1 /* Copyright (c) 2017 Facebook
2  *
3  * This program is free software; you can redistribute it and/or
4  * modify it under the terms of version 2 of the GNU General Public
5  * License as published by the Free Software Foundation.
6  */
7 
8 /* This program shows clang/llvm is able to generate code pattern
9  * like:
10  *   _tcp_send_active_reset:
11  *      0:       bf 16 00 00 00 00 00 00         r6 = r1
12  *    ......
13  *    335:       b7 01 00 00 0f 00 00 00         r1 = 15
14  *    336:       05 00 48 00 00 00 00 00         goto 72
15  *
16  *   LBB0_3:
17  *    337:       b7 01 00 00 01 00 00 00         r1 = 1
18  *    338:       63 1a d0 ff 00 00 00 00         *(u32 *)(r10 - 48) = r1
19  *    408:       b7 01 00 00 03 00 00 00         r1 = 3
20  *
21  *   LBB0_4:
22  *    409:       71 a2 fe ff 00 00 00 00         r2 = *(u8 *)(r10 - 2)
23  *    410:       bf a7 00 00 00 00 00 00         r7 = r10
24  *    411:       07 07 00 00 b8 ff ff ff         r7 += -72
25  *    412:       bf 73 00 00 00 00 00 00         r3 = r7
26  *    413:       0f 13 00 00 00 00 00 00         r3 += r1
27  *    414:       73 23 2d 00 00 00 00 00         *(u8 *)(r3 + 45) = r2
28  *
29  * From the above code snippet, the code generated by the compiler
30  * is reasonable. The "r1" is assigned to different values in basic
31  * blocks "_tcp_send_active_reset" and "LBB0_3", and used in "LBB0_4".
32  * The verifier should be able to handle such code patterns.
33  */
34 #include <string.h>
35 #include <linux/bpf.h>
36 #include <linux/ipv6.h>
37 #include <linux/version.h>
38 #include <sys/socket.h>
39 #include <bpf/bpf_helpers.h>
40 
41 #define _(P) ({typeof(P) val = 0; bpf_probe_read_kernel(&val, sizeof(val), &P); val;})
42 #define TCP_ESTATS_MAGIC 0xBAADBEEF
43 
44 /* This test case needs "sock" and "pt_regs" data structure.
45  * Recursively, "sock" needs "sock_common" and "inet_sock".
46  * However, this is a unit test case only for
47  * verifier purpose without bpf program execution.
48  * We can safely mock much simpler data structures, basically
49  * only taking the necessary fields from kernel headers.
50  */
51 typedef __u32 __bitwise __portpair;
52 typedef __u64 __bitwise __addrpair;
53 
54 struct sock_common {
55 	unsigned short		skc_family;
56 	union {
57 		__addrpair	skc_addrpair;
58 		struct {
59 			__be32	skc_daddr;
60 			__be32	skc_rcv_saddr;
61 		};
62 	};
63 	union {
64 		__portpair	skc_portpair;
65 		struct {
66 			__be16	skc_dport;
67 			__u16	skc_num;
68 		};
69 	};
70 	struct in6_addr		skc_v6_daddr;
71 	struct in6_addr		skc_v6_rcv_saddr;
72 };
73 
74 struct sock {
75 	struct sock_common	__sk_common;
76 #define sk_family		__sk_common.skc_family
77 #define sk_v6_daddr		__sk_common.skc_v6_daddr
78 #define sk_v6_rcv_saddr		__sk_common.skc_v6_rcv_saddr
79 };
80 
81 struct inet_sock {
82 	struct sock		sk;
83 #define inet_daddr		sk.__sk_common.skc_daddr
84 #define inet_dport		sk.__sk_common.skc_dport
85 	__be32			inet_saddr;
86 	__be16			inet_sport;
87 };
88 
89 struct pt_regs {
90 	long di;
91 };
92 
93 static inline struct inet_sock *inet_sk(const struct sock *sk)
94 {
95 	return (struct inet_sock *)sk;
96 }
97 
98 /* Define various data structures for state recording.
99  * Some fields are not used due to test simplification.
100  */
101 enum tcp_estats_addrtype {
102 	TCP_ESTATS_ADDRTYPE_IPV4 = 1,
103 	TCP_ESTATS_ADDRTYPE_IPV6 = 2
104 };
105 
106 enum tcp_estats_event_type {
107 	TCP_ESTATS_ESTABLISH,
108 	TCP_ESTATS_PERIODIC,
109 	TCP_ESTATS_TIMEOUT,
110 	TCP_ESTATS_RETRANSMIT_TIMEOUT,
111 	TCP_ESTATS_RETRANSMIT_OTHER,
112 	TCP_ESTATS_SYN_RETRANSMIT,
113 	TCP_ESTATS_SYNACK_RETRANSMIT,
114 	TCP_ESTATS_TERM,
115 	TCP_ESTATS_TX_RESET,
116 	TCP_ESTATS_RX_RESET,
117 	TCP_ESTATS_WRITE_TIMEOUT,
118 	TCP_ESTATS_CONN_TIMEOUT,
119 	TCP_ESTATS_ACK_LATENCY,
120 	TCP_ESTATS_NEVENTS,
121 };
122 
123 struct tcp_estats_event {
124 	int pid;
125 	int cpu;
126 	unsigned long ts;
127 	unsigned int magic;
128 	enum tcp_estats_event_type event_type;
129 };
130 
131 /* The below data structure is packed in order for
132  * llvm compiler to generate expected code.
