xref: /openbmc/linux/tools/perf/util/event.c (revision 537b9f2b)
1 #include <errno.h>
2 #include <fcntl.h>
3 #include <inttypes.h>
4 #include <linux/kernel.h>
5 #include <linux/types.h>
6 #include <perf/cpumap.h>
7 #include <sys/types.h>
8 #include <sys/stat.h>
9 #include <unistd.h>
10 #include <uapi/linux/mman.h> /* To get things like MAP_HUGETLB even on older libc headers */
11 #include <linux/perf_event.h>
12 #include <linux/zalloc.h>
13 #include "cpumap.h"
14 #include "dso.h"
15 #include "event.h"
16 #include "debug.h"
17 #include "hist.h"
18 #include "machine.h"
19 #include "sort.h"
20 #include "string2.h"
21 #include "strlist.h"
22 #include "thread.h"
23 #include "thread_map.h"
24 #include "time-utils.h"
25 #include <linux/ctype.h>
26 #include "map.h"
27 #include "util/namespaces.h"
28 #include "symbol.h"
29 #include "symbol/kallsyms.h"
30 #include "asm/bug.h"
31 #include "stat.h"
32 #include "session.h"
33 #include "bpf-event.h"
34 #include "print_binary.h"
35 #include "tool.h"
36 #include "../perf.h"
37 
38 static const char *perf_event__names[] = {
39 	[0]					= "TOTAL",
40 	[PERF_RECORD_MMAP]			= "MMAP",
41 	[PERF_RECORD_MMAP2]			= "MMAP2",
42 	[PERF_RECORD_LOST]			= "LOST",
43 	[PERF_RECORD_COMM]			= "COMM",
44 	[PERF_RECORD_EXIT]			= "EXIT",
45 	[PERF_RECORD_THROTTLE]			= "THROTTLE",
46 	[PERF_RECORD_UNTHROTTLE]		= "UNTHROTTLE",
47 	[PERF_RECORD_FORK]			= "FORK",
48 	[PERF_RECORD_READ]			= "READ",
49 	[PERF_RECORD_SAMPLE]			= "SAMPLE",
50 	[PERF_RECORD_AUX]			= "AUX",
51 	[PERF_RECORD_ITRACE_START]		= "ITRACE_START",
52 	[PERF_RECORD_LOST_SAMPLES]		= "LOST_SAMPLES",
53 	[PERF_RECORD_SWITCH]			= "SWITCH",
54 	[PERF_RECORD_SWITCH_CPU_WIDE]		= "SWITCH_CPU_WIDE",
55 	[PERF_RECORD_NAMESPACES]		= "NAMESPACES",
56 	[PERF_RECORD_KSYMBOL]			= "KSYMBOL",
57 	[PERF_RECORD_BPF_EVENT]			= "BPF_EVENT",
58 	[PERF_RECORD_CGROUP]			= "CGROUP",
59 	[PERF_RECORD_TEXT_POKE]			= "TEXT_POKE",
60 	[PERF_RECORD_AUX_OUTPUT_HW_ID]		= "AUX_OUTPUT_HW_ID",
61 	[PERF_RECORD_HEADER_ATTR]		= "ATTR",
62 	[PERF_RECORD_HEADER_EVENT_TYPE]		= "EVENT_TYPE",
63 	[PERF_RECORD_HEADER_TRACING_DATA]	= "TRACING_DATA",
64 	[PERF_RECORD_HEADER_BUILD_ID]		= "BUILD_ID",
65 	[PERF_RECORD_FINISHED_ROUND]		= "FINISHED_ROUND",
66 	[PERF_RECORD_ID_INDEX]			= "ID_INDEX",
67 	[PERF_RECORD_AUXTRACE_INFO]		= "AUXTRACE_INFO",
68 	[PERF_RECORD_AUXTRACE]			= "AUXTRACE",
69 	[PERF_RECORD_AUXTRACE_ERROR]		= "AUXTRACE_ERROR",
70 	[PERF_RECORD_THREAD_MAP]		= "THREAD_MAP",
71 	[PERF_RECORD_CPU_MAP]			= "CPU_MAP",
72 	[PERF_RECORD_STAT_CONFIG]		= "STAT_CONFIG",
73 	[PERF_RECORD_STAT]			= "STAT",
74 	[PERF_RECORD_STAT_ROUND]		= "STAT_ROUND",
75 	[PERF_RECORD_EVENT_UPDATE]		= "EVENT_UPDATE",
76 	[PERF_RECORD_TIME_CONV]			= "TIME_CONV",
77 	[PERF_RECORD_HEADER_FEATURE]		= "FEATURE",
78 	[PERF_RECORD_COMPRESSED]		= "COMPRESSED",
79 };
80 
81 const char *perf_event__name(unsigned int id)
82 {
83 	if (id >= ARRAY_SIZE(perf_event__names))
84 		return "INVALID";
85 	if (!perf_event__names[id])
86 		return "UNKNOWN";
87 	return perf_event__names[id];
88 }
89 
90 struct process_symbol_args {
91 	const char *name;
92 	u64	   start;
93 };
94 
95 static int find_symbol_cb(void *arg, const char *name, char type,
96 			  u64 start)
97 {
98 	struct process_symbol_args *args = arg;
99 
100 	/*
101 	 * Must be a function or at least an alias, as in PARISC64, where "_text" is
102 	 * an 'A' to the same address as "_stext".
