Commit | Line | Data |
---|---|---|
99c55f7d AS |
1 | /* Copyright (c) 2011-2014 PLUMgrid, http://plumgrid.com |
2 | * | |
3 | * This program is free software; you can redistribute it and/or | |
4 | * modify it under the terms of version 2 of the GNU General Public | |
5 | * License as published by the Free Software Foundation. | |
6 | */ | |
7 | #ifndef _LINUX_BPF_H | |
8 | #define _LINUX_BPF_H 1 | |
9 | ||
10 | #include <uapi/linux/bpf.h> | |
74451e66 | 11 | |
99c55f7d | 12 | #include <linux/workqueue.h> |
db20fd2b | 13 | #include <linux/file.h> |
b121d1e7 | 14 | #include <linux/percpu.h> |
002245cc | 15 | #include <linux/err.h> |
74451e66 | 16 | #include <linux/rbtree_latch.h> |
d6e1e46f | 17 | #include <linux/numa.h> |
ab3f0063 | 18 | #include <linux/wait.h> |
99c55f7d | 19 | |
cae1927c | 20 | struct bpf_verifier_env; |
3b1efb19 | 21 | struct perf_event; |
174a79ff | 22 | struct bpf_prog; |
99c55f7d | 23 | struct bpf_map; |
4f738adb | 24 | struct sock; |
a26ca7c9 | 25 | struct seq_file; |
e8d2bec0 | 26 | struct btf_type; |
99c55f7d AS |
27 | |
28 | /* map is generic key/value storage optionally accesible by eBPF programs */ | |
29 | struct bpf_map_ops { | |
30 | /* funcs callable from userspace (via syscall) */ | |
1110f3a9 | 31 | int (*map_alloc_check)(union bpf_attr *attr); |
99c55f7d | 32 | struct bpf_map *(*map_alloc)(union bpf_attr *attr); |
61d1b6a4 DB |
33 | void (*map_release)(struct bpf_map *map, struct file *map_file); |
34 | void (*map_free)(struct bpf_map *map); | |
db20fd2b | 35 | int (*map_get_next_key)(struct bpf_map *map, void *key, void *next_key); |
ba6b8de4 | 36 | void (*map_release_uref)(struct bpf_map *map); |
db20fd2b AS |
37 | |
38 | /* funcs callable from userspace and from eBPF programs */ | |
39 | void *(*map_lookup_elem)(struct bpf_map *map, void *key); | |
3274f520 | 40 | int (*map_update_elem)(struct bpf_map *map, void *key, void *value, u64 flags); |
db20fd2b | 41 | int (*map_delete_elem)(struct bpf_map *map, void *key); |
2a36f0b9 WN |
42 | |
43 | /* funcs called by prog_array and perf_event_array map */ | |
d056a788 DB |
44 | void *(*map_fd_get_ptr)(struct bpf_map *map, struct file *map_file, |
45 | int fd); | |
46 | void (*map_fd_put_ptr)(void *ptr); | |
81ed18ab | 47 | u32 (*map_gen_lookup)(struct bpf_map *map, struct bpf_insn *insn_buf); |
14dc6f04 | 48 | u32 (*map_fd_sys_lookup_elem)(void *ptr); |
a26ca7c9 MKL |
49 | void (*map_seq_show_elem)(struct bpf_map *map, void *key, |
50 | struct seq_file *m); | |
e8d2bec0 DB |
51 | int (*map_check_btf)(const struct bpf_map *map, |
52 | const struct btf_type *key_type, | |
53 | const struct btf_type *value_type); | |
99c55f7d AS |
54 | }; |
55 | ||
56 | struct bpf_map { | |
a26ca7c9 | 57 | /* The first two cachelines with read-mostly members of which some |
be95a845 DB |
58 | * are also accessed in fast-path (e.g. ops, max_entries). |
59 | */ | |
60 | const struct bpf_map_ops *ops ____cacheline_aligned; | |
61 | struct bpf_map *inner_map_meta; | |
62 | #ifdef CONFIG_SECURITY | |
63 | void *security; | |
64 | #endif | |
99c55f7d AS |
65 | enum bpf_map_type map_type; |
66 | u32 key_size; | |
67 | u32 value_size; | |
68 | u32 max_entries; | |
6c905981 | 69 | u32 map_flags; |
aaac3ba9 | 70 | u32 pages; |
f3f1c054 | 71 | u32 id; |
96eabe7a | 72 | int numa_node; |
9b2cf328 MKL |
73 | u32 btf_key_type_id; |
74 | u32 btf_value_type_id; | |
a26ca7c9 | 75 | struct btf *btf; |
b2157399 | 76 | bool unpriv_array; |
a26ca7c9 | 77 | /* 55 bytes hole */ |
be95a845 | 78 | |
a26ca7c9 | 79 | /* The 3rd and 4th cacheline with misc members to avoid false sharing |
be95a845 DB |
80 | * particularly with refcounting. |
81 | */ | |
82 | struct user_struct *user ____cacheline_aligned; | |
83 | atomic_t refcnt; | |
c9da161c | 84 | atomic_t usercnt; |
be95a845 | 85 | struct work_struct work; |
067cae47 | 86 | char name[BPF_OBJ_NAME_LEN]; |
99c55f7d AS |
87 | }; |
88 | ||
602144c2 | 89 | struct bpf_offload_dev; |
a3884572 JK |
90 | struct bpf_offloaded_map; |
91 | ||
92 | struct bpf_map_dev_ops { | |
93 | int (*map_get_next_key)(struct bpf_offloaded_map *map, | |
94 | void *key, void *next_key); | |
95 | int (*map_lookup_elem)(struct bpf_offloaded_map *map, | |
96 | void *key, void *value); | |
97 | int (*map_update_elem)(struct bpf_offloaded_map *map, | |
98 | void *key, void *value, u64 flags); | |
99 | int (*map_delete_elem)(struct bpf_offloaded_map *map, void *key); | |
100 | }; | |
101 | ||
102 | struct bpf_offloaded_map { | |
103 | struct bpf_map map; | |
104 | struct net_device *netdev; | |
105 | const struct bpf_map_dev_ops *dev_ops; | |
106 | void *dev_priv; | |
107 | struct list_head offloads; | |
108 | }; | |
109 | ||
110 | static inline struct bpf_offloaded_map *map_to_offmap(struct bpf_map *map) | |
111 | { | |
