From patchwork Mon Jun 5 07:40:24 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Puranjay Mohan X-Patchwork-Id: 13267035 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 80B8DC7EE24 for ; Mon, 5 Jun 2023 07:41:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=5W5bQ3PeG2Su7MHpzhiTdy3E5tkNbc06ZI5Dx1j+ahU=; b=pM/JNXtQxeusbq C+vxmwP3wkB6JpjF/itHCAquAL0jJVF8eAZoUW4IZXMo5qOULxyu0/4XEyxpnfOKT8DAQ0PJUyt7Y fK3/mTmgdrx0JbdTtaqWbl/XpfEf4OIf/sYZETKIBzQ47j4LPSZXFmieiSkG/wf4cFdYhJDj/AH4h wiPhSSANH+97mMsVOkJCa10fh9+mOEc3wJgcvaxF/3mlcrUqkWZXoY5+jYcBRVj4OMIdtDghbM8Mz 2frQTtPyDAQ2oJ9WnYDnpcYNdvAem6KzMal7utMRnsrHeaJmDYln4im0md5Bl2Bknvwm4hGe6ZFqs z83VTPDVg3tilgmrVAzQ==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.96 #2 (Red Hat Linux)) id 1q64pQ-00Ea4m-0k; Mon, 05 Jun 2023 07:40:36 +0000 Received: from mail-wr1-x433.google.com ([2a00:1450:4864:20::433]) by bombadil.infradead.org with esmtps (Exim 4.96 #2 (Red Hat Linux)) id 1q64pL-00Ea0b-0k for linux-arm-kernel@lists.infradead.org; Mon, 05 Jun 2023 07:40:33 +0000 Received: by mail-wr1-x433.google.com with SMTP id ffacd0b85a97d-30ad8f33f1aso3975386f8f.0 for ; Mon, 05 Jun 2023 00:40:28 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1685950827; x=1688542827; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=U7uLu0MKoT2YcSWwQmWFrEpyEOBt5snH1w0w+98A6AE=; b=Fd+8ZiArtALO8L+RipgFoGryrvHn7aJdM+c71cEUaFe8WfAEZ6lgy6p4vBq2GEJ+Rr HiP7oQvJecxPZYwzaIuV2kqp/4UpNHlwwM/R1a1bcPALoJBjY3mZPzFOrvQE8AI0DK+T pQe9AfMue8cdVvJFzyaVUQS/0f/67AFrUeahlUbZ8ke6675YAEJY8rmrQN9YTf/kD79D L800uulHIHdoJE3F33NV+yY9eaWmMlaBLTkWbspCOPf3OFtxl2OwIBmBfgFVTCF1GWdw +6VgCl58xSBkJl87ubVaCA5rQAL085z8Vi3CbKQtK4KYdbv5XFe2mr/MXZaE8B3hVoSe YOSg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1685950827; x=1688542827; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=U7uLu0MKoT2YcSWwQmWFrEpyEOBt5snH1w0w+98A6AE=; b=A6EXTKnjTdWbTILxCYV2sPMwMWBUXOIRvQO3f153VNNDbOYvzmZaOMV35ROSlK0H/3 UWNav+i9iKBtc1RxnA51Ng5ocAEjsU7VFOF4bGnEs91cUvrP4wX5OgREvzp09yGZFbKx 172pfm3Sr7cZhbIjHwKeCL4hpDsJdWGiAeokyhrn4bvI8cxJHYoskk0XzynDqdqC2CoF U2NfYopS2lftjz3GJc6v1A5gQKWSx6Bb4G3qhGy4g3SF1+ufAQz3jwAICIDtHCG2ZI2k iuauNCjgEMl58MbgeUX3boxfKqJMXKom5DP0G7zOOhws93WPnEPsvdgTur14CHolIhBX Ii3w== X-Gm-Message-State: AC+VfDzBJjIpC/CyD5zrxEyUI7yYQEdMS6sVIoDd1fCoOLr8Vepgcee4 byfWYCKI+P8GiQ3OUjJIBD0= X-Google-Smtp-Source: ACHHUZ5Db5vZjZItfR09bz49VUXwkGlA7pPtWGZM69tBAdXIUMUY/apMk1UlRmXTQKopJ/U4OGhBvg== X-Received: by 2002:a05:6000:194e:b0:307:c471:7b38 with SMTP id e14-20020a056000194e00b00307c4717b38mr4119865wry.59.1685950827352; Mon, 05 Jun 2023 00:40:27 -0700 (PDT) Received: from ip-172-31-22-112.eu-west-1.compute.internal (ec2-34-244-49-215.eu-west-1.compute.amazonaws.com. [34.244.49.215]) by smtp.gmail.com with ESMTPSA id c18-20020adfed92000000b0030ae499da59sm8882103wro.111.2023.06.05.00.40.26 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 05 Jun 2023 00:40:27 -0700 (PDT) From: Puranjay