2019-01-17 18:27:53 +03:00
// SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause)
/* Copyright (c) 2019 Netronome Systems, Inc. */
# include <errno.h>
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
# include <fcntl.h>
# include <string.h>
# include <stdlib.h>
2019-01-17 18:27:53 +03:00
# include <unistd.h>
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
# include <net/if.h>
2019-01-17 18:27:53 +03:00
# include <sys/utsname.h>
2019-04-27 02:39:44 +03:00
# include <linux/btf.h>
2019-01-17 18:27:53 +03:00
# include <linux/filter.h>
# include <linux/kernel.h>
# include "bpf.h"
# include "libbpf.h"
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
# include "libbpf_internal.h"
2019-01-17 18:27:53 +03:00
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
static bool grep ( const char * buffer , const char * pattern )
{
return ! ! strstr ( buffer , pattern ) ;
}
static int get_vendor_id ( int ifindex )
{
char ifname [ IF_NAMESIZE ] , path [ 64 ] , buf [ 8 ] ;
ssize_t len ;
int fd ;
if ( ! if_indextoname ( ifindex , ifname ) )
return - 1 ;
snprintf ( path , sizeof ( path ) , " /sys/class/net/%s/device/vendor " , ifname ) ;
2021-10-28 09:34:58 +03:00
fd = open ( path , O_RDONLY | O_CLOEXEC ) ;
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
if ( fd < 0 )
return - 1 ;
len = read ( fd , buf , sizeof ( buf ) ) ;
close ( fd ) ;
if ( len < 0 )
return - 1 ;
if ( len > = ( ssize_t ) sizeof ( buf ) )
return - 1 ;
buf [ len ] = ' \0 ' ;
return strtol ( buf , NULL , 0 ) ;
}
2021-12-17 20:12:00 +03:00
static int probe_prog_load ( enum bpf_prog_type prog_type ,
const struct bpf_insn * insns , size_t insns_cnt ,
char * log_buf , size_t log_buf_sz ,
__u32 ifindex )
2019-01-17 18:27:53 +03:00
{
2021-12-17 20:12:00 +03:00
LIBBPF_OPTS ( bpf_prog_load_opts , opts ,
. log_buf = log_buf ,
. log_size = log_buf_sz ,
. log_level = log_buf ? 1 : 0 ,
. prog_ifindex = ifindex ,
) ;
int fd , err , exp_err = 0 ;
const char * exp_msg = NULL ;
char buf [ 4096 ] ;
2019-01-17 18:27:53 +03:00
switch ( prog_type ) {
case BPF_PROG_TYPE_CGROUP_SOCK_ADDR :
2021-11-04 01:08:37 +03:00
opts . expected_attach_type = BPF_CGROUP_INET4_CONNECT ;
2019-01-17 18:27:53 +03:00
break ;
2021-07-29 01:58:25 +03:00
case BPF_PROG_TYPE_CGROUP_SOCKOPT :
2021-11-04 01:08:37 +03:00
opts . expected_attach_type = BPF_CGROUP_GETSOCKOPT ;
2021-07-29 01:58:25 +03:00
break ;
2020-07-17 13:35:33 +03:00
case BPF_PROG_TYPE_SK_LOOKUP :
2021-11-04 01:08:37 +03:00
opts . expected_attach_type = BPF_SK_LOOKUP ;
2020-07-17 13:35:33 +03:00
break ;
2019-01-17 18:27:53 +03:00
case BPF_PROG_TYPE_KPROBE :
2021-11-04 01:08:37 +03:00
opts . kern_version = get_kernel_version ( ) ;
2019-01-17 18:27:53 +03:00
break ;
2021-12-17 20:12:00 +03:00
case BPF_PROG_TYPE_LIRC_MODE2 :
opts . expected_attach_type = BPF_LIRC_MODE2 ;
