1b2441318SGreg Kroah-Hartman // SPDX-License-Identifier: GPL-2.0 25a6bef47SJiri Olsa /* 35a6bef47SJiri Olsa * Inspired by breakpoint overflow test done by 45a6bef47SJiri Olsa * Vince Weaver <vincent.weaver@maine.edu> for perf_event_tests 55a6bef47SJiri Olsa * (git://github.com/deater/perf_event_tests) 65a6bef47SJiri Olsa */ 75a6bef47SJiri Olsa 8b3539d21SSukadev Bhattiprolu /* 9b3539d21SSukadev Bhattiprolu * Powerpc needs __SANE_USERSPACE_TYPES__ before <linux/types.h> to select 10b3539d21SSukadev Bhattiprolu * 'int-ll64.h' and avoid compile warnings when printing __u64 with %llu. 11b3539d21SSukadev Bhattiprolu */ 12b3539d21SSukadev Bhattiprolu #define __SANE_USERSPACE_TYPES__ 13b3539d21SSukadev Bhattiprolu 145a6bef47SJiri Olsa #include <stdlib.h> 155a6bef47SJiri Olsa #include <stdio.h> 165a6bef47SJiri Olsa #include <unistd.h> 175a6bef47SJiri Olsa #include <string.h> 185a6bef47SJiri Olsa #include <sys/ioctl.h> 195a6bef47SJiri Olsa #include <time.h> 205a6bef47SJiri Olsa #include <fcntl.h> 215a6bef47SJiri Olsa #include <signal.h> 225a6bef47SJiri Olsa #include <sys/mman.h> 235a6bef47SJiri Olsa #include <linux/compiler.h> 245a6bef47SJiri Olsa #include <linux/hw_breakpoint.h> 255a6bef47SJiri Olsa 265a6bef47SJiri Olsa #include "tests.h" 275a6bef47SJiri Olsa #include "debug.h" 288520a98dSArnaldo Carvalho de Melo #include "event.h" 2991854f9aSArnaldo Carvalho de Melo #include "perf-sys.h" 3057480d2cSYann Droneaud #include "cloexec.h" 315a6bef47SJiri Olsa 325a6bef47SJiri Olsa static int fd1; 335a6bef47SJiri Olsa static int fd2; 348fd34e1cSWang Nan static int fd3; 355a6bef47SJiri Olsa static int overflows; 368fd34e1cSWang Nan static int overflows_2; 378fd34e1cSWang Nan 388fd34e1cSWang Nan volatile long the_var; 398fd34e1cSWang Nan 408fd34e1cSWang Nan 418fd34e1cSWang Nan /* 428fd34e1cSWang Nan * Use ASM to ensure watchpoint and breakpoint can be triggered 438fd34e1cSWang Nan * at one instruction. 448fd34e1cSWang Nan */ 458fd34e1cSWang Nan #if defined (__x86_64__) 468fd34e1cSWang Nan extern void __test_function(volatile long *ptr); 478fd34e1cSWang Nan asm ( 488fd34e1cSWang Nan ".globl __test_function\n" 498fd34e1cSWang Nan "__test_function:\n" 508fd34e1cSWang Nan "incq (%rdi)\n" 518fd34e1cSWang Nan "ret\n"); 528fd34e1cSWang Nan #else 538fd34e1cSWang Nan static void __test_function(volatile long *ptr) 548fd34e1cSWang Nan { 558fd34e1cSWang Nan *ptr = 0x1234; 568fd34e1cSWang Nan } 578fd34e1cSWang Nan #endif 585a6bef47SJiri Olsa 599dd4ca47SArnaldo Carvalho de Melo static noinline int test_function(void) 605a6bef47SJiri Olsa { 618fd34e1cSWang Nan __test_function(&the_var); 628fd34e1cSWang Nan the_var++; 635a6bef47SJiri Olsa return time(NULL); 645a6bef47SJiri Olsa } 655a6bef47SJiri Olsa 668fd34e1cSWang Nan static void sig_handler_2(int signum __maybe_unused, 678fd34e1cSWang Nan siginfo_t *oh __maybe_unused, 688fd34e1cSWang Nan void *uc __maybe_unused) 698fd34e1cSWang Nan { 708fd34e1cSWang Nan overflows_2++; 718fd34e1cSWang Nan if (overflows_2 > 10) { 728fd34e1cSWang Nan ioctl(fd1, PERF_EVENT_IOC_DISABLE, 0); 738fd34e1cSWang Nan ioctl(fd2, PERF_EVENT_IOC_DISABLE, 0); 748fd34e1cSWang Nan ioctl(fd3, PERF_EVENT_IOC_DISABLE, 0); 758fd34e1cSWang Nan } 768fd34e1cSWang Nan } 778fd34e1cSWang Nan 785a6bef47SJiri Olsa static void sig_handler(int signum __maybe_unused, 795a6bef47SJiri Olsa siginfo_t *oh __maybe_unused, 805a6bef47SJiri Olsa void *uc __maybe_unused) 815a6bef47SJiri Olsa { 825a6bef47SJiri Olsa overflows++; 835a6bef47SJiri Olsa 845a6bef47SJiri Olsa if (overflows > 10) { 855a6bef47SJiri Olsa /* 865a6bef47SJiri Olsa * This should be executed only once during 875a6bef47SJiri Olsa * this test, if we are here for the 10th 885a6bef47SJiri Olsa * time, consider this the recursive issue. 895a6bef47SJiri Olsa * 905a6bef47SJiri Olsa * We can get out of here by disable events, 915a6bef47SJiri Olsa * so no new SIGIO is delivered. 925a6bef47SJiri Olsa */ 935a6bef47SJiri Olsa ioctl(fd1, PERF_EVENT_IOC_DISABLE, 0); 945a6bef47SJiri Olsa ioctl(fd2, PERF_EVENT_IOC_DISABLE, 0); 958fd34e1cSWang Nan ioctl(fd3, PERF_EVENT_IOC_DISABLE, 0); 965a6bef47SJiri Olsa } 975a6bef47SJiri Olsa } 985a6bef47SJiri Olsa 991ad826baSArnaldo Carvalho de Melo static int __event(bool is_x, void *addr, int sig) 1005a6bef47SJiri Olsa { 1015a6bef47SJiri Olsa struct perf_event_attr pe; 1025a6bef47SJiri Olsa int fd; 1035a6bef47SJiri Olsa 1045a6bef47SJiri Olsa memset(&pe, 0, sizeof(struct perf_event_attr)); 1055a6bef47SJiri Olsa pe.type = PERF_TYPE_BREAKPOINT; 1065a6bef47SJiri Olsa pe.size = sizeof(struct perf_event_attr); 1075a6bef47SJiri Olsa 1085a6bef47SJiri Olsa pe.config = 0; 1098fd34e1cSWang Nan pe.bp_type = is_x ? HW_BREAKPOINT_X : HW_BREAKPOINT_W; 1108fd34e1cSWang Nan pe.bp_addr = (unsigned long) addr; 1115a6bef47SJiri Olsa pe.bp_len = sizeof(long); 1125a6bef47SJiri Olsa 1135a6bef47SJiri Olsa pe.sample_period = 1; 1145a6bef47SJiri Olsa pe.sample_type = PERF_SAMPLE_IP; 1155a6bef47SJiri Olsa pe.wakeup_events = 1; 1165a6bef47SJiri Olsa 1175a6bef47SJiri Olsa pe.disabled = 1; 1185a6bef47SJiri Olsa pe.exclude_kernel = 1; 1195a6bef47SJiri Olsa pe.exclude_hv = 1; 1205a6bef47SJiri Olsa 12157480d2cSYann Droneaud fd = sys_perf_event_open(&pe, 0, -1, -1, 12257480d2cSYann Droneaud perf_event_open_cloexec_flag()); 1235a6bef47SJiri Olsa if (fd < 0) { 1245a6bef47SJiri Olsa pr_debug("failed opening event %llx\n", pe.config); 1255a6bef47SJiri Olsa return TEST_FAIL; 1265a6bef47SJiri Olsa } 1275a6bef47SJiri Olsa 1285a6bef47SJiri Olsa fcntl(fd, F_SETFL, O_RDWR|O_NONBLOCK|O_ASYNC); 1291ad826baSArnaldo Carvalho de Melo fcntl(fd, F_SETSIG, sig); 1305a6bef47SJiri Olsa fcntl(fd, F_SETOWN, getpid()); 1315a6bef47SJiri Olsa 1325a6bef47SJiri Olsa ioctl(fd, PERF_EVENT_IOC_RESET, 0); 1335a6bef47SJiri Olsa 