1 // SPDX-License-Identifier: (GPL-2.0-only OR BSD-2-Clause)
2 /* Copyright (C) 2017-2018 Netronome Systems, Inc. */
19 #include <sys/mount.h>
20 #include <sys/resource.h>
24 #include <linux/filter.h>
25 #include <linux/limits.h>
26 #include <linux/magic.h>
27 #include <linux/unistd.h>
30 #include <bpf/hashmap.h>
31 #include <bpf/libbpf.h> /* libbpf_num_possible_cpus */
37 #define BPF_FS_MAGIC 0xcafe4a11
40 void p_err(const char *fmt, ...)
46 jsonw_start_object(json_wtr);
47 jsonw_name(json_wtr, "error");
48 jsonw_vprintf_enquote(json_wtr, fmt, ap);
49 jsonw_end_object(json_wtr);
51 fprintf(stderr, "Error: ");
52 vfprintf(stderr, fmt, ap);
53 fprintf(stderr, "\n");
58 void p_info(const char *fmt, ...)
66 vfprintf(stderr, fmt, ap);
67 fprintf(stderr, "\n");
71 static bool is_bpffs(char *path)
75 if (statfs(path, &st_fs) < 0)
78 return (unsigned long)st_fs.f_type == BPF_FS_MAGIC;
81 /* Probe whether kernel switched from memlock-based (RLIMIT_MEMLOCK) to
82 * memcg-based memory accounting for BPF maps and programs. This was done in
83 * commit 97306be45fbe ("Merge branch 'switch to memcg-based memory
84 * accounting'"), in Linux 5.11.
86 * Libbpf also offers to probe for memcg-based accounting vs rlimit, but does
87 * so by checking for the availability of a given BPF helper and this has
88 * failed on some kernels with backports in the past, see commit 6b4384ff1088
89 * ("Revert "bpftool: Use libbpf 1.0 API mode instead of RLIMIT_MEMLOCK"").
90 * Instead, we can probe by lowering the process-based rlimit to 0, trying to
91 * load a BPF object, and resetting the rlimit. If the load succeeds then
92 * memcg-based accounting is supported.
94 * This would be too dangerous to do in the library, because multithreaded
95 * applications might attempt to load items while the rlimit is at 0. Given
96 * that bpftool is single-threaded, this is fine to do here.
98 static bool known_to_need_rlimit(void)
100 struct rlimit rlim_init, rlim_cur_zero = {};
101 struct bpf_insn insns[] = {
102 BPF_MOV64_IMM(BPF_REG_0, 0),
105 size_t insn_cnt = ARRAY_SIZE(insns);
109 memset(&attr, 0, sizeof(attr));
110 attr.prog_type = BPF_PROG_TYPE_SOCKET_FILTER;
111 attr.insns = ptr_to_u64(insns);
112 attr.insn_cnt = insn_cnt;
113 attr.license = ptr_to_u64("GPL");
115 if (getrlimit(RLIMIT_MEMLOCK, &rlim_init))
118 /* Drop the soft limit to zero. We maintain the hard limit to its
119 * current value, because lowering it would be a permanent operation
120 * for unprivileged users.
122 rlim_cur_zero.rlim_max = rlim_init.rlim_max;
123 if (setrlimit(RLIMIT_MEMLOCK, &rlim_cur_zero))
126 /* Do not use bpf_prog_load() from libbpf here, because it calls
127 * bump_rlimit_memlock(), interfering with the current probe.
