trace_syscalls.c 20 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794
  1. #include <trace/syscall.h>
  2. #include <trace/events/syscalls.h>
  3. #include <linux/syscalls.h>
  4. #include <linux/slab.h>
  5. #include <linux/kernel.h>
  6. #include <linux/module.h> /* for MODULE_NAME_LEN via KSYM_SYMBOL_LEN */
  7. #include <linux/ftrace.h>
  8. #include <linux/perf_event.h>
  9. #include <asm/syscall.h>
  10. #include "trace_output.h"
  11. #include "trace.h"
  12. static DEFINE_MUTEX(syscall_trace_lock);
  13. static int syscall_enter_register(struct ftrace_event_call *event,
  14. enum trace_reg type, void *data);
  15. static int syscall_exit_register(struct ftrace_event_call *event,
  16. enum trace_reg type, void *data);
  17. static struct list_head *
  18. syscall_get_enter_fields(struct ftrace_event_call *call)
  19. {
  20. struct syscall_metadata *entry = call->data;
  21. return &entry->enter_fields;
  22. }
  23. extern struct syscall_metadata *__start_syscalls_metadata[];
  24. extern struct syscall_metadata *__stop_syscalls_metadata[];
  25. static struct syscall_metadata **syscalls_metadata;
  26. #ifndef ARCH_HAS_SYSCALL_MATCH_SYM_NAME
  27. static inline bool arch_syscall_match_sym_name(const char *sym, const char *name)
  28. {
  29. /*
  30. * Only compare after the "sys" prefix. Archs that use
  31. * syscall wrappers may have syscalls symbols aliases prefixed
  32. * with ".SyS" or ".sys" instead of "sys", leading to an unwanted
  33. * mismatch.
  34. */
  35. return !strcmp(sym + 3, name + 3);
  36. }
  37. #endif
  38. #ifdef ARCH_TRACE_IGNORE_COMPAT_SYSCALLS
  39. /*
  40. * Some architectures that allow for 32bit applications
  41. * to run on a 64bit kernel, do not map the syscalls for
  42. * the 32bit tasks the same as they do for 64bit tasks.
  43. *
  44. * *cough*x86*cough*
  45. *
  46. * In such a case, instead of reporting the wrong syscalls,
  47. * simply ignore them.
  48. *
  49. * For an arch to ignore the compat syscalls it needs to
  50. * define ARCH_TRACE_IGNORE_COMPAT_SYSCALLS as well as
  51. * define the function arch_trace_is_compat_syscall() to let
  52. * the tracing system know that it should ignore it.
  53. */
  54. static int
  55. trace_get_syscall_nr(struct task_struct *task, struct pt_regs *regs)
  56. {
  57. if (unlikely(arch_trace_is_compat_syscall(regs)))
  58. return -1;
  59. return syscall_get_nr(task, regs);
  60. }
  61. #else
  62. static inline int
  63. trace_get_syscall_nr(struct task_struct *task, struct pt_regs *regs)
  64. {
  65. return syscall_get_nr(task, regs);
  66. }
  67. #endif /* ARCH_TRACE_IGNORE_COMPAT_SYSCALLS */
  68. static __init struct syscall_metadata *
  69. find_syscall_meta(unsigned long syscall)
  70. {
  71. struct syscall_metadata **start;
  72. struct syscall_metadata **stop;
  73. char str[KSYM_SYMBOL_LEN];
  74. start = __start_syscalls_metadata;
  75. stop = __stop_syscalls_metadata;
  76. kallsyms_lookup(syscall, NULL, NULL, NULL, str);
  77. if (arch_syscall_match_sym_name(str, "sys_ni_syscall"))
  78. return NULL;
  79. for ( ; start < stop; start++) {
  80. if ((*start)->name && arch_syscall_match_sym_name(str, (*start)->name))
  81. return *start;
  82. }
  83. return NULL;
  84. }
  85. static struct syscall_metadata *syscall_nr_to_meta(int nr)
  86. {
  87. if (!syscalls_metadata || nr >= NR_syscalls || nr < 0)
