bpf_jit_comp.c 32 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224
  1. /*
  2. * BPF Jit compiler for s390.
  3. *
  4. * Minimum build requirements:
  5. *
  6. * - HAVE_MARCH_Z196_FEATURES: laal, laalg
  7. * - HAVE_MARCH_Z10_FEATURES: msfi, cgrj, clgrj
  8. * - HAVE_MARCH_Z9_109_FEATURES: alfi, llilf, clfi, oilf, nilf
  9. * - PACK_STACK
  10. * - 64BIT
  11. *
  12. * Copyright IBM Corp. 2012,2015
  13. *
  14. * Author(s): Martin Schwidefsky <schwidefsky@de.ibm.com>
  15. * Michael Holzheu <holzheu@linux.vnet.ibm.com>
  16. */
  17. #define KMSG_COMPONENT "bpf_jit"
  18. #define pr_fmt(fmt) KMSG_COMPONENT ": " fmt
  19. #include <linux/netdevice.h>
  20. #include <linux/filter.h>
  21. #include <linux/init.h>
  22. #include <asm/cacheflush.h>
  23. #include <asm/dis.h>
  24. #include "bpf_jit.h"
  25. int bpf_jit_enable __read_mostly;
  26. struct bpf_jit {
  27. u32 seen; /* Flags to remember seen eBPF instructions */
  28. u32 seen_reg[16]; /* Array to remember which registers are used */
  29. u32 *addrs; /* Array with relative instruction addresses */
  30. u8 *prg_buf; /* Start of program */
  31. int size; /* Size of program and literal pool */
  32. int size_prg; /* Size of program */
  33. int prg; /* Current position in program */
  34. int lit_start; /* Start of literal pool */
  35. int lit; /* Current position in literal pool */
  36. int base_ip; /* Base address for literal pool */
  37. int ret0_ip; /* Address of return 0 */
  38. int exit_ip; /* Address of exit */
  39. };
  40. #define BPF_SIZE_MAX 4096 /* Max size for program */
  41. #define SEEN_SKB 1 /* skb access */
  42. #define SEEN_MEM 2 /* use mem[] for temporary storage */
  43. #define SEEN_RET0 4 /* ret0_ip points to a valid return 0 */
  44. #define SEEN_LITERAL 8 /* code uses literals */
  45. #define SEEN_FUNC 16 /* calls C functions */
  46. #define SEEN_STACK (SEEN_FUNC | SEEN_MEM | SEEN_SKB)
  47. /*
  48. * s390 registers
  49. */
  50. #define REG_W0 (__MAX_BPF_REG+0) /* Work register 1 (even) */
  51. #define REG_W1 (__MAX_BPF_REG+1) /* Work register 2 (odd) */
  52. #define REG_SKB_DATA (__MAX_BPF_REG+2) /* SKB data register */
  53. #define REG_L (__MAX_BPF_REG+3) /* Literal pool register */
  54. #define REG_15 (__MAX_BPF_REG+4) /* Register 15 */
  55. #define REG_0 REG_W0 /* Register 0 */
  56. #define REG_2 BPF_REG_1 /* Register 2 */
  57. #define REG_14 BPF_REG_0 /* Register 14 */
  58. /*
  59. * Mapping of BPF registers to s390 registers
  60. */
  61. static const int reg2hex[] = {
  62. /* Return code */
  63. [BPF_REG_0] = 14,
  64. /* Function parameters */
  65. [BPF_REG_1] = 2,
  66. [BPF_REG_2] = 3,
  67. [BPF_REG_3] = 4,
  68. [BPF_REG_4] = 5,
  69. [BPF_REG_5] = 6,
  70. /* Call saved registers */
  71. [BPF_REG_6] = 7,
  72. [BPF_REG_7] = 8,
  73. [BPF_REG_8] = 9,
  74. [BPF_REG_9] = 10,
  75. /* BPF stack pointer */
  76. [BPF_REG_FP] = 13,
  77. /* SKB data pointer */
  78. [REG_SKB_DATA] = 12,
  79. /* Work registers for s390x backend */
  80. [REG_W0] = 0,
  81. [REG_W1] = 1,
  82. [REG_L] = 11,
  83. [REG_15] = 15,
  84. };
  85. static inline u32 reg(u32 dst_reg, u32 src_reg)
  86. {
  87. return reg2hex[dst_reg] << 4 | reg2hex[src_reg];
  88. }
  89. static inline u32 reg_high(u32 reg)
  90. {
  91. return reg2hex[reg] << 4;
  92. }
  93. static inline void reg_set_seen(struct bpf_jit *jit, u32 b1)
  94. {
  95. u32 r1 = reg2hex[b1];
  96. if (!jit->seen_reg[r1] && r1 >= 6 && r1 <= 15)
  97. jit->seen_reg[r1] = 1;
  98. }
  99. #define REG_SET_SEEN(b1) \
  100. ({ \
  101. reg_set_seen(jit, b1); \
  102. })
  103. #define REG_SEEN(b1) jit->seen_reg[reg2hex[(b1)]]
  104. /*
  105. * EMIT macros for code generation
  106. */
  107. #define _EMIT2(op) \
  108. ({ \
  109. if (jit->prg_buf) \
  110. *(u16 *) (jit->prg_buf + jit->prg) = op; \
  111. jit->prg += 2; \
  112. })
  113. #define EMIT2(op, b1, b2) \
  114. ({ \
  115. _EMIT2(op | reg(b1, b2)); \
  116. REG_SET_SEEN(b1); \
  117. REG_SET_SEEN(b2); \
  118. })
  119. #define _EMIT4(op) \
  120. ({ \
  121. if (jit->prg_buf) \
  122. *(u32 *) (jit->prg_buf + jit->prg) = op; \
  123. jit->prg += 4; \
  124. })
  125. #define EMIT4(op, b1, b2) \
  126. ({ \
  127. _EMIT4(op | reg(b1, b2)); \
  128. REG_SET_SEEN(b1); \
  129. REG_SET_SEEN(b2); \
  130. })
  131. #define EMIT4_RRF(op, b1, b2, b3) \
  132. ({ \
  133. _EMIT4(op | reg_high(b3) << 8 | reg(b1, b2)); \
  134. REG_SET_SEEN(b1); \
  135. REG_SET_SEEN(b2); \
  136. REG_SET_SEEN(b3); \
  137. })
  138. #define _EMIT4_DISP(op, disp) \
  139. ({ \
  140. unsigned int __disp = (disp) & 0xfff; \
  141. _EMIT4(op | __disp); \
  142. })
  143. #define EMIT4_DISP(op, b1, b2, disp) \
  144. ({ \
  145. _EMIT4_DISP(op | reg_high(b1) << 16 | \
  146. reg_high(b2) << 8, disp); \
  147. REG_SET_SEEN(b1); \
  148. REG_SET_SEEN(b2); \
  149. })
  150. #define EMIT4_IMM(op, b1, imm) \
  151. ({ \
  152. unsigned int __imm = (imm) & 0xffff; \
  153. _EMIT4(op | reg_high(b1) << 16 | __imm); \
  154. REG_SET_SEEN(b1); \
  155. })