112 | return container_of(map, struct bpf_offloaded_map, map); | |
113 | } | |
114 | ||
0cd3cbed JK |
115 | static inline bool bpf_map_offload_neutral(const struct bpf_map *map) |
116 | { | |
117 | return map->map_type == BPF_MAP_TYPE_PERF_EVENT_ARRAY; | |
118 | } | |
119 | ||
a26ca7c9 MKL |
120 | static inline bool bpf_map_support_seq_show(const struct bpf_map *map) |
121 | { | |
e8d2bec0 | 122 | return map->btf && map->ops->map_seq_show_elem; |
a26ca7c9 MKL |
123 | } |
124 | ||
e8d2bec0 DB |
125 | int map_check_no_btf(const struct bpf_map *map, |
126 | const struct btf_type *key_type, | |
127 | const struct btf_type *value_type); | |
128 | ||
a3884572 JK |
129 | extern const struct bpf_map_ops bpf_map_offload_ops; |
130 | ||
17a52670 AS |
131 | /* function argument constraints */ |
132 | enum bpf_arg_type { | |
80f1d68c | 133 | ARG_DONTCARE = 0, /* unused argument in helper function */ |
17a52670 AS |
134 | |
135 | /* the following constraints used to prototype | |
136 | * bpf_map_lookup/update/delete_elem() functions | |
137 | */ | |
138 | ARG_CONST_MAP_PTR, /* const argument used as pointer to bpf_map */ | |
139 | ARG_PTR_TO_MAP_KEY, /* pointer to stack used as map key */ | |
140 | ARG_PTR_TO_MAP_VALUE, /* pointer to stack used as map value */ | |
141 | ||
142 | /* the following constraints used to prototype bpf_memcmp() and other | |
143 | * functions that access data on eBPF program stack | |
144 | */ | |
39f19ebb | 145 | ARG_PTR_TO_MEM, /* pointer to valid memory (stack, packet, map value) */ |
db1ac496 | 146 | ARG_PTR_TO_MEM_OR_NULL, /* pointer to valid memory or NULL */ |
39f19ebb AS |
147 | ARG_PTR_TO_UNINIT_MEM, /* pointer to memory does not need to be initialized, |
148 | * helper function must fill all bytes or clear | |
149 | * them in error case. | |
435faee1 DB |
150 | */ |
151 | ||
39f19ebb AS |
152 | ARG_CONST_SIZE, /* number of bytes accessed from memory */ |
153 | ARG_CONST_SIZE_OR_ZERO, /* number of bytes accessed from memory or 0 */ | |
80f1d68c | 154 | |
608cd71a | 155 | ARG_PTR_TO_CTX, /* pointer to context */ |
80f1d68c | 156 | ARG_ANYTHING, /* any (initialized) argument is ok */ |
c64b7983 | 157 | ARG_PTR_TO_SOCKET, /* pointer to bpf_sock */ |
17a52670 AS |
158 | }; |
159 | ||
160 | /* type of values returned from helper functions */ | |
161 | enum bpf_return_type { | |
162 | RET_INTEGER, /* function returns integer */ | |
163 | RET_VOID, /* function doesn't return anything */ | |
3e6a4b3e | 164 | RET_PTR_TO_MAP_VALUE, /* returns a pointer to map elem value */ |
17a52670 | 165 | RET_PTR_TO_MAP_VALUE_OR_NULL, /* returns a pointer to map elem value or NULL */ |
c64b7983 | 166 | RET_PTR_TO_SOCKET_OR_NULL, /* returns a pointer to a socket or NULL */ |
17a52670 AS |
167 | }; |
168 | ||
09756af4 AS |
169 | /* eBPF function prototype used by verifier to allow BPF_CALLs from eBPF programs |
170 | * to in-kernel helper functions and for adjusting imm32 field in BPF_CALL | |
171 | * instructions after verifying | |
172 | */ | |
173 | struct bpf_func_proto { | |
174 | u64 (*func)(u64 r1, u64 r2, u64 r3, u64 r4, u64 r5); | |
175 | bool gpl_only; | |
36bbef52 | 176 | bool pkt_access; |
17a52670 AS |
177 | enum bpf_return_type ret_type; |
178 | enum bpf_arg_type arg1_type; | |
179 | enum bpf_arg_type arg2_type; | |
180 | enum bpf_arg_type arg3_type; | |
181 | enum bpf_arg_type arg4_type; | |
182 | enum bpf_arg_type arg5_type; | |
183 | }; | |
184 | ||
185 | /* bpf_context is intentionally undefined structure. Pointer to bpf_context is | |
186 | * the first argument to eBPF programs. | |
187 | * For socket filters: 'struct bpf_context *' == 'struct sk_buff *' | |
188 | */ | |
189 | struct bpf_context; | |
190 | ||
191 | enum bpf_access_type { | |
192 | BPF_READ = 1, | |
193 | BPF_WRITE = 2 | |
09756af4 AS |
194 | }; |
195 | ||
19de99f7 | 196 | /* types of values stored in eBPF registers */ |
f1174f77 EC |
197 | /* Pointer types represent: |
198 | * pointer | |
199 | * pointer + imm | |
200 | * pointer + (u16) var | |
201 | * pointer + (u16) var + imm | |
202 | * if (range > 0) then [ptr, ptr + range - off) is safe to access | |
203 | * if (id > 0) means that some 'var' was added | |
204 | * if (off > 0) means that 'imm' was added | |
205 | */ | |
19de99f7 AS |
206 | enum bpf_reg_type { |
207 | NOT_INIT = 0, /* nothing was written into register */ | |
f1174f77 | 208 | SCALAR_VALUE, /* reg doesn't contain a valid pointer */ |
19de99f7 AS |
209 | PTR_TO_CTX, /* reg points to bpf_context */ |
210 | CONST_PTR_TO_MAP, /* reg points to struct bpf_map */ | |
211 | PTR_TO_MAP_VALUE, /* reg points to map element value */ | |
212 | PTR_TO_MAP_VALUE_OR_NULL,/* points to map elem value or NULL */ | |
f1174f77 | 213 | PTR_TO_STACK, /* reg == frame_pointer + offset */ |