103 	 */
104 	if (!(kallsyms__is_function(type) ||
105 	      type == 'A') || strcmp(name, args->name))
106 		return 0;
107 
108 	args->start = start;
109 	return 1;
110 }
111 
112 int kallsyms__get_function_start(const char *kallsyms_filename,
113 				 const char *symbol_name, u64 *addr)
114 {
115 	struct process_symbol_args args = { .name = symbol_name, };
116 
117 	if (kallsyms__parse(kallsyms_filename, &args, find_symbol_cb) <= 0)
118 		return -1;
119 
120 	*addr = args.start;
121 	return 0;
122 }
123 
124 void perf_event__read_stat_config(struct perf_stat_config *config,
125 				  struct perf_record_stat_config *event)
126 {
127 	unsigned i;
128 
129 	for (i = 0; i < event->nr; i++) {
130 
131 		switch (event->data[i].tag) {
132 #define CASE(__term, __val)					\
133 		case PERF_STAT_CONFIG_TERM__##__term:		\
134 			config->__val = event->data[i].val;	\
135 			break;
136 
137 		CASE(AGGR_MODE, aggr_mode)
138 		CASE(SCALE,     scale)
139 		CASE(INTERVAL,  interval)
140 #undef CASE
141 		default:
142 			pr_warning("unknown stat config term %" PRI_lu64 "\n",
143 				   event->data[i].tag);
144 		}
145 	}
146 }
147 
148 size_t perf_event__fprintf_comm(union perf_event *event, FILE *fp)
149 {
150 	const char *s;
151 
152 	if (event->header.misc & PERF_RECORD_MISC_COMM_EXEC)
153 		s = " exec";
154 	else
155 		s = "";
156 
157 	return fprintf(fp, "%s: %s:%d/%d\n", s, event->comm.comm, event->comm.pid, event->comm.tid);
158 }
159 
160 size_t perf_event__fprintf_namespaces(union perf_event *event, FILE *fp)
161 {
162 	size_t ret = 0;
163 	struct perf_ns_link_info *ns_link_info;
164 	u32 nr_namespaces, idx;
165 
166 	ns_link_info = event->namespaces.link_info;
167 	nr_namespaces = event->namespaces.nr_namespaces;
168 
169 	ret += fprintf(fp, " %d/%d - nr_namespaces: %u\n\t\t[",
170 		       event->namespaces.pid,
171 		       event->namespaces.tid,
172 		       nr_namespaces);
173 
174 	for (idx = 0; idx < nr_namespaces; idx++) {
175 		if (idx && (idx % 4 == 0))
176 			ret += fprintf(fp, "\n\t\t ");
177 
178 		ret  += fprintf(fp, "%u/%s: %" PRIu64 "/%#" PRIx64 "%s", idx,
179 				perf_ns__name(idx), (u64)ns_link_info[idx].dev,
180 				(u64)ns_link_info[idx].ino,
181 				((idx + 1) != nr_namespaces) ? ", " : "]\n");
182 	}
183 
184 	return ret;
185 }
186 
187 size_t perf_event__fprintf_cgroup(union perf_event *event, FILE *fp)
188 {
189 	return fprintf(fp, " cgroup: %" PRI_lu64 " %s\n",
190 		       event->cgroup.id, event->cgroup.path);
191 }
192 
193 int perf_event__process_comm(struct perf_tool *tool __maybe_unused,
194 			     union perf_event *event,
195 			     struct perf_sample *sample,
196 			     struct machine *machine)
197 {
198 	return machine__process_comm_event(machine, event, sample);
199 }
200 
201 int perf_event__process_namespaces(struct perf_tool *tool __maybe_unused,
202 				   union perf_event *event,
203 				   struct perf_sample *sample,
204 				   struct machine *machine)
205 {
206 	return machine__process_namespaces_event(machine, event, sample);
207 }
208 
209 int perf_event__process_cgroup(struct perf_tool *tool __maybe_unused,
210 			       union perf_event *event,
211 			       struct perf_sample *sample,
212 			       struct machine *machine)
213 {
