1 // SPDX-License-Identifier: (LGPL-2.1 OR BSD-2-Clause)
4 * Common eBPF ELF object loading operations.
6 * Copyright (C) 2013-2015 Alexei Starovoitov <ast@kernel.org>
7 * Copyright (C) 2015 Wang Nan <wangnan0@huawei.com>
8 * Copyright (C) 2015 Huawei Inc.
9 * Copyright (C) 2017 Nicira, Inc.
24 #include <asm/unistd.h>
25 #include <linux/err.h>
26 #include <linux/kernel.h>
27 #include <linux/bpf.h>
28 #include <linux/btf.h>
29 #include <linux/filter.h>
30 #include <linux/list.h>
31 #include <linux/limits.h>
32 #include <linux/perf_event.h>
33 #include <linux/ring_buffer.h>
35 #include <sys/types.h>
37 #include <tools/libc_compat.h>
44 #include "str_error.h"
45 #include "libbpf_util.h"
52 #define BPF_FS_MAGIC 0xcafe4a11
55 #define __printf(a, b) __attribute__((format(printf, a, b)))
57 static int __base_pr(enum libbpf_print_level level, const char *format,
60 if (level == LIBBPF_DEBUG)
63 return vfprintf(stderr, format, args);
66 static libbpf_print_fn_t __libbpf_pr = __base_pr;
68 void libbpf_set_print(libbpf_print_fn_t fn)
74 void libbpf_print(enum libbpf_print_level level, const char *format, ...)
81 va_start(args, format);
82 __libbpf_pr(level, format, args);
86 #define STRERR_BUFSIZE 128
88 #define CHECK_ERR(action, err, out) do { \
95 /* Copied from tools/perf/util/util.h */
97 # define zfree(ptr) ({ free(*ptr); *ptr = NULL; })
101 # define zclose(fd) ({ \
104 ___err = close((fd)); \
109 #ifdef HAVE_LIBELF_MMAP_SUPPORT
110 # define LIBBPF_ELF_C_READ_MMAP ELF_C_READ_MMAP
112 # define LIBBPF_ELF_C_READ_MMAP ELF_C_READ
115 struct bpf_capabilities {
116 /* v4.14: kernel support for program & map names. */
121 * bpf_prog should be a better name but it has been used in
125 /* Index in elf obj file, for relocation use. */
130 /* section_name with / replaced by _; makes recursive pinning
131 * in bpf_object__pin_programs easier
134 struct bpf_insn *insns;
135 size_t insns_cnt, main_prog_cnt;
136 enum bpf_prog_type type;
155 bpf_program_prep_t preprocessor;
157 struct bpf_object *obj;
159 bpf_program_clear_priv_t clear_priv;
161 enum bpf_attach_type expected_attach_type;
164 __u32 func_info_rec_size;
167 struct bpf_capabilities *caps;
170 __u32 line_info_rec_size;
180 struct bpf_map_def def;
181 __u32 btf_key_type_id;
182 __u32 btf_value_type_id;
184 bpf_map_clear_priv_t clear_priv;
187 static LIST_HEAD(bpf_objects_list);
193 struct bpf_program *programs;
195 struct bpf_map *maps;
199 bool has_pseudo_calls;
202 * Information when doing elf related work. Only valid if fd
222 * All loaded bpf_object is linked in a list, which is
223 * hidden to caller. bpf_objects__<func> handlers deal with
226 struct list_head list;
229 struct btf_ext *btf_ext;
232 bpf_object_clear_priv_t clear_priv;
234 struct bpf_capabilities caps;
238 #define obj_elf_valid(o) ((o)->efile.elf)
240 void bpf_program__unload(struct bpf_program *prog)
248 * If the object is opened but the program was never loaded,
249 * it is possible that prog->instances.nr == -1.