1345a6bef47SJiri Olsa return fd; 1355a6bef47SJiri Olsa } 1365a6bef47SJiri Olsa 1371ad826baSArnaldo Carvalho de Melo static int bp_event(void *addr, int sig) 1388fd34e1cSWang Nan { 1391ad826baSArnaldo Carvalho de Melo return __event(true, addr, sig); 1408fd34e1cSWang Nan } 1418fd34e1cSWang Nan 1421ad826baSArnaldo Carvalho de Melo static int wp_event(void *addr, int sig) 1438fd34e1cSWang Nan { 1441ad826baSArnaldo Carvalho de Melo return __event(false, addr, sig); 1458fd34e1cSWang Nan } 1468fd34e1cSWang Nan 1475a6bef47SJiri Olsa static long long bp_count(int fd) 1485a6bef47SJiri Olsa { 1495a6bef47SJiri Olsa long long count; 1505a6bef47SJiri Olsa int ret; 1515a6bef47SJiri Olsa 1525a6bef47SJiri Olsa ret = read(fd, &count, sizeof(long long)); 1535a6bef47SJiri Olsa if (ret != sizeof(long long)) { 1545a6bef47SJiri Olsa pr_debug("failed to read: %d\n", ret); 1555a6bef47SJiri Olsa return TEST_FAIL; 1565a6bef47SJiri Olsa } 1575a6bef47SJiri Olsa 1585a6bef47SJiri Olsa return count; 1595a6bef47SJiri Olsa } 1605a6bef47SJiri Olsa 16181f17c90SArnaldo Carvalho de Melo int test__bp_signal(struct test *test __maybe_unused, int subtest __maybe_unused) 1625a6bef47SJiri Olsa { 1635a6bef47SJiri Olsa struct sigaction sa; 1648fd34e1cSWang Nan long long count1, count2, count3; 1655a6bef47SJiri Olsa 1665a6bef47SJiri Olsa /* setup SIGIO signal handler */ 1675a6bef47SJiri Olsa memset(&sa, 0, sizeof(struct sigaction)); 1685a6bef47SJiri Olsa sa.sa_sigaction = (void *) sig_handler; 1695a6bef47SJiri Olsa sa.sa_flags = SA_SIGINFO; 1705a6bef47SJiri Olsa 1715a6bef47SJiri Olsa if (sigaction(SIGIO, &sa, NULL) < 0) { 1725a6bef47SJiri Olsa pr_debug("failed setting up signal handler\n"); 1735a6bef47SJiri Olsa return TEST_FAIL; 1745a6bef47SJiri Olsa } 1755a6bef47SJiri Olsa 1768fd34e1cSWang Nan sa.sa_sigaction = (void *) sig_handler_2; 1778fd34e1cSWang Nan if (sigaction(SIGUSR1, &sa, NULL) < 0) { 1788fd34e1cSWang Nan pr_debug("failed setting up signal handler 2\n"); 1798fd34e1cSWang Nan return TEST_FAIL; 1808fd34e1cSWang Nan } 1818fd34e1cSWang Nan 1825a6bef47SJiri Olsa /* 1835a6bef47SJiri Olsa * We create following events: 1845a6bef47SJiri Olsa * 1858fd34e1cSWang Nan * fd1 - breakpoint event on __test_function with SIGIO 1865a6bef47SJiri Olsa * signal configured. We should get signal 1875a6bef47SJiri Olsa * notification each time the breakpoint is hit 1885a6bef47SJiri Olsa * 1898fd34e1cSWang Nan * fd2 - breakpoint event on sig_handler with SIGUSR1 1908fd34e1cSWang Nan * configured. We should get SIGUSR1 each time when 1918fd34e1cSWang Nan * breakpoint is hit 1928fd34e1cSWang Nan * 1938fd34e1cSWang Nan * fd3 - watchpoint event on __test_function with SIGIO 1945a6bef47SJiri Olsa * configured. 