214 	return machine__process_cgroup_event(machine, event, sample);
215 }
216 
217 int perf_event__process_lost(struct perf_tool *tool __maybe_unused,
218 			     union perf_event *event,
219 			     struct perf_sample *sample,
220 			     struct machine *machine)
221 {
222 	return machine__process_lost_event(machine, event, sample);
223 }
224 
225 int perf_event__process_aux(struct perf_tool *tool __maybe_unused,
226 			    union perf_event *event,
227 			    struct perf_sample *sample __maybe_unused,
228 			    struct machine *machine)
229 {
230 	return machine__process_aux_event(machine, event);
231 }
232 
233 int perf_event__process_itrace_start(struct perf_tool *tool __maybe_unused,
234 				     union perf_event *event,
235 				     struct perf_sample *sample __maybe_unused,
236 				     struct machine *machine)
237 {
238 	return machine__process_itrace_start_event(machine, event);
239 }
240 
241 int perf_event__process_aux_output_hw_id(struct perf_tool *tool __maybe_unused,
242 					 union perf_event *event,
243 					 struct perf_sample *sample __maybe_unused,
244 					 struct machine *machine)
245 {
246 	return machine__process_aux_output_hw_id_event(machine, event);
247 }
248 
249 int perf_event__process_lost_samples(struct perf_tool *tool __maybe_unused,
250 				     union perf_event *event,
251 				     struct perf_sample *sample,
252 				     struct machine *machine)
253 {
254 	return machine__process_lost_samples_event(machine, event, sample);
255 }
256 
257 int perf_event__process_switch(struct perf_tool *tool __maybe_unused,
258 			       union perf_event *event,
259 			       struct perf_sample *sample __maybe_unused,
260 			       struct machine *machine)
261 {
262 	return machine__process_switch_event(machine, event);
263 }
264 
265 int perf_event__process_ksymbol(struct perf_tool *tool __maybe_unused,
266 				union perf_event *event,
267 				struct perf_sample *sample __maybe_unused,
268 				struct machine *machine)
269 {
270 	return machine__process_ksymbol(machine, event, sample);
271 }
272 
273 int perf_event__process_bpf(struct perf_tool *tool __maybe_unused,
274 			    union perf_event *event,
275 			    struct perf_sample *sample,
276 			    struct machine *machine)
277 {
278 	return machine__process_bpf(machine, event, sample);
279 }
280 
281 int perf_event__process_text_poke(struct perf_tool *tool __maybe_unused,
282 				  union perf_event *event,
283 				  struct perf_sample *sample,
284 				  struct machine *machine)
285 {
286 	return machine__process_text_poke(machine, event, sample);
287 }
288 
289 size_t perf_event__fprintf_mmap(union perf_event *event, FILE *fp)
290 {
291 	return fprintf(fp, " %d/%d: [%#" PRI_lx64 "(%#" PRI_lx64 ") @ %#" PRI_lx64 "]: %c %s\n",
292 		       event->mmap.pid, event->mmap.tid, event->mmap.start,
293 		       event->mmap.len, event->mmap.pgoff,
294 		       (event->header.misc & PERF_RECORD_MISC_MMAP_DATA) ? 'r' : 'x',
295 		       event->mmap.filename);
296 }
297 
298 size_t perf_event__fprintf_mmap2(union perf_event *event, FILE *fp)
299 {
300 	if (event->header.misc & PERF_RECORD_MISC_MMAP_BUILD_ID) {
301 		char sbuild_id[SBUILD_ID_SIZE];
302 		struct build_id bid;
303 
304 		build_id__init(&bid, event->mmap2.build_id,
305 			       event->mmap2.build_id_size);