  156. #define EMIT4_PCREL(op, pcrel) \
  157. ({ \
  158. long __pcrel = ((pcrel) >> 1) & 0xffff; \
  159. _EMIT4(op | __pcrel); \
  160. })
  161. #define _EMIT6(op1, op2) \
  162. ({ \
  163. if (jit->prg_buf) { \
  164. *(u32 *) (jit->prg_buf + jit->prg) = op1; \
  165. *(u16 *) (jit->prg_buf + jit->prg + 4) = op2; \
  166. } \
  167. jit->prg += 6; \
  168. })
  169. #define _EMIT6_DISP(op1, op2, disp) \
  170. ({ \
  171. unsigned int __disp = (disp) & 0xfff; \
  172. _EMIT6(op1 | __disp, op2); \
  173. })
  174. #define EMIT6_DISP(op1, op2, b1, b2, b3, disp) \
  175. ({ \
  176. _EMIT6_DISP(op1 | reg(b1, b2) << 16 | \
  177. reg_high(b3) << 8, op2, disp); \
  178. REG_SET_SEEN(b1); \
  179. REG_SET_SEEN(b2); \
  180. REG_SET_SEEN(b3); \
  181. })
  182. #define _EMIT6_DISP_LH(op1, op2, disp) \
  183. ({ \
  184. unsigned int __disp_h = ((u32)disp) & 0xff000; \
  185. unsigned int __disp_l = ((u32)disp) & 0x00fff; \
  186. _EMIT6(op1 | __disp_l, op2 | __disp_h >> 4); \
  187. })
  188. #define EMIT6_DISP_LH(op1, op2, b1, b2, b3, disp) \
  189. ({ \
  190. _EMIT6_DISP_LH(op1 | reg(b1, b2) << 16 | \
  191. reg_high(b3) << 8, op2, disp); \
  192. REG_SET_SEEN(b1); \
  193. REG_SET_SEEN(b2); \
  194. REG_SET_SEEN(b3); \
  195. })
  196. #define EMIT6_PCREL(op1, op2, b1, b2, i, off, mask) \
  197. ({ \
  198. /* Branch instruction needs 6 bytes */ \
  199. int rel = (addrs[i + off + 1] - (addrs[i + 1] - 6)) / 2;\
  200. _EMIT6(op1 | reg(b1, b2) << 16 | rel, op2 | mask); \
  201. REG_SET_SEEN(b1); \
  202. REG_SET_SEEN(b2); \
  203. })
  204. #define _EMIT6_IMM(op, imm) \
  205. ({ \
  206. unsigned int __imm = (imm); \
  207. _EMIT6(op | (__imm >> 16), __imm & 0xffff); \
  208. })
  209. #define EMIT6_IMM(op, b1, imm) \
  210. ({ \
  211. _EMIT6_IMM(op | reg_high(b1) << 16, imm); \
  212. REG_SET_SEEN(b1); \
  213. })
  214. #define EMIT_CONST_U32(val) \
  215. ({ \
  216. unsigned int ret; \
  217. ret = jit->lit - jit->base_ip; \
  218. jit->seen |= SEEN_LITERAL; \
  219. if (jit->prg_buf) \
  220. *(u32 *) (jit->prg_buf + jit->lit) = (u32) val; \
  221. jit->lit += 4; \
  222. ret; \
  223. })
  224. #define EMIT_CONST_U64(val) \
  225. ({ \
  226. unsigned int ret; \
  227. ret = jit->lit - jit->base_ip; \
  228. jit->seen |= SEEN_LITERAL; \
  229. if (jit->prg_buf) \
  230. *(u64 *) (jit->prg_buf + jit->lit) = (u64) val; \
  231. jit->lit += 8; \
  232. ret; \
  233. })
  234. #define EMIT_ZERO(b1) \
  235. ({ \
  236. /* llgfr %dst,%dst (zero extend to 64 bit) */ \
  237. EMIT4(0xb9160000, b1, b1); \
  238. REG_SET_SEEN(b1); \
  239. })
  240. /*
  241. * Fill whole space with illegal instructions
  242. */
  243. static void jit_fill_hole(void *area, unsigned int size)
  244. {
  245. memset(area, 0, size);
  246. }
  247. /*
  248. * Save registers from "rs" (register start) to "re" (register end) on stack
  249. */
  250. static void save_regs(struct bpf_jit *jit, u32 rs, u32 re)
  251. {
  252. u32 off = 72 + (rs - 6) * 8;
  253. if (rs == re)
  254. /* stg %rs,off(%r15) */
  255. _EMIT6(0xe300f000 | rs << 20 | off, 0x0024);
  256. else
  257. /* stmg %rs,%re,off(%r15) */
  258. _EMIT6_DISP(0xeb00f000 | rs << 20 | re << 16, 0x0024, off);
  259. }
  260. /*
  261. * Restore registers from "rs" (register start) to "re" (register end) on stack
  262. */
  263. static void restore_regs(struct bpf_jit *jit, u32 rs, u32 re)
  264. {
  265. u32 off = 72 + (rs - 6) * 8;
  266. if (jit->seen & SEEN_STACK)
  267. off += STK_OFF;
  268. if (rs == re)
  269. /* lg %rs,off(%r15) */
  270. _EMIT6(0xe300f000 | rs << 20 | off, 0x0004);
  271. else
  272. /* lmg %rs,%re,off(%r15) */
  273. _EMIT6_DISP(0xeb00f000 | rs << 20 | re << 16, 0x0004, off);
  274. }
  275. /*
  276. * Return first seen register (from start)
  277. */
  278. static int get_start(struct bpf_jit *jit, int start)
  279. {
  280. int i;
  281. for (i = start; i <= 15; i++) {
  282. if (jit->seen_reg[i])
  283. return i;
  284. }
  285. return 0;
  286. }
  287. /*
  288. * Return last seen register (from start) (gap >= 2)
  289. */
  290. static int get_end(struct bpf_jit *jit, int start)
  291. {
  292. int i;
  293. for (i = start; i < 15; i++) {
  294. if (!jit->seen_reg[i] && !jit->seen_reg[i + 1])
  295. return i - 1;
  296. }
  297. return jit->seen_reg[15] ? 15 : 14;
  298. }
  299. #define REGS_SAVE 1
  300. #define REGS_RESTORE 0
  301. /*
  302. * Save and restore clobbered registers (6-15) on stack.
  303. * We save/restore registers in chunks with gap >= 2 registers.
  304. */
  305. static void save_restore_regs(struct bpf_jit *jit, int op)
  306. {
  307. int re = 6, rs;
  308. do {
  309. rs = get_start(jit, re);
  310. if (!rs)
  311. break;
  312. re = get_end(jit, rs + 1);
  313. if (op == REGS_SAVE)
  314. save_regs(jit, rs, re);
  315. else
  316. restore_regs(jit, rs, re);
  317. re++;
  318. } while (re <= 15);
  319. }
  320. /*
  321. * Emit function prologue
  322. *
  323. * Save registers and create stack frame if necessary.
  324. * See stack frame layout desription in "bpf_jit.h"!