251 if (prog->instances.nr > 0) {
252 for (i = 0; i < prog->instances.nr; i++)
253 zclose(prog->instances.fds[i]);
254 } else if (prog->instances.nr != -1) {
255 pr_warning("Internal error: instances.nr is %d\n",
259 prog->instances.nr = -1;
260 zfree(&prog->instances.fds);
262 zclose(prog->btf_fd);
263 zfree(&prog->func_info);
264 zfree(&prog->line_info);
267 static void bpf_program__exit(struct bpf_program *prog)
272 if (prog->clear_priv)
273 prog->clear_priv(prog, prog->priv);
276 prog->clear_priv = NULL;
278 bpf_program__unload(prog);
280 zfree(&prog->section_name);
281 zfree(&prog->pin_name);
283 zfree(&prog->reloc_desc);
290 static char *__bpf_program__pin_name(struct bpf_program *prog)
294 name = p = strdup(prog->section_name);
295 while ((p = strchr(p, '/')))
302 bpf_program__init(void *data, size_t size, char *section_name, int idx,
303 struct bpf_program *prog)
305 if (size < sizeof(struct bpf_insn)) {
306 pr_warning("corrupted section '%s'\n", section_name);
310 memset(prog, 0, sizeof(*prog));
312 prog->section_name = strdup(section_name);
313 if (!prog->section_name) {
314 pr_warning("failed to alloc name for prog under section(%d) %s\n",
319 prog->pin_name = __bpf_program__pin_name(prog);
320 if (!prog->pin_name) {
321 pr_warning("failed to alloc pin name for prog under section(%d) %s\n",
326 prog->insns = malloc(size);
328 pr_warning("failed to alloc insns for prog under section %s\n",
332 prog->insns_cnt = size / sizeof(struct bpf_insn);
333 memcpy(prog->insns, data,
334 prog->insns_cnt * sizeof(struct bpf_insn));
336 prog->instances.fds = NULL;
337 prog->instances.nr = -1;
338 prog->type = BPF_PROG_TYPE_UNSPEC;
343 bpf_program__exit(prog);
348 bpf_object__add_program(struct bpf_object *obj, void *data, size_t size,
349 char *section_name, int idx)
351 struct bpf_program prog, *progs;
354 err = bpf_program__init(data, size, section_name, idx, &prog);
358 prog.caps = &obj->caps;
359 progs = obj->programs;
360 nr_progs = obj->nr_programs;
362 progs = reallocarray(progs, nr_progs + 1, sizeof(progs[0]));
365 * In this case the original obj->programs
366 * is still valid, so don't need special treat for
367 * bpf_close_object().
369 pr_warning("failed to alloc a new program under section '%s'\n",
371 bpf_program__exit(&prog);
375 pr_debug("found program %s\n", prog.section_name);
376 obj->programs = progs;
377 obj->nr_programs = nr_progs + 1;
379 progs[nr_progs] = prog;
384 bpf_object__init_prog_names(struct bpf_object *obj)
386 Elf_Data *symbols = obj->efile.symbols;
387 struct bpf_program *prog;
390 for (pi = 0; pi < obj->nr_programs; pi++) {
391 const char *name = NULL;
393 prog = &obj->programs[pi];
395 for (si = 0; si < symbols->d_size / sizeof(GElf_Sym) && !name;
399 if (!gelf_getsym(symbols, si, &sym))
401 if (sym.st_shndx != prog->idx)
403 if (GELF_ST_BIND(sym.st_info) != STB_GLOBAL)
406 name = elf_strptr(obj->efile.elf,
407 obj->efile.strtabidx,
410 pr_warning("failed to get sym name string for prog %s\n",
412 return -LIBBPF_ERRNO__LIBELF;
416 if (!name && prog->idx == obj->efile.text_shndx)
420 pr_warning("failed to find sym for prog %s\n",
425 prog->name = strdup(name);
427 pr_warning("failed to allocate memory for prog sym %s\n",
436 static struct bpf_object *bpf_object__new(const char *path,
440 struct bpf_object *obj;
442 obj = calloc(1, sizeof(struct bpf_object) + strlen(path) + 1);
444 pr_warning("alloc memory failed for %s\n", path);
445 return ERR_PTR(-ENOMEM);
448 strcpy(obj->path, path);
452 * Caller of this function should also calls
453 * bpf_object__elf_finish() after data collection to return
454 * obj_buf to user. If not, we should duplicate the buffer to
455 * avoid user freeing them before elf finish.
457 obj->efile.obj_buf = obj_buf;
458 obj->efile.obj_buf_sz = obj_buf_sz;
459 obj->efile.maps_shndx = -1;
463 INIT_LIST_HEAD(&obj->list);
464 list_add(&obj->list, &bpf_objects_list);
468 static void bpf_object__elf_finish(struct bpf_object *obj)
470 if (!obj_elf_valid(obj))
473 if (obj->efile.elf) {
474 elf_end(obj->efile.elf);
475 obj->efile.elf = NULL;
477 obj->efile.symbols = NULL;
479 zfree(&obj->efile.reloc);
480 obj->efile.nr_reloc = 0;
481 zclose(obj->efile.fd);
482 obj->efile.obj_buf = NULL;
483 obj->efile.obj_buf_sz = 0;
486 static int bpf_object__elf_init(struct bpf_object *obj)
491 if (obj_elf_valid(obj)) {
492 pr_warning("elf init: internal error\n");
493 return -LIBBPF_ERRNO__LIBELF;
496 if (obj->efile.obj_buf_sz > 0) {
498 * obj_buf should have been validated by
499 * bpf_object__open_buffer().
