Blame lib/bpf.c

Packit Service 3880ab
/*
Packit Service 3880ab
 * bpf.c	BPF common code
Packit Service 3880ab
 *
Packit Service 3880ab
 *		This program is free software; you can distribute it and/or
Packit Service 3880ab
 *		modify it under the terms of the GNU General Public License
Packit Service 3880ab
 *		as published by the Free Software Foundation; either version
Packit Service 3880ab
 *		2 of the License, or (at your option) any later version.
Packit Service 3880ab
 *
Packit Service 3880ab
 * Authors:	Daniel Borkmann <daniel@iogearbox.net>
Packit Service 3880ab
 *		Jiri Pirko <jiri@resnulli.us>
Packit Service 3880ab
 *		Alexei Starovoitov <ast@kernel.org>
Packit Service 3880ab
 */
Packit Service 3880ab
Packit Service 3880ab
#include <stdio.h>
Packit Service 3880ab
#include <stdlib.h>
Packit Service 3880ab
#include <unistd.h>
Packit Service 3880ab
#include <string.h>
Packit Service 3880ab
#include <stdbool.h>
Packit Service 3880ab
#include <stdint.h>
Packit Service 3880ab
#include <errno.h>
Packit Service 3880ab
#include <fcntl.h>
Packit Service 3880ab
#include <stdarg.h>
Packit Service 3880ab
#include <limits.h>
Packit Service 3880ab
#include <assert.h>
Packit Service 3880ab
Packit Service 3880ab
#ifdef HAVE_ELF
Packit Service 3880ab
#include <libelf.h>
Packit Service 3880ab
#include <gelf.h>
Packit Service 3880ab
#endif
Packit Service 3880ab
Packit Service 3880ab
#include <sys/types.h>
Packit Service 3880ab
#include <sys/stat.h>
Packit Service 3880ab
#include <sys/un.h>
Packit Service 3880ab
#include <sys/vfs.h>
Packit Service 3880ab
#include <sys/mount.h>
Packit Service 3880ab
#include <sys/syscall.h>
Packit Service 3880ab
#include <sys/sendfile.h>
Packit Service 3880ab
#include <sys/resource.h>
Packit Service 3880ab
Packit Service 3880ab
#include <arpa/inet.h>
Packit Service 3880ab
Packit Service 3880ab
#include "utils.h"
Packit Service 3880ab
#include "json_print.h"
Packit Service 3880ab
Packit Service 3880ab
#include "bpf_util.h"
Packit Service 3880ab
#include "bpf_elf.h"
Packit Service 3880ab
#include "bpf_scm.h"
Packit Service 3880ab
Packit Service 3880ab
struct bpf_prog_meta {
Packit Service 3880ab
	const char *type;
Packit Service 3880ab
	const char *subdir;
Packit Service 3880ab
	const char *section;
Packit Service 3880ab
	bool may_uds_export;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static const enum bpf_prog_type __bpf_types[] = {
Packit Service 3880ab
	BPF_PROG_TYPE_SCHED_CLS,
Packit Service 3880ab
	BPF_PROG_TYPE_SCHED_ACT,
Packit Service 3880ab
	BPF_PROG_TYPE_XDP,
Packit Service 3880ab
	BPF_PROG_TYPE_LWT_IN,
Packit Service 3880ab
	BPF_PROG_TYPE_LWT_OUT,
Packit Service 3880ab
	BPF_PROG_TYPE_LWT_XMIT,
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static const struct bpf_prog_meta __bpf_prog_meta[] = {
Packit Service 3880ab
	[BPF_PROG_TYPE_SCHED_CLS] = {
Packit Service 3880ab
		.type		= "cls",
Packit Service 3880ab
		.subdir		= "tc",
Packit Service 3880ab
		.section	= ELF_SECTION_CLASSIFIER,
Packit Service 3880ab
		.may_uds_export	= true,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_SCHED_ACT] = {
Packit Service 3880ab
		.type		= "act",
Packit Service 3880ab
		.subdir		= "tc",
Packit Service 3880ab
		.section	= ELF_SECTION_ACTION,
Packit Service 3880ab
		.may_uds_export	= true,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_XDP] = {
Packit Service 3880ab
		.type		= "xdp",
Packit Service 3880ab
		.subdir		= "xdp",
Packit Service 3880ab
		.section	= ELF_SECTION_PROG,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_LWT_IN] = {
Packit Service 3880ab
		.type		= "lwt_in",
Packit Service 3880ab
		.subdir		= "ip",
Packit Service 3880ab
		.section	= ELF_SECTION_PROG,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_LWT_OUT] = {
Packit Service 3880ab
		.type		= "lwt_out",
Packit Service 3880ab
		.subdir		= "ip",
Packit Service 3880ab
		.section	= ELF_SECTION_PROG,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_LWT_XMIT] = {
Packit Service 3880ab
		.type		= "lwt_xmit",
Packit Service 3880ab
		.subdir		= "ip",
Packit Service 3880ab
		.section	= ELF_SECTION_PROG,
Packit Service 3880ab
	},
Packit Service 3880ab
	[BPF_PROG_TYPE_LWT_SEG6LOCAL] = {
Packit Service 3880ab
		.type		= "lwt_seg6local",
Packit Service 3880ab
		.subdir		= "ip",
Packit Service 3880ab
		.section	= ELF_SECTION_PROG,
Packit Service 3880ab
	},
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_prog_to_subdir(enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	assert(type < ARRAY_SIZE(__bpf_prog_meta) &&
Packit Service 3880ab
	       __bpf_prog_meta[type].subdir);
Packit Service 3880ab
	return __bpf_prog_meta[type].subdir;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
const char *bpf_prog_to_default_section(enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	assert(type < ARRAY_SIZE(__bpf_prog_meta) &&
Packit Service 3880ab
	       __bpf_prog_meta[type].section);
Packit Service 3880ab
	return __bpf_prog_meta[type].section;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
#ifdef HAVE_ELF
Packit Service 3880ab
static int bpf_obj_open(const char *path, enum bpf_prog_type type,
Packit Service 3880ab
			const char *sec, __u32 ifindex, bool verbose);
Packit Service 3880ab
#else
Packit Service 3880ab
static int bpf_obj_open(const char *path, enum bpf_prog_type type,
Packit Service 3880ab
			const char *sec, __u32 ifindex, bool verbose)
Packit Service 3880ab
{
Packit Service 3880ab
	fprintf(stderr, "No ELF library support compiled in.\n");
Packit Service 3880ab
	errno = ENOSYS;
Packit Service 3880ab
	return -1;
Packit Service 3880ab
}
Packit Service 3880ab
#endif
Packit Service 3880ab
Packit Service 3880ab
static inline __u64 bpf_ptr_to_u64(const void *ptr)
Packit Service 3880ab
{
Packit Service 3880ab
	return (__u64)(unsigned long)ptr;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf(int cmd, union bpf_attr *attr, unsigned int size)
Packit Service 3880ab
{
Packit Service 3880ab
#ifdef __NR_bpf
Packit Service 3880ab
	return syscall(__NR_bpf, cmd, attr, size);
Packit Service 3880ab
#else
Packit Service 3880ab
	fprintf(stderr, "No bpf syscall, kernel headers too old?\n");
Packit Service 3880ab
	errno = ENOSYS;
Packit Service 3880ab
	return -1;
Packit Service 3880ab
#endif
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_update(int fd, const void *key, const void *value,
Packit Service 3880ab
			  uint64_t flags)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.map_fd = fd;
Packit Service 3880ab
	attr.key = bpf_ptr_to_u64(key);
Packit Service 3880ab
	attr.value = bpf_ptr_to_u64(value);
Packit Service 3880ab
	attr.flags = flags;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_MAP_UPDATE_ELEM, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_prog_fd_by_id(uint32_t id)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.prog_id = id;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_PROG_GET_FD_BY_ID, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_prog_info_by_fd(int fd, struct bpf_prog_info *info,
Packit Service 3880ab
			       uint32_t *info_len)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	attr.info.bpf_fd = fd;
Packit Service 3880ab
	attr.info.info = bpf_ptr_to_u64(info);
Packit Service 3880ab
	attr.info.info_len = *info_len;
Packit Service 3880ab
Packit Service 3880ab
	*info_len = 0;
Packit Service 3880ab
	ret = bpf(BPF_OBJ_GET_INFO_BY_FD, &attr, sizeof(attr));
Packit Service 3880ab
	if (!ret)
Packit Service 3880ab
		*info_len = attr.info.info_len;
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_dump_prog_info(FILE *f, uint32_t id)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_prog_info info = {};
Packit Service 3880ab
	uint32_t len = sizeof(info);
Packit Service 3880ab
	int fd, ret, dump_ok = 0;
Packit Service 3880ab
	SPRINT_BUF(tmp);
Packit Service 3880ab
Packit Service 3880ab
	open_json_object("prog");
Packit Service 3880ab
	print_uint(PRINT_ANY, "id", "id %u ", id);
Packit Service 3880ab
Packit Service 3880ab
	fd = bpf_prog_fd_by_id(id);
Packit Service 3880ab
	if (fd < 0)
Packit Service 3880ab
		goto out;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_prog_info_by_fd(fd, &info, &len;;
Packit Service 3880ab
	if (!ret && len) {
Packit Service 3880ab
		int jited = !!info.jited_prog_len;
Packit Service 3880ab
Packit Service 3880ab
		print_string(PRINT_ANY, "tag", "tag %s ",
Packit Service 3880ab
			     hexstring_n2a(info.tag, sizeof(info.tag),
Packit Service 3880ab
					   tmp, sizeof(tmp)));
Packit Service 3880ab
		print_uint(PRINT_JSON, "jited", NULL, jited);
Packit Service 3880ab
		if (jited && !is_json_context())
Packit Service 3880ab
			fprintf(f, "jited ");
Packit Service 3880ab
		dump_ok = 1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	close(fd);
Packit Service 3880ab
out:
Packit Service 3880ab
	close_json_object();
Packit Service 3880ab
	return dump_ok;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_parse_string(char *arg, bool from_file, __u16 *bpf_len,
Packit Service 3880ab
			    char **bpf_string, bool *need_release,
Packit Service 3880ab
			    const char separator)
Packit Service 3880ab
{
Packit Service 3880ab
	char sp;
Packit Service 3880ab
Packit Service 3880ab
	if (from_file) {
Packit Service 3880ab
		size_t tmp_len, op_len = sizeof("65535 255 255 4294967295,");
Packit Service 3880ab
		char *tmp_string, *pos, c_prev = ' ';
Packit Service 3880ab
		FILE *fp;
Packit Service 3880ab
		int c;
Packit Service 3880ab
Packit Service 3880ab
		tmp_len = sizeof("4096,") + BPF_MAXINSNS * op_len;
Packit Service 3880ab
		tmp_string = pos = calloc(1, tmp_len);
Packit Service 3880ab
		if (tmp_string == NULL)
Packit Service 3880ab
			return -ENOMEM;
Packit Service 3880ab
Packit Service 3880ab
		fp = fopen(arg, "r");
Packit Service 3880ab
		if (fp == NULL) {
Packit Service 3880ab
			perror("Cannot fopen");
Packit Service 3880ab
			free(tmp_string);
Packit Service 3880ab
			return -ENOENT;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		while ((c = fgetc(fp)) != EOF) {
Packit Service 3880ab
			switch (c) {
Packit Service 3880ab
			case '\n':
Packit Service 3880ab
				if (c_prev != ',')
Packit Service 3880ab
					*(pos++) = ',';
Packit Service 3880ab
				c_prev = ',';
Packit Service 3880ab
				break;
Packit Service 3880ab
			case ' ':
Packit Service 3880ab
			case '\t':
Packit Service 3880ab
				if (c_prev != ' ')
Packit Service 3880ab
					*(pos++) = c;
Packit Service 3880ab
				c_prev = ' ';
Packit Service 3880ab
				break;
Packit Service 3880ab
			default:
Packit Service 3880ab
				*(pos++) = c;
Packit Service 3880ab
				c_prev = c;
Packit Service 3880ab
			}
Packit Service 3880ab
			if (pos - tmp_string == tmp_len)
Packit Service 3880ab
				break;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (!feof(fp)) {
Packit Service 3880ab
			free(tmp_string);
Packit Service 3880ab
			fclose(fp);
Packit Service 3880ab
			return -E2BIG;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		fclose(fp);
Packit Service 3880ab
		*pos = 0;
Packit Service 3880ab
Packit Service 3880ab
		*need_release = true;
Packit Service 3880ab
		*bpf_string = tmp_string;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		*need_release = false;
Packit Service 3880ab
		*bpf_string = arg;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (sscanf(*bpf_string, "%hu%c", bpf_len, &sp) != 2 ||
Packit Service 3880ab
	    sp != separator) {
Packit Service 3880ab
		if (*need_release)
Packit Service 3880ab
			free(*bpf_string);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_ops_parse(int argc, char **argv, struct sock_filter *bpf_ops,
Packit Service 3880ab
			 bool from_file)
Packit Service 3880ab
{
Packit Service 3880ab
	char *bpf_string, *token, separator = ',';
Packit Service 3880ab
	int ret = 0, i = 0;
Packit Service 3880ab
	bool need_release;
Packit Service 3880ab
	__u16 bpf_len = 0;
Packit Service 3880ab
Packit Service 3880ab
	if (argc < 1)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (bpf_parse_string(argv[0], from_file, &bpf_len, &bpf_string,
Packit Service 3880ab
			     &need_release, separator))
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (bpf_len == 0 || bpf_len > BPF_MAXINSNS) {
Packit Service 3880ab
		ret = -EINVAL;
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	token = bpf_string;
Packit Service 3880ab
	while ((token = strchr(token, separator)) && (++token)[0]) {
Packit Service 3880ab
		if (i >= bpf_len) {
Packit Service 3880ab
			fprintf(stderr, "Real program length exceeds encoded length parameter!\n");
Packit Service 3880ab
			ret = -EINVAL;
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (sscanf(token, "%hu %hhu %hhu %u,",
Packit Service 3880ab
			   &bpf_ops[i].code, &bpf_ops[i].jt,
Packit Service 3880ab
			   &bpf_ops[i].jf, &bpf_ops[i].k) != 4) {
Packit Service 3880ab
			fprintf(stderr, "Error at instruction %d!\n", i);
Packit Service 3880ab
			ret = -EINVAL;
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		i++;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (i != bpf_len) {
Packit Service 3880ab
		fprintf(stderr, "Parsed program length is less than encoded length parameter!\n");
Packit Service 3880ab
		ret = -EINVAL;
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
	ret = bpf_len;
Packit Service 3880ab
out:
Packit Service 3880ab
	if (need_release)
Packit Service 3880ab
		free(bpf_string);
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
void bpf_print_ops(struct rtattr *bpf_ops, __u16 len)
Packit Service 3880ab
{
Packit Service 3880ab
	struct sock_filter *ops = RTA_DATA(bpf_ops);
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	if (len == 0)
Packit Service 3880ab
		return;
Packit Service 3880ab
Packit Service 3880ab
	open_json_object("bytecode");
Packit Service 3880ab
	print_uint(PRINT_ANY, "length", "bytecode \'%u,", len);
Packit Service 3880ab
	open_json_array(PRINT_JSON, "insns");
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < len; i++) {
Packit Service 3880ab
		open_json_object(NULL);
Packit Service 3880ab
		print_hu(PRINT_ANY, "code", "%hu ", ops[i].code);
Packit Service 3880ab
		print_hhu(PRINT_ANY, "jt", "%hhu ", ops[i].jt);
Packit Service 3880ab
		print_hhu(PRINT_ANY, "jf", "%hhu ", ops[i].jf);
Packit Service 3880ab
		if (i == len - 1)
Packit Service 3880ab
			print_uint(PRINT_ANY, "k", "%u\'", ops[i].k);
Packit Service 3880ab
		else
Packit Service 3880ab
			print_uint(PRINT_ANY, "k", "%u,", ops[i].k);
Packit Service 3880ab
		close_json_object();
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	close_json_array(PRINT_JSON, NULL);
Packit Service 3880ab
	close_json_object();
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_map_pin_report(const struct bpf_elf_map *pin,
Packit Service 3880ab
			       const struct bpf_elf_map *obj)
Packit Service 3880ab
{
Packit Service 3880ab
	fprintf(stderr, "Map specification differs from pinned file!\n");
Packit Service 3880ab
Packit Service 3880ab
	if (obj->type != pin->type)
Packit Service 3880ab
		fprintf(stderr, " - Type:         %u (obj) != %u (pin)\n",
Packit Service 3880ab
			obj->type, pin->type);
Packit Service 3880ab
	if (obj->size_key != pin->size_key)
Packit Service 3880ab
		fprintf(stderr, " - Size key:     %u (obj) != %u (pin)\n",
Packit Service 3880ab
			obj->size_key, pin->size_key);
Packit Service 3880ab
	if (obj->size_value != pin->size_value)
Packit Service 3880ab
		fprintf(stderr, " - Size value:   %u (obj) != %u (pin)\n",
Packit Service 3880ab
			obj->size_value, pin->size_value);
Packit Service 3880ab
	if (obj->max_elem != pin->max_elem)
Packit Service 3880ab
		fprintf(stderr, " - Max elems:    %u (obj) != %u (pin)\n",
Packit Service 3880ab
			obj->max_elem, pin->max_elem);
Packit Service 3880ab
	if (obj->flags != pin->flags)
Packit Service 3880ab
		fprintf(stderr, " - Flags:        %#x (obj) != %#x (pin)\n",
Packit Service 3880ab
			obj->flags, pin->flags);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, "\n");
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
struct bpf_prog_data {
Packit Service 3880ab
	unsigned int type;
Packit Service 3880ab
	unsigned int jited;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_map_ext {
Packit Service 3880ab
	struct bpf_prog_data owner;
Packit Service 3880ab
	unsigned int btf_id_key;
Packit Service 3880ab
	unsigned int btf_id_val;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static int bpf_derive_elf_map_from_fdinfo(int fd, struct bpf_elf_map *map,
Packit Service 3880ab
					  struct bpf_map_ext *ext)
Packit Service 3880ab
{
Packit Service 3880ab
	unsigned int val, owner_type = 0, owner_jited = 0;
Packit Service 3880ab
	char file[PATH_MAX], buff[4096];
Packit Service 3880ab
	FILE *fp;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(file, sizeof(file), "/proc/%d/fdinfo/%d", getpid(), fd);
Packit Service 3880ab
	memset(map, 0, sizeof(*map));
Packit Service 3880ab
Packit Service 3880ab
	fp = fopen(file, "r");
Packit Service 3880ab
	if (!fp) {
Packit Service 3880ab
		fprintf(stderr, "No procfs support?!\n");
Packit Service 3880ab
		return -EIO;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	while (fgets(buff, sizeof(buff), fp)) {
Packit Service 3880ab
		if (sscanf(buff, "map_type:\t%u", &val) == 1)
Packit Service 3880ab
			map->type = val;
Packit Service 3880ab
		else if (sscanf(buff, "key_size:\t%u", &val) == 1)
Packit Service 3880ab
			map->size_key = val;
Packit Service 3880ab
		else if (sscanf(buff, "value_size:\t%u", &val) == 1)
Packit Service 3880ab
			map->size_value = val;
Packit Service 3880ab
		else if (sscanf(buff, "max_entries:\t%u", &val) == 1)
Packit Service 3880ab
			map->max_elem = val;
Packit Service 3880ab
		else if (sscanf(buff, "map_flags:\t%i", &val) == 1)
Packit Service 3880ab
			map->flags = val;
Packit Service 3880ab
		else if (sscanf(buff, "owner_prog_type:\t%i", &val) == 1)
Packit Service 3880ab
			owner_type = val;
Packit Service 3880ab
		else if (sscanf(buff, "owner_jited:\t%i", &val) == 1)
Packit Service 3880ab
			owner_jited = val;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fclose(fp);
Packit Service 3880ab
	if (ext) {
Packit Service 3880ab
		memset(ext, 0, sizeof(*ext));
Packit Service 3880ab
		ext->owner.type  = owner_type;
Packit Service 3880ab
		ext->owner.jited = owner_jited;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_selfcheck_pinned(int fd, const struct bpf_elf_map *map,
Packit Service 3880ab
				    struct bpf_map_ext *ext, int length,
Packit Service 3880ab
				    enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_map tmp, zero = {};
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_derive_elf_map_from_fdinfo(fd, &tmp, ext);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	/* The decision to reject this is on kernel side eventually, but
Packit Service 3880ab
	 * at least give the user a chance to know what's wrong.