  325. */
  326. static void bpf_jit_prologue(struct bpf_jit *jit)
  327. {
  328. /* Save registers */
  329. save_restore_regs(jit, REGS_SAVE);
  330. /* Setup literal pool */
  331. if (jit->seen & SEEN_LITERAL) {
  332. /* basr %r13,0 */
  333. EMIT2(0x0d00, REG_L, REG_0);
  334. jit->base_ip = jit->prg;
  335. }
  336. /* Setup stack and backchain */
  337. if (jit->seen & SEEN_STACK) {
  338. if (jit->seen & SEEN_FUNC)
  339. /* lgr %w1,%r15 (backchain) */
  340. EMIT4(0xb9040000, REG_W1, REG_15);
  341. /* la %bfp,STK_160_UNUSED(%r15) (BPF frame pointer) */
  342. EMIT4_DISP(0x41000000, BPF_REG_FP, REG_15, STK_160_UNUSED);
  343. /* aghi %r15,-STK_OFF */
  344. EMIT4_IMM(0xa70b0000, REG_15, -STK_OFF);
  345. if (jit->seen & SEEN_FUNC)
  346. /* stg %w1,152(%r15) (backchain) */
  347. EMIT6_DISP_LH(0xe3000000, 0x0024, REG_W1, REG_0,
  348. REG_15, 152);
  349. }
  350. /*
  351. * For SKB access %b1 contains the SKB pointer. For "bpf_jit.S"
  352. * we store the SKB header length on the stack and the SKB data
  353. * pointer in REG_SKB_DATA.
  354. */
  355. if (jit->seen & SEEN_SKB) {
  356. /* Header length: llgf %w1,<len>(%b1) */
  357. EMIT6_DISP_LH(0xe3000000, 0x0016, REG_W1, REG_0, BPF_REG_1,
  358. offsetof(struct sk_buff, len));
  359. /* s %w1,<data_len>(%b1) */
  360. EMIT4_DISP(0x5b000000, REG_W1, BPF_REG_1,
  361. offsetof(struct sk_buff, data_len));
  362. /* stg %w1,ST_OFF_HLEN(%r0,%r15) */
  363. EMIT6_DISP_LH(0xe3000000, 0x0024, REG_W1, REG_0, REG_15,
  364. STK_OFF_HLEN);
  365. /* lg %skb_data,data_off(%b1) */
  366. EMIT6_DISP_LH(0xe3000000, 0x0004, REG_SKB_DATA, REG_0,
  367. BPF_REG_1, offsetof(struct sk_buff, data));
  368. }
  369. /* BPF compatibility: clear A (%b7) and X (%b8) registers */
  370. if (REG_SEEN(BPF_REG_7))
  371. /* lghi %b7,0 */
  372. EMIT4_IMM(0xa7090000, BPF_REG_7, 0);
  373. if (REG_SEEN(BPF_REG_8))
  374. /* lghi %b8,0 */
  375. EMIT4_IMM(0xa7090000, BPF_REG_8, 0);
  376. }
  377. /*
  378. * Function epilogue
  379. */
  380. static void bpf_jit_epilogue(struct bpf_jit *jit)
  381. {
  382. /* Return 0 */
  383. if (jit->seen & SEEN_RET0) {
  384. jit->ret0_ip = jit->prg;
  385. /* lghi %b0,0 */
  386. EMIT4_IMM(0xa7090000, BPF_REG_0, 0);
  387. }
  388. jit->exit_ip = jit->prg;
  389. /* Load exit code: lgr %r2,%b0 */
  390. EMIT4(0xb9040000, REG_2, BPF_REG_0);
  391. /* Restore registers */
  392. save_restore_regs(jit, REGS_RESTORE);
  393. /* br %r14 */
  394. _EMIT2(0x07fe);
  395. }
  396. /*
  397. * Compile one eBPF instruction into s390x code
  398. *
  399. * NOTE: Use noinline because for gcov (-fprofile-arcs) gcc allocates a lot of
  400. * stack space for the large switch statement.
  401. */
  402. static noinline int bpf_jit_insn(struct bpf_jit *jit, struct bpf_prog *fp, int i)
  403. {
  404. struct bpf_insn *insn = &fp->insnsi[i];
  405. int jmp_off, last, insn_count = 1;
  406. unsigned int func_addr, mask;
  407. u32 dst_reg = insn->dst_reg;
  408. u32 src_reg = insn->src_reg;
  409. u32 *addrs = jit->addrs;
  410. s32 imm = insn->imm;
  411. s16 off = insn->off;
  412. switch (insn->code) {
  413. /*
  414. * BPF_MOV
  415. */
  416. case BPF_ALU | BPF_MOV | BPF_X: /* dst = (u32) src */
  417. /* llgfr %dst,%src */
  418. EMIT4(0xb9160000, dst_reg, src_reg);
  419. break;
  420. case BPF_ALU64 | BPF_MOV | BPF_X: /* dst = src */
  421. /* lgr %dst,%src */
  422. EMIT4(0xb9040000, dst_reg, src_reg);
  423. break;
  424. case BPF_ALU | BPF_MOV | BPF_K: /* dst = (u32) imm */
  425. /* llilf %dst,imm */
  426. EMIT6_IMM(0xc00f0000, dst_reg, imm);
  427. break;
  428. case BPF_ALU64 | BPF_MOV | BPF_K: /* dst = imm */
  429. /* lgfi %dst,imm */
  430. EMIT6_IMM(0xc0010000, dst_reg, imm);
  431. break;
  432. /*
  433. * BPF_LD 64
  434. */
  435. case BPF_LD | BPF_IMM | BPF_DW: /* dst = (u64) imm */
  436. {
  437. /* 16 byte instruction that uses two 'struct bpf_insn' */
  438. u64 imm64;
  439. imm64 = (u64)(u32) insn[0].imm | ((u64)(u32) insn[1].imm) << 32;
  440. /* lg %dst,<d(imm)>(%l) */
  441. EMIT6_DISP_LH(0xe3000000, 0x0004, dst_reg, REG_0, REG_L,
  442. EMIT_CONST_U64(imm64));
  443. insn_count = 2;
  444. break;
  445. }
  446. /*
  447. * BPF_ADD
  448. */
  449. case BPF_ALU | BPF_ADD | BPF_X: /* dst = (u32) dst + (u32) src */
  450. /* ar %dst,%src */
  451. EMIT2(0x1a00, dst_reg, src_reg);
  452. EMIT_ZERO(dst_reg);
  453. break;
  454. case BPF_ALU64 | BPF_ADD | BPF_X: /* dst = dst + src */
  455. /* agr %dst,%src */
  456. EMIT4(0xb9080000, dst_reg, src_reg);
  457. break;
  458. case BPF_ALU | BPF_ADD | BPF_K: /* dst = (u32) dst + (u32) imm */
  459. if (!imm)
  460. break;
  461. /* alfi %dst,imm */
  462. EMIT6_IMM(0xc20b0000, dst_reg, imm);
  463. EMIT_ZERO(dst_reg);
  464. break;
  465. case BPF_ALU64 | BPF_ADD | BPF_K: /* dst = dst + imm */
  466. if (!imm)
  467. break;
  468. /* agfi %dst,imm */
  469. EMIT6_IMM(0xc2080000, dst_reg, imm);
  470. break;
  471. /*
  472. * BPF_SUB
  473. */