129 prog_fd = syscall(__NR_bpf, BPF_PROG_LOAD, &attr, sizeof(attr));
132 /* reset soft rlimit to its initial value */
133 setrlimit(RLIMIT_MEMLOCK, &rlim_init);
142 void set_max_rlimit(void)
144 struct rlimit rinf = { RLIM_INFINITY, RLIM_INFINITY };
146 if (known_to_need_rlimit())
147 setrlimit(RLIMIT_MEMLOCK, &rinf);
151 mnt_fs(const char *target, const char *type, char *buff, size_t bufflen)
153 bool bind_done = false;
155 while (mount("", target, "none", MS_PRIVATE | MS_REC, NULL)) {
156 if (errno != EINVAL || bind_done) {
157 snprintf(buff, bufflen,
158 "mount --make-private %s failed: %s",
159 target, strerror(errno));
163 if (mount(target, target, "none", MS_BIND, NULL)) {
164 snprintf(buff, bufflen,
165 "mount --bind %s %s failed: %s",
166 target, target, strerror(errno));
173 if (mount(type, target, type, 0, "mode=0700")) {
174 snprintf(buff, bufflen, "mount -t %s %s %s failed: %s",
175 type, type, target, strerror(errno));
182 int mount_tracefs(const char *target)
184 char err_str[ERR_MAX_LEN];
187 err = mnt_fs(target, "tracefs", err_str, ERR_MAX_LEN);
189 err_str[ERR_MAX_LEN - 1] = '\0';
190 p_err("can't mount tracefs: %s", err_str);
196 int open_obj_pinned(const char *path, bool quiet)
201 pname = strdup(path);
204 p_err("mem alloc failed");
208 fd = bpf_obj_get(pname);
211 p_err("bpf obj get (%s): %s", pname,
212 errno == EACCES && !is_bpffs(dirname(pname)) ?
213 "directory not in bpf file system (bpffs)" :
224 int open_obj_pinned_any(const char *path, enum bpf_obj_type exp_type)
226 enum bpf_obj_type type;
229 fd = open_obj_pinned(path, false);
233 type = get_fd_type(fd);
238 if (type != exp_type) {
239 p_err("incorrect object type: %s", get_fd_type_name(type));
247 int mount_bpffs_for_pin(const char *name)
249 char err_str[ERR_MAX_LEN];
254 file = malloc(strlen(name) + 1);
256 p_err("mem alloc failed");
264 /* nothing to do if already mounted */
268 p_err("no BPF file system found, not mounting it due to --nomount option");
273 err = mnt_fs(dir, "bpf", err_str, ERR_MAX_LEN);
275 err_str[ERR_MAX_LEN - 1] = '\0';
276 p_err("can't mount BPF file system to pin the object (%s): %s",
285 int do_pin_fd(int fd, const char *name)
289 err = mount_bpffs_for_pin(name);
293 err = bpf_obj_pin(fd, name);
295 p_err("can't pin the object (%s): %s", name, strerror(errno));
300 int do_pin_any(int argc, char **argv, int (*get_fd)(int *, char ***))
308 fd = get_fd(&argc, &argv);
312 err = do_pin_fd(fd, *argv);
318 const char *get_fd_type_name(enum bpf_obj_type type)
320 static const char * const names[] = {
321 [BPF_OBJ_UNKNOWN] = "unknown",
322 [BPF_OBJ_PROG] = "prog",
323 [BPF_OBJ_MAP] = "map",
324 [BPF_OBJ_LINK] = "link",
327 if (type < 0 || type >= ARRAY_SIZE(names) || !names[type])
328 return names[BPF_OBJ_UNKNOWN];
333 void get_prog_full_name(const struct bpf_prog_info *prog_info, int prog_fd,
334 char *name_buff, size_t buff_len)
336 const char *prog_name = prog_info->name;
337 const struct btf_type *func_type;
338 const struct bpf_func_info finfo = {};
