blob: 8f3e00c84f39fcd6bbc5c30dab8a5e5bf36ecb64 [file] [log] [blame]
Thomas Gleixner25763b32019-05-28 10:10:09 -07001/* SPDX-License-Identifier: GPL-2.0-only */
Alexei Starovoitov99c55f72014-09-26 00:16:57 -07002/* Copyright (c) 2011-2014 PLUMgrid, http://plumgrid.com
Alexei Starovoitov99c55f72014-09-26 00:16:57 -07003 */
4#ifndef _LINUX_BPF_H
5#define _LINUX_BPF_H 1
6
7#include <uapi/linux/bpf.h>
Daniel Borkmann74451e662017-02-16 22:24:50 +01008
Alexei Starovoitov99c55f72014-09-26 00:16:57 -07009#include <linux/workqueue.h>
Alexei Starovoitovdb20fd22014-09-26 00:16:59 -070010#include <linux/file.h>
Alexei Starovoitovb121d1e2016-03-07 21:57:13 -080011#include <linux/percpu.h>
Zi Shen Lim002245c2016-06-08 21:18:47 -070012#include <linux/err.h>
Daniel Borkmann74451e662017-02-16 22:24:50 +010013#include <linux/rbtree_latch.h>
David S. Millerd6e1e462017-08-19 23:34:03 -070014#include <linux/numa.h>
Andrii Nakryikofc970222019-11-17 09:28:04 -080015#include <linux/mm_types.h>
Jakub Kicinskiab3f0062017-11-03 13:56:17 -070016#include <linux/wait.h>
Alexei Starovoitov492ecee2019-02-25 14:28:39 -080017#include <linux/u64_stats_sync.h>
Alexei Starovoitovfec56f52019-11-14 10:57:04 -080018#include <linux/refcount.h>
19#include <linux/mutex.h>
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070020
Jakub Kicinskicae19272017-12-27 18:39:05 -080021struct bpf_verifier_env;
Alexei Starovoitov9e15db62019-10-15 20:25:00 -070022struct bpf_verifier_log;
Daniel Borkmann3b1efb12016-06-15 22:47:14 +020023struct perf_event;
John Fastabend174a79f2017-08-15 22:32:47 -070024struct bpf_prog;
Daniel Borkmannda765a22019-11-22 21:07:58 +010025struct bpf_prog_aux;
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070026struct bpf_map;
John Fastabend4f738ad2018-03-18 12:57:10 -070027struct sock;
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -070028struct seq_file;
Roman Gushchin1b2b2342018-12-10 15:43:00 -080029struct btf;
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +020030struct btf_type;
Alexei Starovoitov3dec5412019-10-15 20:25:03 -070031struct exception_table_entry;
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070032
Quentin Monnet1b9ed842019-08-20 10:31:50 +010033extern struct idr btf_idr;
34extern spinlock_t btf_idr_lock;
35
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070036/* map is generic key/value storage optionally accesible by eBPF programs */
37struct bpf_map_ops {
38 /* funcs callable from userspace (via syscall) */
Jakub Kicinski1110f3a2018-01-11 20:29:03 -080039 int (*map_alloc_check)(union bpf_attr *attr);
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070040 struct bpf_map *(*map_alloc)(union bpf_attr *attr);
Daniel Borkmann61d1b6a2016-06-15 22:47:12 +020041 void (*map_release)(struct bpf_map *map, struct file *map_file);
42 void (*map_free)(struct bpf_map *map);
Alexei Starovoitovdb20fd22014-09-26 00:16:59 -070043 int (*map_get_next_key)(struct bpf_map *map, void *key, void *next_key);
John Fastabendba6b8de2018-04-23 15:39:23 -070044 void (*map_release_uref)(struct bpf_map *map);
Daniel Borkmannc6110222019-05-14 01:18:55 +020045 void *(*map_lookup_elem_sys_only)(struct bpf_map *map, void *key);
Alexei Starovoitovdb20fd22014-09-26 00:16:59 -070046
47 /* funcs callable from userspace and from eBPF programs */
48 void *(*map_lookup_elem)(struct bpf_map *map, void *key);
Alexei Starovoitov3274f522014-11-13 17:36:44 -080049 int (*map_update_elem)(struct bpf_map *map, void *key, void *value, u64 flags);
Alexei Starovoitovdb20fd22014-09-26 00:16:59 -070050 int (*map_delete_elem)(struct bpf_map *map, void *key);
Mauricio Vasquez Bf1a2e442018-10-18 15:16:25 +020051 int (*map_push_elem)(struct bpf_map *map, void *value, u64 flags);
52 int (*map_pop_elem)(struct bpf_map *map, void *value);
53 int (*map_peek_elem)(struct bpf_map *map, void *value);
Wang Nan2a36f0b2015-08-06 07:02:33 +000054
55 /* funcs called by prog_array and perf_event_array map */
Daniel Borkmannd056a782016-06-15 22:47:13 +020056 void *(*map_fd_get_ptr)(struct bpf_map *map, struct file *map_file,
57 int fd);
58 void (*map_fd_put_ptr)(void *ptr);
Alexei Starovoitov81ed18a2017-03-15 18:26:42 -070059 u32 (*map_gen_lookup)(struct bpf_map *map, struct bpf_insn *insn_buf);
Martin KaFai Lau14dc6f02017-06-27 23:08:34 -070060 u32 (*map_fd_sys_lookup_elem)(void *ptr);
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -070061 void (*map_seq_show_elem)(struct bpf_map *map, void *key,
62 struct seq_file *m);
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +020063 int (*map_check_btf)(const struct bpf_map *map,
Roman Gushchin1b2b2342018-12-10 15:43:00 -080064 const struct btf *btf,
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +020065 const struct btf_type *key_type,
66 const struct btf_type *value_type);
Daniel Borkmannd8eca5b2019-04-09 23:20:03 +020067
Daniel Borkmannda765a22019-11-22 21:07:58 +010068 /* Prog poke tracking helpers. */
69 int (*map_poke_track)(struct bpf_map *map, struct bpf_prog_aux *aux);
70 void (*map_poke_untrack)(struct bpf_map *map, struct bpf_prog_aux *aux);
71 void (*map_poke_run)(struct bpf_map *map, u32 key, struct bpf_prog *old,
72 struct bpf_prog *new);
73
Daniel Borkmannd8eca5b2019-04-09 23:20:03 +020074 /* Direct value access helpers. */
75 int (*map_direct_value_addr)(const struct bpf_map *map,
76 u64 *imm, u32 off);
77 int (*map_direct_value_meta)(const struct bpf_map *map,
78 u64 imm, u32 *off);
Andrii Nakryikofc970222019-11-17 09:28:04 -080079 int (*map_mmap)(struct bpf_map *map, struct vm_area_struct *vma);
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070080};
81
Roman Gushchin3539b962019-05-29 18:03:57 -070082struct bpf_map_memory {
83 u32 pages;
84 struct user_struct *user;
85};
86
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070087struct bpf_map {
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -070088 /* The first two cachelines with read-mostly members of which some
Daniel Borkmannbe95a842018-01-09 13:17:44 +010089 * are also accessed in fast-path (e.g. ops, max_entries).
90 */
91 const struct bpf_map_ops *ops ____cacheline_aligned;
92 struct bpf_map *inner_map_meta;
93#ifdef CONFIG_SECURITY
94 void *security;
95#endif
Alexei Starovoitov99c55f72014-09-26 00:16:57 -070096 enum bpf_map_type map_type;
97 u32 key_size;
98 u32 value_size;
99 u32 max_entries;
Alexei Starovoitov6c905982016-03-07 21:57:15 -0800100 u32 map_flags;
Alexei Starovoitovd83525c2019-01-31 15:40:04 -0800101 int spin_lock_off; /* >=0 valid offset, <0 error */
Martin KaFai Lauf3f1c052017-06-05 12:15:47 -0700102 u32 id;
Martin KaFai Lau96eabe72017-08-18 11:28:00 -0700103 int numa_node;
Martin KaFai Lau9b2cf322018-05-22 14:57:21 -0700104 u32 btf_key_type_id;
105 u32 btf_value_type_id;
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -0700106 struct btf *btf;
Roman Gushchin3539b962019-05-29 18:03:57 -0700107 struct bpf_map_memory memory;
Andrii Nakryikofc970222019-11-17 09:28:04 -0800108 char name[BPF_OBJ_NAME_LEN];
Alexei Starovoitovb2157392018-01-07 17:33:02 -0800109 bool unpriv_array;
Andrii Nakryikofc970222019-11-17 09:28:04 -0800110 bool frozen; /* write-once; write-protected by freeze_mutex */
111 /* 22 bytes hole */
Daniel Borkmannbe95a842018-01-09 13:17:44 +0100112
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -0700113 /* The 3rd and 4th cacheline with misc members to avoid false sharing
Daniel Borkmannbe95a842018-01-09 13:17:44 +0100114 * particularly with refcounting.