break ;
case BPF_PROG_TYPE_TRACING :
case BPF_PROG_TYPE_LSM :
opts . log_buf = buf ;
opts . log_size = sizeof ( buf ) ;
opts . log_level = 1 ;
if ( prog_type = = BPF_PROG_TYPE_TRACING )
opts . expected_attach_type = BPF_TRACE_FENTRY ;
else
opts . expected_attach_type = BPF_MODIFY_RETURN ;
opts . attach_btf_id = 1 ;
exp_err = - EINVAL ;
exp_msg = " attach_btf_id 1 is not a function " ;
break ;
case BPF_PROG_TYPE_EXT :
opts . log_buf = buf ;
opts . log_size = sizeof ( buf ) ;
opts . log_level = 1 ;
opts . attach_btf_id = 1 ;
exp_err = - EINVAL ;
exp_msg = " Cannot replace kernel functions " ;
break ;
case BPF_PROG_TYPE_SYSCALL :
opts . prog_flags = BPF_F_SLEEPABLE ;
break ;
case BPF_PROG_TYPE_STRUCT_OPS :
exp_err = - 524 ; /* -ENOTSUPP */
break ;
2019-01-17 18:27:53 +03:00
case BPF_PROG_TYPE_UNSPEC :
case BPF_PROG_TYPE_SOCKET_FILTER :
case BPF_PROG_TYPE_SCHED_CLS :
case BPF_PROG_TYPE_SCHED_ACT :
case BPF_PROG_TYPE_TRACEPOINT :
case BPF_PROG_TYPE_XDP :
case BPF_PROG_TYPE_PERF_EVENT :
case BPF_PROG_TYPE_CGROUP_SKB :
case BPF_PROG_TYPE_CGROUP_SOCK :
case BPF_PROG_TYPE_LWT_IN :
case BPF_PROG_TYPE_LWT_OUT :
case BPF_PROG_TYPE_LWT_XMIT :
case BPF_PROG_TYPE_SOCK_OPS :
case BPF_PROG_TYPE_SK_SKB :
case BPF_PROG_TYPE_CGROUP_DEVICE :
case BPF_PROG_TYPE_SK_MSG :
case BPF_PROG_TYPE_RAW_TRACEPOINT :
2019-04-26 21:49:50 +03:00
case BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE :
2019-01-17 18:27:53 +03:00
case BPF_PROG_TYPE_LWT_SEG6LOCAL :
case BPF_PROG_TYPE_SK_REUSEPORT :
case BPF_PROG_TYPE_FLOW_DISSECTOR :
2019-03-08 20:15:26 +03:00
case BPF_PROG_TYPE_CGROUP_SYSCTL :
2019-01-17 18:27:53 +03:00
break ;
2021-12-17 20:12:00 +03:00
default :
return - EOPNOTSUPP ;
2019-01-17 18:27:53 +03:00
}
2021-12-17 20:12:00 +03:00
fd = bpf_prog_load ( prog_type , NULL , " GPL " , insns , insns_cnt , & opts ) ;
err = - errno ;
2019-01-17 18:27:53 +03:00
if ( fd > = 0 )
close ( fd ) ;
2021-12-17 20:12:00 +03:00
if ( exp_err ) {
if ( fd > = 0 | | err ! = exp_err )
return 0 ;
if ( exp_msg & & ! strstr ( buf , exp_msg ) )
return 0 ;
return 1 ;
}
return fd > = 0 ? 1 : 0 ;
}
int libbpf_probe_bpf_prog_type ( enum bpf_prog_type prog_type , const void * opts )
{
struct bpf_insn insns [ ] = {
BPF_MOV64_IMM ( BPF_REG_0 , 0 ) ,
BPF_EXIT_INSN ( )
} ;
const size_t insn_cnt = ARRAY_SIZE ( insns ) ;
int ret ;
if ( opts )
return libbpf_err ( - EINVAL ) ;
ret = probe_prog_load ( prog_type , insns , insn_cnt , NULL , 0 , 0 ) ;
return libbpf_err ( ret ) ;
2019-01-17 18:27:53 +03:00
}
bool bpf_probe_prog_type ( enum bpf_prog_type prog_type , __u32 ifindex )
{
struct bpf_insn insns [ 2 ] = {
BPF_MOV64_IMM ( BPF_REG_0 , 0 ) ,
BPF_EXIT_INSN ( )
} ;
2021-12-17 20:12:00 +03:00
/* prefer libbpf_probe_bpf_prog_type() unless offload is requested */
if ( ifindex = = 0 )