de8f3a83 | 214 | PTR_TO_PACKET_META, /* skb->data - meta_len */ |
f1174f77 | 215 | PTR_TO_PACKET, /* reg points to skb->data */ |
19de99f7 | 216 | PTR_TO_PACKET_END, /* skb->data + headlen */ |
d58e468b | 217 | PTR_TO_FLOW_KEYS, /* reg points to bpf_flow_keys */ |
c64b7983 JS |
218 | PTR_TO_SOCKET, /* reg points to struct bpf_sock */ |
219 | PTR_TO_SOCKET_OR_NULL, /* reg points to struct bpf_sock or NULL */ | |
19de99f7 AS |
220 | }; |
221 | ||
23994631 YS |
222 | /* The information passed from prog-specific *_is_valid_access |
223 | * back to the verifier. | |
224 | */ | |
225 | struct bpf_insn_access_aux { | |
226 | enum bpf_reg_type reg_type; | |
227 | int ctx_field_size; | |
23994631 YS |
228 | }; |
229 | ||
f96da094 DB |
230 | static inline void |
231 | bpf_ctx_record_field_size(struct bpf_insn_access_aux *aux, u32 size) | |
232 | { | |
233 | aux->ctx_field_size = size; | |
234 | } | |
235 | ||
7de16e3a JK |
236 | struct bpf_prog_ops { |
237 | int (*test_run)(struct bpf_prog *prog, const union bpf_attr *kattr, | |
238 | union bpf_attr __user *uattr); | |
239 | }; | |
240 | ||
09756af4 AS |
241 | struct bpf_verifier_ops { |
242 | /* return eBPF function prototype for verification */ | |
5e43f899 AI |
243 | const struct bpf_func_proto * |
244 | (*get_func_proto)(enum bpf_func_id func_id, | |
245 | const struct bpf_prog *prog); | |
17a52670 AS |
246 | |
247 | /* return true if 'size' wide access at offset 'off' within bpf_context | |
248 | * with 'type' (read or write) is allowed | |
249 | */ | |
19de99f7 | 250 | bool (*is_valid_access)(int off, int size, enum bpf_access_type type, |
5e43f899 | 251 | const struct bpf_prog *prog, |
23994631 | 252 | struct bpf_insn_access_aux *info); |
36bbef52 DB |
253 | int (*gen_prologue)(struct bpf_insn *insn, bool direct_write, |
254 | const struct bpf_prog *prog); | |
e0cea7ce DB |
255 | int (*gen_ld_abs)(const struct bpf_insn *orig, |
256 | struct bpf_insn *insn_buf); | |
6b8cc1d1 DB |
257 | u32 (*convert_ctx_access)(enum bpf_access_type type, |
258 | const struct bpf_insn *src, | |
259 | struct bpf_insn *dst, | |
f96da094 | 260 | struct bpf_prog *prog, u32 *target_size); |
09756af4 AS |
261 | }; |
262 | ||
cae1927c JK |
263 | struct bpf_prog_offload_ops { |
264 | int (*insn_hook)(struct bpf_verifier_env *env, | |
265 | int insn_idx, int prev_insn_idx); | |
c941ce9c | 266 | int (*finalize)(struct bpf_verifier_env *env); |
cae1927c JK |
267 | }; |
268 | ||
0a9c1991 | 269 | struct bpf_prog_offload { |
ab3f0063 JK |
270 | struct bpf_prog *prog; |
271 | struct net_device *netdev; | |
272 | void *dev_priv; | |
273 | struct list_head offloads; | |
274 | bool dev_state; | |
cae1927c | 275 | const struct bpf_prog_offload_ops *dev_ops; |
fcfb126d JW |
276 | void *jited_image; |
277 | u32 jited_len; | |
ab3f0063 JK |
278 | }; |
279 | ||
8bad74f9 RG |
280 | enum bpf_cgroup_storage_type { |
281 | BPF_CGROUP_STORAGE_SHARED, | |
b741f163 | 282 | BPF_CGROUP_STORAGE_PERCPU, |
8bad74f9 RG |
283 | __BPF_CGROUP_STORAGE_MAX |
284 | }; | |
285 | ||
286 | #define MAX_BPF_CGROUP_STORAGE_TYPE __BPF_CGROUP_STORAGE_MAX | |
287 | ||
09756af4 AS |
288 | struct bpf_prog_aux { |
289 | atomic_t refcnt; | |
24701ece | 290 | u32 used_map_cnt; |
32bbe007 | 291 | u32 max_ctx_offset; |
8726679a | 292 | u32 stack_depth; |
dc4bb0e2 | 293 | u32 id; |
1c2a088a | 294 | u32 func_cnt; |
9a18eedb | 295 | bool offload_requested; |
1c2a088a AS |
296 | struct bpf_prog **func; |
297 | void *jit_data; /* JIT specific data. arch dependent */ | |
74451e66 DB |
298 | struct latch_tree_node ksym_tnode; |
299 | struct list_head ksym_lnode; | |
7de16e3a | 300 | const struct bpf_prog_ops *ops; |
09756af4 | 301 | struct bpf_map **used_maps; |
09756af4 | 302 | struct bpf_prog *prog; |
aaac3ba9 | 303 | struct user_struct *user; |
cb4d2b3f | 304 | u64 load_time; /* ns since boottime */ |
8bad74f9 | 305 | struct bpf_map *cgroup_storage[MAX_BPF_CGROUP_STORAGE_TYPE]; |
067cae47 | 306 | char name[BPF_OBJ_NAME_LEN]; |
afdb09c7 CF |
307 | #ifdef CONFIG_SECURITY |
308 | void *security; | |
309 | #endif | |
0a9c1991 | 310 | struct bpf_prog_offload *offload; |
abf2e7d6 AS |
311 | union { |
312 | struct work_struct work; | |
313 | struct rcu_head rcu; | |
314 | }; | |
09756af4 AS |
315 | }; |
316 | ||
04fd61ab AS |
317 | struct bpf_array { |
318 | struct bpf_map map; | |
319 | u32 elem_size; | |
b2157399 | 320 | u32 index_mask; |
04fd61ab AS |
321 | /* 'ownership' of prog_array is claimed by the first program that |
322 | * is going to use this map or by the first program which FD is stored | |
323 | * in the map to make sure that all callers and callees have the same | |
324 | * prog_type and JITed flag | |
325 | */ | |
326 | enum bpf_prog_type owner_prog_type; | |
327 | bool owner_jited; | |
328 | union { | |