1955a6bef47SJiri Olsa * 1965a6bef47SJiri Olsa * Following processing should happen: 1978fd34e1cSWang Nan * Exec: Action: Result: 1988fd34e1cSWang Nan * incq (%rdi) - fd1 event breakpoint hit -> count1 == 1 1998fd34e1cSWang Nan * - SIGIO is delivered 2008fd34e1cSWang Nan * sig_handler - fd2 event breakpoint hit -> count2 == 1 2018fd34e1cSWang Nan * - SIGUSR1 is delivered 2028fd34e1cSWang Nan * sig_handler_2 -> overflows_2 == 1 (nested signal) 2038fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler_2 2048fd34e1cSWang Nan * overflows++ -> overflows = 1 2058fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler 2068fd34e1cSWang Nan * incq (%rdi) - fd3 event watchpoint hit -> count3 == 1 (wp and bp in one insn) 2078fd34e1cSWang Nan * - SIGIO is delivered 2088fd34e1cSWang Nan * sig_handler - fd2 event breakpoint hit -> count2 == 2 2098fd34e1cSWang Nan * - SIGUSR1 is delivered 2108fd34e1cSWang Nan * sig_handler_2 -> overflows_2 == 2 (nested signal) 2118fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler_2 2128fd34e1cSWang Nan * overflows++ -> overflows = 2 2138fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler 2148fd34e1cSWang Nan * the_var++ - fd3 event watchpoint hit -> count3 == 2 (standalone watchpoint) 2158fd34e1cSWang Nan * - SIGIO is delivered 2168fd34e1cSWang Nan * sig_handler - fd2 event breakpoint hit -> count2 == 3 2178fd34e1cSWang Nan * - SIGUSR1 is delivered 2188fd34e1cSWang Nan * sig_handler_2 -> overflows_2 == 3 (nested signal) 2198fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler_2 2208fd34e1cSWang Nan * overflows++ -> overflows == 3 2218fd34e1cSWang Nan * sys_rt_sigreturn - return from sig_handler 2225a6bef47SJiri Olsa * 2235a6bef47SJiri Olsa * The test case check following error conditions: 2245a6bef47SJiri Olsa * - we get stuck in signal handler because of debug 2255a6bef47SJiri Olsa * exception being triggered receursively due to 2265a6bef47SJiri Olsa * the wrong RF EFLAG management 2275a6bef47SJiri Olsa * 2285a6bef47SJiri Olsa * - we never trigger the sig_handler breakpoint due 2295a6bef47SJiri Olsa * to the rong RF EFLAG management 2305a6bef47SJiri Olsa * 2315a6bef47SJiri Olsa */ 2325a6bef47SJiri Olsa 2338fd34e1cSWang Nan fd1 = bp_event(__test_function, SIGIO); 2348fd34e1cSWang Nan fd2 = bp_event(sig_handler, SIGUSR1); 2358fd34e1cSWang Nan fd3 = wp_event((void *)&the_var, SIGIO); 2365a6bef47SJiri Olsa 2375a6bef47SJiri Olsa ioctl(fd1, PERF_EVENT_IOC_ENABLE, 0); 2385a6bef47SJiri Olsa ioctl(fd2, PERF_EVENT_IOC_ENABLE, 0); 2398fd34e1cSWang Nan ioctl(fd3, PERF_EVENT_IOC_ENABLE, 0); 2405a6bef47SJiri Olsa 2415a6bef47SJiri Olsa /* 2425a6bef47SJiri Olsa * Kick off the test by trigering 'fd1' 2435a6bef47SJiri Olsa * breakpoint. 