return libbpf_probe_bpf_prog_type ( prog_type , NULL ) = = 1 ;
2019-01-17 18:27:53 +03:00
if ( ifindex & & prog_type = = BPF_PROG_TYPE_SCHED_CLS )
/* nfp returns -EINVAL on exit(0) with TC offload */
insns [ 0 ] . imm = 2 ;
errno = 0 ;
2021-12-17 20:12:00 +03:00
probe_prog_load ( prog_type , insns , ARRAY_SIZE ( insns ) , NULL , 0 , ifindex ) ;
2019-01-17 18:27:53 +03:00
return errno ! = EINVAL & & errno ! = EOPNOTSUPP ;
}
2019-01-17 18:27:54 +03:00
2019-05-29 21:31:09 +03:00
int libbpf__load_raw_btf ( const char * raw_types , size_t types_len ,
const char * str_sec , size_t str_len )
2019-04-27 02:39:44 +03:00
{
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
struct btf_header hdr = {
. magic = BTF_MAGIC ,
. version = BTF_VERSION ,
. hdr_len = sizeof ( struct btf_header ) ,
. type_len = types_len ,
. str_off = types_len ,
. str_len = str_len ,
} ;
int btf_fd , btf_len ;
__u8 * raw_btf ;
btf_len = hdr . hdr_len + hdr . type_len + hdr . str_len ;
raw_btf = malloc ( btf_len ) ;
if ( ! raw_btf )
return - ENOMEM ;
memcpy ( raw_btf , & hdr , sizeof ( hdr ) ) ;
memcpy ( raw_btf + hdr . hdr_len , raw_types , hdr . type_len ) ;
memcpy ( raw_btf + hdr . hdr_len + hdr . type_len , str_sec , hdr . str_len ) ;
2021-12-09 22:38:30 +03:00
btf_fd = bpf_btf_load ( raw_btf , btf_len , NULL ) ;
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
free ( raw_btf ) ;
2019-05-29 21:31:09 +03:00
return btf_fd ;
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
}
2020-08-25 21:29:17 +03:00
static int load_local_storage_btf ( void )
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
{
const char strs [ ] = " \0 bpf_spin_lock \0 val \0 cnt \0 l " ;
2019-04-27 02:39:44 +03:00
/* struct bpf_spin_lock {
* int val ;
* } ;
* struct val {
* int cnt ;
* struct bpf_spin_lock l ;
* } ;
*/
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
__u32 types [ ] = {
2019-04-27 02:39:44 +03:00
/* int */
BTF_TYPE_INT_ENC ( 0 , BTF_INT_SIGNED , 0 , 32 , 4 ) , /* [1] */
/* struct bpf_spin_lock */ /* [2] */
BTF_TYPE_ENC ( 1 , BTF_INFO_ENC ( BTF_KIND_STRUCT , 0 , 1 ) , 4 ) ,
BTF_MEMBER_ENC ( 15 , 1 , 0 ) , /* int val; */
/* struct val */ /* [3] */
BTF_TYPE_ENC ( 15 , BTF_INFO_ENC ( BTF_KIND_STRUCT , 0 , 2 ) , 8 ) ,
BTF_MEMBER_ENC ( 19 , 1 , 0 ) , /* int cnt; */
BTF_MEMBER_ENC ( 23 , 2 , 32 ) , /* struct bpf_spin_lock l; */
} ;
2019-05-29 21:31:09 +03:00
return libbpf__load_raw_btf ( ( char * ) types , sizeof ( types ) ,
libbpf: detect supported kernel BTF features and sanitize BTF
Depending on used versions of libbpf, Clang, and kernel, it's possible to
have valid BPF object files with valid BTF information, that still won't
load successfully due to Clang emitting newer BTF features (e.g.,
BTF_KIND_FUNC, .BTF.ext's line_info/func_info, BTF_KIND_DATASEC, etc), that
are not yet supported by older kernel.
