kprobes.c 6.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268
  1. /*
  2. * Kernel Probes (KProbes)
  3. *
  4. * Copyright (C) 2005-2006 Atmel Corporation
  5. *
  6. * Based on arch/ppc64/kernel/kprobes.c
  7. * Copyright (C) IBM Corporation, 2002, 2004
  8. *
  9. * This program is free software; you can redistribute it and/or modify
  10. * it under the terms of the GNU General Public License version 2 as
  11. * published by the Free Software Foundation.
  12. */
  13. #include <linux/kprobes.h>
  14. #include <linux/ptrace.h>
  15. #include <asm/cacheflush.h>
  16. #include <linux/kdebug.h>
  17. #include <asm/ocd.h>
  18. DEFINE_PER_CPU(struct kprobe *, current_kprobe);
  19. static unsigned long kprobe_status;
  20. static struct pt_regs jprobe_saved_regs;
  21. struct kretprobe_blackpoint kretprobe_blacklist[] = {{NULL, NULL}};
  22. int __kprobes arch_prepare_kprobe(struct kprobe *p)
  23. {
  24. int ret = 0;
  25. if ((unsigned long)p->addr & 0x01) {
  26. printk("Attempt to register kprobe at an unaligned address\n");
  27. ret = -EINVAL;
  28. }
  29. /* XXX: Might be a good idea to check if p->addr is a valid
  30. * kernel address as well... */
  31. if (!ret) {
  32. pr_debug("copy kprobe at %p\n", p->addr);
  33. memcpy(p->ainsn.insn, p->addr, MAX_INSN_SIZE * sizeof(kprobe_opcode_t));
  34. p->opcode = *p->addr;
  35. }
  36. return ret;
  37. }
  38. void __kprobes arch_arm_kprobe(struct kprobe *p)
  39. {
  40. pr_debug("arming kprobe at %p\n", p->addr);
  41. *p->addr = BREAKPOINT_INSTRUCTION;
  42. flush_icache_range((unsigned long)p->addr,
  43. (unsigned long)p->addr + sizeof(kprobe_opcode_t));
  44. }
  45. void __kprobes arch_disarm_kprobe(struct kprobe *p)
  46. {
  47. pr_debug("disarming kprobe at %p\n", p->addr);
  48. *p->addr = p->opcode;
  49. flush_icache_range((unsigned long)p->addr,
  50. (unsigned long)p->addr + sizeof(kprobe_opcode_t));
  51. }
  52. static void __kprobes prepare_singlestep(struct kprobe *p, struct pt_regs *regs)
  53. {
  54. unsigned long dc;
  55. pr_debug("preparing to singlestep over %p (PC=%08lx)\n",
  56. p->addr, regs->pc);
  57. BUG_ON(!(sysreg_read(SR) & SYSREG_BIT(SR_D)));
  58. dc = __mfdr(DBGREG_DC);
  59. dc |= DC_SS;
  60. __mtdr(DBGREG_DC, dc);
  61. /*
  62. * We must run the instruction from its original location
  63. * since it may actually reference PC.
  64. *
  65. * TODO: Do the instruction replacement directly in icache.
  66. */
  67. *p->addr = p->opcode;
  68. flush_icache_range((unsigned long)p->addr,
  69. (unsigned long)p->addr + sizeof(kprobe_opcode_t));
  70. }
  71. static void __kprobes resume_execution(struct kprobe *p, struct pt_regs *regs)
  72. {
  73. unsigned long dc;
  74. pr_debug("resuming execution at PC=%08lx\n", regs->pc);
  75. dc = __mfdr(DBGREG_DC);
  76. dc &= ~DC_SS;
  77. __mtdr(DBGREG_DC, dc);
  78. *p->addr = BREAKPOINT_INSTRUCTION;
  79. flush_icache_range((unsigned long)p->addr,
  80. (unsigned long)p->addr + sizeof(kprobe_opcode_t));
  81. }
  82. static void __kprobes set_current_kprobe(struct kprobe *p)
  83. {
  84. __get_cpu_var(current_kprobe) = p;
  85. }
  86. static int __kprobes kprobe_handler(struct pt_regs *regs)
  87. {
  88. struct kprobe *p;
  89. void *addr = (void *)regs->pc;
  90. int ret = 0;
  91. pr_debug("kprobe_handler: kprobe_running=%p\n",
  92. kprobe_running());
  93. /*
  94. * We don't want to be preempted for the entire
  95. * duration of kprobe processing
  96. */
  97. preempt_disable();
  98. /* Check that we're not recursing */
  99. if (kprobe_running()) {
  100. p = get_kprobe(addr);
  101. if (p) {
  102. if (kprobe_status == KPROBE_HIT_SS) {
