1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
|
/* -*- linux-c -*-
* symbols.c - stp symbol and module functions
*
* Copyright (C) Red Hat Inc, 2006-2008
*
* This file is part of systemtap, and is free software. You can
* redistribute it and/or modify it under the terms of the GNU General
* Public License (GPL); either version 2, or (at your option) any
* later version.
*
* The u32_swap(), generic_swap(), and sort() functions were adapted from
* lib/sort.c of kernel 2.6.22-rc5. It was written by Matt Mackall.
*/
#ifndef _STP_SYMBOLS_C_
#define _STP_SYMBOLS_C_
#include "../sym.h"
static char *_stp_symbol_data = NULL;
static int _stp_symbol_state = 0;
static char *_stp_module_data = NULL;
static int _stp_module_state = 0;
/* these are all the symbol types we are interested in */
static int _stp_sym_type_ok(int type)
{
/* we only care about function symbols, which are in the text section */
if (type == 'T' || type == 't')
return 1;
return 0;
}
/* From a module struct, scan the symtab and figure out how much space */
/* we need to store all the parts we are interested in */
static unsigned _stp_get_sym_sizes(struct module *m, unsigned *dsize)
{
unsigned int i;
unsigned num = 0, datasize = 0;
for (i = 0; i < m->num_symtab; i++) {
char *str = (char *)(m->strtab + m->symtab[i].st_name);
if (*str != '\0' && _stp_sym_type_ok(m->symtab[i].st_info)) {
datasize += strlen(str) + 1;
num++;
}
}
*dsize = datasize;
return num;
}
/* allocate space for a module, sections, and symbols */
static struct _stp_module *_stp_alloc_module(unsigned sectsize, unsigned num, unsigned datasize)
{
struct _stp_module *mod = (struct _stp_module *)_stp_kzalloc(sizeof(struct _stp_module));
if (mod == NULL)
goto bad;
mod->sections = (struct _stp_symbol *)_stp_kmalloc(sectsize);
if (mod->sections == NULL)
goto bad;
mod->symbols = (struct _stp_symbol *)_stp_kmalloc(num * sizeof(struct _stp_symbol));
if (mod->symbols == NULL) {
mod->symbols = (struct _stp_symbol *)_stp_vmalloc(num * sizeof(struct _stp_symbol));
if (mod->symbols == NULL)
goto bad;
mod->allocated.symbols = 1;
}
mod->symbol_data = _stp_kmalloc(datasize);
if (mod->symbol_data == NULL) {
mod->symbol_data = _stp_vmalloc(datasize);
if (mod->symbol_data == NULL)
goto bad;
mod->allocated.symbol_data = 1;
}
mod->num_symbols = num;
return mod;
bad:
if (mod) {
if (mod->sections)
_stp_kfree(mod->sections);
if (mod->symbols) {
if (mod->allocated.symbols)
_stp_vfree(mod->symbols);
else
_stp_kfree(mod->symbols);
}
_stp_kfree(mod);
}
return NULL;
}
static void _stp_free_module(struct _stp_module *mod)
{
/* The module write lock is held. Any prior readers of this */
/* module's data will have read locks and need to finish before */
/* the memory is freed. */
write_lock(&mod->lock);
write_unlock(&mod->lock); /* there will be no more readers */
/* Free symbol memory */
/* If symbol_data wasn't allocated, then symbols weren't either. */
if (mod->symbol_data) {
if (mod->symbols) {
if (mod->allocated.symbols)
_stp_vfree(mod->symbols);
else
_stp_kfree(mod->symbols);
}
if (mod->allocated.symbol_data)
_stp_vfree(mod->symbol_data);
else
_stp_kfree(mod->symbol_data);
}
if (mod->unwind_data) {
if (mod->allocated.unwind_data)