306 		build_id__sprintf(&bid, sbuild_id);
307 
308 		return fprintf(fp, " %d/%d: [%#" PRI_lx64 "(%#" PRI_lx64 ") @ %#" PRI_lx64
309 				   " <%s>]: %c%c%c%c %s\n",
310 			       event->mmap2.pid, event->mmap2.tid, event->mmap2.start,
311 			       event->mmap2.len, event->mmap2.pgoff, sbuild_id,
312 			       (event->mmap2.prot & PROT_READ) ? 'r' : '-',
313 			       (event->mmap2.prot & PROT_WRITE) ? 'w' : '-',
314 			       (event->mmap2.prot & PROT_EXEC) ? 'x' : '-',
315 			       (event->mmap2.flags & MAP_SHARED) ? 's' : 'p',
316 			       event->mmap2.filename);
317 	} else {
318 		return fprintf(fp, " %d/%d: [%#" PRI_lx64 "(%#" PRI_lx64 ") @ %#" PRI_lx64
319 				   " %02x:%02x %"PRI_lu64" %"PRI_lu64"]: %c%c%c%c %s\n",
320 			       event->mmap2.pid, event->mmap2.tid, event->mmap2.start,
321 			       event->mmap2.len, event->mmap2.pgoff, event->mmap2.maj,
322 			       event->mmap2.min, event->mmap2.ino,
323 			       event->mmap2.ino_generation,
324 			       (event->mmap2.prot & PROT_READ) ? 'r' : '-',
325 			       (event->mmap2.prot & PROT_WRITE) ? 'w' : '-',
326 			       (event->mmap2.prot & PROT_EXEC) ? 'x' : '-',
327 			       (event->mmap2.flags & MAP_SHARED) ? 's' : 'p',
328 			       event->mmap2.filename);
329 	}
330 }
331 
332 size_t perf_event__fprintf_thread_map(union perf_event *event, FILE *fp)
333 {
334 	struct perf_thread_map *threads = thread_map__new_event(&event->thread_map);
335 	size_t ret;
336 
337 	ret = fprintf(fp, " nr: ");
338 
339 	if (threads)
340 		ret += thread_map__fprintf(threads, fp);
341 	else
342 		ret += fprintf(fp, "failed to get threads from event\n");
343 
344 	perf_thread_map__put(threads);
345 	return ret;
346 }
347 
348 size_t perf_event__fprintf_cpu_map(union perf_event *event, FILE *fp)
349 {
350 	struct perf_cpu_map *cpus = cpu_map__new_data(&event->cpu_map.data);
351 	size_t ret;
352 
353 	ret = fprintf(fp, ": ");
354 
355 	if (cpus)
356 		ret += cpu_map__fprintf(cpus, fp);
357 	else
358 		ret += fprintf(fp, "failed to get cpumap from event\n");
359 
360 	perf_cpu_map__put(cpus);
361 	return ret;
362 }
363 
364 int perf_event__process_mmap(struct perf_tool *tool __maybe_unused,
365 			     union perf_event *event,
366 			     struct perf_sample *sample,
367 			     struct machine *machine)
368 {
369 	return machine__process_mmap_event(machine, event, sample);
370 }
371 
372 int perf_event__process_mmap2(struct perf_tool *tool __maybe_unused,
373 			     union perf_event *event,
374 			     struct perf_sample *sample,
375 			     struct machine *machine)
376 {
377 	return machine__process_mmap2_event(machine, event, sample);
378 }
379 
380 size_t perf_event__fprintf_task(union perf_event *event, FILE *fp)
381 {
382 	return fprintf(fp, "(%d:%d):(%d:%d)\n",
383 		       event->fork.pid, event->fork.tid,
384 		       event->fork.ppid, event->fork.ptid);
385 }
386 
387 int perf_event__process_fork(struct perf_tool *tool __maybe_unused,
388 			     union perf_event *event,
389 			     struct perf_sample *sample,
390 			     struct machine *machine)
391 {
392 	return machine__process_fork_event(machine, event, sample);
393 }
394 
395 int perf_event__process_exit(struct perf_tool *tool __maybe_unused,
396 			     union perf_event *event,