339 struct bpf_prog_info info = {};
340 __u32 info_len = sizeof(info);
341 struct btf *prog_btf = NULL;
343 if (buff_len <= BPF_OBJ_NAME_LEN ||
344 strlen(prog_info->name) < BPF_OBJ_NAME_LEN - 1)
347 if (!prog_info->btf_id || prog_info->nr_func_info == 0)
350 info.nr_func_info = 1;
351 info.func_info_rec_size = prog_info->func_info_rec_size;
352 if (info.func_info_rec_size > sizeof(finfo))
353 info.func_info_rec_size = sizeof(finfo);
354 info.func_info = ptr_to_u64(&finfo);
356 if (bpf_prog_get_info_by_fd(prog_fd, &info, &info_len))
359 prog_btf = btf__load_from_kernel_by_id(info.btf_id);
363 func_type = btf__type_by_id(prog_btf, finfo.type_id);
364 if (!func_type || !btf_is_func(func_type))
367 prog_name = btf__name_by_offset(prog_btf, func_type->name_off);
370 snprintf(name_buff, buff_len, "%s", prog_name);
376 int get_fd_type(int fd)
382 snprintf(path, sizeof(path), "/proc/self/fd/%d", fd);
384 n = readlink(path, buf, sizeof(buf));
386 p_err("can't read link type: %s", strerror(errno));
389 if (n == sizeof(path)) {
390 p_err("can't read link type: path too long!");
394 if (strstr(buf, "bpf-map"))
396 else if (strstr(buf, "bpf-prog"))
398 else if (strstr(buf, "bpf-link"))
401 return BPF_OBJ_UNKNOWN;
404 char *get_fdinfo(int fd, const char *key)
412 snprintf(path, sizeof(path), "/proc/self/fdinfo/%d", fd);
414 fdi = fopen(path, "r");
418 while ((n = getline(&line, &line_n, fdi)) > 0) {
422 if (!strstr(line, key))
427 value = strchr(line, '\t');
428 if (!value || !value[1]) {
435 memmove(line, value, len);
436 line[len - 1] = '\0';
446 void print_data_json(uint8_t *data, size_t len)
450 jsonw_start_array(json_wtr);
451 for (i = 0; i < len; i++)
452 jsonw_printf(json_wtr, "%d", data[i]);
453 jsonw_end_array(json_wtr);
456 void print_hex_data_json(uint8_t *data, size_t len)
460 jsonw_start_array(json_wtr);
461 for (i = 0; i < len; i++)
462 jsonw_printf(json_wtr, "\"0x%02hhx\"", data[i]);
463 jsonw_end_array(json_wtr);
466 /* extra params for nftw cb */
467 static struct hashmap *build_fn_table;
468 static enum bpf_obj_type build_fn_type;
470 static int do_build_table_cb(const char *fpath, const struct stat *sb,
471 int typeflag, struct FTW *ftwbuf)
473 struct bpf_prog_info pinned_info;
474 __u32 len = sizeof(pinned_info);
475 enum bpf_obj_type objtype;
479 if (typeflag != FTW_F)
482 fd = open_obj_pinned(fpath, true);
486 objtype = get_fd_type(fd);
487 if (objtype != build_fn_type)
490 memset(&pinned_info, 0, sizeof(pinned_info));
491 if (bpf_prog_get_info_by_fd(fd, &pinned_info, &len))
494 path = strdup(fpath);
500 err = hashmap__append(build_fn_table, pinned_info.id, path);
502 p_err("failed to append entry to hashmap for ID %u, path '%s': %s",
503 pinned_info.id, path, strerror(errno));
514 int build_pinned_obj_table(struct hashmap *tab,
515 enum bpf_obj_type type)
517 struct mntent *mntent = NULL;
518 FILE *mntfile = NULL;
519 int flags = FTW_PHYS;
523 mntfile = setmntent("/proc/mounts", "r");
527 build_fn_table = tab;
