From patchwork Mon Jun 26 08:58:09 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Puranjay Mohan X-Patchwork-Id: 13292532 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 7C33BEB64DC for ; Mon, 26 Jun 2023 08:58:56 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=sjiwsr3rufJH3dUcCnqagrGRKDQ0J31wgND+dNkvO48=; b=y0wyCzkq5KwqPK y3dHsLMplEYKQlkZ9d+5/3lOQt3KtyQ6bSTRXOnP/t84m9ztuZ4nQylknVu6MI6eKb5dw+4MfuZuX cfWh0axJU7CkLAPIOjpkyzvRu3TDzjS3XFGX+ZXKa/Q0giDeueKPhoMoB1i+0kLOG4bf5dESJSPqE 0Chslyk/cpuklYgdK3JGDZsAGF1buBH5xVpvzg7Q+G3vu0M9mQJxQakXzUtfrgcL7rIE/wI/bqFWM Tmz5XRwQrSCNtifGA7QtQ++KrmFyZifnMEhCq8w0E94mflczvZStT7LXhB6aPeK8dDk7Jk/CFTWiT nFwdmfG8JHYRmH6DZkzw==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.96 #2 (Red Hat Linux)) id 1qDi38-009gPs-1T; Mon, 26 Jun 2023 08:58:18 +0000 Received: from mail-wr1-x42e.google.com ([2a00:1450:4864:20::42e]) by bombadil.infradead.org with esmtps (Exim 4.96 #2 (Red Hat Linux)) id 1qDi35-009gON-1M for linux-arm-kernel@lists.infradead.org; Mon, 26 Jun 2023 08:58:16 +0000 Received: by mail-wr1-x42e.google.com with SMTP id ffacd0b85a97d-311099fac92so4245024f8f.0 for ; Mon, 26 Jun 2023 01:58:14 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1687769893; x=1690361893; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=VXoqBJ5SjwaazwPupYLAmCHlcx6sG+m6SwqgWeDfHJg=; b=g4dDFsuLrP/kq6wjidgxCVSZBWexLlLfzozRLHF4rlKHxPrUkNxO67SrjoZCrESpdQ aJ2Cmd5YUbLlw8pzUsKV6d7mq6F1Ezl61pbT7nLBjfXhrL7kiOO05uDTYYlz5VKc6TKz MIjAcqUe2Qlu1VdxLUEhJ2h7eT1qJwLnfYQoUR00XBFUGz6TMBWsQ88/JJWSYusRGkB4 +nFCOiA2zsix3xJzeq14eqep7tG8m21EwDS4MGMT272sTncmfoSbKv6FAjcrd9TK2hYB cU+gfQIrPje7lhB+A4xggWp9smrQ992zaJaUmEBTjsCfRhJayX+epU8BfX6jsLbdC2VW LPFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687769893; x=1690361893; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=VXoqBJ5SjwaazwPupYLAmCHlcx6sG+m6SwqgWeDfHJg=; b=LUtgXlv4zfCKngoBZK32GcuP9npo6IethJo2KPTx1NEyxY84FHvNmIH1miJFtps61d 74oRGFpMR05yStwvodliYZrmUUYTHhLdGdVKepGkFDH4QhTRcvsJlmeRszCn2uL/4Gz3 d4u9vafF8CUC4stEQLpSi2PbewubXqeqqHd8wc5yZlp84+yJokH4Twz+vv/odTjI4WUT 9B7BFx9ftnGWoNfd/U22D8gy0kXNn3bofUmFv0BAllzrTH1GqkgMvp16Xi8jNkCmWp53 OH9IBudP6cZyaAWDNLr3nS/kaCdjAxFZhe0GVR0UkZ6dkZM/zr+tkisYU7tz6jvo5ZIx dZsQ== X-Gm-Message-State: AC+VfDztktYEFflxiu7+1LF6Bv2DXqu1DjH2RYkCrbiUG8tdtlZCtPxW XD6ci1CJrdNYW2zYcwWZFNA= X-Google-Smtp-Source: ACHHUZ5Amc/Osho99Kkutqafky4CNCXZK+MTntk6OuGOjVXPalxm7R230LqvZchQ4XpX7VlwKr3csQ== X-Received: by 2002:a5d:480c:0:b0:309:3e77:6cac with SMTP id l12-20020a5d480c000000b003093e776cacmr24739369wrq.0.1687769893315; Mon, 26 Jun 2023 01:58:13 -0700 (PDT) Received: from ip-172-31-22-112.eu-west-1.compute.internal (ec2-34-242-96-229.eu-west-1.compute.amazonaws.com. [34.242.96.229]) by smtp.gmail.com with ESMTPSA id h10-20020a5d504a000000b00313e8dc7facsm4883533wrt.116.2023.06.26.01.58.12 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Jun 2023 01:58:13 -0700 (PDT) From: Puranjay Mohan To: ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, martin.lau@linux.dev, song@kernel.org, catalin.marinas@arm.com, mark.rutland@arm.com, bpf@vger.kernel.org, kpsingh@kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Cc: puranjay12@gmail.com Subject: [PATCH bpf-next v4 1/3] bpf: make bpf_prog_pack allocator portable Date: Mon, 26 Jun 2023 08:58:09 +0000 Message-Id: <20230626085811.3192402-2-puranjay12@gmail.com> X-Mailer: git-send-email 2.40.1 In-Reply-To: <20230626085811.3192402-1-puranjay12@gmail.com> References: <20230626085811.3192402-1-puranjay12@gmail.com> MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20230626_015815_454878_B5A52F0F X-CRM114-Status: GOOD ( 14.34 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org The bpf_prog_pack allocator currently uses module_alloc() and module_memfree() to allocate and free memory. This is not portable because different architectures use different methods for allocating memory for BPF programs. Like ARM64 uses vmalloc()/vfree(). Use bpf_jit_alloc_exec() and bpf_jit_free_exec() for memory management in bpf_prog_pack allocator. Other architectures can override these with their implementation and will be able to use bpf_prog_pack directly. Signed-off-by: Puranjay Mohan Acked-by: Song Liu --- Changes in V3 => v4 - No changes Changes in V2 => V3: - No changes Changes in v1 => v2: - No code changes. - Added Acked-by: Song Liu kernel/bpf/core.c | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/kernel/bpf/core.c b/kernel/bpf/core.c index dc85240a0134..599136cb5096 100644 --- a/kernel/bpf/core.c +++ b/kernel/bpf/core.c @@ -860,7 +860,7 @@ static struct bpf_prog_pack *alloc_new_pack(bpf_jit_fill_hole_t bpf_fill_ill_ins GFP_KERNEL); if (!pack) return NULL; - pack->ptr = module_alloc(BPF_PROG_PACK_SIZE); + pack->ptr = bpf_jit_alloc_exec(BPF_PROG_PACK_SIZE); if (!pack->ptr) { kfree(pack); return NULL; @@ -884,7 +884,7 @@ void *bpf_prog_pack_alloc(u32 size, bpf_jit_fill_hole_t bpf_fill_ill_insns) mutex_lock(&pack_mutex); if (size > BPF_PROG_PACK_SIZE) { size = round_up(size, PAGE_SIZE); - ptr = module_alloc(size); + ptr = bpf_jit_alloc_exec(size); if (ptr) { bpf_fill_ill_insns(ptr, size); set_vm_flush_reset_perms(ptr); @@ -922,7 +922,7 @@ void bpf_prog_pack_free(struct bpf_binary_header *hdr) mutex_lock(&pack_mutex); if (hdr->size > BPF_PROG_PACK_SIZE) { - module_memfree(hdr); + bpf_jit_free_exec(hdr); goto out; } @@ -946,7 +946,7 @@ void bpf_prog_pack_free(struct bpf_binary_header *hdr) if (bitmap_find_next_zero_area(pack->bitmap, BPF_PROG_CHUNK_COUNT, 0, BPF_PROG_CHUNK_COUNT, 0) == 0) { list_del(&pack->list); - module_memfree(pack->ptr); + bpf_jit_free_exec(pack->ptr); kfree(pack); } out: From patchwork Mon Jun 26 08:58:10 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Puranjay Mohan X-Patchwork-Id: 13292531 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id E0859EB64D7 for ; Mon, 26 Jun 2023 08:58:55 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=w+2HburSXH4A5AkulX3uLMxv26wZiI+bU0XLNgRdh5s=; b=1sDFFKcnF9XAGI aYHgFYXDVnVXqo/vpFkVNa+3bfiYn6zi63p595i5uSdEnSXpnJLsakZbmtbkM93P29C2pAXCixEiJ +clqOIdSspiDmMNaGUXUPXtfWDFbWEvWbLR2vGLUwlXIvuDmULUkP/JlDW8vO3tkm+Bfd9wfT1UuP NAtxme5xjM9CuFr8dTBtgF03ZX/CKoF7RvQlVpuoxLUa6l4+0yW7F6zb7qgcnwi/r4C9qXMGqRpio S5zjp8IZqpV0IY/WXGDrLmFJgndGO2VzZNfPhYx0poR10Lq7+Pd+u0Slyhc90fMicoDnwZQgrAeyX yD2F2FSOvSj3YHfgxoKA==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.96 #2 (Red Hat Linux)) id 1qDi3M-009gS3-2k; Mon, 26 Jun 2023 08:58:32 +0000 