501 obj->efile.elf = elf_memory(obj->efile.obj_buf,
502 obj->efile.obj_buf_sz);
504 obj->efile.fd = open(obj->path, O_RDONLY);
505 if (obj->efile.fd < 0) {
506 char errmsg[STRERR_BUFSIZE];
507 char *cp = libbpf_strerror_r(errno, errmsg,
510 pr_warning("failed to open %s: %s\n", obj->path, cp);
514 obj->efile.elf = elf_begin(obj->efile.fd,
515 LIBBPF_ELF_C_READ_MMAP,
519 if (!obj->efile.elf) {
520 pr_warning("failed to open %s as ELF file\n",
522 err = -LIBBPF_ERRNO__LIBELF;
526 if (!gelf_getehdr(obj->efile.elf, &obj->efile.ehdr)) {
527 pr_warning("failed to get EHDR from %s\n",
529 err = -LIBBPF_ERRNO__FORMAT;
532 ep = &obj->efile.ehdr;
534 /* Old LLVM set e_machine to EM_NONE */
535 if ((ep->e_type != ET_REL) || (ep->e_machine && (ep->e_machine != EM_BPF))) {
536 pr_warning("%s is not an eBPF object file\n",
538 err = -LIBBPF_ERRNO__FORMAT;
544 bpf_object__elf_finish(obj);
549 bpf_object__check_endianness(struct bpf_object *obj)
551 static unsigned int const endian = 1;
553 switch (obj->efile.ehdr.e_ident[EI_DATA]) {
555 /* We are big endian, BPF obj is little endian. */
556 if (*(unsigned char const *)&endian != 1)
561 /* We are little endian, BPF obj is big endian. */
562 if (*(unsigned char const *)&endian != 0)
566 return -LIBBPF_ERRNO__ENDIAN;
572 pr_warning("Error: endianness mismatch.\n");
573 return -LIBBPF_ERRNO__ENDIAN;
577 bpf_object__init_license(struct bpf_object *obj,
578 void *data, size_t size)
580 memcpy(obj->license, data,
581 min(size, sizeof(obj->license) - 1));
582 pr_debug("license of %s is %s\n", obj->path, obj->license);
587 bpf_object__init_kversion(struct bpf_object *obj,
588 void *data, size_t size)
592 if (size != sizeof(kver)) {
593 pr_warning("invalid kver section in %s\n", obj->path);
594 return -LIBBPF_ERRNO__FORMAT;
596 memcpy(&kver, data, sizeof(kver));
597 obj->kern_version = kver;
598 pr_debug("kernel version of %s is %x\n", obj->path,
603 static int compare_bpf_map(const void *_a, const void *_b)
605 const struct bpf_map *a = _a;
606 const struct bpf_map *b = _b;
608 return a->offset - b->offset;
611 static bool bpf_map_type__is_map_in_map(enum bpf_map_type type)
613 if (type == BPF_MAP_TYPE_ARRAY_OF_MAPS ||
614 type == BPF_MAP_TYPE_HASH_OF_MAPS)
620 bpf_object__init_maps(struct bpf_object *obj, int flags)
622 bool strict = !(flags & MAPS_RELAX_COMPAT);
623 int i, map_idx, map_def_sz, nr_maps = 0;
625 Elf_Data *data = NULL;
626 Elf_Data *symbols = obj->efile.symbols;
628 if (obj->efile.maps_shndx < 0)
633 scn = elf_getscn(obj->efile.elf, obj->efile.maps_shndx);
635 data = elf_getdata(scn, NULL);
637 pr_warning("failed to get Elf_Data from map section %d\n",
638 obj->efile.maps_shndx);
643 * Count number of maps. Each map has a name.
644 * Array of maps is not supported: only the first element is
647 * TODO: Detect array of map and report error.
649 for (i = 0; i < symbols->d_size / sizeof(GElf_Sym); i++) {
652 if (!gelf_getsym(symbols, i, &sym))
654 if (sym.st_shndx != obj->efile.maps_shndx)
659 /* Alloc obj->maps and fill nr_maps. */
660 pr_debug("maps in %s: %d maps in %zd bytes\n", obj->path,
661 nr_maps, data->d_size);
666 /* Assume equally sized map definitions */
667 map_def_sz = data->d_size / nr_maps;
668 if (!data->d_size || (data->d_size % nr_maps) != 0) {
669 pr_warning("unable to determine map definition size "
670 "section %s, %d maps in %zd bytes\n",
671 obj->path, nr_maps, data->d_size);
675 obj->maps = calloc(nr_maps, sizeof(obj->maps[0]));
677 pr_warning("alloc maps for object failed\n");
680 obj->nr_maps = nr_maps;
682 for (i = 0; i < nr_maps; i++) {
684 * fill all fd with -1 so won't close incorrect
685 * fd (fd=0 is stdin) when failure (zclose won't close
688 obj->maps[i].fd = -1;
689 obj->maps[i].inner_map_fd = -1;
693 * Fill obj->maps using data in "maps" section.