528 build_fn_type = type;
530 while ((mntent = getmntent(mntfile))) {
531 char *path = mntent->mnt_dir;
533 if (strncmp(mntent->mnt_type, "bpf", 3) != 0)
535 err = nftw(path, do_build_table_cb, nopenfd, flags);
543 void delete_pinned_obj_table(struct hashmap *map)
545 struct hashmap_entry *entry;
551 hashmap__for_each_entry(map, entry, bkt)
557 unsigned int get_page_size(void)
562 result = getpagesize();
566 unsigned int get_possible_cpus(void)
568 int cpus = libbpf_num_possible_cpus();
571 p_err("Can't get # of possible cpus: %s", strerror(-cpus));
578 ifindex_to_name_ns(__u32 ifindex, __u32 ns_dev, __u32 ns_ino, char *buf)
583 err = stat("/proc/self/ns/net", &st);
585 p_err("Can't stat /proc/self: %s", strerror(errno));
589 if (st.st_dev != ns_dev || st.st_ino != ns_ino)
592 return if_indextoname(ifindex, buf);
595 static int read_sysfs_hex_int(char *path)
597 char vendor_id_buf[8];
601 fd = open(path, O_RDONLY);
603 p_err("Can't open %s: %s", path, strerror(errno));
607 len = read(fd, vendor_id_buf, sizeof(vendor_id_buf));
610 p_err("Can't read %s: %s", path, strerror(errno));
613 if (len >= (int)sizeof(vendor_id_buf)) {
614 p_err("Value in %s too long", path);
618 vendor_id_buf[len] = 0;
620 return strtol(vendor_id_buf, NULL, 0);
623 static int read_sysfs_netdev_hex_int(char *devname, const char *entry_name)
627 snprintf(full_path, sizeof(full_path), "/sys/class/net/%s/device/%s",
628 devname, entry_name);
630 return read_sysfs_hex_int(full_path);
634 ifindex_to_arch(__u32 ifindex, __u64 ns_dev, __u64 ns_ino, const char **opt)
636 __maybe_unused int device_id;
637 char devname[IF_NAMESIZE];
640 if (!ifindex_to_name_ns(ifindex, ns_dev, ns_ino, devname)) {
641 p_err("Can't get net device name for ifindex %d: %s", ifindex,
646 vendor_id = read_sysfs_netdev_hex_int(devname, "vendor");
648 p_err("Can't get device vendor id for %s", devname);
653 #ifdef HAVE_LIBBFD_SUPPORT
655 device_id = read_sysfs_netdev_hex_int(devname, "device");
656 if (device_id != 0x4000 &&
657 device_id != 0x6000 &&
659 p_info("Unknown NFP device ID, assuming it is NFP-6xxx arch");
662 #endif /* HAVE_LIBBFD_SUPPORT */
663 /* No NFP support in LLVM, we have no valid triple to return. */
665 p_err("Can't get arch name for device vendor id 0x%04x",
671 void print_dev_plain(__u32 ifindex, __u64 ns_dev, __u64 ns_inode)
673 char name[IF_NAMESIZE];
678 printf(" offloaded_to ");
679 if (ifindex_to_name_ns(ifindex, ns_dev, ns_inode, name))
682 printf("ifindex %u ns_dev %llu ns_ino %llu",
683 ifindex, ns_dev, ns_inode);
686 void print_dev_json(__u32 ifindex, __u64 ns_dev, __u64 ns_inode)
688 char name[IF_NAMESIZE];
693 jsonw_name(json_wtr, "dev");
694 jsonw_start_object(json_wtr);
695 jsonw_uint_field(json_wtr, "ifindex", ifindex);
696 jsonw_uint_field(json_wtr, "ns_dev", ns_dev);
697 jsonw_uint_field(json_wtr, "ns_inode", ns_inode);
698 if (ifindex_to_name_ns(ifindex, ns_dev, ns_inode, name))
699 jsonw_string_field(json_wtr, "ifname", name);
700 jsonw_end_object(json_wtr);