This patch adds detection of BTF features and sanitizes BPF object's BTF
by substituting various supported BTF kinds, which have compatible layout:
- BTF_KIND_FUNC -> BTF_KIND_TYPEDEF
- BTF_KIND_FUNC_PROTO -> BTF_KIND_ENUM
- BTF_KIND_VAR -> BTF_KIND_INT
- BTF_KIND_DATASEC -> BTF_KIND_STRUCT
Replacement is done in such a way as to preserve as much information as
possible (names, sizes, etc) where possible without violating kernel's
validation rules.
v2->v3:
- remove duplicate #defines from libbpf_util.h
v1->v2:
- add internal libbpf_internal.h w/ common stuff
- switch SK storage BTF to use new libbpf__probe_raw_btf()
Reported-by: Alexei Starovoitov <ast@fb.com>
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2019-05-11 00:13:15 +03:00
strs , sizeof ( strs ) ) ;
2019-04-27 02:39:44 +03:00
}
2021-12-17 20:12:00 +03:00
static int probe_map_create ( enum bpf_map_type map_type , __u32 ifindex )
2019-01-17 18:27:54 +03:00
{
2021-12-17 20:12:00 +03:00
LIBBPF_OPTS ( bpf_map_create_opts , opts ) ;
int key_size , value_size , max_entries ;
2019-04-27 02:39:44 +03:00
__u32 btf_key_type_id = 0 , btf_value_type_id = 0 ;
2021-12-17 20:12:00 +03:00
int fd = - 1 , btf_fd = - 1 , fd_inner = - 1 , exp_err = 0 , err ;
opts . map_ifindex = ifindex ;
2019-01-17 18:27:54 +03:00
key_size = sizeof ( __u32 ) ;
value_size = sizeof ( __u32 ) ;
max_entries = 1 ;
switch ( map_type ) {
case BPF_MAP_TYPE_STACK_TRACE :
value_size = sizeof ( __u64 ) ;
break ;
case BPF_MAP_TYPE_LPM_TRIE :
key_size = sizeof ( __u64 ) ;
value_size = sizeof ( __u64 ) ;
2021-12-17 20:12:00 +03:00
opts . map_flags = BPF_F_NO_PREALLOC ;
2019-01-17 18:27:54 +03:00
break ;
case BPF_MAP_TYPE_CGROUP_STORAGE :
case BPF_MAP_TYPE_PERCPU_CGROUP_STORAGE :
key_size = sizeof ( struct bpf_cgroup_storage_key ) ;
value_size = sizeof ( __u64 ) ;
max_entries = 0 ;
break ;
case BPF_MAP_TYPE_QUEUE :
case BPF_MAP_TYPE_STACK :
key_size = 0 ;
break ;
2019-04-27 02:39:44 +03:00
case BPF_MAP_TYPE_SK_STORAGE :
2020-08-25 21:29:17 +03:00
case BPF_MAP_TYPE_INODE_STORAGE :
2020-11-06 13:37:41 +03:00
case BPF_MAP_TYPE_TASK_STORAGE :
2019-04-27 02:39:44 +03:00
btf_key_type_id = 1 ;
btf_value_type_id = 3 ;
value_size = 8 ;
max_entries = 0 ;
2021-12-17 20:12:00 +03:00
opts . map_flags = BPF_F_NO_PREALLOC ;
2020-08-25 21:29:17 +03:00
btf_fd = load_local_storage_btf ( ) ;
2019-04-27 02:39:44 +03:00
if ( btf_fd < 0 )
2021-12-17 20:12:00 +03:00
return btf_fd ;
2019-04-27 02:39:44 +03:00
break ;
libbpf: Add BPF ring buffer support
Declaring and instantiating BPF ring buffer doesn't require any changes to
libbpf, as it's just another type of maps. So using existing BTF-defined maps
syntax with __uint(type, BPF_MAP_TYPE_RINGBUF) and __uint(max_elements,
<size-of-ring-buf>) is all that's necessary to create and use BPF ring buffer.
