]>
Commit | Line | Data |
---|---|---|
25763b3c | 1 | // SPDX-License-Identifier: GPL-2.0-only |
1cf1cae9 | 2 | /* Copyright (c) 2017 Facebook |
1cf1cae9 AS |
3 | */ |
4 | #include <linux/bpf.h> | |
7bd1590d | 5 | #include <linux/btf_ids.h> |
1cf1cae9 AS |
6 | #include <linux/slab.h> |
7 | #include <linux/vmalloc.h> | |
8 | #include <linux/etherdevice.h> | |
9 | #include <linux/filter.h> | |
87b7b533 | 10 | #include <linux/rcupdate_trace.h> |
1cf1cae9 | 11 | #include <linux/sched/signal.h> |
6ac99e8f | 12 | #include <net/bpf_sk_storage.h> |
2cb494a3 SL |
13 | #include <net/sock.h> |
14 | #include <net/tcp.h> | |
7c32e8f8 | 15 | #include <net/net_namespace.h> |
3d08b6f2 | 16 | #include <linux/error-injection.h> |
1b4d60ec | 17 | #include <linux/smp.h> |
7c32e8f8 | 18 | #include <linux/sock_diag.h> |
47316f4a | 19 | #include <net/xdp.h> |
1cf1cae9 | 20 | |
e950e843 MM |
21 | #define CREATE_TRACE_POINTS |
22 | #include <trace/events/bpf_test_run.h> | |
23 | ||
607b9cc9 LB |
24 | struct bpf_test_timer { |
25 | enum { NO_PREEMPT, NO_MIGRATE } mode; | |
26 | u32 i; | |
27 | u64 time_start, time_spent; | |
28 | }; | |
29 | ||
30 | static void bpf_test_timer_enter(struct bpf_test_timer *t) | |
31 | __acquires(rcu) | |
32 | { | |
33 | rcu_read_lock(); | |
34 | if (t->mode == NO_PREEMPT) | |
35 | preempt_disable(); | |
36 | else | |
37 | migrate_disable(); | |
38 | ||
39 | t->time_start = ktime_get_ns(); | |
40 | } | |
41 | ||
42 | static void bpf_test_timer_leave(struct bpf_test_timer *t) | |
43 | __releases(rcu) | |
44 | { | |
45 | t->time_start = 0; | |
46 | ||
47 | if (t->mode == NO_PREEMPT) | |
48 | preempt_enable(); | |
49 | else | |
50 | migrate_enable(); | |
51 | rcu_read_unlock(); | |
52 | } | |
53 | ||
54 | static bool bpf_test_timer_continue(struct bpf_test_timer *t, u32 repeat, int *err, u32 *duration) | |
55 | __must_hold(rcu) | |
56 | { | |
57 | t->i++; | |
58 | if (t->i >= repeat) { | |
59 | /* We're done. */ | |
60 | t->time_spent += ktime_get_ns() - t->time_start; | |
61 | do_div(t->time_spent, t->i); | |
62 | *duration = t->time_spent > U32_MAX ? U32_MAX : (u32)t->time_spent; | |
63 | *err = 0; | |
64 | goto reset; | |
65 | } | |
66 | ||
67 | if (signal_pending(current)) { | |
68 | /* During iteration: we've been cancelled, abort. */ | |
69 | *err = -EINTR; | |
70 | goto reset; | |
71 | } | |
72 | ||
73 | if (need_resched()) { | |
74 | /* During iteration: we need to reschedule between runs. */ | |
75 | t->time_spent += ktime_get_ns() - t->time_start; | |
76 | bpf_test_timer_leave(t); | |
77 | cond_resched(); | |
78 | bpf_test_timer_enter(t); | |
79 | } | |
80 | ||
81 | /* Do another round. */ | |
82 | return true; | |
83 | ||
84 | reset: | |
85 | t->i = 0; | |
86 | return false; | |
87 | } | |
88 | ||
df1a2cb7 | 89 | static int bpf_test_run(struct bpf_prog *prog, void *ctx, u32 repeat, |
f23c4b39 | 90 | u32 *retval, u32 *time, bool xdp) |
1cf1cae9 | 91 | { |
c7603cfa AN |
92 | struct bpf_prog_array_item item = {.prog = prog}; |
93 | struct bpf_run_ctx *old_ctx; | |
94 | struct bpf_cg_run_ctx run_ctx; | |
607b9cc9 | 95 | struct bpf_test_timer t = { NO_MIGRATE }; |
8bad74f9 | 96 | enum bpf_cgroup_storage_type stype; |
607b9cc9 | 97 | int ret; |
1cf1cae9 | 98 | |
8bad74f9 | 99 | for_each_cgroup_storage_type(stype) { |
c7603cfa AN |
100 | item.cgroup_storage[stype] = bpf_cgroup_storage_alloc(prog, stype); |
101 | if (IS_ERR(item.cgroup_storage[stype])) { | |
102 | item.cgroup_storage[stype] = NULL; | |
8bad74f9 | 103 | for_each_cgroup_storage_type(stype) |
c7603cfa | 104 | bpf_cgroup_storage_free(item.cgroup_storage[stype]); |
8bad74f9 RG |
105 | return -ENOMEM; |
106 | } | |
107 | } | |
f42ee093 | 108 | |
1cf1cae9 AS |
109 | if (!repeat) |
110 | repeat = 1; | |
df1a2cb7 | 111 | |
607b9cc9 | 112 | bpf_test_timer_enter(&t); |
c7603cfa | 113 | old_ctx = bpf_set_run_ctx(&run_ctx.run_ctx); |
607b9cc9 | 114 | do { |
c7603cfa | 115 | run_ctx.prog_item = &item; |
f23c4b39 BT |
116 | if (xdp) |
117 | *retval = bpf_prog_run_xdp(prog, ctx); | |
118 | else | |
fb7dd8bc | 119 | *retval = bpf_prog_run(prog, ctx); |
607b9cc9 | 120 | } while (bpf_test_timer_continue(&t, repeat, &ret, time)); |
c7603cfa | 121 | bpf_reset_run_ctx(old_ctx); |
607b9cc9 | 122 | bpf_test_timer_leave(&t); |
1cf1cae9 | 123 | |
8bad74f9 | 124 | for_each_cgroup_storage_type(stype) |
c7603cfa | 125 | bpf_cgroup_storage_free(item.cgroup_storage[stype]); |
f42ee093 | 126 | |
df1a2cb7 | 127 | return ret; |
1cf1cae9 AS |
128 | } |
129 | ||
78e52272 DM |
130 | static int bpf_test_finish(const union bpf_attr *kattr, |
131 | union bpf_attr __user *uattr, const void *data, | |
1cf1cae9 AS |