115 */
Andrii Nakryiko1e0bd5a2019-11-17 09:28:02 -0800116 atomic64_t refcnt ____cacheline_aligned;
117 atomic64_t usercnt;
Daniel Borkmannbe95a842018-01-09 13:17:44 +0100118 struct work_struct work;
Andrii Nakryikofc970222019-11-17 09:28:04 -0800119 struct mutex freeze_mutex;
120 u64 writecnt; /* writable mmap cnt; protected by freeze_mutex */
Alexei Starovoitov99c55f72014-09-26 00:16:57 -0700121};
122
Alexei Starovoitovd83525c2019-01-31 15:40:04 -0800123static inline bool map_value_has_spin_lock(const struct bpf_map *map)
124{
125 return map->spin_lock_off >= 0;
126}
127
128static inline void check_and_init_map_lock(struct bpf_map *map, void *dst)
129{
130 if (likely(!map_value_has_spin_lock(map)))
131 return;
132 *(struct bpf_spin_lock *)(dst + map->spin_lock_off) =
133 (struct bpf_spin_lock){};
134}
135
136/* copy everything but bpf_spin_lock */
137static inline void copy_map_value(struct bpf_map *map, void *dst, void *src)
138{
139 if (unlikely(map_value_has_spin_lock(map))) {
140 u32 off = map->spin_lock_off;
141
142 memcpy(dst, src, off);
143 memcpy(dst + off + sizeof(struct bpf_spin_lock),
144 src + off + sizeof(struct bpf_spin_lock),
145 map->value_size - off - sizeof(struct bpf_spin_lock));
146 } else {
147 memcpy(dst, src, map->value_size);
148 }
149}
Alexei Starovoitov96049f32019-01-31 15:40:09 -0800150void copy_map_value_locked(struct bpf_map *map, void *dst, void *src,
151 bool lock_src);
Alexei Starovoitovd83525c2019-01-31 15:40:04 -0800152
Jakub Kicinski602144c2018-07-17 10:53:25 -0700153struct bpf_offload_dev;
Jakub Kicinskia3884572018-01-11 20:29:09 -0800154struct bpf_offloaded_map;
155
156struct bpf_map_dev_ops {
157 int (*map_get_next_key)(struct bpf_offloaded_map *map,
158 void *key, void *next_key);
159 int (*map_lookup_elem)(struct bpf_offloaded_map *map,
160 void *key, void *value);
161 int (*map_update_elem)(struct bpf_offloaded_map *map,
162 void *key, void *value, u64 flags);
163 int (*map_delete_elem)(struct bpf_offloaded_map *map, void *key);
164};
165
166struct bpf_offloaded_map {
167 struct bpf_map map;
168 struct net_device *netdev;
169 const struct bpf_map_dev_ops *dev_ops;
170 void *dev_priv;
171 struct list_head offloads;
172};
173
174static inline struct bpf_offloaded_map *map_to_offmap(struct bpf_map *map)
175{
176 return container_of(map, struct bpf_offloaded_map, map);
177}
178
Jakub Kicinski0cd3cbe2018-05-03 18:37:08 -0700179static inline bool bpf_map_offload_neutral(const struct bpf_map *map)
180{
181 return map->map_type == BPF_MAP_TYPE_PERF_EVENT_ARRAY;
182}
183
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -0700184static inline bool bpf_map_support_seq_show(const struct bpf_map *map)
185{
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +0200186 return map->btf && map->ops->map_seq_show_elem;
Martin KaFai Laua26ca7c2018-04-18 15:56:03 -0700187}
188
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +0200189int map_check_no_btf(const struct bpf_map *map,
Roman Gushchin1b2b2342018-12-10 15:43:00 -0800190 const struct btf *btf,
Daniel Borkmanne8d2bec2018-08-12 01:59:17 +0200191 const struct btf_type *key_type,
192 const struct btf_type *value_type);
193
Jakub Kicinskia3884572018-01-11 20:29:09 -0800194extern const struct bpf_map_ops bpf_map_offload_ops;
195
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700196/* function argument constraints */
197enum bpf_arg_type {
Daniel Borkmann80f1d682015-03-12 17:21:42 +0100198 ARG_DONTCARE = 0, /* unused argument in helper function */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700199
200 /* the following constraints used to prototype
201 * bpf_map_lookup/update/delete_elem() functions
202 */
203 ARG_CONST_MAP_PTR, /* const argument used as pointer to bpf_map */
204 ARG_PTR_TO_MAP_KEY, /* pointer to stack used as map key */
205 ARG_PTR_TO_MAP_VALUE, /* pointer to stack used as map value */
Mauricio Vasquez B2ea864c2018-10-18 15:16:20 +0200206 ARG_PTR_TO_UNINIT_MAP_VALUE, /* pointer to valid memory used to store a map value */
Martin KaFai Lau6ac99e82019-04-26 16:39:39 -0700207 ARG_PTR_TO_MAP_VALUE_OR_NULL, /* pointer to stack used as map value or NULL */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700208
209 /* the following constraints used to prototype bpf_memcmp() and other
210 * functions that access data on eBPF program stack
211 */
Alexei Starovoitov39f19ebb2017-01-09 10:19:50 -0800212 ARG_PTR_TO_MEM, /* pointer to valid memory (stack, packet, map value) */
Gianluca Borellodb1ac492017-11-22 18:32:53 +0000213 ARG_PTR_TO_MEM_OR_NULL, /* pointer to valid memory or NULL */
Alexei Starovoitov39f19ebb2017-01-09 10:19:50 -0800214 ARG_PTR_TO_UNINIT_MEM, /* pointer to memory does not need to be initialized,
215 * helper function must fill all bytes or clear
216 * them in error case.
Daniel Borkmann435faee12016-04-13 00:10:51 +0200217 */
218
Alexei Starovoitov39f19ebb2017-01-09 10:19:50 -0800219 ARG_CONST_SIZE, /* number of bytes accessed from memory */
220 ARG_CONST_SIZE_OR_ZERO, /* number of bytes accessed from memory or 0 */
Daniel Borkmann80f1d682015-03-12 17:21:42 +0100221
Alexei Starovoitov608cd712015-03-26 19:53:57 -0700222 ARG_PTR_TO_CTX, /* pointer to context */
Daniel Borkmann80f1d682015-03-12 17:21:42 +0100223 ARG_ANYTHING, /* any (initialized) argument is ok */
Alexei Starovoitovd83525c2019-01-31 15:40:04 -0800224 ARG_PTR_TO_SPIN_LOCK, /* pointer to bpf_spin_lock */
Martin KaFai Lau46f8bc92019-02-09 23:22:20 -0800225 ARG_PTR_TO_SOCK_COMMON, /* pointer to sock_common */
Andrey Ignatov57c3bb72019-03-18 16:57:10 -0700226 ARG_PTR_TO_INT, /* pointer to int */
227 ARG_PTR_TO_LONG, /* pointer to long */
Martin KaFai Lau6ac99e82019-04-26 16:39:39 -0700228 ARG_PTR_TO_SOCKET, /* pointer to bpf_sock (fullsock) */
Alexei Starovoitova7658e12019-10-15 20:25:04 -0700229 ARG_PTR_TO_BTF_ID, /* pointer to in-kernel struct */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700230};
231
232/* type of values returned from helper functions */
233enum bpf_return_type {
234 RET_INTEGER, /* function returns integer */
235 RET_VOID, /* function doesn't return anything */
Roman Gushchin3e6a4b32018-08-02 14:27:22 -0700236 RET_PTR_TO_MAP_VALUE, /* returns a pointer to map elem value */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700237 RET_PTR_TO_MAP_VALUE_OR_NULL, /* returns a pointer to map elem value or NULL */
Joe Stringerc64b7982018-10-02 13:35:33 -0700238 RET_PTR_TO_SOCKET_OR_NULL, /* returns a pointer to a socket or NULL */
Martin KaFai Lau655a51e2019-02-09 23:22:24 -0800239 RET_PTR_TO_TCP_SOCK_OR_NULL, /* returns a pointer to a tcp_sock or NULL */
Lorenz Bauer85a51f82019-03-22 09:54:00 +0800240 RET_PTR_TO_SOCK_COMMON_OR_NULL, /* returns a pointer to a sock_common or NULL */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700241};
242
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700243/* eBPF function prototype used by verifier to allow BPF_CALLs from eBPF programs
244 * to in-kernel helper functions and for adjusting imm32 field in BPF_CALL
245 * instructions after verifying
246 */
247struct bpf_func_proto {
248 u64 (*func)(u64 r1, u64 r2, u64 r3, u64 r4, u64 r5);
249 bool gpl_only;
Daniel Borkmann36bbef52016-09-20 00:26:13 +0200250 bool pkt_access;
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700251 enum bpf_return_type ret_type;
Alexei Starovoitova7658e12019-10-15 20:25:04 -0700252 union {
253 struct {
254 enum bpf_arg_type arg1_type;
255 enum bpf_arg_type arg2_type;
256 enum bpf_arg_type arg3_type;
257 enum bpf_arg_type arg4_type;
258 enum bpf_arg_type arg5_type;
259 };
260 enum bpf_arg_type arg_type[5];
261 };
Alexei Starovoitov9cc31b32019-11-14 10:57:14 -0800262 int *btf_id; /* BTF ids of arguments */
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700263};
264
265/* bpf_context is intentionally undefined structure. Pointer to bpf_context is
266 * the first argument to eBPF programs.
267 * For socket filters: 'struct bpf_context *' == 'struct sk_buff *'
268 */
269struct bpf_context;
270
271enum bpf_access_type {
272 BPF_READ = 1,
273 BPF_WRITE = 2
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700274};
275
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700276/* types of values stored in eBPF registers */
Edward Creef1174f72017-08-07 15:26:19 +0100277/* Pointer types represent:
278 * pointer
279 * pointer + imm
280 * pointer + (u16) var
281 * pointer + (u16) var + imm
282 * if (range > 0) then [ptr, ptr + range - off) is safe to access
283 * if (id > 0) means that some 'var' was added
284 * if (off > 0) means that 'imm' was added
285 */
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700286enum bpf_reg_type {
287 NOT_INIT = 0, /* nothing was written into register */
Edward Creef1174f72017-08-07 15:26:19 +0100288 SCALAR_VALUE, /* reg doesn't contain a valid pointer */
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700289 PTR_TO_CTX, /* reg points to bpf_context */
290 CONST_PTR_TO_MAP, /* reg points to struct bpf_map */
291 PTR_TO_MAP_VALUE, /* reg points to map element value */
292 PTR_TO_MAP_VALUE_OR_NULL,/* points to map elem value or NULL */
Edward Creef1174f72017-08-07 15:26:19 +0100293 PTR_TO_STACK, /* reg == frame_pointer + offset */
Daniel Borkmannde8f3a82017-09-25 02:25:51 +0200294 PTR_TO_PACKET_META, /* skb->data - meta_len */
Edward Creef1174f72017-08-07 15:26:19 +0100295 PTR_TO_PACKET, /* reg points to skb->data */
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700296 PTR_TO_PACKET_END, /* skb->data + headlen */
Petar Penkovd58e4682018-09-14 07:46:18 -0700297 PTR_TO_FLOW_KEYS, /* reg points to bpf_flow_keys */
Joe Stringerc64b7982018-10-02 13:35:33 -0700298 PTR_TO_SOCKET, /* reg points to struct bpf_sock */
299 PTR_TO_SOCKET_OR_NULL, /* reg points to struct bpf_sock or NULL */
Martin KaFai Lau46f8bc92019-02-09 23:22:20 -0800300 PTR_TO_SOCK_COMMON, /* reg points to sock_common */
301 PTR_TO_SOCK_COMMON_OR_NULL, /* reg points to sock_common or NULL */
Martin KaFai Lau655a51e2019-02-09 23:22:24 -0800302 PTR_TO_TCP_SOCK, /* reg points to struct tcp_sock */
303 PTR_TO_TCP_SOCK_OR_NULL, /* reg points to struct tcp_sock or NULL */
Matt Mullins9df1c282019-04-26 11:49:47 -0700304 PTR_TO_TP_BUFFER, /* reg points to a writable raw tp's buffer */
Jonathan Lemonfada7fd2019-06-06 13:59:40 -0700305 PTR_TO_XDP_SOCK, /* reg points to struct xdp_sock */
Alexei Starovoitov9e15db62019-10-15 20:25:00 -0700306 PTR_TO_BTF_ID, /* reg points to kernel struct */
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700307};
308
Yonghong Song23994632017-06-22 15:07:39 -0700309/* The information passed from prog-specific *_is_valid_access
310 * back to the verifier.