329 | char value[0] __aligned(8); | |
2a36f0b9 | 330 | void *ptrs[0] __aligned(8); |
a10423b8 | 331 | void __percpu *pptrs[0] __aligned(8); |
04fd61ab AS |
332 | }; |
333 | }; | |
3b1efb19 | 334 | |
04fd61ab AS |
335 | #define MAX_TAIL_CALL_CNT 32 |
336 | ||
3b1efb19 DB |
337 | struct bpf_event_entry { |
338 | struct perf_event *event; | |
339 | struct file *perf_file; | |
340 | struct file *map_file; | |
341 | struct rcu_head rcu; | |
342 | }; | |
343 | ||
04fd61ab | 344 | bool bpf_prog_array_compatible(struct bpf_array *array, const struct bpf_prog *fp); |
f1f7714e | 345 | int bpf_prog_calc_tag(struct bpf_prog *fp); |
bd570ff9 | 346 | |
0756ea3e | 347 | const struct bpf_func_proto *bpf_get_trace_printk_proto(void); |
555c8a86 DB |
348 | |
349 | typedef unsigned long (*bpf_ctx_copy_t)(void *dst, const void *src, | |
aa7145c1 | 350 | unsigned long off, unsigned long len); |
c64b7983 JS |
351 | typedef u32 (*bpf_convert_ctx_access_t)(enum bpf_access_type type, |
352 | const struct bpf_insn *src, | |
353 | struct bpf_insn *dst, | |
354 | struct bpf_prog *prog, | |
355 | u32 *target_size); | |
555c8a86 DB |
356 | |
357 | u64 bpf_event_output(struct bpf_map *map, u64 flags, void *meta, u64 meta_size, | |
358 | void *ctx, u64 ctx_size, bpf_ctx_copy_t ctx_copy); | |
04fd61ab | 359 | |
1cf1cae9 AS |
360 | int bpf_prog_test_run_xdp(struct bpf_prog *prog, const union bpf_attr *kattr, |
361 | union bpf_attr __user *uattr); | |
362 | int bpf_prog_test_run_skb(struct bpf_prog *prog, const union bpf_attr *kattr, | |
363 | union bpf_attr __user *uattr); | |
364 | ||
324bda9e AS |
365 | /* an array of programs to be executed under rcu_lock. |
366 | * | |
367 | * Typical usage: | |
368 | * ret = BPF_PROG_RUN_ARRAY(&bpf_prog_array, ctx, BPF_PROG_RUN); | |
369 | * | |
370 | * the structure returned by bpf_prog_array_alloc() should be populated | |
371 | * with program pointers and the last pointer must be NULL. | |
372 | * The user has to keep refcnt on the program and make sure the program | |
373 | * is removed from the array before bpf_prog_put(). | |
374 | * The 'struct bpf_prog_array *' should only be replaced with xchg() | |
375 | * since other cpus are walking the array of pointers in parallel. | |
376 | */ | |
394e40a2 RG |
377 | struct bpf_prog_array_item { |
378 | struct bpf_prog *prog; | |
8bad74f9 | 379 | struct bpf_cgroup_storage *cgroup_storage[MAX_BPF_CGROUP_STORAGE_TYPE]; |
394e40a2 RG |
380 | }; |
381 | ||
324bda9e AS |
382 | struct bpf_prog_array { |
383 | struct rcu_head rcu; | |
394e40a2 | 384 | struct bpf_prog_array_item items[0]; |
324bda9e AS |
385 | }; |
386 | ||
d29ab6e1 | 387 | struct bpf_prog_array *bpf_prog_array_alloc(u32 prog_cnt, gfp_t flags); |
324bda9e | 388 | void bpf_prog_array_free(struct bpf_prog_array __rcu *progs); |
468e2f64 AS |
389 | int bpf_prog_array_length(struct bpf_prog_array __rcu *progs); |
390 | int bpf_prog_array_copy_to_user(struct bpf_prog_array __rcu *progs, | |
391 | __u32 __user *prog_ids, u32 cnt); | |
324bda9e | 392 | |
e87c6bc3 YS |
393 | void bpf_prog_array_delete_safe(struct bpf_prog_array __rcu *progs, |
394 | struct bpf_prog *old_prog); | |
f371b304 | 395 | int bpf_prog_array_copy_info(struct bpf_prog_array __rcu *array, |
3a38bb98 YS |
396 | u32 *prog_ids, u32 request_cnt, |
397 | u32 *prog_cnt); | |
e87c6bc3 YS |
398 | int bpf_prog_array_copy(struct bpf_prog_array __rcu *old_array, |
399 | struct bpf_prog *exclude_prog, | |
400 | struct bpf_prog *include_prog, | |
401 | struct bpf_prog_array **new_array); | |
402 | ||
403 | #define __BPF_PROG_RUN_ARRAY(array, ctx, func, check_non_null) \ | |
324bda9e | 404 | ({ \ |
394e40a2 RG |
405 | struct bpf_prog_array_item *_item; \ |
406 | struct bpf_prog *_prog; \ | |
e87c6bc3 | 407 | struct bpf_prog_array *_array; \ |
324bda9e | 408 | u32 _ret = 1; \ |
6899b32b | 409 | preempt_disable(); \ |
324bda9e | 410 | rcu_read_lock(); \ |
e87c6bc3 YS |
411 | _array = rcu_dereference(array); \ |
412 | if (unlikely(check_non_null && !_array))\ | |
413 | goto _out; \ | |
394e40a2 RG |
414 | _item = &_array->items[0]; \ |
415 | while ((_prog = READ_ONCE(_item->prog))) { \ | |
416 | bpf_cgroup_storage_set(_item->cgroup_storage); \ | |
417 | _ret &= func(_prog, ctx); \ | |
418 | _item++; \ | |
e87c6bc3 YS |
419 | } \ |
420 | _out: \ | |
324bda9e | 421 | rcu_read_unlock(); \ |
6899b32b | 422 | preempt_enable_no_resched(); \ |
324bda9e AS |
423 | _ret; \ |
424 | }) | |
425 | ||
e87c6bc3 YS |
426 | #define BPF_PROG_RUN_ARRAY(array, ctx, func) \ |
427 | __BPF_PROG_RUN_ARRAY(array, ctx, func, false) | |
428 | ||
429 | #define BPF_PROG_RUN_ARRAY_CHECK(array, ctx, func) \ | |
430 | __BPF_PROG_RUN_ARRAY(array, ctx, func, true) | |
431 | ||
89aa0758 | 432 | #ifdef CONFIG_BPF_SYSCALL |
b121d1e7 AS |
433 | DECLARE_PER_CPU(int, bpf_prog_active); |