_stp_vfree(mod->unwind_data);
else
_stp_kfree(mod->unwind_data);
}
if (mod->unwind_hdr) {
if (mod->allocated.unwind_hdr)
_stp_vfree(mod->unwind_hdr);
else
_stp_kfree(mod->unwind_hdr);
}
if (mod->sections)
_stp_kfree(mod->sections);
/* free module memory */
_stp_kfree(mod);
}
/* Delete a module and free its memory. */
/* The module lock should already be held before calling this. */
static void _stp_del_module(struct _stp_module *mod)
{
int i, num;
dbug_sym(1, "deleting module %s\n", mod->name);
/* signal relocation code to clear its cache */
_stp_module_relocate((char *)-1, NULL, 0);
/* remove module from the arrays */
for (num = 0; num < _stp_num_modules; num++) {
if (_stp_modules[num] == mod)
break;
}
if (num >= _stp_num_modules)
return;
for (i = num; i < _stp_num_modules - 1; i++)
_stp_modules[i] = _stp_modules[i + 1];
for (num = 0; num < _stp_num_modules; num++) {
if (_stp_modules_by_addr[num] == mod)
break;
}
for (i = num; i < _stp_num_modules - 1; i++)
_stp_modules_by_addr[i] = _stp_modules_by_addr[i + 1];
_stp_num_modules--;
_stp_free_module(mod);
}
static void _stp_free_modules(void)
{
int i;
/* This only happens when the systemtap module unloads */
/* so there is no need for locks. */
for (i = _stp_num_modules - 1; i >= 0; i--)
_stp_del_module(_stp_modules[i]);
}
static unsigned long _stp_kallsyms_lookup_name(const char *name);
static void _stp_create_unwind_hdr(struct _stp_module *m);
extern unsigned _stp_num_kernel_symbols;
extern struct _stp_symbol _stp_kernel_symbols[];
/* initialize the kernel symbols */
static int _stp_init_kernel_symbols(void)
{
_stp_modules[0] = (struct _stp_module *)_stp_kzalloc(sizeof(struct _stp_module));
if (_stp_modules[0] == NULL) {
errk("cannot allocate memory\n");
return -EFAULT;
}
_stp_modules[0]->symbols = _stp_kernel_symbols;
_stp_modules[0]->num_symbols = _stp_num_kernel_symbols;
rwlock_init(&_stp_modules[0]->lock);
_stp_num_modules = 1;
/* Note: this mapping is used by kernel/_stext pseudo-relocations. */
_stp_modules[0]->text = _stp_kallsyms_lookup_name("_stext");
_stp_modules[0]->data = _stp_kallsyms_lookup_name("_etext");
_stp_modules[0]->text_size = _stp_modules[0]->data - _stp_modules[0]->text;
_stp_modules_by_addr[0] = _stp_modules[0];
return 0;
}
static void _stp_do_unwind_data(const char __user *buf, size_t count)
{
u64 unwind_len;
unsigned long flags;
char name[STP_MODULE_NAME_LEN];
int i;
struct _stp_module *m;
dbug_unwind(1, "got unwind data, count=%d\n", count);
if (count < STP_MODULE_NAME_LEN + sizeof(u64)) {
dbug_unwind(1, "unwind message too short\n");
return;
}
if (strncpy_from_user(name, buf, STP_MODULE_NAME_LEN) < 0) {
errk("userspace copy failed\n");
return;
}
dbug_unwind(1, "name=%s\n", name);
if (!strcmp(name,"*")) {
/* OK, all initial unwind data received. Ready to go. */
_stp_ctl_send(STP_TRANSPORT, NULL, 0);
return;
}
count -= STP_MODULE_NAME_LEN;
buf += STP_MODULE_NAME_LEN;
if (get_user(unwind_len, (u64 __user *)buf)) {
errk("userspace copy failed\n");
return;
}
count -= sizeof(u64);
buf += sizeof(u64);
if (count != unwind_len) {
dbug_unwind(1, "count=%d unwind_len=%d\n", (int)count, (int)unwind_len);
return;
}
STP_RLOCK_MODULES;
for (i = 0; i < _stp_num_modules; i++) {
