lkml.org 
[lkml]   [2022]   [May]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [RFC PATCH -next v2 3/4] arm64/ftrace: support dynamically allocated trampolines
    On Wed, 11 May 2022 11:12:07 -0400
    Steven Rostedt <rostedt@goodmis.org> wrote:

    > On Wed, 11 May 2022 23:34:50 +0900
    > Masami Hiramatsu <mhiramat@kernel.org> wrote:
    >
    > > OK, so fregs::regs will have a subset of pt_regs, and accessibility of
    > > the registers depends on the architecture. If we can have a checker like
    > >
    > > ftrace_regs_exist(fregs, reg_offset)
    >
    > Or something. I'd have to see the use case.
    >
    > >
    > > kprobe on ftrace or fprobe user (BPF) can filter user's requests.
    > > I think I can introduce a flag for kprobes so that user can make a
    > > kprobe handler only using a subset of registers.
    > > Maybe similar filter code is also needed for BPF 'user space' library
    > > because this check must be done when compiling BPF.
    >
    > Is there any other case without full regs that the user would want anything
    > other than the args, stack pointer and instruction pointer?

    For the kprobes APIs/events, yes, it needs to access to the registers
    which is used for local variables when probing inside the function body.
    However at the function entry, I think almost no use case. (BTW, pstate
    is a bit special, that may show the actual processor-level status
    (context), so for the debugging, user might want to read it.)

    Thus the BPF use case via fprobes, I think there is no usecase.
    My concern is that the BPF may allow user program to access any
    field of pt_regs. Thus if the user miss-programmed, they may see
    a wrong value (I guess the fregs is not zero-filled) for unsaved
    registers.

    > That is, have a flag that says "only_args" or something, that says they
    > will only get the registers for arguments, a stack pointer, and the
    > instruction pointer (note, the fregs may not have the instruction pointer
    > as that is passed to the the caller via the "ip" parameter. If the fregs
    > needs that, we can add a "ftrace_regs_set_ip()" before calling the
    > callback registered to the fprobe).

    Yes, that is what I'm thinking. If "only_args" flag is set, BPF runtime
    must check the user program. And if it finds the program access the
    unsaved registers, it should stop executing.

    BTW, "what register is saved" can be determined statically, thus I think
    we just need the offset for checking (for fprobe usecase, since it will
    set the ftrace_ops flag by itself.)


    Thank you,

    --
    Masami Hiramatsu (Google) <mhiramat@kernel.org>

    \
     
     \ /
      Last update: 2022-05-12 14:03    [W:3.428 / U:0.048 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site