311 */
312struct bpf_insn_access_aux {
313 enum bpf_reg_type reg_type;
Alexei Starovoitov9e15db62019-10-15 20:25:00 -0700314 union {
315 int ctx_field_size;
316 u32 btf_id;
317 };
318 struct bpf_verifier_log *log; /* for verbose logs */
Yonghong Song23994632017-06-22 15:07:39 -0700319};
320
Daniel Borkmannf96da092017-07-02 02:13:27 +0200321static inline void
322bpf_ctx_record_field_size(struct bpf_insn_access_aux *aux, u32 size)
323{
324 aux->ctx_field_size = size;
325}
326
Jakub Kicinski7de16e32017-10-16 16:40:53 -0700327struct bpf_prog_ops {
328 int (*test_run)(struct bpf_prog *prog, const union bpf_attr *kattr,
329 union bpf_attr __user *uattr);
330};
331
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700332struct bpf_verifier_ops {
333 /* return eBPF function prototype for verification */
Andrey Ignatov5e43f892018-03-30 15:08:00 -0700334 const struct bpf_func_proto *
335 (*get_func_proto)(enum bpf_func_id func_id,
336 const struct bpf_prog *prog);
Alexei Starovoitov17a52672014-09-26 00:17:06 -0700337
338 /* return true if 'size' wide access at offset 'off' within bpf_context
339 * with 'type' (read or write) is allowed
340 */
Alexei Starovoitov19de99f2016-06-15 18:25:38 -0700341 bool (*is_valid_access)(int off, int size, enum bpf_access_type type,
Andrey Ignatov5e43f892018-03-30 15:08:00 -0700342 const struct bpf_prog *prog,
Yonghong Song23994632017-06-22 15:07:39 -0700343 struct bpf_insn_access_aux *info);
Daniel Borkmann36bbef52016-09-20 00:26:13 +0200344 int (*gen_prologue)(struct bpf_insn *insn, bool direct_write,
345 const struct bpf_prog *prog);
Daniel Borkmanne0cea7c2018-05-04 01:08:14 +0200346 int (*gen_ld_abs)(const struct bpf_insn *orig,
347 struct bpf_insn *insn_buf);
Daniel Borkmann6b8cc1d2017-01-12 11:51:32 +0100348 u32 (*convert_ctx_access)(enum bpf_access_type type,
349 const struct bpf_insn *src,
350 struct bpf_insn *dst,
Daniel Borkmannf96da092017-07-02 02:13:27 +0200351 struct bpf_prog *prog, u32 *target_size);
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700352};
353
Jakub Kicinskicae19272017-12-27 18:39:05 -0800354struct bpf_prog_offload_ops {
Jakub Kicinski08ca90a2019-01-22 22:45:24 -0800355 /* verifier basic callbacks */
Jakub Kicinskicae19272017-12-27 18:39:05 -0800356 int (*insn_hook)(struct bpf_verifier_env *env,
357 int insn_idx, int prev_insn_idx);
Quentin Monnetc941ce92018-10-07 12:56:47 +0100358 int (*finalize)(struct bpf_verifier_env *env);
Jakub Kicinski08ca90a2019-01-22 22:45:24 -0800359 /* verifier optimization callbacks (called after .finalize) */
360 int (*replace_insn)(struct bpf_verifier_env *env, u32 off,
361 struct bpf_insn *insn);
362 int (*remove_insns)(struct bpf_verifier_env *env, u32 off, u32 cnt);
363 /* program management callbacks */
Quentin Monnet16a8cb5c2018-11-09 13:03:32 +0000364 int (*prepare)(struct bpf_prog *prog);
365 int (*translate)(struct bpf_prog *prog);
Quentin Monneteb911942018-11-09 13:03:30 +0000366 void (*destroy)(struct bpf_prog *prog);
Jakub Kicinskicae19272017-12-27 18:39:05 -0800367};
368
Jakub Kicinski0a9c1992018-01-11 20:29:07 -0800369struct bpf_prog_offload {
Jakub Kicinskiab3f0062017-11-03 13:56:17 -0700370 struct bpf_prog *prog;
371 struct net_device *netdev;
Quentin Monnet341b3e72018-11-09 13:03:26 +0000372 struct bpf_offload_dev *offdev;
Jakub Kicinskiab3f0062017-11-03 13:56:17 -0700373 void *dev_priv;
374 struct list_head offloads;
375 bool dev_state;
Jakub Kicinski08ca90a2019-01-22 22:45:24 -0800376 bool opt_failed;
Jiong Wangfcfb1262018-01-16 16:05:19 -0800377 void *jited_image;
378 u32 jited_len;
Jakub Kicinskiab3f0062017-11-03 13:56:17 -0700379};
380
Roman Gushchin8bad74f2018-09-28 14:45:36 +0000381enum bpf_cgroup_storage_type {
382 BPF_CGROUP_STORAGE_SHARED,
Roman Gushchinb741f162018-09-28 14:45:43 +0000383 BPF_CGROUP_STORAGE_PERCPU,
Roman Gushchin8bad74f2018-09-28 14:45:36 +0000384 __BPF_CGROUP_STORAGE_MAX
385};
386
387#define MAX_BPF_CGROUP_STORAGE_TYPE __BPF_CGROUP_STORAGE_MAX
388
Alexei Starovoitovf1b95092019-10-30 15:32:11 -0700389/* The longest tracepoint has 12 args.
390 * See include/trace/bpf_probe.h
391 */
392#define MAX_BPF_FUNC_ARGS 12
393
Alexei Starovoitov492ecee2019-02-25 14:28:39 -0800394struct bpf_prog_stats {
395 u64 cnt;
396 u64 nsecs;
397 struct u64_stats_sync syncp;
Eric Dumazet84a081f2019-10-11 11:11:40 -0700398} __aligned(2 * sizeof(u64));
Alexei Starovoitov492ecee2019-02-25 14:28:39 -0800399
Alexei Starovoitovfec56f52019-11-14 10:57:04 -0800400struct btf_func_model {
401 u8 ret_size;
402 u8 nr_args;
403 u8 arg_size[MAX_BPF_FUNC_ARGS];
404};
405
406/* Restore arguments before returning from trampoline to let original function
407 * continue executing. This flag is used for fentry progs when there are no
408 * fexit progs.
409 */
410#define BPF_TRAMP_F_RESTORE_REGS BIT(0)
411/* Call original function after fentry progs, but before fexit progs.
412 * Makes sense for fentry/fexit, normal calls and indirect calls.
413 */
414#define BPF_TRAMP_F_CALL_ORIG BIT(1)
415/* Skip current frame and return to parent. Makes sense for fentry/fexit
416 * programs only. Should not be used with normal calls and indirect calls.
417 */
418#define BPF_TRAMP_F_SKIP_FRAME BIT(2)
419
420/* Different use cases for BPF trampoline:
421 * 1. replace nop at the function entry (kprobe equivalent)
422 * flags = BPF_TRAMP_F_RESTORE_REGS
423 * fentry = a set of programs to run before returning from trampoline
424 *
425 * 2. replace nop at the function entry (kprobe + kretprobe equivalent)
426 * flags = BPF_TRAMP_F_CALL_ORIG | BPF_TRAMP_F_SKIP_FRAME
427 * orig_call = fentry_ip + MCOUNT_INSN_SIZE
428 * fentry = a set of program to run before calling original function
429 * fexit = a set of program to run after original function
430 *
431 * 3. replace direct call instruction anywhere in the function body
432 * or assign a function pointer for indirect call (like tcp_congestion_ops->cong_avoid)
433 * With flags = 0
434 * fentry = a set of programs to run before returning from trampoline
435 * With flags = BPF_TRAMP_F_CALL_ORIG
436 * orig_call = original callback addr or direct function addr
437 * fentry = a set of program to run before calling original function
438 * fexit = a set of program to run after original function
439 */
440int arch_prepare_bpf_trampoline(void *image, struct btf_func_model *m, u32 flags,
441 struct bpf_prog **fentry_progs, int fentry_cnt,
442 struct bpf_prog **fexit_progs, int fexit_cnt,
443 void *orig_call);
444/* these two functions are called from generated trampoline */
445u64 notrace __bpf_prog_enter(void);
446void notrace __bpf_prog_exit(struct bpf_prog *prog, u64 start);
447
448enum bpf_tramp_prog_type {
449 BPF_TRAMP_FENTRY,
450 BPF_TRAMP_FEXIT,
451 BPF_TRAMP_MAX
452};
453
454struct bpf_trampoline {
455 /* hlist for trampoline_table */
456 struct hlist_node hlist;
457 /* serializes access to fields of this trampoline */
458 struct mutex mutex;
459 refcount_t refcnt;
460 u64 key;
461 struct {
462 struct btf_func_model model;
463 void *addr;
464 } func;
465 /* list of BPF programs using this trampoline */
466 struct hlist_head progs_hlist[BPF_TRAMP_MAX];
467 /* Number of attached programs. A counter per kind. */
468 int progs_cnt[BPF_TRAMP_MAX];
469 /* Executable image of trampoline */
470 void *image;
471 u64 selector;
472};
Björn Töpel75ccbef2019-12-13 18:51:08 +0100473
Björn Töpel116eb782019-12-13 18:51:12 +0100474#define BPF_DISPATCHER_MAX 48 /* Fits in 2048B */
Björn Töpel75ccbef2019-12-13 18:51:08 +0100475
476struct bpf_dispatcher_prog {
477 struct bpf_prog *prog;
478 refcount_t users;
479};
480
481struct bpf_dispatcher {
482 /* dispatcher mutex */
483 struct mutex mutex;
484 void *func;
485 struct bpf_dispatcher_prog progs[BPF_DISPATCHER_MAX];
486 int num_progs;
487 void *image;
488 u32 image_off;
489};
490
Björn Töpel7e6897f2019-12-13 18:51:09 +0100491static __always_inline unsigned int bpf_dispatcher_nopfunc(
492 const void *ctx,
493 const struct bpf_insn *insnsi,
494 unsigned int (*bpf_func)(const void *,
495 const struct bpf_insn *))
496{
497 return bpf_func(ctx, insnsi);
498}
Alexei Starovoitovfec56f52019-11-14 10:57:04 -0800499#ifdef CONFIG_BPF_JIT
500struct bpf_trampoline *bpf_trampoline_lookup(u64 key);
501int bpf_trampoline_link_prog(struct bpf_prog *prog);
502int bpf_trampoline_unlink_prog(struct bpf_prog *prog);
503void bpf_trampoline_put(struct bpf_trampoline *tr);
Björn Töpel98e86272019-12-13 18:51:07 +0100504void *bpf_jit_alloc_exec_page(void);
Björn Töpel75ccbef2019-12-13 18:51:08 +0100505#define BPF_DISPATCHER_INIT(name) { \
506 .mutex = __MUTEX_INITIALIZER(name.mutex), \
507 .func = &name##func, \
508 .progs = {}, \
509 .num_progs = 0, \
510 .image = NULL, \
511 .image_off = 0 \