397 			     struct perf_sample *sample,
398 			     struct machine *machine)
399 {
400 	return machine__process_exit_event(machine, event, sample);
401 }
402 
403 size_t perf_event__fprintf_aux(union perf_event *event, FILE *fp)
404 {
405 	return fprintf(fp, " offset: %#"PRI_lx64" size: %#"PRI_lx64" flags: %#"PRI_lx64" [%s%s%s]\n",
406 		       event->aux.aux_offset, event->aux.aux_size,
407 		       event->aux.flags,
408 		       event->aux.flags & PERF_AUX_FLAG_TRUNCATED ? "T" : "",
409 		       event->aux.flags & PERF_AUX_FLAG_OVERWRITE ? "O" : "",
410 		       event->aux.flags & PERF_AUX_FLAG_PARTIAL   ? "P" : "");
411 }
412 
413 size_t perf_event__fprintf_itrace_start(union perf_event *event, FILE *fp)
414 {
415 	return fprintf(fp, " pid: %u tid: %u\n",
416 		       event->itrace_start.pid, event->itrace_start.tid);
417 }
418 
419 size_t perf_event__fprintf_aux_output_hw_id(union perf_event *event, FILE *fp)
420 {
421 	return fprintf(fp, " hw_id: %#"PRI_lx64"\n",
422 		       event->aux_output_hw_id.hw_id);
423 }
424 
425 size_t perf_event__fprintf_switch(union perf_event *event, FILE *fp)
426 {
427 	bool out = event->header.misc & PERF_RECORD_MISC_SWITCH_OUT;
428 	const char *in_out = !out ? "IN         " :
429 		!(event->header.misc & PERF_RECORD_MISC_SWITCH_OUT_PREEMPT) ?
430 				    "OUT        " : "OUT preempt";
431 
432 	if (event->header.type == PERF_RECORD_SWITCH)
433 		return fprintf(fp, " %s\n", in_out);
434 
435 	return fprintf(fp, " %s  %s pid/tid: %5d/%-5d\n",
436 		       in_out, out ? "next" : "prev",
437 		       event->context_switch.next_prev_pid,
438 		       event->context_switch.next_prev_tid);
439 }
440 
441 static size_t perf_event__fprintf_lost(union perf_event *event, FILE *fp)
442 {
443 	return fprintf(fp, " lost %" PRI_lu64 "\n", event->lost.lost);
444 }
445 
446 size_t perf_event__fprintf_ksymbol(union perf_event *event, FILE *fp)
447 {
448 	return fprintf(fp, " addr %" PRI_lx64 " len %u type %u flags 0x%x name %s\n",
449 		       event->ksymbol.addr, event->ksymbol.len,
450 		       event->ksymbol.ksym_type,
451 		       event->ksymbol.flags, event->ksymbol.name);
452 }
453 
454 size_t perf_event__fprintf_bpf(union perf_event *event, FILE *fp)
455 {
456 	return fprintf(fp, " type %u, flags %u, id %u\n",
457 		       event->bpf.type, event->bpf.flags, event->bpf.id);
458 }
459 
460 static int text_poke_printer(enum binary_printer_ops op, unsigned int val,
461 			     void *extra, FILE *fp)
462 {
463 	bool old = *(bool *)extra;
464 
465 	switch ((int)op) {
466 	case BINARY_PRINT_LINE_BEGIN:
467 		return fprintf(fp, "            %s bytes:", old ? "Old" : "New");
468 	case BINARY_PRINT_NUM_DATA:
469 		return fprintf(fp, " %02x", val);
470 	case BINARY_PRINT_LINE_END:
471 		return fprintf(fp, "\n");
472 	default:
473 		return 0;
474 	}
475 }
476 
477 size_t perf_event__fprintf_text_poke(union perf_event *event, struct machine *machine, FILE *fp)
478 {
479 	struct perf_record_text_poke_event *tp = &event->text_poke;
480 	size_t ret;
481 	bool old;
482 
483 	ret = fprintf(fp, " %" PRI_lx64 " ", tp->addr);
484 	if (machine) {
485 		struct addr_location al;
486 
487 		al.map = maps__find(machine__kernel_maps(machine), tp->addr);
488 		if (al.map && map__load(al.map) >= 0) {