695 for (i = 0, map_idx = 0; i < symbols->d_size / sizeof(GElf_Sym); i++) {
697 const char *map_name;
698 struct bpf_map_def *def;
700 if (!gelf_getsym(symbols, i, &sym))
702 if (sym.st_shndx != obj->efile.maps_shndx)
705 map_name = elf_strptr(obj->efile.elf,
706 obj->efile.strtabidx,
708 obj->maps[map_idx].offset = sym.st_value;
709 if (sym.st_value + map_def_sz > data->d_size) {
710 pr_warning("corrupted maps section in %s: last map \"%s\" too small\n",
711 obj->path, map_name);
715 obj->maps[map_idx].name = strdup(map_name);
716 if (!obj->maps[map_idx].name) {
717 pr_warning("failed to alloc map name\n");
720 pr_debug("map %d is \"%s\"\n", map_idx,
721 obj->maps[map_idx].name);
722 def = (struct bpf_map_def *)(data->d_buf + sym.st_value);
724 * If the definition of the map in the object file fits in
725 * bpf_map_def, copy it. Any extra fields in our version
726 * of bpf_map_def will default to zero as a result of the
729 if (map_def_sz <= sizeof(struct bpf_map_def)) {
730 memcpy(&obj->maps[map_idx].def, def, map_def_sz);
733 * Here the map structure being read is bigger than what
734 * we expect, truncate if the excess bits are all zero.
735 * If they are not zero, reject this map as
739 for (b = ((char *)def) + sizeof(struct bpf_map_def);
740 b < ((char *)def) + map_def_sz; b++) {
742 pr_warning("maps section in %s: \"%s\" "
743 "has unrecognized, non-zero "
745 obj->path, map_name);
750 memcpy(&obj->maps[map_idx].def, def,
751 sizeof(struct bpf_map_def));
756 qsort(obj->maps, obj->nr_maps, sizeof(obj->maps[0]), compare_bpf_map);
760 static bool section_have_execinstr(struct bpf_object *obj, int idx)
765 scn = elf_getscn(obj->efile.elf, idx);
769 if (gelf_getshdr(scn, &sh) != &sh)
772 if (sh.sh_flags & SHF_EXECINSTR)
778 static int bpf_object__elf_collect(struct bpf_object *obj, int flags)
780 Elf *elf = obj->efile.elf;
781 GElf_Ehdr *ep = &obj->efile.ehdr;
782 Elf_Data *btf_ext_data = NULL;
784 int idx = 0, err = 0;
786 /* Elf is corrupted/truncated, avoid calling elf_strptr. */
787 if (!elf_rawdata(elf_getscn(elf, ep->e_shstrndx), NULL)) {
788 pr_warning("failed to get e_shstrndx from %s\n",
790 return -LIBBPF_ERRNO__FORMAT;
793 while ((scn = elf_nextscn(elf, scn)) != NULL) {
799 if (gelf_getshdr(scn, &sh) != &sh) {
800 pr_warning("failed to get section(%d) header from %s\n",
802 err = -LIBBPF_ERRNO__FORMAT;
806 name = elf_strptr(elf, ep->e_shstrndx, sh.sh_name);
808 pr_warning("failed to get section(%d) name from %s\n",
810 err = -LIBBPF_ERRNO__FORMAT;
814 data = elf_getdata(scn, 0);
816 pr_warning("failed to get section(%d) data from %s(%s)\n",
817 idx, name, obj->path);
818 err = -LIBBPF_ERRNO__FORMAT;
821 pr_debug("section(%d) %s, size %ld, link %d, flags %lx, type=%d\n",
822 idx, name, (unsigned long)data->d_size,
823 (int)sh.sh_link, (unsigned long)sh.sh_flags,
826 if (strcmp(name, "license") == 0)
827 err = bpf_object__init_license(obj,
830 else if (strcmp(name, "version") == 0)
831 err = bpf_object__init_kversion(obj,
834 else if (strcmp(name, "maps") == 0)
835 obj->efile.maps_shndx = idx;
836 else if (strcmp(name, BTF_ELF_SEC) == 0) {
837 obj->btf = btf__new(data->d_buf, data->d_size);
838 if (IS_ERR(obj->btf) || btf__load(obj->btf)) {
839 pr_warning("Error loading ELF section %s: %ld. Ignored and continue.\n",
840 BTF_ELF_SEC, PTR_ERR(obj->btf));
843 } else if (strcmp(name, BTF_EXT_ELF_SEC) == 0) {
845 } else if (sh.sh_type == SHT_SYMTAB) {
846 if (obj->efile.symbols) {
