bpf/verifier/event_output.c

0001 /* instructions used to output a skb based software event, produced
0002  * from code snippet:
0003  * struct TMP {
0004  *  uint64_t tmp;
0005  * } tt;
0006  * tt.tmp = 5;
0007  * bpf_perf_event_output(skb, &connection_tracking_event_map, 0,
0008  *           &tt, sizeof(tt));
0009  * return 1;
0010  *
0011  * the bpf assembly from llvm is:
0012  *        0:       b7 02 00 00 05 00 00 00         r2 = 5
0013  *        1:       7b 2a f8 ff 00 00 00 00         *(u64 *)(r10 - 8) = r2
0014  *        2:       bf a4 00 00 00 00 00 00         r4 = r10
0015  *        3:       07 04 00 00 f8 ff ff ff         r4 += -8
0016  *        4:       18 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00    r2 = 0ll
0017  *        6:       b7 03 00 00 00 00 00 00         r3 = 0
0018  *        7:       b7 05 00 00 08 00 00 00         r5 = 8
0019  *        8:       85 00 00 00 19 00 00 00         call 25
0020  *        9:       b7 00 00 00 01 00 00 00         r0 = 1
0021  *       10:       95 00 00 00 00 00 00 00         exit
0022  *
0023  *     The reason I put the code here instead of fill_helpers is that map fixup
0024  *     is against the insns, instead of filled prog.
0025  */
0026
0027 #define __PERF_EVENT_INSNS__                    \
0028     BPF_MOV64_IMM(BPF_REG_2, 5),                \
0029     BPF_STX_MEM(BPF_DW, BPF_REG_10, BPF_REG_2, -8),     \
0030     BPF_MOV64_REG(BPF_REG_4, BPF_REG_10),           \
0031     BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, -8),          \
0032     BPF_LD_MAP_FD(BPF_REG_2, 0),                \
0033     BPF_MOV64_IMM(BPF_REG_3, 0),                \
0034     BPF_MOV64_IMM(BPF_REG_5, 8),                \
0035     BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0,       \
0036              BPF_FUNC_perf_event_output),       \
0037     BPF_MOV64_IMM(BPF_REG_0, 1),                \
0038     BPF_EXIT_INSN(),
0039 {
0040     "perfevent for sockops",
0041     .insns = { __PERF_EVENT_INSNS__ },
0042     .prog_type = BPF_PROG_TYPE_SOCK_OPS,
0043     .fixup_map_event_output = { 4 },
0044     .result = ACCEPT,
0045     .retval = 1,
0046 },
0047 {
0048     "perfevent for tc",
0049     .insns =  { __PERF_EVENT_INSNS__ },
0050     .prog_type = BPF_PROG_TYPE_SCHED_CLS,
0051     .fixup_map_event_output = { 4 },
0052     .result = ACCEPT,
0053     .retval = 1,
0054 },
0055 {
0056     "perfevent for lwt out",
0057     .insns =  { __PERF_EVENT_INSNS__ },
0058     .prog_type = BPF_PROG_TYPE_LWT_OUT,
0059     .fixup_map_event_output = { 4 },
0060     .result = ACCEPT,
0061     .retval = 1,
0062 },
0063 {
0064     "perfevent for xdp",
0065     .insns =  { __PERF_EVENT_INSNS__ },
0066     .prog_type = BPF_PROG_TYPE_XDP,
0067     .fixup_map_event_output = { 4 },
0068     .result = ACCEPT,
0069     .retval = 1,
0070 },
0071 {
0072     "perfevent for socket filter",
0073     .insns =  { __PERF_EVENT_INSNS__ },
0074     .prog_type = BPF_PROG_TYPE_SOCKET_FILTER,
0075     .fixup_map_event_output = { 4 },
0076     .result = ACCEPT,
0077     .retval = 1,
0078 },
0079 {
0080     "perfevent for sk_skb",
0081     .insns =  { __PERF_EVENT_INSNS__ },
0082     .prog_type = BPF_PROG_TYPE_SK_SKB,
0083     .fixup_map_event_output = { 4 },
0084     .result = ACCEPT,
0085     .retval = 1,
0086 },
0087 {
0088     "perfevent for cgroup skb",
0089     .insns =  { __PERF_EVENT_INSNS__ },
0090     .prog_type = BPF_PROG_TYPE_CGROUP_SKB,
0091     .fixup_map_event_output = { 4 },
0092     .result = ACCEPT,
0093     .retval = 1,
0094 },
0095 {
0096     "perfevent for cgroup dev",
0097     .insns =  { __PERF_EVENT_INSNS__ },
0098     .prog_type = BPF_PROG_TYPE_CGROUP_DEVICE,
0099     .fixup_map_event_output = { 4 },
0100     .result = ACCEPT,
0101     .retval = 1,
0102 },
0103 {
0104     "perfevent for cgroup sysctl",
0105     .insns =  { __PERF_EVENT_INSNS__ },
0106     .prog_type = BPF_PROG_TYPE_CGROUP_SYSCTL,
0107     .fixup_map_event_output = { 4 },
0108     .result = ACCEPT,
0109     .retval = 1,
0110 },
0111 {
0112     "perfevent for cgroup sockopt",
0113     .insns =  { __PERF_EVENT_INSNS__ },
0114     .prog_type = BPF_PROG_TYPE_CGROUP_SOCKOPT,
0115     .expected_attach_type = BPF_CGROUP_SETSOCKOPT,
0116     .fixup_map_event_output = { 4 },
0117     .result = ACCEPT,
0118     .retval = 1,
0119 },