512}
513
514#define DEFINE_BPF_DISPATCHER(name) \
515 noinline unsigned int name##func( \
516 const void *ctx, \
517 const struct bpf_insn *insnsi, \
518 unsigned int (*bpf_func)(const void *, \
519 const struct bpf_insn *)) \
520 { \
521 return bpf_func(ctx, insnsi); \
522 } \
523 EXPORT_SYMBOL(name##func); \
524 struct bpf_dispatcher name = BPF_DISPATCHER_INIT(name);
525#define DECLARE_BPF_DISPATCHER(name) \
526 unsigned int name##func( \
527 const void *ctx, \
528 const struct bpf_insn *insnsi, \
529 unsigned int (*bpf_func)(const void *, \
530 const struct bpf_insn *)); \
531 extern struct bpf_dispatcher name;
532#define BPF_DISPATCHER_FUNC(name) name##func
533#define BPF_DISPATCHER_PTR(name) (&name)
534void bpf_dispatcher_change_prog(struct bpf_dispatcher *d, struct bpf_prog *from,
535 struct bpf_prog *to);
Alexei Starovoitovfec56f52019-11-14 10:57:04 -0800536#else
537static inline struct bpf_trampoline *bpf_trampoline_lookup(u64 key)
538{
539 return NULL;
540}
541static inline int bpf_trampoline_link_prog(struct bpf_prog *prog)
542{
543 return -ENOTSUPP;
544}
545static inline int bpf_trampoline_unlink_prog(struct bpf_prog *prog)
546{
547 return -ENOTSUPP;
548}
549static inline void bpf_trampoline_put(struct bpf_trampoline *tr) {}
Björn Töpel75ccbef2019-12-13 18:51:08 +0100550#define DEFINE_BPF_DISPATCHER(name)
551#define DECLARE_BPF_DISPATCHER(name)
552#define BPF_DISPATCHER_FUNC(name) bpf_dispatcher_nopfunc
553#define BPF_DISPATCHER_PTR(name) NULL
554static inline void bpf_dispatcher_change_prog(struct bpf_dispatcher *d,
555 struct bpf_prog *from,
556 struct bpf_prog *to) {}
Alexei Starovoitovfec56f52019-11-14 10:57:04 -0800557#endif
558
Alexei Starovoitov8c1b6e62019-11-14 10:57:16 -0800559struct bpf_func_info_aux {
560 bool unreliable;
561};
562
Daniel Borkmanna66886f2019-11-22 21:07:57 +0100563enum bpf_jit_poke_reason {
564 BPF_POKE_REASON_TAIL_CALL,
565};
566
567/* Descriptor of pokes pointing /into/ the JITed image. */
568struct bpf_jit_poke_descriptor {
569 void *ip;
570 union {
571 struct {
572 struct bpf_map *map;
573 u32 key;
574 } tail_call;
575 };
576 bool ip_stable;
577 u8 adj_off;
578 u16 reason;
579};
580
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700581struct bpf_prog_aux {
Andrii Nakryiko85192dbf2019-11-17 09:28:03 -0800582 atomic64_t refcnt;
Daniel Borkmann24701ec2015-03-01 12:31:47 +0100583 u32 used_map_cnt;
Alexei Starovoitov32bbe002016-04-06 18:43:28 -0700584 u32 max_ctx_offset;
Jiong Wange6478152018-11-08 04:08:42 -0500585 u32 max_pkt_offset;
Matt Mullins9df1c282019-04-26 11:49:47 -0700586 u32 max_tp_access;
Alexei Starovoitov87266792017-05-30 13:31:29 -0700587 u32 stack_depth;
Martin KaFai Laudc4bb0e2017-06-05 12:15:46 -0700588 u32 id;
Yonghong Songba64e7d2018-11-24 23:20:44 -0800589 u32 func_cnt; /* used by non-func prog as the number of func progs */
590 u32 func_idx; /* 0 for non-func prog, the index in func array for func prog */
Alexei Starovoitovccfe29eb22019-10-15 20:24:58 -0700591 u32 attach_btf_id; /* in-kernel BTF type id to attach to */
Alexei Starovoitov5b92a282019-11-14 10:57:17 -0800592 struct bpf_prog *linked_prog;
Jiong Wanga4b1d3c2019-05-24 23:25:15 +0100593 bool verifier_zext; /* Zero extensions has been inserted by verifier. */
Jakub Kicinski9a18eed2017-12-27 18:39:04 -0800594 bool offload_requested;
Martin KaFai Lau38207292019-10-24 17:18:11 -0700595 bool attach_btf_trace; /* true if attaching to BTF-enabled raw tp */
Alexei Starovoitov8c1b6e62019-11-14 10:57:16 -0800596 bool func_proto_unreliable;
Alexei Starovoitovfec56f52019-11-14 10:57:04 -0800597 enum bpf_tramp_prog_type trampoline_prog_type;
598 struct bpf_trampoline *trampoline;
599 struct hlist_node tramp_hlist;
Martin KaFai Lau38207292019-10-24 17:18:11 -0700600 /* BTF_KIND_FUNC_PROTO for valid attach_btf_id */
601 const struct btf_type *attach_func_proto;
602 /* function name for valid attach_btf_id */
603 const char *attach_func_name;
Alexei Starovoitov1c2a0882017-12-14 17:55:15 -0800604 struct bpf_prog **func;
605 void *jit_data; /* JIT specific data. arch dependent */
Daniel Borkmanna66886f2019-11-22 21:07:57 +0100606 struct bpf_jit_poke_descriptor *poke_tab;
607 u32 size_poke_tab;
Daniel Borkmann74451e662017-02-16 22:24:50 +0100608 struct latch_tree_node ksym_tnode;
609 struct list_head ksym_lnode;
Jakub Kicinski7de16e32017-10-16 16:40:53 -0700610 const struct bpf_prog_ops *ops;
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700611 struct bpf_map **used_maps;
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700612 struct bpf_prog *prog;
Alexei Starovoitovaaac3ba2015-10-07 22:23:22 -0700613 struct user_struct *user;
Martin KaFai Laucb4d2b32017-09-27 14:37:52 -0700614 u64 load_time; /* ns since boottime */
Roman Gushchin8bad74f2018-09-28 14:45:36 +0000615 struct bpf_map *cgroup_storage[MAX_BPF_CGROUP_STORAGE_TYPE];
Martin KaFai Lau067cae42017-10-05 21:52:12 -0700616 char name[BPF_OBJ_NAME_LEN];
Chenbo Fengafdb09c2017-10-18 13:00:24 -0700617#ifdef CONFIG_SECURITY
618 void *security;
619#endif
Jakub Kicinski0a9c1992018-01-11 20:29:07 -0800620 struct bpf_prog_offload *offload;
Yonghong Song838e9692018-11-19 15:29:11 -0800621 struct btf *btf;
Yonghong Songba64e7d2018-11-24 23:20:44 -0800622 struct bpf_func_info *func_info;
Alexei Starovoitov8c1b6e62019-11-14 10:57:16 -0800623 struct bpf_func_info_aux *func_info_aux;
Martin KaFai Lauc454a462018-12-07 16:42:25 -0800624 /* bpf_line_info loaded from userspace. linfo->insn_off
625 * has the xlated insn offset.
626 * Both the main and sub prog share the same linfo.
627 * The subprog can access its first linfo by
628 * using the linfo_idx.
629 */
630 struct bpf_line_info *linfo;
631 /* jited_linfo is the jited addr of the linfo. It has a
632 * one to one mapping to linfo:
633 * jited_linfo[i] is the jited addr for the linfo[i]->insn_off.
634 * Both the main and sub prog share the same jited_linfo.
635 * The subprog can access its first jited_linfo by
636 * using the linfo_idx.
637 */
638 void **jited_linfo;
Yonghong Songba64e7d2018-11-24 23:20:44 -0800639 u32 func_info_cnt;
Martin KaFai Lauc454a462018-12-07 16:42:25 -0800640 u32 nr_linfo;
641 /* subprog can use linfo_idx to access its first linfo and
642 * jited_linfo.
643 * main prog always has linfo_idx == 0
644 */
645 u32 linfo_idx;
Alexei Starovoitov3dec5412019-10-15 20:25:03 -0700646 u32 num_exentries;
647 struct exception_table_entry *extable;
Alexei Starovoitov492ecee2019-02-25 14:28:39 -0800648 struct bpf_prog_stats __percpu *stats;
Alexei Starovoitovabf2e7d2015-05-28 19:26:02 -0700649 union {
650 struct work_struct work;
651 struct rcu_head rcu;
652 };
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700653};
654
Daniel Borkmann2beee5f2019-11-22 21:07:56 +0100655struct bpf_array_aux {
656 /* 'Ownership' of prog array is claimed by the first program that
657 * is going to use this map or by the first program which FD is
658 * stored in the map to make sure that all callers and callees have
659 * the same prog type and JITed flag.
660 */
661 enum bpf_prog_type type;
662 bool jited;
Daniel Borkmannda765a22019-11-22 21:07:58 +0100663 /* Programs with direct jumps into programs part of this array. */
664 struct list_head poke_progs;
665 struct bpf_map *map;
666 struct mutex poke_mutex;
667 struct work_struct work;
Daniel Borkmann2beee5f2019-11-22 21:07:56 +0100668};
669
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700670struct bpf_array {
671 struct bpf_map map;
672 u32 elem_size;
Alexei Starovoitovb2157392018-01-07 17:33:02 -0800673 u32 index_mask;
Daniel Borkmann2beee5f2019-11-22 21:07:56 +0100674 struct bpf_array_aux *aux;
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700675 union {
676 char value[0] __aligned(8);
Wang Nan2a36f0b2015-08-06 07:02:33 +0000677 void *ptrs[0] __aligned(8);
Alexei Starovoitova10423b2016-02-01 22:39:54 -0800678 void __percpu *pptrs[0] __aligned(8);
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700679 };
680};
Daniel Borkmann3b1efb12016-06-15 22:47:14 +0200681
Alexei Starovoitovc04c0d22019-04-01 21:27:45 -0700682#define BPF_COMPLEXITY_LIMIT_INSNS 1000000 /* yes. 1M insns */
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700683#define MAX_TAIL_CALL_CNT 32
684
Daniel Borkmann591fe982019-04-09 23:20:05 +0200685#define BPF_F_ACCESS_MASK (BPF_F_RDONLY | \
686 BPF_F_RDONLY_PROG | \
687 BPF_F_WRONLY | \
688 BPF_F_WRONLY_PROG)
689
690#define BPF_MAP_CAN_READ BIT(0)
691#define BPF_MAP_CAN_WRITE BIT(1)
692
693static inline u32 bpf_map_flags_to_cap(struct bpf_map *map)
694{
695 u32 access_flags = map->map_flags & (BPF_F_RDONLY_PROG | BPF_F_WRONLY_PROG);
696
697 /* Combination of BPF_F_RDONLY_PROG | BPF_F_WRONLY_PROG is
698 * not possible.
