| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 1 | /* | 
 | 2 |  *  Kernel Probes (KProbes) | 
 | 3 |  * | 
 | 4 |  * Copyright (C) 2005-2006 Atmel Corporation | 
 | 5 |  * | 
 | 6 |  * Based on arch/ppc64/kernel/kprobes.c | 
 | 7 |  *  Copyright (C) IBM Corporation, 2002, 2004 | 
 | 8 |  * | 
 | 9 |  * This program is free software; you can redistribute it and/or modify | 
 | 10 |  * it under the terms of the GNU General Public License version 2 as | 
 | 11 |  * published by the Free Software Foundation. | 
 | 12 |  */ | 
 | 13 |  | 
 | 14 | #include <linux/kprobes.h> | 
 | 15 | #include <linux/ptrace.h> | 
 | 16 |  | 
 | 17 | #include <asm/cacheflush.h> | 
| Christoph Hellwig | 1eeb66a | 2007-05-08 00:27:03 -0700 | [diff] [blame] | 18 | #include <linux/kdebug.h> | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 19 | #include <asm/ocd.h> | 
 | 20 |  | 
 | 21 | DEFINE_PER_CPU(struct kprobe *, current_kprobe); | 
 | 22 | static unsigned long kprobe_status; | 
 | 23 | static struct pt_regs jprobe_saved_regs; | 
 | 24 |  | 
| Masami Hiramatsu | f438d91 | 2007-10-16 01:27:49 -0700 | [diff] [blame] | 25 | struct kretprobe_blackpoint kretprobe_blacklist[] = {{NULL, NULL}}; | 
 | 26 |  | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 27 | int __kprobes arch_prepare_kprobe(struct kprobe *p) | 
 | 28 | { | 
 | 29 | 	int ret = 0; | 
 | 30 |  | 
 | 31 | 	if ((unsigned long)p->addr & 0x01) { | 
 | 32 | 		printk("Attempt to register kprobe at an unaligned address\n"); | 
 | 33 | 		ret = -EINVAL; | 
 | 34 | 	} | 
 | 35 |  | 
 | 36 | 	/* XXX: Might be a good idea to check if p->addr is a valid | 
 | 37 | 	 * kernel address as well... */ | 
 | 38 |  | 
 | 39 | 	if (!ret) { | 
 | 40 | 		pr_debug("copy kprobe at %p\n", p->addr); | 
 | 41 | 		memcpy(p->ainsn.insn, p->addr, MAX_INSN_SIZE * sizeof(kprobe_opcode_t)); | 
 | 42 | 		p->opcode = *p->addr; | 
 | 43 | 	} | 
 | 44 |  | 
 | 45 | 	return ret; | 
 | 46 | } | 
 | 47 |  | 
 | 48 | void __kprobes arch_arm_kprobe(struct kprobe *p) | 
 | 49 | { | 
 | 50 | 	pr_debug("arming kprobe at %p\n", p->addr); | 
| Haavard Skinnemoen | 13b54a5 | 2007-11-27 13:50:45 +0100 | [diff] [blame] | 51 | 	ocd_enable(NULL); | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 52 | 	*p->addr = BREAKPOINT_INSTRUCTION; | 
 | 53 | 	flush_icache_range((unsigned long)p->addr, | 
 | 54 | 			   (unsigned long)p->addr + sizeof(kprobe_opcode_t)); | 
 | 55 | } | 
 | 56 |  | 
 | 57 | void __kprobes arch_disarm_kprobe(struct kprobe *p) | 
 | 58 | { | 
 | 59 | 	pr_debug("disarming kprobe at %p\n", p->addr); | 
| Haavard Skinnemoen | 13b54a5 | 2007-11-27 13:50:45 +0100 | [diff] [blame] | 60 | 	ocd_disable(NULL); | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 61 | 	*p->addr = p->opcode; | 
 | 62 | 	flush_icache_range((unsigned long)p->addr, | 
 | 63 | 			   (unsigned long)p->addr + sizeof(kprobe_opcode_t)); | 
 | 64 | } | 
 | 65 |  | 
 | 66 | static void __kprobes prepare_singlestep(struct kprobe *p, struct pt_regs *regs) | 
 | 67 | { | 
 | 68 | 	unsigned long dc; | 
 | 69 |  | 
 | 70 | 	pr_debug("preparing to singlestep over %p (PC=%08lx)\n", | 
 | 71 | 		 p->addr, regs->pc); | 
 | 72 |  | 
 | 73 | 	BUG_ON(!(sysreg_read(SR) & SYSREG_BIT(SR_D))); | 
 | 74 |  | 
| Haavard Skinnemoen | 8dfe8f2 | 2007-11-27 13:31:20 +0100 | [diff] [blame] | 75 | 	dc = ocd_read(DC); | 
 | 76 | 	dc |= 1 << OCD_DC_SS_BIT; | 
 | 77 | 	ocd_write(DC, dc); | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 78 |  | 
 | 79 | 	/* | 