Mohan To: ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, martin.lau@linux.dev, song@kernel.org, catalin.marinas@arm.com, mark.rutland@arm.com, bpf@vger.kernel.org, kpsingh@kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Cc: puranjay12@gmail.com Subject: [PATCH bpf-next 3/3] bpf, arm64: use bpf_jit_binary_pack_alloc Date: Mon, 5 Jun 2023 07:40:24 +0000 Message-Id: <20230605074024.1055863-4-puranjay12@gmail.com> X-Mailer: git-send-email 2.40.1 In-Reply-To: <20230605074024.1055863-1-puranjay12@gmail.com> References: <20230605074024.1055863-1-puranjay12@gmail.com> MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20230605_004031_274681_FA45F530 X-CRM114-Status: GOOD ( 24.89 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Use bpf_jit_binary_pack_alloc for memory management of JIT binaries in ARM64 BPF JIT. The bpf_jit_binary_pack_alloc creates a pair of RW and RX buffers. The JIT writes the program into the RW buffer. When the JIT is done, the program is copied to the final ROX buffer with bpf_jit_binary_pack_finalize. Implement bpf_arch_text_copy() and bpf_arch_text_invalidate() for ARM64 JIT as these functions are required by bpf_jit_binary_pack allocator. Signed-off-by: Puranjay Mohan --- arch/arm64/net/bpf_jit_comp.c | 119 +++++++++++++++++++++++++++++----- 1 file changed, 102 insertions(+), 17 deletions(-) diff --git a/arch/arm64/net/bpf_jit_comp.c b/arch/arm64/net/bpf_jit_comp.c index 145b540ec34f..ee9414cadea8 100644 --- a/arch/arm64/net/bpf_jit_comp.c +++ b/arch/arm64/net/bpf_jit_comp.c @@ -76,6 +76,7 @@ struct jit_ctx { int *offset; int exentry_idx; __le32 *image; + __le32 *ro_image; u32 stack_size; int fpb_offset; }; @@ -205,6 +206,20 @@ static void jit_fill_hole(void *area, unsigned int size) *ptr++ = cpu_to_le32(AARCH64_BREAK_FAULT); } +int bpf_arch_text_invalidate(void *dst, size_t len) +{ + __le32 *ptr; + int ret; + + for (ptr = dst; len >= sizeof(u32); len -= sizeof(u32)) { + ret = aarch64_insn_patch_text_nosync(ptr++, AARCH64_BREAK_FAULT); + if (ret) + return ret; + } + + return 0; +} + static inline int epilogue_offset(const struct jit_ctx *ctx) { int to = ctx->epilogue_offset; @@ -701,7 +716,8 @@ static int add_exception_handler(const struct bpf_insn *insn, struct jit_ctx *ctx, int dst_reg) { - off_t offset; + off_t ins_offset; + off_t fixup_offset; unsigned long pc; struct exception_table_entry *ex; @@ -717,12 +733,11 @@ static int add_exception_handler(const struct bpf_insn *insn, return -EINVAL; ex = &ctx->prog->aux->extable[ctx->exentry_idx]; - pc = (unsigned long)&ctx->image[ctx->idx - 1]; + pc = (unsigned long)&ctx->ro_image[ctx->idx - 1]; - offset = pc - (long)&ex->insn; - if (WARN_ON_ONCE(offset >= 0 || offset < INT_MIN)) + ins_offset = pc - (long)&ex->insn; + if (WARN_ON_ONCE(ins_offset >= 0 || ins_offset < INT_MIN)) return -ERANGE; - ex->insn = offset; /* * Since the extable follows the program, the fixup offset is always @@ -732,11 +747,20 @@ static int add_exception_handler(const struct bpf_insn *insn, * modifying the upper bits because the table is already sorted, and * isn't part of the main exception table. */ - offset = (long)&ex->fixup - (pc + AARCH64_INSN_SIZE); - if (!FIELD_FIT(BPF_FIXUP_OFFSET_MASK, offset)) + fixup_offset = (long)&ex->fixup - (pc + AARCH64_INSN_SIZE); + if (!FIELD_FIT(BPF_FIXUP_OFFSET_MASK, fixup_offset)) return -ERANGE; - ex->fixup = FIELD_PREP(BPF_FIXUP_OFFSET_MASK, offset) | + /* + * The offsets above have been calculated using the RO+X buffer but we + * need to use the R/W buffer for writes. + * switch ex to rw buffer for writing. + */ + ex = (void *)ctx->image + ((void *)ex - (void *)ctx->ro_image); + + ex->insn = ins_offset; + + ex->fixup = FIELD_PREP(BPF_FIXUP_OFFSET_MASK, fixup_offset) | FIELD_PREP(BPF_FIXUP_REG_MASK, dst_reg); ex->type = EX_TYPE_BPF; @@ -1446,6 +1470,7 @@ static inline void bpf_flush_icache(void *start, void *end) struct arm64_jit_data { struct bpf_binary_header *header; + struct bpf_binary_header *rw_header; u8 *image; struct jit_ctx ctx; }; @@ -1454,6 +1479,7 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) { int image_size, prog_size, extable_size, extable_align, extable_offset; struct bpf_prog *tmp, *orig_prog = prog; + struct bpf_binary_header *rw_header; struct bpf_binary_header *header; struct arm64_jit_data *jit_data; bool was_classic = bpf_prog_was_classic(prog); @@ -1461,6 +1487,7 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) bool extra_pass = false; struct jit_ctx ctx; u8 *image_ptr; + u8 *rw_image_ptr; if (!prog->jit_requested) return orig_prog; @@ -1489,6 +1516,9 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) ctx = jit_data->ctx; image_ptr = jit_data->image; header = jit_data->header; + rw_header = jit_data->rw_header; + rw_image_ptr = (void *)rw_header + ((void *)image_ptr + - (void *)header); extra_pass = true; prog_size = sizeof(u32) * ctx.idx; goto skip_init_ctx; @@ -1533,8 +1563,9 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) /* also allocate space for plt target */ extable_offset = round_up(prog_size + PLT_TARGET_SIZE, extable_align); image_size = extable_offset + extable_size; - header = bpf_jit_binary_alloc(image_size, &image_ptr, - sizeof(u32), jit_fill_hole); + header = bpf_jit_binary_pack_alloc(image_size, &image_ptr, sizeof(u32), + &rw_header, &rw_image_ptr, + jit_fill_hole); if (header == NULL) { prog = orig_prog; goto out_off; @@ -1542,19 +1573,24 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) /* 2. Now, the actual pass. */ - ctx.image = (__le32 *)image_ptr; if (extable_size) prog->aux->extable = (void *)image_ptr + extable_offset; skip_init_ctx: + /* + * Use the rw_image_ptr for writing the JITed instructions. + * Save the read only image_ptr in ctx because it will be used to + * calculate offsets for filling out the exception table later. + */ + ctx.image = (__le32 *)rw_image_ptr; + ctx.ro_image = (__le32 *)image_ptr; ctx.idx = 0; ctx.exentry_idx = 0; build_prologue(&ctx, was_classic); if (build_body(&ctx, extra_pass)) { - bpf_jit_binary_free(header); prog = orig_prog; - goto out_off; + goto out_free_hdr; } build_epilogue(&ctx); @@ -1562,32 +1598,42 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) /* 3. Extra pass to validate JITed code. */ if (validate_ctx(&ctx)) { - bpf_jit_binary_free(header); prog = orig_prog; - goto out_off; + goto out_free_hdr; } /* And we're done. */ if (bpf_jit_enable > 1) bpf_jit_dump(prog->len, prog_size, 2, ctx.image); + /* + * As the JITed instructions have been written to the R/W buffer, we can + * move ctx.image back to the RO+X buffer from where the BPF program + * will run. bpf_jit_binary_pack_finalize() will copy the instructions + * from the R/W buffer to the RO+X buffer. + */ + ctx.image = (__le32 *)image_ptr; bpf_flush_icache(header, ctx.image + ctx.idx); if (!prog->is_func || extra_pass) { if (extra_pass && ctx.idx != jit_data->ctx.idx) { pr_err_once("multi-func JIT bug %d != %d\n", ctx.idx, jit_data->ctx.idx); - bpf_jit_binary_free(header); prog->bpf_func = NULL; prog->jited = 0; prog->jited_len = 0; + goto out_free_hdr; + } + if (WARN_ON(bpf_jit_binary_pack_finalize(prog, header, + rw_header))) { + header = NULL; goto out_off; } - bpf_jit_binary_lock_ro(header); } else { jit_data->ctx = ctx; jit_data->image = image_ptr; jit_data->header = header; + jit_data->rw_header = rw_header; } prog->bpf_func = (void *)ctx.image; prog->jited = 1; @@ -1610,6 +1656,14 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) bpf_jit_prog_release_other(prog, prog == orig_prog ? tmp : orig_prog); return prog; + +out_free_hdr: + if (header) { + bpf_arch_text_copy(&header->size, &rw_header->size, + sizeof(rw_header->size)); + bpf_jit_binary_pack_free(header, rw_header); + } + goto out_off; } bool bpf_jit_supports_kfunc_call(void) @@ -1617,6 +1671,13 @@ bool bpf_jit_supports_kfunc_call(void) return true; } +void *bpf_arch_text_copy(void *dst, void *src, size_t len) +{ + if (aarch64_insn_copy(dst, src, len) == NULL) + return ERR_PTR(-EINVAL); + return dst; +} + u64 bpf_jit_alloc_exec_limit(void) { return VMALLOC_END - VMALLOC_START; @@ -2221,3 +2282,27 @@ int bpf_arch_text_poke(void *ip, enum bpf_text_poke_type poke_type, return ret; } + +void bpf_jit_free(struct bpf_prog *prog) +{ + if (prog->jited) { + struct arm64_jit_data *jit_data = prog->aux->jit_data; + struct bpf_binary_header *hdr; + + /* + * If we fail the final pass of JIT (from jit_subprogs), + * the program may not be finalized yet. Call finalize here + * before freeing it. + */ + if (jit_data) { + bpf_jit_binary_pack_finalize(prog, jit_data->header, + jit_data->rw_header); + kfree(jit_data); + } + hdr = bpf_jit_binary_pack_hdr(prog); + bpf_jit_binary_pack_free(hdr, NULL); + WARN_ON_ONCE(!bpf_prog_kallsyms_verify_off(prog)); + } + + bpf_prog_unlock_free(prog); +}