703 int parse_u32_arg(int *argc, char ***argv, __u32 *val, const char *what)
710 p_err("%s already specified", what);
714 *val = strtoul(**argv, &endptr, 0);
716 p_err("can't parse %s as %s", **argv, what);
725 print_all_levels(__maybe_unused enum libbpf_print_level level,
726 const char *format, va_list args)
728 return vfprintf(stderr, format, args);
731 static int prog_fd_by_nametag(void *nametag, int **fds, bool tag)
733 char prog_name[MAX_PROG_FULL_NAME];
740 struct bpf_prog_info info = {};
741 __u32 len = sizeof(info);
743 err = bpf_prog_get_next_id(id, &id);
745 if (errno != ENOENT) {
746 p_err("%s", strerror(errno));
752 fd = bpf_prog_get_fd_by_id(id);
754 p_err("can't get prog by id (%u): %s",
755 id, strerror(errno));
759 err = bpf_prog_get_info_by_fd(fd, &info, &len);
761 p_err("can't get prog info (%u): %s",
762 id, strerror(errno));
766 if (tag && memcmp(nametag, info.tag, BPF_TAG_SIZE)) {
772 get_prog_full_name(&info, fd, prog_name,
774 if (strncmp(nametag, prog_name, sizeof(prog_name))) {
781 tmp = realloc(*fds, (nb_fds + 1) * sizeof(int));
783 p_err("failed to realloc");
788 (*fds)[nb_fds++] = fd;
794 while (--nb_fds >= 0)
795 close((*fds)[nb_fds]);
799 int prog_parse_fds(int *argc, char ***argv, int **fds)
801 if (is_prefix(**argv, "id")) {
807 id = strtoul(**argv, &endptr, 0);
809 p_err("can't parse %s as ID", **argv);
814 (*fds)[0] = bpf_prog_get_fd_by_id(id);
816 p_err("get by id (%u): %s", id, strerror(errno));
820 } else if (is_prefix(**argv, "tag")) {
821 unsigned char tag[BPF_TAG_SIZE];
825 if (sscanf(**argv, BPF_TAG_FMT, tag, tag + 1, tag + 2,
826 tag + 3, tag + 4, tag + 5, tag + 6, tag + 7)
828 p_err("can't parse tag");
833 return prog_fd_by_nametag(tag, fds, true);
834 } else if (is_prefix(**argv, "name")) {
840 if (strlen(name) > MAX_PROG_FULL_NAME - 1) {
841 p_err("can't parse name");
846 return prog_fd_by_nametag(name, fds, false);
847 } else if (is_prefix(**argv, "pinned")) {
855 (*fds)[0] = open_obj_pinned_any(path, BPF_OBJ_PROG);
861 p_err("expected 'id', 'tag', 'name' or 'pinned', got: '%s'?", **argv);
865 int prog_parse_fd(int *argc, char ***argv)
870 fds = malloc(sizeof(int));
872 p_err("mem alloc failed");
875 nb_fds = prog_parse_fds(argc, argv, &fds);
878 p_err("several programs match this handle");
892 static int map_fd_by_name(char *name, int **fds)
900 struct bpf_map_info info = {};
901 __u32 len = sizeof(info);
903 err = bpf_map_get_next_id(id, &id);
905 if (errno != ENOENT) {
906 p_err("%s", strerror(errno));
912 fd = bpf_map_get_fd_by_id(id);
914 p_err("can't get map by id (%u): %s",
915 id, strerror(errno));
919 err = bpf_map_get_info_by_fd(fd, &info, &len);
921 p_err("can't get map info (%u): %s",
922 id, strerror(errno));
926 if (strncmp(name, info.name, BPF_OBJ_NAME_LEN)) {
932 tmp = realloc(*fds, (nb_fds + 1) * sizeof(int));
934 p_err("failed to realloc");
939 (*fds)[nb_fds++] = fd;
945 while (--nb_fds >= 0)
946 close((*fds)[nb_fds]);
950 int map_parse_fds(int *argc, char ***argv, int **fds)