  474. case BPF_ALU | BPF_SUB | BPF_X: /* dst = (u32) dst - (u32) src */
  475. /* sr %dst,%src */
  476. EMIT2(0x1b00, dst_reg, src_reg);
  477. EMIT_ZERO(dst_reg);
  478. break;
  479. case BPF_ALU64 | BPF_SUB | BPF_X: /* dst = dst - src */
  480. /* sgr %dst,%src */
  481. EMIT4(0xb9090000, dst_reg, src_reg);
  482. break;
  483. case BPF_ALU | BPF_SUB | BPF_K: /* dst = (u32) dst - (u32) imm */
  484. if (!imm)
  485. break;
  486. /* alfi %dst,-imm */
  487. EMIT6_IMM(0xc20b0000, dst_reg, -imm);
  488. EMIT_ZERO(dst_reg);
  489. break;
  490. case BPF_ALU64 | BPF_SUB | BPF_K: /* dst = dst - imm */
  491. if (!imm)
  492. break;
  493. /* agfi %dst,-imm */
  494. EMIT6_IMM(0xc2080000, dst_reg, -imm);
  495. break;
  496. /*
  497. * BPF_MUL
  498. */
  499. case BPF_ALU | BPF_MUL | BPF_X: /* dst = (u32) dst * (u32) src */
  500. /* msr %dst,%src */
  501. EMIT4(0xb2520000, dst_reg, src_reg);
  502. EMIT_ZERO(dst_reg);
  503. break;
  504. case BPF_ALU64 | BPF_MUL | BPF_X: /* dst = dst * src */
  505. /* msgr %dst,%src */
  506. EMIT4(0xb90c0000, dst_reg, src_reg);
  507. break;
  508. case BPF_ALU | BPF_MUL | BPF_K: /* dst = (u32) dst * (u32) imm */
  509. if (imm == 1)
  510. break;
  511. /* msfi %r5,imm */
  512. EMIT6_IMM(0xc2010000, dst_reg, imm);
  513. EMIT_ZERO(dst_reg);
  514. break;
  515. case BPF_ALU64 | BPF_MUL | BPF_K: /* dst = dst * imm */
  516. if (imm == 1)
  517. break;
  518. /* msgfi %dst,imm */
  519. EMIT6_IMM(0xc2000000, dst_reg, imm);
  520. break;
  521. /*
  522. * BPF_DIV / BPF_MOD
  523. */
  524. case BPF_ALU | BPF_DIV | BPF_X: /* dst = (u32) dst / (u32) src */
  525. case BPF_ALU | BPF_MOD | BPF_X: /* dst = (u32) dst % (u32) src */
  526. {
  527. int rc_reg = BPF_OP(insn->code) == BPF_DIV ? REG_W1 : REG_W0;
  528. jit->seen |= SEEN_RET0;
  529. /* ltr %src,%src (if src == 0 goto fail) */
  530. EMIT2(0x1200, src_reg, src_reg);
  531. /* jz <ret0> */
  532. EMIT4_PCREL(0xa7840000, jit->ret0_ip - jit->prg);
  533. /* lhi %w0,0 */
  534. EMIT4_IMM(0xa7080000, REG_W0, 0);
  535. /* lr %w1,%dst */
  536. EMIT2(0x1800, REG_W1, dst_reg);
  537. /* dlr %w0,%src */
  538. EMIT4(0xb9970000, REG_W0, src_reg);
  539. /* llgfr %dst,%rc */
  540. EMIT4(0xb9160000, dst_reg, rc_reg);
  541. break;
  542. }
  543. case BPF_ALU64 | BPF_DIV | BPF_X: /* dst = dst / src */
  544. case BPF_ALU64 | BPF_MOD | BPF_X: /* dst = dst % src */
  545. {
  546. int rc_reg = BPF_OP(insn->code) == BPF_DIV ? REG_W1 : REG_W0;
  547. jit->seen |= SEEN_RET0;
  548. /* ltgr %src,%src (if src == 0 goto fail) */
  549. EMIT4(0xb9020000, src_reg, src_reg);
  550. /* jz <ret0> */
  551. EMIT4_PCREL(0xa7840000, jit->ret0_ip - jit->prg);
  552. /* lghi %w0,0 */
  553. EMIT4_IMM(0xa7090000, REG_W0, 0);
  554. /* lgr %w1,%dst */
  555. EMIT4(0xb9040000, REG_W1, dst_reg);
  556. /* dlgr %w0,%dst */
  557. EMIT4(0xb9870000, REG_W0, src_reg);
  558. /* lgr %dst,%rc */
  559. EMIT4(0xb9040000, dst_reg, rc_reg);
  560. break;
  561. }
  562. case BPF_ALU | BPF_DIV | BPF_K: /* dst = (u32) dst / (u32) imm */
  563. case BPF_ALU | BPF_MOD | BPF_K: /* dst = (u32) dst % (u32) imm */
  564. {
  565. int rc_reg = BPF_OP(insn->code) == BPF_DIV ? REG_W1 : REG_W0;
  566. if (imm == 1) {
  567. if (BPF_OP(insn->code) == BPF_MOD)
  568. /* lhgi %dst,0 */
  569. EMIT4_IMM(0xa7090000, dst_reg, 0);
  570. break;
  571. }
  572. /* lhi %w0,0 */
  573. EMIT4_IMM(0xa7080000, REG_W0, 0);
  574. /* lr %w1,%dst */
  575. EMIT2(0x1800, REG_W1, dst_reg);
  576. /* dl %w0,<d(imm)>(%l) */
  577. EMIT6_DISP_LH(0xe3000000, 0x0097, REG_W0, REG_0, REG_L,
  578. EMIT_CONST_U32(imm));
  579. /* llgfr %dst,%rc */
  580. EMIT4(0xb9160000, dst_reg, rc_reg);
  581. break;
  582. }
  583. case BPF_ALU64 | BPF_DIV | BPF_K: /* dst = dst / imm */
  584. case BPF_ALU64 | BPF_MOD | BPF_K: /* dst = dst % imm */
  585. {
  586. int rc_reg = BPF_OP(insn->code) == BPF_DIV ? REG_W1 : REG_W0;
  587. if (imm == 1) {
  588. if (BPF_OP(insn->code) == BPF_MOD)
  589. /* lhgi %dst,0 */
  590. EMIT4_IMM(0xa7090000, dst_reg, 0);
  591. break;
  592. }
  593. /* lghi %w0,0 */
  594. EMIT4_IMM(0xa7090000, REG_W0, 0);
  595. /* lgr %w1,%dst */
  596. EMIT4(0xb9040000, REG_W1, dst_reg);
  597. /* dlg %w0,<d(imm)>(%l) */
  598. EMIT6_DISP_LH(0xe3000000, 0x0087, REG_W0, REG_0, REG_L,
  599. EMIT_CONST_U64(imm));
  600. /* lgr %dst,%rc */
  601. EMIT4(0xb9040000, dst_reg, rc_reg);
  602. break;
  603. }
  604. /*
  605. * BPF_AND
  606. */
  607. case BPF_ALU | BPF_AND | BPF_X: /* dst = (u32) dst & (u32) src */
  608. /* nr %dst,%src */
  609. EMIT2(0x1400, dst_reg, src_reg);
  610. EMIT_ZERO(dst_reg);
  611. break;
  612. case BPF_ALU64 | BPF_AND | BPF_X: /* dst = dst & src */
  613. /* ngr %dst,%src */
  614. EMIT4(0xb9800000, dst_reg, src_reg);
  615. break;
  616. case BPF_ALU | BPF_AND | BPF_K: /* dst = (u32) dst & (u32) imm */
  617. /* nilf %dst,imm */
  618. EMIT6_IMM(0xc00b0000, dst_reg, imm);
  619. EMIT_ZERO(dst_reg);
  620. break;
  621. case BPF_ALU64 | BPF_AND | BPF_K: /* dst = dst & imm */