699 */
700 if (access_flags & BPF_F_RDONLY_PROG)
701 return BPF_MAP_CAN_READ;
702 else if (access_flags & BPF_F_WRONLY_PROG)
703 return BPF_MAP_CAN_WRITE;
704 else
705 return BPF_MAP_CAN_READ | BPF_MAP_CAN_WRITE;
706}
707
708static inline bool bpf_map_flags_access_ok(u32 access_flags)
709{
710 return (access_flags & (BPF_F_RDONLY_PROG | BPF_F_WRONLY_PROG)) !=
711 (BPF_F_RDONLY_PROG | BPF_F_WRONLY_PROG);
712}
713
Daniel Borkmann3b1efb12016-06-15 22:47:14 +0200714struct bpf_event_entry {
715 struct perf_event *event;
716 struct file *perf_file;
717 struct file *map_file;
718 struct rcu_head rcu;
719};
720
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700721bool bpf_prog_array_compatible(struct bpf_array *array, const struct bpf_prog *fp);
Daniel Borkmannf1f77142017-01-13 23:38:15 +0100722int bpf_prog_calc_tag(struct bpf_prog *fp);
Alexei Starovoitov9e15db62019-10-15 20:25:00 -0700723const char *kernel_type_name(u32 btf_type_id);
Daniel Borkmannbd570ff2016-04-18 21:01:24 +0200724
Alexei Starovoitov0756ea32015-06-12 19:39:13 -0700725const struct bpf_func_proto *bpf_get_trace_printk_proto(void);
Daniel Borkmann555c8a82016-07-14 18:08:05 +0200726
727typedef unsigned long (*bpf_ctx_copy_t)(void *dst, const void *src,
Daniel Borkmannaa7145c2016-07-22 01:19:42 +0200728 unsigned long off, unsigned long len);
Joe Stringerc64b7982018-10-02 13:35:33 -0700729typedef u32 (*bpf_convert_ctx_access_t)(enum bpf_access_type type,
730 const struct bpf_insn *src,
731 struct bpf_insn *dst,
732 struct bpf_prog *prog,
733 u32 *target_size);
Daniel Borkmann555c8a82016-07-14 18:08:05 +0200734
735u64 bpf_event_output(struct bpf_map *map, u64 flags, void *meta, u64 meta_size,
736 void *ctx, u64 ctx_size, bpf_ctx_copy_t ctx_copy);
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -0700737
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700738/* an array of programs to be executed under rcu_lock.
739 *
740 * Typical usage:
741 * ret = BPF_PROG_RUN_ARRAY(&bpf_prog_array, ctx, BPF_PROG_RUN);
742 *
743 * the structure returned by bpf_prog_array_alloc() should be populated
744 * with program pointers and the last pointer must be NULL.
745 * The user has to keep refcnt on the program and make sure the program
746 * is removed from the array before bpf_prog_put().
747 * The 'struct bpf_prog_array *' should only be replaced with xchg()
748 * since other cpus are walking the array of pointers in parallel.
749 */
Roman Gushchin394e40a2018-08-02 14:27:21 -0700750struct bpf_prog_array_item {
751 struct bpf_prog *prog;
Roman Gushchin8bad74f2018-09-28 14:45:36 +0000752 struct bpf_cgroup_storage *cgroup_storage[MAX_BPF_CGROUP_STORAGE_TYPE];
Roman Gushchin394e40a2018-08-02 14:27:21 -0700753};
754
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700755struct bpf_prog_array {
756 struct rcu_head rcu;
Roman Gushchin394e40a2018-08-02 14:27:21 -0700757 struct bpf_prog_array_item items[0];
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700758};
759
Roman Gushchind29ab6e2018-07-13 12:41:10 -0700760struct bpf_prog_array *bpf_prog_array_alloc(u32 prog_cnt, gfp_t flags);
Stanislav Fomichev54e9c9d2019-05-28 14:14:41 -0700761void bpf_prog_array_free(struct bpf_prog_array *progs);
762int bpf_prog_array_length(struct bpf_prog_array *progs);
Stanislav Fomichev0d01da62019-06-27 13:38:47 -0700763bool bpf_prog_array_is_empty(struct bpf_prog_array *array);
Stanislav Fomichev54e9c9d2019-05-28 14:14:41 -0700764int bpf_prog_array_copy_to_user(struct bpf_prog_array *progs,
Alexei Starovoitov468e2f62017-10-02 22:50:22 -0700765 __u32 __user *prog_ids, u32 cnt);
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700766
Stanislav Fomichev54e9c9d2019-05-28 14:14:41 -0700767void bpf_prog_array_delete_safe(struct bpf_prog_array *progs,
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700768 struct bpf_prog *old_prog);
Stanislav Fomichev54e9c9d2019-05-28 14:14:41 -0700769int bpf_prog_array_copy_info(struct bpf_prog_array *array,
Yonghong Song3a38bb92018-04-10 09:37:32 -0700770 u32 *prog_ids, u32 request_cnt,
771 u32 *prog_cnt);
Stanislav Fomichev54e9c9d2019-05-28 14:14:41 -0700772int bpf_prog_array_copy(struct bpf_prog_array *old_array,
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700773 struct bpf_prog *exclude_prog,
774 struct bpf_prog *include_prog,
775 struct bpf_prog_array **new_array);
776
777#define __BPF_PROG_RUN_ARRAY(array, ctx, func, check_non_null) \
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700778 ({ \
Roman Gushchin394e40a2018-08-02 14:27:21 -0700779 struct bpf_prog_array_item *_item; \
780 struct bpf_prog *_prog; \
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700781 struct bpf_prog_array *_array; \
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700782 u32 _ret = 1; \
Roman Gushchin6899b322018-04-23 18:09:21 +0100783 preempt_disable(); \
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700784 rcu_read_lock(); \
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700785 _array = rcu_dereference(array); \
786 if (unlikely(check_non_null && !_array))\
787 goto _out; \
Roman Gushchin394e40a2018-08-02 14:27:21 -0700788 _item = &_array->items[0]; \
789 while ((_prog = READ_ONCE(_item->prog))) { \
790 bpf_cgroup_storage_set(_item->cgroup_storage); \
791 _ret &= func(_prog, ctx); \
792 _item++; \
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700793 } \
794_out: \
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700795 rcu_read_unlock(); \
Peter Zijlstra0edd6b62019-04-23 21:55:59 +0200796 preempt_enable(); \
Alexei Starovoitov324bda9e62017-10-02 22:50:21 -0700797 _ret; \
798 })
799
brakmo1f52f6c2019-05-28 16:59:35 -0700800/* To be used by __cgroup_bpf_run_filter_skb for EGRESS BPF progs
801 * so BPF programs can request cwr for TCP packets.
802 *
803 * Current cgroup skb programs can only return 0 or 1 (0 to drop the
804 * packet. This macro changes the behavior so the low order bit
805 * indicates whether the packet should be dropped (0) or not (1)
806 * and the next bit is a congestion notification bit. This could be
807 * used by TCP to call tcp_enter_cwr()
808 *
809 * Hence, new allowed return values of CGROUP EGRESS BPF programs are:
810 * 0: drop packet
811 * 1: keep packet
812 * 2: drop packet and cn
813 * 3: keep packet and cn
814 *
815 * This macro then converts it to one of the NET_XMIT or an error
816 * code that is then interpreted as drop packet (and no cn):
817 * 0: NET_XMIT_SUCCESS skb should be transmitted
818 * 1: NET_XMIT_DROP skb should be dropped and cn
819 * 2: NET_XMIT_CN skb should be transmitted and cn
820 * 3: -EPERM skb should be dropped
821 */
822#define BPF_PROG_CGROUP_INET_EGRESS_RUN_ARRAY(array, ctx, func) \
823 ({ \
824 struct bpf_prog_array_item *_item; \
825 struct bpf_prog *_prog; \
826 struct bpf_prog_array *_array; \
827 u32 ret; \
828 u32 _ret = 1; \
829 u32 _cn = 0; \
830 preempt_disable(); \
831 rcu_read_lock(); \
832 _array = rcu_dereference(array); \
833 _item = &_array->items[0]; \
834 while ((_prog = READ_ONCE(_item->prog))) { \
835 bpf_cgroup_storage_set(_item->cgroup_storage); \
836 ret = func(_prog, ctx); \
837 _ret &= (ret & 1); \
838 _cn |= (ret & 2); \
839 _item++; \
840 } \
841 rcu_read_unlock(); \
842 preempt_enable(); \
843 if (_ret) \
844 _ret = (_cn ? NET_XMIT_CN : NET_XMIT_SUCCESS); \
845 else \
846 _ret = (_cn ? NET_XMIT_DROP : -EPERM); \
847 _ret; \
848 })
849
Yonghong Songe87c6bc382017-10-23 23:53:08 -0700850#define BPF_PROG_RUN_ARRAY(array, ctx, func) \
851 __BPF_PROG_RUN_ARRAY(array, ctx, func, false)
852
853#define BPF_PROG_RUN_ARRAY_CHECK(array, ctx, func) \
854 __BPF_PROG_RUN_ARRAY(array, ctx, func, true)
855
Alexei Starovoitov89aa0752014-12-01 15:06:35 -0800856#ifdef CONFIG_BPF_SYSCALL
Alexei Starovoitovb121d1e2016-03-07 21:57:13 -0800857DECLARE_PER_CPU(int, bpf_prog_active);
858
Chenbo Fengf66e4482017-10-18 13:00:26 -0700859extern const struct file_operations bpf_map_fops;
860extern const struct file_operations bpf_prog_fops;
861
Alexei Starovoitov91cc1a92019-11-14 10:57:15 -0800862#define BPF_PROG_TYPE(_id, _name, prog_ctx_type, kern_ctx_type) \