Packit Service 3880ab
	 */
Packit Service 3880ab
	if (ext->owner.type && ext->owner.type != type)
Packit Service 3880ab
		fprintf(stderr, "Program array map owner types differ: %u (obj) != %u (pin)\n",
Packit Service 3880ab
			type, ext->owner.type);
Packit Service 3880ab
Packit Service 3880ab
	if (!memcmp(&tmp, map, length)) {
Packit Service 3880ab
		return 0;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		/* If kernel doesn't have eBPF-related fdinfo, we cannot do much,
Packit Service 3880ab
		 * so just accept it. We know we do have an eBPF fd and in this
Packit Service 3880ab
		 * case, everything is 0. It is guaranteed that no such map exists
Packit Service 3880ab
		 * since map type of 0 is unloadable BPF_MAP_TYPE_UNSPEC.
Packit Service 3880ab
		 */
Packit Service 3880ab
		if (!memcmp(&tmp, &zero, length))
Packit Service 3880ab
			return 0;
Packit Service 3880ab
Packit Service 3880ab
		bpf_map_pin_report(&tmp, map);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_mnt_fs(const char *target)
Packit Service 3880ab
{
Packit Service 3880ab
	bool bind_done = false;
Packit Service 3880ab
Packit Service 3880ab
	while (mount("", target, "none", MS_PRIVATE | MS_REC, NULL)) {
Packit Service 3880ab
		if (errno != EINVAL || bind_done) {
Packit Service 3880ab
			fprintf(stderr, "mount --make-private %s failed: %s\n",
Packit Service 3880ab
				target,	strerror(errno));
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (mount(target, target, "none", MS_BIND, NULL)) {
Packit Service 3880ab
			fprintf(stderr, "mount --bind %s %s failed: %s\n",
Packit Service 3880ab
				target,	target, strerror(errno));
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		bind_done = true;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (mount("bpf", target, "bpf", 0, "mode=0700")) {
Packit Service 3880ab
		fprintf(stderr, "mount -t bpf bpf %s failed: %s\n",
Packit Service 3880ab
			target,	strerror(errno));
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_mnt_check_target(const char *target)
Packit Service 3880ab
{
Packit Service 3880ab
	struct stat sb = {};
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = stat(target, &sb);
Packit Service 3880ab
	if (ret) {
Packit Service 3880ab
		ret = mkdir(target, S_IRWXU);
Packit Service 3880ab
		if (ret) {
Packit Service 3880ab
			fprintf(stderr, "mkdir %s failed: %s\n", target,
Packit Service 3880ab
				strerror(errno));
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_valid_mntpt(const char *mnt, unsigned long magic)
Packit Service 3880ab
{
Packit Service 3880ab
	struct statfs st_fs;
Packit Service 3880ab
Packit Service 3880ab
	if (statfs(mnt, &st_fs) < 0)
Packit Service 3880ab
		return -ENOENT;
Packit Service 3880ab
	if ((unsigned long)st_fs.f_type != magic)
Packit Service 3880ab
		return -ENOENT;
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_find_mntpt_single(unsigned long magic, char *mnt,
Packit Service 3880ab
					 int len, const char *mntpt)
Packit Service 3880ab
{
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_valid_mntpt(mntpt, magic);
Packit Service 3880ab
	if (!ret) {
Packit Service 3880ab
		strlcpy(mnt, mntpt, len);
Packit Service 3880ab
		return mnt;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return NULL;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_find_mntpt(const char *fstype, unsigned long magic,
Packit Service 3880ab
				  char *mnt, int len,
Packit Service 3880ab
				  const char * const *known_mnts)
Packit Service 3880ab
{
Packit Service 3880ab
	const char * const *ptr;
Packit Service 3880ab
	char type[100];
Packit Service 3880ab
	FILE *fp;
Packit Service 3880ab
Packit Service 3880ab
	if (known_mnts) {
Packit Service 3880ab
		ptr = known_mnts;
Packit Service 3880ab
		while (*ptr) {
Packit Service 3880ab
			if (bpf_find_mntpt_single(magic, mnt, len, *ptr))
Packit Service 3880ab
				return mnt;
Packit Service 3880ab
			ptr++;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (len != PATH_MAX)
Packit Service 3880ab
		return NULL;
Packit Service 3880ab
Packit Service 3880ab
	fp = fopen("/proc/mounts", "r");
Packit Service 3880ab
	if (fp == NULL)
Packit Service 3880ab
		return NULL;
Packit Service 3880ab
Packit Service 3880ab
	while (fscanf(fp, "%*s %" textify(PATH_MAX) "s %99s %*s %*d %*d\n",
Packit Service 3880ab
		      mnt, type) == 2) {
Packit Service 3880ab
		if (strcmp(type, fstype) == 0)
Packit Service 3880ab
			break;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fclose(fp);
Packit Service 3880ab
	if (strcmp(type, fstype) != 0)
Packit Service 3880ab
		return NULL;
Packit Service 3880ab
Packit Service 3880ab
	return mnt;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_trace_pipe(void)
Packit Service 3880ab
{
Packit Service 3880ab
	char tracefs_mnt[PATH_MAX] = TRACE_DIR_MNT;
Packit Service 3880ab
	static const char * const tracefs_known_mnts[] = {
Packit Service 3880ab
		TRACE_DIR_MNT,
Packit Service 3880ab
		"/sys/kernel/debug/tracing",
Packit Service 3880ab
		"/tracing",
Packit Service 3880ab
		"/trace",
Packit Service 3880ab
		0,
Packit Service 3880ab
	};
Packit Service 3880ab
	int fd_in, fd_out = STDERR_FILENO;
Packit Service 3880ab
	char tpipe[PATH_MAX];
Packit Service 3880ab
	const char *mnt;
Packit Service 3880ab
Packit Service 3880ab
	mnt = bpf_find_mntpt("tracefs", TRACEFS_MAGIC, tracefs_mnt,
Packit Service 3880ab
			     sizeof(tracefs_mnt), tracefs_known_mnts);
Packit Service 3880ab
	if (!mnt) {
Packit Service 3880ab
		fprintf(stderr, "tracefs not mounted?\n");
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	snprintf(tpipe, sizeof(tpipe), "%s/trace_pipe", mnt);
Packit Service 3880ab
Packit Service 3880ab
	fd_in = open(tpipe, O_RDONLY);
Packit Service 3880ab
	if (fd_in < 0)
Packit Service 3880ab
		return -1;
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, "Running! Hang up with ^C!\n\n");
Packit Service 3880ab
	while (1) {
Packit Service 3880ab
		static char buff[4096];
Packit Service 3880ab
		ssize_t ret;
Packit Service 3880ab
Packit Service 3880ab
		ret = read(fd_in, buff, sizeof(buff));
Packit Service 3880ab
		if (ret > 0 && write(fd_out, buff, ret) == ret)
Packit Service 3880ab
			continue;
Packit Service 3880ab
		break;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	close(fd_in);
Packit Service 3880ab
	return -1;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_gen_global(const char *bpf_sub_dir)
Packit Service 3880ab
{
Packit Service 3880ab
	char bpf_glo_dir[PATH_MAX];
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(bpf_glo_dir, sizeof(bpf_glo_dir), "%s/%s/",
Packit Service 3880ab
		 bpf_sub_dir, BPF_DIR_GLOBALS);
Packit Service 3880ab
Packit Service 3880ab
	ret = mkdir(bpf_glo_dir, S_IRWXU);
Packit Service 3880ab
	if (ret && errno != EEXIST) {
Packit Service 3880ab
		fprintf(stderr, "mkdir %s failed: %s\n", bpf_glo_dir,
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_gen_master(const char *base, const char *name)
Packit Service 3880ab
{
Packit Service 3880ab
	char bpf_sub_dir[PATH_MAX + NAME_MAX + 1];
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(bpf_sub_dir, sizeof(bpf_sub_dir), "%s%s/", base, name);
Packit Service 3880ab
Packit Service 3880ab
	ret = mkdir(bpf_sub_dir, S_IRWXU);
Packit Service 3880ab
	if (ret && errno != EEXIST) {
Packit Service 3880ab
		fprintf(stderr, "mkdir %s failed: %s\n", bpf_sub_dir,
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return bpf_gen_global(bpf_sub_dir);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_slave_via_bind_mnt(const char *full_name,
Packit Service 3880ab
				  const char *full_link)
Packit Service 3880ab
{
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = mkdir(full_name, S_IRWXU);
Packit Service 3880ab
	if (ret) {
Packit Service 3880ab
		assert(errno != EEXIST);
Packit Service 3880ab
		fprintf(stderr, "mkdir %s failed: %s\n", full_name,
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = mount(full_link, full_name, "none", MS_BIND, NULL);
Packit Service 3880ab
	if (ret) {
Packit Service 3880ab
		rmdir(full_name);
Packit Service 3880ab
		fprintf(stderr, "mount --bind %s %s failed: %s\n",
Packit Service 3880ab
			full_link, full_name, strerror(errno));
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_gen_slave(const char *base, const char *name,
Packit Service 3880ab
			 const char *link)
Packit Service 3880ab
{
Packit Service 3880ab
	char bpf_lnk_dir[PATH_MAX + NAME_MAX + 1];
Packit Service 3880ab
	char bpf_sub_dir[PATH_MAX + NAME_MAX];
Packit Service 3880ab
	struct stat sb = {};
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(bpf_lnk_dir, sizeof(bpf_lnk_dir), "%s%s/", base, link);
Packit Service 3880ab
	snprintf(bpf_sub_dir, sizeof(bpf_sub_dir), "%s%s",  base, name);
Packit Service 3880ab
Packit Service 3880ab
	ret = symlink(bpf_lnk_dir, bpf_sub_dir);
Packit Service 3880ab
	if (ret) {
Packit Service 3880ab
		if (errno != EEXIST) {
Packit Service 3880ab
			if (errno != EPERM) {
Packit Service 3880ab
				fprintf(stderr, "symlink %s failed: %s\n",
Packit Service 3880ab
					bpf_sub_dir, strerror(errno));
Packit Service 3880ab
				return ret;
Packit Service 3880ab
			}
Packit Service 3880ab
Packit Service 3880ab
			return bpf_slave_via_bind_mnt(bpf_sub_dir,
Packit Service 3880ab
						      bpf_lnk_dir);
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		ret = lstat(bpf_sub_dir, &sb);
Packit Service 3880ab
		if (ret) {
Packit Service 3880ab
			fprintf(stderr, "lstat %s failed: %s\n",
Packit Service 3880ab
				bpf_sub_dir, strerror(errno));
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if ((sb.st_mode & S_IFMT) != S_IFLNK)
Packit Service 3880ab
			return bpf_gen_global(bpf_sub_dir);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_gen_hierarchy(const char *base)
Packit Service 3880ab
{
Packit Service 3880ab
	int ret, i;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_gen_master(base, bpf_prog_to_subdir(__bpf_types[0]));
Packit Service 3880ab
	for (i = 1; i < ARRAY_SIZE(__bpf_types) && !ret; i++)
Packit Service 3880ab
		ret = bpf_gen_slave(base,
Packit Service 3880ab
				    bpf_prog_to_subdir(__bpf_types[i]),
Packit Service 3880ab
				    bpf_prog_to_subdir(__bpf_types[0]));
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_get_work_dir(enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	static char bpf_tmp[PATH_MAX] = BPF_DIR_MNT;
Packit Service 3880ab
	static char bpf_wrk_dir[PATH_MAX];
Packit Service 3880ab
	static const char *mnt;
Packit Service 3880ab
	static bool bpf_mnt_cached;
Packit Service 3880ab
	const char *mnt_env = getenv(BPF_ENV_MNT);
Packit Service 3880ab
	static const char * const bpf_known_mnts[] = {
Packit Service 3880ab
		BPF_DIR_MNT,
Packit Service 3880ab
		"/bpf",
Packit Service 3880ab
		0,
Packit Service 3880ab
	};
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_mnt_cached) {
Packit Service 3880ab
		const char *out = mnt;
Packit Service 3880ab
Packit Service 3880ab
		if (out && type) {
Packit Service 3880ab
			snprintf(bpf_tmp, sizeof(bpf_tmp), "%s%s/",
Packit Service 3880ab
				 out, bpf_prog_to_subdir(type));
Packit Service 3880ab
			out = bpf_tmp;
Packit Service 3880ab
		}
Packit Service 3880ab
		return out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (mnt_env)
Packit Service 3880ab
		mnt = bpf_find_mntpt_single(BPF_FS_MAGIC, bpf_tmp,
Packit Service 3880ab
					    sizeof(bpf_tmp), mnt_env);
Packit Service 3880ab
	else
Packit Service 3880ab
		mnt = bpf_find_mntpt("bpf", BPF_FS_MAGIC, bpf_tmp,
Packit Service 3880ab
				     sizeof(bpf_tmp), bpf_known_mnts);
Packit Service 3880ab
	if (!mnt) {
Packit Service 3880ab
		mnt = mnt_env ? : BPF_DIR_MNT;
Packit Service 3880ab
		ret = bpf_mnt_check_target(mnt);
Packit Service 3880ab
		if (!ret)
Packit Service 3880ab
			ret = bpf_mnt_fs(mnt);
Packit Service 3880ab
		if (ret) {
Packit Service 3880ab
			mnt = NULL;
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = snprintf(bpf_wrk_dir, sizeof(bpf_wrk_dir), "%s/", mnt);
Packit Service 3880ab
	if (ret < 0 || ret >= sizeof(bpf_wrk_dir)) {
Packit Service 3880ab
		mnt = NULL;
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_gen_hierarchy(bpf_wrk_dir);
Packit Service 3880ab
	if (ret) {
Packit Service 3880ab
		mnt = NULL;
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	mnt = bpf_wrk_dir;
Packit Service 3880ab
out:
Packit Service 3880ab
	bpf_mnt_cached = true;
Packit Service 3880ab
	return mnt;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_obj_get(const char *pathname, enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
	char tmp[PATH_MAX];
Packit Service 3880ab
Packit Service 3880ab
	if (strlen(pathname) > 2 && pathname[0] == 'm' &&
Packit Service 3880ab
	    pathname[1] == ':' && bpf_get_work_dir(type)) {
Packit Service 3880ab
		snprintf(tmp, sizeof(tmp), "%s/%s",
Packit Service 3880ab
			 bpf_get_work_dir(type), pathname + 2);
Packit Service 3880ab
		pathname = tmp;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	attr.pathname = bpf_ptr_to_u64(pathname);
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_OBJ_GET, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_obj_pinned(const char *pathname, enum bpf_prog_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	int prog_fd = bpf_obj_get(pathname, type);
Packit Service 3880ab
Packit Service 3880ab
	if (prog_fd < 0)
Packit Service 3880ab
		fprintf(stderr, "Couldn\'t retrieve pinned program \'%s\': %s\n",
Packit Service 3880ab
			pathname, strerror(errno));
Packit Service 3880ab
	return prog_fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_do_parse(struct bpf_cfg_in *cfg, const bool *opt_tbl)
Packit Service 3880ab
{
Packit Service 3880ab
	const char *file, *section, *uds_name;
Packit Service 3880ab
	bool verbose = false;
Packit Service 3880ab
	int i, ret, argc;
Packit Service 3880ab
	char **argv;
Packit Service 3880ab
Packit Service 3880ab
	argv = cfg->argv;
Packit Service 3880ab
	argc = cfg->argc;
Packit Service 3880ab
Packit Service 3880ab
	if (opt_tbl[CBPF_BYTECODE] &&
Packit Service 3880ab
	    (matches(*argv, "bytecode") == 0 ||
Packit Service 3880ab
	     strcmp(*argv, "bc") == 0)) {
Packit Service 3880ab