  622. /* ng %dst,<d(imm)>(%l) */
  623. EMIT6_DISP_LH(0xe3000000, 0x0080, dst_reg, REG_0, REG_L,
  624. EMIT_CONST_U64(imm));
  625. break;
  626. /*
  627. * BPF_OR
  628. */
  629. case BPF_ALU | BPF_OR | BPF_X: /* dst = (u32) dst | (u32) src */
  630. /* or %dst,%src */
  631. EMIT2(0x1600, dst_reg, src_reg);
  632. EMIT_ZERO(dst_reg);
  633. break;
  634. case BPF_ALU64 | BPF_OR | BPF_X: /* dst = dst | src */
  635. /* ogr %dst,%src */
  636. EMIT4(0xb9810000, dst_reg, src_reg);
  637. break;
  638. case BPF_ALU | BPF_OR | BPF_K: /* dst = (u32) dst | (u32) imm */
  639. /* oilf %dst,imm */
  640. EMIT6_IMM(0xc00d0000, dst_reg, imm);
  641. EMIT_ZERO(dst_reg);
  642. break;
  643. case BPF_ALU64 | BPF_OR | BPF_K: /* dst = dst | imm */
  644. /* og %dst,<d(imm)>(%l) */
  645. EMIT6_DISP_LH(0xe3000000, 0x0081, dst_reg, REG_0, REG_L,
  646. EMIT_CONST_U64(imm));
  647. break;
  648. /*
  649. * BPF_XOR
  650. */
  651. case BPF_ALU | BPF_XOR | BPF_X: /* dst = (u32) dst ^ (u32) src */
  652. /* xr %dst,%src */
  653. EMIT2(0x1700, dst_reg, src_reg);
  654. EMIT_ZERO(dst_reg);
  655. break;
  656. case BPF_ALU64 | BPF_XOR | BPF_X: /* dst = dst ^ src */
  657. /* xgr %dst,%src */
  658. EMIT4(0xb9820000, dst_reg, src_reg);
  659. break;
  660. case BPF_ALU | BPF_XOR | BPF_K: /* dst = (u32) dst ^ (u32) imm */
  661. if (!imm)
  662. break;
  663. /* xilf %dst,imm */
  664. EMIT6_IMM(0xc0070000, dst_reg, imm);
  665. EMIT_ZERO(dst_reg);
  666. break;
  667. case BPF_ALU64 | BPF_XOR | BPF_K: /* dst = dst ^ imm */
  668. /* xg %dst,<d(imm)>(%l) */
  669. EMIT6_DISP_LH(0xe3000000, 0x0082, dst_reg, REG_0, REG_L,
  670. EMIT_CONST_U64(imm));
  671. break;
  672. /*
  673. * BPF_LSH
  674. */
  675. case BPF_ALU | BPF_LSH | BPF_X: /* dst = (u32) dst << (u32) src */
  676. /* sll %dst,0(%src) */
  677. EMIT4_DISP(0x89000000, dst_reg, src_reg, 0);
  678. EMIT_ZERO(dst_reg);
  679. break;
  680. case BPF_ALU64 | BPF_LSH | BPF_X: /* dst = dst << src */
  681. /* sllg %dst,%dst,0(%src) */
  682. EMIT6_DISP_LH(0xeb000000, 0x000d, dst_reg, dst_reg, src_reg, 0);
  683. break;
  684. case BPF_ALU | BPF_LSH | BPF_K: /* dst = (u32) dst << (u32) imm */
  685. if (imm == 0)
  686. break;
  687. /* sll %dst,imm(%r0) */
  688. EMIT4_DISP(0x89000000, dst_reg, REG_0, imm);
  689. EMIT_ZERO(dst_reg);
  690. break;
  691. case BPF_ALU64 | BPF_LSH | BPF_K: /* dst = dst << imm */
  692. if (imm == 0)
  693. break;
  694. /* sllg %dst,%dst,imm(%r0) */
  695. EMIT6_DISP_LH(0xeb000000, 0x000d, dst_reg, dst_reg, REG_0, imm);
  696. break;
  697. /*
  698. * BPF_RSH
  699. */
  700. case BPF_ALU | BPF_RSH | BPF_X: /* dst = (u32) dst >> (u32) src */
  701. /* srl %dst,0(%src) */
  702. EMIT4_DISP(0x88000000, dst_reg, src_reg, 0);
  703. EMIT_ZERO(dst_reg);
  704. break;
  705. case BPF_ALU64 | BPF_RSH | BPF_X: /* dst = dst >> src */
  706. /* srlg %dst,%dst,0(%src) */
  707. EMIT6_DISP_LH(0xeb000000, 0x000c, dst_reg, dst_reg, src_reg, 0);
  708. break;
  709. case BPF_ALU | BPF_RSH | BPF_K: /* dst = (u32) dst >> (u32) imm */
  710. if (imm == 0)
  711. break;
  712. /* srl %dst,imm(%r0) */
  713. EMIT4_DISP(0x88000000, dst_reg, REG_0, imm);
  714. EMIT_ZERO(dst_reg);
  715. break;
  716. case BPF_ALU64 | BPF_RSH | BPF_K: /* dst = dst >> imm */
  717. if (imm == 0)
  718. break;
  719. /* srlg %dst,%dst,imm(%r0) */
  720. EMIT6_DISP_LH(0xeb000000, 0x000c, dst_reg, dst_reg, REG_0, imm);
  721. break;
  722. /*
  723. * BPF_ARSH
  724. */
  725. case BPF_ALU64 | BPF_ARSH | BPF_X: /* ((s64) dst) >>= src */
  726. /* srag %dst,%dst,0(%src) */
  727. EMIT6_DISP_LH(0xeb000000, 0x000a, dst_reg, dst_reg, src_reg, 0);
  728. break;
  729. case BPF_ALU64 | BPF_ARSH | BPF_K: /* ((s64) dst) >>= imm */
  730. if (imm == 0)
  731. break;
  732. /* srag %dst,%dst,imm(%r0) */
  733. EMIT6_DISP_LH(0xeb000000, 0x000a, dst_reg, dst_reg, REG_0, imm);
  734. break;
  735. /*
  736. * BPF_NEG
  737. */
  738. case BPF_ALU | BPF_NEG: /* dst = (u32) -dst */
  739. /* lcr %dst,%dst */
  740. EMIT2(0x1300, dst_reg, dst_reg);
  741. EMIT_ZERO(dst_reg);
  742. break;
  743. case BPF_ALU64 | BPF_NEG: /* dst = -dst */
  744. /* lcgr %dst,%dst */
  745. EMIT4(0xb9130000, dst_reg, dst_reg);
  746. break;
  747. /*
  748. * BPF_FROM_BE/LE
  749. */
  750. case BPF_ALU | BPF_END | BPF_FROM_BE:
  751. /* s390 is big endian, therefore only clear high order bytes */
  752. switch (imm) {
  753. case 16: /* dst = (u16) cpu_to_be16(dst) */
  754. /* llghr %dst,%dst */
  755. EMIT4(0xb9850000, dst_reg, dst_reg);
  756. break;
  757. case 32: /* dst = (u32) cpu_to_be32(dst) */
  758. /* llgfr %dst,%dst */
  759. EMIT4(0xb9160000, dst_reg, dst_reg);
  760. break;
  761. case 64: /* dst = (u64) cpu_to_be64(dst) */
  762. break;
  763. }
  764. break;
  765. case BPF_ALU | BPF_END | BPF_FROM_LE:
  766. switch (imm) {
  767. case 16: /* dst = (u16) cpu_to_le16(dst) */
  768. /* lrvr %dst,%dst */
  769. EMIT4(0xb91f0000, dst_reg, dst_reg);
  770. /* srl %dst,16(%r0) */