434 | ||
f66e448c CF |
435 | extern const struct file_operations bpf_map_fops; |
436 | extern const struct file_operations bpf_prog_fops; | |
437 | ||
7de16e3a JK |
438 | #define BPF_PROG_TYPE(_id, _name) \ |
439 | extern const struct bpf_prog_ops _name ## _prog_ops; \ | |
440 | extern const struct bpf_verifier_ops _name ## _verifier_ops; | |
40077e0c JB |
441 | #define BPF_MAP_TYPE(_id, _ops) \ |
442 | extern const struct bpf_map_ops _ops; | |
be9370a7 JB |
443 | #include <linux/bpf_types.h> |
444 | #undef BPF_PROG_TYPE | |
40077e0c | 445 | #undef BPF_MAP_TYPE |
0fc174de | 446 | |
ab3f0063 | 447 | extern const struct bpf_prog_ops bpf_offload_prog_ops; |
4f9218aa JK |
448 | extern const struct bpf_verifier_ops tc_cls_act_analyzer_ops; |
449 | extern const struct bpf_verifier_ops xdp_analyzer_ops; | |
450 | ||
0fc174de | 451 | struct bpf_prog *bpf_prog_get(u32 ufd); |
248f346f | 452 | struct bpf_prog *bpf_prog_get_type_dev(u32 ufd, enum bpf_prog_type type, |
288b3de5 | 453 | bool attach_drv); |
6d67942d | 454 | struct bpf_prog * __must_check bpf_prog_add(struct bpf_prog *prog, int i); |
c540594f | 455 | void bpf_prog_sub(struct bpf_prog *prog, int i); |
6d67942d | 456 | struct bpf_prog * __must_check bpf_prog_inc(struct bpf_prog *prog); |
a6f6df69 | 457 | struct bpf_prog * __must_check bpf_prog_inc_not_zero(struct bpf_prog *prog); |
61e021f3 | 458 | void bpf_prog_put(struct bpf_prog *prog); |
5ccb071e DB |
459 | int __bpf_prog_charge(struct user_struct *user, u32 pages); |
460 | void __bpf_prog_uncharge(struct user_struct *user, u32 pages); | |
61e021f3 | 461 | |
ad8ad79f | 462 | void bpf_prog_free_id(struct bpf_prog *prog, bool do_idr_lock); |
a3884572 | 463 | void bpf_map_free_id(struct bpf_map *map, bool do_idr_lock); |
ad8ad79f | 464 | |
c9da161c | 465 | struct bpf_map *bpf_map_get_with_uref(u32 ufd); |
c2101297 | 466 | struct bpf_map *__bpf_map_get(struct fd f); |
6d67942d | 467 | struct bpf_map * __must_check bpf_map_inc(struct bpf_map *map, bool uref); |
c9da161c | 468 | void bpf_map_put_with_uref(struct bpf_map *map); |
61e021f3 | 469 | void bpf_map_put(struct bpf_map *map); |
6c905981 | 470 | int bpf_map_precharge_memlock(u32 pages); |
0a4c58f5 RG |
471 | int bpf_map_charge_memlock(struct bpf_map *map, u32 pages); |
472 | void bpf_map_uncharge_memlock(struct bpf_map *map, u32 pages); | |
96eabe7a | 473 | void *bpf_map_area_alloc(size_t size, int numa_node); |
d407bd25 | 474 | void bpf_map_area_free(void *base); |
bd475643 | 475 | void bpf_map_init_from_attr(struct bpf_map *map, union bpf_attr *attr); |
61e021f3 | 476 | |
1be7f75d AS |
477 | extern int sysctl_unprivileged_bpf_disabled; |
478 | ||
6e71b04a | 479 | int bpf_map_new_fd(struct bpf_map *map, int flags); |
b2197755 DB |
480 | int bpf_prog_new_fd(struct bpf_prog *prog); |
481 | ||
482 | int bpf_obj_pin_user(u32 ufd, const char __user *pathname); | |
6e71b04a | 483 | int bpf_obj_get_user(const char __user *pathname, int flags); |
b2197755 | 484 | |
15a07b33 AS |
485 | int bpf_percpu_hash_copy(struct bpf_map *map, void *key, void *value); |
486 | int bpf_percpu_array_copy(struct bpf_map *map, void *key, void *value); | |
487 | int bpf_percpu_hash_update(struct bpf_map *map, void *key, void *value, | |
488 | u64 flags); | |
489 | int bpf_percpu_array_update(struct bpf_map *map, void *key, void *value, | |
490 | u64 flags); | |
d056a788 | 491 | |
557c0c6e | 492 | int bpf_stackmap_copy(struct bpf_map *map, void *key, void *value); |
15a07b33 | 493 | |
d056a788 DB |
494 | int bpf_fd_array_map_update_elem(struct bpf_map *map, struct file *map_file, |
495 | void *key, void *value, u64 map_flags); | |
14dc6f04 | 496 | int bpf_fd_array_map_lookup_elem(struct bpf_map *map, void *key, u32 *value); |
bcc6b1b7 MKL |
497 | int bpf_fd_htab_map_update_elem(struct bpf_map *map, struct file *map_file, |
498 | void *key, void *value, u64 map_flags); | |
14dc6f04 | 499 | int bpf_fd_htab_map_lookup_elem(struct bpf_map *map, void *key, u32 *value); |
d056a788 | 500 | |
6e71b04a | 501 | int bpf_get_file_flag(int flags); |
dcab51f1 MKL |
502 | int bpf_check_uarg_tail_zero(void __user *uaddr, size_t expected_size, |
503 | size_t actual_size); | |
6e71b04a | 504 | |
15a07b33 AS |
505 | /* memcpy that is used with 8-byte aligned pointers, power-of-8 size and |
506 | * forced to use 'long' read/writes to try to atomically copy long counters. | |
507 | * Best-effort only. No barriers here, since it _will_ race with concurrent | |
508 | * updates from BPF programs. Called from bpf syscall and mostly used with | |
509 | * size 8 or 16 bytes, so ask compiler to inline it. | |
510 | */ | |
511 | static inline void bpf_long_memcpy(void *dst, const void *src, u32 size) | |
512 | { | |
513 | const long *lsrc = src; | |