132 | u32 size, u32 retval, u32 duration) |
133 | { | |
78e52272 | 134 | void __user *data_out = u64_to_user_ptr(kattr->test.data_out); |
1cf1cae9 | 135 | int err = -EFAULT; |
b5a36b1e | 136 | u32 copy_size = size; |
1cf1cae9 | 137 | |
b5a36b1e LB |
138 | /* Clamp copy if the user has provided a size hint, but copy the full |
139 | * buffer if not to retain old behaviour. | |
140 | */ | |
141 | if (kattr->test.data_size_out && | |
142 | copy_size > kattr->test.data_size_out) { | |
143 | copy_size = kattr->test.data_size_out; | |
144 | err = -ENOSPC; | |
145 | } | |
146 | ||
147 | if (data_out && copy_to_user(data_out, data, copy_size)) | |
1cf1cae9 AS |
148 | goto out; |
149 | if (copy_to_user(&uattr->test.data_size_out, &size, sizeof(size))) | |
150 | goto out; | |
151 | if (copy_to_user(&uattr->test.retval, &retval, sizeof(retval))) | |
152 | goto out; | |
153 | if (copy_to_user(&uattr->test.duration, &duration, sizeof(duration))) | |
154 | goto out; | |
b5a36b1e LB |
155 | if (err != -ENOSPC) |
156 | err = 0; | |
1cf1cae9 | 157 | out: |
e950e843 | 158 | trace_bpf_test_finish(&err); |
1cf1cae9 AS |
159 | return err; |
160 | } | |
161 | ||
faeb2dce AS |
162 | /* Integer types of various sizes and pointer combinations cover variety of |
163 | * architecture dependent calling conventions. 7+ can be supported in the | |
164 | * future. | |
165 | */ | |
e9ff9d52 JPM |
166 | __diag_push(); |
167 | __diag_ignore(GCC, 8, "-Wmissing-prototypes", | |
168 | "Global functions as their definitions will be in vmlinux BTF"); | |
faeb2dce AS |
169 | int noinline bpf_fentry_test1(int a) |
170 | { | |
171 | return a + 1; | |
172 | } | |
173 | ||
174 | int noinline bpf_fentry_test2(int a, u64 b) | |
175 | { | |
176 | return a + b; | |
177 | } | |
178 | ||
179 | int noinline bpf_fentry_test3(char a, int b, u64 c) | |
180 | { | |
181 | return a + b + c; | |
182 | } | |
183 | ||
184 | int noinline bpf_fentry_test4(void *a, char b, int c, u64 d) | |
185 | { | |
186 | return (long)a + b + c + d; | |
187 | } | |
188 | ||
189 | int noinline bpf_fentry_test5(u64 a, void *b, short c, int d, u64 e) | |
190 | { | |
191 | return a + (long)b + c + d + e; | |
192 | } | |
193 | ||
194 | int noinline bpf_fentry_test6(u64 a, void *b, short c, int d, void *e, u64 f) | |
195 | { | |
196 | return a + (long)b + c + d + (long)e + f; | |
197 | } | |
198 | ||
d923021c YS |
199 | struct bpf_fentry_test_t { |
200 | struct bpf_fentry_test_t *a; | |
201 | }; | |
202 | ||
203 | int noinline bpf_fentry_test7(struct bpf_fentry_test_t *arg) | |
204 | { | |
205 | return (long)arg; | |
206 | } | |
207 | ||
208 | int noinline bpf_fentry_test8(struct bpf_fentry_test_t *arg) | |
209 | { | |
210 | return (long)arg->a; | |
211 | } | |
212 | ||
3d08b6f2 KS |
213 | int noinline bpf_modify_return_test(int a, int *b) |
214 | { | |
215 | *b += 1; | |
216 | return a + *b; | |
217 | } | |
7bd1590d MKL |
218 | |
219 | u64 noinline bpf_kfunc_call_test1(struct sock *sk, u32 a, u64 b, u32 c, u64 d) | |
220 | { | |
221 | return a + b + c + d; | |
222 | } | |
223 | ||
224 | int noinline bpf_kfunc_call_test2(struct sock *sk, u32 a, u32 b) | |
225 | { | |
226 | return a + b; | |
227 | } | |
228 | ||
229 | struct sock * noinline bpf_kfunc_call_test3(struct sock *sk) | |
230 | { | |
231 | return sk; | |
232 | } | |
233 | ||
e9ff9d52 | 234 | __diag_pop(); |
3d08b6f2 KS |
235 | |
236 | ALLOW_ERROR_INJECTION(bpf_modify_return_test, ERRNO); | |
237 | ||
7bd1590d MKL |
238 | BTF_SET_START(test_sk_kfunc_ids) |
239 | BTF_ID(func, bpf_kfunc_call_test1) | |
240 | BTF_ID(func, bpf_kfunc_call_test2) | |
241 | BTF_ID(func, bpf_kfunc_call_test3) | |
242 | BTF_SET_END(test_sk_kfunc_ids) | |
243 | ||
244 | bool bpf_prog_test_check_kfunc_call(u32 kfunc_id) | |
245 | { | |
246 | return btf_id_set_contains(&test_sk_kfunc_ids, kfunc_id); | |
247 | } | |
248 | ||
1cf1cae9 AS |
249 | static void *bpf_test_init(const union bpf_attr *kattr, u32 size, |
250 | u32 headroom, u32 tailroom) | |
251 | { | |
252 | void __user *data_in = u64_to_user_ptr(kattr->test.data_in); | |
d800bad6 | 253 | u32 user_size = kattr->test.data_size_in; |
1cf1cae9 AS |
254 | void *data; |
255 | ||
256 | if (size < ETH_HLEN || size > PAGE_SIZE - headroom - tailroom) | |
257 | return ERR_PTR(-EINVAL); | |
258 | ||
d800bad6 JDB |
259 | if (user_size > size) |
260 | return ERR_PTR(-EMSGSIZE); | |
261 | ||
1cf1cae9 AS |
262 | data = kzalloc(size + headroom + tailroom, GFP_USER); |
263 | if (!data) | |
264 | return ERR_PTR(-ENOMEM); | |
265 | ||
d800bad6 | 266 | if (copy_from_user(data + headroom, data_in, user_size)) { |
1cf1cae9 AS |
267 | kfree(data); |