489 			al.addr = al.map->map_ip(al.map, tp->addr);
490 			al.sym = map__find_symbol(al.map, al.addr);
491 			if (al.sym)
492 				ret += symbol__fprintf_symname_offs(al.sym, &al, fp);
493 		}
494 	}
495 	ret += fprintf(fp, " old len %u new len %u\n", tp->old_len, tp->new_len);
496 	old = true;
497 	ret += binary__fprintf(tp->bytes, tp->old_len, 16, text_poke_printer,
498 			       &old, fp);
499 	old = false;
500 	ret += binary__fprintf(tp->bytes + tp->old_len, tp->new_len, 16,
501 			       text_poke_printer, &old, fp);
502 	return ret;
503 }
504 
505 size_t perf_event__fprintf(union perf_event *event, struct machine *machine, FILE *fp)
506 {
507 	size_t ret = fprintf(fp, "PERF_RECORD_%s",
508 			     perf_event__name(event->header.type));
509 
510 	switch (event->header.type) {
511 	case PERF_RECORD_COMM:
512 		ret += perf_event__fprintf_comm(event, fp);
513 		break;
514 	case PERF_RECORD_FORK:
515 	case PERF_RECORD_EXIT:
516 		ret += perf_event__fprintf_task(event, fp);
517 		break;
518 	case PERF_RECORD_MMAP:
519 		ret += perf_event__fprintf_mmap(event, fp);
520 		break;
521 	case PERF_RECORD_NAMESPACES:
522 		ret += perf_event__fprintf_namespaces(event, fp);
523 		break;
524 	case PERF_RECORD_CGROUP:
525 		ret += perf_event__fprintf_cgroup(event, fp);
526 		break;
527 	case PERF_RECORD_MMAP2:
528 		ret += perf_event__fprintf_mmap2(event, fp);
529 		break;
530 	case PERF_RECORD_AUX:
531 		ret += perf_event__fprintf_aux(event, fp);
532 		break;
533 	case PERF_RECORD_ITRACE_START:
534 		ret += perf_event__fprintf_itrace_start(event, fp);
535 		break;
536 	case PERF_RECORD_SWITCH:
537 	case PERF_RECORD_SWITCH_CPU_WIDE:
538 		ret += perf_event__fprintf_switch(event, fp);
539 		break;
540 	case PERF_RECORD_LOST:
541 		ret += perf_event__fprintf_lost(event, fp);
542 		break;
543 	case PERF_RECORD_KSYMBOL:
544 		ret += perf_event__fprintf_ksymbol(event, fp);
545 		break;
546 	case PERF_RECORD_BPF_EVENT:
547 		ret += perf_event__fprintf_bpf(event, fp);
548 		break;
549 	case PERF_RECORD_TEXT_POKE:
550 		ret += perf_event__fprintf_text_poke(event, machine, fp);
551 		break;
552 	case PERF_RECORD_AUX_OUTPUT_HW_ID:
553 		ret += perf_event__fprintf_aux_output_hw_id(event, fp);
554 		break;
555 	default:
556 		ret += fprintf(fp, "\n");
557 	}
558 
559 	return ret;
560 }
561 
562 int perf_event__process(struct perf_tool *tool __maybe_unused,
563 			union perf_event *event,
564 			struct perf_sample *sample,
565 			struct machine *machine)
566 {
567 	return machine__process_event(machine, event, sample);
568 }
569 
570 struct map *thread__find_map(struct thread *thread, u8 cpumode, u64 addr,
571 			     struct addr_location *al)
572 {
573 	struct maps *maps = thread->maps;
574 	struct machine *machine = maps->machine;
575 	bool load_map = false;
576 
577 	al->maps = maps;
578 	al->thread = thread;
579 	al->addr = addr;
580 	al->cpumode = cpumode;
581 	al->filtered = 0;
582 
583 	if (machine == NULL) {
584 		al->map = NULL;
585 		return NULL;
586 	}
587 
588 	if (cpumode == PERF_RECORD_MISC_KERNEL && perf_host) {
589 		al->level = 'k';
590 		al->maps = maps = machine__kernel_maps(machine);
591 		load_map = true;
592 	} else if (cpumode == PERF_RECORD_MISC_USER && perf_host) {
593 		al->level = '.';