514 | long *ldst = dst; | |
515 | ||
516 | size /= sizeof(long); | |
517 | while (size--) | |
518 | *ldst++ = *lsrc++; | |
519 | } | |
520 | ||
61e021f3 | 521 | /* verify correctness of eBPF program */ |
9bac3d6d | 522 | int bpf_check(struct bpf_prog **fp, union bpf_attr *attr); |
1ea47e01 | 523 | void bpf_patch_call_args(struct bpf_insn *insn, u32 stack_depth); |
46f55cff JF |
524 | |
525 | /* Map specifics */ | |
67f29e07 | 526 | struct xdp_buff; |
6d5fc195 | 527 | struct sk_buff; |
67f29e07 JDB |
528 | |
529 | struct bpf_dtab_netdev *__dev_map_lookup_elem(struct bpf_map *map, u32 key); | |
46f55cff JF |
530 | void __dev_map_insert_ctx(struct bpf_map *map, u32 index); |
531 | void __dev_map_flush(struct bpf_map *map); | |
38edddb8 JDB |
532 | int dev_map_enqueue(struct bpf_dtab_netdev *dst, struct xdp_buff *xdp, |
533 | struct net_device *dev_rx); | |
6d5fc195 TM |
534 | int dev_map_generic_redirect(struct bpf_dtab_netdev *dst, struct sk_buff *skb, |
535 | struct bpf_prog *xdp_prog); | |
46f55cff | 536 | |
9c270af3 JDB |
537 | struct bpf_cpu_map_entry *__cpu_map_lookup_elem(struct bpf_map *map, u32 key); |
538 | void __cpu_map_insert_ctx(struct bpf_map *map, u32 index); | |
539 | void __cpu_map_flush(struct bpf_map *map); | |
9c270af3 JDB |
540 | int cpu_map_enqueue(struct bpf_cpu_map_entry *rcpu, struct xdp_buff *xdp, |
541 | struct net_device *dev_rx); | |
542 | ||
96eabe7a MKL |
543 | /* Return map's numa specified by userspace */ |
544 | static inline int bpf_map_attr_numa_node(const union bpf_attr *attr) | |
545 | { | |
546 | return (attr->map_flags & BPF_F_NUMA_NODE) ? | |
547 | attr->numa_node : NUMA_NO_NODE; | |
548 | } | |
549 | ||
040ee692 | 550 | struct bpf_prog *bpf_prog_get_type_path(const char *name, enum bpf_prog_type type); |
5dc4c4b7 | 551 | int array_map_alloc_check(union bpf_attr *attr); |
040ee692 | 552 | |
9c270af3 | 553 | #else /* !CONFIG_BPF_SYSCALL */ |
0fc174de DB |
554 | static inline struct bpf_prog *bpf_prog_get(u32 ufd) |
555 | { | |
556 | return ERR_PTR(-EOPNOTSUPP); | |
557 | } | |
558 | ||
248f346f JK |
559 | static inline struct bpf_prog *bpf_prog_get_type_dev(u32 ufd, |
560 | enum bpf_prog_type type, | |
288b3de5 | 561 | bool attach_drv) |
248f346f JK |
562 | { |
563 | return ERR_PTR(-EOPNOTSUPP); | |
564 | } | |
565 | ||
6d67942d DB |
566 | static inline struct bpf_prog * __must_check bpf_prog_add(struct bpf_prog *prog, |
567 | int i) | |
cc2e0b3f BB |
568 | { |
569 | return ERR_PTR(-EOPNOTSUPP); | |
570 | } | |
113214be | 571 | |
c540594f DB |
572 | static inline void bpf_prog_sub(struct bpf_prog *prog, int i) |
573 | { | |
574 | } | |
575 | ||
0fc174de DB |
576 | static inline void bpf_prog_put(struct bpf_prog *prog) |
577 | { | |
578 | } | |
6d67942d DB |
579 | |
580 | static inline struct bpf_prog * __must_check bpf_prog_inc(struct bpf_prog *prog) | |
aa6a5f3c AS |
581 | { |
582 | return ERR_PTR(-EOPNOTSUPP); | |
583 | } | |
5ccb071e | 584 | |
a6f6df69 JF |
585 | static inline struct bpf_prog *__must_check |
586 | bpf_prog_inc_not_zero(struct bpf_prog *prog) | |
587 | { | |
588 | return ERR_PTR(-EOPNOTSUPP); | |
589 | } | |
590 | ||
5ccb071e DB |
591 | static inline int __bpf_prog_charge(struct user_struct *user, u32 pages) |
592 | { | |
593 | return 0; | |
594 | } | |
595 | ||
596 | static inline void __bpf_prog_uncharge(struct user_struct *user, u32 pages) | |
597 | { | |
598 | } | |
46f55cff | 599 | |
6e71b04a | 600 | static inline int bpf_obj_get_user(const char __user *pathname, int flags) |
98589a09 SL |
601 | { |
602 | return -EOPNOTSUPP; | |
603 | } | |
604 | ||
46f55cff JF |
605 | static inline struct net_device *__dev_map_lookup_elem(struct bpf_map *map, |
606 | u32 key) | |
607 | { | |
608 | return NULL; | |
609 | } | |
610 | ||
611 | static inline void __dev_map_insert_ctx(struct bpf_map *map, u32 index) | |
612 | { | |
613 | } | |
614 | ||
615 | static inline void __dev_map_flush(struct bpf_map *map) | |
616 | { | |
617 | } | |
9c270af3 | 618 | |
67f29e07 JDB |
619 | struct xdp_buff; |
620 | struct bpf_dtab_netdev; | |
621 | ||
622 | static inline | |
38edddb8 JDB |
623 | int dev_map_enqueue(struct bpf_dtab_netdev *dst, struct xdp_buff *xdp, |
624 | struct net_device *dev_rx) | |
67f29e07 JDB |
625 | { |
626 | return 0; | |
627 | } | |
628 | ||
6d5fc195 TM |
629 | struct sk_buff; |
630 | ||
631 | static inline int dev_map_generic_redirect(struct bpf_dtab_netdev *dst, | |
632 | struct sk_buff *skb, | |
633 | struct bpf_prog *xdp_prog) | |
634 | { | |
635 | return 0; | |
636 | } | |
637 | ||
9c270af3 JDB |
638 | static inline |
639 | struct bpf_cpu_map_entry *__cpu_map_lookup_elem(struct bpf_map *map, u32 key) | |
640 | { | |
641 | return NULL; | |
642 | } | |
643 | ||
644 | static inline void __cpu_map_insert_ctx(struct bpf_map *map, u32 index) | |