268 | return ERR_PTR(-EFAULT); | |
269 | } | |
da00d2f1 | 270 | |
1cf1cae9 AS |
271 | return data; |
272 | } | |
273 | ||
da00d2f1 KS |
274 | int bpf_prog_test_run_tracing(struct bpf_prog *prog, |
275 | const union bpf_attr *kattr, | |
276 | union bpf_attr __user *uattr) | |
277 | { | |
d923021c | 278 | struct bpf_fentry_test_t arg = {}; |
3d08b6f2 KS |
279 | u16 side_effect = 0, ret = 0; |
280 | int b = 2, err = -EFAULT; | |
281 | u32 retval = 0; | |
da00d2f1 | 282 | |
1b4d60ec SL |
283 | if (kattr->test.flags || kattr->test.cpu) |
284 | return -EINVAL; | |
285 | ||
da00d2f1 KS |
286 | switch (prog->expected_attach_type) { |
287 | case BPF_TRACE_FENTRY: | |
288 | case BPF_TRACE_FEXIT: | |
289 | if (bpf_fentry_test1(1) != 2 || | |
290 | bpf_fentry_test2(2, 3) != 5 || | |
291 | bpf_fentry_test3(4, 5, 6) != 15 || | |
292 | bpf_fentry_test4((void *)7, 8, 9, 10) != 34 || | |
293 | bpf_fentry_test5(11, (void *)12, 13, 14, 15) != 65 || | |
d923021c YS |
294 | bpf_fentry_test6(16, (void *)17, 18, 19, (void *)20, 21) != 111 || |
295 | bpf_fentry_test7((struct bpf_fentry_test_t *)0) != 0 || | |
296 | bpf_fentry_test8(&arg) != 0) | |
da00d2f1 KS |
297 | goto out; |
298 | break; | |
3d08b6f2 KS |
299 | case BPF_MODIFY_RETURN: |
300 | ret = bpf_modify_return_test(1, &b); | |
301 | if (b != 2) | |
302 | side_effect = 1; | |
303 | break; | |
da00d2f1 KS |
304 | default: |
305 | goto out; | |
306 | } | |
307 | ||
3d08b6f2 KS |
308 | retval = ((u32)side_effect << 16) | ret; |
309 | if (copy_to_user(&uattr->test.retval, &retval, sizeof(retval))) | |
310 | goto out; | |
311 | ||
da00d2f1 KS |
312 | err = 0; |
313 | out: | |
314 | trace_bpf_test_finish(&err); | |
315 | return err; | |
316 | } | |
317 | ||
1b4d60ec SL |
318 | struct bpf_raw_tp_test_run_info { |
319 | struct bpf_prog *prog; | |
320 | void *ctx; | |
321 | u32 retval; | |
322 | }; | |
323 | ||
324 | static void | |
325 | __bpf_prog_test_run_raw_tp(void *data) | |
326 | { | |
327 | struct bpf_raw_tp_test_run_info *info = data; | |
328 | ||
329 | rcu_read_lock(); | |
fb7dd8bc | 330 | info->retval = bpf_prog_run(info->prog, info->ctx); |
1b4d60ec SL |
331 | rcu_read_unlock(); |
332 | } | |
333 | ||
334 | int bpf_prog_test_run_raw_tp(struct bpf_prog *prog, | |
335 | const union bpf_attr *kattr, | |
336 | union bpf_attr __user *uattr) | |
337 | { | |
338 | void __user *ctx_in = u64_to_user_ptr(kattr->test.ctx_in); | |
339 | __u32 ctx_size_in = kattr->test.ctx_size_in; | |
340 | struct bpf_raw_tp_test_run_info info; | |
341 | int cpu = kattr->test.cpu, err = 0; | |
963ec27a | 342 | int current_cpu; |
1b4d60ec SL |
343 | |
344 | /* doesn't support data_in/out, ctx_out, duration, or repeat */ | |
345 | if (kattr->test.data_in || kattr->test.data_out || | |
346 | kattr->test.ctx_out || kattr->test.duration || | |
347 | kattr->test.repeat) | |
348 | return -EINVAL; | |
349 | ||
7ac6ad05 SL |
350 | if (ctx_size_in < prog->aux->max_ctx_offset || |
351 | ctx_size_in > MAX_BPF_FUNC_ARGS * sizeof(u64)) | |
1b4d60ec SL |
352 | return -EINVAL; |
353 | ||
354 | if ((kattr->test.flags & BPF_F_TEST_RUN_ON_CPU) == 0 && cpu != 0) | |
355 | return -EINVAL; | |
356 | ||
357 | if (ctx_size_in) { | |
358 | info.ctx = kzalloc(ctx_size_in, GFP_USER); | |
359 | if (!info.ctx) | |
360 | return -ENOMEM; | |
361 | if (copy_from_user(info.ctx, ctx_in, ctx_size_in)) { | |
362 | err = -EFAULT; | |
363 | goto out; | |
364 | } | |
365 | } else { | |
366 | info.ctx = NULL; | |
367 | } | |
368 | ||
369 | info.prog = prog; | |
370 | ||
963ec27a | 371 | current_cpu = get_cpu(); |
1b4d60ec | 372 | if ((kattr->test.flags & BPF_F_TEST_RUN_ON_CPU) == 0 || |
963ec27a | 373 | cpu == current_cpu) { |
1b4d60ec | 374 | __bpf_prog_test_run_raw_tp(&info); |
963ec27a | 375 | } else if (cpu >= nr_cpu_ids || !cpu_online(cpu)) { |
1b4d60ec SL |
376 | /* smp_call_function_single() also checks cpu_online() |
377 | * after csd_lock(). However, since cpu is from user | |
378 | * space, let's do an extra quick check to filter out | |
379 | * invalid value before smp_call_function_single(). | |
380 | */ | |
963ec27a SL |
381 | err = -ENXIO; |
382 | } else { | |
1b4d60ec SL |
383 | err = smp_call_function_single(cpu, __bpf_prog_test_run_raw_tp, |
384 | &info, 1); | |
1b4d60ec | 385 | } |
963ec27a | 386 | put_cpu(); |
1b4d60ec | 387 | |
963ec27a SL |
388 | if (!err && |
389 | copy_to_user(&uattr->test.retval, &info.retval, sizeof(u32))) | |
1b4d60ec SL |
390 | err = -EFAULT; |
391 | ||
392 | out: | |
393 | kfree(info.ctx); | |
394 | return err; | |
395 | } | |
396 | ||
b0b9395d SF |
397 | static void *bpf_ctx_init(const union bpf_attr *kattr, u32 max_size) |
398 | { | |
