ksym_tracer: NIL-terminate user input filter
[safe/jmp/linux-2.6] / kernel / trace / trace_ksym.c
1 /*
2  * trace_ksym.c - Kernel Symbol Tracer
3  *
4  * This program is free software; you can redistribute it and/or modify
5  * it under the terms of the GNU General Public License as published by
6  * the Free Software Foundation; either version 2 of the License, or
7  * (at your option) any later version.
8  *
9  * This program is distributed in the hope that it will be useful,
10  * but WITHOUT ANY WARRANTY; without even the implied warranty of
11  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
12  * GNU General Public License for more details.
13  *
14  * You should have received a copy of the GNU General Public License
15  * along with this program; if not, write to the Free Software
16  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
17  *
18  * Copyright (C) IBM Corporation, 2009
19  */
20
21 #include <linux/kallsyms.h>
22 #include <linux/uaccess.h>
23 #include <linux/debugfs.h>
24 #include <linux/ftrace.h>
25 #include <linux/module.h>
26 #include <linux/fs.h>
27
28 #include "trace_output.h"
29 #include "trace_stat.h"
30 #include "trace.h"
31
32 /* For now, let us restrict the no. of symbols traced simultaneously to number
33  * of available hardware breakpoint registers.
34  */
35 #define KSYM_TRACER_MAX HBP_NUM
36
37 #define KSYM_TRACER_OP_LEN 3 /* rw- */
38
39 struct trace_ksym {
40         struct hw_breakpoint    *ksym_hbp;
41         unsigned long           ksym_addr;
42 #ifdef CONFIG_PROFILE_KSYM_TRACER
43         unsigned long           counter;
44 #endif
45         struct hlist_node       ksym_hlist;
46 };
47
48 static struct trace_array *ksym_trace_array;
49
50 static unsigned int ksym_filter_entry_count;
51 static unsigned int ksym_tracing_enabled;
52
53 static HLIST_HEAD(ksym_filter_head);
54
55 static DEFINE_MUTEX(ksym_tracer_mutex);
56
57 #ifdef CONFIG_PROFILE_KSYM_TRACER
58
59 #define MAX_UL_INT 0xffffffff
60
61 void ksym_collect_stats(unsigned long hbp_hit_addr)
62 {
63         struct hlist_node *node;
64         struct trace_ksym *entry;
65
66         rcu_read_lock();
67         hlist_for_each_entry_rcu(entry, node, &ksym_filter_head, ksym_hlist) {
68                 if ((entry->ksym_addr == hbp_hit_addr) &&
69                     (entry->counter <= MAX_UL_INT)) {
70                         entry->counter++;
71                         break;
72                 }
73         }
74         rcu_read_unlock();
75 }
76 #endif /* CONFIG_PROFILE_KSYM_TRACER */
77
78 void ksym_hbp_handler(struct hw_breakpoint *hbp, struct pt_regs *regs)
79 {
80         struct ring_buffer_event *event;
81         struct trace_array *tr;
82         struct ksym_trace_entry *entry;
83         int pc;
84
85         if (!ksym_tracing_enabled)
86                 return;
87
88         tr = ksym_trace_array;
89         pc = preempt_count();
90
91         event = trace_buffer_lock_reserve(tr, TRACE_KSYM,
92                                                         sizeof(*entry), 0, pc);
93         if (!event)
94                 return;
95
96         entry           = ring_buffer_event_data(event);
97         entry->ip       = instruction_pointer(regs);
98         entry->type     = hbp->info.type;
99         strlcpy(entry->ksym_name, hbp->info.name, KSYM_SYMBOL_LEN);
100         strlcpy(entry->cmd, current->comm, TASK_COMM_LEN);
101
102 #ifdef CONFIG_PROFILE_KSYM_TRACER
103         ksym_collect_stats(hbp->info.address);
104 #endif /* CONFIG_PROFILE_KSYM_TRACER */
105
106         trace_buffer_unlock_commit(tr, event, 0, pc);
107 }
108
109 /* Valid access types are represented as
110  *
111  * rw- : Set Read/Write Access Breakpoint
112  * -w- : Set Write Access Breakpoint
113  * --- : Clear Breakpoints
114  * --x : Set Execution Break points (Not available yet)
115  *
116  */
117 static int ksym_trace_get_access_type(char *str)
118 {
119         int access = 0;
120
121         if (str[0] == 'r')
122                 access += 4;
123         else if (str[0] != '-')
124                 return -EINVAL;
125
126         if (str[1] == 'w')
127                 access += 2;
128         else if (str[1] != '-')
129                 return -EINVAL;
130
131         if (str[2] != '-')
132                 return -EINVAL;
133
134         switch (access) {
135         case 6:
136                 access = HW_BREAKPOINT_RW;
137                 break;
138         case 2:
139                 access = HW_BREAKPOINT_WRITE;
140                 break;
141         }
142
143         return access;
144 }
145
146 /*
147  * There can be several possible malformed requests and we attempt to capture
148  * all of them. We enumerate some of the rules
149  * 1. We will not allow kernel symbols with ':' since it is used as a delimiter.