Received: from mail-wr1-x42b.google.com ([2a00:1450:4864:20::42b]) by bombadil.infradead.org with esmtps (Exim 4.96 #2 (Red Hat Linux)) id 1qDi36-009gOT-2B for linux-arm-kernel@lists.infradead.org; Mon, 26 Jun 2023 08:58:18 +0000 Received: by mail-wr1-x42b.google.com with SMTP id ffacd0b85a97d-313e12db357so3225041f8f.0 for ; Mon, 26 Jun 2023 01:58:15 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1687769894; x=1690361894; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=g89tOe+fXjd3eCewwiEMcP/rgT7hBlO+AcyleoZQ3c4=; b=KY0lFmAyiGPNFi5tejVkCcdML67r0m78mXYhfhaNGCExzjzcs4nhYQIlel/8BYJRpz lfJONMAVjcHCJoBzkI699nWEtuBaxhq4kUnUzVfCp05RtNkxj/MNfRMmkwqF2dGcptlp K7WCs3Dpzq03D6B5J1Y+pYbq7jphYR0ctaBFILc+EgjFpGk/2jYY0JVpw6Mojp+pnkHF oXn0DUAwYrCVOM+Sv4+yZGrcQ6/BdpbMGLHoG/hTWFRe9VdFj+XLKbB9kG5C0ozms0N4 L68Qd5rzZyyhPK6dC5WoUSjRvBj0BM37fSNgn8FGG5KJ0b6VIQDBl++oMAAX7fhemqfZ 7+mQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687769894; x=1690361894; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=g89tOe+fXjd3eCewwiEMcP/rgT7hBlO+AcyleoZQ3c4=; b=I/5mkUa1LqRH+g/fwAN8Mf1rpw02svvnOxwa26/RqdpebvMph9eZUrEFYzvE57+Ew7 iixmahu8t5zojo/58F4faF5Z2ZCMjQMA/RRjUd1QYmwayj88YXTleZnlphdYWBO/u5Dg ph9K0mq5MuGnsghiNUoGlliyMh8xPIt7/J89c8P3+gH1KlK68Wwzq8+Wo4AdyAqjIY3S uuNExSwEkAGzq6SAl/BQ+MSLofnR0bSAAqm9bL4Qv/FpCV1tQjvLohNYCkWxnwL0io1s RBEwka1UG1NseiMEXI6GthGpy9hqKVasEThAjTuDBmJgrKOUFxOulV95ETD4Pof7xQwH nJ6g== X-Gm-Message-State: AC+VfDxLwBH6K5QlJ5qRvBVLPsjtsMdWc/rNZRgybVD01z9kYPHLsC/8 JxFRjDU0GbBieFS78cmcOcc= X-Google-Smtp-Source: ACHHUZ4m62deog5lFK8+0lA0KYE/r/VTwsXj5L2YGdFLyxwDG7jb6AmJwJCCJu5KOCig62//DhK1dw== X-Received: by 2002:a05:6000:1004:b0:30a:dd26:63cd with SMTP id a4-20020a056000100400b0030add2663cdmr33892488wrx.5.1687769894028; Mon, 26 Jun 2023 01:58:14 -0700 (PDT) Received: from ip-172-31-22-112.eu-west-1.compute.internal (ec2-34-242-96-229.eu-west-1.compute.amazonaws.com. [34.242.96.229]) by smtp.gmail.com with ESMTPSA id h10-20020a5d504a000000b00313e8dc7facsm4883533wrt.116.2023.06.26.01.58.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Jun 2023 01:58:13 -0700 (PDT) From: Puranjay Mohan To: ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, martin.lau@linux.dev, song@kernel.org, catalin.marinas@arm.com, mark.rutland@arm.com, bpf@vger.kernel.org, kpsingh@kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Cc: puranjay12@gmail.com Subject: [PATCH bpf-next v4 2/3] arm64: patching: Add aarch64_insn_copy() Date: Mon, 26 Jun 2023 08:58:10 +0000 Message-Id: <20230626085811.3192402-3-puranjay12@gmail.com> X-Mailer: git-send-email 2.40.1 In-Reply-To: <20230626085811.3192402-1-puranjay12@gmail.com> References: <20230626085811.3192402-1-puranjay12@gmail.com> MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20230626_015816_711542_0F996545 X-CRM114-Status: GOOD ( 16.01 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org This will be used by BPF JIT compiler to dump JITed binary to a RX huge page, and thus allow multiple BPF programs sharing the a huge (2MB) page. The bpf_prog_pack allocator that implements the above feature allocates a RX/RW buffer pair. The JITed code is written to the RW buffer and then this function will be used to copy the code from RW to RX