399 | void __user *data_in = u64_to_user_ptr(kattr->test.ctx_in); | |
400 | void __user *data_out = u64_to_user_ptr(kattr->test.ctx_out); | |
401 | u32 size = kattr->test.ctx_size_in; | |
402 | void *data; | |
403 | int err; | |
404 | ||
405 | if (!data_in && !data_out) | |
406 | return NULL; | |
407 | ||
408 | data = kzalloc(max_size, GFP_USER); | |
409 | if (!data) | |
410 | return ERR_PTR(-ENOMEM); | |
411 | ||
412 | if (data_in) { | |
af2ac3e1 | 413 | err = bpf_check_uarg_tail_zero(USER_BPFPTR(data_in), max_size, size); |
b0b9395d SF |
414 | if (err) { |
415 | kfree(data); | |
416 | return ERR_PTR(err); | |
417 | } | |
418 | ||
419 | size = min_t(u32, max_size, size); | |
420 | if (copy_from_user(data, data_in, size)) { | |
421 | kfree(data); | |
422 | return ERR_PTR(-EFAULT); | |
423 | } | |
424 | } | |
425 | return data; | |
426 | } | |
427 | ||
428 | static int bpf_ctx_finish(const union bpf_attr *kattr, | |
429 | union bpf_attr __user *uattr, const void *data, | |
430 | u32 size) | |
431 | { | |
432 | void __user *data_out = u64_to_user_ptr(kattr->test.ctx_out); | |
433 | int err = -EFAULT; | |
434 | u32 copy_size = size; | |
435 | ||
436 | if (!data || !data_out) | |
437 | return 0; | |
438 | ||
439 | if (copy_size > kattr->test.ctx_size_out) { | |
440 | copy_size = kattr->test.ctx_size_out; | |
441 | err = -ENOSPC; | |
442 | } | |
443 | ||
444 | if (copy_to_user(data_out, data, copy_size)) | |
445 | goto out; | |
446 | if (copy_to_user(&uattr->test.ctx_size_out, &size, sizeof(size))) | |
447 | goto out; | |
448 | if (err != -ENOSPC) | |
449 | err = 0; | |
450 | out: | |
451 | return err; | |
452 | } | |
453 | ||
454 | /** | |
455 | * range_is_zero - test whether buffer is initialized | |
456 | * @buf: buffer to check | |
457 | * @from: check from this position | |
458 | * @to: check up until (excluding) this position | |
459 | * | |
460 | * This function returns true if the there is a non-zero byte | |
461 | * in the buf in the range [from,to). | |
462 | */ | |
463 | static inline bool range_is_zero(void *buf, size_t from, size_t to) | |
464 | { | |
465 | return !memchr_inv((u8 *)buf + from, 0, to - from); | |
466 | } | |
467 | ||
468 | static int convert___skb_to_skb(struct sk_buff *skb, struct __sk_buff *__skb) | |
469 | { | |
470 | struct qdisc_skb_cb *cb = (struct qdisc_skb_cb *)skb->cb; | |
471 | ||
472 | if (!__skb) | |
473 | return 0; | |
474 | ||
475 | /* make sure the fields we don't use are zeroed */ | |
6de6c1f8 NS |
476 | if (!range_is_zero(__skb, 0, offsetof(struct __sk_buff, mark))) |
477 | return -EINVAL; | |
478 | ||
479 | /* mark is allowed */ | |
480 | ||
481 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, mark), | |
482 | offsetof(struct __sk_buff, priority))) | |
b0b9395d SF |
483 | return -EINVAL; |
484 | ||
485 | /* priority is allowed */ | |
486 | ||
b590cb5f | 487 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, priority), |
21594c44 DY |
488 | offsetof(struct __sk_buff, ifindex))) |
489 | return -EINVAL; | |
490 | ||
491 | /* ifindex is allowed */ | |
492 | ||
493 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, ifindex), | |
b0b9395d SF |
494 | offsetof(struct __sk_buff, cb))) |
495 | return -EINVAL; | |
496 | ||
497 | /* cb is allowed */ | |
498 | ||
b590cb5f | 499 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, cb), |
ba940948 SF |
500 | offsetof(struct __sk_buff, tstamp))) |
501 | return -EINVAL; | |
502 | ||
503 | /* tstamp is allowed */ | |
850a88cc SF |
504 | /* wire_len is allowed */ |
505 | /* gso_segs is allowed */ | |
ba940948 | 506 | |
850a88cc | 507 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, gso_segs), |
cf62089b WB |
508 | offsetof(struct __sk_buff, gso_size))) |
509 | return -EINVAL; | |
510 | ||
511 | /* gso_size is allowed */ | |
512 | ||
513 | if (!range_is_zero(__skb, offsetofend(struct __sk_buff, gso_size), | |
b0b9395d SF |
514 | sizeof(struct __sk_buff))) |
515 | return -EINVAL; | |
516 | ||
6de6c1f8 | 517 | skb->mark = __skb->mark; |
b0b9395d | 518 | skb->priority = __skb->priority; |
ba940948 | 519 | skb->tstamp = __skb->tstamp; |
b0b9395d SF |
520 | memcpy(&cb->data, __skb->cb, QDISC_CB_PRIV_LEN); |
521 | ||
850a88cc SF |
522 | if (__skb->wire_len == 0) { |
523 | cb->pkt_len = skb->len; | |
524 | } else { | |
525 | if (__skb->wire_len < skb->len || | |
526 | __skb->wire_len > GSO_MAX_SIZE) | |
527 | return -EINVAL; | |
528 | cb->pkt_len = __skb->wire_len; | |
529 | } | |
530 | ||
531 | if (__skb->gso_segs > GSO_MAX_SEGS) | |
532 | return -EINVAL; | |
533 | skb_shinfo(skb)->gso_segs = __skb->gso_segs; | |
cf62089b | 534 | skb_shinfo(skb)->gso_size = __skb->gso_size; |