150  *    i.e. multiple ':' symbols disallowed. Possible uses are of the form
151  *    <module>:<ksym_name>:<op>.
152  * 2. No delimiter symbol ':' in the input string
153  * 3. Spurious operator symbols or symbols not in their respective positions
154  * 4. <ksym_name>:--- i.e. clear breakpoint request when ksym_name not in file
155  * 5. Kernel symbol not a part of /proc/kallsyms
156  * 6. Duplicate requests
157  */
158 static int parse_ksym_trace_str(char *input_string, char **ksymname,
159                                                         unsigned long *addr)
160 {
161         int ret;
162
163         strstrip(input_string);
164
165         *ksymname = strsep(&input_string, ":");
166         *addr = kallsyms_lookup_name(*ksymname);
167
168         /* Check for malformed request: (2), (1) and (5) */
169         if ((!input_string) ||
170             (strlen(input_string) != KSYM_TRACER_OP_LEN) ||
171             (*addr == 0))
172                 return -EINVAL;;
173
174         ret = ksym_trace_get_access_type(input_string);
175
176         return ret;
177 }
178
179 int process_new_ksym_entry(char *ksymname, int op, unsigned long addr)
180 {
181         struct trace_ksym *entry;
182         int ret;
183
184         if (ksym_filter_entry_count >= KSYM_TRACER_MAX) {
185                 printk(KERN_ERR "ksym_tracer: Maximum limit:(%d) reached. No"
186                 " new requests for tracing can be accepted now.\n",
187                         KSYM_TRACER_MAX);
188                 return -ENOSPC;
189         }
190
191         entry = kzalloc(sizeof(struct trace_ksym), GFP_KERNEL);
192         if (!entry)
193                 return -ENOMEM;
194
195         entry->ksym_hbp = kzalloc(sizeof(struct hw_breakpoint), GFP_KERNEL);
196         if (!entry->ksym_hbp) {
197                 kfree(entry);
198                 return -ENOMEM;
199         }
200
201         entry->ksym_hbp->info.name = ksymname;
202         entry->ksym_hbp->info.type = op;
203         entry->ksym_addr = entry->ksym_hbp->info.address = addr;
204 #ifdef CONFIG_X86
205         entry->ksym_hbp->info.len = HW_BREAKPOINT_LEN_4;
206 #endif
207         entry->ksym_hbp->triggered = (void *)ksym_hbp_handler;
208
209         ret = register_kernel_hw_breakpoint(entry->ksym_hbp);
210         if (ret < 0) {
211                 printk(KERN_INFO "ksym_tracer request failed. Try again"
212                                         " later!!\n");
213                 kfree(entry->ksym_hbp);
214                 kfree(entry);
215                 return -EAGAIN;
216         }
217         hlist_add_head_rcu(&(entry->ksym_hlist), &ksym_filter_head);
218         ksym_filter_entry_count++;
219
220         return 0;
221 }
222
223 static ssize_t ksym_trace_filter_read(struct file *filp, char __user *ubuf,
224                                                 size_t count, loff_t *ppos)
225 {
226         struct trace_ksym *entry;
227         struct hlist_node *node;
228         struct trace_seq *s;
229         ssize_t cnt = 0;
230         int ret;
231
232         s = kmalloc(sizeof(*s), GFP_KERNEL);
233         if (!s)
234                 return -ENOMEM;
235         trace_seq_init(s);
236
237         mutex_lock(&ksym_tracer_mutex);
238
239         hlist_for_each_entry(entry, node, &ksym_filter_head, ksym_hlist) {
240                 ret = trace_seq_printf(s, "%s:", entry->ksym_hbp->info.name);
241                 if (entry->ksym_hbp->info.type == HW_BREAKPOINT_WRITE)
242                         ret = trace_seq_puts(s, "-w-\n");
243                 else if (entry->ksym_hbp->info.type == HW_BREAKPOINT_RW)
244                         ret = trace_seq_puts(s, "rw-\n");
245                 WARN_ON_ONCE(!ret);
246         }
247
248         cnt = simple_read_from_buffer(ubuf, count, ppos, s->buffer, s->len);
249
250         mutex_unlock(&ksym_tracer_mutex);
251
252         kfree(s);
253
254         return cnt;
255 }
256
257 static ssize_t ksym_trace_filter_write(struct file *file,
258                                         const char __user *buffer,
259                                                 size_t count, loff_t *ppos)
260 {
261         struct trace_ksym *entry;
262         struct hlist_node *node;
263         char *input_string, *ksymname = NULL;
264         unsigned long ksym_addr = 0;
265         int ret, op, changed = 0;
266
267         input_string = kzalloc(count + 1, GFP_KERNEL);
268         if (!input_string)
269                 return -ENOMEM;
270