Jakub Kicinski7de16e32017-10-16 16:40:53 -0700863 extern const struct bpf_prog_ops _name ## _prog_ops; \
864 extern const struct bpf_verifier_ops _name ## _verifier_ops;
Johannes Berg40077e02017-04-11 15:34:58 +0200865#define BPF_MAP_TYPE(_id, _ops) \
866 extern const struct bpf_map_ops _ops;
Johannes Bergbe9370a2017-04-11 15:34:57 +0200867#include <linux/bpf_types.h>
868#undef BPF_PROG_TYPE
Johannes Berg40077e02017-04-11 15:34:58 +0200869#undef BPF_MAP_TYPE
Daniel Borkmann0fc174d2015-03-01 12:31:44 +0100870
Jakub Kicinskiab3f0062017-11-03 13:56:17 -0700871extern const struct bpf_prog_ops bpf_offload_prog_ops;
Jakub Kicinski4f9218a2017-10-16 16:40:55 -0700872extern const struct bpf_verifier_ops tc_cls_act_analyzer_ops;
873extern const struct bpf_verifier_ops xdp_analyzer_ops;
874
Alexei Starovoitov09756af2014-09-26 00:17:00 -0700875struct bpf_prog *bpf_prog_get(u32 ufd);
Jakub Kicinski248f3462017-11-03 13:56:20 -0700876struct bpf_prog *bpf_prog_get_type_dev(u32 ufd, enum bpf_prog_type type,
Jakub Kicinski288b3de52017-11-20 15:21:54 -0800877 bool attach_drv);
Andrii Nakryiko85192dbf2019-11-17 09:28:03 -0800878void bpf_prog_add(struct bpf_prog *prog, int i);
Daniel Borkmannc5405942016-11-09 22:02:34 +0100879void bpf_prog_sub(struct bpf_prog *prog, int i);
Andrii Nakryiko85192dbf2019-11-17 09:28:03 -0800880void bpf_prog_inc(struct bpf_prog *prog);
John Fastabenda6f6df62017-08-15 22:32:22 -0700881struct bpf_prog * __must_check bpf_prog_inc_not_zero(struct bpf_prog *prog);
Daniel Borkmann61e021f32015-03-02 15:21:55 +0100882void bpf_prog_put(struct bpf_prog *prog);
Daniel Borkmann5ccb0712016-12-18 01:52:58 +0100883int __bpf_prog_charge(struct user_struct *user, u32 pages);
884void __bpf_prog_uncharge(struct user_struct *user, u32 pages);
Daniel Borkmann61e021f32015-03-02 15:21:55 +0100885
Jakub Kicinskiad8ad792017-12-27 18:39:07 -0800886void bpf_prog_free_id(struct bpf_prog *prog, bool do_idr_lock);
Jakub Kicinskia3884572018-01-11 20:29:09 -0800887void bpf_map_free_id(struct bpf_map *map, bool do_idr_lock);
Jakub Kicinskiad8ad792017-12-27 18:39:07 -0800888
Daniel Borkmannc9da1612015-11-24 21:28:15 +0100889struct bpf_map *bpf_map_get_with_uref(u32 ufd);
Daniel Borkmannc2101292015-10-29 14:58:07 +0100890struct bpf_map *__bpf_map_get(struct fd f);
Andrii Nakryiko1e0bd5a2019-11-17 09:28:02 -0800891void bpf_map_inc(struct bpf_map *map);
892void bpf_map_inc_with_uref(struct bpf_map *map);
893struct bpf_map * __must_check bpf_map_inc_not_zero(struct bpf_map *map);
Daniel Borkmannc9da1612015-11-24 21:28:15 +0100894void bpf_map_put_with_uref(struct bpf_map *map);
Daniel Borkmann61e021f32015-03-02 15:21:55 +0100895void bpf_map_put(struct bpf_map *map);
Roman Gushchin0a4c58f2018-08-02 14:27:17 -0700896int bpf_map_charge_memlock(struct bpf_map *map, u32 pages);
897void bpf_map_uncharge_memlock(struct bpf_map *map, u32 pages);
Daniel Borkmann196e8ca2019-11-20 23:04:44 +0100898int bpf_map_charge_init(struct bpf_map_memory *mem, u64 size);
Roman Gushchinb936ca62019-05-29 18:03:58 -0700899void bpf_map_charge_finish(struct bpf_map_memory *mem);
900void bpf_map_charge_move(struct bpf_map_memory *dst,
901 struct bpf_map_memory *src);
Daniel Borkmann196e8ca2019-11-20 23:04:44 +0100902void *bpf_map_area_alloc(u64 size, int numa_node);
903void *bpf_map_area_mmapable_alloc(u64 size, int numa_node);
Daniel Borkmannd407bd22017-01-18 15:14:17 +0100904void bpf_map_area_free(void *base);
Jakub Kicinskibd475642018-01-11 20:29:06 -0800905void bpf_map_init_from_attr(struct bpf_map *map, union bpf_attr *attr);
Daniel Borkmann61e021f32015-03-02 15:21:55 +0100906
Alexei Starovoitov1be7f752015-10-07 22:23:21 -0700907extern int sysctl_unprivileged_bpf_disabled;
908
Chenbo Feng6e71b042017-10-18 13:00:22 -0700909int bpf_map_new_fd(struct bpf_map *map, int flags);
Daniel Borkmannb2197752015-10-29 14:58:09 +0100910int bpf_prog_new_fd(struct bpf_prog *prog);
911
912int bpf_obj_pin_user(u32 ufd, const char __user *pathname);
Chenbo Feng6e71b042017-10-18 13:00:22 -0700913int bpf_obj_get_user(const char __user *pathname, int flags);
Daniel Borkmannb2197752015-10-29 14:58:09 +0100914
Alexei Starovoitov15a07b32016-02-01 22:39:55 -0800915int bpf_percpu_hash_copy(struct bpf_map *map, void *key, void *value);
916int bpf_percpu_array_copy(struct bpf_map *map, void *key, void *value);
917int bpf_percpu_hash_update(struct bpf_map *map, void *key, void *value,
918 u64 flags);
919int bpf_percpu_array_update(struct bpf_map *map, void *key, void *value,
920 u64 flags);
Daniel Borkmannd056a782016-06-15 22:47:13 +0200921
Alexei Starovoitov557c0c62016-03-07 21:57:17 -0800922int bpf_stackmap_copy(struct bpf_map *map, void *key, void *value);
Alexei Starovoitov15a07b32016-02-01 22:39:55 -0800923
Daniel Borkmannd056a782016-06-15 22:47:13 +0200924int bpf_fd_array_map_update_elem(struct bpf_map *map, struct file *map_file,
925 void *key, void *value, u64 map_flags);
Martin KaFai Lau14dc6f02017-06-27 23:08:34 -0700926int bpf_fd_array_map_lookup_elem(struct bpf_map *map, void *key, u32 *value);
Martin KaFai Laubcc6b1b2017-03-22 10:00:34 -0700927int bpf_fd_htab_map_update_elem(struct bpf_map *map, struct file *map_file,
928 void *key, void *value, u64 map_flags);
Martin KaFai Lau14dc6f02017-06-27 23:08:34 -0700929int bpf_fd_htab_map_lookup_elem(struct bpf_map *map, void *key, u32 *value);
Daniel Borkmannd056a782016-06-15 22:47:13 +0200930
Chenbo Feng6e71b042017-10-18 13:00:22 -0700931int bpf_get_file_flag(int flags);
Martin KaFai Laudcab51f2018-05-22 15:03:31 -0700932int bpf_check_uarg_tail_zero(void __user *uaddr, size_t expected_size,
933 size_t actual_size);
Chenbo Feng6e71b042017-10-18 13:00:22 -0700934
Alexei Starovoitov15a07b32016-02-01 22:39:55 -0800935/* memcpy that is used with 8-byte aligned pointers, power-of-8 size and
936 * forced to use 'long' read/writes to try to atomically copy long counters.
937 * Best-effort only. No barriers here, since it _will_ race with concurrent
938 * updates from BPF programs. Called from bpf syscall and mostly used with
939 * size 8 or 16 bytes, so ask compiler to inline it.
940 */
941static inline void bpf_long_memcpy(void *dst, const void *src, u32 size)
942{
943 const long *lsrc = src;
944 long *ldst = dst;
945
946 size /= sizeof(long);
947 while (size--)
948 *ldst++ = *lsrc++;
949}
950
Daniel Borkmann61e021f32015-03-02 15:21:55 +0100951/* verify correctness of eBPF program */
Yonghong Song838e9692018-11-19 15:29:11 -0800952int bpf_check(struct bpf_prog **fp, union bpf_attr *attr,
953 union bpf_attr __user *uattr);
Alexei Starovoitov1ea47e02017-12-14 17:55:13 -0800954void bpf_patch_call_args(struct bpf_insn *insn, u32 stack_depth);
John Fastabend46f55cf2017-07-17 21:56:48 -0700955
956/* Map specifics */
Jesper Dangaard Brouer67f29e02018-05-24 16:45:46 +0200957struct xdp_buff;
Toshiaki Makita6d5fc192018-06-14 11:07:42 +0900958struct sk_buff;
Jesper Dangaard Brouer67f29e02018-05-24 16:45:46 +0200959
960struct bpf_dtab_netdev *__dev_map_lookup_elem(struct bpf_map *map, u32 key);
Toke Høiland-Jørgensen6f9d4512019-07-26 18:06:55 +0200961struct bpf_dtab_netdev *__dev_map_hash_lookup_elem(struct bpf_map *map, u32 key);
Björn Töpel96360002019-12-19 07:10:03 +0100962void __dev_map_flush(void);
Jesper Dangaard Brouer38edddb2018-05-24 16:45:57 +0200963int dev_map_enqueue(struct bpf_dtab_netdev *dst, struct xdp_buff *xdp,
964 struct net_device *dev_rx);
Toshiaki Makita6d5fc192018-06-14 11:07:42 +0900965int dev_map_generic_redirect(struct bpf_dtab_netdev *dst, struct sk_buff *skb,
966 struct bpf_prog *xdp_prog);
John Fastabend46f55cf2017-07-17 21:56:48 -0700967
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +0200968struct bpf_cpu_map_entry *__cpu_map_lookup_elem(struct bpf_map *map, u32 key);
Björn Töpelcdfafe92019-12-19 07:10:04 +0100969void __cpu_map_flush(void);
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +0200970int cpu_map_enqueue(struct bpf_cpu_map_entry *rcpu, struct xdp_buff *xdp,
971 struct net_device *dev_rx);
972
Martin KaFai Lau96eabe72017-08-18 11:28:00 -0700973/* Return map's numa specified by userspace */
974static inline int bpf_map_attr_numa_node(const union bpf_attr *attr)
975{
976 return (attr->map_flags & BPF_F_NUMA_NODE) ?