850a88cc | 535 | |
b0b9395d SF |
536 | return 0; |
537 | } | |
538 | ||
539 | static void convert_skb_to___skb(struct sk_buff *skb, struct __sk_buff *__skb) | |
540 | { | |
541 | struct qdisc_skb_cb *cb = (struct qdisc_skb_cb *)skb->cb; | |
542 | ||
543 | if (!__skb) | |
544 | return; | |
545 | ||
6de6c1f8 | 546 | __skb->mark = skb->mark; |
b0b9395d | 547 | __skb->priority = skb->priority; |
21594c44 | 548 | __skb->ifindex = skb->dev->ifindex; |
ba940948 | 549 | __skb->tstamp = skb->tstamp; |
b0b9395d | 550 | memcpy(__skb->cb, &cb->data, QDISC_CB_PRIV_LEN); |
850a88cc SF |
551 | __skb->wire_len = cb->pkt_len; |
552 | __skb->gso_segs = skb_shinfo(skb)->gso_segs; | |
b0b9395d SF |
553 | } |
554 | ||
1cf1cae9 AS |
555 | int bpf_prog_test_run_skb(struct bpf_prog *prog, const union bpf_attr *kattr, |
556 | union bpf_attr __user *uattr) | |
557 | { | |
558 | bool is_l2 = false, is_direct_pkt_access = false; | |
21594c44 DY |
559 | struct net *net = current->nsproxy->net_ns; |
560 | struct net_device *dev = net->loopback_dev; | |
1cf1cae9 AS |
561 | u32 size = kattr->test.data_size_in; |
562 | u32 repeat = kattr->test.repeat; | |
b0b9395d | 563 | struct __sk_buff *ctx = NULL; |
1cf1cae9 | 564 | u32 retval, duration; |
6e6fddc7 | 565 | int hh_len = ETH_HLEN; |
1cf1cae9 | 566 | struct sk_buff *skb; |
2cb494a3 | 567 | struct sock *sk; |
1cf1cae9 AS |
568 | void *data; |
569 | int ret; | |
570 | ||
1b4d60ec SL |
571 | if (kattr->test.flags || kattr->test.cpu) |
572 | return -EINVAL; | |
573 | ||
586f8525 | 574 | data = bpf_test_init(kattr, size, NET_SKB_PAD + NET_IP_ALIGN, |
1cf1cae9 AS |
575 | SKB_DATA_ALIGN(sizeof(struct skb_shared_info))); |
576 | if (IS_ERR(data)) | |
577 | return PTR_ERR(data); | |
578 | ||
b0b9395d SF |
579 | ctx = bpf_ctx_init(kattr, sizeof(struct __sk_buff)); |
580 | if (IS_ERR(ctx)) { | |
581 | kfree(data); | |
582 | return PTR_ERR(ctx); | |
583 | } | |
584 | ||
1cf1cae9 AS |
585 | switch (prog->type) { |
586 | case BPF_PROG_TYPE_SCHED_CLS: | |
587 | case BPF_PROG_TYPE_SCHED_ACT: | |
588 | is_l2 = true; | |
df561f66 | 589 | fallthrough; |
1cf1cae9 AS |
590 | case BPF_PROG_TYPE_LWT_IN: |
591 | case BPF_PROG_TYPE_LWT_OUT: | |
592 | case BPF_PROG_TYPE_LWT_XMIT: | |
593 | is_direct_pkt_access = true; | |
594 | break; | |
595 | default: | |
596 | break; | |
597 | } | |
598 | ||
2cb494a3 SL |
599 | sk = kzalloc(sizeof(struct sock), GFP_USER); |
600 | if (!sk) { | |
601 | kfree(data); | |
b0b9395d | 602 | kfree(ctx); |
2cb494a3 SL |
603 | return -ENOMEM; |
604 | } | |
21594c44 | 605 | sock_net_set(sk, net); |
2cb494a3 SL |
606 | sock_init_data(NULL, sk); |
607 | ||
1cf1cae9 AS |
608 | skb = build_skb(data, 0); |
609 | if (!skb) { | |
610 | kfree(data); | |
b0b9395d | 611 | kfree(ctx); |
2cb494a3 | 612 | kfree(sk); |
1cf1cae9 AS |
613 | return -ENOMEM; |
614 | } | |
2cb494a3 | 615 | skb->sk = sk; |
1cf1cae9 | 616 | |
586f8525 | 617 | skb_reserve(skb, NET_SKB_PAD + NET_IP_ALIGN); |
1cf1cae9 | 618 | __skb_put(skb, size); |
21594c44 DY |
619 | if (ctx && ctx->ifindex > 1) { |
620 | dev = dev_get_by_index(net, ctx->ifindex); | |
621 | if (!dev) { | |
622 | ret = -ENODEV; | |
623 | goto out; | |
624 | } | |
625 | } | |
626 | skb->protocol = eth_type_trans(skb, dev); | |
1cf1cae9 AS |
627 | skb_reset_network_header(skb); |
628 | ||
fa5cb548 DY |
629 | switch (skb->protocol) { |
630 | case htons(ETH_P_IP): | |
631 | sk->sk_family = AF_INET; | |
632 | if (sizeof(struct iphdr) <= skb_headlen(skb)) { | |
633 | sk->sk_rcv_saddr = ip_hdr(skb)->saddr; | |
634 | sk->sk_daddr = ip_hdr(skb)->daddr; | |
635 | } | |
636 | break; | |
637 | #if IS_ENABLED(CONFIG_IPV6) | |
638 | case htons(ETH_P_IPV6): | |
639 | sk->sk_family = AF_INET6; | |
640 | if (sizeof(struct ipv6hdr) <= skb_headlen(skb)) { | |
641 | sk->sk_v6_rcv_saddr = ipv6_hdr(skb)->saddr; | |
642 | sk->sk_v6_daddr = ipv6_hdr(skb)->daddr; | |
643 | } | |
644 | break; | |
645 | #endif | |
646 | default: | |
647 | break; | |
648 | } | |
649 | ||
1cf1cae9 | 650 | if (is_l2) |
6e6fddc7 | 651 | __skb_push(skb, hh_len); |
1cf1cae9 | 652 | if (is_direct_pkt_access) |
6aaae2b6 | 653 | bpf_compute_data_pointers(skb); |
b0b9395d SF |
654 | ret = convert___skb_to_skb(skb, ctx); |
655 | if (ret) | |
656 | goto out; | |
f23c4b39 | 657 | ret = bpf_test_run(prog, skb, repeat, &retval, &duration, false); |
b0b9395d SF |
658 | if (ret) |
659 | goto out; | |
6e6fddc7 DB |
660 | if (!is_l2) { |
661 | if (skb_headroom(skb) < hh_len) { | |
662 | int nhead = HH_DATA_ALIGN(hh_len - skb_headroom(skb)); | |
663 | ||
664 | if (pskb_expand_head(skb, nhead, 0, GFP_USER)) { | |
b0b9395d SF |
665 | ret = -ENOMEM; |