This patch adds BPF ring buffer consumer to libbpf. It is very similar to
perf_buffer implementation in terms of API, but also attempts to fix some
minor problems and inconveniences with existing perf_buffer API.
ring_buffer support both single ring buffer use case (with just using
ring_buffer__new()), as well as allows to add more ring buffers, each with its
own callback and context. This allows to efficiently poll and consume
multiple, potentially completely independent, ring buffers, using single
epoll instance.
The latter is actually a problem in practice for applications
that are using multiple sets of perf buffers. They have to create multiple
instances for struct perf_buffer and poll them independently or in a loop,
each approach having its own problems (e.g., inability to use a common poll
timeout). struct ring_buffer eliminates this problem by aggregating many
independent ring buffer instances under the single "ring buffer manager".
Second, perf_buffer's callback can't return error, so applications that need
to stop polling due to error in data or data signalling the end, have to use
extra mechanisms to signal that polling has to stop. ring_buffer's callback
can return error, which will be passed through back to user code and can be
acted upon appropariately.
Two APIs allow to consume ring buffer data:
- ring_buffer__poll(), which will wait for data availability notification
and will consume data only from reported ring buffer(s); this API allows
to efficiently use resources by reading data only when it becomes
available;
- ring_buffer__consume(), will attempt to read new records regardless of
data availablity notification sub-system. This API is useful for cases
when lowest latency is required, in expense of burning CPU resources.
Signed-off-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20200529075424.3139988-3-andriin@fb.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2020-05-29 10:54:21 +03:00
case BPF_MAP_TYPE_RINGBUF :
key_size = 0 ;
value_size = 0 ;
max_entries = 4096 ;
break ;
2021-12-17 20:12:00 +03:00
case BPF_MAP_TYPE_STRUCT_OPS :
/* we'll get -ENOTSUPP for invalid BTF type ID for struct_ops */
opts . btf_vmlinux_value_type_id = 1 ;
exp_err = - 524 ; /* -ENOTSUPP */
break ;
case BPF_MAP_TYPE_BLOOM_FILTER :
key_size = 0 ;
max_entries = 1 ;
break ;
2019-01-17 18:27:54 +03:00
case BPF_MAP_TYPE_HASH :
case BPF_MAP_TYPE_ARRAY :
case BPF_MAP_TYPE_PROG_ARRAY :
case BPF_MAP_TYPE_PERF_EVENT_ARRAY :
case BPF_MAP_TYPE_PERCPU_HASH :
case BPF_MAP_TYPE_PERCPU_ARRAY :
case BPF_MAP_TYPE_CGROUP_ARRAY :
case BPF_MAP_TYPE_LRU_HASH :
case BPF_MAP_TYPE_LRU_PERCPU_HASH :
case BPF_MAP_TYPE_ARRAY_OF_MAPS :
case BPF_MAP_TYPE_HASH_OF_MAPS :
case BPF_MAP_TYPE_DEVMAP :
2019-07-26 19:06:57 +03:00
case BPF_MAP_TYPE_DEVMAP_HASH :
2019-01-17 18:27:54 +03:00
case BPF_MAP_TYPE_SOCKMAP :
case BPF_MAP_TYPE_CPUMAP :
case BPF_MAP_TYPE_XSKMAP :
case BPF_MAP_TYPE_SOCKHASH :
case BPF_MAP_TYPE_REUSEPORT_SOCKARRAY :
break ;
2021-12-17 20:12:00 +03:00
case BPF_MAP_TYPE_UNSPEC :
default :
return - EOPNOTSUPP ;
2019-01-17 18:27:54 +03:00
}