133  */
134 struct tcp_estats_conn_id {
135 	unsigned int localaddressType;
136 	struct {
137 		unsigned char data[16];
138 	} localaddress;
139 	struct {
140 		unsigned char data[16];
141 	} remaddress;
142 	unsigned short    localport;
143 	unsigned short    remport;
144 } __attribute__((__packed__));
145 
146 struct tcp_estats_basic_event {
147 	struct tcp_estats_event event;
148 	struct tcp_estats_conn_id conn_id;
149 };
150 
151 struct {
152 	__uint(type, BPF_MAP_TYPE_HASH);
153 	__uint(max_entries, 1024);
154 	__type(key, __u32);
155 	__type(value, struct tcp_estats_basic_event);
156 } ev_record_map SEC(".maps");
157 
158 struct dummy_tracepoint_args {
159 	unsigned long long pad;
160 	struct sock *sock;
161 };
162 
163 static __always_inline void tcp_estats_ev_init(struct tcp_estats_event *event,
164 					       enum tcp_estats_event_type type)
165 {
166 	event->magic = TCP_ESTATS_MAGIC;
167 	event->ts = bpf_ktime_get_ns();
168 	event->event_type = type;
169 }
170 
171 static __always_inline void unaligned_u32_set(unsigned char *to, __u8 *from)
172 {
173 	to[0] = _(from[0]);
174 	to[1] = _(from[1]);
175 	to[2] = _(from[2]);
176 	to[3] = _(from[3]);
177 }
178 
179 static __always_inline void conn_id_ipv4_init(struct tcp_estats_conn_id *conn_id,
180 					      __be32 *saddr, __be32 *daddr)
181 {
182 	conn_id->localaddressType = TCP_ESTATS_ADDRTYPE_IPV4;
183 
184 	unaligned_u32_set(conn_id->localaddress.data, (__u8 *)saddr);
185 	unaligned_u32_set(conn_id->remaddress.data, (__u8 *)daddr);
186 }
187 
188 static __always_inline void conn_id_ipv6_init(struct tcp_estats_conn_id *conn_id,
189 					      __be32 *saddr, __be32 *daddr)
190 {
191 	conn_id->localaddressType = TCP_ESTATS_ADDRTYPE_IPV6;
192 
193 	unaligned_u32_set(conn_id->localaddress.data, (__u8 *)saddr);
194 	unaligned_u32_set(conn_id->localaddress.data + sizeof(__u32),
195 			  (__u8 *)(saddr + 1));
196 	unaligned_u32_set(conn_id->localaddress.data + sizeof(__u32) * 2,
197 			  (__u8 *)(saddr + 2));
198 	unaligned_u32_set(conn_id->localaddress.data + sizeof(__u32) * 3,
199 			  (__u8 *)(saddr + 3));
200 
201 	unaligned_u32_set(conn_id->remaddress.data,
202 			  (__u8 *)(daddr));
203 	unaligned_u32_set(conn_id->remaddress.data + sizeof(__u32),
204 			  (__u8 *)(daddr + 1));
205 	unaligned_u32_set(conn_id->remaddress.data + sizeof(__u32) * 2,
206 			  (__u8 *)(daddr + 2));
207 	unaligned_u32_set(conn_id->remaddress.data + sizeof(__u32) * 3,
208 			  (__u8 *)(daddr + 3));
209 }
210 
211 static __always_inline void tcp_estats_conn_id_init(struct tcp_estats_conn_id *conn_id,
212 						    struct sock *sk)
213 {
214 	conn_id->localport = _(inet_sk(sk)->inet_sport);
215 	conn_id->remport = _(inet_sk(sk)->inet_dport);
216 
217 	if (_(sk->sk_family) == AF_INET6)
218 		conn_id_ipv6_init(conn_id,
219 				  sk->sk_v6_rcv_saddr.s6_addr32,
220 				  sk->sk_v6_daddr.s6_addr32);
221 	else
222 		conn_id_ipv4_init(conn_id,
223 				  &inet_sk(sk)->inet_saddr,
224 				  &inet_sk(sk)->inet_daddr);
225 }
226 
227 static __always_inline void tcp_estats_init(struct sock *sk,
228 					    struct tcp_estats_event *event,
229 					    struct tcp_estats_conn_id *conn_id,
230 					    enum tcp_estats_event_type type)
231 {
232 	tcp_estats_ev_init(event, type);
233 	tcp_estats_conn_id_init(conn_id, sk);
234 }
235 
236 static __always_inline void send_basic_event(struct sock *sk,
237 					     enum tcp_estats_event_type type)
238 {
239 	struct tcp_estats_basic_event ev;
240 	__u32 key = bpf_get_prandom_u32();
241 
242 	memset(&ev, 0, sizeof(ev));
243 	tcp_estats_init(sk, &ev.event, &ev.conn_id, type);
244 	bpf_map_update_elem(&ev_record_map, &key, &ev, BPF_ANY);
245 }
246 
247 SEC("tp/dummy/tracepoint")
248 int _dummy_tracepoint(struct dummy_tracepoint_args *arg)
249 {
250 	if (!arg->sock)
251 		return 0;
252 
253 	send_basic_event(arg->sock, TCP_ESTATS_TX_RESET);
254 	return 0;
255 }
256 
257 char _license[] SEC("license") = "GPL";
258