666 | goto out; | |
6e6fddc7 DB |
667 | } |
668 | } | |
669 | memset(__skb_push(skb, hh_len), 0, hh_len); | |
670 | } | |
b0b9395d | 671 | convert_skb_to___skb(skb, ctx); |
6e6fddc7 | 672 | |
1cf1cae9 AS |
673 | size = skb->len; |
674 | /* bpf program can never convert linear skb to non-linear */ | |
675 | if (WARN_ON_ONCE(skb_is_nonlinear(skb))) | |
676 | size = skb_headlen(skb); | |
78e52272 | 677 | ret = bpf_test_finish(kattr, uattr, skb->data, size, retval, duration); |
b0b9395d SF |
678 | if (!ret) |
679 | ret = bpf_ctx_finish(kattr, uattr, ctx, | |
680 | sizeof(struct __sk_buff)); | |
681 | out: | |
21594c44 DY |
682 | if (dev && dev != net->loopback_dev) |
683 | dev_put(dev); | |
1cf1cae9 | 684 | kfree_skb(skb); |
6ac99e8f | 685 | bpf_sk_storage_free(sk); |
2cb494a3 | 686 | kfree(sk); |
b0b9395d | 687 | kfree(ctx); |
1cf1cae9 AS |
688 | return ret; |
689 | } | |
690 | ||
47316f4a ZE |
691 | static int xdp_convert_md_to_buff(struct xdp_md *xdp_md, struct xdp_buff *xdp) |
692 | { | |
ec94670f ZE |
693 | unsigned int ingress_ifindex, rx_queue_index; |
694 | struct netdev_rx_queue *rxqueue; | |
695 | struct net_device *device; | |
696 | ||
47316f4a ZE |
697 | if (!xdp_md) |
698 | return 0; | |
699 | ||
700 | if (xdp_md->egress_ifindex != 0) | |
701 | return -EINVAL; | |
702 | ||
ec94670f ZE |
703 | ingress_ifindex = xdp_md->ingress_ifindex; |
704 | rx_queue_index = xdp_md->rx_queue_index; | |
705 | ||
706 | if (!ingress_ifindex && rx_queue_index) | |
47316f4a ZE |
707 | return -EINVAL; |
708 | ||
ec94670f ZE |
709 | if (ingress_ifindex) { |
710 | device = dev_get_by_index(current->nsproxy->net_ns, | |
711 | ingress_ifindex); | |
712 | if (!device) | |
713 | return -ENODEV; | |
714 | ||
715 | if (rx_queue_index >= device->real_num_rx_queues) | |
716 | goto free_dev; | |
717 | ||
718 | rxqueue = __netif_get_rx_queue(device, rx_queue_index); | |
47316f4a | 719 | |
ec94670f ZE |
720 | if (!xdp_rxq_info_is_reg(&rxqueue->xdp_rxq)) |
721 | goto free_dev; | |
722 | ||
723 | xdp->rxq = &rxqueue->xdp_rxq; | |
724 | /* The device is now tracked in the xdp->rxq for later | |
725 | * dev_put() | |
726 | */ | |
727 | } | |
728 | ||
729 | xdp->data = xdp->data_meta + xdp_md->data; | |
47316f4a | 730 | return 0; |
ec94670f ZE |
731 | |
732 | free_dev: | |
733 | dev_put(device); | |
734 | return -EINVAL; | |
735 | } | |
736 | ||
737 | static void xdp_convert_buff_to_md(struct xdp_buff *xdp, struct xdp_md *xdp_md) | |
738 | { | |
739 | if (!xdp_md) | |
740 | return; | |
741 | ||
742 | xdp_md->data = xdp->data - xdp->data_meta; | |
743 | xdp_md->data_end = xdp->data_end - xdp->data_meta; | |
744 | ||
745 | if (xdp_md->ingress_ifindex) | |
746 | dev_put(xdp->rxq->dev); | |
47316f4a ZE |
747 | } |
748 | ||
1cf1cae9 AS |
749 | int bpf_prog_test_run_xdp(struct bpf_prog *prog, const union bpf_attr *kattr, |
750 | union bpf_attr __user *uattr) | |
751 | { | |
bc56c919 JDB |
752 | u32 tailroom = SKB_DATA_ALIGN(sizeof(struct skb_shared_info)); |
753 | u32 headroom = XDP_PACKET_HEADROOM; | |
1cf1cae9 AS |
754 | u32 size = kattr->test.data_size_in; |
755 | u32 repeat = kattr->test.repeat; | |
65073a67 | 756 | struct netdev_rx_queue *rxqueue; |
1cf1cae9 AS |
757 | struct xdp_buff xdp = {}; |
758 | u32 retval, duration; | |
47316f4a | 759 | struct xdp_md *ctx; |
bc56c919 | 760 | u32 max_data_sz; |
1cf1cae9 | 761 | void *data; |
47316f4a | 762 | int ret = -EINVAL; |
1cf1cae9 | 763 | |
5e21bb4e XZ |
764 | if (prog->expected_attach_type == BPF_XDP_DEVMAP || |
765 | prog->expected_attach_type == BPF_XDP_CPUMAP) | |
766 | return -EINVAL; | |
6d4eb36d | 767 | |
47316f4a ZE |
768 | ctx = bpf_ctx_init(kattr, sizeof(struct xdp_md)); |
769 | if (IS_ERR(ctx)) | |
770 | return PTR_ERR(ctx); | |
771 | ||
772 | if (ctx) { | |
773 | /* There can't be user provided data before the meta data */ | |
774 | if (ctx->data_meta || ctx->data_end != size || | |
775 | ctx->data > ctx->data_end || | |
776 | unlikely(xdp_metalen_invalid(ctx->data))) | |
777 | goto free_ctx; | |
778 | /* Meta data is allocated from the headroom */ | |
779 | headroom -= ctx->data; | |
780 | } | |
947e8b59 | 781 | |
bc56c919 JDB |
782 | /* XDP have extra tailroom as (most) drivers use full page */ |
783 | max_data_sz = 4096 - headroom - tailroom; | |
bc56c919 JDB |
784 | |
785 | data = bpf_test_init(kattr, max_data_sz, headroom, tailroom); | |
47316f4a ZE |
786 | if (IS_ERR(data)) { |
787 | ret = PTR_ERR(data); | |
788 | goto free_ctx; | |
789 | } | |
1cf1cae9 | 790 | |
65073a67 | 791 | rxqueue = __netif_get_rx_queue(current->nsproxy->net_ns->loopback_dev, 0); |
43b5169d LB |
792 | xdp_init_buff(&xdp, headroom + max_data_sz + tailroom, |