		cfg->mode = CBPF_BYTECODE;
Packit Service 3880ab
	} else if (opt_tbl[CBPF_FILE] &&
Packit Service 3880ab
		   (matches(*argv, "bytecode-file") == 0 ||
Packit Service 3880ab
		    strcmp(*argv, "bcf") == 0)) {
Packit Service 3880ab
		cfg->mode = CBPF_FILE;
Packit Service 3880ab
	} else if (opt_tbl[EBPF_OBJECT] &&
Packit Service 3880ab
		   (matches(*argv, "object-file") == 0 ||
Packit Service 3880ab
		    strcmp(*argv, "obj") == 0)) {
Packit Service 3880ab
		cfg->mode = EBPF_OBJECT;
Packit Service 3880ab
	} else if (opt_tbl[EBPF_PINNED] &&
Packit Service 3880ab
		   (matches(*argv, "object-pinned") == 0 ||
Packit Service 3880ab
		    matches(*argv, "pinned") == 0 ||
Packit Service 3880ab
		    matches(*argv, "fd") == 0)) {
Packit Service 3880ab
		cfg->mode = EBPF_PINNED;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		fprintf(stderr, "What mode is \"%s\"?\n", *argv);
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	NEXT_ARG();
Packit Service 3880ab
	file = section = uds_name = NULL;
Packit Service 3880ab
	if (cfg->mode == EBPF_OBJECT || cfg->mode == EBPF_PINNED) {
Packit Service 3880ab
		file = *argv;
Packit Service 3880ab
		NEXT_ARG_FWD();
Packit Service 3880ab
Packit Service 3880ab
		if (cfg->type == BPF_PROG_TYPE_UNSPEC) {
Packit Service 3880ab
			if (argc > 0 && matches(*argv, "type") == 0) {
Packit Service 3880ab
				NEXT_ARG();
Packit Service 3880ab
				for (i = 0; i < ARRAY_SIZE(__bpf_prog_meta);
Packit Service 3880ab
				     i++) {
Packit Service 3880ab
					if (!__bpf_prog_meta[i].type)
Packit Service 3880ab
						continue;
Packit Service 3880ab
					if (!matches(*argv,
Packit Service 3880ab
						     __bpf_prog_meta[i].type)) {
Packit Service 3880ab
						cfg->type = i;
Packit Service 3880ab
						break;
Packit Service 3880ab
					}
Packit Service 3880ab
				}
Packit Service 3880ab
Packit Service 3880ab
				if (cfg->type == BPF_PROG_TYPE_UNSPEC) {
Packit Service 3880ab
					fprintf(stderr, "What type is \"%s\"?\n",
Packit Service 3880ab
						*argv);
Packit Service 3880ab
					return -1;
Packit Service 3880ab
				}
Packit Service 3880ab
				NEXT_ARG_FWD();
Packit Service 3880ab
			} else {
Packit Service 3880ab
				cfg->type = BPF_PROG_TYPE_SCHED_CLS;
Packit Service 3880ab
			}
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		section = bpf_prog_to_default_section(cfg->type);
Packit Service 3880ab
		if (argc > 0 && matches(*argv, "section") == 0) {
Packit Service 3880ab
			NEXT_ARG();
Packit Service 3880ab
			section = *argv;
Packit Service 3880ab
			NEXT_ARG_FWD();
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (__bpf_prog_meta[cfg->type].may_uds_export) {
Packit Service 3880ab
			uds_name = getenv(BPF_ENV_UDS);
Packit Service 3880ab
			if (argc > 0 && !uds_name &&
Packit Service 3880ab
			    matches(*argv, "export") == 0) {
Packit Service 3880ab
				NEXT_ARG();
Packit Service 3880ab
				uds_name = *argv;
Packit Service 3880ab
				NEXT_ARG_FWD();
Packit Service 3880ab
			}
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (argc > 0 && matches(*argv, "verbose") == 0) {
Packit Service 3880ab
			verbose = true;
Packit Service 3880ab
			NEXT_ARG_FWD();
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		PREV_ARG();
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (cfg->mode == CBPF_BYTECODE || cfg->mode == CBPF_FILE) {
Packit Service 3880ab
		ret = bpf_ops_parse(argc, argv, cfg->opcodes,
Packit Service 3880ab
				    cfg->mode == CBPF_FILE);
Packit Service 3880ab
		cfg->n_opcodes = ret;
Packit Service 3880ab
	} else if (cfg->mode == EBPF_OBJECT) {
Packit Service 3880ab
		ret = 0; /* program will be loaded by load stage */
Packit Service 3880ab
	} else if (cfg->mode == EBPF_PINNED) {
Packit Service 3880ab
		ret = bpf_obj_pinned(file, cfg->type);
Packit Service 3880ab
		cfg->prog_fd = ret;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	cfg->object  = file;
Packit Service 3880ab
	cfg->section = section;
Packit Service 3880ab
	cfg->uds     = uds_name;
Packit Service 3880ab
	cfg->argc    = argc;
Packit Service 3880ab
	cfg->argv    = argv;
Packit Service 3880ab
	cfg->verbose = verbose;
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_do_load(struct bpf_cfg_in *cfg)
Packit Service 3880ab
{
Packit Service 3880ab
	if (cfg->mode == EBPF_OBJECT) {
Packit Service 3880ab
		cfg->prog_fd = bpf_obj_open(cfg->object, cfg->type,
Packit Service 3880ab
					    cfg->section, cfg->ifindex,
Packit Service 3880ab
					    cfg->verbose);
Packit Service 3880ab
		return cfg->prog_fd;
Packit Service 3880ab
	}
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_load_common(struct bpf_cfg_in *cfg, const struct bpf_cfg_ops *ops,
Packit Service 3880ab
		    void *nl)
Packit Service 3880ab
{
Packit Service 3880ab
	char annotation[256];
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_do_load(cfg);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	if (cfg->mode == CBPF_BYTECODE || cfg->mode == CBPF_FILE)
Packit Service 3880ab
		ops->cbpf_cb(nl, cfg->opcodes, cfg->n_opcodes);
Packit Service 3880ab
	if (cfg->mode == EBPF_OBJECT || cfg->mode == EBPF_PINNED) {
Packit Service 3880ab
		snprintf(annotation, sizeof(annotation), "%s:[%s]",
Packit Service 3880ab
			 basename(cfg->object), cfg->mode == EBPF_PINNED ?
Packit Service 3880ab
			 "*fsobj" : cfg->section);
Packit Service 3880ab
		ops->ebpf_cb(nl, cfg->prog_fd, annotation);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_parse_common(struct bpf_cfg_in *cfg, const struct bpf_cfg_ops *ops)
Packit Service 3880ab
{
Packit Service 3880ab
	bool opt_tbl[BPF_MODE_MAX] = {};
Packit Service 3880ab
Packit Service 3880ab
	if (ops->cbpf_cb) {
Packit Service 3880ab
		opt_tbl[CBPF_BYTECODE] = true;
Packit Service 3880ab
		opt_tbl[CBPF_FILE]     = true;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (ops->ebpf_cb) {
Packit Service 3880ab
		opt_tbl[EBPF_OBJECT]   = true;
Packit Service 3880ab
		opt_tbl[EBPF_PINNED]   = true;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return bpf_do_parse(cfg, opt_tbl);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_parse_and_load_common(struct bpf_cfg_in *cfg,
Packit Service 3880ab
			      const struct bpf_cfg_ops *ops, void *nl)
Packit Service 3880ab
{
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_parse_common(cfg, ops);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	return bpf_load_common(cfg, ops, nl);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_graft_map(const char *map_path, uint32_t *key, int argc, char **argv)
Packit Service 3880ab
{
Packit Service 3880ab
	const bool opt_tbl[BPF_MODE_MAX] = {
Packit Service 3880ab
		[EBPF_OBJECT]	= true,
Packit Service 3880ab
		[EBPF_PINNED]	= true,
Packit Service 3880ab
	};
Packit Service 3880ab
	const struct bpf_elf_map test = {
Packit Service 3880ab
		.type		= BPF_MAP_TYPE_PROG_ARRAY,
Packit Service 3880ab
		.size_key	= sizeof(int),
Packit Service 3880ab
		.size_value	= sizeof(int),
Packit Service 3880ab
	};
Packit Service 3880ab
	struct bpf_cfg_in cfg = {
Packit Service 3880ab
		.type		= BPF_PROG_TYPE_UNSPEC,
Packit Service 3880ab
		.argc		= argc,
Packit Service 3880ab
		.argv		= argv,
Packit Service 3880ab
	};
Packit Service 3880ab
	struct bpf_map_ext ext = {};
Packit Service 3880ab
	int ret, prog_fd, map_fd;
Packit Service 3880ab
	uint32_t map_key;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_do_parse(&cfg, opt_tbl);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_do_load(&cfg;;
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	prog_fd = cfg.prog_fd;
Packit Service 3880ab
Packit Service 3880ab
	if (key) {
Packit Service 3880ab
		map_key = *key;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		ret = sscanf(cfg.section, "%*i/%i", &map_key);
Packit Service 3880ab
		if (ret != 1) {
Packit Service 3880ab
			fprintf(stderr, "Couldn\'t infer map key from section name! Please provide \'key\' argument!\n");
Packit Service 3880ab
			ret = -EINVAL;
Packit Service 3880ab
			goto out_prog;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	map_fd = bpf_obj_get(map_path, cfg.type);
Packit Service 3880ab
	if (map_fd < 0) {
Packit Service 3880ab
		fprintf(stderr, "Couldn\'t retrieve pinned map \'%s\': %s\n",
Packit Service 3880ab
			map_path, strerror(errno));
Packit Service 3880ab
		ret = map_fd;
Packit Service 3880ab
		goto out_prog;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_map_selfcheck_pinned(map_fd, &test, &ext,
Packit Service 3880ab
				       offsetof(struct bpf_elf_map, max_elem),
Packit Service 3880ab
				       cfg.type);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Map \'%s\' self-check failed!\n", map_path);
Packit Service 3880ab
		goto out_map;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_map_update(map_fd, &map_key, &prog_fd, BPF_ANY);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		fprintf(stderr, "Map update failed: %s\n", strerror(errno));
Packit Service 3880ab
out_map:
Packit Service 3880ab
	close(map_fd);
Packit Service 3880ab
out_prog:
Packit Service 3880ab
	close(prog_fd);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_prog_attach_fd(int prog_fd, int target_fd, enum bpf_attach_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.target_fd = target_fd;
Packit Service 3880ab
	attr.attach_bpf_fd = prog_fd;
Packit Service 3880ab
	attr.attach_type = type;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_PROG_ATTACH, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_prog_detach_fd(int target_fd, enum bpf_attach_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.target_fd = target_fd;
Packit Service 3880ab
	attr.attach_type = type;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_PROG_DETACH, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_prog_load_dev(enum bpf_prog_type type,
Packit Service 3880ab
			     const struct bpf_insn *insns, size_t size_insns,
Packit Service 3880ab
			     const char *license, __u32 ifindex,
Packit Service 3880ab
			     char *log, size_t size_log)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.prog_type = type;
Packit Service 3880ab
	attr.insns = bpf_ptr_to_u64(insns);
Packit Service 3880ab
	attr.insn_cnt = size_insns / sizeof(struct bpf_insn);
Packit Service 3880ab
	attr.license = bpf_ptr_to_u64(license);
Packit Service 3880ab
	attr.prog_ifindex = ifindex;
Packit Service 3880ab
Packit Service 3880ab
	if (size_log > 0) {
Packit Service 3880ab
		attr.log_buf = bpf_ptr_to_u64(log);
Packit Service 3880ab
		attr.log_size = size_log;
Packit Service 3880ab
		attr.log_level = 1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_PROG_LOAD, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_prog_load(enum bpf_prog_type type, const struct bpf_insn *insns,
Packit Service 3880ab
		  size_t size_insns, const char *license, char *log,
Packit Service 3880ab
		  size_t size_log)
Packit Service 3880ab
{
Packit Service 3880ab
	return bpf_prog_load_dev(type, insns, size_insns, license, 0,
Packit Service 3880ab
				 log, size_log);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
#ifdef HAVE_ELF
Packit Service 3880ab
struct bpf_elf_prog {
Packit Service 3880ab
	enum bpf_prog_type	type;
Packit Service 3880ab
	struct bpf_insn		*insns;
Packit Service 3880ab
	unsigned int		insns_num;
Packit Service 3880ab
	size_t			size;
Packit Service 3880ab
	const char		*license;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_hash_entry {
Packit Service 3880ab
	unsigned int		pinning;
Packit Service 3880ab
	const char		*subpath;
Packit Service 3880ab
	struct bpf_hash_entry	*next;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_config {
Packit Service 3880ab
	unsigned int		jit_enabled;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_btf {
Packit Service 3880ab
	const struct btf_header	*hdr;
Packit Service 3880ab
	const void		*raw;
Packit Service 3880ab
	const char		*strings;
Packit Service 3880ab
	const struct btf_type	**types;
Packit Service 3880ab
	int			types_num;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_elf_ctx {
Packit Service 3880ab
	struct bpf_config	cfg;
Packit Service 3880ab
	Elf			*elf_fd;
Packit Service 3880ab
	GElf_Ehdr		elf_hdr;
Packit Service 3880ab
	Elf_Data		*sym_tab;
Packit Service 3880ab
	Elf_Data		*str_tab;
Packit Service 3880ab
	Elf_Data		*btf_data;
Packit Service 3880ab
	char			obj_uid[64];
Packit Service 3880ab
	int			obj_fd;
Packit Service 3880ab
	int			btf_fd;
Packit Service 3880ab
	int			map_fds[ELF_MAX_MAPS];
Packit Service 3880ab
	struct bpf_elf_map	maps[ELF_MAX_MAPS];
Packit Service 3880ab
	struct bpf_map_ext	maps_ext[ELF_MAX_MAPS];
Packit Service 3880ab
	struct bpf_elf_prog	prog_text;
Packit Service 3880ab
	struct bpf_btf		btf;
Packit Service 3880ab
	int			sym_num;
Packit Service 3880ab
	int			map_num;
Packit Service 3880ab
	int			map_len;
Packit Service 3880ab
	bool			*sec_done;
Packit Service 3880ab
	int			sec_maps;
Packit Service 3880ab
	int			sec_text;
Packit Service 3880ab
	int			sec_btf;
Packit Service 3880ab
	char			license[ELF_MAX_LICENSE_LEN];
Packit Service 3880ab
	enum bpf_prog_type	type;
Packit Service 3880ab
	__u32			ifindex;
Packit Service 3880ab
	bool			verbose;
Packit Service 3880ab
	bool			noafalg;
Packit Service 3880ab
	struct bpf_elf_st	stat;
Packit Service 3880ab
	struct bpf_hash_entry	*ht[256];
Packit Service 3880ab
	char			*log;
Packit Service 3880ab
	size_t			log_size;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_elf_sec_data {
Packit Service 3880ab
	GElf_Shdr		sec_hdr;
Packit Service 3880ab
	Elf_Data		*sec_data;
Packit Service 3880ab
	const char		*sec_name;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
struct bpf_map_data {
Packit Service 3880ab
	int			*fds;
Packit Service 3880ab
	const char		*obj;
Packit Service 3880ab
	struct bpf_elf_st	*st;
Packit Service 3880ab
	struct bpf_elf_map	*ent;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_log_has_data(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	return ctx->log && ctx->log[0];
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static __check_format_string(2, 3) void
Packit Service 3880ab
bpf_dump_error(struct bpf_elf_ctx *ctx, const char *format, ...)