594 	} else if (cpumode == PERF_RECORD_MISC_GUEST_KERNEL && perf_guest) {
595 		al->level = 'g';
596 		al->maps = maps = machine__kernel_maps(machine);
597 		load_map = true;
598 	} else if (cpumode == PERF_RECORD_MISC_GUEST_USER && perf_guest) {
599 		al->level = 'u';
600 	} else {
601 		al->level = 'H';
602 		al->map = NULL;
603 
604 		if ((cpumode == PERF_RECORD_MISC_GUEST_USER ||
605 			cpumode == PERF_RECORD_MISC_GUEST_KERNEL) &&
606 			!perf_guest)
607 			al->filtered |= (1 << HIST_FILTER__GUEST);
608 		if ((cpumode == PERF_RECORD_MISC_USER ||
609 			cpumode == PERF_RECORD_MISC_KERNEL) &&
610 			!perf_host)
611 			al->filtered |= (1 << HIST_FILTER__HOST);
612 
613 		return NULL;
614 	}
615 
616 	al->map = maps__find(maps, al->addr);
617 	if (al->map != NULL) {
618 		/*
619 		 * Kernel maps might be changed when loading symbols so loading
620 		 * must be done prior to using kernel maps.
621 		 */
622 		if (load_map)
623 			map__load(al->map);
624 		al->addr = al->map->map_ip(al->map, al->addr);
625 	}
626 
627 	return al->map;
628 }
629 
630 /*
631  * For branch stacks or branch samples, the sample cpumode might not be correct
632  * because it applies only to the sample 'ip' and not necessary to 'addr' or
633  * branch stack addresses. If possible, use a fallback to deal with those cases.
634  */
635 struct map *thread__find_map_fb(struct thread *thread, u8 cpumode, u64 addr,
636 				struct addr_location *al)
637 {
638 	struct map *map = thread__find_map(thread, cpumode, addr, al);
639 	struct machine *machine = thread->maps->machine;
640 	u8 addr_cpumode = machine__addr_cpumode(machine, cpumode, addr);
641 
642 	if (map || addr_cpumode == cpumode)
643 		return map;
644 
645 	return thread__find_map(thread, addr_cpumode, addr, al);
646 }
647 
648 struct symbol *thread__find_symbol(struct thread *thread, u8 cpumode,
649 				   u64 addr, struct addr_location *al)
650 {
651 	al->sym = NULL;
652 	if (thread__find_map(thread, cpumode, addr, al))
653 		al->sym = map__find_symbol(al->map, al->addr);
654 	return al->sym;
655 }
656 
657 struct symbol *thread__find_symbol_fb(struct thread *thread, u8 cpumode,
658 				      u64 addr, struct addr_location *al)
659 {
660 	al->sym = NULL;
661 	if (thread__find_map_fb(thread, cpumode, addr, al))
662 		al->sym = map__find_symbol(al->map, al->addr);
663 	return al->sym;
664 }
665 
666 static bool check_address_range(struct intlist *addr_list, int addr_range,
667 				unsigned long addr)
668 {
669 	struct int_node *pos;
670 
671 	intlist__for_each_entry(pos, addr_list) {
672 		if (addr >= pos->i && addr < pos->i + addr_range)
673 			return true;
674 	}
675 
676 	return false;
677 }
678 
679 /*
680  * Callers need to drop the reference to al->thread, obtained in
681  * machine__findnew_thread()
682  */
683 int machine__resolve(struct machine *machine, struct addr_location *al,
684 		     struct perf_sample *sample)
685 {
686 	struct thread *thread = machine__findnew_thread(machine, sample->pid,
687 							sample->tid);
688 
689 	if (thread == NULL)
690 		return -1;
691 
692 	dump_printf(" ... thread: %s:%d\n", thread__comm_str(thread), thread->tid);
693 	thread__find_map(thread, sample->cpumode, sample->ip, al);
694 	dump_printf(" ...... dso: %s\n",
695 		    al->map ? al->map->dso->long_name :