847 pr_warning("bpf: multiple SYMTAB in %s\n",
849 err = -LIBBPF_ERRNO__FORMAT;
851 obj->efile.symbols = data;
852 obj->efile.strtabidx = sh.sh_link;
854 } else if ((sh.sh_type == SHT_PROGBITS) &&
855 (sh.sh_flags & SHF_EXECINSTR) &&
856 (data->d_size > 0)) {
857 if (strcmp(name, ".text") == 0)
858 obj->efile.text_shndx = idx;
859 err = bpf_object__add_program(obj, data->d_buf,
860 data->d_size, name, idx);
862 char errmsg[STRERR_BUFSIZE];
863 char *cp = libbpf_strerror_r(-err, errmsg,
866 pr_warning("failed to alloc program %s (%s): %s",
867 name, obj->path, cp);
869 } else if (sh.sh_type == SHT_REL) {
870 void *reloc = obj->efile.reloc;
871 int nr_reloc = obj->efile.nr_reloc + 1;
872 int sec = sh.sh_info; /* points to other section */
874 /* Only do relo for section with exec instructions */
875 if (!section_have_execinstr(obj, sec)) {
876 pr_debug("skip relo %s(%d) for section(%d)\n",
881 reloc = reallocarray(reloc, nr_reloc,
882 sizeof(*obj->efile.reloc));
884 pr_warning("realloc failed\n");
887 int n = nr_reloc - 1;
889 obj->efile.reloc = reloc;
890 obj->efile.nr_reloc = nr_reloc;
892 obj->efile.reloc[n].shdr = sh;
893 obj->efile.reloc[n].data = data;
896 pr_debug("skip section(%d) %s\n", idx, name);
902 if (!obj->efile.strtabidx || obj->efile.strtabidx >= idx) {
903 pr_warning("Corrupted ELF file: index of strtab invalid\n");
904 return LIBBPF_ERRNO__FORMAT;
908 pr_debug("Ignore ELF section %s because its depending ELF section %s is not found.\n",
909 BTF_EXT_ELF_SEC, BTF_ELF_SEC);
911 obj->btf_ext = btf_ext__new(btf_ext_data->d_buf,
912 btf_ext_data->d_size);
913 if (IS_ERR(obj->btf_ext)) {
914 pr_warning("Error loading ELF section %s: %ld. Ignored and continue.\n",
916 PTR_ERR(obj->btf_ext));
921 if (obj->efile.maps_shndx >= 0) {
922 err = bpf_object__init_maps(obj, flags);
926 err = bpf_object__init_prog_names(obj);
931 static struct bpf_program *
932 bpf_object__find_prog_by_idx(struct bpf_object *obj, int idx)
934 struct bpf_program *prog;
937 for (i = 0; i < obj->nr_programs; i++) {
938 prog = &obj->programs[i];
939 if (prog->idx == idx)
946 bpf_object__find_program_by_title(struct bpf_object *obj, const char *title)
948 struct bpf_program *pos;
950 bpf_object__for_each_program(pos, obj) {
951 if (pos->section_name && !strcmp(pos->section_name, title))
958 bpf_program__collect_reloc(struct bpf_program *prog, GElf_Shdr *shdr,
959 Elf_Data *data, struct bpf_object *obj)
961 Elf_Data *symbols = obj->efile.symbols;
962 int text_shndx = obj->efile.text_shndx;
963 int maps_shndx = obj->efile.maps_shndx;
964 struct bpf_map *maps = obj->maps;
965 size_t nr_maps = obj->nr_maps;
968 pr_debug("collecting relocating info for: '%s'\n",
970 nrels = shdr->sh_size / shdr->sh_entsize;
972 prog->reloc_desc = malloc(sizeof(*prog->reloc_desc) * nrels);
973 if (!prog->reloc_desc) {
974 pr_warning("failed to alloc memory in relocation\n");
977 prog->nr_reloc = nrels;
979 for (i = 0; i < nrels; i++) {
982 unsigned int insn_idx;
983 struct bpf_insn *insns = prog->insns;
986 if (!gelf_getrel(data, i, &rel)) {
987 pr_warning("relocation: failed to get %d reloc\n", i);
988 return -LIBBPF_ERRNO__FORMAT;
991 if (!gelf_getsym(symbols,
992 GELF_R_SYM(rel.r_info),
994 pr_warning("relocation: symbol %"PRIx64" not found\n",
995 GELF_R_SYM(rel.r_info));
996 return -LIBBPF_ERRNO__FORMAT;
998 pr_debug("relo for %lld value %lld name %d\n",
999 (long long) (rel.r_info >> 32),
1000 (long long) sym.st_value, sym.st_name);
