/* Copyright (c) 2011-2014 PLUMgrid, http://plumgrid.com * * This program is free software; you can redistribute it and/or * modify it under the terms of version 2 of the GNU General Public * License as published by the Free Software Foundation. * * This program is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU * General Public License for more details. */#include <linux/bpf.h>#include <linux/err.h>#include <linux/vmalloc.h>#include <linux/slab.h>#include <linux/mm.h>#include <linux/filter.h>#include <linux/perf_event.h> /* Called from syscall */static struct bpf_map *array_map_alloc(union bpf_attr *attr){	struct bpf_array *array;	u32 elem_size, array_size; 	/* check sanity of attributes */	if (attr->max_entries == 0 || attr->key_size != 4 ||	    attr->value_size == 0)		return ERR_PTR(-EINVAL); 	if (attr->value_size >= 1 << (KMALLOC_SHIFT_MAX - 1))		/* if value_size is bigger, the user space won't be able to		 * access the elements.		 */		return ERR_PTR(-E2BIG); 	elem_size = round_up(attr->value_size, 8); 	/* check round_up into zero and u32 overflow */	if (elem_size == 0 ||	    attr->max_entries > (U32_MAX - PAGE_SIZE - sizeof(*array)) / elem_size)		return ERR_PTR(-ENOMEM); 	array_size = sizeof(*array) + attr->max_entries * elem_size; 	/* allocate all map elements and zero-initialize them */	array = kzalloc(array_size, GFP_USER | __GFP_NOWARN);	if (!array) {		array = vzalloc(array_size);		if (!array)			return ERR_PTR(-ENOMEM);	} 	/* copy mandatory map attributes */	array->map.key_size = attr->key_size;	array->map.value_size = attr->value_size;	array->map.max_entries = attr->max_entries;	array->map.pages = round_up(array_size, PAGE_SIZE) >> PAGE_SHIFT;	array->elem_size = elem_size; 	return &array->map;} /* Called from syscall or from eBPF program */static void *array_map_lookup_elem(struct bpf_map *map, void *key){	struct bpf_array *array = container_of(map, struct bpf_array, map);	u32 index = *(u32 *)key; 	if (index >= array->map.max_entries)		return NULL; 	return array->value + array->elem_size * index;} /* Called from syscall */static int array_map_get_next_key(struct bpf_map *map, void *key, void *next_key){	struct bpf_array *array = container_of(map, struct bpf_array, map);	u32 index = *(u32 *)key;	u32 *next = (u32 *)next_key; 	if (index >= array->map.max_entries) {		*next = 0;		return 0;	} 	if (index == array->map.max_entries - 1)		return -ENOENT; 	*next = index + 1;	return 0;} /* Called from syscall or from eBPF program */static int array_map_update_elem(struct bpf_map *map, void *key, void *value,				 u64 map_flags){	struct bpf_array *array = container_of(map, struct bpf_array, map);	u32 index = *(u32 *)key; 	if (map_flags > BPF_EXIST)		/* unknown flags */		return -EINVAL; 	if (index >= array->map.max_entries)		/* all elements were pre-allocated, cannot insert a new one */		return -E2BIG; 	if (map_flags == BPF_NOEXIST)		/* all elements already exist */		return -EEXIST; 	memcpy(array->value + array->elem_size * index, value, map->value_size);	return 0;} /* Called from syscall or from eBPF program */static int array_map_delete_elem(struct bpf_map *map, void *key){	return -EINVAL;} /* Called when map->refcnt goes to zero, either from workqueue or from syscall */static void array_map_free(struct bpf_map *map){	struct bpf_array *array = container_of(map, struct bpf_array, map); 	/* at this point bpf_prog->aux->refcnt == 0 and this map->refcnt == 0,	 * so the programs (can be more than one that used this map) were	 * disconnected from events. Wait for outstanding programs to complete	 * and free the array	 */	synchronize_rcu(); 	kvfree(array);} static const struct bpf_map_ops array_ops = {	.map_alloc = array_map_alloc,	.map_free = array_map_free,	.map_get_next_key = array_map_get_next_key,	.map_lookup_elem = array_map_lookup_elem,	.map_update_elem = array_map_update_elem,	.map_delete_elem = array_map_delete_elem,}; static struct bpf_map_type_list array_type __read_mostly = {	.ops = &array_ops,	.type = BPF_MAP_TYPE_ARRAY,}; static int __init register_array_map(void){	bpf_register_map_type(&array_type);	return 0;}late_initcall(register_array_map); static struct bpf_map *fd_array_map_alloc(union bpf_attr *attr){	/* only file descriptors can be