trace_syscalls.c 12 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519
  1. #include <trace/syscall.h>
  2. #include <trace/events/syscalls.h>
  3. #include <linux/kernel.h>
  4. #include <linux/ftrace.h>
  5. #include <linux/perf_counter.h>
  6. #include <asm/syscall.h>
  7. #include "trace_output.h"
  8. #include "trace.h"
  9. static DEFINE_MUTEX(syscall_trace_lock);
  10. static int sys_refcount_enter;
  11. static int sys_refcount_exit;
  12. static DECLARE_BITMAP(enabled_enter_syscalls, NR_syscalls);
  13. static DECLARE_BITMAP(enabled_exit_syscalls, NR_syscalls);
  14. enum print_line_t
  15. print_syscall_enter(struct trace_iterator *iter, int flags)
  16. {
  17. struct trace_seq *s = &iter->seq;
  18. struct trace_entry *ent = iter->ent;
  19. struct syscall_trace_enter *trace;
  20. struct syscall_metadata *entry;
  21. int i, ret, syscall;
  22. trace = (typeof(trace))ent;
  23. syscall = trace->nr;
  24. entry = syscall_nr_to_meta(syscall);
  25. if (!entry)
  26. goto end;
  27. if (entry->enter_id != ent->type) {
  28. WARN_ON_ONCE(1);
  29. goto end;
  30. }
  31. ret = trace_seq_printf(s, "%s(", entry->name);
  32. if (!ret)
  33. return TRACE_TYPE_PARTIAL_LINE;
  34. for (i = 0; i < entry->nb_args; i++) {
  35. /* parameter types */
  36. if (trace_flags & TRACE_ITER_VERBOSE) {
  37. ret = trace_seq_printf(s, "%s ", entry->types[i]);
  38. if (!ret)
  39. return TRACE_TYPE_PARTIAL_LINE;
  40. }
  41. /* parameter values */
  42. ret = trace_seq_printf(s, "%s: %lx%s", entry->args[i],
  43. trace->args[i],
  44. i == entry->nb_args - 1 ? "" : ", ");
  45. if (!ret)
  46. return TRACE_TYPE_PARTIAL_LINE;
  47. }
  48. ret = trace_seq_putc(s, ')');
  49. if (!ret)
  50. return TRACE_TYPE_PARTIAL_LINE;
  51. end:
  52. ret = trace_seq_putc(s, '\n');
  53. if (!ret)
  54. return TRACE_TYPE_PARTIAL_LINE;
  55. return TRACE_TYPE_HANDLED;
  56. }
  57. enum print_line_t
  58. print_syscall_exit(struct trace_iterator *iter, int flags)
  59. {
  60. struct trace_seq *s = &iter->seq;
  61. struct trace_entry *ent = iter->ent;
  62. struct syscall_trace_exit *trace;
  63. int syscall;
  64. struct syscall_metadata *entry;
  65. int ret;
  66. trace = (typeof(trace))ent;
  67. syscall = trace->nr;
  68. entry = syscall_nr_to_meta(syscall);
  69. if (!entry) {
  70. trace_seq_printf(s, "\n");
  71. return TRACE_TYPE_HANDLED;
  72. }
  73. if (entry->exit_id != ent->type) {
  74. WARN_ON_ONCE(1);
  75. return TRACE_TYPE_UNHANDLED;
  76. }
  77. ret = trace_seq_printf(s, "%s -> 0x%lx\n", entry->name,
  78. trace->ret);
  79. if (!ret)
  80. return TRACE_TYPE_PARTIAL_LINE;
  81. return TRACE_TYPE_HANDLED;
  82. }
  83. extern char *__bad_type_size(void);
  84. #define SYSCALL_FIELD(type, name) \
  85. sizeof(type) != sizeof(trace.name) ? \
  86. __bad_type_size() : \
  87. #type, #name, offsetof(typeof(trace), name), sizeof(trace.name)
  88. int syscall_enter_format(struct ftrace_event_call *call, struct trace_seq *s)
  89. {
  90. int i;
  91. int nr;
  92. int ret;
  93. struct syscall_metadata *entry;
  94. struct syscall_trace_enter trace;
  95. int offset = offsetof(struct syscall_trace_enter, args);
  96. nr = syscall_name_to_nr(call->data);
  97. entry = syscall_nr_to_meta(nr);
  98. if (!entry)
  99. return 0;
  100. ret = trace_seq_printf(s, "\tfield:%s %s;\toffset:%zu;\tsize:%zu;\n",
  101. SYSCALL_FIELD(int, nr));
  102. if (!ret)
  103. return 0;
  104. for (i = 0; i < entry->nb_args; i++) {
  105. ret = trace_seq_printf(s, "\tfield:%s %s;", entry->types[i],
  106. entry->args[i]);
  107. if (!ret)