1002 if (sym.st_shndx != maps_shndx && sym.st_shndx != text_shndx) {
1003 pr_warning("Program '%s' contains non-map related relo data pointing to section %u\n",
1004 prog->section_name, sym.st_shndx);
1005 return -LIBBPF_ERRNO__RELOC;
1008 insn_idx = rel.r_offset / sizeof(struct bpf_insn);
1009 pr_debug("relocation: insn_idx=%u\n", insn_idx);
1011 if (insns[insn_idx].code == (BPF_JMP | BPF_CALL)) {
1012 if (insns[insn_idx].src_reg != BPF_PSEUDO_CALL) {
1013 pr_warning("incorrect bpf_call opcode\n");
1014 return -LIBBPF_ERRNO__RELOC;
1016 prog->reloc_desc[i].type = RELO_CALL;
1017 prog->reloc_desc[i].insn_idx = insn_idx;
1018 prog->reloc_desc[i].text_off = sym.st_value;
1019 obj->has_pseudo_calls = true;
1023 if (insns[insn_idx].code != (BPF_LD | BPF_IMM | BPF_DW)) {
1024 pr_warning("bpf: relocation: invalid relo for insns[%d].code 0x%x\n",
1025 insn_idx, insns[insn_idx].code);
1026 return -LIBBPF_ERRNO__RELOC;
1029 /* TODO: 'maps' is sorted. We can use bsearch to make it faster. */
1030 for (map_idx = 0; map_idx < nr_maps; map_idx++) {
1031 if (maps[map_idx].offset == sym.st_value) {
1032 pr_debug("relocation: find map %zd (%s) for insn %u\n",
1033 map_idx, maps[map_idx].name, insn_idx);
1038 if (map_idx >= nr_maps) {
1039 pr_warning("bpf relocation: map_idx %d large than %d\n",
1040 (int)map_idx, (int)nr_maps - 1);
1041 return -LIBBPF_ERRNO__RELOC;
1044 prog->reloc_desc[i].type = RELO_LD64;
1045 prog->reloc_desc[i].insn_idx = insn_idx;
1046 prog->reloc_desc[i].map_idx = map_idx;
1051 static int bpf_map_find_btf_info(struct bpf_map *map, const struct btf *btf)
1053 struct bpf_map_def *def = &map->def;
1054 __u32 key_type_id, value_type_id;
1057 ret = btf__get_map_kv_tids(btf, map->name, def->key_size,
1058 def->value_size, &key_type_id,
1063 map->btf_key_type_id = key_type_id;
1064 map->btf_value_type_id = value_type_id;
1069 int bpf_map__reuse_fd(struct bpf_map *map, int fd)
1071 struct bpf_map_info info = {};
1072 __u32 len = sizeof(info);
1076 err = bpf_obj_get_info_by_fd(fd, &info, &len);
1080 new_name = strdup(info.name);
1084 new_fd = open("/", O_RDONLY | O_CLOEXEC);
1086 goto err_free_new_name;
1088 new_fd = dup3(fd, new_fd, O_CLOEXEC);
1090 goto err_close_new_fd;
1092 err = zclose(map->fd);
1094 goto err_close_new_fd;
1098 map->name = new_name;
1099 map->def.type = info.type;
1100 map->def.key_size = info.key_size;
1101 map->def.value_size = info.value_size;
1102 map->def.max_entries = info.max_entries;
1103 map->def.map_flags = info.map_flags;
1104 map->btf_key_type_id = info.btf_key_type_id;
1105 map->btf_value_type_id = info.btf_value_type_id;
1116 int bpf_map__resize(struct bpf_map *map, __u32 max_entries)
1118 if (!map || !max_entries)
1121 /* If map already created, its attributes can't be changed. */
1125 map->def.max_entries = max_entries;
1131 bpf_object__probe_name(struct bpf_object *obj)
1133 struct bpf_load_program_attr attr;
1134 char *cp, errmsg[STRERR_BUFSIZE];
1135 struct bpf_insn insns[] = {
1136 BPF_MOV64_IMM(BPF_REG_0, 0),
1141 /* make sure basic loading works */
1143 memset(&attr, 0, sizeof(attr));
1144 attr.prog_type = BPF_PROG_TYPE_SOCKET_FILTER;
1146 attr.insns_cnt = ARRAY_SIZE(insns);
1147 attr.license = "GPL";
1149 ret = bpf_load_program_xattr(&attr, NULL, 0);
1151 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1152 pr_warning("Error in %s():%s(%d). Couldn't load basic 'r0 = 0' BPF program.\n",
1153 __func__, cp, errno);
1158 /* now try the same program, but with the name */