696 			al->level == 'H' ? "[hypervisor]" : "<not found>");
697 
698 	if (thread__is_filtered(thread))
699 		al->filtered |= (1 << HIST_FILTER__THREAD);
700 
701 	al->sym = NULL;
702 	al->cpu = sample->cpu;
703 	al->socket = -1;
704 	al->srcline = NULL;
705 
706 	if (al->cpu >= 0) {
707 		struct perf_env *env = machine->env;
708 
709 		if (env && env->cpu)
710 			al->socket = env->cpu[al->cpu].socket_id;
711 	}
712 
713 	if (al->map) {
714 		struct dso *dso = al->map->dso;
715 
716 		if (symbol_conf.dso_list &&
717 		    (!dso || !(strlist__has_entry(symbol_conf.dso_list,
718 						  dso->short_name) ||
719 			       (dso->short_name != dso->long_name &&
720 				strlist__has_entry(symbol_conf.dso_list,
721 						   dso->long_name))))) {
722 			al->filtered |= (1 << HIST_FILTER__DSO);
723 		}
724 
725 		al->sym = map__find_symbol(al->map, al->addr);
726 	} else if (symbol_conf.dso_list) {
727 		al->filtered |= (1 << HIST_FILTER__DSO);
728 	}
729 
730 	if (symbol_conf.sym_list) {
731 		int ret = 0;
732 		char al_addr_str[32];
733 		size_t sz = sizeof(al_addr_str);
734 
735 		if (al->sym) {
736 			ret = strlist__has_entry(symbol_conf.sym_list,
737 						al->sym->name);
738 		}
739 		if (!ret && al->sym) {
740 			snprintf(al_addr_str, sz, "0x%"PRIx64,
741 				al->map->unmap_ip(al->map, al->sym->start));
742 			ret = strlist__has_entry(symbol_conf.sym_list,
743 						al_addr_str);
744 		}
745 		if (!ret && symbol_conf.addr_list && al->map) {
746 			unsigned long addr = al->map->unmap_ip(al->map, al->addr);
747 
748 			ret = intlist__has_entry(symbol_conf.addr_list, addr);
749 			if (!ret && symbol_conf.addr_range) {
750 				ret = check_address_range(symbol_conf.addr_list,
751 							  symbol_conf.addr_range,
752 							  addr);
753 			}
754 		}
755 
756 		if (!ret)
757 			al->filtered |= (1 << HIST_FILTER__SYMBOL);
758 	}
759 
760 	return 0;
761 }
762 
763 /*
764  * The preprocess_sample method will return with reference counts for the
765  * in it, when done using (and perhaps getting ref counts if needing to
766  * keep a pointer to one of those entries) it must be paired with
767  * addr_location__put(), so that the refcounts can be decremented.
768  */
769 void addr_location__put(struct addr_location *al)
770 {
771 	thread__zput(al->thread);
772 }
773 
774 bool is_bts_event(struct perf_event_attr *attr)
775 {
776 	return attr->type == PERF_TYPE_HARDWARE &&
777 	       (attr->config & PERF_COUNT_HW_BRANCH_INSTRUCTIONS) &&
778 	       attr->sample_period == 1;
779 }
780 
781 bool sample_addr_correlates_sym(struct perf_event_attr *attr)
782 {
783 	if (attr->type == PERF_TYPE_SOFTWARE &&
784 	    (attr->config == PERF_COUNT_SW_PAGE_FAULTS ||
785 	     attr->config == PERF_COUNT_SW_PAGE_FAULTS_MIN ||
786 	     attr->config == PERF_COUNT_SW_PAGE_FAULTS_MAJ))
787 		return true;
788 
789 	if (is_bts_event(attr))
790 		return true;
791 
792 	return false;
793 }
794 
795 void thread__resolve(struct thread *thread, struct addr_location *al,
796 		     struct perf_sample *sample)
797 {
798 	thread__find_map_fb(thread, sample->cpumode, sample->addr, al);
799 
800 	al->cpu = sample->cpu;
801 	al->sym = NULL;
802 
803 	if (al->map)
804 		al->sym = map__find_symbol(al->map, al->addr);
805 }
806