  88. return NULL;
  89. return syscalls_metadata[nr];
  90. }
  91. static enum print_line_t
  92. print_syscall_enter(struct trace_iterator *iter, int flags,
  93. struct trace_event *event)
  94. {
  95. struct trace_seq *s = &iter->seq;
  96. struct trace_entry *ent = iter->ent;
  97. struct syscall_trace_enter *trace;
  98. struct syscall_metadata *entry;
  99. int i, ret, syscall;
  100. trace = (typeof(trace))ent;
  101. syscall = trace->nr;
  102. entry = syscall_nr_to_meta(syscall);
  103. if (!entry)
  104. goto end;
  105. if (entry->enter_event->event.type != ent->type) {
  106. WARN_ON_ONCE(1);
  107. goto end;
  108. }
  109. ret = trace_seq_printf(s, "%s(", entry->name);
  110. if (!ret)
  111. return TRACE_TYPE_PARTIAL_LINE;
  112. for (i = 0; i < entry->nb_args; i++) {
  113. /* parameter types */
  114. if (trace_flags & TRACE_ITER_VERBOSE) {
  115. ret = trace_seq_printf(s, "%s ", entry->types[i]);
  116. if (!ret)
  117. return TRACE_TYPE_PARTIAL_LINE;
  118. }
  119. /* parameter values */
  120. ret = trace_seq_printf(s, "%s: %lx%s", entry->args[i],
  121. trace->args[i],
  122. i == entry->nb_args - 1 ? "" : ", ");
  123. if (!ret)
  124. return TRACE_TYPE_PARTIAL_LINE;
  125. }
  126. ret = trace_seq_putc(s, ')');
  127. if (!ret)
  128. return TRACE_TYPE_PARTIAL_LINE;
  129. end:
  130. ret = trace_seq_putc(s, '\n');
  131. if (!ret)
  132. return TRACE_TYPE_PARTIAL_LINE;
  133. return TRACE_TYPE_HANDLED;
  134. }
  135. static enum print_line_t
  136. print_syscall_exit(struct trace_iterator *iter, int flags,
  137. struct trace_event *event)
  138. {
  139. struct trace_seq *s = &iter->seq;
  140. struct trace_entry *ent = iter->ent;
  141. struct syscall_trace_exit *trace;
  142. int syscall;
  143. struct syscall_metadata *entry;
  144. int ret;
  145. trace = (typeof(trace))ent;
  146. syscall = trace->nr;
  147. entry = syscall_nr_to_meta(syscall);
  148. if (!entry) {
  149. trace_seq_putc(s, '\n');
  150. return TRACE_TYPE_HANDLED;
  151. }
  152. if (entry->exit_event->event.type != ent->type) {
  153. WARN_ON_ONCE(1);
  154. return TRACE_TYPE_UNHANDLED;
  155. }
  156. ret = trace_seq_printf(s, "%s -> 0x%lx\n", entry->name,
  157. trace->ret);
  158. if (!ret)
  159. return TRACE_TYPE_PARTIAL_LINE;
  160. return TRACE_TYPE_HANDLED;
  161. }
  162. extern char *__bad_type_size(void);
  163. #define SYSCALL_FIELD(type, name) \
  164. sizeof(type) != sizeof(trace.name) ? \
  165. __bad_type_size() : \
  166. #type, #name, offsetof(typeof(trace), name), \
  167. sizeof(trace.name), is_signed_type(type)
  168. static int __init
  169. __set_enter_print_fmt(struct syscall_metadata *entry, char *buf, int len)
  170. {
  171. int i;
  172. int pos = 0;
  173. /* When len=0, we just calculate the needed length */
  174. #define LEN_OR_ZERO (len ? len - pos : 0)
  175. pos += snprintf(buf + pos, LEN_OR_ZERO, "\"");
  176. for (i = 0; i < entry->nb_args; i++) {
  177. pos += snprintf(buf + pos, LEN_OR_ZERO, "%s: 0x%%0%zulx%s",
  178. entry->args[i], sizeof(unsigned long),
  179. i == entry->nb_args - 1 ? "" : ", ");
  180. }
  181. pos += snprintf(buf + pos, LEN_OR_ZERO, "\"");
  182. for (i = 0; i < entry->nb_args; i++) {
  183. pos += snprintf(buf + pos, LEN_OR_ZERO,
  184. ", ((unsigned long)(REC->%s))", entry->args[i]);
  185. }
  186. #undef LEN_OR_ZERO
  187. /* return the length of print_fmt */