if ( map_type = = BPF_MAP_TYPE_ARRAY_OF_MAPS | |
map_type = = BPF_MAP_TYPE_HASH_OF_MAPS ) {
/* TODO: probe for device, once libbpf has a function to create
* map - in - map for offload
*/
if ( ifindex )
2021-12-17 20:12:00 +03:00
goto cleanup ;
2019-01-17 18:27:54 +03:00
2021-11-24 22:32:31 +03:00
fd_inner = bpf_map_create ( BPF_MAP_TYPE_HASH , NULL ,
sizeof ( __u32 ) , sizeof ( __u32 ) , 1 , NULL ) ;
2019-01-17 18:27:54 +03:00
if ( fd_inner < 0 )
2021-12-17 20:12:00 +03:00
goto cleanup ;
2021-11-24 22:32:31 +03:00
opts . inner_map_fd = fd_inner ;
2021-12-17 20:12:00 +03:00
}
2019-01-17 18:27:54 +03:00
2021-12-17 20:12:00 +03:00
if ( btf_fd > = 0 ) {
opts . btf_fd = btf_fd ;
opts . btf_key_type_id = btf_key_type_id ;
opts . btf_value_type_id = btf_value_type_id ;
2019-01-17 18:27:54 +03:00
}
2021-12-17 20:12:00 +03:00
fd = bpf_map_create ( map_type , NULL , key_size , value_size , max_entries , & opts ) ;
err = - errno ;
cleanup :
2019-01-17 18:27:54 +03:00
if ( fd > = 0 )
close ( fd ) ;
2021-12-17 20:12:00 +03:00
if ( fd_inner > = 0 )
close ( fd_inner ) ;
2019-04-27 02:39:44 +03:00
if ( btf_fd > = 0 )
close ( btf_fd ) ;
2019-01-17 18:27:54 +03:00
2021-12-17 20:12:00 +03:00
if ( exp_err )
return fd < 0 & & err = = exp_err ? 1 : 0 ;
else
return fd > = 0 ? 1 : 0 ;
}
int libbpf_probe_bpf_map_type ( enum bpf_map_type map_type , const void * opts )
{
int ret ;
if ( opts )
return libbpf_err ( - EINVAL ) ;
ret = probe_map_create ( map_type , 0 ) ;
return libbpf_err ( ret ) ;
}
bool bpf_probe_map_type ( enum bpf_map_type map_type , __u32 ifindex )
{
return probe_map_create ( map_type , ifindex ) = = 1 ;
}
int libbpf_probe_bpf_helper ( enum bpf_prog_type prog_type , enum bpf_func_id helper_id ,
const void * opts )
{
struct bpf_insn insns [ ] = {
BPF_EMIT_CALL ( ( __u32 ) helper_id ) ,
BPF_EXIT_INSN ( ) ,
} ;
const size_t insn_cnt = ARRAY_SIZE ( insns ) ;
char buf [ 4096 ] ;
int ret ;
if ( opts )
return libbpf_err ( - EINVAL ) ;
/* we can't successfully load all prog types to check for BPF helper
* support , so bail out with - EOPNOTSUPP error
*/
switch ( prog_type ) {
case BPF_PROG_TYPE_TRACING :
case BPF_PROG_TYPE_EXT :
case BPF_PROG_TYPE_LSM :
case BPF_PROG_TYPE_STRUCT_OPS :
return - EOPNOTSUPP ;
default :
break ;
}
buf [ 0 ] = ' \0 ' ;
ret = probe_prog_load ( prog_type , insns , insn_cnt , buf , sizeof ( buf ) , 0 ) ;
if ( ret < 0 )
return libbpf_err ( ret ) ;
/* If BPF verifier doesn't recognize BPF helper ID (enum bpf_func_id)
* at all , it will emit something like " invalid func unknown#181 " .
* If BPF verifier recognizes BPF helper but it ' s not supported for
* given BPF program type , it will emit " unknown func bpf_sys_bpf#166 " .
* In both cases , provided combination of BPF program type and BPF
* helper is not supported by the kernel .
* In all other cases , probe_prog_load ( ) above will either succeed ( e . g . ,
* because BPF helper happens to accept no input arguments or it
* accepts one input argument and initial PTR_TO_CTX is fine for
* that ) , or we ' ll get some more specific BPF verifier error about
* some unsatisfied conditions .