Packit Service 3880ab
{
Packit Service 3880ab
	va_list vl;
Packit Service 3880ab
Packit Service 3880ab
	va_start(vl, format);
Packit Service 3880ab
	vfprintf(stderr, format, vl);
Packit Service 3880ab
	va_end(vl);
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_log_has_data(ctx)) {
Packit Service 3880ab
		if (ctx->verbose) {
Packit Service 3880ab
			fprintf(stderr, "%s\n", ctx->log);
Packit Service 3880ab
		} else {
Packit Service 3880ab
			unsigned int off = 0, len = strlen(ctx->log);
Packit Service 3880ab
Packit Service 3880ab
			if (len > BPF_MAX_LOG) {
Packit Service 3880ab
				off = len - BPF_MAX_LOG;
Packit Service 3880ab
				fprintf(stderr, "Skipped %u bytes, use \'verb\' option for the full verbose log.\n[...]\n",
Packit Service 3880ab
					off);
Packit Service 3880ab
			}
Packit Service 3880ab
			fprintf(stderr, "%s\n", ctx->log + off);
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		memset(ctx->log, 0, ctx->log_size);
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_log_realloc(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	const size_t log_max = UINT_MAX >> 8;
Packit Service 3880ab
	size_t log_size = ctx->log_size;
Packit Service 3880ab
	char *ptr;
Packit Service 3880ab
Packit Service 3880ab
	if (!ctx->log) {
Packit Service 3880ab
		log_size = 65536;
Packit Service 3880ab
	} else if (log_size < log_max) {
Packit Service 3880ab
		log_size <<= 1;
Packit Service 3880ab
		if (log_size > log_max)
Packit Service 3880ab
			log_size = log_max;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ptr = realloc(ctx->log, log_size);
Packit Service 3880ab
	if (!ptr)
Packit Service 3880ab
		return -ENOMEM;
Packit Service 3880ab
Packit Service 3880ab
	ptr[0] = 0;
Packit Service 3880ab
	ctx->log = ptr;
Packit Service 3880ab
	ctx->log_size = log_size;
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_create(enum bpf_map_type type, uint32_t size_key,
Packit Service 3880ab
			  uint32_t size_value, uint32_t max_elem,
Packit Service 3880ab
			  uint32_t flags, int inner_fd, int btf_fd,
Packit Service 3880ab
			  uint32_t ifindex, uint32_t btf_id_key,
Packit Service 3880ab
			  uint32_t btf_id_val)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.map_type = type;
Packit Service 3880ab
	attr.key_size = size_key;
Packit Service 3880ab
	attr.value_size = inner_fd ? sizeof(int) : size_value;
Packit Service 3880ab
	attr.max_entries = max_elem;
Packit Service 3880ab
	attr.map_flags = flags;
Packit Service 3880ab
	attr.inner_map_fd = inner_fd;
Packit Service 3880ab
	attr.map_ifindex = ifindex;
Packit Service 3880ab
	attr.btf_fd = btf_fd;
Packit Service 3880ab
	attr.btf_key_type_id = btf_id_key;
Packit Service 3880ab
	attr.btf_value_type_id = btf_id_val;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_MAP_CREATE, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_load(void *btf, size_t size_btf,
Packit Service 3880ab
			char *log, size_t size_log)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.btf = bpf_ptr_to_u64(btf);
Packit Service 3880ab
	attr.btf_size = size_btf;
Packit Service 3880ab
Packit Service 3880ab
	if (size_log > 0) {
Packit Service 3880ab
		attr.btf_log_buf = bpf_ptr_to_u64(log);
Packit Service 3880ab
		attr.btf_log_size = size_log;
Packit Service 3880ab
		attr.btf_log_level = 1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_BTF_LOAD, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_obj_pin(int fd, const char *pathname)
Packit Service 3880ab
{
Packit Service 3880ab
	union bpf_attr attr = {};
Packit Service 3880ab
Packit Service 3880ab
	attr.pathname = bpf_ptr_to_u64(pathname);
Packit Service 3880ab
	attr.bpf_fd = fd;
Packit Service 3880ab
Packit Service 3880ab
	return bpf(BPF_OBJ_PIN, &attr, sizeof(attr));
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_obj_hash(const char *object, uint8_t *out, size_t len)
Packit Service 3880ab
{
Packit Service 3880ab
	struct sockaddr_alg alg = {
Packit Service 3880ab
		.salg_family	= AF_ALG,
Packit Service 3880ab
		.salg_type	= "hash",
Packit Service 3880ab
		.salg_name	= "sha1",
Packit Service 3880ab
	};
Packit Service 3880ab
	int ret, cfd, ofd, ffd;
Packit Service 3880ab
	struct stat stbuff;
Packit Service 3880ab
	ssize_t size;
Packit Service 3880ab
Packit Service 3880ab
	if (!object || len != 20)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	cfd = socket(AF_ALG, SOCK_SEQPACKET, 0);
Packit Service 3880ab
	if (cfd < 0)
Packit Service 3880ab
		return cfd;
Packit Service 3880ab
Packit Service 3880ab
	ret = bind(cfd, (struct sockaddr *)&alg, sizeof(alg));
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		goto out_cfd;
Packit Service 3880ab
Packit Service 3880ab
	ofd = accept(cfd, NULL, 0);
Packit Service 3880ab
	if (ofd < 0) {
Packit Service 3880ab
		ret = ofd;
Packit Service 3880ab
		goto out_cfd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ffd = open(object, O_RDONLY);
Packit Service 3880ab
	if (ffd < 0) {
Packit Service 3880ab
		fprintf(stderr, "Error opening object %s: %s\n",
Packit Service 3880ab
			object, strerror(errno));
Packit Service 3880ab
		ret = ffd;
Packit Service 3880ab
		goto out_ofd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = fstat(ffd, &stbuff);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Error doing fstat: %s\n",
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		goto out_ffd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	size = sendfile(ofd, ffd, NULL, stbuff.st_size);
Packit Service 3880ab
	if (size != stbuff.st_size) {
Packit Service 3880ab
		fprintf(stderr, "Error from sendfile (%zd vs %zu bytes): %s\n",
Packit Service 3880ab
			size, stbuff.st_size, strerror(errno));
Packit Service 3880ab
		ret = -1;
Packit Service 3880ab
		goto out_ffd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	size = read(ofd, out, len);
Packit Service 3880ab
	if (size != len) {
Packit Service 3880ab
		fprintf(stderr, "Error from read (%zd vs %zu bytes): %s\n",
Packit Service 3880ab
			size, len, strerror(errno));
Packit Service 3880ab
		ret = -1;
Packit Service 3880ab
	} else {
Packit Service 3880ab
		ret = 0;
Packit Service 3880ab
	}
Packit Service 3880ab
out_ffd:
Packit Service 3880ab
	close(ffd);
Packit Service 3880ab
out_ofd:
Packit Service 3880ab
	close(ofd);
Packit Service 3880ab
out_cfd:
Packit Service 3880ab
	close(cfd);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_init_env(void)
Packit Service 3880ab
{
Packit Service 3880ab
	struct rlimit limit = {
Packit Service 3880ab
		.rlim_cur = RLIM_INFINITY,
Packit Service 3880ab
		.rlim_max = RLIM_INFINITY,
Packit Service 3880ab
	};
Packit Service 3880ab
Packit Service 3880ab
	/* Don't bother in case we fail! */
Packit Service 3880ab
	setrlimit(RLIMIT_MEMLOCK, &limit);
Packit Service 3880ab
Packit Service 3880ab
	if (!bpf_get_work_dir(BPF_PROG_TYPE_UNSPEC))
Packit Service 3880ab
		fprintf(stderr, "Continuing without mounted eBPF fs. Too old kernel?\n");
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_custom_pinning(const struct bpf_elf_ctx *ctx,
Packit Service 3880ab
				      uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_hash_entry *entry;
Packit Service 3880ab
Packit Service 3880ab
	entry = ctx->ht[pinning & (ARRAY_SIZE(ctx->ht) - 1)];
Packit Service 3880ab
	while (entry && entry->pinning != pinning)
Packit Service 3880ab
		entry = entry->next;
Packit Service 3880ab
Packit Service 3880ab
	return entry ? entry->subpath : NULL;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_no_pinning(const struct bpf_elf_ctx *ctx,
Packit Service 3880ab
			   uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	switch (pinning) {
Packit Service 3880ab
	case PIN_OBJECT_NS:
Packit Service 3880ab
	case PIN_GLOBAL_NS:
Packit Service 3880ab
		return false;
Packit Service 3880ab
	case PIN_NONE:
Packit Service 3880ab
		return true;
Packit Service 3880ab
	default:
Packit Service 3880ab
		return !bpf_custom_pinning(ctx, pinning);
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_make_pathname(char *pathname, size_t len, const char *name,
Packit Service 3880ab
			      const struct bpf_elf_ctx *ctx, uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	switch (pinning) {
Packit Service 3880ab
	case PIN_OBJECT_NS:
Packit Service 3880ab
		snprintf(pathname, len, "%s/%s/%s",
Packit Service 3880ab
			 bpf_get_work_dir(ctx->type),
Packit Service 3880ab
			 ctx->obj_uid, name);
Packit Service 3880ab
		break;
Packit Service 3880ab
	case PIN_GLOBAL_NS:
Packit Service 3880ab
		snprintf(pathname, len, "%s/%s/%s",
Packit Service 3880ab
			 bpf_get_work_dir(ctx->type),
Packit Service 3880ab
			 BPF_DIR_GLOBALS, name);
Packit Service 3880ab
		break;
Packit Service 3880ab
	default:
Packit Service 3880ab
		snprintf(pathname, len, "%s/../%s/%s",
Packit Service 3880ab
			 bpf_get_work_dir(ctx->type),
Packit Service 3880ab
			 bpf_custom_pinning(ctx, pinning), name);
Packit Service 3880ab
		break;
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_probe_pinned(const char *name, const struct bpf_elf_ctx *ctx,
Packit Service 3880ab
			    uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	char pathname[PATH_MAX];
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_no_pinning(ctx, pinning) || !bpf_get_work_dir(ctx->type))
Packit Service 3880ab
		return 0;
Packit Service 3880ab
Packit Service 3880ab
	bpf_make_pathname(pathname, sizeof(pathname), name, ctx, pinning);
Packit Service 3880ab
	return bpf_obj_get(pathname, ctx->type);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_make_obj_path(const struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	char tmp[PATH_MAX];
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(tmp, sizeof(tmp), "%s/%s", bpf_get_work_dir(ctx->type),
Packit Service 3880ab
		 ctx->obj_uid);
Packit Service 3880ab
Packit Service 3880ab
	ret = mkdir(tmp, S_IRWXU);
Packit Service 3880ab
	if (ret && errno != EEXIST) {
Packit Service 3880ab
		fprintf(stderr, "mkdir %s failed: %s\n", tmp, strerror(errno));
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_make_custom_path(const struct bpf_elf_ctx *ctx,
Packit Service 3880ab
				const char *todo)
Packit Service 3880ab
{
Packit Service 3880ab
	char tmp[PATH_MAX], rem[PATH_MAX], *sub;
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(tmp, sizeof(tmp), "%s/../", bpf_get_work_dir(ctx->type));
Packit Service 3880ab
	snprintf(rem, sizeof(rem), "%s/", todo);
Packit Service 3880ab
	sub = strtok(rem, "/");
Packit Service 3880ab
Packit Service 3880ab
	while (sub) {
Packit Service 3880ab
		if (strlen(tmp) + strlen(sub) + 2 > PATH_MAX)
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
		strcat(tmp, sub);
Packit Service 3880ab
		strcat(tmp, "/");
Packit Service 3880ab
Packit Service 3880ab
		ret = mkdir(tmp, S_IRWXU);
Packit Service 3880ab
		if (ret && errno != EEXIST) {
Packit Service 3880ab
			fprintf(stderr, "mkdir %s failed: %s\n", tmp,
Packit Service 3880ab
				strerror(errno));
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		sub = strtok(NULL, "/");
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_place_pinned(int fd, const char *name,
Packit Service 3880ab
			    const struct bpf_elf_ctx *ctx, uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	char pathname[PATH_MAX];
Packit Service 3880ab
	const char *tmp;
Packit Service 3880ab
	int ret = 0;
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_no_pinning(ctx, pinning) || !bpf_get_work_dir(ctx->type))
Packit Service 3880ab
		return 0;
Packit Service 3880ab
Packit Service 3880ab
	if (pinning == PIN_OBJECT_NS)
Packit Service 3880ab
		ret = bpf_make_obj_path(ctx);
Packit Service 3880ab
	else if ((tmp = bpf_custom_pinning(ctx, pinning)))
Packit Service 3880ab
		ret = bpf_make_custom_path(ctx, tmp);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	bpf_make_pathname(pathname, sizeof(pathname), name, ctx, pinning);
Packit Service 3880ab
	return bpf_obj_pin(fd, pathname);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_prog_report(int fd, const char *section,
Packit Service 3880ab
			    const struct bpf_elf_prog *prog,
Packit Service 3880ab
			    struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	unsigned int insns = prog->size / sizeof(struct bpf_insn);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, "\nProg section \'%s\' %s%s (%d)!\n", section,
Packit Service 3880ab
		fd < 0 ? "rejected: " : "loaded",
Packit Service 3880ab
		fd < 0 ? strerror(errno) : "",
Packit Service 3880ab
		fd < 0 ? errno : fd);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, " - Type:         %u\n", prog->type);
Packit Service 3880ab
	fprintf(stderr, " - Instructions: %u (%u over limit)\n",
Packit Service 3880ab
		insns, insns > BPF_MAXINSNS ? insns - BPF_MAXINSNS : 0);
Packit Service 3880ab
	fprintf(stderr, " - License:      %s\n\n", prog->license);
Packit Service 3880ab
Packit Service 3880ab
	bpf_dump_error(ctx, "Verifier analysis:\n\n");
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_prog_attach(const char *section,
Packit Service 3880ab
			   const struct bpf_elf_prog *prog,
Packit Service 3880ab
			   struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int tries = 0, fd;
Packit Service 3880ab
retry:
Packit Service 3880ab
	errno = 0;
Packit Service 3880ab
	fd = bpf_prog_load_dev(prog->type, prog->insns, prog->size,
Packit Service 3880ab
			       prog->license, ctx->ifindex,
Packit Service 3880ab
			       ctx->log, ctx->log_size);
Packit Service 3880ab
	if (fd < 0 || ctx->verbose) {
Packit Service 3880ab
		/* The verifier log is pretty chatty, sometimes so chatty
Packit Service 3880ab
		 * on larger programs, that we could fail to dump everything
Packit Service 3880ab
		 * into our buffer. Still, try to give a debuggable error
Packit Service 3880ab
		 * log for the user, so enlarge it and re-fail.