952 if (is_prefix(**argv, "id")) {
958 id = strtoul(**argv, &endptr, 0);
960 p_err("can't parse %s as ID", **argv);
965 (*fds)[0] = bpf_map_get_fd_by_id(id);
967 p_err("get map by id (%u): %s", id, strerror(errno));
971 } else if (is_prefix(**argv, "name")) {
977 if (strlen(name) > BPF_OBJ_NAME_LEN - 1) {
978 p_err("can't parse name");
983 return map_fd_by_name(name, fds);
984 } else if (is_prefix(**argv, "pinned")) {
992 (*fds)[0] = open_obj_pinned_any(path, BPF_OBJ_MAP);
998 p_err("expected 'id', 'name' or 'pinned', got: '%s'?", **argv);
1002 int map_parse_fd(int *argc, char ***argv)
1007 fds = malloc(sizeof(int));
1009 p_err("mem alloc failed");
1012 nb_fds = map_parse_fds(argc, argv, &fds);
1015 p_err("several maps match this handle");
1029 int map_parse_fd_and_info(int *argc, char ***argv, struct bpf_map_info *info,
1035 fd = map_parse_fd(argc, argv);
1039 err = bpf_map_get_info_by_fd(fd, info, info_len);
1041 p_err("can't get map info: %s", strerror(errno));
1049 size_t hash_fn_for_key_as_id(long key, void *ctx)
1054 bool equal_fn_for_key_as_id(long k1, long k2, void *ctx)
1059 const char *bpf_attach_type_input_str(enum bpf_attach_type t)
1062 case BPF_CGROUP_INET_INGRESS: return "ingress";
1063 case BPF_CGROUP_INET_EGRESS: return "egress";
1064 case BPF_CGROUP_INET_SOCK_CREATE: return "sock_create";
1065 case BPF_CGROUP_INET_SOCK_RELEASE: return "sock_release";
1066 case BPF_CGROUP_SOCK_OPS: return "sock_ops";
1067 case BPF_CGROUP_DEVICE: return "device";
1068 case BPF_CGROUP_INET4_BIND: return "bind4";
1069 case BPF_CGROUP_INET6_BIND: return "bind6";
1070 case BPF_CGROUP_INET4_CONNECT: return "connect4";
1071 case BPF_CGROUP_INET6_CONNECT: return "connect6";
1072 case BPF_CGROUP_INET4_POST_BIND: return "post_bind4";
1073 case BPF_CGROUP_INET6_POST_BIND: return "post_bind6";
1074 case BPF_CGROUP_INET4_GETPEERNAME: return "getpeername4";
1075 case BPF_CGROUP_INET6_GETPEERNAME: return "getpeername6";
1076 case BPF_CGROUP_INET4_GETSOCKNAME: return "getsockname4";
1077 case BPF_CGROUP_INET6_GETSOCKNAME: return "getsockname6";
1078 case BPF_CGROUP_UDP4_SENDMSG: return "sendmsg4";
1079 case BPF_CGROUP_UDP6_SENDMSG: return "sendmsg6";
1080 case BPF_CGROUP_SYSCTL: return "sysctl";
1081 case BPF_CGROUP_UDP4_RECVMSG: return "recvmsg4";
1082 case BPF_CGROUP_UDP6_RECVMSG: return "recvmsg6";
1083 case BPF_CGROUP_GETSOCKOPT: return "getsockopt";
1084 case BPF_CGROUP_SETSOCKOPT: return "setsockopt";
1085 case BPF_TRACE_RAW_TP: return "raw_tp";
1086 case BPF_TRACE_FENTRY: return "fentry";
1087 case BPF_TRACE_FEXIT: return "fexit";
1088 case BPF_MODIFY_RETURN: return "mod_ret";
1089 case BPF_SK_REUSEPORT_SELECT: return "sk_skb_reuseport_select";
1090 case BPF_SK_REUSEPORT_SELECT_OR_MIGRATE: return "sk_skb_reuseport_select_or_migrate";
1091 default: return libbpf_bpf_attach_type_str(t);
1095 int pathname_concat(char *buf, int buf_sz, const char *path,
1100 len = snprintf(buf, buf_sz, "%s/%s", path, name);
1104 return -ENAMETOOLONG;