams@...gle.com>
Subject: [RFC PATCH 3/7] core/metricfs: metric for kernel warnings
Count kernel warnings by function name of the caller.
Each time WARN() is called, which includes WARN_ON(), increment a counter
in a 256-entry hash table. The table key is the entry point of the calling
function, which is found using kallsyms.
We store the name of the function in the table (because it may be a
module address); reporting the metric just walks the table and prints
the values.
The "warnings" metric is cumulative.
Signed-off-by: Jonathan Adams <jwadams@...gle.com>
---
jwadams@...gle.com: rebased to 5.8-rc6, removed google-isms,
added lockdep_assert_held(), NMI handling, ..._unknown*_counts
and locking in warn_tbl_fn(); renamed warn_metric... to
warn_tbl...
The original work was done in 2012 by an engineer no longer
at Google.
---
kernel/panic.c | 131 +++++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 131 insertions(+)
diff --git a/kernel/panic.c b/kernel/panic.c
index e2157ca387c8..c019b41ab387 100644
--- a/kernel/panic.c
+++ b/kernel/panic.c
@@ -31,6 +31,9 @@
#include <linux/bug.h>
#include <linux/ratelimit.h>
#include <linux/debugfs.h>
+#include <linux/utsname.h>
+#include <linux/hash.h>
+#include <linux/metricfs.h>
#include <asm/sections.h>
#define PANIC_TIMER_STEP 100
@@ -568,6 +571,133 @@ void oops_exit(void)
kmsg_dump(KMSG_DUMP_OOPS);
}
+#ifdef CONFIG_METRICFS
+
+/*
+ * Hash table from function address to count of WARNs called within that
+ * function.
+ * So far this is an add-only hash table (ie, entries never removed), so some
+ * simplifying assumptions are made.
+ */
+#define WARN_TBL_BITS (8)
+#define WARN_TBL_SIZE (1<<WARN_TBL_BITS)
+static struct {
+ void *function;
+ int count;
+ char function_name[KSYM_NAME_LEN];
+} warn_tbl[WARN_TBL_SIZE];
+
+static DEFINE_SPINLOCK(warn_tbl_lock);
+static atomic_t warn_tbl_unknown_lookup_count = ATOMIC_INIT(0);
+static atomic_t warn_tbl_unknown_nmi_count = ATOMIC_INIT(0);
+static int warn_tbl_unknown_count;
+
+/*
+ * Find the entry corresponding to the given function address.
+ * Insert a new entry if one doesn't exist yet.
+ * Returns -1 if the hash table is full.
+ */
+static int tbl_find(void *caller_function)
+{
+ int entry, start_entry;
+
+ lockdep_assert_held(&warn_tbl_lock);
+
+ start_entry = hash_ptr(caller_function, WARN_TBL_BITS);
+ entry = start_entry;
+ do {
+ if (warn_tbl[entry].function == caller_function)
+ return entry;
+ if (warn_tbl[entry].function == NULL) {
+ if (!kallsyms_lookup((unsigned long)caller_function,
+ NULL, NULL, NULL,
+ warn_tbl[entry].function_name))
+ return -1;
+ warn_tbl[entry].function = caller_function;
+ return entry;
+ }
+ entry = (entry + 1) % (WARN_TBL_SIZE);
+ } while (entry != start_entry);
+
+ return -1;
+}
+
+static void tbl_increment(void *caller)
+{
+ void *caller_function;
+ unsigned long caller_offset;
+ unsigned long flags;
+ int entry;
+
+ if (!kallsyms_lookup_size_offset(
+ (unsigned long)caller, NULL, &caller_offset)) {
+ atomic_inc(&warn_tbl_unknown_lookup_count);
+ return;
+ }
+ /* use function entrypoint */
+ caller_function = caller - caller_offset;
+
+ if (in_nmi()) {
+ if (!spin_trylock_irqsave(&warn_tbl_lock, flags)) {
+ atomic_inc(&warn_tbl_unknown_nmi_count);
+ return;
+ }
+ } else {
+ spin_lock_irqsave(&warn_tbl_lock, flags);
+ }
+ entry = tbl_find(caller_function);
+ if (entry >= 0)
+ warn_tbl[entry].count++;
+ else
+ warn_tbl_unknown_count++;
+
+ spin_unlock_irqrestore(&warn_tbl_lock, flags);
+}
+
+/*
+ * Export the hash table to metricfs.
+ */
+static void warn_tbl_fn(struct metric_emitter *e)
+{
+ int i;
+ unsigned long flags;
+ int unknown_count = READ_ONCE(warn_tbl_unknown_count) +
+ atomic_read(&warn_tbl_unknown_nmi_count) +
+ atomic_read(&warn_tbl_unknown_lookup_count);
+
+ if (unknown_count != 0)
+ METRIC_EMIT_INT(e, unknown_count, "(unknown)", NULL);
+
+ spin_lock_irqsave(&warn_tbl_lock, flags);
+ for (i = 0; i < WARN_TBL_SIZE; i++) {
+ unsigned long fn = (unsigned long)warn_tbl[i].function;
+ const char *function_name = warn_tbl[i].function_name;
+ int count = warn_tbl[i].count;
+
+ if (!fn)
+ continue;
+
+ // function_name[] is constant once function is non-NULL
+ spin_unlock_irqrestore(&warn_tbl_lock, flags);
+ METRIC_EMIT_INT(e, count, function_name, NULL);
+ spin_lock_irqsave(&warn_tbl_lock, flags);
+ }
+ spin_unlock_irqrestore(&warn_tbl_lock, flags);
+}
+METRIC_EXPORT_COUNTER(warnings, "Count of calls to WARN().",
+ "function", NULL, warn_tbl_fn);
+
+static int __init metricfs_panic_init(void)
+{
+ metric_init_warnings(NULL);
+ return 0;
+}
+late_initcall(metricfs_panic_init);
+
+#else /* CONFIG_METRICFS */
+inline void tbl_increment(void *caller) {}
+#endif
+
struct warn_args {
const char *fmt;
va_list args;
@@ -576,6 +706,7 @@ struct warn_args {
void __warn(const char *file, int line, void *caller, unsigned taint,
struct pt_regs *regs, struct warn_args *args)
{
+ tbl_increment(caller);
disable_trace_on_warning();
if (file)
--
2.28.0.236.gb10cc79966-goog
Powered by blists - more mailing lists