Packit Service 3880ab
		 */
Packit Service 3880ab
		if (fd < 0 && (errno == ENOSPC || !ctx->log_size)) {
Packit Service 3880ab
			if (tries++ < 10 && !bpf_log_realloc(ctx))
Packit Service 3880ab
				goto retry;
Packit Service 3880ab
Packit Service 3880ab
			fprintf(stderr, "Log buffer too small to dump verifier log %zu bytes (%d tries)!\n",
Packit Service 3880ab
				ctx->log_size, tries);
Packit Service 3880ab
			return fd;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		bpf_prog_report(fd, section, prog, ctx);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_map_report(int fd, const char *name,
Packit Service 3880ab
			   const struct bpf_elf_map *map,
Packit Service 3880ab
			   struct bpf_elf_ctx *ctx, int inner_fd)
Packit Service 3880ab
{
Packit Service 3880ab
	fprintf(stderr, "Map object \'%s\' %s%s (%d)!\n", name,
Packit Service 3880ab
		fd < 0 ? "rejected: " : "loaded",
Packit Service 3880ab
		fd < 0 ? strerror(errno) : "",
Packit Service 3880ab
		fd < 0 ? errno : fd);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, " - Type:         %u\n", map->type);
Packit Service 3880ab
	fprintf(stderr, " - Identifier:   %u\n", map->id);
Packit Service 3880ab
	fprintf(stderr, " - Pinning:      %u\n", map->pinning);
Packit Service 3880ab
	fprintf(stderr, " - Size key:     %u\n", map->size_key);
Packit Service 3880ab
	fprintf(stderr, " - Size value:   %u\n",
Packit Service 3880ab
		inner_fd ? (int)sizeof(int) : map->size_value);
Packit Service 3880ab
	fprintf(stderr, " - Max elems:    %u\n", map->max_elem);
Packit Service 3880ab
	fprintf(stderr, " - Flags:        %#x\n\n", map->flags);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_find_map_id(const struct bpf_elf_ctx *ctx, uint32_t id)
Packit Service 3880ab
{
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ctx->map_num; i++) {
Packit Service 3880ab
		if (ctx->maps[i].id != id)
Packit Service 3880ab
			continue;
Packit Service 3880ab
		if (ctx->map_fds[i] < 0)
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
		return ctx->map_fds[i];
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return -ENOENT;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_report_map_in_map(int outer_fd, uint32_t idx)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_map outer_map;
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, "Cannot insert map into map! ");
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_derive_elf_map_from_fdinfo(outer_fd, &outer_map, NULL);
Packit Service 3880ab
	if (!ret) {
Packit Service 3880ab
		if (idx >= outer_map.max_elem &&
Packit Service 3880ab
		    outer_map.type == BPF_MAP_TYPE_ARRAY_OF_MAPS) {
Packit Service 3880ab
			fprintf(stderr, "Outer map has %u elements, index %u is invalid!\n",
Packit Service 3880ab
				outer_map.max_elem, idx);
Packit Service 3880ab
			return;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, "Different map specs used for outer and inner map?\n");
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_is_map_in_map_type(const struct bpf_elf_map *map)
Packit Service 3880ab
{
Packit Service 3880ab
	return map->type == BPF_MAP_TYPE_ARRAY_OF_MAPS ||
Packit Service 3880ab
	       map->type == BPF_MAP_TYPE_HASH_OF_MAPS;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_map_offload_neutral(enum bpf_map_type type)
Packit Service 3880ab
{
Packit Service 3880ab
	return type == BPF_MAP_TYPE_PERF_EVENT_ARRAY;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_attach(const char *name, struct bpf_elf_ctx *ctx,
Packit Service 3880ab
			  const struct bpf_elf_map *map, struct bpf_map_ext *ext,
Packit Service 3880ab
			  int *have_map_in_map)
Packit Service 3880ab
{
Packit Service 3880ab
	int fd, ifindex, ret, map_inner_fd = 0;
Packit Service 3880ab
	bool retried = false;
Packit Service 3880ab
Packit Service 3880ab
probe:
Packit Service 3880ab
	fd = bpf_probe_pinned(name, ctx, map->pinning);
Packit Service 3880ab
	if (fd > 0) {
Packit Service 3880ab
		ret = bpf_map_selfcheck_pinned(fd, map, ext,
Packit Service 3880ab
					       offsetof(struct bpf_elf_map,
Packit Service 3880ab
							id), ctx->type);
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			close(fd);
Packit Service 3880ab
			fprintf(stderr, "Map \'%s\' self-check failed!\n",
Packit Service 3880ab
				name);
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
		if (ctx->verbose)
Packit Service 3880ab
			fprintf(stderr, "Map \'%s\' loaded as pinned!\n",
Packit Service 3880ab
				name);
Packit Service 3880ab
		return fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (have_map_in_map && bpf_is_map_in_map_type(map)) {
Packit Service 3880ab
		(*have_map_in_map)++;
Packit Service 3880ab
		if (map->inner_id)
Packit Service 3880ab
			return 0;
Packit Service 3880ab
		fprintf(stderr, "Map \'%s\' cannot be created since no inner map ID defined!\n",
Packit Service 3880ab
			name);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (!have_map_in_map && bpf_is_map_in_map_type(map)) {
Packit Service 3880ab
		map_inner_fd = bpf_find_map_id(ctx, map->inner_id);
Packit Service 3880ab
		if (map_inner_fd < 0) {
Packit Service 3880ab
			fprintf(stderr, "Map \'%s\' cannot be loaded. Inner map with ID %u not found!\n",
Packit Service 3880ab
				name, map->inner_id);
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ifindex = bpf_map_offload_neutral(map->type) ? 0 : ctx->ifindex;
Packit Service 3880ab
	errno = 0;
Packit Service 3880ab
	fd = bpf_map_create(map->type, map->size_key, map->size_value,
Packit Service 3880ab
			    map->max_elem, map->flags, map_inner_fd, ctx->btf_fd,
Packit Service 3880ab
			    ifindex, ext->btf_id_key, ext->btf_id_val);
Packit Service 3880ab
Packit Service 3880ab
	if (fd < 0 || ctx->verbose) {
Packit Service 3880ab
		bpf_map_report(fd, name, map, ctx, map_inner_fd);
Packit Service 3880ab
		if (fd < 0)
Packit Service 3880ab
			return fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_place_pinned(fd, name, ctx, map->pinning);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		close(fd);
Packit Service 3880ab
		if (!retried && errno == EEXIST) {
Packit Service 3880ab
			retried = true;
Packit Service 3880ab
			goto probe;
Packit Service 3880ab
		}
Packit Service 3880ab
		fprintf(stderr, "Could not pin %s map: %s\n", name,
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_str_tab_name(const struct bpf_elf_ctx *ctx,
Packit Service 3880ab
				    const GElf_Sym *sym)
Packit Service 3880ab
{
Packit Service 3880ab
	return ctx->str_tab->d_buf + sym->st_name;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_find(struct bpf_elf_ctx *ctx, const char *name)
Packit Service 3880ab
{
Packit Service 3880ab
	const struct btf_type *type;
Packit Service 3880ab
	const char *res;
Packit Service 3880ab
	int id;
Packit Service 3880ab
Packit Service 3880ab
	for (id = 1; id < ctx->btf.types_num; id++) {
Packit Service 3880ab
		type = ctx->btf.types[id];
Packit Service 3880ab
		if (type->name_off >= ctx->btf.hdr->str_len)
Packit Service 3880ab
			continue;
Packit Service 3880ab
		res = &ctx->btf.strings[type->name_off];
Packit Service 3880ab
		if (!strcmp(res, name))
Packit Service 3880ab
			return id;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return -ENOENT;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_find_kv(struct bpf_elf_ctx *ctx, const struct bpf_elf_map *map,
Packit Service 3880ab
			   const char *name, uint32_t *id_key, uint32_t *id_val)
Packit Service 3880ab
{
Packit Service 3880ab
	const struct btf_member *key, *val;
Packit Service 3880ab
	const struct btf_type *type;
Packit Service 3880ab
	char btf_name[512];
Packit Service 3880ab
	const char *res;
Packit Service 3880ab
	int id;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(btf_name, sizeof(btf_name), "____btf_map_%s", name);
Packit Service 3880ab
	id = bpf_btf_find(ctx, btf_name);
Packit Service 3880ab
	if (id < 0)
Packit Service 3880ab
		return id;
Packit Service 3880ab
Packit Service 3880ab
	type = ctx->btf.types[id];
Packit Service 3880ab
	if (BTF_INFO_KIND(type->info) != BTF_KIND_STRUCT)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (BTF_INFO_VLEN(type->info) != 2)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	key = ((void *) type) + sizeof(*type);
Packit Service 3880ab
	val = key + 1;
Packit Service 3880ab
	if (!key->type || key->type >= ctx->btf.types_num ||
Packit Service 3880ab
	    !val->type || val->type >= ctx->btf.types_num)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	if (key->name_off >= ctx->btf.hdr->str_len ||
Packit Service 3880ab
	    val->name_off >= ctx->btf.hdr->str_len)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	res = &ctx->btf.strings[key->name_off];
Packit Service 3880ab
	if (strcmp(res, "key"))
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	res = &ctx->btf.strings[val->name_off];
Packit Service 3880ab
	if (strcmp(res, "value"))
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	*id_key = key->type;
Packit Service 3880ab
	*id_val = val->type;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_btf_annotate(struct bpf_elf_ctx *ctx, int which, const char *name)
Packit Service 3880ab
{
Packit Service 3880ab
	uint32_t id_key = 0, id_val = 0;
Packit Service 3880ab
Packit Service 3880ab
	if (!bpf_btf_find_kv(ctx, &ctx->maps[which], name, &id_key, &id_val)) {
Packit Service 3880ab
		ctx->maps_ext[which].btf_id_key = id_key;
Packit Service 3880ab
		ctx->maps_ext[which].btf_id_val = id_val;
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static const char *bpf_map_fetch_name(struct bpf_elf_ctx *ctx, int which)
Packit Service 3880ab
{
Packit Service 3880ab
	const char *name;
Packit Service 3880ab
	GElf_Sym sym;
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ctx->sym_num; i++) {
Packit Service 3880ab
		int type;
Packit Service 3880ab
Packit Service 3880ab
		if (gelf_getsym(ctx->sym_tab, i, &sym) != &sym)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		type = GELF_ST_TYPE(sym.st_info);
Packit Service 3880ab
		if (GELF_ST_BIND(sym.st_info) != STB_GLOBAL ||
Packit Service 3880ab
		    (type != STT_NOTYPE && type != STT_OBJECT) ||
Packit Service 3880ab
		    sym.st_shndx != ctx->sec_maps ||
Packit Service 3880ab
		    sym.st_value / ctx->map_len != which)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		name = bpf_str_tab_name(ctx, &sym);
Packit Service 3880ab
		bpf_btf_annotate(ctx, which, name);
Packit Service 3880ab
		return name;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return NULL;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_maps_attach_all(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int i, j, ret, fd, inner_fd, inner_idx, have_map_in_map = 0;
Packit Service 3880ab
	const char *map_name;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ctx->map_num; i++) {
Packit Service 3880ab
		if (ctx->maps[i].pinning == PIN_OBJECT_NS &&
Packit Service 3880ab
		    ctx->noafalg) {
Packit Service 3880ab
			fprintf(stderr, "Missing kernel AF_ALG support for PIN_OBJECT_NS!\n");
Packit Service 3880ab
			return -ENOTSUP;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		map_name = bpf_map_fetch_name(ctx, i);
Packit Service 3880ab
		if (!map_name)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
Packit Service 3880ab
		fd = bpf_map_attach(map_name, ctx, &ctx->maps[i],
Packit Service 3880ab
				    &ctx->maps_ext[i], &have_map_in_map);
Packit Service 3880ab
		if (fd < 0)
Packit Service 3880ab
			return fd;
Packit Service 3880ab
Packit Service 3880ab
		ctx->map_fds[i] = !fd ? -1 : fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; have_map_in_map && i < ctx->map_num; i++) {
Packit Service 3880ab
		if (ctx->map_fds[i] >= 0)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		map_name = bpf_map_fetch_name(ctx, i);
Packit Service 3880ab
		if (!map_name)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
Packit Service 3880ab
		fd = bpf_map_attach(map_name, ctx, &ctx->maps[i],
Packit Service 3880ab
				    &ctx->maps_ext[i], NULL);
Packit Service 3880ab
		if (fd < 0)
Packit Service 3880ab
			return fd;
Packit Service 3880ab
Packit Service 3880ab
		ctx->map_fds[i] = fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; have_map_in_map && i < ctx->map_num; i++) {
Packit Service 3880ab
		if (!ctx->maps[i].id ||
Packit Service 3880ab
		    ctx->maps[i].inner_id ||
Packit Service 3880ab
		    ctx->maps[i].inner_idx == -1)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		inner_fd  = ctx->map_fds[i];
Packit Service 3880ab
		inner_idx = ctx->maps[i].inner_idx;
Packit Service 3880ab
Packit Service 3880ab
		for (j = 0; j < ctx->map_num; j++) {
Packit Service 3880ab
			if (!bpf_is_map_in_map_type(&ctx->maps[j]))
Packit Service 3880ab
				continue;
Packit Service 3880ab
			if (ctx->maps[j].inner_id != ctx->maps[i].id)
Packit Service 3880ab
				continue;
Packit Service 3880ab
Packit Service 3880ab
			ret = bpf_map_update(ctx->map_fds[j], &inner_idx,
Packit Service 3880ab
					     &inner_fd, BPF_ANY);
Packit Service 3880ab
			if (ret < 0) {
Packit Service 3880ab
				bpf_report_map_in_map(ctx->map_fds[j],
Packit Service 3880ab
						      inner_idx);
Packit Service 3880ab
				return ret;
Packit Service 3880ab
			}
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_num_sym(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int i, num = 0;
Packit Service 3880ab
	GElf_Sym sym;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ctx->sym_num; i++) {
Packit Service 3880ab
		int type;
Packit Service 3880ab
Packit Service 3880ab
		if (gelf_getsym(ctx->sym_tab, i, &sym) != &sym)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		type = GELF_ST_TYPE(sym.st_info);
Packit Service 3880ab
		if (GELF_ST_BIND(sym.st_info) != STB_GLOBAL ||
Packit Service 3880ab
		    (type != STT_NOTYPE && type != STT_OBJECT) ||
Packit Service 3880ab
		    sym.st_shndx != ctx->sec_maps)
Packit Service 3880ab
			continue;
Packit Service 3880ab
		num++;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return num;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fill_section_data(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
				 struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	Elf_Data *sec_edata;
Packit Service 3880ab
	GElf_Shdr sec_hdr;
Packit Service 3880ab
	Elf_Scn *sec_fd;
Packit Service 3880ab
	char *sec_name;
Packit Service 3880ab
Packit Service 3880ab
	memset(data, 0, sizeof(*data));
Packit Service 3880ab
Packit Service 3880ab
	sec_fd = elf_getscn(ctx->elf_fd, section);
Packit Service 3880ab
	if (!sec_fd)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (gelf_getshdr(sec_fd, &sec_hdr) != &sec_hdr)
Packit Service 3880ab
		return -EIO;
Packit Service 3880ab
Packit Service 3880ab
	sec_name = elf_strptr(ctx->elf_fd, ctx->elf_hdr.e_shstrndx,
Packit Service 3880ab
			      sec_hdr.sh_name);
Packit Service 3880ab
	if (!sec_name || !sec_hdr.sh_size)
Packit Service 3880ab
		return -ENOENT;
Packit Service 3880ab
Packit Service 3880ab
	sec_edata = elf_getdata(sec_fd, NULL);
Packit Service 3880ab
	if (!sec_edata || elf_getdata(sec_fd, sec_edata))
Packit Service 3880ab
		return -EIO;
Packit Service 3880ab
Packit Service 3880ab
	memcpy(&data->sec_hdr, &sec_hdr, sizeof(sec_hdr));
Packit Service 3880ab
Packit Service 3880ab
	data->sec_name = sec_name;
Packit Service 3880ab
	data->sec_data = sec_edata;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
struct bpf_elf_map_min {
Packit Service 3880ab
	__u32 type;
Packit Service 3880ab
	__u32 size_key;
Packit Service 3880ab
	__u32 size_value;
Packit Service 3880ab
	__u32 max_elem;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_maps_begin(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
				struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	ctx->map_num = data->sec_data->d_size;
Packit Service 3880ab
	ctx->sec_maps = section;
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
Packit Service 3880ab
	if (ctx->map_num > sizeof(ctx->maps)) {
Packit Service 3880ab
		fprintf(stderr, "Too many BPF maps in ELF section!\n");
Packit Service 3880ab
		return -ENOMEM;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	memcpy(ctx->maps, data->sec_data->d_buf, ctx->map_num);
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_map_verify_all_offs(struct bpf_elf_ctx *ctx, int end)
Packit Service 3880ab
{
Packit Service 3880ab
	GElf_Sym sym;
Packit Service 3880ab
	int off, i;
Packit Service 3880ab
Packit Service 3880ab
	for (off = 0; off < end; off += ctx->map_len) {
Packit Service 3880ab
		/* Order doesn't need to be linear here, hence we walk
Packit Service 3880ab
		 * the table again.