buffer. Signed-off-by: Puranjay Mohan Acked-by: Song Liu --- Changes in v3 => v4 - No changes Changes in v2 => v3 - No changes Changes in v1 => v2: - Renamed addr/opcode to dst/src. - Added Acked-by: Song Liu arch/arm64/include/asm/patching.h | 1 + arch/arm64/kernel/patching.c | 39 +++++++++++++++++++++++++++++++ 2 files changed, 40 insertions(+) diff --git a/arch/arm64/include/asm/patching.h b/arch/arm64/include/asm/patching.h index 68908b82b168..f78a0409cbdb 100644 --- a/arch/arm64/include/asm/patching.h +++ b/arch/arm64/include/asm/patching.h @@ -8,6 +8,7 @@ int aarch64_insn_read(void *addr, u32 *insnp); int aarch64_insn_write(void *addr, u32 insn); int aarch64_insn_write_literal_u64(void *addr, u64 val); +void *aarch64_insn_copy(void *dst, const void *src, size_t len); int aarch64_insn_patch_text_nosync(void *addr, u32 insn); int aarch64_insn_patch_text(void *addrs[], u32 insns[], int cnt); diff --git a/arch/arm64/kernel/patching.c b/arch/arm64/kernel/patching.c index b4835f6d594b..419a9428402e 100644 --- a/arch/arm64/kernel/patching.c +++ b/arch/arm64/kernel/patching.c @@ -105,6 +105,45 @@ noinstr int aarch64_insn_write_literal_u64(void *addr, u64 val) return ret; } +/** + * aarch64_insn_copy - Copy instructions into (an unused part of) RX memory + * @dst: address to modify + * @src: source of the copy + * @len: length to copy + * + * Useful for JITs to dump new code blocks into unused regions of RX memory. + */ +noinstr void *aarch64_insn_copy(void *dst, const void *src, size_t len) +{ + unsigned long flags; + size_t patched = 0; + size_t size; + void *waddr; + void *ptr; + int ret; + + raw_spin_lock_irqsave(&patch_lock, flags); + + while (patched < len) { + ptr = dst + patched; + size = min_t(size_t, PAGE_SIZE - offset_in_page(ptr), + len - patched); + + waddr = patch_map(ptr, FIX_TEXT_POKE0); + ret = copy_to_kernel_nofault(waddr, src + patched, size); + patch_unmap(FIX_TEXT_POKE0); + + if (ret < 0) { + raw_spin_unlock_irqrestore(&patch_lock, flags); + return NULL; + } + patched += size; + } + raw_spin_unlock_irqrestore(&patch_lock, flags); + + return dst; +} + int __kprobes aarch64_insn_patch_text_nosync(void *addr, u32 insn) { u32 *tp = addr; From patchwork Mon Jun 26 08:58:11 2023 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Puranjay Mohan X-Patchwork-Id: 13292533 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from bombadil.infradead.org (bombadil.infradead.org [198.137.202.133]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.lore.kernel.org (Postfix) with ESMTPS id 09F6EEB64D7 for ; Mon, 26 Jun 2023 08:58:59 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=lists.infradead.org; s=bombadil.20210309; h=Sender: Content-Transfer-Encoding:Content-Type:List-Subscribe:List-Help:List-Post: List-Archive:List-Unsubscribe:List-Id:MIME-Version:References:In-Reply-To: Message-Id:Date:Subject:Cc:To:From:Reply-To:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: List-Owner; bh=daDPASZTEwxYuTfAjcMUTYhuWxfHycmsvn0L/rVWYbU=; b=rvDB6r0OTAqRg9 yuZHHtYiWNi5n432rGbFS/M3C1Ere4GnwgPCWkVkRYTxtTWaxkz9jRDLQ5lRfJ7rTUpqts6Z6cK8T vog3omI0B7rwDvOPtwQvqzuf9JFF22T+yL2NmWH/Gcwk7wUUEeV0ZQ4uo3CmNGrhZbv2QC5duuuFp z0kXZN9RhOAKiwZyHd9dO+sbgwU0gICbGH06gwYeIU0l27pCqeJPDicPxAwDjeggu4aF/rk1fQmQ/ wtd9R/uMCaXdBusRTYlgL4Mv3GPTgXZtLa3AJ1q+I960RCIYFh/n+purGChR1f6XaljRAcyOyqJMn C05A98CiyKc+/1Bg2O9g==; Received: from localhost ([::1] helo=bombadil.infradead.org) by bombadil.infradead.org with esmtp (Exim 4.96 #2 (Red Hat Linux)) id 1qDi3N-009gSP-1B; Mon, 26 Jun 2023 08:58:33 +0000 Received: from mail-wm1-x331.google.com ([2a00:1450:4864:20::331]) by bombadil.infradead.org with esmtps (Exim 4.96 #2 (Red Hat Linux)) id 1qDi37-009gOw-09 for linux-arm-kernel@lists.infradead.org; Mon, 26 Jun 2023 08:58:18 +0000 Received: by mail-wm1-x331.google.com with SMTP id 5b1f17b1804b1-3fa79605a3bso25187835e9.0 for ; Mon, 26 Jun 2023 01:58:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20221208; t=1687769895; x=1690361895; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=5i6ERh1cNmAmSBJdCUvzjUDJeDW4Go6V1bRVLdgUVO4=; b=nnh3t8J8zcxxotxX5qEsNJFdmTJgqCGMTS5BreYm4H7cjTfQ/n90LFyuJ+JmQ9IRuH 32+Yb6c1NR9Wm5hYZM6TDzMjieMYAGcHLXaqaGnGB8zBvyBoAUp45xwcfyXGu3cQVqKf Hnk3d3sFPL8wrGQzHBJIRkhV5XGK5uDnNLqRlM2GLjp3yeRuA+XAOiMwb8xxMh/XP+2G aF9E2knkZdRSqQCC/RO2zTRaZWiW7+TWxffiBvKAaTwAAVed1xriwssaVT4+MUmPjVjI twe2IcEOQi2k1L7q3wWriLQw1KNZO3XX6f1Ui+o0msbFL1jgaEKeSYjPOEL7LndOKBDa 5F1g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1687769895; x=1690361895; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=5i6ERh1cNmAmSBJdCUvzjUDJeDW4Go6V1bRVLdgUVO4=; b=JGx2TseT6A7+Iq6NvtN3HhQO5TuFy9ECd2WloYis+9hP0ZUMdoQ0++mT9FOlsjg9In yrmYy49Ntw62CVFmy7RqWvuxXLh9G/vTeTZ4eeAgvtuKh2JOGFgWajK+BCv7/pYDyjx0 G3Hfv5gpTdO/7aCvkFx5J9iPFrVOKn1SBLIK5fztO8egDJV29qTX5B+PlGC9VZiTeaGS w5V2ckQy9MAejzT1rI0BhBNIWJE0kHEay5ObPqw3udKy+vj0n0WRdCe4WfxnDM8VpZ7S ezRfC7kSDv0+Yc1uUozMXTqlgHwHbrmq+IkTmAShVy4MHzYudZqocHgOnaCQ9oQr+p+c RD5Q== X-Gm-Message-State: AC+VfDxyQGIulfizpgrgQHhKL7OQ+dQsMLdW0eIVHmxA/GGVcNhglP5v xS9MCzSGlccPSbJjFwy7H1I= X-Google-Smtp-Source: ACHHUZ47FEyGqK6Tao3ltj9Lfc0JvJOGVs0Mwuhq9/hOWhPsnr2zPacJ538nQYASV7PmQ3UsdeK0Jg== X-Received: by 2002:a05:600c:d8:b0:3f9:c9f4:acf1 with SMTP id u24-20020a05600c00d800b003f9c9f4acf1mr12509701wmm.7.1687769894589; Mon, 26 Jun 2023 01:58:14 -0700 (PDT) Received: from ip-172-31-22-112.eu-west-1.compute.internal (ec2-34-242-96-229.eu-west-1.compute.amazonaws.com. [34.242.96.229]) by smtp.gmail.com with ESMTPSA id h10-20020a5d504a000000b00313e8dc7facsm4883533wrt.116.2023.06.26.01.58.14 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 26 Jun 2023 01:58:14 -0700 (PDT) From: Puranjay Mohan To: ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, martin.lau@linux.dev, song@kernel.org, catalin.marinas@arm.com, mark.rutland@arm.com, bpf@vger.kernel.org, kpsingh@kernel.org, linux-arm-kernel@lists.infradead.org, linux-kernel@vger.kernel.org Cc: puranjay12@gmail.com Subject: [PATCH bpf-next v4 3/3] bpf, arm64: use bpf_jit_binary_pack_alloc Date: Mon, 26 Jun 2023 08:58:11 +0000 Message-Id: <20230626085811.3192402-4-puranjay12@gmail.com> X-Mailer: git-send-email 2.40.1 In-Reply-To: <20230626085811.3192402-1-puranjay12@gmail.com> References: <20230626085811.3192402-1-puranjay12@gmail.com> MIME-Version: 1.0 X-CRM114-Version: 20100106-BlameMichelson ( TRE 0.8.0 (BSD) ) MR-646709E3 X-CRM114-CacheID: sfid-20230626_015817_089978_9A822189 X-CRM114-Status: GOOD ( 29.66 ) X-BeenThere: linux-arm-kernel@lists.infradead.org X-Mailman-Version: 2.1.34 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: "linux-arm-kernel" Errors-To: linux-arm-kernel-bounces+linux-arm-kernel=archiver.kernel.org@lists.infradead.org Use bpf_jit_binary_pack_alloc for memory management of JIT binaries in ARM64 BPF JIT. The bpf_jit_binary_pack_alloc creates a pair of RW and RX buffers. The JIT writes the program into the RW buffer. When the JIT is done, the program is copied to the final RX buffer with bpf_jit_binary_pack_finalize. Implement bpf_arch_text_copy() and bpf_arch_text_invalidate() for ARM64 JIT as these functions are required by bpf_jit_binary_pack allocator. Signed-off-by: Puranjay Mohan Acked-by: Song Liu --- Changes in v3 => v4: - Fix the cache maintenance by cleaning the data cache and invalidating the i-Cache only *after* copying the instructions to the ROX region. Changes in v2 => v3: - Set prog = orig_prog; in the failure path of bpf_jit_binary_pack_finalize() call. - Add comments explaining the usage of the offsets in the exception table. Changes in v1 => v2: - Made the naming of ro_ prefix consistent. Now image/header/image_ptr are read/write and ro_image/ro_header/ro_image_ptr are read-only. arch/arm64/net/bpf_jit_comp.c | 145 ++++++++++++++++++++++++++++------ 1 file changed, 121 insertions(+), 24 deletions(-) diff --git a/arch/arm64/net/bpf_jit_comp.c b/arch/arm64/net/bpf_jit_comp.c index 145b540ec34f..cd05f0c513f4 100644 --- a/arch/arm64/net/bpf_jit_comp.c +++ b/arch/arm64/net/bpf_jit_comp.c @@ -76,6 +76,7 @@ struct jit_ctx { int *offset; int exentry_idx; __le32 *image; + __le32 *ro_image; u32 stack_size; int fpb_offset; }; @@ -205,6 +206,20 @@ static void jit_fill_hole(void *area, unsigned int size) *ptr++ = cpu_to_le32(AARCH64_BREAK_FAULT); } +int bpf_arch_text_invalidate(void *dst, size_t len) +{ + __le32 *ptr; + int ret; + + for (ptr = dst; len >= sizeof(u32); len -= sizeof(u32)) { + ret = aarch64_insn_patch_text_nosync(ptr++, AARCH64_BREAK_FAULT); + if (ret) + return ret; + } + + return 0; +} + static inline int epilogue_offset(const struct jit_ctx *ctx) { int to = ctx->epilogue_offset; @@ -701,7 +716,8 @@ static int add_exception_handler(const struct bpf_insn *insn, struct jit_ctx *ctx, int dst_reg) { - off_t offset; + off_t ins_offset; + off_t fixup_offset; unsigned long pc; struct exception_table_entry *ex; @@ -717,12 +733,17 @@ static int add_exception_handler(const struct bpf_insn *insn, return -EINVAL; ex = &ctx->prog->aux->extable[ctx->exentry_idx]; - pc = (unsigned long)&ctx->image[ctx->idx - 1]; + pc = (unsigned long)&ctx->ro_image[ctx->idx - 1]; - offset = pc - (long)&ex->insn; - if (WARN_ON_ONCE(offset >= 0 || offset < INT_MIN)) + /* + * This is the relative offset of the instruction that may fault from + * the exception table itself. This will be written to the exception + * table and if this instruction faults, the destination register will + * be set to '0' and the execution will jump to the next instruction. + */ + ins_offset = pc - (long)&ex->insn; + if (WARN_ON_ONCE(ins_offset >= 0 || ins_offset < INT_MIN)) return -ERANGE; - ex->insn = offset; /* * Since the extable follows the