1 // SPDX-License-Identifier: GPL-2.0
2 /* Copyright (c) 2020 Facebook */
3
4 #include "vmlinux.h"
5 #include <asm/unistd.h>
6 #include <bpf/bpf_helpers.h>
7 #include <bpf/bpf_tracing.h>
8 #include <bpf/bpf_core_read.h>
9
10 #define MY_TV_NSEC 1337
11
12 bool tp_called = false;
13 bool raw_tp_called = false;
14 bool tp_btf_called = false;
15 bool kprobe_called = false;
16 bool fentry_called = false;
17
18 SEC("tp/syscalls/sys_enter_nanosleep")
handle__tp(struct trace_event_raw_sys_enter * args)19 int handle__tp(struct trace_event_raw_sys_enter *args)
20 {
21 struct __kernel_timespec *ts;
22 long tv_nsec;
23
24 if (args->id != __NR_nanosleep)
25 return 0;
26
27 ts = (void *)args->args[0];
28 if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
29 tv_nsec != MY_TV_NSEC)
30 return 0;
31
32 tp_called = true;
33 return 0;
34 }
35
36 SEC("raw_tp/sys_enter")
BPF_PROG(handle__raw_tp,struct pt_regs * regs,long id)37 int BPF_PROG(handle__raw_tp, struct pt_regs *regs, long id)
38 {
39 struct __kernel_timespec *ts;
40 long tv_nsec;
41
42 if (id != __NR_nanosleep)
43 return 0;
44
45 ts = (void *)PT_REGS_PARM1_CORE_SYSCALL(regs);
46 if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
47 tv_nsec != MY_TV_NSEC)
48 return 0;
49
50 raw_tp_called = true;
51 return 0;
52 }
53
54 SEC("tp_btf/sys_enter")
BPF_PROG(handle__tp_btf,struct pt_regs * regs,long id)55 int BPF_PROG(handle__tp_btf, struct pt_regs *regs, long id)
56 {
57 struct __kernel_timespec *ts;
58 long tv_nsec;
59
60 if (id != __NR_nanosleep)
61 return 0;
62
63 ts = (void *)PT_REGS_PARM1_CORE_SYSCALL(regs);
64 if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
65 tv_nsec != MY_TV_NSEC)
66 return 0;
67
68 tp_btf_called = true;
69 return 0;
70 }
71
72 SEC("kprobe/hrtimer_start_range_ns")
BPF_KPROBE(handle__kprobe,struct hrtimer * timer,ktime_t tim,u64 delta_ns,const enum hrtimer_mode mode)73 int BPF_KPROBE(handle__kprobe, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
74 const enum hrtimer_mode mode)
75 {
76 if (tim == MY_TV_NSEC)
77 kprobe_called = true;
78 return 0;
79 }
80
81 SEC("fentry/hrtimer_start_range_ns")
BPF_PROG(handle__fentry,struct hrtimer * timer,ktime_t tim,u64 delta_ns,const enum hrtimer_mode mode)82 int BPF_PROG(handle__fentry, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
83 const enum hrtimer_mode mode)
84 {
85 if (tim == MY_TV_NSEC)
86 fentry_called = true;
87 return 0;
88 }
89
90 char _license[] SEC("license") = "GPL";
91