271         if (copy_from_user(input_string, buffer, count)) {
272                 kfree(input_string);
273                 return -EFAULT;
274         }
275         input_string[count] = '\0';
276
277         ret = op = parse_ksym_trace_str(input_string, &ksymname, &ksym_addr);
278         if (ret < 0) {
279                 kfree(input_string);
280                 return ret;
281         }
282
283         mutex_lock(&ksym_tracer_mutex);
284
285         ret = -EINVAL;
286         hlist_for_each_entry(entry, node, &ksym_filter_head, ksym_hlist) {
287                 if (entry->ksym_addr == ksym_addr) {
288                         /* Check for malformed request: (6) */
289                         if (entry->ksym_hbp->info.type != op)
290                                 changed = 1;
291                         else
292                                 goto err_ret;
293                         break;
294                 }
295         }
296         if (changed) {
297                 unregister_kernel_hw_breakpoint(entry->ksym_hbp);
298                 entry->ksym_hbp->info.type = op;
299                 if (op > 0) {
300                         ret = register_kernel_hw_breakpoint(entry->ksym_hbp);
301                         if (ret == 0) {
302                                 ret = count;
303                                 goto unlock_ret_path;
304                         }
305                 }
306                 ksym_filter_entry_count--;
307                 hlist_del_rcu(&(entry->ksym_hlist));
308                 synchronize_rcu();
309                 kfree(entry->ksym_hbp);
310                 kfree(entry);
311                 ret = count;
312                 goto err_ret;
313         } else {
314                 /* Check for malformed request: (4) */
315                 if (op == 0)
316                         goto err_ret;
317                 ret = process_new_ksym_entry(ksymname, op, ksym_addr);
318                 if (ret)
319                         goto err_ret;
320         }
321         ret = count;
322         goto unlock_ret_path;
323
324 err_ret:
325         kfree(input_string);
326
327 unlock_ret_path:
328         mutex_unlock(&ksym_tracer_mutex);
329         return ret;
330 }
331
332 static const struct file_operations ksym_tracing_fops = {
333         .open           = tracing_open_generic,
334         .read           = ksym_trace_filter_read,
335         .write          = ksym_trace_filter_write,
336 };
337
338 static void ksym_trace_reset(struct trace_array *tr)
339 {
340         struct trace_ksym *entry;
341         struct hlist_node *node, *node1;
342
343         ksym_tracing_enabled = 0;
344
345         mutex_lock(&ksym_tracer_mutex);
346         hlist_for_each_entry_safe(entry, node, node1, &ksym_filter_head,
347                                                                 ksym_hlist) {
348                 unregister_kernel_hw_breakpoint(entry->ksym_hbp);
349                 ksym_filter_entry_count--;
350                 hlist_del_rcu(&(entry->ksym_hlist));
351                 synchronize_rcu();
352                 /* Free the 'input_string' only if reset
353                  * after startup self-test
354                  */
355 #ifdef CONFIG_FTRACE_SELFTEST
356                 if (strncmp(entry->ksym_hbp->info.name, KSYM_SELFTEST_ENTRY,
357                                         strlen(KSYM_SELFTEST_ENTRY)) != 0)
358 #endif /* CONFIG_FTRACE_SELFTEST*/
359                         kfree(entry->ksym_hbp->info.name);
360                 kfree(entry->ksym_hbp);
361                 kfree(entry);
362         }
363         mutex_unlock(&ksym_tracer_mutex);
364 }
365
366 static int ksym_trace_init(struct trace_array *tr)
367 {
368         int cpu, ret = 0;
369
370         for_each_online_cpu(cpu)
371                 tracing_reset(tr, cpu);
372         ksym_tracing_enabled = 1;
373         ksym_trace_array = tr;
374
375         return ret;
376 }
377
378 static void ksym_trace_print_header(struct seq_file *m)
379 {
380
381         seq_puts(m,
382                  "#       TASK-PID      CPU#      Symbol         Type    "
383                  "Function         \n");
384         seq_puts(m,
385                  "#          |           |          |              |         "
386                  "|            \n");
387 }
388
389 static enum print_line_t ksym_trace_output(struct trace_iterator *iter)
390 {
391         struct trace_entry *entry = iter->ent;
392         struct trace_seq *s = &iter->seq;
393         struct ksym_trace_entry *field;