 | 80 | 	 * We must run the instruction from its original location | 
 | 81 | 	 * since it may actually reference PC. | 
 | 82 | 	 * | 
 | 83 | 	 * TODO: Do the instruction replacement directly in icache. | 
 | 84 | 	 */ | 
 | 85 | 	*p->addr = p->opcode; | 
 | 86 | 	flush_icache_range((unsigned long)p->addr, | 
 | 87 | 			   (unsigned long)p->addr + sizeof(kprobe_opcode_t)); | 
 | 88 | } | 
 | 89 |  | 
 | 90 | static void __kprobes resume_execution(struct kprobe *p, struct pt_regs *regs) | 
 | 91 | { | 
 | 92 | 	unsigned long dc; | 
 | 93 |  | 
 | 94 | 	pr_debug("resuming execution at PC=%08lx\n", regs->pc); | 
 | 95 |  | 
| Haavard Skinnemoen | 8dfe8f2 | 2007-11-27 13:31:20 +0100 | [diff] [blame] | 96 | 	dc = ocd_read(DC); | 
 | 97 | 	dc &= ~(1 << OCD_DC_SS_BIT); | 
 | 98 | 	ocd_write(DC, dc); | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 99 |  | 
 | 100 | 	*p->addr = BREAKPOINT_INSTRUCTION; | 
 | 101 | 	flush_icache_range((unsigned long)p->addr, | 
 | 102 | 			   (unsigned long)p->addr + sizeof(kprobe_opcode_t)); | 
 | 103 | } | 
 | 104 |  | 
 | 105 | static void __kprobes set_current_kprobe(struct kprobe *p) | 
 | 106 | { | 
 | 107 | 	__get_cpu_var(current_kprobe) = p; | 
 | 108 | } | 
 | 109 |  | 
 | 110 | static int __kprobes kprobe_handler(struct pt_regs *regs) | 
 | 111 | { | 
 | 112 | 	struct kprobe *p; | 
 | 113 | 	void *addr = (void *)regs->pc; | 
 | 114 | 	int ret = 0; | 
 | 115 |  | 
| Haavard Skinnemoen | 6ea850b | 2006-10-24 10:12:40 +0200 | [diff] [blame] | 116 | 	pr_debug("kprobe_handler: kprobe_running=%p\n", | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 117 | 		 kprobe_running()); | 
 | 118 |  | 
 | 119 | 	/* | 
 | 120 | 	 * We don't want to be preempted for the entire | 
 | 121 | 	 * duration of kprobe processing | 
 | 122 | 	 */ | 
 | 123 | 	preempt_disable(); | 
 | 124 |  | 
 | 125 | 	/* Check that we're not recursing */ | 
 | 126 | 	if (kprobe_running()) { | 
 | 127 | 		p = get_kprobe(addr); | 
 | 128 | 		if (p) { | 
 | 129 | 			if (kprobe_status == KPROBE_HIT_SS) { | 
 | 130 | 				printk("FIXME: kprobe hit while single-stepping!\n"); | 
 | 131 | 				goto no_kprobe; | 
 | 132 | 			} | 
 | 133 |  | 
 | 134 | 			printk("FIXME: kprobe hit while handling another kprobe\n"); | 
 | 135 | 			goto no_kprobe; | 
 | 136 | 		} else { | 
 | 137 | 			p = kprobe_running(); | 
 | 138 | 			if (p->break_handler && p->break_handler(p, regs)) | 
 | 139 | 				goto ss_probe; | 
 | 140 | 		} | 
 | 141 | 		/* If it's not ours, can't be delete race, (we hold lock). */ | 
 | 142 | 		goto no_kprobe; | 
 | 143 | 	} | 
 | 144 |  | 
 | 145 | 	p = get_kprobe(addr); | 
 | 146 | 	if (!p) | 
 | 147 | 		goto no_kprobe; | 
 | 148 |  | 
 | 149 | 	kprobe_status = KPROBE_HIT_ACTIVE; | 
 | 150 | 	set_current_kprobe(p); | 
 | 151 | 	if (p->pre_handler && p->pre_handler(p, regs)) | 
 | 152 | 		/* handler has already set things up, so skip ss setup */ | 
 | 153 | 		return 1; | 
 | 154 |  | 
 | 155 | ss_probe: | 
 | 156 | 	prepare_singlestep(p, regs); | 
 | 157 | 	kprobe_status = KPROBE_HIT_SS; | 
 | 158 | 	return 1; | 
 | 159 |  | 
 | 160 | no_kprobe: | 
| Paul Mundt | 4d3eeea | 2006-12-06 20:33:54 -0800 | [diff] [blame] | 161 | 	preempt_enable_no_resched(); | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 162 | 	return ret; | 
 | 163 | } | 
 | 164 |  | 
 | 165 | static int __kprobes post_kprobe_handler(struct pt_regs *regs) | 
 | 166 | { | 
 | 167 | 	struct kprobe *cur = kprobe_running(); | 
 | 168 |  | 
 | 169 | 	pr_debug("post_kprobe_handler, cur=%p\n", cur); | 
 | 170 |  | 
