1// SPDX-License-Identifier: GPL-2.0
 2// Copyright (c) 2017 Facebook
 3
 4#include <linux/ptrace.h>
 5#include <linux/bpf.h>
 6#include "bpf_helpers.h"
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 7
 8struct {
 9	__uint(type, BPF_MAP_TYPE_ARRAY);
10	__uint(max_entries, 4);
11	__type(key, int);
12	__type(value, int);
13} results_map SEC(".maps");
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
14
15SEC("kprobe/sys_nanosleep")
16int handle_sys_nanosleep_entry(struct pt_regs *ctx)
17{
18	const int key = 0, value = 1;
 
 
19
20	bpf_map_update_elem(&results_map, &key, &value, 0);
 
 
 
 
21	return 0;
22}
23
24SEC("kretprobe/sys_nanosleep")
25int handle_sys_getpid_return(struct pt_regs *ctx)
26{
27	const int key = 1, value = 2;
 
 
 
 
 
 
 
28
29	bpf_map_update_elem(&results_map, &key, &value, 0);
 
 
 
30	return 0;
31}
32
33SEC("uprobe/trigger_func")
34int handle_uprobe_entry(struct pt_regs *ctx)
 
 
 
 
 
 
 
 
35{
36	const int key = 2, value = 3;
 
 
 
37
38	bpf_map_update_elem(&results_map, &key, &value, 0);
 
 
 
 
 
 
 
39	return 0;
40}
41
42SEC("uretprobe/trigger_func")
43int handle_uprobe_return(struct pt_regs *ctx)
44{
45	const int key = 3, value = 4;
 
 
 
46
47	bpf_map_update_elem(&results_map, &key, &value, 0);
 
 
 
48	return 0;
49}
50
 
51char _license[] SEC("license") = "GPL";
52__u32 _version SEC("version") = 1;

  1// SPDX-License-Identifier: GPL-2.0
  2// Copyright (c) 2017 Facebook
  3
  4#include "vmlinux.h"
  5#include <bpf/bpf_helpers.h>
  6#include <bpf/bpf_tracing.h>
  7#include <bpf/bpf_core_read.h>
  8#include "bpf_misc.h"
  9
 10int kprobe2_res = 0;
 11int kretprobe2_res = 0;
 12int uprobe_byname_res = 0;
 13int uretprobe_byname_res = 0;
 14int uprobe_byname2_res = 0;
 15int uretprobe_byname2_res = 0;
 16int uprobe_byname3_sleepable_res = 0;
 17int uprobe_byname3_res = 0;
 18int uretprobe_byname3_sleepable_res = 0;
 19int uretprobe_byname3_res = 0;
 20void *user_ptr = 0;
 21
 22SEC("ksyscall/nanosleep")
 23int BPF_KSYSCALL(handle_kprobe_auto, struct __kernel_timespec *req, struct __kernel_timespec *rem)
 24{
 25	kprobe2_res = 11;
 26	return 0;
 27}
 28
 29SEC("kretsyscall/nanosleep")
 30int BPF_KRETPROBE(handle_kretprobe_auto, int ret)
 31{
 32	kretprobe2_res = 22;
 33	return ret;
 34}
 35
 36SEC("uprobe")
 37int handle_uprobe_ref_ctr(struct pt_regs *ctx)
 38{
 39	return 0;
 40}
 41
 42SEC("uretprobe")
 43int handle_uretprobe_ref_ctr(struct pt_regs *ctx)
 44{
 45	return 0;
 46}
 47
 48SEC("uprobe")
 49int handle_uprobe_byname(struct pt_regs *ctx)
 50{
 51	uprobe_byname_res = 5;
 52	return 0;
 53}
 54
 55/* use auto-attach format for section definition. */
 56SEC("uretprobe//proc/self/exe:trigger_func2")
 57int handle_uretprobe_byname(struct pt_regs *ctx)
 58{
 59	uretprobe_byname_res = 6;
 60	return 0;
 61}
 62
 63SEC("uprobe")
 64int BPF_UPROBE(handle_uprobe_byname2, const char *pathname, const char *mode)
 65{
 66	char mode_buf[2] = {};
 67
 68	/* verify fopen mode */
 69	bpf_probe_read_user(mode_buf, sizeof(mode_buf), mode);
 70	if (mode_buf[0] == 'r' && mode_buf[1] == 0)
 71		uprobe_byname2_res = 7;
 72	return 0;
 73}
 74
 75SEC("uretprobe")
 76int BPF_URETPROBE(handle_uretprobe_byname2, void *ret)
 77{
 78	uretprobe_byname2_res = 8;
 79	return 0;
 80}
 81
 82static __always_inline bool verify_sleepable_user_copy(void)
 83{
 84	char data[9];
 85
 86	bpf_copy_from_user(data, sizeof(data), user_ptr);
 87	return bpf_strncmp(data, sizeof(data), "test_data") == 0;
 88}
 89
 90SEC("uprobe.s//proc/self/exe:trigger_func3")
 91int handle_uprobe_byname3_sleepable(struct pt_regs *ctx)
 92{
 93	if (verify_sleepable_user_copy())
 94		uprobe_byname3_sleepable_res = 9;
 95	return 0;
 96}
 97
 98/**
 99 * same target as the uprobe.s above to force sleepable and non-sleepable
100 * programs in the same bpf_prog_array
101 */
102SEC("uprobe//proc/self/exe:trigger_func3")
103int handle_uprobe_byname3(struct pt_regs *ctx)
104{
105	uprobe_byname3_res = 10;
106	return 0;
107}
108
109SEC("uretprobe.s//proc/self/exe:trigger_func3")
110int handle_uretprobe_byname3_sleepable(struct pt_regs *ctx)
111{
112	if (verify_sleepable_user_copy())
113		uretprobe_byname3_sleepable_res = 11;
114	return 0;
115}
116
117SEC("uretprobe//proc/self/exe:trigger_func3")
118int handle_uretprobe_byname3(struct pt_regs *ctx)
119{
120	uretprobe_byname3_res = 12;
121	return 0;
122}
123
124
125char _license[] SEC("license") = "GPL";