  771. EMIT4_DISP(0x88000000, dst_reg, REG_0, 16);
  772. /* llghr %dst,%dst */
  773. EMIT4(0xb9850000, dst_reg, dst_reg);
  774. break;
  775. case 32: /* dst = (u32) cpu_to_le32(dst) */
  776. /* lrvr %dst,%dst */
  777. EMIT4(0xb91f0000, dst_reg, dst_reg);
  778. /* llgfr %dst,%dst */
  779. EMIT4(0xb9160000, dst_reg, dst_reg);
  780. break;
  781. case 64: /* dst = (u64) cpu_to_le64(dst) */
  782. /* lrvgr %dst,%dst */
  783. EMIT4(0xb90f0000, dst_reg, dst_reg);
  784. break;
  785. }
  786. break;
  787. /*
  788. * BPF_ST(X)
  789. */
  790. case BPF_STX | BPF_MEM | BPF_B: /* *(u8 *)(dst + off) = src_reg */
  791. /* stcy %src,off(%dst) */
  792. EMIT6_DISP_LH(0xe3000000, 0x0072, src_reg, dst_reg, REG_0, off);
  793. jit->seen |= SEEN_MEM;
  794. break;
  795. case BPF_STX | BPF_MEM | BPF_H: /* (u16 *)(dst + off) = src */
  796. /* sthy %src,off(%dst) */
  797. EMIT6_DISP_LH(0xe3000000, 0x0070, src_reg, dst_reg, REG_0, off);
  798. jit->seen |= SEEN_MEM;
  799. break;
  800. case BPF_STX | BPF_MEM | BPF_W: /* *(u32 *)(dst + off) = src */
  801. /* sty %src,off(%dst) */
  802. EMIT6_DISP_LH(0xe3000000, 0x0050, src_reg, dst_reg, REG_0, off);
  803. jit->seen |= SEEN_MEM;
  804. break;
  805. case BPF_STX | BPF_MEM | BPF_DW: /* (u64 *)(dst + off) = src */
  806. /* stg %src,off(%dst) */
  807. EMIT6_DISP_LH(0xe3000000, 0x0024, src_reg, dst_reg, REG_0, off);
  808. jit->seen |= SEEN_MEM;
  809. break;
  810. case BPF_ST | BPF_MEM | BPF_B: /* *(u8 *)(dst + off) = imm */
  811. /* lhi %w0,imm */
  812. EMIT4_IMM(0xa7080000, REG_W0, (u8) imm);
  813. /* stcy %w0,off(dst) */
  814. EMIT6_DISP_LH(0xe3000000, 0x0072, REG_W0, dst_reg, REG_0, off);
  815. jit->seen |= SEEN_MEM;
  816. break;
  817. case BPF_ST | BPF_MEM | BPF_H: /* (u16 *)(dst + off) = imm */
  818. /* lhi %w0,imm */
  819. EMIT4_IMM(0xa7080000, REG_W0, (u16) imm);
  820. /* sthy %w0,off(dst) */
  821. EMIT6_DISP_LH(0xe3000000, 0x0070, REG_W0, dst_reg, REG_0, off);
  822. jit->seen |= SEEN_MEM;
  823. break;
  824. case BPF_ST | BPF_MEM | BPF_W: /* *(u32 *)(dst + off) = imm */
  825. /* llilf %w0,imm */
  826. EMIT6_IMM(0xc00f0000, REG_W0, (u32) imm);
  827. /* sty %w0,off(%dst) */
  828. EMIT6_DISP_LH(0xe3000000, 0x0050, REG_W0, dst_reg, REG_0, off);
  829. jit->seen |= SEEN_MEM;
  830. break;
  831. case BPF_ST | BPF_MEM | BPF_DW: /* *(u64 *)(dst + off) = imm */
  832. /* lgfi %w0,imm */
  833. EMIT6_IMM(0xc0010000, REG_W0, imm);
  834. /* stg %w0,off(%dst) */
  835. EMIT6_DISP_LH(0xe3000000, 0x0024, REG_W0, dst_reg, REG_0, off);
  836. jit->seen |= SEEN_MEM;
  837. break;
  838. /*
  839. * BPF_STX XADD (atomic_add)
  840. */
  841. case BPF_STX | BPF_XADD | BPF_W: /* *(u32 *)(dst + off) += src */
  842. /* laal %w0,%src,off(%dst) */
  843. EMIT6_DISP_LH(0xeb000000, 0x00fa, REG_W0, src_reg,
  844. dst_reg, off);
  845. jit->seen |= SEEN_MEM;
  846. break;
  847. case BPF_STX | BPF_XADD | BPF_DW: /* *(u64 *)(dst + off) += src */
  848. /* laalg %w0,%src,off(%dst) */
  849. EMIT6_DISP_LH(0xeb000000, 0x00ea, REG_W0, src_reg,
  850. dst_reg, off);
  851. jit->seen |= SEEN_MEM;
  852. break;
  853. /*
  854. * BPF_LDX
  855. */
  856. case BPF_LDX | BPF_MEM | BPF_B: /* dst = *(u8 *)(ul) (src + off) */
  857. /* llgc %dst,0(off,%src) */
  858. EMIT6_DISP_LH(0xe3000000, 0x0090, dst_reg, src_reg, REG_0, off);
  859. jit->seen |= SEEN_MEM;
  860. break;
  861. case BPF_LDX | BPF_MEM | BPF_H: /* dst = *(u16 *)(ul) (src + off) */
  862. /* llgh %dst,0(off,%src) */
  863. EMIT6_DISP_LH(0xe3000000, 0x0091, dst_reg, src_reg, REG_0, off);
  864. jit->seen |= SEEN_MEM;
  865. break;
  866. case BPF_LDX | BPF_MEM | BPF_W: /* dst = *(u32 *)(ul) (src + off) */
  867. /* llgf %dst,off(%src) */
  868. jit->seen |= SEEN_MEM;
  869. EMIT6_DISP_LH(0xe3000000, 0x0016, dst_reg, src_reg, REG_0, off);
  870. break;
  871. case BPF_LDX | BPF_MEM | BPF_DW: /* dst = *(u64 *)(ul) (src + off) */
  872. /* lg %dst,0(off,%src) */
  873. jit->seen |= SEEN_MEM;
  874. EMIT6_DISP_LH(0xe3000000, 0x0004, dst_reg, src_reg, REG_0, off);
  875. break;
  876. /*
  877. * BPF_JMP / CALL
  878. */
  879. case BPF_JMP | BPF_CALL:
  880. {
  881. /*
  882. * b0 = (__bpf_call_base + imm)(b1, b2, b3, b4, b5)
  883. */
  884. const u64 func = (u64)__bpf_call_base + imm;
  885. REG_SET_SEEN(BPF_REG_5);
  886. jit->seen |= SEEN_FUNC;
  887. /* lg %w1,<d(imm)>(%l) */
  888. EMIT6_DISP(0xe3000000, 0x0004, REG_W1, REG_0, REG_L,
  889. EMIT_CONST_U64(func));
  890. /* basr %r14,%w1 */
  891. EMIT2(0x0d00, REG_14, REG_W1);
  892. /* lgr %b0,%r2: load return value into %b0 */
  893. EMIT4(0xb9040000, BPF_REG_0, REG_2);
  894. break;
  895. }
  896. case BPF_JMP | BPF_EXIT: /* return b0 */
  897. last = (i == fp->len - 1) ? 1 : 0;
  898. if (last && !(jit->seen & SEEN_RET0))
  899. break;
  900. /* j <exit> */
  901. EMIT4_PCREL(0xa7f40000, jit->exit_ip - jit->prg);
  902. break;
  903. /*
  904. * Branch relative (number of skipped instructions) to offset on
  905. * condition.