Packit Service 3880ab
		 */
Packit Service 3880ab
		for (i = 0; i < ctx->sym_num; i++) {
Packit Service 3880ab
			int type;
Packit Service 3880ab
Packit Service 3880ab
			if (gelf_getsym(ctx->sym_tab, i, &sym) != &sym)
Packit Service 3880ab
				continue;
Packit Service 3880ab
Packit Service 3880ab
			type = GELF_ST_TYPE(sym.st_info);
Packit Service 3880ab
			if (GELF_ST_BIND(sym.st_info) != STB_GLOBAL ||
Packit Service 3880ab
			    (type != STT_NOTYPE && type != STT_OBJECT) ||
Packit Service 3880ab
			    sym.st_shndx != ctx->sec_maps)
Packit Service 3880ab
				continue;
Packit Service 3880ab
			if (sym.st_value == off)
Packit Service 3880ab
				break;
Packit Service 3880ab
			if (i == ctx->sym_num - 1)
Packit Service 3880ab
				return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return off == end ? 0 : -1;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_maps_end(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_map fixup[ARRAY_SIZE(ctx->maps)] = {};
Packit Service 3880ab
	int i, sym_num = bpf_map_num_sym(ctx);
Packit Service 3880ab
	__u8 *buff;
Packit Service 3880ab
Packit Service 3880ab
	if (sym_num == 0 || sym_num > ARRAY_SIZE(ctx->maps)) {
Packit Service 3880ab
		fprintf(stderr, "%u maps not supported in current map section!\n",
Packit Service 3880ab
			sym_num);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (ctx->map_num % sym_num != 0 ||
Packit Service 3880ab
	    ctx->map_num % sizeof(__u32) != 0) {
Packit Service 3880ab
		fprintf(stderr, "Number BPF map symbols are not multiple of struct bpf_elf_map!\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->map_len = ctx->map_num / sym_num;
Packit Service 3880ab
	if (bpf_map_verify_all_offs(ctx, ctx->map_num)) {
Packit Service 3880ab
		fprintf(stderr, "Different struct bpf_elf_map in use!\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (ctx->map_len == sizeof(struct bpf_elf_map)) {
Packit Service 3880ab
		ctx->map_num = sym_num;
Packit Service 3880ab
		return 0;
Packit Service 3880ab
	} else if (ctx->map_len > sizeof(struct bpf_elf_map)) {
Packit Service 3880ab
		fprintf(stderr, "struct bpf_elf_map not supported, coming from future version?\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	} else if (ctx->map_len < sizeof(struct bpf_elf_map_min)) {
Packit Service 3880ab
		fprintf(stderr, "struct bpf_elf_map too small, not supported!\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->map_num = sym_num;
Packit Service 3880ab
	for (i = 0, buff = (void *)ctx->maps; i < ctx->map_num;
Packit Service 3880ab
	     i++, buff += ctx->map_len) {
Packit Service 3880ab
		/* The fixup leaves the rest of the members as zero, which
Packit Service 3880ab
		 * is fine currently, but option exist to set some other
Packit Service 3880ab
		 * default value as well when needed in future.
Packit Service 3880ab
		 */
Packit Service 3880ab
		memcpy(&fixup[i], buff, ctx->map_len);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	memcpy(ctx->maps, fixup, sizeof(fixup));
Packit Service 3880ab
	if (ctx->verbose)
Packit Service 3880ab
		printf("%zu bytes struct bpf_elf_map fixup performed due to size mismatch!\n",
Packit Service 3880ab
		       sizeof(struct bpf_elf_map) - ctx->map_len);
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_license(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
			     struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	if (data->sec_data->d_size > sizeof(ctx->license))
Packit Service 3880ab
		return -ENOMEM;
Packit Service 3880ab
Packit Service 3880ab
	memcpy(ctx->license, data->sec_data->d_buf, data->sec_data->d_size);
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_symtab(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
			    struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	ctx->sym_tab = data->sec_data;
Packit Service 3880ab
	ctx->sym_num = data->sec_hdr.sh_size / data->sec_hdr.sh_entsize;
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_strtab(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
			    struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	ctx->str_tab = data->sec_data;
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_text(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
			  struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	ctx->sec_text = section;
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_btf_report(int fd, struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	fprintf(stderr, "\nBTF debug data section \'.BTF\' %s%s (%d)!\n",
Packit Service 3880ab
		fd < 0 ? "rejected: " : "loaded",
Packit Service 3880ab
		fd < 0 ? strerror(errno) : "",
Packit Service 3880ab
		fd < 0 ? errno : fd);
Packit Service 3880ab
Packit Service 3880ab
	fprintf(stderr, " - Length:       %zu\n", ctx->btf_data->d_size);
Packit Service 3880ab
Packit Service 3880ab
	bpf_dump_error(ctx, "Verifier analysis:\n\n");
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_attach(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int tries = 0, fd;
Packit Service 3880ab
retry:
Packit Service 3880ab
	errno = 0;
Packit Service 3880ab
	fd = bpf_btf_load(ctx->btf_data->d_buf, ctx->btf_data->d_size,
Packit Service 3880ab
			  ctx->log, ctx->log_size);
Packit Service 3880ab
	if (fd < 0 || ctx->verbose) {
Packit Service 3880ab
		if (fd < 0 && (errno == ENOSPC || !ctx->log_size)) {
Packit Service 3880ab
			if (tries++ < 10 && !bpf_log_realloc(ctx))
Packit Service 3880ab
				goto retry;
Packit Service 3880ab
Packit Service 3880ab
			fprintf(stderr, "Log buffer too small to dump verifier log %zu bytes (%d tries)!\n",
Packit Service 3880ab
				ctx->log_size, tries);
Packit Service 3880ab
			return fd;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (bpf_log_has_data(ctx))
Packit Service 3880ab
			bpf_btf_report(fd, ctx);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_btf_begin(struct bpf_elf_ctx *ctx, int section,
Packit Service 3880ab
			       struct bpf_elf_sec_data *data)
Packit Service 3880ab
{
Packit Service 3880ab
	ctx->btf_data = data->sec_data;
Packit Service 3880ab
	ctx->sec_btf = section;
Packit Service 3880ab
	ctx->sec_done[section] = true;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_check_header(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	const struct btf_header *hdr = ctx->btf_data->d_buf;
Packit Service 3880ab
	const char *str_start, *str_end;
Packit Service 3880ab
	unsigned int data_len;
Packit Service 3880ab
Packit Service 3880ab
	if (hdr->magic != BTF_MAGIC) {
Packit Service 3880ab
		fprintf(stderr, "Object has wrong BTF magic: %x, expected: %x!\n",
Packit Service 3880ab
			hdr->magic, BTF_MAGIC);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (hdr->version != BTF_VERSION) {
Packit Service 3880ab
		fprintf(stderr, "Object has wrong BTF version: %u, expected: %u!\n",
Packit Service 3880ab
			hdr->version, BTF_VERSION);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (hdr->flags) {
Packit Service 3880ab
		fprintf(stderr, "Object has unsupported BTF flags %x!\n",
Packit Service 3880ab
			hdr->flags);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	data_len = ctx->btf_data->d_size - sizeof(*hdr);
Packit Service 3880ab
	if (data_len < hdr->type_off ||
Packit Service 3880ab
	    data_len < hdr->str_off ||
Packit Service 3880ab
	    data_len < hdr->type_len + hdr->str_len ||
Packit Service 3880ab
	    hdr->type_off >= hdr->str_off ||
Packit Service 3880ab
	    hdr->type_off + hdr->type_len != hdr->str_off ||
Packit Service 3880ab
	    hdr->str_off + hdr->str_len != data_len ||
Packit Service 3880ab
	    (hdr->type_off & (sizeof(uint32_t) - 1))) {
Packit Service 3880ab
		fprintf(stderr, "Object has malformed BTF data!\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->btf.hdr = hdr;
Packit Service 3880ab
	ctx->btf.raw = hdr + 1;
Packit Service 3880ab
Packit Service 3880ab
	str_start = ctx->btf.raw + hdr->str_off;
Packit Service 3880ab
	str_end = str_start + hdr->str_len;
Packit Service 3880ab
	if (!hdr->str_len ||
Packit Service 3880ab
	    hdr->str_len - 1 > BTF_MAX_NAME_OFFSET ||
Packit Service 3880ab
	    str_start[0] || str_end[-1]) {
Packit Service 3880ab
		fprintf(stderr, "Object has malformed BTF string data!\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->btf.strings = str_start;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_register_type(struct bpf_elf_ctx *ctx,
Packit Service 3880ab
				 const struct btf_type *type)
Packit Service 3880ab
{
Packit Service 3880ab
	int cur = ctx->btf.types_num, num = cur + 1;
Packit Service 3880ab
	const struct btf_type **types;
Packit Service 3880ab
Packit Service 3880ab
	types = realloc(ctx->btf.types, num * sizeof(type));
Packit Service 3880ab
	if (!types) {
Packit Service 3880ab
		free(ctx->btf.types);
Packit Service 3880ab
		ctx->btf.types = NULL;
Packit Service 3880ab
		ctx->btf.types_num = 0;
Packit Service 3880ab
		return -ENOMEM;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->btf.types = types;
Packit Service 3880ab
	ctx->btf.types[cur] = type;
Packit Service 3880ab
	ctx->btf.types_num = num;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static struct btf_type btf_type_void;
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_prep_type_data(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	const void *type_cur = ctx->btf.raw + ctx->btf.hdr->type_off;
Packit Service 3880ab
	const void *type_end = ctx->btf.raw + ctx->btf.hdr->str_off;
Packit Service 3880ab
	const struct btf_type *type;
Packit Service 3880ab
	uint16_t var_len;
Packit Service 3880ab
	int ret, kind;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_btf_register_type(ctx, &btf_type_void);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		return ret;
Packit Service 3880ab
Packit Service 3880ab
	while (type_cur < type_end) {
Packit Service 3880ab
		type = type_cur;
Packit Service 3880ab
		type_cur += sizeof(*type);
Packit Service 3880ab
Packit Service 3880ab
		var_len = BTF_INFO_VLEN(type->info);
Packit Service 3880ab
		kind = BTF_INFO_KIND(type->info);
Packit Service 3880ab
Packit Service 3880ab
		switch (kind) {
Packit Service 3880ab
		case BTF_KIND_INT:
Packit Service 3880ab
			type_cur += sizeof(int);
Packit Service 3880ab
			break;
Packit Service 3880ab
		case BTF_KIND_ARRAY:
Packit Service 3880ab
			type_cur += sizeof(struct btf_array);
Packit Service 3880ab
			break;
Packit Service 3880ab
		case BTF_KIND_STRUCT:
Packit Service 3880ab
		case BTF_KIND_UNION:
Packit Service 3880ab
			type_cur += var_len * sizeof(struct btf_member);
Packit Service 3880ab
			break;
Packit Service 3880ab
		case BTF_KIND_ENUM:
Packit Service 3880ab
			type_cur += var_len * sizeof(struct btf_enum);
Packit Service 3880ab
			break;
Packit Service 3880ab
		case BTF_KIND_FUNC_PROTO:
Packit Service 3880ab
			type_cur += var_len * sizeof(struct btf_param);
Packit Service 3880ab
			break;
Packit Service 3880ab
		case BTF_KIND_TYPEDEF:
Packit Service 3880ab
		case BTF_KIND_PTR:
Packit Service 3880ab
		case BTF_KIND_FWD:
Packit Service 3880ab
		case BTF_KIND_VOLATILE:
Packit Service 3880ab
		case BTF_KIND_CONST:
Packit Service 3880ab
		case BTF_KIND_RESTRICT:
Packit Service 3880ab
		case BTF_KIND_FUNC:
Packit Service 3880ab
			break;
Packit Service 3880ab
		default:
Packit Service 3880ab
			fprintf(stderr, "Object has unknown BTF type: %u!\n", kind);
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_btf_register_type(ctx, type);
Packit Service 3880ab
		if (ret < 0)
Packit Service 3880ab
			return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_btf_prep_data(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int ret = bpf_btf_check_header(ctx);
Packit Service 3880ab
Packit Service 3880ab
	if (!ret)
Packit Service 3880ab
		return bpf_btf_prep_type_data(ctx);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_fetch_btf_end(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int fd = bpf_btf_attach(ctx);
Packit Service 3880ab
Packit Service 3880ab
	if (fd < 0)
Packit Service 3880ab
		return;
Packit Service 3880ab
	ctx->btf_fd = fd;
Packit Service 3880ab
	if (bpf_btf_prep_data(ctx) < 0) {
Packit Service 3880ab
		close(ctx->btf_fd);
Packit Service 3880ab
		ctx->btf_fd = 0;
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_has_map_data(const struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	return ctx->sym_tab && ctx->str_tab && ctx->sec_maps;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_has_btf_data(const struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	return ctx->sec_btf;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_has_call_data(const struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	return ctx->sec_text;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_ancillary(struct bpf_elf_ctx *ctx, bool check_text_sec)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_sec_data data;
Packit Service 3880ab
	int i, ret = -1;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 1; i < ctx->elf_hdr.e_shnum; i++) {
Packit Service 3880ab
		ret = bpf_fill_section_data(ctx, i, &data);
Packit Service 3880ab
		if (ret < 0)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		if (data.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
		    !strcmp(data.sec_name, ELF_SECTION_MAPS))
Packit Service 3880ab
			ret = bpf_fetch_maps_begin(ctx, i, &data);
Packit Service 3880ab
		else if (data.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
			 !strcmp(data.sec_name, ELF_SECTION_LICENSE))
Packit Service 3880ab
			ret = bpf_fetch_license(ctx, i, &data);
Packit Service 3880ab
		else if (data.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
			 (data.sec_hdr.sh_flags & SHF_EXECINSTR) &&
Packit Service 3880ab
			 !strcmp(data.sec_name, ".text") &&
Packit Service 3880ab
			 check_text_sec)
Packit Service 3880ab
			ret = bpf_fetch_text(ctx, i, &data);
Packit Service 3880ab
		else if (data.sec_hdr.sh_type == SHT_SYMTAB &&
Packit Service 3880ab
			 !strcmp(data.sec_name, ".symtab"))
Packit Service 3880ab
			ret = bpf_fetch_symtab(ctx, i, &data);
Packit Service 3880ab
		else if (data.sec_hdr.sh_type == SHT_STRTAB &&
Packit Service 3880ab
			 !strcmp(data.sec_name, ".strtab"))
Packit Service 3880ab
			ret = bpf_fetch_strtab(ctx, i, &data);
Packit Service 3880ab
		else if (data.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
			 !strcmp(data.sec_name, ".BTF"))
Packit Service 3880ab
			ret = bpf_fetch_btf_begin(ctx, i, &data);
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			fprintf(stderr, "Error parsing section %d! Perhaps check with readelf -a?\n",
Packit Service 3880ab
				i);
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_has_btf_data(ctx))
Packit Service 3880ab
		bpf_fetch_btf_end(ctx);
Packit Service 3880ab
	if (bpf_has_map_data(ctx)) {
Packit Service 3880ab
		ret = bpf_fetch_maps_end(ctx);
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			fprintf(stderr, "Error fixing up map structure, incompatible struct bpf_elf_map used?\n");
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_maps_attach_all(ctx);
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			fprintf(stderr, "Error loading maps into kernel!\n");
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_prog(struct bpf_elf_ctx *ctx, const char *section,
Packit Service 3880ab
			  bool *sseen)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_sec_data data;
Packit Service 3880ab
	struct bpf_elf_prog prog;
Packit Service 3880ab
	int ret, i, fd = -1;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 1; i < ctx->elf_hdr.e_shnum; i++) {
Packit Service 3880ab
		if (ctx->sec_done[i])
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_fill_section_data(ctx, i, &data);
Packit Service 3880ab
		if (ret < 0 ||
Packit Service 3880ab
		    !(data.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
		      (data.sec_hdr.sh_flags & SHF_EXECINSTR) &&
Packit Service 3880ab
		      !strcmp(data.sec_name, section)))
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		*sseen = true;
Packit Service 3880ab
Packit Service 3880ab
		memset(&prog, 0, sizeof(prog));
Packit Service 3880ab
		prog.type      = ctx->type;
Packit Service 3880ab
		prog.license   = ctx->license;
Packit Service 3880ab
		prog.size      = data.sec_data->d_size;
Packit Service 3880ab
		prog.insns_num = prog.size / sizeof(struct bpf_insn);