if (strcmp(name, _stp_modules[i]->name) == 0)
break;
}
if (unlikely(i == _stp_num_modules)) {
dbug_unwind(1, "module %s not found!\n", name);
STP_RUNLOCK_MODULES;
return;
}
m = _stp_modules[i];
write_lock(&m->lock);
STP_RUNLOCK_MODULES;
/* allocate space for unwind data */
m->unwind_data = _stp_kmalloc(count);
if (unlikely(m->unwind_data == NULL)) {
m->unwind_data = _stp_vmalloc(count);
if (m->unwind_data == NULL) {
errk("kmalloc failed\n");
goto done;
}
m->allocated.unwind_data = 1;
}
if (unlikely(copy_from_user(m->unwind_data, buf, count))) {
errk("userspace copy failed\n");
if (m->unwind_data) {
if (m->allocated.unwind_data)
_stp_vfree(m->unwind_data);
else
_stp_kfree(m->unwind_data);
m->unwind_data = NULL;
}
goto done;
}
m->unwind_data_len = count;
_stp_create_unwind_hdr(m);
done:
write_unlock(&m->lock);
}
static int _stp_compare_addr(const void *p1, const void *p2)
{
struct _stp_symbol *s1 = (struct _stp_symbol *)p1;
struct _stp_symbol *s2 = (struct _stp_symbol *)p2;
if (s1->addr == s2->addr)
return 0;
if (s1->addr < s2->addr)
return -1;
return 1;
}
static void _stp_swap_symbol(void *x, void *y, int size)
{
struct _stp_symbol *a = (struct _stp_symbol *)x;
struct _stp_symbol *b = (struct _stp_symbol *)y;
unsigned long addr = a->addr;
const char *symbol = a->symbol;
a->addr = b->addr;
a->symbol = b->symbol;
b->addr = addr;
b->symbol = symbol;
}
static void u32_swap(void *a, void *b, int size)
{
u32 t = *(u32 *)a;
*(u32 *)a = *(u32 *)b;
*(u32 *)b = t;
}
static void generic_swap(void *a, void *b, int size)
{
do {
char t = *(char *)a;
*(char *)a++ = *(char *)b;
*(char *)b++ = t;
} while (--size > 0);
}
/**
* sort - sort an array of elements
* @base: pointer to data to sort
* @num: number of elements
* @size: size of each element
* @cmp: pointer to comparison function
* @swap: pointer to swap function or NULL
*
* This function does a heapsort on the given array. You may provide a
* swap function optimized to your element type.
*
* Sorting time is O(n log n) both on average and worst-case. While
* qsort is about 20% faster on average, it suffers from exploitable
* O(n*n) worst-case behavior and extra memory requirements that make
* it less suitable for kernel use.
*/
void _stp_sort(void *base, size_t num, size_t size,
int (*cmp) (const void *, const void *), void (*swap) (void *, void *, int size))
{
/* pre-scale counters for performance */
int i = (num / 2 - 1) * size, n = num * size, c, r;
if (!swap)
swap = (size == 4 ? u32_swap : generic_swap);
/* heapify */
for (; i >= 0; i -= size) {
for (r = i; r * 2 + size < n; r = c) {
c = r * 2 + size;
if (c < n - size && cmp(base + c, base + c + size) < 0)
c += size;
if (cmp(base + r, base + c) >= 0)
break;
swap(base + r, base + c, size);
}
}
/* sort */
for (i = n - size; i >= 0; i -= size) {
swap(base, base + i, size);
for (r = 0; r * 2 + size < i; r = c) {
c = r * 2 + size;
if (c < i - size && cmp(base + c, base + c + size) < 0)
c += size;
if (cmp(base + r, base + c) >= 0)
break;
swap(base + r, base + c, size);
}
}
}
/* filter out section names we don't care about */
static int _stp_section_is_interesting(const char *name)
{
int ret = 1;
if (!strncmp("__", name, 2)
|| !strncmp(".note", name, 5)