1161 ret = bpf_load_program_xattr(&attr, NULL, 0);
1171 bpf_object__probe_caps(struct bpf_object *obj)
1173 return bpf_object__probe_name(obj);
1177 bpf_object__create_maps(struct bpf_object *obj)
1179 struct bpf_create_map_attr create_attr = {};
1183 for (i = 0; i < obj->nr_maps; i++) {
1184 struct bpf_map *map = &obj->maps[i];
1185 struct bpf_map_def *def = &map->def;
1186 char *cp, errmsg[STRERR_BUFSIZE];
1187 int *pfd = &map->fd;
1190 pr_debug("skip map create (preset) %s: fd=%d\n",
1191 map->name, map->fd);
1196 create_attr.name = map->name;
1197 create_attr.map_ifindex = map->map_ifindex;
1198 create_attr.map_type = def->type;
1199 create_attr.map_flags = def->map_flags;
1200 create_attr.key_size = def->key_size;
1201 create_attr.value_size = def->value_size;
1202 create_attr.max_entries = def->max_entries;
1203 create_attr.btf_fd = 0;
1204 create_attr.btf_key_type_id = 0;
1205 create_attr.btf_value_type_id = 0;
1206 if (bpf_map_type__is_map_in_map(def->type) &&
1207 map->inner_map_fd >= 0)
1208 create_attr.inner_map_fd = map->inner_map_fd;
1210 if (obj->btf && !bpf_map_find_btf_info(map, obj->btf)) {
1211 create_attr.btf_fd = btf__fd(obj->btf);
1212 create_attr.btf_key_type_id = map->btf_key_type_id;
1213 create_attr.btf_value_type_id = map->btf_value_type_id;
1216 *pfd = bpf_create_map_xattr(&create_attr);
1217 if (*pfd < 0 && create_attr.btf_key_type_id) {
1218 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1219 pr_warning("Error in bpf_create_map_xattr(%s):%s(%d). Retrying without BTF.\n",
1220 map->name, cp, errno);
1221 create_attr.btf_fd = 0;
1222 create_attr.btf_key_type_id = 0;
1223 create_attr.btf_value_type_id = 0;
1224 map->btf_key_type_id = 0;
1225 map->btf_value_type_id = 0;
1226 *pfd = bpf_create_map_xattr(&create_attr);
1233 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1234 pr_warning("failed to create map (name: '%s'): %s\n",
1236 for (j = 0; j < i; j++)
1237 zclose(obj->maps[j].fd);
1240 pr_debug("create map %s: fd=%d\n", map->name, *pfd);
1247 check_btf_ext_reloc_err(struct bpf_program *prog, int err,
1248 void *btf_prog_info, const char *info_name)
1250 if (err != -ENOENT) {
1251 pr_warning("Error in loading %s for sec %s.\n",
1252 info_name, prog->section_name);
1256 /* err == -ENOENT (i.e. prog->section_name not found in btf_ext) */
1258 if (btf_prog_info) {
1260 * Some info has already been found but has problem
1261 * in the last btf_ext reloc. Must have to error
1264 pr_warning("Error in relocating %s for sec %s.\n",
1265 info_name, prog->section_name);
1270 * Have problem loading the very first info. Ignore
1273 pr_warning("Cannot find %s for main program sec %s. Ignore all %s.\n",
1274 info_name, prog->section_name, info_name);
1279 bpf_program_reloc_btf_ext(struct bpf_program *prog, struct bpf_object *obj,
1280 const char *section_name, __u32 insn_offset)
1284 if (!insn_offset || prog->func_info) {
1286 * !insn_offset => main program
1288 * For sub prog, the main program's func_info has to
1289 * be loaded first (i.e. prog->func_info != NULL)
1291 err = btf_ext__reloc_func_info(obj->btf, obj->btf_ext,
1292 section_name, insn_offset,
1294 &prog->func_info_cnt);
1296 return check_btf_ext_reloc_err(prog, err,
1300 prog->func_info_rec_size = btf_ext__func_info_rec_size(obj->btf_ext);
1303 if (!insn_offset || prog->line_info) {
1304 err = btf_ext__reloc_line_info(obj->btf, obj->btf_ext,
1305 section_name, insn_offset,