program, the fixup offset is always @@ -731,12 +752,25 @@ static int add_exception_handler(const struct bpf_insn *insn, * bits. We don't need to worry about buildtime or runtime sort * modifying the upper bits because the table is already sorted, and * isn't part of the main exception table. + * + * The fixup_offset is set to the next instruction from the instruction + * that may fault. The execution will jump to this after handling the + * fault. */ - offset = (long)&ex->fixup - (pc + AARCH64_INSN_SIZE); - if (!FIELD_FIT(BPF_FIXUP_OFFSET_MASK, offset)) + fixup_offset = (long)&ex->fixup - (pc + AARCH64_INSN_SIZE); + if (!FIELD_FIT(BPF_FIXUP_OFFSET_MASK, fixup_offset)) return -ERANGE; - ex->fixup = FIELD_PREP(BPF_FIXUP_OFFSET_MASK, offset) | + /* + * The offsets above have been calculated using the RO buffer but we + * need to use the R/W buffer for writes. + * switch ex to rw buffer for writing. + */ + ex = (void *)ctx->image + ((void *)ex - (void *)ctx->ro_image); + + ex->insn = ins_offset; + + ex->fixup = FIELD_PREP(BPF_FIXUP_OFFSET_MASK, fixup_offset) | FIELD_PREP(BPF_FIXUP_REG_MASK, dst_reg); ex->type = EX_TYPE_BPF; @@ -1446,7 +1480,8 @@ static inline void bpf_flush_icache(void *start, void *end) struct arm64_jit_data { struct bpf_binary_header *header; - u8 *image; + u8 *ro_image; + struct bpf_binary_header *ro_header; struct jit_ctx ctx; }; @@ -1455,12 +1490,14 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) int image_size, prog_size, extable_size, extable_align, extable_offset; struct bpf_prog *tmp, *orig_prog = prog; struct bpf_binary_header *header; + struct bpf_binary_header *ro_header; struct arm64_jit_data *jit_data; bool was_classic = bpf_prog_was_classic(prog); bool tmp_blinded = false; bool extra_pass = false; struct jit_ctx ctx; u8 *image_ptr; + u8 *ro_image_ptr; if (!prog->jit_requested) return orig_prog; @@ -1487,8 +1524,11 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) } if (jit_data->ctx.offset) { ctx = jit_data->ctx; - image_ptr = jit_data->image; + ro_image_ptr = jit_data->ro_image; + ro_header = jit_data->ro_header; header = jit_data->header; + image_ptr = (void *)header + ((void *)ro_image_ptr + - (void *)ro_header); extra_pass = true; prog_size = sizeof(u32) * ctx.idx; goto skip_init_ctx; @@ -1533,18 +1573,27 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) /* also allocate space for plt target */ extable_offset = round_up(prog_size + PLT_TARGET_SIZE, extable_align); image_size = extable_offset + extable_size; - header = bpf_jit_binary_alloc(image_size, &image_ptr, - sizeof(u32), jit_fill_hole); - if (header == NULL) { + ro_header = bpf_jit_binary_pack_alloc(image_size, &ro_image_ptr, + sizeof(u32), &header, &image_ptr, + jit_fill_hole); + if (!ro_header) { prog = orig_prog; goto out_off; } /* 2. Now, the actual pass. */ + /* + * Use the image(RW) for writing the JITed instructions. But also save + * the ro_image(RX) for calculating the offsets in the image. The RW + * image will be later copied to the RX image from where the program + * will run. The bpf_jit_binary_pack_finalize() will do this copy in the + * final step. + */ ctx.image = (__le32 *)image_ptr; + ctx.ro_image = (__le32 *)ro_image_ptr; if (extable_size) - prog->aux->extable = (void *)image_ptr + extable_offset; + prog->aux->extable = (void *)ro_image_ptr + extable_offset; skip_init_ctx: ctx.idx = 0; ctx.exentry_idx = 0; @@ -1552,9 +1601,8 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) build_prologue(&ctx, was_classic); if (build_body(&ctx, extra_pass)) { - bpf_jit_binary_free(header); prog = orig_prog; - goto out_off; + goto out_free_hdr; } build_epilogue(&ctx); @@ -1562,34 +1610,44 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) /* 3. Extra pass to validate JITed code. */ if (validate_ctx(&ctx)) { - bpf_jit_binary_free(header); prog = orig_prog; - goto out_off; + goto out_free_hdr; } /* And we're done. */ if (bpf_jit_enable > 1) bpf_jit_dump(prog->len, prog_size, 2, ctx.image); - bpf_flush_icache(header, ctx.image + ctx.idx); - if (!prog->is_func || extra_pass) { if (extra_pass && ctx.idx != jit_data->ctx.idx) { pr_err_once("multi-func JIT bug %d != %d\n", ctx.idx, jit_data->ctx.idx); - bpf_jit_binary_free(header); prog->bpf_func = NULL; prog->jited = 0; prog->jited_len = 0; + goto out_free_hdr; + } + if (WARN_ON(bpf_jit_binary_pack_finalize(prog, ro_header, + header))) { + /* ro_header has been freed */ + ro_header = NULL; + prog = orig_prog; goto out_off; } - bpf_jit_binary_lock_ro(header); + /* + * The instructions have now been copied to the ROX region from + * where they will execute. Now the data cache has to be cleaned to + * the PoU and the I-cache has to be invalidated for the VAs. + */ + bpf_flush_icache(ro_header, ctx.ro_image + ctx.idx); } else { jit_data->ctx = ctx; - jit_data->image = image_ptr; + jit_data->ro_image = ro_image_ptr; jit_data->header = header; + jit_data->ro_header = ro_header; } - prog->bpf_func = (void *)ctx.image; + + prog->bpf_func = (void *)ctx.ro_image; prog->jited = 1; prog->jited_len = prog_size; @@ -1610,6 +1668,14 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) bpf_jit_prog_release_other(prog, prog == orig_prog ? tmp : orig_prog); return prog; + +out_free_hdr: + if (header) { + bpf_arch_text_copy(&ro_header->size, &header->size, + sizeof(header->size)); + bpf_jit_binary_pack_free(ro_header, header); + } + goto out_off; } bool bpf_jit_supports_kfunc_call(void) @@ -1617,6 +1683,13 @@ bool bpf_jit_supports_kfunc_call(void) return true; } +void *bpf_arch_text_copy(void *dst, void *src, size_t len) +{ + if (!aarch64_insn_copy(dst, src, len)) + return ERR_PTR(-EINVAL); + return dst; +} + u64 bpf_jit_alloc_exec_limit(void) { return VMALLOC_END - VMALLOC_START; @@ -2221,3 +2294,27 @@ int bpf_arch_text_poke(void *ip, enum bpf_text_poke_type poke_type, return ret; } + +void bpf_jit_free(struct bpf_prog *prog) +{ + if (prog->jited) { + struct arm64_jit_data *jit_data = prog->aux->jit_data; + struct bpf_binary_header *hdr; + + /* + * If we fail the final pass of JIT (from jit_subprogs), + * the program may not be finalized yet. Call finalize here + * before freeing it. + */ + if (jit_data) { + bpf_jit_binary_pack_finalize(prog, jit_data->ro_header, + jit_data->header); + kfree(jit_data); + } + hdr = bpf_jit_binary_pack_hdr(prog); + bpf_jit_binary_pack_free(hdr, NULL); + WARN_ON_ONCE(!bpf_prog_kallsyms_verify_off(prog)); + } + + bpf_prog_unlock_free(prog); +}