 | 171 | 	if (!cur) | 
 | 172 | 		return 0; | 
 | 173 |  | 
 | 174 | 	if (cur->post_handler) { | 
 | 175 | 		kprobe_status = KPROBE_HIT_SSDONE; | 
 | 176 | 		cur->post_handler(cur, regs, 0); | 
 | 177 | 	} | 
 | 178 |  | 
 | 179 | 	resume_execution(cur, regs); | 
 | 180 | 	reset_current_kprobe(); | 
 | 181 | 	preempt_enable_no_resched(); | 
 | 182 |  | 
 | 183 | 	return 1; | 
 | 184 | } | 
 | 185 |  | 
| Christoph Hellwig | 9caebec | 2007-05-12 17:56:11 +0200 | [diff] [blame] | 186 | int __kprobes kprobe_fault_handler(struct pt_regs *regs, int trapnr) | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 187 | { | 
 | 188 | 	struct kprobe *cur = kprobe_running(); | 
 | 189 |  | 
 | 190 | 	pr_debug("kprobe_fault_handler: trapnr=%d\n", trapnr); | 
 | 191 |  | 
 | 192 | 	if (cur->fault_handler && cur->fault_handler(cur, regs, trapnr)) | 
 | 193 | 		return 1; | 
 | 194 |  | 
 | 195 | 	if (kprobe_status & KPROBE_HIT_SS) { | 
 | 196 | 		resume_execution(cur, regs); | 
 | 197 | 		preempt_enable_no_resched(); | 
 | 198 | 	} | 
 | 199 | 	return 0; | 
 | 200 | } | 
 | 201 |  | 
 | 202 | /* | 
 | 203 |  * Wrapper routine to for handling exceptions. | 
 | 204 |  */ | 
 | 205 | int __kprobes kprobe_exceptions_notify(struct notifier_block *self, | 
 | 206 | 				       unsigned long val, void *data) | 
 | 207 | { | 
 | 208 | 	struct die_args *args = (struct die_args *)data; | 
 | 209 | 	int ret = NOTIFY_DONE; | 
 | 210 |  | 
 | 211 | 	pr_debug("kprobe_exceptions_notify: val=%lu, data=%p\n", | 
 | 212 | 		 val, data); | 
 | 213 |  | 
 | 214 | 	switch (val) { | 
 | 215 | 	case DIE_BREAKPOINT: | 
 | 216 | 		if (kprobe_handler(args->regs)) | 
 | 217 | 			ret = NOTIFY_STOP; | 
 | 218 | 		break; | 
 | 219 | 	case DIE_SSTEP: | 
 | 220 | 		if (post_kprobe_handler(args->regs)) | 
 | 221 | 			ret = NOTIFY_STOP; | 
 | 222 | 		break; | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 223 | 	default: | 
 | 224 | 		break; | 
 | 225 | 	} | 
 | 226 |  | 
 | 227 | 	return ret; | 
 | 228 | } | 
 | 229 |  | 
 | 230 | int __kprobes setjmp_pre_handler(struct kprobe *p, struct pt_regs *regs) | 
 | 231 | { | 
 | 232 | 	struct jprobe *jp = container_of(p, struct jprobe, kp); | 
 | 233 |  | 
 | 234 | 	memcpy(&jprobe_saved_regs, regs, sizeof(struct pt_regs)); | 
 | 235 |  | 
 | 236 | 	/* | 
 | 237 | 	 * TODO: We should probably save some of the stack here as | 
 | 238 | 	 * well, since gcc may pass arguments on the stack for certain | 
 | 239 | 	 * functions (lots of arguments, large aggregates, varargs) | 
 | 240 | 	 */ | 
 | 241 |  | 
 | 242 | 	/* setup return addr to the jprobe handler routine */ | 
 | 243 | 	regs->pc = (unsigned long)jp->entry; | 
 | 244 | 	return 1; | 
 | 245 | } | 
 | 246 |  | 
 | 247 | void __kprobes jprobe_return(void) | 
 | 248 | { | 
 | 249 | 	asm volatile("breakpoint" ::: "memory"); | 
 | 250 | } | 
 | 251 |  | 
 | 252 | int __kprobes longjmp_break_handler(struct kprobe *p, struct pt_regs *regs) | 
 | 253 | { | 
 | 254 | 	/* | 
 | 255 | 	 * FIXME - we should ideally be validating that we got here 'cos | 
 | 256 | 	 * of the "trap" in jprobe_return() above, before restoring the | 
 | 257 | 	 * saved regs... | 
 | 258 | 	 */ | 
 | 259 | 	memcpy(regs, &jprobe_saved_regs, sizeof(struct pt_regs)); | 
 | 260 | 	return 1; | 
 | 261 | } | 
 | 262 |  | 
 | 263 | int __init arch_init_kprobes(void) | 
 | 264 | { | 
| Haavard Skinnemoen | 5f97f7f | 2006-09-25 23:32:13 -0700 | [diff] [blame] | 265 | 	/* TODO: Register kretprobe trampoline */ | 
 | 266 | 	return 0; | 
 | 267 | } |