*/
if ( ret = = 0 & & ( strstr ( buf , " invalid func " ) | | strstr ( buf , " unknown func " ) ) )
return 0 ;
return 1 ; /* assume supported */
2019-01-17 18:27:54 +03:00
}
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
bool bpf_probe_helper ( enum bpf_func_id id , enum bpf_prog_type prog_type ,
__u32 ifindex )
{
struct bpf_insn insns [ 2 ] = {
BPF_EMIT_CALL ( id ) ,
BPF_EXIT_INSN ( )
} ;
char buf [ 4096 ] = { } ;
bool res ;
2021-12-17 20:12:00 +03:00
probe_prog_load ( prog_type , insns , ARRAY_SIZE ( insns ) , buf , sizeof ( buf ) , ifindex ) ;
tools: bpftool: add probes for eBPF helper functions
Similarly to what was done for program types and map types, add a set of
probes to test the availability of the different eBPF helper functions
on the current system.
For each known program type, all known helpers are tested, in order to
establish a compatibility matrix. Output is provided as a set of lists
of available helpers, one per program type.
Sample output:
# bpftool feature probe kernel
...
Scanning eBPF helper functions...
eBPF helpers supported for program type socket_filter:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
eBPF helpers supported for program type kprobe:
- bpf_map_lookup_elem
- bpf_map_update_elem
- bpf_map_delete_elem
...
# bpftool --json --pretty feature probe kernel
{
...
"helpers": {
"socket_filter_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
"kprobe_available_helpers": ["bpf_map_lookup_elem", \
"bpf_map_update_elem","bpf_map_delete_elem", ...
],
...
}
}
v5:
- In libbpf.map, move global symbol to the new LIBBPF_0.0.2 section.
v4:
- Use "enum bpf_func_id" instead of "__u32" in bpf_probe_helper()
declaration for the type of the argument used to pass the id of
the helper to probe.
- Undef BPF_HELPER_MAKE_ENTRY after using it.
v3:
- Do not pass kernel version from bpftool to libbpf probes (kernel
version for testing program with kprobes is retrieved directly from
libbpf).
- Dump one list of available helpers per program type (instead of one
list of compatible program types per helper).
v2:
- Move probes from bpftool to libbpf.
- Test all program types for each helper, print a list of working prog
types for each helper.
- Fall back on include/uapi/linux/bpf.h for names and ids of helpers.
- Remove C-style macros output from this patch.
Signed-off-by: Quentin Monnet <quentin.monnet@netronome.com>
Reviewed-by: Jakub Kicinski <jakub.kicinski@netronome.com>
Reviewed-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
2019-01-17 18:27:55 +03:00
res = ! grep ( buf , " invalid func " ) & & ! grep ( buf , " unknown func " ) ;
if ( ifindex ) {
switch ( get_vendor_id ( ifindex ) ) {
case 0x19ee : /* Netronome specific */
res = res & & ! grep ( buf , " not supported by FW " ) & &
! grep ( buf , " unsupported function id " ) ;
break ;
default :
break ;
}
}
return res ;
}
2020-01-08 19:23:52 +03:00
/*
* Probe for availability of kernel commit ( 5.3 ) :
*
* c04c0d2b968a ( " bpf: increase complexity limit and maximum program size " )
*/
bool bpf_probe_large_insn_limit ( __u32 ifindex )
{
struct bpf_insn insns [ BPF_MAXINSNS + 1 ] ;
int i ;
for ( i = 0 ; i < BPF_MAXINSNS ; i + + )
insns [ i ] = BPF_MOV64_IMM ( BPF_REG_0 , 1 ) ;
insns [ BPF_MAXINSNS ] = BPF_EXIT_INSN ( ) ;
errno = 0 ;
2021-12-17 20:12:00 +03:00
probe_prog_load ( BPF_PROG_TYPE_SCHED_CLS , insns , ARRAY_SIZE ( insns ) , NULL , 0 ,
ifindex ) ;
2020-01-08 19:23:52 +03:00
return errno ! = E2BIG & & errno ! = EINVAL ;
}