  108. return 0;
  109. ret = trace_seq_printf(s, "\toffset:%d;\tsize:%zu;\n", offset,
  110. sizeof(unsigned long));
  111. if (!ret)
  112. return 0;
  113. offset += sizeof(unsigned long);
  114. }
  115. trace_seq_puts(s, "\nprint fmt: \"");
  116. for (i = 0; i < entry->nb_args; i++) {
  117. ret = trace_seq_printf(s, "%s: 0x%%0%zulx%s", entry->args[i],
  118. sizeof(unsigned long),
  119. i == entry->nb_args - 1 ? "" : ", ");
  120. if (!ret)
  121. return 0;
  122. }
  123. trace_seq_putc(s, '"');
  124. for (i = 0; i < entry->nb_args; i++) {
  125. ret = trace_seq_printf(s, ", ((unsigned long)(REC->%s))",
  126. entry->args[i]);
  127. if (!ret)
  128. return 0;
  129. }
  130. return trace_seq_putc(s, '\n');
  131. }
  132. int syscall_exit_format(struct ftrace_event_call *call, struct trace_seq *s)
  133. {
  134. int ret;
  135. struct syscall_trace_exit trace;
  136. ret = trace_seq_printf(s,
  137. "\tfield:%s %s;\toffset:%zu;\tsize:%zu;\n"
  138. "\tfield:%s %s;\toffset:%zu;\tsize:%zu;\n",
  139. SYSCALL_FIELD(int, nr),
  140. SYSCALL_FIELD(unsigned long, ret));
  141. if (!ret)
  142. return 0;
  143. return trace_seq_printf(s, "\nprint fmt: \"0x%%lx\", REC->ret\n");
  144. }
  145. int syscall_enter_define_fields(struct ftrace_event_call *call)
  146. {
  147. struct syscall_trace_enter trace;
  148. struct syscall_metadata *meta;
  149. int ret;
  150. int nr;
  151. int i;
  152. int offset = offsetof(typeof(trace), args);
  153. nr = syscall_name_to_nr(call->data);
  154. meta = syscall_nr_to_meta(nr);
  155. if (!meta)
  156. return 0;
  157. ret = trace_define_common_fields(call);
  158. if (ret)
  159. return ret;
  160. for (i = 0; i < meta->nb_args; i++) {
  161. ret = trace_define_field(call, meta->types[i],
  162. meta->args[i], offset,
  163. sizeof(unsigned long), 0,
  164. FILTER_OTHER);
  165. offset += sizeof(unsigned long);
  166. }
  167. return ret;
  168. }
  169. int syscall_exit_define_fields(struct ftrace_event_call *call)
  170. {
  171. struct syscall_trace_exit trace;
  172. int ret;
  173. ret = trace_define_common_fields(call);
  174. if (ret)
  175. return ret;
  176. ret = trace_define_field(call, SYSCALL_FIELD(unsigned long, ret), 0,
  177. FILTER_OTHER);
  178. return ret;
  179. }
  180. void ftrace_syscall_enter(struct pt_regs *regs, long id)
  181. {
  182. struct syscall_trace_enter *entry;
  183. struct syscall_metadata *sys_data;
  184. struct ring_buffer_event *event;
  185. int size;
  186. int syscall_nr;
  187. syscall_nr = syscall_get_nr(current, regs);
  188. if (syscall_nr < 0)
  189. return;
  190. if (!test_bit(syscall_nr, enabled_enter_syscalls))
  191. return;
  192. sys_data = syscall_nr_to_meta(syscall_nr);
  193. if (!sys_data)
  194. return;
  195. size = sizeof(*entry) + sizeof(unsigned long) * sys_data->nb_args;
  196. event = trace_current_buffer_lock_reserve(sys_data->enter_id, size,
  197. 0, 0);
  198. if (!event)
  199. return;
  200. entry = ring_buffer_event_data(event);
  201. entry->nr = syscall_nr;
  202. syscall_get_arguments(current, regs, 0, sys_data->nb_args, entry->args);
  203. if (!filter_current_check_discard(sys_data->enter_event, entry, event))
  204. trace_current_buffer_unlock_commit(event, 0, 0);
  205. }
  206. void ftrace_syscall_exit(struct pt_regs *regs, long ret)
  207. {
  208. struct syscall_trace_exit *entry;
  209. struct syscall_metadata *sys_data;
  210. struct ring_buffer_event *event;
  211. int syscall_nr;
  212. syscall_nr = syscall_get_nr(current, regs);
  213. if (syscall_nr < 0)
  214. return;