394         char str[KSYM_SYMBOL_LEN];
395         int ret;
396
397         if (entry->type != TRACE_KSYM)
398                 return TRACE_TYPE_UNHANDLED;
399
400         trace_assign_type(field, entry);
401
402         ret = trace_seq_printf(s, "%-15s %-5d %-3d %-20s ", field->cmd,
403                                 entry->pid, iter->cpu, field->ksym_name);
404         if (!ret)
405                 return TRACE_TYPE_PARTIAL_LINE;
406
407         switch (field->type) {
408         case HW_BREAKPOINT_WRITE:
409                 ret = trace_seq_printf(s, " W  ");
410                 break;
411         case HW_BREAKPOINT_RW:
412                 ret = trace_seq_printf(s, " RW ");
413                 break;
414         default:
415                 return TRACE_TYPE_PARTIAL_LINE;
416         }
417
418         if (!ret)
419                 return TRACE_TYPE_PARTIAL_LINE;
420
421         sprint_symbol(str, field->ip);
422         ret = trace_seq_printf(s, "%-20s\n", str);
423         if (!ret)
424                 return TRACE_TYPE_PARTIAL_LINE;
425
426         return TRACE_TYPE_HANDLED;
427 }
428
429 struct tracer ksym_tracer __read_mostly =
430 {
431         .name           = "ksym_tracer",
432         .init           = ksym_trace_init,
433         .reset          = ksym_trace_reset,
434 #ifdef CONFIG_FTRACE_SELFTEST
435         .selftest       = trace_selftest_startup_ksym,
436 #endif
437         .print_header   = ksym_trace_print_header,
438         .print_line     = ksym_trace_output
439 };
440
441 __init static int init_ksym_trace(void)
442 {
443         struct dentry *d_tracer;
444         struct dentry *entry;
445
446         d_tracer = tracing_init_dentry();
447         ksym_filter_entry_count = 0;
448
449         entry = debugfs_create_file("ksym_trace_filter", 0644, d_tracer,
450                                     NULL, &ksym_tracing_fops);
451         if (!entry)
452                 pr_warning("Could not create debugfs "
453                            "'ksym_trace_filter' file\n");
454
455         return register_tracer(&ksym_tracer);
456 }
457 device_initcall(init_ksym_trace);
458
459
460 #ifdef CONFIG_PROFILE_KSYM_TRACER
461 static int ksym_tracer_stat_headers(struct seq_file *m)
462 {
463         seq_printf(m, "   Access type    ");
464         seq_printf(m, "            Symbol                     Counter     \n");
465         return 0;
466 }
467
468 static int ksym_tracer_stat_show(struct seq_file *m, void *v)
469 {
470         struct hlist_node *stat = v;
471         struct trace_ksym *entry;
472         int access_type = 0;
473         char fn_name[KSYM_NAME_LEN];
474
475         entry = hlist_entry(stat, struct trace_ksym, ksym_hlist);
476
477         if (entry->ksym_hbp)
478                 access_type = entry->ksym_hbp->info.type;
479
480         switch (access_type) {
481         case HW_BREAKPOINT_WRITE:
482                 seq_printf(m, "     W     ");
483                 break;
484         case HW_BREAKPOINT_RW:
485                 seq_printf(m, "     RW    ");
486                 break;
487         default:
488                 seq_printf(m, "     NA    ");
489         }
490
491         if (lookup_symbol_name(entry->ksym_addr, fn_name) >= 0)
492                 seq_printf(m, "               %s                 ", fn_name);
493         else
494                 seq_printf(m, "               <NA>                ");
495
496         seq_printf(m, "%15lu\n", entry->counter);
497         return 0;
498 }
499
500 static void *ksym_tracer_stat_start(struct tracer_stat *trace)
501 {
502         return &(ksym_filter_head.first);
503 }
504
505 static void *
506 ksym_tracer_stat_next(void *v, int idx)
507 {
508         struct hlist_node *stat = v;
509
510         return stat->next;
511 }
512
513 static struct tracer_stat ksym_tracer_stats = {
514         .name = "ksym_tracer",
515         .stat_start = ksym_tracer_stat_start,
516         .stat_next = ksym_tracer_stat_next,
517         .stat_headers = ksym_tracer_stat_headers,
518         .stat_show = ksym_tracer_stat_show
519 };
520
521 __init static int ksym_tracer_stat_init(void)
522 {
523         int ret;
524
525         ret = register_stat_tracer(&ksym_tracer_stats);
526         if (ret) {
527                 printk(KERN_WARNING "Warning: could not register "
528                                     "ksym tracer stats\n");
529                 return 1;
530         }
531
532         return 0;
533 }
534 fs_initcall(ksym_tracer_stat_init);
535 #endif /* CONFIG_PROFILE_KSYM_TRACER */