  188. return pos;
  189. }
  190. static int __init set_syscall_print_fmt(struct ftrace_event_call *call)
  191. {
  192. char *print_fmt;
  193. int len;
  194. struct syscall_metadata *entry = call->data;
  195. if (entry->enter_event != call) {
  196. call->print_fmt = "\"0x%lx\", REC->ret";
  197. return 0;
  198. }
  199. /* First: called with 0 length to calculate the needed length */
  200. len = __set_enter_print_fmt(entry, NULL, 0);
  201. print_fmt = kmalloc(len + 1, GFP_KERNEL);
  202. if (!print_fmt)
  203. return -ENOMEM;
  204. /* Second: actually write the @print_fmt */
  205. __set_enter_print_fmt(entry, print_fmt, len + 1);
  206. call->print_fmt = print_fmt;
  207. return 0;
  208. }
  209. static void __init free_syscall_print_fmt(struct ftrace_event_call *call)
  210. {
  211. struct syscall_metadata *entry = call->data;
  212. if (entry->enter_event == call)
  213. kfree(call->print_fmt);
  214. }
  215. static int __init syscall_enter_define_fields(struct ftrace_event_call *call)
  216. {
  217. struct syscall_trace_enter trace;
  218. struct syscall_metadata *meta = call->data;
  219. int ret;
  220. int i;
  221. int offset = offsetof(typeof(trace), args);
  222. ret = trace_define_field(call, SYSCALL_FIELD(int, nr), FILTER_OTHER);
  223. if (ret)
  224. return ret;
  225. for (i = 0; i < meta->nb_args; i++) {
  226. ret = trace_define_field(call, meta->types[i],
  227. meta->args[i], offset,
  228. sizeof(unsigned long), 0,
  229. FILTER_OTHER);
  230. offset += sizeof(unsigned long);
  231. }
  232. return ret;
  233. }
  234. static int __init syscall_exit_define_fields(struct ftrace_event_call *call)
  235. {
  236. struct syscall_trace_exit trace;
  237. int ret;
  238. ret = trace_define_field(call, SYSCALL_FIELD(int, nr), FILTER_OTHER);
  239. if (ret)
  240. return ret;
  241. ret = trace_define_field(call, SYSCALL_FIELD(long, ret),
  242. FILTER_OTHER);
  243. return ret;
  244. }
  245. static void ftrace_syscall_enter(void *data, struct pt_regs *regs, long id)
  246. {
  247. struct trace_array *tr = data;
  248. struct ftrace_event_file *ftrace_file;
  249. struct syscall_trace_enter *entry;
  250. struct syscall_metadata *sys_data;
  251. struct ring_buffer_event *event;
  252. enum event_trigger_type tt = ETT_NONE;
  253. struct ring_buffer *buffer;
  254. unsigned long irq_flags;
  255. unsigned long eflags;
  256. int pc;
  257. int syscall_nr;
  258. int size;
  259. syscall_nr = trace_get_syscall_nr(current, regs);
  260. if (syscall_nr < 0)
  261. return;
  262. /* Here we're inside tp handler's rcu_read_lock_sched (__DO_TRACE) */
  263. ftrace_file = rcu_dereference_sched(tr->enter_syscall_files[syscall_nr]);
  264. if (!ftrace_file)
  265. return;
  266. eflags = ftrace_file->flags;
  267. if (!(eflags & FTRACE_EVENT_FL_TRIGGER_COND)) {
  268. if (eflags & FTRACE_EVENT_FL_TRIGGER_MODE)
  269. event_triggers_call(ftrace_file, NULL);
  270. if (eflags & FTRACE_EVENT_FL_SOFT_DISABLED)
  271. return;
  272. }
  273. sys_data = syscall_nr_to_meta(syscall_nr);
  274. if (!sys_data)
  275. return;
  276. size = sizeof(*entry) + sizeof(unsigned long) * sys_data->nb_args;
  277. local_save_flags(irq_flags);
  278. pc = preempt_count();
  279. buffer = tr->trace_buffer.buffer;
  280. event = trace_buffer_lock_reserve(buffer,
  281. sys_data->enter_event->event.type, size, irq_flags, pc);
  282. if (!event)