645 | { | |
646 | } | |
647 | ||
648 | static inline void __cpu_map_flush(struct bpf_map *map) | |
649 | { | |
650 | } | |
651 | ||
9c270af3 JDB |
652 | static inline int cpu_map_enqueue(struct bpf_cpu_map_entry *rcpu, |
653 | struct xdp_buff *xdp, | |
654 | struct net_device *dev_rx) | |
655 | { | |
656 | return 0; | |
657 | } | |
040ee692 AV |
658 | |
659 | static inline struct bpf_prog *bpf_prog_get_type_path(const char *name, | |
660 | enum bpf_prog_type type) | |
661 | { | |
662 | return ERR_PTR(-EOPNOTSUPP); | |
663 | } | |
61e021f3 | 664 | #endif /* CONFIG_BPF_SYSCALL */ |
09756af4 | 665 | |
479321e9 JK |
666 | static inline struct bpf_prog *bpf_prog_get_type(u32 ufd, |
667 | enum bpf_prog_type type) | |
668 | { | |
669 | return bpf_prog_get_type_dev(ufd, type, false); | |
670 | } | |
671 | ||
040ee692 AV |
672 | bool bpf_prog_get_ok(struct bpf_prog *, enum bpf_prog_type *, bool); |
673 | ||
ab3f0063 JK |
674 | int bpf_prog_offload_compile(struct bpf_prog *prog); |
675 | void bpf_prog_offload_destroy(struct bpf_prog *prog); | |
675fc275 JK |
676 | int bpf_prog_offload_info_fill(struct bpf_prog_info *info, |
677 | struct bpf_prog *prog); | |
ab3f0063 | 678 | |
52775b33 JK |
679 | int bpf_map_offload_info_fill(struct bpf_map_info *info, struct bpf_map *map); |
680 | ||
a3884572 JK |
681 | int bpf_map_offload_lookup_elem(struct bpf_map *map, void *key, void *value); |
682 | int bpf_map_offload_update_elem(struct bpf_map *map, | |
683 | void *key, void *value, u64 flags); | |
684 | int bpf_map_offload_delete_elem(struct bpf_map *map, void *key); | |
685 | int bpf_map_offload_get_next_key(struct bpf_map *map, | |
686 | void *key, void *next_key); | |
687 | ||
09728266 | 688 | bool bpf_offload_prog_map_match(struct bpf_prog *prog, struct bpf_map *map); |
a3884572 | 689 | |
602144c2 JK |
690 | struct bpf_offload_dev *bpf_offload_dev_create(void); |
691 | void bpf_offload_dev_destroy(struct bpf_offload_dev *offdev); | |
692 | int bpf_offload_dev_netdev_register(struct bpf_offload_dev *offdev, | |
693 | struct net_device *netdev); | |
694 | void bpf_offload_dev_netdev_unregister(struct bpf_offload_dev *offdev, | |
695 | struct net_device *netdev); | |
fd4f227d | 696 | bool bpf_offload_dev_match(struct bpf_prog *prog, struct net_device *netdev); |
9fd7c555 | 697 | |
ab3f0063 JK |
698 | #if defined(CONFIG_NET) && defined(CONFIG_BPF_SYSCALL) |
699 | int bpf_prog_offload_init(struct bpf_prog *prog, union bpf_attr *attr); | |
700 | ||
0d830032 | 701 | static inline bool bpf_prog_is_dev_bound(const struct bpf_prog_aux *aux) |
ab3f0063 | 702 | { |
9a18eedb | 703 | return aux->offload_requested; |
ab3f0063 | 704 | } |
a3884572 JK |
705 | |
706 | static inline bool bpf_map_is_dev_bound(struct bpf_map *map) | |
707 | { | |
708 | return unlikely(map->ops == &bpf_map_offload_ops); | |
709 | } | |
710 | ||
711 | struct bpf_map *bpf_map_offload_map_alloc(union bpf_attr *attr); | |
712 | void bpf_map_offload_map_free(struct bpf_map *map); | |
ab3f0063 JK |
713 | #else |
714 | static inline int bpf_prog_offload_init(struct bpf_prog *prog, | |
715 | union bpf_attr *attr) | |
716 | { | |
717 | return -EOPNOTSUPP; | |
718 | } | |
719 | ||
720 | static inline bool bpf_prog_is_dev_bound(struct bpf_prog_aux *aux) | |
721 | { | |
722 | return false; | |
723 | } | |
a3884572 JK |
724 | |
725 | static inline bool bpf_map_is_dev_bound(struct bpf_map *map) | |
726 | { | |
727 | return false; | |
728 | } | |
729 | ||
730 | static inline struct bpf_map *bpf_map_offload_map_alloc(union bpf_attr *attr) | |
731 | { | |
732 | return ERR_PTR(-EOPNOTSUPP); | |
733 | } | |
734 | ||
735 | static inline void bpf_map_offload_map_free(struct bpf_map *map) | |
736 | { | |
737 | } | |
ab3f0063 JK |
738 | #endif /* CONFIG_NET && CONFIG_BPF_SYSCALL */ |
739 | ||
5f103c5d | 740 | #if defined(CONFIG_STREAM_PARSER) && defined(CONFIG_BPF_SYSCALL) && defined(CONFIG_INET) |
6bdc9c4c | 741 | struct sock *__sock_map_lookup_elem(struct bpf_map *map, u32 key); |
81110384 | 742 | struct sock *__sock_hash_lookup_elem(struct bpf_map *map, void *key); |
5a67da2a | 743 | int sock_map_prog(struct bpf_map *map, struct bpf_prog *prog, u32 type); |
fdb5c453 SY |
744 | int sockmap_get_from_fd(const union bpf_attr *attr, int type, |
745 | struct bpf_prog *prog); | |
6bdc9c4c JF |
746 | #else |
747 | static inline struct sock *__sock_map_lookup_elem(struct bpf_map *map, u32 key) | |
748 | { | |
749 | return NULL; | |
750 | } | |
464bc0fd | 751 | |
81110384 JF |
752 | static inline struct sock *__sock_hash_lookup_elem(struct bpf_map *map, |
753 | void *key) | |
754 | { | |
755 | return NULL; | |
756 | } | |
757 | ||
5a67da2a JF |
758 | static inline int sock_map_prog(struct bpf_map *map, |
759 | struct bpf_prog *prog, | |