Packit Service 3880ab
		prog.insns     = data.sec_data->d_buf;
Packit Service 3880ab
Packit Service 3880ab
		fd = bpf_prog_attach(section, &prog, ctx);
Packit Service 3880ab
		if (fd < 0)
Packit Service 3880ab
			return fd;
Packit Service 3880ab
Packit Service 3880ab
		ctx->sec_done[i] = true;
Packit Service 3880ab
		break;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
struct bpf_relo_props {
Packit Service 3880ab
	struct bpf_tail_call {
Packit Service 3880ab
		unsigned int total;
Packit Service 3880ab
		unsigned int jited;
Packit Service 3880ab
	} tc;
Packit Service 3880ab
	int main_num;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static int bpf_apply_relo_map(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog,
Packit Service 3880ab
			      GElf_Rel *relo, GElf_Sym *sym,
Packit Service 3880ab
			      struct bpf_relo_props *props)
Packit Service 3880ab
{
Packit Service 3880ab
	unsigned int insn_off = relo->r_offset / sizeof(struct bpf_insn);
Packit Service 3880ab
	unsigned int map_idx = sym->st_value / ctx->map_len;
Packit Service 3880ab
Packit Service 3880ab
	if (insn_off >= prog->insns_num)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (prog->insns[insn_off].code != (BPF_LD | BPF_IMM | BPF_DW)) {
Packit Service 3880ab
		fprintf(stderr, "ELF contains relo data for non ld64 instruction at offset %u! Compiler bug?!\n",
Packit Service 3880ab
			insn_off);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (map_idx >= ARRAY_SIZE(ctx->map_fds))
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (!ctx->map_fds[map_idx])
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (ctx->maps[map_idx].type == BPF_MAP_TYPE_PROG_ARRAY) {
Packit Service 3880ab
		props->tc.total++;
Packit Service 3880ab
		if (ctx->maps_ext[map_idx].owner.jited ||
Packit Service 3880ab
		    (ctx->maps_ext[map_idx].owner.type == 0 &&
Packit Service 3880ab
		     ctx->cfg.jit_enabled))
Packit Service 3880ab
			props->tc.jited++;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	prog->insns[insn_off].src_reg = BPF_PSEUDO_MAP_FD;
Packit Service 3880ab
	prog->insns[insn_off].imm = ctx->map_fds[map_idx];
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_apply_relo_call(struct bpf_elf_ctx *ctx, struct bpf_elf_prog *prog,
Packit Service 3880ab
			       GElf_Rel *relo, GElf_Sym *sym,
Packit Service 3880ab
			       struct bpf_relo_props *props)
Packit Service 3880ab
{
Packit Service 3880ab
	unsigned int insn_off = relo->r_offset / sizeof(struct bpf_insn);
Packit Service 3880ab
	struct bpf_elf_prog *prog_text = &ctx->prog_text;
Packit Service 3880ab
Packit Service 3880ab
	if (insn_off >= prog->insns_num)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	if (prog->insns[insn_off].code != (BPF_JMP | BPF_CALL) &&
Packit Service 3880ab
	    prog->insns[insn_off].src_reg != BPF_PSEUDO_CALL) {
Packit Service 3880ab
		fprintf(stderr, "ELF contains relo data for non call instruction at offset %u! Compiler bug?!\n",
Packit Service 3880ab
			insn_off);
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (!props->main_num) {
Packit Service 3880ab
		struct bpf_insn *insns = realloc(prog->insns,
Packit Service 3880ab
						 prog->size + prog_text->size);
Packit Service 3880ab
		if (!insns)
Packit Service 3880ab
			return -ENOMEM;
Packit Service 3880ab
Packit Service 3880ab
		memcpy(insns + prog->insns_num, prog_text->insns,
Packit Service 3880ab
		       prog_text->size);
Packit Service 3880ab
		props->main_num = prog->insns_num;
Packit Service 3880ab
		prog->insns = insns;
Packit Service 3880ab
		prog->insns_num += prog_text->insns_num;
Packit Service 3880ab
		prog->size += prog_text->size;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	prog->insns[insn_off].imm += props->main_num - insn_off;
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_apply_relo_data(struct bpf_elf_ctx *ctx,
Packit Service 3880ab
			       struct bpf_elf_sec_data *data_relo,
Packit Service 3880ab
			       struct bpf_elf_prog *prog,
Packit Service 3880ab
			       struct bpf_relo_props *props)
Packit Service 3880ab
{
Packit Service 3880ab
	GElf_Shdr *rhdr = &data_relo->sec_hdr;
Packit Service 3880ab
	int relo_ent, relo_num = rhdr->sh_size / rhdr->sh_entsize;
Packit Service 3880ab
Packit Service 3880ab
	for (relo_ent = 0; relo_ent < relo_num; relo_ent++) {
Packit Service 3880ab
		GElf_Rel relo;
Packit Service 3880ab
		GElf_Sym sym;
Packit Service 3880ab
		int ret = -EIO;
Packit Service 3880ab
Packit Service 3880ab
		if (gelf_getrel(data_relo->sec_data, relo_ent, &relo) != &relo)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
		if (gelf_getsym(ctx->sym_tab, GELF_R_SYM(relo.r_info), &sym) != &sym)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
Packit Service 3880ab
		if (sym.st_shndx == ctx->sec_maps)
Packit Service 3880ab
			ret = bpf_apply_relo_map(ctx, prog, &relo, &sym, props);
Packit Service 3880ab
		else if (sym.st_shndx == ctx->sec_text)
Packit Service 3880ab
			ret = bpf_apply_relo_call(ctx, prog, &relo, &sym, props);
Packit Service 3880ab
		else
Packit Service 3880ab
			fprintf(stderr, "ELF contains non-{map,call} related relo data in entry %u pointing to section %u! Compiler bug?!\n",
Packit Service 3880ab
				relo_ent, sym.st_shndx);
Packit Service 3880ab
		if (ret < 0)
Packit Service 3880ab
			return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_prog_relo(struct bpf_elf_ctx *ctx, const char *section,
Packit Service 3880ab
			       bool *lderr, bool *sseen, struct bpf_elf_prog *prog)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_sec_data data_relo, data_insn;
Packit Service 3880ab
	int ret, idx, i, fd = -1;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 1; i < ctx->elf_hdr.e_shnum; i++) {
Packit Service 3880ab
		struct bpf_relo_props props = {};
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_fill_section_data(ctx, i, &data_relo);
Packit Service 3880ab
		if (ret < 0 || data_relo.sec_hdr.sh_type != SHT_REL)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		idx = data_relo.sec_hdr.sh_info;
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_fill_section_data(ctx, idx, &data_insn);
Packit Service 3880ab
		if (ret < 0 ||
Packit Service 3880ab
		    !(data_insn.sec_hdr.sh_type == SHT_PROGBITS &&
Packit Service 3880ab
		      (data_insn.sec_hdr.sh_flags & SHF_EXECINSTR) &&
Packit Service 3880ab
		      !strcmp(data_insn.sec_name, section)))
Packit Service 3880ab
			continue;
Packit Service 3880ab
		if (sseen)
Packit Service 3880ab
			*sseen = true;
Packit Service 3880ab
Packit Service 3880ab
		memset(prog, 0, sizeof(*prog));
Packit Service 3880ab
		prog->type = ctx->type;
Packit Service 3880ab
		prog->license = ctx->license;
Packit Service 3880ab
		prog->size = data_insn.sec_data->d_size;
Packit Service 3880ab
		prog->insns_num = prog->size / sizeof(struct bpf_insn);
Packit Service 3880ab
		prog->insns = malloc(prog->size);
Packit Service 3880ab
		if (!prog->insns) {
Packit Service 3880ab
			*lderr = true;
Packit Service 3880ab
			return -ENOMEM;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		memcpy(prog->insns, data_insn.sec_data->d_buf, prog->size);
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_apply_relo_data(ctx, &data_relo, prog, &props;;
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			*lderr = true;
Packit Service 3880ab
			if (ctx->sec_text != idx)
Packit Service 3880ab
				free(prog->insns);
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
		if (ctx->sec_text == idx) {
Packit Service 3880ab
			fd = 0;
Packit Service 3880ab
			goto out;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		fd = bpf_prog_attach(section, prog, ctx);
Packit Service 3880ab
		free(prog->insns);
Packit Service 3880ab
		if (fd < 0) {
Packit Service 3880ab
			*lderr = true;
Packit Service 3880ab
			if (props.tc.total) {
Packit Service 3880ab
				if (ctx->cfg.jit_enabled &&
Packit Service 3880ab
				    props.tc.total != props.tc.jited)
Packit Service 3880ab
					fprintf(stderr, "JIT enabled, but only %u/%u tail call maps in the program have JITed owner!\n",
Packit Service 3880ab
						props.tc.jited, props.tc.total);
Packit Service 3880ab
				if (!ctx->cfg.jit_enabled &&
Packit Service 3880ab
				    props.tc.jited)
Packit Service 3880ab
					fprintf(stderr, "JIT disabled, but %u/%u tail call maps in the program have JITed owner!\n",
Packit Service 3880ab
						props.tc.jited, props.tc.total);
Packit Service 3880ab
			}
Packit Service 3880ab
			return fd;
Packit Service 3880ab
		}
Packit Service 3880ab
out:
Packit Service 3880ab
		ctx->sec_done[i]   = true;
Packit Service 3880ab
		ctx->sec_done[idx] = true;
Packit Service 3880ab
		break;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fetch_prog_sec(struct bpf_elf_ctx *ctx, const char *section)
Packit Service 3880ab
{
Packit Service 3880ab
	bool lderr = false, sseen = false;
Packit Service 3880ab
	struct bpf_elf_prog prog;
Packit Service 3880ab
	int ret = -1;
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_has_call_data(ctx)) {
Packit Service 3880ab
		ret = bpf_fetch_prog_relo(ctx, ".text", &lderr, NULL,
Packit Service 3880ab
					  &ctx->prog_text);
Packit Service 3880ab
		if (ret < 0)
Packit Service 3880ab
			return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (bpf_has_map_data(ctx) || bpf_has_call_data(ctx))
Packit Service 3880ab
		ret = bpf_fetch_prog_relo(ctx, section, &lderr, &sseen, &prog;;
Packit Service 3880ab
	if (ret < 0 && !lderr)
Packit Service 3880ab
		ret = bpf_fetch_prog(ctx, section, &sseen);
Packit Service 3880ab
	if (ret < 0 && !sseen)
Packit Service 3880ab
		fprintf(stderr, "Program section \'%s\' not found in ELF file!\n",
Packit Service 3880ab
			section);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_find_map_by_id(struct bpf_elf_ctx *ctx, uint32_t id)
Packit Service 3880ab
{
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ARRAY_SIZE(ctx->map_fds); i++)
Packit Service 3880ab
		if (ctx->map_fds[i] && ctx->maps[i].id == id &&
Packit Service 3880ab
		    ctx->maps[i].type == BPF_MAP_TYPE_PROG_ARRAY)
Packit Service 3880ab
			return i;
Packit Service 3880ab
	return -1;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
struct bpf_jited_aux {
Packit Service 3880ab
	int prog_fd;
Packit Service 3880ab
	int map_fd;
Packit Service 3880ab
	struct bpf_prog_data prog;
Packit Service 3880ab
	struct bpf_map_ext map;
Packit Service 3880ab
};
Packit Service 3880ab
Packit Service 3880ab
static int bpf_derive_prog_from_fdinfo(int fd, struct bpf_prog_data *prog)
Packit Service 3880ab
{
Packit Service 3880ab
	char file[PATH_MAX], buff[4096];
Packit Service 3880ab
	unsigned int val;
Packit Service 3880ab
	FILE *fp;
Packit Service 3880ab
Packit Service 3880ab
	snprintf(file, sizeof(file), "/proc/%d/fdinfo/%d", getpid(), fd);
Packit Service 3880ab
	memset(prog, 0, sizeof(*prog));
Packit Service 3880ab
Packit Service 3880ab
	fp = fopen(file, "r");
Packit Service 3880ab
	if (!fp) {
Packit Service 3880ab
		fprintf(stderr, "No procfs support?!\n");
Packit Service 3880ab
		return -EIO;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	while (fgets(buff, sizeof(buff), fp)) {
Packit Service 3880ab
		if (sscanf(buff, "prog_type:\t%u", &val) == 1)
Packit Service 3880ab
			prog->type = val;
Packit Service 3880ab
		else if (sscanf(buff, "prog_jited:\t%u", &val) == 1)
Packit Service 3880ab
			prog->jited = val;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fclose(fp);
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_tail_call_get_aux(struct bpf_jited_aux *aux)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_map tmp;
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_derive_elf_map_from_fdinfo(aux->map_fd, &tmp, &aux->map);
Packit Service 3880ab
	if (!ret)
Packit Service 3880ab
		ret = bpf_derive_prog_from_fdinfo(aux->prog_fd, &aux->prog);
Packit Service 3880ab
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_fill_prog_arrays(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_sec_data data;
Packit Service 3880ab
	uint32_t map_id, key_id;
Packit Service 3880ab
	int fd, i, ret, idx;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 1; i < ctx->elf_hdr.e_shnum; i++) {
Packit Service 3880ab
		if (ctx->sec_done[i])
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_fill_section_data(ctx, i, &data);
Packit Service 3880ab
		if (ret < 0)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		ret = sscanf(data.sec_name, "%i/%i", &map_id, &key_id);
Packit Service 3880ab
		if (ret != 2)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		idx = bpf_find_map_by_id(ctx, map_id);
Packit Service 3880ab
		if (idx < 0)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		fd = bpf_fetch_prog_sec(ctx, data.sec_name);
Packit Service 3880ab
		if (fd < 0)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
Packit Service 3880ab
		ret = bpf_map_update(ctx->map_fds[idx], &key_id,
Packit Service 3880ab
				     &fd, BPF_ANY);
Packit Service 3880ab
		if (ret < 0) {
Packit Service 3880ab
			struct bpf_jited_aux aux = {};
Packit Service 3880ab
Packit Service 3880ab
			ret = -errno;
Packit Service 3880ab
			if (errno == E2BIG) {
Packit Service 3880ab
				fprintf(stderr, "Tail call key %u for map %u out of bounds?\n",
Packit Service 3880ab
					key_id, map_id);
Packit Service 3880ab
				return ret;
Packit Service 3880ab
			}
Packit Service 3880ab
Packit Service 3880ab
			aux.map_fd  = ctx->map_fds[idx];
Packit Service 3880ab
			aux.prog_fd = fd;
Packit Service 3880ab
Packit Service 3880ab
			if (bpf_tail_call_get_aux(&aux))
Packit Service 3880ab
				return ret;
Packit Service 3880ab
			if (!aux.map.owner.type)
Packit Service 3880ab
				return ret;
Packit Service 3880ab
Packit Service 3880ab
			if (aux.prog.type != aux.map.owner.type)
Packit Service 3880ab
				fprintf(stderr, "Tail call map owned by prog type %u, but prog type is %u!\n",
Packit Service 3880ab
					aux.map.owner.type, aux.prog.type);
Packit Service 3880ab
			if (aux.prog.jited != aux.map.owner.jited)
Packit Service 3880ab
				fprintf(stderr, "Tail call map %s jited, but prog %s!\n",
Packit Service 3880ab
					aux.map.owner.jited ? "is" : "not",
Packit Service 3880ab
					aux.prog.jited ? "is" : "not");
Packit Service 3880ab
			return ret;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		ctx->sec_done[i] = true;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_save_finfo(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	struct stat st;
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	memset(&ctx->stat, 0, sizeof(ctx->stat));
Packit Service 3880ab
Packit Service 3880ab
	ret = fstat(ctx->obj_fd, &st);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Stat of elf file failed: %s\n",
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ctx->stat.st_dev = st.st_dev;
Packit Service 3880ab
	ctx->stat.st_ino = st.st_ino;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_read_pin_mapping(FILE *fp, uint32_t *id, char *path)
Packit Service 3880ab
{
Packit Service 3880ab
	char buff[PATH_MAX];
Packit Service 3880ab
Packit Service 3880ab
	while (fgets(buff, sizeof(buff), fp)) {
Packit Service 3880ab
		char *ptr = buff;
Packit Service 3880ab
Packit Service 3880ab
		while (*ptr == ' ' || *ptr == '\t')
Packit Service 3880ab
			ptr++;
Packit Service 3880ab
Packit Service 3880ab
		if (*ptr == '#' || *ptr == '\n' || *ptr == 0)
Packit Service 3880ab
			continue;
Packit Service 3880ab
Packit Service 3880ab
		if (sscanf(ptr, "%i %s\n", id, path) != 2 &&
Packit Service 3880ab
		    sscanf(ptr, "%i %s #", id, path) != 2) {
Packit Service 3880ab
			strcpy(path, ptr);
Packit Service 3880ab
			return -1;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		return 1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static bool bpf_pinning_reserved(uint32_t pinning)
Packit Service 3880ab
{
Packit Service 3880ab
	switch (pinning) {
Packit Service 3880ab
	case PIN_NONE:
Packit Service 3880ab
	case PIN_OBJECT_NS:
Packit Service 3880ab
	case PIN_GLOBAL_NS:
Packit Service 3880ab
		return true;
Packit Service 3880ab
	default:
Packit Service 3880ab
		return false;
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_hash_init(struct bpf_elf_ctx *ctx, const char *db_file)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_hash_entry *entry;
Packit Service 3880ab
	char subpath[PATH_MAX] = {};