  283. return;
  284. entry = ring_buffer_event_data(event);
  285. entry->nr = syscall_nr;
  286. syscall_get_arguments(current, regs, 0, sys_data->nb_args, entry->args);
  287. if (eflags & FTRACE_EVENT_FL_TRIGGER_COND)
  288. tt = event_triggers_call(ftrace_file, entry);
  289. if (test_bit(FTRACE_EVENT_FL_SOFT_DISABLED_BIT, &ftrace_file->flags))
  290. ring_buffer_discard_commit(buffer, event);
  291. else if (!filter_check_discard(ftrace_file, entry, buffer, event))
  292. trace_current_buffer_unlock_commit(buffer, event,
  293. irq_flags, pc);
  294. if (tt)
  295. event_triggers_post_call(ftrace_file, tt);
  296. }
  297. static void ftrace_syscall_exit(void *data, struct pt_regs *regs, long ret)
  298. {
  299. struct trace_array *tr = data;
  300. struct ftrace_event_file *ftrace_file;
  301. struct syscall_trace_exit *entry;
  302. struct syscall_metadata *sys_data;
  303. struct ring_buffer_event *event;
  304. enum event_trigger_type tt = ETT_NONE;
  305. struct ring_buffer *buffer;
  306. unsigned long irq_flags;
  307. unsigned long eflags;
  308. int pc;
  309. int syscall_nr;
  310. syscall_nr = trace_get_syscall_nr(current, regs);
  311. if (syscall_nr < 0)
  312. return;
  313. /* Here we're inside tp handler's rcu_read_lock_sched (__DO_TRACE()) */
  314. ftrace_file = rcu_dereference_sched(tr->exit_syscall_files[syscall_nr]);
  315. if (!ftrace_file)
  316. return;
  317. eflags = ftrace_file->flags;
  318. if (!(eflags & FTRACE_EVENT_FL_TRIGGER_COND)) {
  319. if (eflags & FTRACE_EVENT_FL_TRIGGER_MODE)
  320. event_triggers_call(ftrace_file, NULL);
  321. if (eflags & FTRACE_EVENT_FL_SOFT_DISABLED)
  322. return;
  323. }
  324. sys_data = syscall_nr_to_meta(syscall_nr);
  325. if (!sys_data)
  326. return;
  327. local_save_flags(irq_flags);
  328. pc = preempt_count();
  329. buffer = tr->trace_buffer.buffer;
  330. event = trace_buffer_lock_reserve(buffer,
  331. sys_data->exit_event->event.type, sizeof(*entry),
  332. irq_flags, pc);
  333. if (!event)
  334. return;
  335. entry = ring_buffer_event_data(event);
  336. entry->nr = syscall_nr;
  337. entry->ret = syscall_get_return_value(current, regs);
  338. if (eflags & FTRACE_EVENT_FL_TRIGGER_COND)
  339. tt = event_triggers_call(ftrace_file, entry);
  340. if (test_bit(FTRACE_EVENT_FL_SOFT_DISABLED_BIT, &ftrace_file->flags))
  341. ring_buffer_discard_commit(buffer, event);
  342. else if (!filter_check_discard(ftrace_file, entry, buffer, event))
  343. trace_current_buffer_unlock_commit(buffer, event,
  344. irq_flags, pc);
  345. if (tt)
  346. event_triggers_post_call(ftrace_file, tt);
  347. }
  348. static int reg_event_syscall_enter(struct ftrace_event_file *file,
  349. struct ftrace_event_call *call)
  350. {
  351. struct trace_array *tr = file->tr;
  352. int ret = 0;
  353. int num;
  354. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  355. if (WARN_ON_ONCE(num < 0 || num >= NR_syscalls))
  356. return -ENOSYS;
  357. mutex_lock(&syscall_trace_lock);
  358. if (!tr->sys_refcount_enter)
  359. ret = register_trace_sys_enter(ftrace_syscall_enter, tr);
  360. if (!ret) {
  361. rcu_assign_pointer(tr->enter_syscall_files[num], file);
  362. tr->sys_refcount_enter++;
  363. }
  364. mutex_unlock(&syscall_trace_lock);
  365. return ret;
  366. }
  367. static void unreg_event_syscall_enter(struct ftrace_event_file *file,
