1// SPDX-License-Identifier: GPL-2.0
 2/* Copyright (c) 2020 Facebook */
 3
 4#include "vmlinux.h"
 5#include <asm/unistd.h>
 6#include <bpf/bpf_helpers.h>
 7#include <bpf/bpf_tracing.h>
 8#include <bpf/bpf_core_read.h>
 9
10#define MY_TV_NSEC 1337
11
12bool tp_called = false;
13bool raw_tp_called = false;
14bool tp_btf_called = false;
15bool kprobe_called = false;
16bool fentry_called = false;
17
18SEC("tp/syscalls/sys_enter_nanosleep")
19int handle__tp(struct syscall_trace_enter *args)
20{
21	struct __kernel_timespec *ts;
22	long tv_nsec;
23
24	if (args->nr != __NR_nanosleep)
25		return 0;
26
27	ts = (void *)args->args[0];
28	if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
29	    tv_nsec != MY_TV_NSEC)
30		return 0;
31
32	tp_called = true;
33	return 0;
34}
35
36SEC("raw_tp/sys_enter")
37int BPF_PROG(handle__raw_tp, struct pt_regs *regs, long id)
38{
39	struct __kernel_timespec *ts;
40	long tv_nsec;
41
42	if (id != __NR_nanosleep)
43		return 0;
44
45	ts = (void *)PT_REGS_PARM1_CORE_SYSCALL(regs);
46	if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
47	    tv_nsec != MY_TV_NSEC)
48		return 0;
49
50	raw_tp_called = true;
51	return 0;
52}
53
54SEC("tp_btf/sys_enter")
55int BPF_PROG(handle__tp_btf, struct pt_regs *regs, long id)
56{
57	struct __kernel_timespec *ts;
58	long tv_nsec;
59
60	if (id != __NR_nanosleep)
61		return 0;
62
63	ts = (void *)PT_REGS_PARM1_CORE_SYSCALL(regs);
64	if (bpf_probe_read_user(&tv_nsec, sizeof(ts->tv_nsec), &ts->tv_nsec) ||
65	    tv_nsec != MY_TV_NSEC)
66		return 0;
67
68	tp_btf_called = true;
69	return 0;
70}
71
72SEC("kprobe/hrtimer_start_range_ns")
73int BPF_KPROBE(handle__kprobe, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
74	       const enum hrtimer_mode mode)
75{
76	if (tim == MY_TV_NSEC)
77		kprobe_called = true;
78	return 0;
79}
80
81SEC("fentry/hrtimer_start_range_ns")
82int BPF_PROG(handle__fentry, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
83	     const enum hrtimer_mode mode)
84{
85	if (tim == MY_TV_NSEC)
86		fentry_called = true;
87	return 0;
88}
89
90char _license[] SEC("license") = "GPL";

 1// SPDX-License-Identifier: GPL-2.0
 2/* Copyright (c) 2020 Facebook */
 3
 4#include "vmlinux.h"
 5#include <asm/unistd.h>
 6#include <bpf/bpf_helpers.h>
 7#include <bpf/bpf_tracing.h>
 8#include <bpf/bpf_core_read.h>
 9
10#define MY_TV_NSEC 1337
11
12bool tp_called = false;
13bool raw_tp_called = false;
14bool tp_btf_called = false;
15bool kprobe_called = false;
16bool fentry_called = false;
17
18SEC("tp/syscalls/sys_enter_nanosleep")
19int handle__tp(struct trace_event_raw_sys_enter *args)
20{
21	struct __kernel_timespec *ts;
 
22
23	if (args->id != __NR_nanosleep)
24		return 0;
25
26	ts = (void *)args->args[0];
27	if (BPF_CORE_READ(ts, tv_nsec) != MY_TV_NSEC)
 
28		return 0;
29
30	tp_called = true;
31	return 0;
32}
33
34SEC("raw_tp/sys_enter")
35int BPF_PROG(handle__raw_tp, struct pt_regs *regs, long id)
36{
37	struct __kernel_timespec *ts;
 
38
39	if (id != __NR_nanosleep)
40		return 0;
41
42	ts = (void *)PT_REGS_PARM1_CORE(regs);
43	if (BPF_CORE_READ(ts, tv_nsec) != MY_TV_NSEC)
 
44		return 0;
45
46	raw_tp_called = true;
47	return 0;
48}
49
50SEC("tp_btf/sys_enter")
51int BPF_PROG(handle__tp_btf, struct pt_regs *regs, long id)
52{
53	struct __kernel_timespec *ts;
 
54
55	if (id != __NR_nanosleep)
56		return 0;
57
58	ts = (void *)PT_REGS_PARM1_CORE(regs);
59	if (BPF_CORE_READ(ts, tv_nsec) != MY_TV_NSEC)
 
60		return 0;
61
62	tp_btf_called = true;
63	return 0;
64}
65
66SEC("kprobe/hrtimer_start_range_ns")
67int BPF_KPROBE(handle__kprobe, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
68	       const enum hrtimer_mode mode)
69{
70	if (tim == MY_TV_NSEC)
71		kprobe_called = true;
72	return 0;
73}
74
75SEC("fentry/hrtimer_start_range_ns")
76int BPF_PROG(handle__fentry, struct hrtimer *timer, ktime_t tim, u64 delta_ns,
77	     const enum hrtimer_mode mode)
78{
79	if (tim == MY_TV_NSEC)
80		fentry_called = true;
81	return 0;
82}
83
84char _license[] SEC("license") = "GPL";