2445a6bef47SJiri Olsa */ 2455a6bef47SJiri Olsa test_function(); 2465a6bef47SJiri Olsa 2475a6bef47SJiri Olsa ioctl(fd1, PERF_EVENT_IOC_DISABLE, 0); 2485a6bef47SJiri Olsa ioctl(fd2, PERF_EVENT_IOC_DISABLE, 0); 2498fd34e1cSWang Nan ioctl(fd3, PERF_EVENT_IOC_DISABLE, 0); 2505a6bef47SJiri Olsa 2515a6bef47SJiri Olsa count1 = bp_count(fd1); 2525a6bef47SJiri Olsa count2 = bp_count(fd2); 2538fd34e1cSWang Nan count3 = bp_count(fd3); 2545a6bef47SJiri Olsa 2555a6bef47SJiri Olsa close(fd1); 2565a6bef47SJiri Olsa close(fd2); 2578fd34e1cSWang Nan close(fd3); 2585a6bef47SJiri Olsa 2598fd34e1cSWang Nan pr_debug("count1 %lld, count2 %lld, count3 %lld, overflow %d, overflows_2 %d\n", 2608fd34e1cSWang Nan count1, count2, count3, overflows, overflows_2); 2615a6bef47SJiri Olsa 2625a6bef47SJiri Olsa if (count1 != 1) { 2635a6bef47SJiri Olsa if (count1 == 11) 2645a6bef47SJiri Olsa pr_debug("failed: RF EFLAG recursion issue detected\n"); 2655a6bef47SJiri Olsa else 2665a6bef47SJiri Olsa pr_debug("failed: wrong count for bp1%lld\n", count1); 2675a6bef47SJiri Olsa } 2685a6bef47SJiri Olsa 2698fd34e1cSWang Nan if (overflows != 3) 2705a6bef47SJiri Olsa pr_debug("failed: wrong overflow hit\n"); 2715a6bef47SJiri Olsa 2728fd34e1cSWang Nan if (overflows_2 != 3) 2738fd34e1cSWang Nan pr_debug("failed: wrong overflow_2 hit\n"); 2748fd34e1cSWang Nan 2758fd34e1cSWang Nan if (count2 != 3) 2765a6bef47SJiri Olsa pr_debug("failed: wrong count for bp2\n"); 2775a6bef47SJiri Olsa 2788fd34e1cSWang Nan if (count3 != 2) 2798fd34e1cSWang Nan pr_debug("failed: wrong count for bp3\n"); 2808fd34e1cSWang Nan 2818fd34e1cSWang Nan return count1 == 1 && overflows == 3 && count2 == 3 && overflows_2 == 3 && count3 == 2 ? 2825a6bef47SJiri Olsa TEST_OK : TEST_FAIL; 2835a6bef47SJiri Olsa } 284598762cfSJiri Olsa 285598762cfSJiri Olsa bool test__bp_signal_is_supported(void) 286598762cfSJiri Olsa { 287598762cfSJiri Olsa /* 28824f96733SFlorian Fainelli * PowerPC and S390 do not support creation of instruction 28924f96733SFlorian Fainelli * breakpoints using the perf_event interface. 29024f96733SFlorian Fainelli * 29124f96733SFlorian Fainelli * ARM requires explicit rounding down of the instruction 29224f96733SFlorian Fainelli * pointer in Thumb mode, and then requires the single-step 29324f96733SFlorian Fainelli * to be handled explicitly in the overflow handler to avoid 29424f96733SFlorian Fainelli * stepping into the SIGIO handler and getting stuck on the 29524f96733SFlorian Fainelli * breakpointed instruction. 29624f96733SFlorian Fainelli * 297*6a5f3d94SLeo Yan * Since arm64 has the same issue with arm for the single-step 298*6a5f3d94SLeo Yan * handling, this case also gets suck on the breakpointed 299*6a5f3d94SLeo Yan * instruction. 300*6a5f3d94SLeo Yan * 30124f96733SFlorian Fainelli * Just disable the test for these architectures until these 30224f96733SFlorian Fainelli * issues are resolved. 303598762cfSJiri Olsa */ 304*6a5f3d94SLeo Yan #if defined(__powerpc__) || defined(__s390x__) || defined(__arm__) || \ 305*6a5f3d94SLeo Yan defined(__aarch64__) 306598762cfSJiri Olsa return false; 307598762cfSJiri Olsa #else 308598762cfSJiri Olsa return true; 309598762cfSJiri Olsa #endif 310598762cfSJiri Olsa } 311