977 attr->numa_node : NUMA_NO_NODE;
978}
979
Al Viro040ee692017-12-02 20:20:38 -0500980struct bpf_prog *bpf_prog_get_type_path(const char *name, enum bpf_prog_type type);
Martin KaFai Lau5dc4c4b2018-08-08 01:01:24 -0700981int array_map_alloc_check(union bpf_attr *attr);
Al Viro040ee692017-12-02 20:20:38 -0500982
Stanislav Fomichevc6958652019-04-11 09:12:02 -0700983int bpf_prog_test_run_xdp(struct bpf_prog *prog, const union bpf_attr *kattr,
984 union bpf_attr __user *uattr);
985int bpf_prog_test_run_skb(struct bpf_prog *prog, const union bpf_attr *kattr,
986 union bpf_attr __user *uattr);
987int bpf_prog_test_run_flow_dissector(struct bpf_prog *prog,
988 const union bpf_attr *kattr,
989 union bpf_attr __user *uattr);
Alexei Starovoitov9e15db62019-10-15 20:25:00 -0700990bool btf_ctx_access(int off, int size, enum bpf_access_type type,
991 const struct bpf_prog *prog,
992 struct bpf_insn_access_aux *info);
993int btf_struct_access(struct bpf_verifier_log *log,
994 const struct btf_type *t, int off, int size,
995 enum bpf_access_type atype,
996 u32 *next_btf_id);
Alexei Starovoitov9cc31b32019-11-14 10:57:14 -0800997int btf_resolve_helper_id(struct bpf_verifier_log *log,
998 const struct bpf_func_proto *fn, int);
Alexei Starovoitov9e15db62019-10-15 20:25:00 -0700999
Alexei Starovoitovfec56f52019-11-14 10:57:04 -08001000int btf_distill_func_proto(struct bpf_verifier_log *log,
1001 struct btf *btf,
1002 const struct btf_type *func_proto,
1003 const char *func_name,
1004 struct btf_func_model *m);
1005
Alexei Starovoitov8c1b6e62019-11-14 10:57:16 -08001006int btf_check_func_arg_match(struct bpf_verifier_env *env, int subprog);
1007
Björn Töpel7e6897f2019-12-13 18:51:09 +01001008struct bpf_prog *bpf_prog_by_id(u32 id);
1009
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +02001010#else /* !CONFIG_BPF_SYSCALL */
Daniel Borkmann0fc174d2015-03-01 12:31:44 +01001011static inline struct bpf_prog *bpf_prog_get(u32 ufd)
1012{
1013 return ERR_PTR(-EOPNOTSUPP);
1014}
1015
Jakub Kicinski248f3462017-11-03 13:56:20 -07001016static inline struct bpf_prog *bpf_prog_get_type_dev(u32 ufd,
1017 enum bpf_prog_type type,
Jakub Kicinski288b3de52017-11-20 15:21:54 -08001018 bool attach_drv)
Jakub Kicinski248f3462017-11-03 13:56:20 -07001019{
1020 return ERR_PTR(-EOPNOTSUPP);
1021}
1022
Andrii Nakryiko85192dbf2019-11-17 09:28:03 -08001023static inline void bpf_prog_add(struct bpf_prog *prog, int i)
Brenden Blancocc2e0b32016-07-20 07:55:52 -07001024{
Brenden Blancocc2e0b32016-07-20 07:55:52 -07001025}
Daniel Borkmann113214b2016-06-30 17:24:44 +02001026
Daniel Borkmannc5405942016-11-09 22:02:34 +01001027static inline void bpf_prog_sub(struct bpf_prog *prog, int i)
1028{
1029}
1030
Daniel Borkmann0fc174d2015-03-01 12:31:44 +01001031static inline void bpf_prog_put(struct bpf_prog *prog)
1032{
1033}
Daniel Borkmann6d67942dd2016-11-19 01:45:03 +01001034
Andrii Nakryiko85192dbf2019-11-17 09:28:03 -08001035static inline void bpf_prog_inc(struct bpf_prog *prog)
Alexei Starovoitovaa6a5f32016-09-01 18:37:24 -07001036{
Alexei Starovoitovaa6a5f32016-09-01 18:37:24 -07001037}
Daniel Borkmann5ccb0712016-12-18 01:52:58 +01001038
John Fastabenda6f6df62017-08-15 22:32:22 -07001039static inline struct bpf_prog *__must_check
1040bpf_prog_inc_not_zero(struct bpf_prog *prog)
1041{
1042 return ERR_PTR(-EOPNOTSUPP);
1043}
1044
Daniel Borkmann5ccb0712016-12-18 01:52:58 +01001045static inline int __bpf_prog_charge(struct user_struct *user, u32 pages)
1046{
1047 return 0;
1048}
1049
1050static inline void __bpf_prog_uncharge(struct user_struct *user, u32 pages)
1051{
1052}
John Fastabend46f55cf2017-07-17 21:56:48 -07001053
Chenbo Feng6e71b042017-10-18 13:00:22 -07001054static inline int bpf_obj_get_user(const char __user *pathname, int flags)
Shmulik Ladkani98589a02017-10-09 15:27:15 +03001055{
1056 return -EOPNOTSUPP;
1057}
1058
John Fastabend46f55cf2017-07-17 21:56:48 -07001059static inline struct net_device *__dev_map_lookup_elem(struct bpf_map *map,
1060 u32 key)
1061{
1062 return NULL;
1063}
1064
Toke Høiland-Jørgensen6f9d4512019-07-26 18:06:55 +02001065static inline struct net_device *__dev_map_hash_lookup_elem(struct bpf_map *map,
1066 u32 key)
1067{
1068 return NULL;
1069}
1070
Björn Töpel96360002019-12-19 07:10:03 +01001071static inline void __dev_map_flush(void)
John Fastabend46f55cf2017-07-17 21:56:48 -07001072{
1073}
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +02001074
Jesper Dangaard Brouer67f29e02018-05-24 16:45:46 +02001075struct xdp_buff;
1076struct bpf_dtab_netdev;
1077
1078static inline
Jesper Dangaard Brouer38edddb2018-05-24 16:45:57 +02001079int dev_map_enqueue(struct bpf_dtab_netdev *dst, struct xdp_buff *xdp,
1080 struct net_device *dev_rx)
Jesper Dangaard Brouer67f29e02018-05-24 16:45:46 +02001081{
1082 return 0;
1083}
1084
Toshiaki Makita6d5fc192018-06-14 11:07:42 +09001085struct sk_buff;
1086
1087static inline int dev_map_generic_redirect(struct bpf_dtab_netdev *dst,
1088 struct sk_buff *skb,
1089 struct bpf_prog *xdp_prog)
1090{
1091 return 0;
1092}
1093
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +02001094static inline
1095struct bpf_cpu_map_entry *__cpu_map_lookup_elem(struct bpf_map *map, u32 key)
1096{
1097 return NULL;
1098}
1099
Björn Töpelcdfafe92019-12-19 07:10:04 +01001100static inline void __cpu_map_flush(void)
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +02001101{
1102}
1103
Jesper Dangaard Brouer9c270af2017-10-16 12:19:34 +02001104static inline int cpu_map_enqueue(struct bpf_cpu_map_entry *rcpu,
1105 struct xdp_buff *xdp,
1106 struct net_device *dev_rx)
1107{
1108 return 0;
1109}
Al Viro040ee692017-12-02 20:20:38 -05001110
1111static inline struct bpf_prog *bpf_prog_get_type_path(const char *name,
1112 enum bpf_prog_type type)
1113{
1114 return ERR_PTR(-EOPNOTSUPP);
1115}
Stanislav Fomichevc6958652019-04-11 09:12:02 -07001116
1117static inline int bpf_prog_test_run_xdp(struct bpf_prog *prog,
1118 const union bpf_attr *kattr,
1119 union bpf_attr __user *uattr)
1120{
1121 return -ENOTSUPP;
1122}
1123
1124static inline int bpf_prog_test_run_skb(struct bpf_prog *prog,
1125 const union bpf_attr *kattr,
1126 union bpf_attr __user *uattr)
1127{
1128 return -ENOTSUPP;
1129}
1130
1131static inline int bpf_prog_test_run_flow_dissector(struct bpf_prog *prog,
1132 const union bpf_attr *kattr,
1133 union bpf_attr __user *uattr)
1134{
1135 return -ENOTSUPP;
1136}
Daniel Borkmann6332be02019-11-22 21:07:55 +01001137
1138static inline void bpf_map_put(struct bpf_map *map)
1139{
1140}
Björn Töpel7e6897f2019-12-13 18:51:09 +01001141
1142static inline struct bpf_prog *bpf_prog_by_id(u32 id)
1143{
1144 return ERR_PTR(-ENOTSUPP);
1145}
Daniel Borkmann61e021f32015-03-02 15:21:55 +01001146#endif /* CONFIG_BPF_SYSCALL */
Alexei Starovoitov09756af2014-09-26 00:17:00 -07001147
Jakub Kicinski479321e2017-11-20 15:21:56 -08001148static inline struct bpf_prog *bpf_prog_get_type(u32 ufd,
1149 enum bpf_prog_type type)
1150{
1151 return bpf_prog_get_type_dev(ufd, type, false);
1152}
1153
Al Viro040ee692017-12-02 20:20:38 -05001154bool bpf_prog_get_ok(struct bpf_prog *, enum bpf_prog_type *, bool);
1155
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001156int bpf_prog_offload_compile(struct bpf_prog *prog);
1157void bpf_prog_offload_destroy(struct bpf_prog *prog);
Jakub Kicinski675fc272017-12-27 18:39:09 -08001158int bpf_prog_offload_info_fill(struct bpf_prog_info *info,
1159 struct bpf_prog *prog);
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001160
Jakub Kicinski52775b32018-01-17 19:13:28 -08001161int bpf_map_offload_info_fill(struct bpf_map_info *info, struct bpf_map *map);
1162
Jakub Kicinskia3884572018-01-11 20:29:09 -08001163int bpf_map_offload_lookup_elem(struct bpf_map *map, void *key, void *value);
1164int bpf_map_offload_update_elem(struct bpf_map *map,
1165 void *key, void *value, u64 flags);
1166int bpf_map_offload_delete_elem(struct bpf_map *map, void *key);
1167int bpf_map_offload_get_next_key(struct bpf_map *map,
1168 void *key, void *next_key);
1169
Jakub Kicinski09728262018-07-17 10:53:23 -07001170bool bpf_offload_prog_map_match(struct bpf_prog *prog, struct bpf_map *map);
Jakub Kicinskia3884572018-01-11 20:29:09 -08001171
Quentin Monnet1385d752018-11-09 13:03:25 +00001172struct bpf_offload_dev *
Jakub Kicinskidd27c2e2019-02-12 00:20:39 -08001173bpf_offload_dev_create(const struct bpf_prog_offload_ops *ops, void *priv);
Jakub Kicinski602144c2018-07-17 10:53:25 -07001174void bpf_offload_dev_destroy(struct bpf_offload_dev *offdev);
Jakub Kicinskidd27c2e2019-02-12 00:20:39 -08001175void *bpf_offload_dev_priv(struct bpf_offload_dev *offdev);
Jakub Kicinski602144c2018-07-17 10:53:25 -07001176int bpf_offload_dev_netdev_register(struct bpf_offload_dev *offdev,
1177 struct net_device *netdev);
1178void bpf_offload_dev_netdev_unregister(struct bpf_offload_dev *offdev,
1179 struct net_device *netdev);
Jakub Kicinskifd4f2272018-07-17 10:53:26 -07001180bool bpf_offload_dev_match(struct bpf_prog *prog, struct net_device *netdev);
Jakub Kicinski9fd7c552018-07-17 10:53:24 -07001181
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001182#if defined(CONFIG_NET) && defined(CONFIG_BPF_SYSCALL)
1183int bpf_prog_offload_init(struct bpf_prog *prog, union bpf_attr *attr);
1184
Jakub Kicinski0d830032018-05-08 19:37:06 -07001185static inline bool bpf_prog_is_dev_bound(const struct bpf_prog_aux *aux)
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001186{
Jakub Kicinski9a18eed2017-12-27 18:39:04 -08001187 return aux->offload_requested;
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001188}
Jakub Kicinskia3884572018-01-11 20:29:09 -08001189
1190static inline bool bpf_map_is_dev_bound(struct bpf_map *map)
1191{