  368. struct ftrace_event_call *call)
  369. {
  370. struct trace_array *tr = file->tr;
  371. int num;
  372. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  373. if (WARN_ON_ONCE(num < 0 || num >= NR_syscalls))
  374. return;
  375. mutex_lock(&syscall_trace_lock);
  376. tr->sys_refcount_enter--;
  377. rcu_assign_pointer(tr->enter_syscall_files[num], NULL);
  378. if (!tr->sys_refcount_enter)
  379. unregister_trace_sys_enter(ftrace_syscall_enter, tr);
  380. mutex_unlock(&syscall_trace_lock);
  381. }
  382. static int reg_event_syscall_exit(struct ftrace_event_file *file,
  383. struct ftrace_event_call *call)
  384. {
  385. struct trace_array *tr = file->tr;
  386. int ret = 0;
  387. int num;
  388. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  389. if (WARN_ON_ONCE(num < 0 || num >= NR_syscalls))
  390. return -ENOSYS;
  391. mutex_lock(&syscall_trace_lock);
  392. if (!tr->sys_refcount_exit)
  393. ret = register_trace_sys_exit(ftrace_syscall_exit, tr);
  394. if (!ret) {
  395. rcu_assign_pointer(tr->exit_syscall_files[num], file);
  396. tr->sys_refcount_exit++;
  397. }
  398. mutex_unlock(&syscall_trace_lock);
  399. return ret;
  400. }
  401. static void unreg_event_syscall_exit(struct ftrace_event_file *file,
  402. struct ftrace_event_call *call)
  403. {
  404. struct trace_array *tr = file->tr;
  405. int num;
  406. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  407. if (WARN_ON_ONCE(num < 0 || num >= NR_syscalls))
  408. return;
  409. mutex_lock(&syscall_trace_lock);
  410. tr->sys_refcount_exit--;
  411. rcu_assign_pointer(tr->exit_syscall_files[num], NULL);
  412. if (!tr->sys_refcount_exit)
  413. unregister_trace_sys_exit(ftrace_syscall_exit, tr);
  414. mutex_unlock(&syscall_trace_lock);
  415. }
  416. static int __init init_syscall_trace(struct ftrace_event_call *call)
  417. {
  418. int id;
  419. int num;
  420. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  421. if (num < 0 || num >= NR_syscalls) {
  422. pr_debug("syscall %s metadata not mapped, disabling ftrace event\n",
  423. ((struct syscall_metadata *)call->data)->name);
  424. return -ENOSYS;
  425. }
  426. if (set_syscall_print_fmt(call) < 0)
  427. return -ENOMEM;
  428. id = trace_event_raw_init(call);
  429. if (id < 0) {
  430. free_syscall_print_fmt(call);
  431. return id;
  432. }
  433. return id;
  434. }
  435. struct trace_event_functions enter_syscall_print_funcs = {
  436. .trace = print_syscall_enter,
  437. };
  438. struct trace_event_functions exit_syscall_print_funcs = {
  439. .trace = print_syscall_exit,
  440. };
  441. struct ftrace_event_class __refdata event_class_syscall_enter = {
  442. .system = "syscalls",
  443. .reg = syscall_enter_register,
  444. .define_fields = syscall_enter_define_fields,
  445. .get_fields = syscall_get_enter_fields,
  446. .raw_init = init_syscall_trace,
  447. };
  448. struct ftrace_event_class __refdata event_class_syscall_exit = {
  449. .system = "syscalls",
  450. .reg = syscall_exit_register,
  451. .define_fields = syscall_exit_define_fields,
  452. .fields = LIST_HEAD_INIT(event_class_syscall_exit.fields),
  453. .raw_init = init_syscall_trace,
  454. };
  455. unsigned long __init __weak arch_syscall_addr(int nr)
  456. {
  457. return (unsigned long)sys_call_table[nr];
  458. }
  459. static int __init init_ftrace_syscalls(void)
  460. {