  906. *
  907. * Condition code to mask mapping:
  908. *
  909. * CC | Description | Mask
  910. * ------------------------------
  911. * 0 | Operands equal | 8
  912. * 1 | First operand low | 4
  913. * 2 | First operand high | 2
  914. * 3 | Unused | 1
  915. *
  916. * For s390x relative branches: ip = ip + off_bytes
  917. * For BPF relative branches: insn = insn + off_insns + 1
  918. *
  919. * For example for s390x with offset 0 we jump to the branch
  920. * instruction itself (loop) and for BPF with offset 0 we
  921. * branch to the instruction behind the branch.
  922. */
  923. case BPF_JMP | BPF_JA: /* if (true) */
  924. mask = 0xf000; /* j */
  925. goto branch_oc;
  926. case BPF_JMP | BPF_JSGT | BPF_K: /* ((s64) dst > (s64) imm) */
  927. mask = 0x2000; /* jh */
  928. goto branch_ks;
  929. case BPF_JMP | BPF_JSGE | BPF_K: /* ((s64) dst >= (s64) imm) */
  930. mask = 0xa000; /* jhe */
  931. goto branch_ks;
  932. case BPF_JMP | BPF_JGT | BPF_K: /* (dst_reg > imm) */
  933. mask = 0x2000; /* jh */
  934. goto branch_ku;
  935. case BPF_JMP | BPF_JGE | BPF_K: /* (dst_reg >= imm) */
  936. mask = 0xa000; /* jhe */
  937. goto branch_ku;
  938. case BPF_JMP | BPF_JNE | BPF_K: /* (dst_reg != imm) */
  939. mask = 0x7000; /* jne */
  940. goto branch_ku;
  941. case BPF_JMP | BPF_JEQ | BPF_K: /* (dst_reg == imm) */
  942. mask = 0x8000; /* je */
  943. goto branch_ku;
  944. case BPF_JMP | BPF_JSET | BPF_K: /* (dst_reg & imm) */
  945. mask = 0x7000; /* jnz */
  946. /* lgfi %w1,imm (load sign extend imm) */
  947. EMIT6_IMM(0xc0010000, REG_W1, imm);
  948. /* ngr %w1,%dst */
  949. EMIT4(0xb9800000, REG_W1, dst_reg);
  950. goto branch_oc;
  951. case BPF_JMP | BPF_JSGT | BPF_X: /* ((s64) dst > (s64) src) */
  952. mask = 0x2000; /* jh */
  953. goto branch_xs;
  954. case BPF_JMP | BPF_JSGE | BPF_X: /* ((s64) dst >= (s64) src) */
  955. mask = 0xa000; /* jhe */
  956. goto branch_xs;
  957. case BPF_JMP | BPF_JGT | BPF_X: /* (dst > src) */
  958. mask = 0x2000; /* jh */
  959. goto branch_xu;
  960. case BPF_JMP | BPF_JGE | BPF_X: /* (dst >= src) */
  961. mask = 0xa000; /* jhe */
  962. goto branch_xu;
  963. case BPF_JMP | BPF_JNE | BPF_X: /* (dst != src) */
  964. mask = 0x7000; /* jne */
  965. goto branch_xu;
  966. case BPF_JMP | BPF_JEQ | BPF_X: /* (dst == src) */
  967. mask = 0x8000; /* je */
  968. goto branch_xu;
  969. case BPF_JMP | BPF_JSET | BPF_X: /* (dst & src) */
  970. mask = 0x7000; /* jnz */
  971. /* ngrk %w1,%dst,%src */
  972. EMIT4_RRF(0xb9e40000, REG_W1, dst_reg, src_reg);
  973. goto branch_oc;
  974. branch_ks:
  975. /* lgfi %w1,imm (load sign extend imm) */
  976. EMIT6_IMM(0xc0010000, REG_W1, imm);
  977. /* cgrj %dst,%w1,mask,off */
  978. EMIT6_PCREL(0xec000000, 0x0064, dst_reg, REG_W1, i, off, mask);
  979. break;
  980. branch_ku:
  981. /* lgfi %w1,imm (load sign extend imm) */
  982. EMIT6_IMM(0xc0010000, REG_W1, imm);
  983. /* clgrj %dst,%w1,mask,off */
  984. EMIT6_PCREL(0xec000000, 0x0065, dst_reg, REG_W1, i, off, mask);
  985. break;
  986. branch_xs:
  987. /* cgrj %dst,%src,mask,off */
  988. EMIT6_PCREL(0xec000000, 0x0064, dst_reg, src_reg, i, off, mask);
  989. break;
  990. branch_xu:
  991. /* clgrj %dst,%src,mask,off */
  992. EMIT6_PCREL(0xec000000, 0x0065, dst_reg, src_reg, i, off, mask);
  993. break;
  994. branch_oc:
  995. /* brc mask,jmp_off (branch instruction needs 4 bytes) */
  996. jmp_off = addrs[i + off + 1] - (addrs[i + 1] - 4);
  997. EMIT4_PCREL(0xa7040000 | mask << 8, jmp_off);
  998. break;
  999. /*
  1000. * BPF_LD
  1001. */
  1002. case BPF_LD | BPF_ABS | BPF_B: /* b0 = *(u8 *) (skb->data+imm) */
  1003. case BPF_LD | BPF_IND | BPF_B: /* b0 = *(u8 *) (skb->data+imm+src) */
  1004. if ((BPF_MODE(insn->code) == BPF_ABS) && (imm >= 0))
  1005. func_addr = __pa(sk_load_byte_pos);
  1006. else
  1007. func_addr = __pa(sk_load_byte);
  1008. goto call_fn;
  1009. case BPF_LD | BPF_ABS | BPF_H: /* b0 = *(u16 *) (skb->data+imm) */
  1010. case BPF_LD | BPF_IND | BPF_H: /* b0 = *(u16 *) (skb->data+imm+src) */
  1011. if ((BPF_MODE(insn->code) == BPF_ABS) && (imm >= 0))
  1012. func_addr = __pa(sk_load_half_pos);
  1013. else
  1014. func_addr = __pa(sk_load_half);
  1015. goto call_fn;
  1016. case BPF_LD | BPF_ABS | BPF_W: /* b0 = *(u32 *) (skb->data+imm) */