|| !strncmp(".gnu", name, 4)
|| !strncmp(".mod", name, 4))
ret = 0;
return ret;
}
/* Create a new _stp_module and load the symbols */
static struct _stp_module *_stp_load_module_symbols(struct module *mod)
{
int i, num, overflow = 0;
struct module_sect_attrs *sa;
unsigned sect_size = 0, sect_num = 0, sym_size, sym_num;
struct _stp_module *sm;
char *dataptr, *endptr;
sa = mod->sect_attrs;
/* calculate how much space to allocate for section strings */
for (i = 0; i < sa->nsections; i++) {
if (_stp_section_is_interesting(sa->attrs[i].name)) {
sect_num++;
sect_size += strlen(sa->attrs[i].name) + 1;
dbug_sym(2, "\t%s\t%lx\n", sa->attrs[i].name, sa->attrs[i].address);
}
}
sect_size += sect_num * sizeof(struct _stp_symbol);
/* and how much space for symbols */
sym_num = _stp_get_sym_sizes(mod, &sym_size);
sm = _stp_alloc_module(sect_size, sym_num, sym_size);
if (!sm) {
errk("failed to allocate memory for module.\n");
return NULL;
}
strlcpy(sm->name, mod->name, STP_MODULE_NAME_LEN);
sm->module = (unsigned long)mod;
sm->text = (unsigned long)mod->module_core;
sm->text_size = mod->core_text_size;
sm->data = 0; /* fixme */
sm->num_sections = sect_num;
rwlock_init(&sm->lock);
/* copy in section data */
dataptr = (char *)((long)sm->sections + sect_num * sizeof(struct _stp_symbol));
endptr = (char *)((long)sm->sections + sect_size);
num = 0;
for (i = 0; i < sa->nsections; i++) {
size_t len, maxlen;
if (_stp_section_is_interesting(sa->attrs[i].name)) {
sm->sections[num].addr = sa->attrs[i].address;
sm->sections[num].symbol = dataptr;
maxlen = (size_t) (endptr - dataptr);
len = strlcpy(dataptr, sa->attrs[i].name, maxlen);
if (unlikely(len >= maxlen)) {
_dbug("dataptr=%lx endptr=%lx len=%d maxlen=%d\n", dataptr, endptr, len, maxlen);
overflow = 1;
}
dataptr += len + 1;
num++;
}
}
if (unlikely(overflow)) {
errk("Section names truncated!!! Should never happen!!\n");
*endptr = 0;
overflow = 0;
}
/* now copy all the symbols we are interested in */
dataptr = sm->symbol_data;
endptr = dataptr + sym_size - 1;
num = 0;
for (i = 0; i < mod->num_symtab; i++) {
char *str = (char *)(mod->strtab + mod->symtab[i].st_name);
if (*str != '\0' && _stp_sym_type_ok(mod->symtab[i].st_info)) {
sm->symbols[num].symbol = dataptr;
sm->symbols[num].addr = mod->symtab[i].st_value;
while (*str && (dataptr < endptr))
*dataptr++ = *str++;
if (unlikely(*str))
overflow = 1;
*dataptr++ = 0;
num++;
}
}
if (unlikely(overflow))
errk("Symbol names truncated!!! Should never happen!!\n");
/* sort symbols by address */
_stp_sort(sm->symbols, num, sizeof(struct _stp_symbol), _stp_compare_addr, _stp_swap_symbol);
return sm;
}
/* Remove any old module info from our database. */
static void _stp_module_exists_delete(struct _stp_module *mod)
{
int i, num;
/* remove any old modules with the same name */
for (num = 1; num < _stp_num_modules; num++) {
if (strcmp(_stp_modules[num]->name, mod->name) == 0) {
dbug_sym(1, "found existing module with name %s. Deleting.\n", mod->name);
_stp_del_module(_stp_modules[num]);
break;
}
}
/* remove modules with overlapping addresses */
for (num = 1; num < _stp_num_modules; num++) {
if (mod->text + mod->text_size < _stp_modules_by_addr[num]->text)
continue;