  215. if (!test_bit(syscall_nr, enabled_exit_syscalls))
  216. return;
  217. sys_data = syscall_nr_to_meta(syscall_nr);
  218. if (!sys_data)
  219. return;
  220. event = trace_current_buffer_lock_reserve(sys_data->exit_id,
  221. sizeof(*entry), 0, 0);
  222. if (!event)
  223. return;
  224. entry = ring_buffer_event_data(event);
  225. entry->nr = syscall_nr;
  226. entry->ret = syscall_get_return_value(current, regs);
  227. if (!filter_current_check_discard(sys_data->exit_event, entry, event))
  228. trace_current_buffer_unlock_commit(event, 0, 0);
  229. }
  230. int reg_event_syscall_enter(void *ptr)
  231. {
  232. int ret = 0;
  233. int num;
  234. char *name;
  235. name = (char *)ptr;
  236. num = syscall_name_to_nr(name);
  237. if (num < 0 || num >= NR_syscalls)
  238. return -ENOSYS;
  239. mutex_lock(&syscall_trace_lock);
  240. if (!sys_refcount_enter)
  241. ret = register_trace_sys_enter(ftrace_syscall_enter);
  242. if (ret) {
  243. pr_info("event trace: Could not activate"
  244. "syscall entry trace point");
  245. } else {
  246. set_bit(num, enabled_enter_syscalls);
  247. sys_refcount_enter++;
  248. }
  249. mutex_unlock(&syscall_trace_lock);
  250. return ret;
  251. }
  252. void unreg_event_syscall_enter(void *ptr)
  253. {
  254. int num;
  255. char *name;
  256. name = (char *)ptr;
  257. num = syscall_name_to_nr(name);
  258. if (num < 0 || num >= NR_syscalls)
  259. return;
  260. mutex_lock(&syscall_trace_lock);
  261. sys_refcount_enter--;
  262. clear_bit(num, enabled_enter_syscalls);
  263. if (!sys_refcount_enter)
  264. unregister_trace_sys_enter(ftrace_syscall_enter);
  265. mutex_unlock(&syscall_trace_lock);
  266. }
  267. int reg_event_syscall_exit(void *ptr)
  268. {
  269. int ret = 0;
  270. int num;
  271. char *name;
  272. name = (char *)ptr;
  273. num = syscall_name_to_nr(name);
  274. if (num < 0 || num >= NR_syscalls)
  275. return -ENOSYS;
  276. mutex_lock(&syscall_trace_lock);
  277. if (!sys_refcount_exit)
  278. ret = register_trace_sys_exit(ftrace_syscall_exit);
  279. if (ret) {
  280. pr_info("event trace: Could not activate"
  281. "syscall exit trace point");
  282. } else {
  283. set_bit(num, enabled_exit_syscalls);
  284. sys_refcount_exit++;
  285. }
  286. mutex_unlock(&syscall_trace_lock);
  287. return ret;
  288. }
  289. void unreg_event_syscall_exit(void *ptr)
  290. {
  291. int num;
  292. char *name;
  293. name = (char *)ptr;
  294. num = syscall_name_to_nr(name);
  295. if (num < 0 || num >= NR_syscalls)
  296. return;
  297. mutex_lock(&syscall_trace_lock);
  298. sys_refcount_exit--;
  299. clear_bit(num, enabled_exit_syscalls);
  300. if (!sys_refcount_exit)
  301. unregister_trace_sys_exit(ftrace_syscall_exit);
  302. mutex_unlock(&syscall_trace_lock);
  303. }
  304. struct trace_event event_syscall_enter = {
  305. .trace = print_syscall_enter,
  306. };
  307. struct trace_event event_syscall_exit = {
  308. .trace = print_syscall_exit,
  309. };
  310. #ifdef CONFIG_EVENT_PROFILE
  311. static DECLARE_BITMAP(enabled_prof_enter_syscalls, NR_syscalls);
  312. static DECLARE_BITMAP(enabled_prof_exit_syscalls, NR_syscalls);
  313. static int sys_prof_refcount_enter;
  314. static int sys_prof_refcount_exit;
  315. static void prof_syscall_enter(struct pt_regs *regs, long id)
  316. {
  317. struct syscall_trace_enter *rec;
  318. struct syscall_metadata *sys_data;
  319. int syscall_nr;
  320. int size;
  321. syscall_nr = syscall_get_nr(current, regs);
  322. if (!test_bit(syscall_nr, enabled_prof_enter_syscalls))
  323. return;
  324. sys_data = syscall_nr_to_meta(syscall_nr);