793 | &rxqueue->xdp_rxq); | |
be9df4af LB |
794 | xdp_prepare_buff(&xdp, data, headroom, size, true); |
795 | ||
47316f4a ZE |
796 | ret = xdp_convert_md_to_buff(ctx, &xdp); |
797 | if (ret) | |
798 | goto free_data; | |
799 | ||
f23c4b39 BT |
800 | bpf_prog_change_xdp(NULL, prog); |
801 | ret = bpf_test_run(prog, &xdp, repeat, &retval, &duration, true); | |
ec94670f ZE |
802 | /* We convert the xdp_buff back to an xdp_md before checking the return |
803 | * code so the reference count of any held netdevice will be decremented | |
804 | * even if the test run failed. | |
805 | */ | |
806 | xdp_convert_buff_to_md(&xdp, ctx); | |
dcb40590 RG |
807 | if (ret) |
808 | goto out; | |
47316f4a ZE |
809 | |
810 | if (xdp.data_meta != data + headroom || | |
811 | xdp.data_end != xdp.data_meta + size) | |
812 | size = xdp.data_end - xdp.data_meta; | |
813 | ||
47316f4a ZE |
814 | ret = bpf_test_finish(kattr, uattr, xdp.data_meta, size, retval, |
815 | duration); | |
816 | if (!ret) | |
817 | ret = bpf_ctx_finish(kattr, uattr, ctx, | |
818 | sizeof(struct xdp_md)); | |
819 | ||
dcb40590 | 820 | out: |
f23c4b39 | 821 | bpf_prog_change_xdp(prog, NULL); |
47316f4a | 822 | free_data: |
1cf1cae9 | 823 | kfree(data); |
47316f4a ZE |
824 | free_ctx: |
825 | kfree(ctx); | |
1cf1cae9 AS |
826 | return ret; |
827 | } | |
b7a1848e | 828 | |
b2ca4e1c SF |
829 | static int verify_user_bpf_flow_keys(struct bpf_flow_keys *ctx) |
830 | { | |
831 | /* make sure the fields we don't use are zeroed */ | |
832 | if (!range_is_zero(ctx, 0, offsetof(struct bpf_flow_keys, flags))) | |
833 | return -EINVAL; | |
834 | ||
835 | /* flags is allowed */ | |
836 | ||
b590cb5f | 837 | if (!range_is_zero(ctx, offsetofend(struct bpf_flow_keys, flags), |
b2ca4e1c SF |
838 | sizeof(struct bpf_flow_keys))) |
839 | return -EINVAL; | |
840 | ||
841 | return 0; | |
842 | } | |
843 | ||
b7a1848e SF |
844 | int bpf_prog_test_run_flow_dissector(struct bpf_prog *prog, |
845 | const union bpf_attr *kattr, | |
846 | union bpf_attr __user *uattr) | |
847 | { | |
607b9cc9 | 848 | struct bpf_test_timer t = { NO_PREEMPT }; |
b7a1848e | 849 | u32 size = kattr->test.data_size_in; |
7b8a1304 | 850 | struct bpf_flow_dissector ctx = {}; |
b7a1848e | 851 | u32 repeat = kattr->test.repeat; |
b2ca4e1c | 852 | struct bpf_flow_keys *user_ctx; |
b7a1848e | 853 | struct bpf_flow_keys flow_keys; |
7b8a1304 | 854 | const struct ethhdr *eth; |
b2ca4e1c | 855 | unsigned int flags = 0; |
b7a1848e | 856 | u32 retval, duration; |
b7a1848e SF |
857 | void *data; |
858 | int ret; | |
b7a1848e SF |
859 | |
860 | if (prog->type != BPF_PROG_TYPE_FLOW_DISSECTOR) | |
861 | return -EINVAL; | |
862 | ||
1b4d60ec SL |
863 | if (kattr->test.flags || kattr->test.cpu) |
864 | return -EINVAL; | |
865 | ||
7b8a1304 SF |
866 | if (size < ETH_HLEN) |
867 | return -EINVAL; | |
868 | ||
869 | data = bpf_test_init(kattr, size, 0, 0); | |
b7a1848e SF |
870 | if (IS_ERR(data)) |
871 | return PTR_ERR(data); | |
872 | ||
7b8a1304 | 873 | eth = (struct ethhdr *)data; |
b7a1848e | 874 | |
b7a1848e SF |
875 | if (!repeat) |
876 | repeat = 1; | |
877 | ||
b2ca4e1c SF |
878 | user_ctx = bpf_ctx_init(kattr, sizeof(struct bpf_flow_keys)); |
879 | if (IS_ERR(user_ctx)) { | |
880 | kfree(data); | |
881 | return PTR_ERR(user_ctx); | |
882 | } | |
883 | if (user_ctx) { | |
884 | ret = verify_user_bpf_flow_keys(user_ctx); | |
885 | if (ret) | |
886 | goto out; | |
887 | flags = user_ctx->flags; | |
888 | } | |
889 | ||
7b8a1304 SF |
890 | ctx.flow_keys = &flow_keys; |
891 | ctx.data = data; | |
892 | ctx.data_end = (__u8 *)data + size; | |
893 | ||
607b9cc9 LB |
894 | bpf_test_timer_enter(&t); |
895 | do { | |
7b8a1304 | 896 | retval = bpf_flow_dissect(prog, &ctx, eth->h_proto, ETH_HLEN, |
b2ca4e1c | 897 | size, flags); |
607b9cc9 LB |
898 | } while (bpf_test_timer_continue(&t, repeat, &ret, &duration)); |
899 | bpf_test_timer_leave(&t); | |
7b8a1304 | 900 | |
607b9cc9 LB |
901 | if (ret < 0) |
902 | goto out; | |
b7a1848e SF |
903 | |
904 | ret = bpf_test_finish(kattr, uattr, &flow_keys, sizeof(flow_keys), | |
905 | retval, duration); | |
b2ca4e1c SF |
906 | if (!ret) |
907 | ret = bpf_ctx_finish(kattr, uattr, user_ctx, | |
908 | sizeof(struct bpf_flow_keys)); | |
b7a1848e | 909 | |
a439184d | 910 | out: |
b2ca4e1c | 911 | kfree(user_ctx); |
7b8a1304 | 912 | kfree(data); |
b7a1848e SF |
913 | return ret; |
914 | } | |
7c32e8f8 LB |
915 | |
916 | int bpf_prog_test_run_sk_lookup(struct bpf_prog *prog, const union bpf_attr *kattr, | |
917 | union bpf_attr __user *uattr) | |
918 | { | |
919 | struct bpf_test_timer t = { NO_PREEMPT }; | |