  461. struct syscall_metadata *meta;
  462. unsigned long addr;
  463. int i;
  464. syscalls_metadata = kcalloc(NR_syscalls, sizeof(*syscalls_metadata),
  465. GFP_KERNEL);
  466. if (!syscalls_metadata) {
  467. WARN_ON(1);
  468. return -ENOMEM;
  469. }
  470. for (i = 0; i < NR_syscalls; i++) {
  471. addr = arch_syscall_addr(i);
  472. meta = find_syscall_meta(addr);
  473. if (!meta)
  474. continue;
  475. meta->syscall_nr = i;
  476. syscalls_metadata[i] = meta;
  477. }
  478. return 0;
  479. }
  480. early_initcall(init_ftrace_syscalls);
  481. #ifdef CONFIG_PERF_EVENTS
  482. static DECLARE_BITMAP(enabled_perf_enter_syscalls, NR_syscalls);
  483. static DECLARE_BITMAP(enabled_perf_exit_syscalls, NR_syscalls);
  484. static int sys_perf_refcount_enter;
  485. static int sys_perf_refcount_exit;
  486. static void perf_syscall_enter(void *ignore, struct pt_regs *regs, long id)
  487. {
  488. struct syscall_metadata *sys_data;
  489. struct syscall_trace_enter *rec;
  490. struct hlist_head *head;
  491. int syscall_nr;
  492. int rctx;
  493. int size;
  494. syscall_nr = trace_get_syscall_nr(current, regs);
  495. if (syscall_nr < 0)
  496. return;
  497. if (!test_bit(syscall_nr, enabled_perf_enter_syscalls))
  498. return;
  499. sys_data = syscall_nr_to_meta(syscall_nr);
  500. if (!sys_data)
  501. return;
  502. head = this_cpu_ptr(sys_data->enter_event->perf_events);
  503. if (hlist_empty(head))
  504. return;
  505. /* get the size after alignment with the u32 buffer size field */
  506. size = sizeof(unsigned long) * sys_data->nb_args + sizeof(*rec);
  507. size = ALIGN(size + sizeof(u32), sizeof(u64));
  508. size -= sizeof(u32);
  509. rec = (struct syscall_trace_enter *)perf_trace_buf_prepare(size,
  510. sys_data->enter_event->event.type, regs, &rctx);
  511. if (!rec)
  512. return;
  513. rec->nr = syscall_nr;
  514. syscall_get_arguments(current, regs, 0, sys_data->nb_args,
  515. (unsigned long *)&rec->args);
  516. perf_trace_buf_submit(rec, size, rctx, 0, 1, regs, head, NULL);
  517. }
  518. static int perf_sysenter_enable(struct ftrace_event_call *call)
  519. {
  520. int ret = 0;
  521. int num;
  522. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  523. mutex_lock(&syscall_trace_lock);
  524. if (!sys_perf_refcount_enter)
  525. ret = register_trace_sys_enter(perf_syscall_enter, NULL);
  526. if (ret) {
  527. pr_info("event trace: Could not activate"
  528. "syscall entry trace point");
  529. } else {
  530. set_bit(num, enabled_perf_enter_syscalls);
  531. sys_perf_refcount_enter++;
  532. }
  533. mutex_unlock(&syscall_trace_lock);
  534. return ret;
  535. }
  536. static void perf_sysenter_disable(struct ftrace_event_call *call)
  537. {
  538. int num;
  539. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  540. mutex_lock(&syscall_trace_lock);
  541. sys_perf_refcount_enter--;
  542. clear_bit(num, enabled_perf_enter_syscalls);
  543. if (!sys_perf_refcount_enter)
  544. unregister_trace_sys_enter(perf_syscall_enter, NULL);
  545. mutex_unlock(&syscall_trace_lock);
  546. }
  547. static void perf_syscall_exit(void *ignore, struct pt_regs *regs, long ret)
  548. {
  549. struct syscall_metadata *sys_data;
  550. struct syscall_trace_exit *rec;
  551. struct hlist_head *head;
  552. int syscall_nr;
  553. int rctx;
  554. int size;
  555. syscall_nr = trace_get_syscall_nr(current, regs);