stored in this type of map */	if (attr->value_size != sizeof(u32))		return ERR_PTR(-EINVAL);	return array_map_alloc(attr);} static void fd_array_map_free(struct bpf_map *map){	struct bpf_array *array = container_of(map, struct bpf_array, map);	int i; 	synchronize_rcu(); 	/* make sure it's empty */	for (i = 0; i < array->map.max_entries; i++)		BUG_ON(array->ptrs[i] != NULL);	kvfree(array);} static void *fd_array_map_lookup_elem(struct bpf_map *map, void *key){	return NULL;} /* only called from syscall */static int fd_array_map_update_elem(struct bpf_map *map, void *key,				    void *value, u64 map_flags){	struct bpf_array *array = container_of(map, struct bpf_array, map);	void *new_ptr, *old_ptr;	u32 index = *(u32 *)key, ufd; 	if (map_flags != BPF_ANY)		return -EINVAL; 	if (index >= array->map.max_entries)		return -E2BIG; 	ufd = *(u32 *)value;	new_ptr = map->ops->map_fd_get_ptr(map, ufd);	if (IS_ERR(new_ptr))		return PTR_ERR(new_ptr); 	old_ptr = xchg(array->ptrs + index, new_ptr);	if (old_ptr)		map->ops->map_fd_put_ptr(old_ptr); 	return 0;} static int fd_array_map_delete_elem(struct bpf_map *map, void *key){	struct bpf_array *array = container_of(map, struct bpf_array, map);	void *old_ptr;	u32 index = *(u32 *)key; 	if (index >= array->map.max_entries)		return -E2BIG; 	old_ptr = xchg(array->ptrs + index, NULL);	if (old_ptr) {		map->ops->map_fd_put_ptr(old_ptr);		return 0;	} else {		return -ENOENT;	}} static void *prog_fd_array_get_ptr(struct bpf_map *map, int fd){	struct bpf_array *array = container_of(map, struct bpf_array, map);	struct bpf_prog *prog = bpf_prog_get(fd);	if (IS_ERR(prog))		return prog; 	if (!bpf_prog_array_compatible(array, prog)) {		bpf_prog_put(prog);		return ERR_PTR(-EINVAL);	}	return prog;} static void prog_fd_array_put_ptr(void *ptr){	struct bpf_prog *prog = ptr; 	bpf_prog_put_rcu(prog);} /* decrement refcnt of all bpf_progs that are stored in this map */void bpf_fd_array_map_clear(struct bpf_map *map){	struct bpf_array *array = container_of(map, struct bpf_array, map);	int i; 	for (i = 0; i < array->map.max_entries; i++)		fd_array_map_delete_elem(map, &i);} static const struct bpf_map_ops prog_array_ops = {	.map_alloc = fd_array_map_alloc,	.map_free = fd_array_map_free,	.map_get_next_key = array_map_get_next_key,	.map_lookup_elem = fd_array_map_lookup_elem,	.map_update_elem = fd_array_map_update_elem,	.map_delete_elem = fd_array_map_delete_elem,	.map_fd_get_ptr = prog_fd_array_get_ptr,	.map_fd_put_ptr = prog_fd_array_put_ptr,}; static struct bpf_map_type_list prog_array_type __read_mostly = {	.ops = &prog_array_ops,	.type = BPF_MAP_TYPE_PROG_ARRAY,}; static int __init register_prog_array_map(void){	bpf_register_map_type(&prog_array_type);	return 0;}late_initcall(register_prog_array_map); static void perf_event_array_map_free(struct bpf_map *map){	bpf_fd_array_map_clear(map);	fd_array_map_free(map);} static void *perf_event_fd_array_get_ptr(struct bpf_map *map, int fd){	struct perf_event *event;	const struct perf_event_attr *attr;	struct file *file; 	file = perf_event_get(fd);	if (IS_ERR(file))		return file; 	event = file->private_data; 	attr = perf_event_attrs(event);	if (IS_ERR(attr))		goto err; 	if (attr->inherit)		goto err; 	if (attr->type == PERF_TYPE_RAW)		return file; 	if (attr->type == PERF_TYPE_HARDWARE)		return file; 	if (attr->type == PERF_TYPE_SOFTWARE &&	    attr->config == PERF_COUNT_SW_BPF_OUTPUT)		return file;err:	fput(file);	return ERR_PTR(-EINVAL);} static void perf_event_fd_array_put_ptr(void *ptr){	fput((struct file *)ptr);} static const struct bpf_map_ops perf_event_array_ops = {	.map_alloc = fd_array_map_alloc,	.map_free = perf_event_array_map_free,	.map_get_next_key = array_map_get_next_key,	.map_lookup_elem = fd_array_map_lookup_elem,	.map_update_elem = fd_array_map_update_elem,	.map_delete_elem = fd_array_map_delete_elem,	.map_fd_get_ptr = perf_event_fd_array_get_ptr,	.map_fd_put_ptr = perf_event_fd_array_put_ptr,}; static struct bpf_map_type_list perf_event_array_type __read_mostly = {	.ops = &perf_event_array_ops,	.type = BPF_MAP_TYPE_PERF_EVENT_ARRAY,}; static int __init register_perf_event_array_map(void){	bpf_register_map_type(&perf_event_array_type);	return 0;}late_initcall(register_perf_event_array_map);