920 | struct bpf_prog_array *progs = NULL; | |
921 | struct bpf_sk_lookup_kern ctx = {}; | |
922 | u32 repeat = kattr->test.repeat; | |
923 | struct bpf_sk_lookup *user_ctx; | |
924 | u32 retval, duration; | |
925 | int ret = -EINVAL; | |
926 | ||
927 | if (prog->type != BPF_PROG_TYPE_SK_LOOKUP) | |
928 | return -EINVAL; | |
929 | ||
930 | if (kattr->test.flags || kattr->test.cpu) | |
931 | return -EINVAL; | |
932 | ||
933 | if (kattr->test.data_in || kattr->test.data_size_in || kattr->test.data_out || | |
934 | kattr->test.data_size_out) | |
935 | return -EINVAL; | |
936 | ||
937 | if (!repeat) | |
938 | repeat = 1; | |
939 | ||
940 | user_ctx = bpf_ctx_init(kattr, sizeof(*user_ctx)); | |
941 | if (IS_ERR(user_ctx)) | |
942 | return PTR_ERR(user_ctx); | |
943 | ||
944 | if (!user_ctx) | |
945 | return -EINVAL; | |
946 | ||
947 | if (user_ctx->sk) | |
948 | goto out; | |
949 | ||
950 | if (!range_is_zero(user_ctx, offsetofend(typeof(*user_ctx), local_port), sizeof(*user_ctx))) | |
951 | goto out; | |
952 | ||
953 | if (user_ctx->local_port > U16_MAX || user_ctx->remote_port > U16_MAX) { | |
954 | ret = -ERANGE; | |
955 | goto out; | |
956 | } | |
957 | ||
958 | ctx.family = (u16)user_ctx->family; | |
959 | ctx.protocol = (u16)user_ctx->protocol; | |
960 | ctx.dport = (u16)user_ctx->local_port; | |
961 | ctx.sport = (__force __be16)user_ctx->remote_port; | |
962 | ||
963 | switch (ctx.family) { | |
964 | case AF_INET: | |
965 | ctx.v4.daddr = (__force __be32)user_ctx->local_ip4; | |
966 | ctx.v4.saddr = (__force __be32)user_ctx->remote_ip4; | |
967 | break; | |
968 | ||
969 | #if IS_ENABLED(CONFIG_IPV6) | |
970 | case AF_INET6: | |
971 | ctx.v6.daddr = (struct in6_addr *)user_ctx->local_ip6; | |
972 | ctx.v6.saddr = (struct in6_addr *)user_ctx->remote_ip6; | |
973 | break; | |
974 | #endif | |
975 | ||
976 | default: | |
977 | ret = -EAFNOSUPPORT; | |
978 | goto out; | |
979 | } | |
980 | ||
981 | progs = bpf_prog_array_alloc(1, GFP_KERNEL); | |
982 | if (!progs) { | |
983 | ret = -ENOMEM; | |
984 | goto out; | |
985 | } | |
986 | ||
987 | progs->items[0].prog = prog; | |
988 | ||
989 | bpf_test_timer_enter(&t); | |
990 | do { | |
991 | ctx.selected_sk = NULL; | |
fb7dd8bc | 992 | retval = BPF_PROG_SK_LOOKUP_RUN_ARRAY(progs, ctx, bpf_prog_run); |
7c32e8f8 LB |
993 | } while (bpf_test_timer_continue(&t, repeat, &ret, &duration)); |
994 | bpf_test_timer_leave(&t); | |
995 | ||
996 | if (ret < 0) | |
997 | goto out; | |
998 | ||
999 | user_ctx->cookie = 0; | |
1000 | if (ctx.selected_sk) { | |
1001 | if (ctx.selected_sk->sk_reuseport && !ctx.no_reuseport) { | |
1002 | ret = -EOPNOTSUPP; | |
1003 | goto out; | |
1004 | } | |
1005 | ||
1006 | user_ctx->cookie = sock_gen_cookie(ctx.selected_sk); | |
1007 | } | |
1008 | ||
1009 | ret = bpf_test_finish(kattr, uattr, NULL, 0, retval, duration); | |
1010 | if (!ret) | |
1011 | ret = bpf_ctx_finish(kattr, uattr, user_ctx, sizeof(*user_ctx)); | |
1012 | ||
1013 | out: | |
1014 | bpf_prog_array_free(progs); | |
1015 | kfree(user_ctx); | |
1016 | return ret; | |
1017 | } | |
79a7f8bd AS |
1018 | |
1019 | int bpf_prog_test_run_syscall(struct bpf_prog *prog, | |
1020 | const union bpf_attr *kattr, | |
1021 | union bpf_attr __user *uattr) | |
1022 | { | |
1023 | void __user *ctx_in = u64_to_user_ptr(kattr->test.ctx_in); | |
1024 | __u32 ctx_size_in = kattr->test.ctx_size_in; | |
1025 | void *ctx = NULL; | |
1026 | u32 retval; | |
1027 | int err = 0; | |
1028 | ||
1029 | /* doesn't support data_in/out, ctx_out, duration, or repeat or flags */ | |
1030 | if (kattr->test.data_in || kattr->test.data_out || | |
1031 | kattr->test.ctx_out || kattr->test.duration || | |
1032 | kattr->test.repeat || kattr->test.flags) | |
1033 | return -EINVAL; | |
1034 | ||
1035 | if (ctx_size_in < prog->aux->max_ctx_offset || | |
1036 | ctx_size_in > U16_MAX) | |
1037 | return -EINVAL; | |
1038 | ||
1039 | if (ctx_size_in) { | |
1040 | ctx = kzalloc(ctx_size_in, GFP_USER); | |
1041 | if (!ctx) | |
1042 | return -ENOMEM; | |
1043 | if (copy_from_user(ctx, ctx_in, ctx_size_in)) { | |
1044 | err = -EFAULT; | |
1045 | goto out; | |
1046 | } | |
1047 | } | |
87b7b533 YS |
1048 | |
1049 | rcu_read_lock_trace(); | |
79a7f8bd | 1050 | retval = bpf_prog_run_pin_on_cpu(prog, ctx); |
87b7b533 | 1051 | rcu_read_unlock_trace(); |
79a7f8bd AS |
1052 | |
1053 | if (copy_to_user(&uattr->test.retval, &retval, sizeof(u32))) { | |
1054 | err = -EFAULT; | |
1055 | goto out; | |
1056 | } | |
1057 | if (ctx_size_in) | |
1058 | if (copy_to_user(ctx_in, ctx, ctx_size_in)) | |
1059 | err = -EFAULT; | |
1060 | out: | |
1061 | kfree(ctx); | |
1062 | return err; | |
1063 | } |