  1017. case BPF_LD | BPF_IND | BPF_W: /* b0 = *(u32 *) (skb->data+imm+src) */
  1018. if ((BPF_MODE(insn->code) == BPF_ABS) && (imm >= 0))
  1019. func_addr = __pa(sk_load_word_pos);
  1020. else
  1021. func_addr = __pa(sk_load_word);
  1022. goto call_fn;
  1023. call_fn:
  1024. jit->seen |= SEEN_SKB | SEEN_RET0 | SEEN_FUNC;
  1025. REG_SET_SEEN(REG_14); /* Return address of possible func call */
  1026. /*
  1027. * Implicit input:
  1028. * BPF_REG_6 (R7) : skb pointer
  1029. * REG_SKB_DATA (R12): skb data pointer
  1030. *
  1031. * Calculated input:
  1032. * BPF_REG_2 (R3) : offset of byte(s) to fetch in skb
  1033. * BPF_REG_5 (R6) : return address
  1034. *
  1035. * Output:
  1036. * BPF_REG_0 (R14): data read from skb
  1037. *
  1038. * Scratch registers (BPF_REG_1-5)
  1039. */
  1040. /* Call function: llilf %w1,func_addr */
  1041. EMIT6_IMM(0xc00f0000, REG_W1, func_addr);
  1042. /* Offset: lgfi %b2,imm */
  1043. EMIT6_IMM(0xc0010000, BPF_REG_2, imm);
  1044. if (BPF_MODE(insn->code) == BPF_IND)
  1045. /* agfr %b2,%src (%src is s32 here) */
  1046. EMIT4(0xb9180000, BPF_REG_2, src_reg);
  1047. /* basr %b5,%w1 (%b5 is call saved) */
  1048. EMIT2(0x0d00, BPF_REG_5, REG_W1);
  1049. /*
  1050. * Note: For fast access we jump directly after the
  1051. * jnz instruction from bpf_jit.S
  1052. */
  1053. /* jnz <ret0> */
  1054. EMIT4_PCREL(0xa7740000, jit->ret0_ip - jit->prg);
  1055. break;
  1056. default: /* too complex, give up */
  1057. pr_err("Unknown opcode %02x\n", insn->code);
  1058. return -1;
  1059. }
  1060. return insn_count;
  1061. }
  1062. /*
  1063. * Compile eBPF program into s390x code
  1064. */
  1065. static int bpf_jit_prog(struct bpf_jit *jit, struct bpf_prog *fp)
  1066. {
  1067. int i, insn_count;
  1068. jit->lit = jit->lit_start;
  1069. jit->prg = 0;
  1070. bpf_jit_prologue(jit);
  1071. for (i = 0; i < fp->len; i += insn_count) {
  1072. insn_count = bpf_jit_insn(jit, fp, i);
  1073. if (insn_count < 0)
  1074. return -1;
  1075. jit->addrs[i + 1] = jit->prg; /* Next instruction address */
  1076. }
  1077. bpf_jit_epilogue(jit);
  1078. jit->lit_start = jit->prg;
  1079. jit->size = jit->lit;
  1080. jit->size_prg = jit->prg;
  1081. return 0;
  1082. }
  1083. /*
  1084. * Classic BPF function stub. BPF programs will be converted into
  1085. * eBPF and then bpf_int_jit_compile() will be called.
  1086. */
  1087. void bpf_jit_compile(struct bpf_prog *fp)
  1088. {
  1089. }
  1090. /*
  1091. * Compile eBPF program "fp"
  1092. */
  1093. void bpf_int_jit_compile(struct bpf_prog *fp)
  1094. {
  1095. struct bpf_binary_header *header;
  1096. struct bpf_jit jit;
  1097. int pass;
  1098. if (!bpf_jit_enable)
  1099. return;
  1100. memset(&jit, 0, sizeof(jit));
  1101. jit.addrs = kcalloc(fp->len + 1, sizeof(*jit.addrs), GFP_KERNEL);
  1102. if (jit.addrs == NULL)
  1103. return;
  1104. /*
  1105. * Three initial passes:
  1106. * - 1/2: Determine clobbered registers
  1107. * - 3: Calculate program size and addrs arrray
  1108. */
  1109. for (pass = 1; pass <= 3; pass++) {
  1110. if (bpf_jit_prog(&jit, fp))
  1111. goto free_addrs;
  1112. }
  1113. /*
  1114. * Final pass: Allocate and generate program
  1115. */
  1116. if (jit.size >= BPF_SIZE_MAX)
  1117. goto free_addrs;
  1118. header = bpf_jit_binary_alloc(jit.size, &jit.prg_buf, 2, jit_fill_hole);
  1119. if (!header)
  1120. goto free_addrs;
  1121. if (bpf_jit_prog(&jit, fp))
  1122. goto free_addrs;
  1123. if (bpf_jit_enable > 1) {
  1124. bpf_jit_dump(fp->len, jit.size, pass, jit.prg_buf);
  1125. if (jit.prg_buf)
  1126. print_fn_code(jit.prg_buf, jit.size_prg);
  1127. }
  1128. if (jit.prg_buf) {
  1129. set_memory_ro((unsigned long)header, header->pages);
  1130. fp->bpf_func = (void *) jit.prg_buf;
  1131. fp->jited = true;
  1132. }
  1133. free_addrs:
  1134. kfree(jit.addrs);
  1135. }
  1136. /*
  1137. * Free eBPF program
  1138. */
  1139. void bpf_jit_free(struct bpf_prog *fp)
  1140. {
  1141. unsigned long addr = (unsigned long)fp->bpf_func & PAGE_MASK;
  1142. struct bpf_binary_header *header = (void *)addr;
  1143. if (!fp->jited)
  1144. goto free_filter;
  1145. set_memory_rw(addr, header->pages);
  1146. bpf_jit_binary_free(header);
  1147. free_filter:
  1148. bpf_prog_unlock_free(fp);
  1149. }