  556. if (syscall_nr < 0)
  557. return;
  558. if (!test_bit(syscall_nr, enabled_perf_exit_syscalls))
  559. return;
  560. sys_data = syscall_nr_to_meta(syscall_nr);
  561. if (!sys_data)
  562. return;
  563. head = this_cpu_ptr(sys_data->exit_event->perf_events);
  564. if (hlist_empty(head))
  565. return;
  566. /* We can probably do that at build time */
  567. size = ALIGN(sizeof(*rec) + sizeof(u32), sizeof(u64));
  568. size -= sizeof(u32);
  569. rec = (struct syscall_trace_exit *)perf_trace_buf_prepare(size,
  570. sys_data->exit_event->event.type, regs, &rctx);
  571. if (!rec)
  572. return;
  573. rec->nr = syscall_nr;
  574. rec->ret = syscall_get_return_value(current, regs);
  575. perf_trace_buf_submit(rec, size, rctx, 0, 1, regs, head, NULL);
  576. }
  577. static int perf_sysexit_enable(struct ftrace_event_call *call)
  578. {
  579. int ret = 0;
  580. int num;
  581. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  582. mutex_lock(&syscall_trace_lock);
  583. if (!sys_perf_refcount_exit)
  584. ret = register_trace_sys_exit(perf_syscall_exit, NULL);
  585. if (ret) {
  586. pr_info("event trace: Could not activate"
  587. "syscall exit trace point");
  588. } else {
  589. set_bit(num, enabled_perf_exit_syscalls);
  590. sys_perf_refcount_exit++;
  591. }
  592. mutex_unlock(&syscall_trace_lock);
  593. return ret;
  594. }
  595. static void perf_sysexit_disable(struct ftrace_event_call *call)
  596. {
  597. int num;
  598. num = ((struct syscall_metadata *)call->data)->syscall_nr;
  599. mutex_lock(&syscall_trace_lock);
  600. sys_perf_refcount_exit--;
  601. clear_bit(num, enabled_perf_exit_syscalls);
  602. if (!sys_perf_refcount_exit)
  603. unregister_trace_sys_exit(perf_syscall_exit, NULL);
  604. mutex_unlock(&syscall_trace_lock);
  605. }
  606. #endif /* CONFIG_PERF_EVENTS */
  607. static int syscall_enter_register(struct ftrace_event_call *event,
  608. enum trace_reg type, void *data)
  609. {
  610. struct ftrace_event_file *file = data;
  611. switch (type) {
  612. case TRACE_REG_REGISTER:
  613. return reg_event_syscall_enter(file, event);
  614. case TRACE_REG_UNREGISTER:
  615. unreg_event_syscall_enter(file, event);
  616. return 0;
  617. #ifdef CONFIG_PERF_EVENTS
  618. case TRACE_REG_PERF_REGISTER:
  619. return perf_sysenter_enable(event);
  620. case TRACE_REG_PERF_UNREGISTER:
  621. perf_sysenter_disable(event);
  622. return 0;
  623. case TRACE_REG_PERF_OPEN:
  624. case TRACE_REG_PERF_CLOSE:
  625. case TRACE_REG_PERF_ADD:
  626. case TRACE_REG_PERF_DEL:
  627. return 0;
  628. #endif
  629. }
  630. return 0;
  631. }
  632. static int syscall_exit_register(struct ftrace_event_call *event,
  633. enum trace_reg type, void *data)
  634. {
  635. struct ftrace_event_file *file = data;
  636. switch (type) {
  637. case TRACE_REG_REGISTER:
  638. return reg_event_syscall_exit(file, event);
  639. case TRACE_REG_UNREGISTER:
  640. unreg_event_syscall_exit(file, event);
  641. return 0;
  642. #ifdef CONFIG_PERF_EVENTS
  643. case TRACE_REG_PERF_REGISTER:
  644. return perf_sysexit_enable(event);
  645. case TRACE_REG_PERF_UNREGISTER:
  646. perf_sysexit_disable(event);
  647. return 0;
  648. case TRACE_REG_PERF_OPEN:
  649. case TRACE_REG_PERF_CLOSE:
  650. case TRACE_REG_PERF_ADD:
  651. case TRACE_REG_PERF_DEL:
  652. return 0;
  653. #endif
  654. }
  655. return 0;
  656. }