760 | u32 type) | |
464bc0fd JF |
761 | { |
762 | return -EOPNOTSUPP; | |
763 | } | |
fdb5c453 SY |
764 | |
765 | static inline int sockmap_get_from_fd(const union bpf_attr *attr, int type, | |
766 | struct bpf_prog *prog) | |
767 | { | |
768 | return -EINVAL; | |
769 | } | |
6bdc9c4c JF |
770 | #endif |
771 | ||
fbfc504a BT |
772 | #if defined(CONFIG_XDP_SOCKETS) |
773 | struct xdp_sock; | |
774 | struct xdp_sock *__xsk_map_lookup_elem(struct bpf_map *map, u32 key); | |
775 | int __xsk_map_redirect(struct bpf_map *map, struct xdp_buff *xdp, | |
776 | struct xdp_sock *xs); | |
777 | void __xsk_map_flush(struct bpf_map *map); | |
778 | #else | |
779 | struct xdp_sock; | |
780 | static inline struct xdp_sock *__xsk_map_lookup_elem(struct bpf_map *map, | |
781 | u32 key) | |
782 | { | |
783 | return NULL; | |
784 | } | |
785 | ||
786 | static inline int __xsk_map_redirect(struct bpf_map *map, struct xdp_buff *xdp, | |
787 | struct xdp_sock *xs) | |
788 | { | |
789 | return -EOPNOTSUPP; | |
790 | } | |
791 | ||
792 | static inline void __xsk_map_flush(struct bpf_map *map) | |
793 | { | |
794 | } | |
795 | #endif | |
796 | ||
5dc4c4b7 MKL |
797 | #if defined(CONFIG_INET) && defined(CONFIG_BPF_SYSCALL) |
798 | void bpf_sk_reuseport_detach(struct sock *sk); | |
799 | int bpf_fd_reuseport_array_lookup_elem(struct bpf_map *map, void *key, | |
800 | void *value); | |
801 | int bpf_fd_reuseport_array_update_elem(struct bpf_map *map, void *key, | |
802 | void *value, u64 map_flags); | |
803 | #else | |
804 | static inline void bpf_sk_reuseport_detach(struct sock *sk) | |
805 | { | |
806 | } | |
807 | ||
808 | #ifdef CONFIG_BPF_SYSCALL | |
809 | static inline int bpf_fd_reuseport_array_lookup_elem(struct bpf_map *map, | |
810 | void *key, void *value) | |
811 | { | |
812 | return -EOPNOTSUPP; | |
813 | } | |
814 | ||
815 | static inline int bpf_fd_reuseport_array_update_elem(struct bpf_map *map, | |
816 | void *key, void *value, | |
817 | u64 map_flags) | |
818 | { | |
819 | return -EOPNOTSUPP; | |
820 | } | |
821 | #endif /* CONFIG_BPF_SYSCALL */ | |
822 | #endif /* defined(CONFIG_INET) && defined(CONFIG_BPF_SYSCALL) */ | |
823 | ||
d0003ec0 | 824 | /* verifier prototypes for helper functions called from eBPF programs */ |
a2c83fff DB |
825 | extern const struct bpf_func_proto bpf_map_lookup_elem_proto; |
826 | extern const struct bpf_func_proto bpf_map_update_elem_proto; | |
827 | extern const struct bpf_func_proto bpf_map_delete_elem_proto; | |
d0003ec0 | 828 | |
03e69b50 | 829 | extern const struct bpf_func_proto bpf_get_prandom_u32_proto; |
c04167ce | 830 | extern const struct bpf_func_proto bpf_get_smp_processor_id_proto; |
2d0e30c3 | 831 | extern const struct bpf_func_proto bpf_get_numa_node_id_proto; |
04fd61ab | 832 | extern const struct bpf_func_proto bpf_tail_call_proto; |
17ca8cbf | 833 | extern const struct bpf_func_proto bpf_ktime_get_ns_proto; |
ffeedafb AS |
834 | extern const struct bpf_func_proto bpf_get_current_pid_tgid_proto; |
835 | extern const struct bpf_func_proto bpf_get_current_uid_gid_proto; | |
836 | extern const struct bpf_func_proto bpf_get_current_comm_proto; | |
d5a3b1f6 | 837 | extern const struct bpf_func_proto bpf_get_stackid_proto; |
c195651e | 838 | extern const struct bpf_func_proto bpf_get_stack_proto; |
174a79ff | 839 | extern const struct bpf_func_proto bpf_sock_map_update_proto; |
81110384 | 840 | extern const struct bpf_func_proto bpf_sock_hash_update_proto; |
bf6fa2c8 | 841 | extern const struct bpf_func_proto bpf_get_current_cgroup_id_proto; |
03e69b50 | 842 | |
cd339431 RG |
843 | extern const struct bpf_func_proto bpf_get_local_storage_proto; |
844 | ||
3ad00405 DB |
845 | /* Shared helpers among cBPF and eBPF. */ |
846 | void bpf_user_rnd_init_once(void); | |
847 | u64 bpf_user_rnd_u32(u64 r1, u64 r2, u64 r3, u64 r4, u64 r5); | |
848 | ||
c64b7983 JS |
849 | #if defined(CONFIG_NET) |
850 | bool bpf_sock_is_valid_access(int off, int size, enum bpf_access_type type, | |
851 | struct bpf_insn_access_aux *info); | |
852 | u32 bpf_sock_convert_ctx_access(enum bpf_access_type type, | |
853 | const struct bpf_insn *si, | |
854 | struct bpf_insn *insn_buf, | |
855 | struct bpf_prog *prog, | |
856 | u32 *target_size); | |
857 | #else | |
858 | static inline bool bpf_sock_is_valid_access(int off, int size, | |
859 | enum bpf_access_type type, | |
860 | struct bpf_insn_access_aux *info) | |
861 | { | |
862 | return false; | |
863 | } | |
864 | static inline u32 bpf_sock_convert_ctx_access(enum bpf_access_type type, | |
865 | const struct bpf_insn *si, | |
866 | struct bpf_insn *insn_buf, | |
867 | struct bpf_prog *prog, | |
868 | u32 *target_size) | |
869 | { | |
870 | return 0; | |
871 | } | |
872 | #endif | |
873 | ||
99c55f7d | 874 | #endif /* _LINUX_BPF_H */ |