Packit Service 3880ab
	uint32_t pinning;
Packit Service 3880ab
	FILE *fp;
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	fp = fopen(db_file, "r");
Packit Service 3880ab
	if (!fp)
Packit Service 3880ab
		return;
Packit Service 3880ab
Packit Service 3880ab
	while ((ret = bpf_read_pin_mapping(fp, &pinning, subpath))) {
Packit Service 3880ab
		if (ret == -1) {
Packit Service 3880ab
			fprintf(stderr, "Database %s is corrupted at: %s\n",
Packit Service 3880ab
				db_file, subpath);
Packit Service 3880ab
			fclose(fp);
Packit Service 3880ab
			return;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		if (bpf_pinning_reserved(pinning)) {
Packit Service 3880ab
			fprintf(stderr, "Database %s, id %u is reserved - ignoring!\n",
Packit Service 3880ab
				db_file, pinning);
Packit Service 3880ab
			continue;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		entry = malloc(sizeof(*entry));
Packit Service 3880ab
		if (!entry) {
Packit Service 3880ab
			fprintf(stderr, "No memory left for db entry!\n");
Packit Service 3880ab
			continue;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		entry->pinning = pinning;
Packit Service 3880ab
		entry->subpath = strdup(subpath);
Packit Service 3880ab
		if (!entry->subpath) {
Packit Service 3880ab
			fprintf(stderr, "No memory left for db entry!\n");
Packit Service 3880ab
			free(entry);
Packit Service 3880ab
			continue;
Packit Service 3880ab
		}
Packit Service 3880ab
Packit Service 3880ab
		entry->next = ctx->ht[pinning & (ARRAY_SIZE(ctx->ht) - 1)];
Packit Service 3880ab
		ctx->ht[pinning & (ARRAY_SIZE(ctx->ht) - 1)] = entry;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fclose(fp);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_hash_destroy(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_hash_entry *entry;
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ARRAY_SIZE(ctx->ht); i++) {
Packit Service 3880ab
		while ((entry = ctx->ht[i]) != NULL) {
Packit Service 3880ab
			ctx->ht[i] = entry->next;
Packit Service 3880ab
			free((char *)entry->subpath);
Packit Service 3880ab
			free(entry);
Packit Service 3880ab
		}
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_elf_check_ehdr(const struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	if (ctx->elf_hdr.e_type != ET_REL ||
Packit Service 3880ab
	    (ctx->elf_hdr.e_machine != EM_NONE &&
Packit Service 3880ab
	     ctx->elf_hdr.e_machine != EM_BPF) ||
Packit Service 3880ab
	    ctx->elf_hdr.e_version != EV_CURRENT) {
Packit Service 3880ab
		fprintf(stderr, "ELF format error, ELF file not for eBPF?\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	switch (ctx->elf_hdr.e_ident[EI_DATA]) {
Packit Service 3880ab
	default:
Packit Service 3880ab
		fprintf(stderr, "ELF format error, wrong endianness info?\n");
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
	case ELFDATA2LSB:
Packit Service 3880ab
		if (htons(1) == 1) {
Packit Service 3880ab
			fprintf(stderr,
Packit Service 3880ab
				"We are big endian, eBPF object is little endian!\n");
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
		}
Packit Service 3880ab
		break;
Packit Service 3880ab
	case ELFDATA2MSB:
Packit Service 3880ab
		if (htons(1) != 1) {
Packit Service 3880ab
			fprintf(stderr,
Packit Service 3880ab
				"We are little endian, eBPF object is big endian!\n");
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
		}
Packit Service 3880ab
		break;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_get_cfg(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	static const char *path_jit = "/proc/sys/net/core/bpf_jit_enable";
Packit Service 3880ab
	int fd;
Packit Service 3880ab
Packit Service 3880ab
	fd = open(path_jit, O_RDONLY);
Packit Service 3880ab
	if (fd > 0) {
Packit Service 3880ab
		char tmp[16] = {};
Packit Service 3880ab
Packit Service 3880ab
		if (read(fd, tmp, sizeof(tmp)) > 0)
Packit Service 3880ab
			ctx->cfg.jit_enabled = atoi(tmp);
Packit Service 3880ab
		close(fd);
Packit Service 3880ab
	}
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_elf_ctx_init(struct bpf_elf_ctx *ctx, const char *pathname,
Packit Service 3880ab
			    enum bpf_prog_type type, __u32 ifindex,
Packit Service 3880ab
			    bool verbose)
Packit Service 3880ab
{
Packit Service 3880ab
	uint8_t tmp[20];
Packit Service 3880ab
	int ret;
Packit Service 3880ab
Packit Service 3880ab
	if (elf_version(EV_CURRENT) == EV_NONE)
Packit Service 3880ab
		return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
	bpf_init_env();
Packit Service 3880ab
Packit Service 3880ab
	memset(ctx, 0, sizeof(*ctx));
Packit Service 3880ab
	bpf_get_cfg(ctx);
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_obj_hash(pathname, tmp, sizeof(tmp));
Packit Service 3880ab
	if (ret)
Packit Service 3880ab
		ctx->noafalg = true;
Packit Service 3880ab
	else
Packit Service 3880ab
		hexstring_n2a(tmp, sizeof(tmp), ctx->obj_uid,
Packit Service 3880ab
			      sizeof(ctx->obj_uid));
Packit Service 3880ab
Packit Service 3880ab
	ctx->verbose = verbose;
Packit Service 3880ab
	ctx->type    = type;
Packit Service 3880ab
	ctx->ifindex = ifindex;
Packit Service 3880ab
Packit Service 3880ab
	ctx->obj_fd = open(pathname, O_RDONLY);
Packit Service 3880ab
	if (ctx->obj_fd < 0)
Packit Service 3880ab
		return ctx->obj_fd;
Packit Service 3880ab
Packit Service 3880ab
	ctx->elf_fd = elf_begin(ctx->obj_fd, ELF_C_READ, NULL);
Packit Service 3880ab
	if (!ctx->elf_fd) {
Packit Service 3880ab
		ret = -EINVAL;
Packit Service 3880ab
		goto out_fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (elf_kind(ctx->elf_fd) != ELF_K_ELF) {
Packit Service 3880ab
		ret = -EINVAL;
Packit Service 3880ab
		goto out_fd;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (gelf_getehdr(ctx->elf_fd, &ctx->elf_hdr) !=
Packit Service 3880ab
	    &ctx->elf_hdr) {
Packit Service 3880ab
		ret = -EIO;
Packit Service 3880ab
		goto out_elf;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_elf_check_ehdr(ctx);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		goto out_elf;
Packit Service 3880ab
Packit Service 3880ab
	ctx->sec_done = calloc(ctx->elf_hdr.e_shnum,
Packit Service 3880ab
			       sizeof(*(ctx->sec_done)));
Packit Service 3880ab
	if (!ctx->sec_done) {
Packit Service 3880ab
		ret = -ENOMEM;
Packit Service 3880ab
		goto out_elf;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (ctx->verbose && bpf_log_realloc(ctx)) {
Packit Service 3880ab
		ret = -ENOMEM;
Packit Service 3880ab
		goto out_free;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	bpf_save_finfo(ctx);
Packit Service 3880ab
	bpf_hash_init(ctx, CONFDIR "/bpf_pinning");
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
out_free:
Packit Service 3880ab
	free(ctx->sec_done);
Packit Service 3880ab
out_elf:
Packit Service 3880ab
	elf_end(ctx->elf_fd);
Packit Service 3880ab
out_fd:
Packit Service 3880ab
	close(ctx->obj_fd);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int bpf_maps_count(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int i, count = 0;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ARRAY_SIZE(ctx->map_fds); i++) {
Packit Service 3880ab
		if (!ctx->map_fds[i])
Packit Service 3880ab
			break;
Packit Service 3880ab
		count++;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return count;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_maps_teardown(struct bpf_elf_ctx *ctx)
Packit Service 3880ab
{
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < ARRAY_SIZE(ctx->map_fds); i++) {
Packit Service 3880ab
		if (ctx->map_fds[i])
Packit Service 3880ab
			close(ctx->map_fds[i]);
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	if (ctx->btf_fd)
Packit Service 3880ab
		close(ctx->btf_fd);
Packit Service 3880ab
	free(ctx->btf.types);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static void bpf_elf_ctx_destroy(struct bpf_elf_ctx *ctx, bool failure)
Packit Service 3880ab
{
Packit Service 3880ab
	if (failure)
Packit Service 3880ab
		bpf_maps_teardown(ctx);
Packit Service 3880ab
Packit Service 3880ab
	bpf_hash_destroy(ctx);
Packit Service 3880ab
Packit Service 3880ab
	free(ctx->prog_text.insns);
Packit Service 3880ab
	free(ctx->sec_done);
Packit Service 3880ab
	free(ctx->log);
Packit Service 3880ab
Packit Service 3880ab
	elf_end(ctx->elf_fd);
Packit Service 3880ab
	close(ctx->obj_fd);
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static struct bpf_elf_ctx __ctx;
Packit Service 3880ab
Packit Service 3880ab
static int bpf_obj_open(const char *pathname, enum bpf_prog_type type,
Packit Service 3880ab
			const char *section, __u32 ifindex, bool verbose)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_ctx *ctx = &__ctx;
Packit Service 3880ab
	int fd = 0, ret;
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_elf_ctx_init(ctx, pathname, type, ifindex, verbose);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Cannot initialize ELF context!\n");
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_fetch_ancillary(ctx, strcmp(section, ".text"));
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Error fetching ELF ancillary data!\n");
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	fd = bpf_fetch_prog_sec(ctx, section);
Packit Service 3880ab
	if (fd < 0) {
Packit Service 3880ab
		fprintf(stderr, "Error fetching program/map!\n");
Packit Service 3880ab
		ret = fd;
Packit Service 3880ab
		goto out;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_fill_prog_arrays(ctx);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		fprintf(stderr, "Error filling program arrays!\n");
Packit Service 3880ab
out:
Packit Service 3880ab
	bpf_elf_ctx_destroy(ctx, ret < 0);
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		if (fd)
Packit Service 3880ab
			close(fd);
Packit Service 3880ab
		return ret;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return fd;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int
Packit Service 3880ab
bpf_map_set_send(int fd, struct sockaddr_un *addr, unsigned int addr_len,
Packit Service 3880ab
		 const struct bpf_map_data *aux, unsigned int entries)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_map_set_msg msg = {
Packit Service 3880ab
		.aux.uds_ver = BPF_SCM_AUX_VER,
Packit Service 3880ab
		.aux.num_ent = entries,
Packit Service 3880ab
	};
Packit Service 3880ab
	int *cmsg_buf, min_fd;
Packit Service 3880ab
	char *amsg_buf;
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	strlcpy(msg.aux.obj_name, aux->obj, sizeof(msg.aux.obj_name));
Packit Service 3880ab
	memcpy(&msg.aux.obj_st, aux->st, sizeof(msg.aux.obj_st));
Packit Service 3880ab
Packit Service 3880ab
	cmsg_buf = bpf_map_set_init(&msg, addr, addr_len);
Packit Service 3880ab
	amsg_buf = (char *)msg.aux.ent;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < entries; i += min_fd) {
Packit Service 3880ab
		int ret;
Packit Service 3880ab
Packit Service 3880ab
		min_fd = min(BPF_SCM_MAX_FDS * 1U, entries - i);
Packit Service 3880ab
		bpf_map_set_init_single(&msg, min_fd);
Packit Service 3880ab
Packit Service 3880ab
		memcpy(cmsg_buf, &aux->fds[i], sizeof(aux->fds[0]) * min_fd);
Packit Service 3880ab
		memcpy(amsg_buf, &aux->ent[i], sizeof(aux->ent[0]) * min_fd);
Packit Service 3880ab
Packit Service 3880ab
		ret = sendmsg(fd, &msg.hdr, 0);
Packit Service 3880ab
		if (ret <= 0)
Packit Service 3880ab
			return ret ? : -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
static int
Packit Service 3880ab
bpf_map_set_recv(int fd, int *fds,  struct bpf_map_aux *aux,
Packit Service 3880ab
		 unsigned int entries)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_map_set_msg msg;
Packit Service 3880ab
	int *cmsg_buf, min_fd;
Packit Service 3880ab
	char *amsg_buf, *mmsg_buf;
Packit Service 3880ab
	unsigned int needed = 1;
Packit Service 3880ab
	int i;
Packit Service 3880ab
Packit Service 3880ab
	cmsg_buf = bpf_map_set_init(&msg, NULL, 0);
Packit Service 3880ab
	amsg_buf = (char *)msg.aux.ent;
Packit Service 3880ab
	mmsg_buf = (char *)&msg.aux;
Packit Service 3880ab
Packit Service 3880ab
	for (i = 0; i < min(entries, needed); i += min_fd) {
Packit Service 3880ab
		struct cmsghdr *cmsg;
Packit Service 3880ab
		int ret;
Packit Service 3880ab
Packit Service 3880ab
		min_fd = min(entries, entries - i);
Packit Service 3880ab
		bpf_map_set_init_single(&msg, min_fd);
Packit Service 3880ab
Packit Service 3880ab
		ret = recvmsg(fd, &msg.hdr, 0);
Packit Service 3880ab
		if (ret <= 0)
Packit Service 3880ab
			return ret ? : -1;
Packit Service 3880ab
Packit Service 3880ab
		cmsg = CMSG_FIRSTHDR(&msg.hdr);
Packit Service 3880ab
		if (!cmsg || cmsg->cmsg_type != SCM_RIGHTS)
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
		if (msg.hdr.msg_flags & MSG_CTRUNC)
Packit Service 3880ab
			return -EIO;
Packit Service 3880ab
		if (msg.aux.uds_ver != BPF_SCM_AUX_VER)
Packit Service 3880ab
			return -ENOSYS;
Packit Service 3880ab
Packit Service 3880ab
		min_fd = (cmsg->cmsg_len - sizeof(*cmsg)) / sizeof(fd);
Packit Service 3880ab
		if (min_fd > entries || min_fd <= 0)
Packit Service 3880ab
			return -EINVAL;
Packit Service 3880ab
Packit Service 3880ab
		memcpy(&fds[i], cmsg_buf, sizeof(fds[0]) * min_fd);
Packit Service 3880ab
		memcpy(&aux->ent[i], amsg_buf, sizeof(aux->ent[0]) * min_fd);
Packit Service 3880ab
		memcpy(aux, mmsg_buf, offsetof(struct bpf_map_aux, ent));
Packit Service 3880ab
Packit Service 3880ab
		needed = aux->num_ent;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	return 0;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_send_map_fds(const char *path, const char *obj)
Packit Service 3880ab
{
Packit Service 3880ab
	struct bpf_elf_ctx *ctx = &__ctx;
Packit Service 3880ab
	struct sockaddr_un addr = { .sun_family = AF_UNIX };
Packit Service 3880ab
	struct bpf_map_data bpf_aux = {
Packit Service 3880ab
		.fds = ctx->map_fds,
Packit Service 3880ab
		.ent = ctx->maps,
Packit Service 3880ab
		.st  = &ctx->stat,
Packit Service 3880ab
		.obj = obj,
Packit Service 3880ab
	};
Packit Service 3880ab
	int fd, ret;
Packit Service 3880ab
Packit Service 3880ab
	fd = socket(AF_UNIX, SOCK_DGRAM, 0);
Packit Service 3880ab
	if (fd < 0) {
Packit Service 3880ab
		fprintf(stderr, "Cannot open socket: %s\n",
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	strlcpy(addr.sun_path, path, sizeof(addr.sun_path));
Packit Service 3880ab
Packit Service 3880ab
	ret = connect(fd, (struct sockaddr *)&addr, sizeof(addr));
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Cannot connect to %s: %s\n",
Packit Service 3880ab
			path, strerror(errno));
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_map_set_send(fd, &addr, sizeof(addr), &bpf_aux,
Packit Service 3880ab
			       bpf_maps_count(ctx));
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		fprintf(stderr, "Cannot send fds to %s: %s\n",
Packit Service 3880ab
			path, strerror(errno));
Packit Service 3880ab
Packit Service 3880ab
	bpf_maps_teardown(ctx);
Packit Service 3880ab
	close(fd);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
Packit Service 3880ab
int bpf_recv_map_fds(const char *path, int *fds, struct bpf_map_aux *aux,
Packit Service 3880ab
		     unsigned int entries)
Packit Service 3880ab
{
Packit Service 3880ab
	struct sockaddr_un addr = { .sun_family = AF_UNIX };
Packit Service 3880ab
	int fd, ret;
Packit Service 3880ab
Packit Service 3880ab
	fd = socket(AF_UNIX, SOCK_DGRAM, 0);
Packit Service 3880ab
	if (fd < 0) {
Packit Service 3880ab
		fprintf(stderr, "Cannot open socket: %s\n",
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	strlcpy(addr.sun_path, path, sizeof(addr.sun_path));
Packit Service 3880ab
Packit Service 3880ab
	ret = bind(fd, (struct sockaddr *)&addr, sizeof(addr));
Packit Service 3880ab
	if (ret < 0) {
Packit Service 3880ab
		fprintf(stderr, "Cannot bind to socket: %s\n",
Packit Service 3880ab
			strerror(errno));
Packit Service 3880ab
		return -1;
Packit Service 3880ab
	}
Packit Service 3880ab
Packit Service 3880ab
	ret = bpf_map_set_recv(fd, fds, aux, entries);
Packit Service 3880ab
	if (ret < 0)
Packit Service 3880ab
		fprintf(stderr, "Cannot recv fds from %s: %s\n",
Packit Service 3880ab
			path, strerror(errno));
Packit Service 3880ab
Packit Service 3880ab
	unlink(addr.sun_path);
Packit Service 3880ab
	close(fd);
Packit Service 3880ab
	return ret;
Packit Service 3880ab
}
Packit Service 3880ab
#endif /* HAVE_ELF */