  325. if (!sys_data)
  326. return;
  327. /* get the size after alignment with the u32 buffer size field */
  328. size = sizeof(unsigned long) * sys_data->nb_args + sizeof(*rec);
  329. size = ALIGN(size + sizeof(u32), sizeof(u64));
  330. size -= sizeof(u32);
  331. do {
  332. char raw_data[size];
  333. /* zero the dead bytes from align to not leak stack to user */
  334. *(u64 *)(&raw_data[size - sizeof(u64)]) = 0ULL;
  335. rec = (struct syscall_trace_enter *) raw_data;
  336. tracing_generic_entry_update(&rec->ent, 0, 0);
  337. rec->ent.type = sys_data->enter_id;
  338. rec->nr = syscall_nr;
  339. syscall_get_arguments(current, regs, 0, sys_data->nb_args,
  340. (unsigned long *)&rec->args);
  341. perf_tpcounter_event(sys_data->enter_id, 0, 1, rec, size);
  342. } while(0);
  343. }
  344. int reg_prof_syscall_enter(char *name)
  345. {
  346. int ret = 0;
  347. int num;
  348. num = syscall_name_to_nr(name);
  349. if (num < 0 || num >= NR_syscalls)
  350. return -ENOSYS;
  351. mutex_lock(&syscall_trace_lock);
  352. if (!sys_prof_refcount_enter)
  353. ret = register_trace_sys_enter(prof_syscall_enter);
  354. if (ret) {
  355. pr_info("event trace: Could not activate"
  356. "syscall entry trace point");
  357. } else {
  358. set_bit(num, enabled_prof_enter_syscalls);
  359. sys_prof_refcount_enter++;
  360. }
  361. mutex_unlock(&syscall_trace_lock);
  362. return ret;
  363. }
  364. void unreg_prof_syscall_enter(char *name)
  365. {
  366. int num;
  367. num = syscall_name_to_nr(name);
  368. if (num < 0 || num >= NR_syscalls)
  369. return;
  370. mutex_lock(&syscall_trace_lock);
  371. sys_prof_refcount_enter--;
  372. clear_bit(num, enabled_prof_enter_syscalls);
  373. if (!sys_prof_refcount_enter)
  374. unregister_trace_sys_enter(prof_syscall_enter);
  375. mutex_unlock(&syscall_trace_lock);
  376. }
  377. static void prof_syscall_exit(struct pt_regs *regs, long ret)
  378. {
  379. struct syscall_metadata *sys_data;
  380. struct syscall_trace_exit rec;
  381. int syscall_nr;
  382. syscall_nr = syscall_get_nr(current, regs);
  383. if (!test_bit(syscall_nr, enabled_prof_exit_syscalls))
  384. return;
  385. sys_data = syscall_nr_to_meta(syscall_nr);
  386. if (!sys_data)
  387. return;
  388. tracing_generic_entry_update(&rec.ent, 0, 0);
  389. rec.ent.type = sys_data->exit_id;
  390. rec.nr = syscall_nr;
  391. rec.ret = syscall_get_return_value(current, regs);
  392. perf_tpcounter_event(sys_data->exit_id, 0, 1, &rec, sizeof(rec));
  393. }
  394. int reg_prof_syscall_exit(char *name)
  395. {
  396. int ret = 0;
  397. int num;
  398. num = syscall_name_to_nr(name);
  399. if (num < 0 || num >= NR_syscalls)
  400. return -ENOSYS;
  401. mutex_lock(&syscall_trace_lock);
  402. if (!sys_prof_refcount_exit)
  403. ret = register_trace_sys_exit(prof_syscall_exit);
  404. if (ret) {
  405. pr_info("event trace: Could not activate"
  406. "syscall entry trace point");
  407. } else {
  408. set_bit(num, enabled_prof_exit_syscalls);
  409. sys_prof_refcount_exit++;
  410. }
  411. mutex_unlock(&syscall_trace_lock);
  412. return ret;
  413. }
  414. void unreg_prof_syscall_exit(char *name)
  415. {
  416. int num;
  417. num = syscall_name_to_nr(name);
  418. if (num < 0 || num >= NR_syscalls)
  419. return;
  420. mutex_lock(&syscall_trace_lock);
  421. sys_prof_refcount_exit--;
  422. clear_bit(num, enabled_prof_exit_syscalls);
  423. if (!sys_prof_refcount_exit)
  424. unregister_trace_sys_exit(prof_syscall_exit);
  425. mutex_unlock(&syscall_trace_lock);
  426. }
  427. #endif