if (mod->text < _stp_modules_by_addr[num]->text + _stp_modules_by_addr[num]->text_size) {
dbug_sym(1, "New module %s overlaps with old module %s. Deleting old.\n",
mod->name, _stp_modules_by_addr[num]->name);
_stp_del_module(_stp_modules_by_addr[num]);
}
}
}
static void _stp_ins_module(struct module *mod)
{
int i, num, res;
unsigned long flags;
struct _stp_module *m;
dbug_sym(1, "insert %s\n", mod->name);
m = _stp_load_module_symbols(mod);
if (m == NULL)
return;
STP_WLOCK_MODULES;
_stp_module_exists_delete(m);
/* check for overflow */
if (_stp_num_modules == STP_MAX_MODULES) {
errk("Exceeded the limit of %d modules\n", STP_MAX_MODULES);
goto done;
}
/* insert alphabetically in _stp_modules[] */
for (num = 1; num < _stp_num_modules; num++)
if (strcmp(_stp_modules[num]->name, m->name) > 0)
break;
for (i = _stp_num_modules; i > num; i--)
_stp_modules[i] = _stp_modules[i - 1];
_stp_modules[num] = m;
/* insert by text address in _stp_modules_by_addr[] */
for (num = 1; num < _stp_num_modules; num++)
if (m->text < _stp_modules_by_addr[num]->text)
break;
for (i = _stp_num_modules; i > num; i--)
_stp_modules_by_addr[i] = _stp_modules_by_addr[i - 1];
_stp_modules_by_addr[num] = m;
_stp_num_modules++;
done:
STP_WUNLOCK_MODULES;
return;
}
static int _stp_module_load_notify(struct notifier_block *self, unsigned long val, void *data)
{
struct module *mod = (struct module *)data;
struct _stp_module rmod;
switch (val) {
case MODULE_STATE_COMING:
dbug_sym(1, "module %s load notify\n", mod->name);
_stp_ins_module(mod);
break;
default:
errk("module loaded? val=%ld\n", val);
}
return 0;
}
static struct notifier_block _stp_module_load_nb = {
.notifier_call = _stp_module_load_notify,
};
#include <linux/seq_file.h>
extern unsigned long _stp_modules_op; /* from stap */
static int _stp_init_modules(void)
{
loff_t pos = 0;
void *res;
struct module *mod;
const struct seq_operations *modules_op = (const struct seq_operations *)_stp_modules_op;
/* Use the seq_file interface to safely get a list of installed modules */
res = modules_op->start(NULL, &pos);
while (res) {
mod = list_entry(res, struct module, list);
_stp_ins_module(mod);
res = modules_op->next(NULL, res, &pos);
}
if (register_module_notifier(&_stp_module_load_nb))
errk("failed to load module notifier\n");
/* unlocks the list */
modules_op->stop(NULL, NULL);
#ifndef CONFIG_FRAME_POINTER
/* now that we have all the modules, ask for their unwind info */
{
unsigned long flags;
int i, left = STP_CTL_BUFFER_SIZE;
char buf[STP_CTL_BUFFER_SIZE];
char *ptr = buf;
*ptr = 0;
STP_RLOCK_MODULES;
/* Loop through modules, sending module names packed into */
/* messages of size STP_CTL_BUFFER. */
for (i = 0; i < _stp_num_modules; i++) {
char *name = _stp_modules[i]->name;
int len = strlen(name);
if (len >= left) {
_stp_ctl_send(STP_UNWIND, buf, sizeof(buf) - left);
ptr = buf;
left = STP_CTL_BUFFER_SIZE;
}
strlcpy(ptr, name, left);
ptr += len + 1;
left -= len + 1;
}
STP_RUNLOCK_MODULES;
/* Send terminator. When we get this back from stapio */
/* that means all the unwind info has been sent. */
strlcpy(ptr, "*", left);
left -= 2;
_stp_ctl_send(STP_UNWIND, buf, sizeof(buf) - left);
}
#endif
return 0;
}
#endif /* _STP_SYMBOLS_C_ */
|