  103. printk("FIXME: kprobe hit while single-stepping!\n");
  104. goto no_kprobe;
  105. }
  106. printk("FIXME: kprobe hit while handling another kprobe\n");
  107. goto no_kprobe;
  108. } else {
  109. p = kprobe_running();
  110. if (p->break_handler && p->break_handler(p, regs))
  111. goto ss_probe;
  112. }
  113. /* If it's not ours, can't be delete race, (we hold lock). */
  114. goto no_kprobe;
  115. }
  116. p = get_kprobe(addr);
  117. if (!p)
  118. goto no_kprobe;
  119. kprobe_status = KPROBE_HIT_ACTIVE;
  120. set_current_kprobe(p);
  121. if (p->pre_handler && p->pre_handler(p, regs))
  122. /* handler has already set things up, so skip ss setup */
  123. return 1;
  124. ss_probe:
  125. prepare_singlestep(p, regs);
  126. kprobe_status = KPROBE_HIT_SS;
  127. return 1;
  128. no_kprobe:
  129. preempt_enable_no_resched();
  130. return ret;
  131. }
  132. static int __kprobes post_kprobe_handler(struct pt_regs *regs)
  133. {
  134. struct kprobe *cur = kprobe_running();
  135. pr_debug("post_kprobe_handler, cur=%p\n", cur);
  136. if (!cur)
  137. return 0;
  138. if (cur->post_handler) {
  139. kprobe_status = KPROBE_HIT_SSDONE;
  140. cur->post_handler(cur, regs, 0);
  141. }
  142. resume_execution(cur, regs);
  143. reset_current_kprobe();
  144. preempt_enable_no_resched();
  145. return 1;
  146. }
  147. int __kprobes kprobe_fault_handler(struct pt_regs *regs, int trapnr)
  148. {
  149. struct kprobe *cur = kprobe_running();
  150. pr_debug("kprobe_fault_handler: trapnr=%d\n", trapnr);
  151. if (cur->fault_handler && cur->fault_handler(cur, regs, trapnr))
  152. return 1;
  153. if (kprobe_status & KPROBE_HIT_SS) {
  154. resume_execution(cur, regs);
  155. preempt_enable_no_resched();
  156. }
  157. return 0;
  158. }
  159. /*
  160. * Wrapper routine to for handling exceptions.
  161. */
  162. int __kprobes kprobe_exceptions_notify(struct notifier_block *self,
  163. unsigned long val, void *data)
  164. {
  165. struct die_args *args = (struct die_args *)data;
  166. int ret = NOTIFY_DONE;
  167. pr_debug("kprobe_exceptions_notify: val=%lu, data=%p\n",
  168. val, data);
  169. switch (val) {
  170. case DIE_BREAKPOINT:
  171. if (kprobe_handler(args->regs))
  172. ret = NOTIFY_STOP;
  173. break;
  174. case DIE_SSTEP:
  175. if (post_kprobe_handler(args->regs))
  176. ret = NOTIFY_STOP;
  177. break;
  178. default:
  179. break;
  180. }
  181. return ret;
  182. }
  183. int __kprobes setjmp_pre_handler(struct kprobe *p, struct pt_regs *regs)
  184. {
  185. struct jprobe *jp = container_of(p, struct jprobe, kp);
  186. memcpy(&jprobe_saved_regs, regs, sizeof(struct pt_regs));
  187. /*
  188. * TODO: We should probably save some of the stack here as
  189. * well, since gcc may pass arguments on the stack for certain
  190. * functions (lots of arguments, large aggregates, varargs)
  191. */
  192. /* setup return addr to the jprobe handler routine */
  193. regs->pc = (unsigned long)jp->entry;
  194. return 1;
  195. }
  196. void __kprobes jprobe_return(void)
  197. {
  198. asm volatile("breakpoint" ::: "memory");
  199. }
  200. int __kprobes longjmp_break_handler(struct kprobe *p, struct pt_regs *regs)
  201. {
  202. /*
  203. * FIXME - we should ideally be validating that we got here 'cos
  204. * of the "trap" in jprobe_return() above, before restoring the
  205. * saved regs...
  206. */
  207. memcpy(regs, &jprobe_saved_regs, sizeof(struct pt_regs));
  208. return 1;
  209. }
  210. int __init arch_init_kprobes(void)
  211. {
  212. printk("KPROBES: Enabling monitor mode (MM|DBE)...\n");
  213. __mtdr(DBGREG_DC, DC_MM | DC_DBE);
  214. /* TODO: Register kretprobe trampoline */
  215. return 0;
  216. }