1192 return unlikely(map->ops == &bpf_map_offload_ops);
1193}
1194
1195struct bpf_map *bpf_map_offload_map_alloc(union bpf_attr *attr);
1196void bpf_map_offload_map_free(struct bpf_map *map);
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001197#else
1198static inline int bpf_prog_offload_init(struct bpf_prog *prog,
1199 union bpf_attr *attr)
1200{
1201 return -EOPNOTSUPP;
1202}
1203
1204static inline bool bpf_prog_is_dev_bound(struct bpf_prog_aux *aux)
1205{
1206 return false;
1207}
Jakub Kicinskia3884572018-01-11 20:29:09 -08001208
1209static inline bool bpf_map_is_dev_bound(struct bpf_map *map)
1210{
1211 return false;
1212}
1213
1214static inline struct bpf_map *bpf_map_offload_map_alloc(union bpf_attr *attr)
1215{
1216 return ERR_PTR(-EOPNOTSUPP);
1217}
1218
1219static inline void bpf_map_offload_map_free(struct bpf_map *map)
1220{
1221}
Jakub Kicinskiab3f0062017-11-03 13:56:17 -07001222#endif /* CONFIG_NET && CONFIG_BPF_SYSCALL */
1223
Daniel Borkmann604326b2018-10-13 02:45:58 +02001224#if defined(CONFIG_BPF_STREAM_PARSER)
1225int sock_map_prog_update(struct bpf_map *map, struct bpf_prog *prog, u32 which);
1226int sock_map_get_from_fd(const union bpf_attr *attr, struct bpf_prog *prog);
John Fastabend6bdc9c42017-08-16 15:02:32 -07001227#else
Daniel Borkmann604326b2018-10-13 02:45:58 +02001228static inline int sock_map_prog_update(struct bpf_map *map,
1229 struct bpf_prog *prog, u32 which)
John Fastabend464bc0f2017-08-28 07:10:04 -07001230{
1231 return -EOPNOTSUPP;
1232}
Sean Youngfdb5c452018-06-19 00:04:24 +01001233
Daniel Borkmann604326b2018-10-13 02:45:58 +02001234static inline int sock_map_get_from_fd(const union bpf_attr *attr,
1235 struct bpf_prog *prog)
Sean Youngfdb5c452018-06-19 00:04:24 +01001236{
1237 return -EINVAL;
1238}
John Fastabend6bdc9c42017-08-16 15:02:32 -07001239#endif
1240
Martin KaFai Lau5dc4c4b2018-08-08 01:01:24 -07001241#if defined(CONFIG_INET) && defined(CONFIG_BPF_SYSCALL)
1242void bpf_sk_reuseport_detach(struct sock *sk);
1243int bpf_fd_reuseport_array_lookup_elem(struct bpf_map *map, void *key,
1244 void *value);
1245int bpf_fd_reuseport_array_update_elem(struct bpf_map *map, void *key,
1246 void *value, u64 map_flags);
1247#else
1248static inline void bpf_sk_reuseport_detach(struct sock *sk)
1249{
1250}
1251
1252#ifdef CONFIG_BPF_SYSCALL
1253static inline int bpf_fd_reuseport_array_lookup_elem(struct bpf_map *map,
1254 void *key, void *value)
1255{
1256 return -EOPNOTSUPP;
1257}
1258
1259static inline int bpf_fd_reuseport_array_update_elem(struct bpf_map *map,
1260 void *key, void *value,
1261 u64 map_flags)
1262{
1263 return -EOPNOTSUPP;
1264}
1265#endif /* CONFIG_BPF_SYSCALL */
1266#endif /* defined(CONFIG_INET) && defined(CONFIG_BPF_SYSCALL) */
1267
Alexei Starovoitovd0003ec2014-11-13 17:36:49 -08001268/* verifier prototypes for helper functions called from eBPF programs */
Daniel Borkmanna2c83ff2015-03-01 12:31:42 +01001269extern const struct bpf_func_proto bpf_map_lookup_elem_proto;
1270extern const struct bpf_func_proto bpf_map_update_elem_proto;
1271extern const struct bpf_func_proto bpf_map_delete_elem_proto;
Mauricio Vasquez Bf1a2e442018-10-18 15:16:25 +02001272extern const struct bpf_func_proto bpf_map_push_elem_proto;
1273extern const struct bpf_func_proto bpf_map_pop_elem_proto;
1274extern const struct bpf_func_proto bpf_map_peek_elem_proto;
Alexei Starovoitovd0003ec2014-11-13 17:36:49 -08001275
Daniel Borkmann03e69b52015-03-14 02:27:16 +01001276extern const struct bpf_func_proto bpf_get_prandom_u32_proto;
Daniel Borkmannc04167c2015-03-14 02:27:17 +01001277extern const struct bpf_func_proto bpf_get_smp_processor_id_proto;
Daniel Borkmann2d0e30c2016-10-21 12:46:33 +02001278extern const struct bpf_func_proto bpf_get_numa_node_id_proto;
Alexei Starovoitov04fd61ab2015-05-19 16:59:03 -07001279extern const struct bpf_func_proto bpf_tail_call_proto;
Daniel Borkmann17ca8cb2015-05-29 23:23:06 +02001280extern const struct bpf_func_proto bpf_ktime_get_ns_proto;
Alexei Starovoitovffeedaf2015-06-12 19:39:12 -07001281extern const struct bpf_func_proto bpf_get_current_pid_tgid_proto;
1282extern const struct bpf_func_proto bpf_get_current_uid_gid_proto;
1283extern const struct bpf_func_proto bpf_get_current_comm_proto;
Alexei Starovoitovd5a3b1f2016-02-17 19:58:58 -08001284extern const struct bpf_func_proto bpf_get_stackid_proto;
Yonghong Songc195651e2018-04-28 22:28:08 -07001285extern const struct bpf_func_proto bpf_get_stack_proto;
John Fastabend174a79f2017-08-15 22:32:47 -07001286extern const struct bpf_func_proto bpf_sock_map_update_proto;
John Fastabend81110382018-05-14 10:00:17 -07001287extern const struct bpf_func_proto bpf_sock_hash_update_proto;
Yonghong Songbf6fa2c82018-06-03 15:59:41 -07001288extern const struct bpf_func_proto bpf_get_current_cgroup_id_proto;
Daniel Borkmann604326b2018-10-13 02:45:58 +02001289extern const struct bpf_func_proto bpf_msg_redirect_hash_proto;
1290extern const struct bpf_func_proto bpf_msg_redirect_map_proto;
1291extern const struct bpf_func_proto bpf_sk_redirect_hash_proto;
1292extern const struct bpf_func_proto bpf_sk_redirect_map_proto;
Alexei Starovoitovd83525c2019-01-31 15:40:04 -08001293extern const struct bpf_func_proto bpf_spin_lock_proto;
1294extern const struct bpf_func_proto bpf_spin_unlock_proto;
Roman Gushchincd339432018-08-02 14:27:24 -07001295extern const struct bpf_func_proto bpf_get_local_storage_proto;
Andrey Ignatovd7a4cb92019-03-18 17:55:26 -07001296extern const struct bpf_func_proto bpf_strtol_proto;
1297extern const struct bpf_func_proto bpf_strtoul_proto;
Stanislav Fomichev0d01da62019-06-27 13:38:47 -07001298extern const struct bpf_func_proto bpf_tcp_sock_proto;
Roman Gushchincd339432018-08-02 14:27:24 -07001299
Daniel Borkmann3ad00402015-10-08 01:20:39 +02001300/* Shared helpers among cBPF and eBPF. */
1301void bpf_user_rnd_init_once(void);
1302u64 bpf_user_rnd_u32(u64 r1, u64 r2, u64 r3, u64 r4, u64 r5);
1303
Joe Stringerc64b7982018-10-02 13:35:33 -07001304#if defined(CONFIG_NET)
Martin KaFai Lau46f8bc92019-02-09 23:22:20 -08001305bool bpf_sock_common_is_valid_access(int off, int size,
1306 enum bpf_access_type type,
1307 struct bpf_insn_access_aux *info);
Joe Stringerc64b7982018-10-02 13:35:33 -07001308bool bpf_sock_is_valid_access(int off, int size, enum bpf_access_type type,
1309 struct bpf_insn_access_aux *info);
1310u32 bpf_sock_convert_ctx_access(enum bpf_access_type type,
1311 const struct bpf_insn *si,
1312 struct bpf_insn *insn_buf,
1313 struct bpf_prog *prog,
1314 u32 *target_size);
1315#else
Martin KaFai Lau46f8bc92019-02-09 23:22:20 -08001316static inline bool bpf_sock_common_is_valid_access(int off, int size,
1317 enum bpf_access_type type,
1318 struct bpf_insn_access_aux *info)
1319{
1320 return false;
1321}
Joe Stringerc64b7982018-10-02 13:35:33 -07001322static inline bool bpf_sock_is_valid_access(int off, int size,
1323 enum bpf_access_type type,
1324 struct bpf_insn_access_aux *info)
1325{
1326 return false;
1327}
1328static inline u32 bpf_sock_convert_ctx_access(enum bpf_access_type type,
1329 const struct bpf_insn *si,
1330 struct bpf_insn *insn_buf,
1331 struct bpf_prog *prog,
1332 u32 *target_size)
1333{
1334 return 0;
1335}
1336#endif
1337
Martin KaFai Lau655a51e2019-02-09 23:22:24 -08001338#ifdef CONFIG_INET
Alexei Starovoitov91cc1a92019-11-14 10:57:15 -08001339struct sk_reuseport_kern {
1340 struct sk_buff *skb;
1341 struct sock *sk;
1342 struct sock *selected_sk;
1343 void *data_end;
1344 u32 hash;
1345 u32 reuseport_id;
1346 bool bind_inany;
1347};
Martin KaFai Lau655a51e2019-02-09 23:22:24 -08001348bool bpf_tcp_sock_is_valid_access(int off, int size, enum bpf_access_type type,
1349 struct bpf_insn_access_aux *info);
1350
1351u32 bpf_tcp_sock_convert_ctx_access(enum bpf_access_type type,
1352 const struct bpf_insn *si,
1353 struct bpf_insn *insn_buf,
1354 struct bpf_prog *prog,
1355 u32 *target_size);
YueHaibing7f942082019-06-12 17:18:47 +08001356
1357bool bpf_xdp_sock_is_valid_access(int off, int size, enum bpf_access_type type,
1358 struct bpf_insn_access_aux *info);
1359
1360u32 bpf_xdp_sock_convert_ctx_access(enum bpf_access_type type,
1361 const struct bpf_insn *si,
1362 struct bpf_insn *insn_buf,
1363 struct bpf_prog *prog,
1364 u32 *target_size);
Martin KaFai Lau655a51e2019-02-09 23:22:24 -08001365#else
1366static inline bool bpf_tcp_sock_is_valid_access(int off, int size,
1367 enum bpf_access_type type,
1368 struct bpf_insn_access_aux *info)
1369{
1370 return false;
1371}
1372
1373static inline u32 bpf_tcp_sock_convert_ctx_access(enum bpf_access_type type,
1374 const struct bpf_insn *si,
1375 struct bpf_insn *insn_buf,
1376 struct bpf_prog *prog,
1377 u32 *target_size)
1378{
1379 return 0;
1380}
YueHaibing7f942082019-06-12 17:18:47 +08001381static inline bool bpf_xdp_sock_is_valid_access(int off, int size,
1382 enum bpf_access_type type,
1383 struct bpf_insn_access_aux *info)
1384{
1385 return false;
1386}
1387
1388static inline u32 bpf_xdp_sock_convert_ctx_access(enum bpf_access_type type,
1389 const struct bpf_insn *si,
1390 struct bpf_insn *insn_buf,
1391 struct bpf_prog *prog,
1392 u32 *target_size)
1393{
1394 return 0;
1395}
Martin KaFai Lau655a51e2019-02-09 23:22:24 -08001396#endif /* CONFIG_INET */
1397
Alexei Starovoitov5964b202019-11-14 10:57:03 -08001398enum bpf_text_poke_type {
Daniel Borkmannb553a6e2019-11-24 01:39:42 +01001399 BPF_MOD_CALL,
1400 BPF_MOD_JUMP,
Alexei Starovoitov5964b202019-11-14 10:57:03 -08001401};
Daniel Borkmann4b3da772019-11-22 21:07:54 +01001402
Alexei Starovoitov5964b202019-11-14 10:57:03 -08001403int bpf_arch_text_poke(void *ip, enum bpf_text_poke_type t,
1404 void *addr1, void *addr2);
1405
Alexei Starovoitov99c55f72014-09-26 00:16:57 -07001406#endif /* _LINUX_BPF_H */