1307 &prog->line_info_cnt);
1309 return check_btf_ext_reloc_err(prog, err,
1313 prog->line_info_rec_size = btf_ext__line_info_rec_size(obj->btf_ext);
1317 prog->btf_fd = btf__fd(obj->btf);
1323 bpf_program__reloc_text(struct bpf_program *prog, struct bpf_object *obj,
1324 struct reloc_desc *relo)
1326 struct bpf_insn *insn, *new_insn;
1327 struct bpf_program *text;
1331 if (relo->type != RELO_CALL)
1332 return -LIBBPF_ERRNO__RELOC;
1334 if (prog->idx == obj->efile.text_shndx) {
1335 pr_warning("relo in .text insn %d into off %d\n",
1336 relo->insn_idx, relo->text_off);
1337 return -LIBBPF_ERRNO__RELOC;
1340 if (prog->main_prog_cnt == 0) {
1341 text = bpf_object__find_prog_by_idx(obj, obj->efile.text_shndx);
1343 pr_warning("no .text section found yet relo into text exist\n");
1344 return -LIBBPF_ERRNO__RELOC;
1346 new_cnt = prog->insns_cnt + text->insns_cnt;
1347 new_insn = reallocarray(prog->insns, new_cnt, sizeof(*insn));
1349 pr_warning("oom in prog realloc\n");
1354 err = bpf_program_reloc_btf_ext(prog, obj,
1361 memcpy(new_insn + prog->insns_cnt, text->insns,
1362 text->insns_cnt * sizeof(*insn));
1363 prog->insns = new_insn;
1364 prog->main_prog_cnt = prog->insns_cnt;
1365 prog->insns_cnt = new_cnt;
1366 pr_debug("added %zd insn from %s to prog %s\n",
1367 text->insns_cnt, text->section_name,
1368 prog->section_name);
1370 insn = &prog->insns[relo->insn_idx];
1371 insn->imm += prog->main_prog_cnt - relo->insn_idx;
1376 bpf_program__relocate(struct bpf_program *prog, struct bpf_object *obj)
1384 err = bpf_program_reloc_btf_ext(prog, obj,
1385 prog->section_name, 0);
1390 if (!prog->reloc_desc)
1393 for (i = 0; i < prog->nr_reloc; i++) {
1394 if (prog->reloc_desc[i].type == RELO_LD64) {
1395 struct bpf_insn *insns = prog->insns;
1396 int insn_idx, map_idx;
1398 insn_idx = prog->reloc_desc[i].insn_idx;
1399 map_idx = prog->reloc_desc[i].map_idx;
1401 if (insn_idx >= (int)prog->insns_cnt) {
1402 pr_warning("relocation out of range: '%s'\n",
1403 prog->section_name);
1404 return -LIBBPF_ERRNO__RELOC;
1406 insns[insn_idx].src_reg = BPF_PSEUDO_MAP_FD;
1407 insns[insn_idx].imm = obj->maps[map_idx].fd;
1409 err = bpf_program__reloc_text(prog, obj,
1410 &prog->reloc_desc[i]);
1416 zfree(&prog->reloc_desc);
1423 bpf_object__relocate(struct bpf_object *obj)
1425 struct bpf_program *prog;
1429 for (i = 0; i < obj->nr_programs; i++) {
1430 prog = &obj->programs[i];
1432 err = bpf_program__relocate(prog, obj);
1434 pr_warning("failed to relocate '%s'\n",
1435 prog->section_name);
1442 static int bpf_object__collect_reloc(struct bpf_object *obj)
1446 if (!obj_elf_valid(obj)) {
1447 pr_warning("Internal error: elf object is closed\n");
1448 return -LIBBPF_ERRNO__INTERNAL;
1451 for (i = 0; i < obj->efile.nr_reloc; i++) {
1452 GElf_Shdr *shdr = &obj->efile.reloc[i].shdr;
1453 Elf_Data *data = obj->efile.reloc[i].data;
1454 int idx = shdr->sh_info;
1455 struct bpf_program *prog;
1457 if (shdr->sh_type != SHT_REL) {
1458 pr_warning("internal error at %d\n", __LINE__);
1459 return -LIBBPF_ERRNO__INTERNAL;
1462 prog = bpf_object__find_prog_by_idx(obj, idx);
1464 pr_warning("relocation failed: no section(%d)\n", idx);
1465 return -LIBBPF_ERRNO__RELOC;
1468 err = bpf_program__collect_reloc(prog,
1478 load_program(struct bpf_program *prog, struct bpf_insn *insns, int insns_cnt,
1479 char *license, __u32 kern_version, int *pfd)
1481 struct bpf_load_program_attr load_attr;
1482 char *cp, errmsg[STRERR_BUFSIZE];
1486 memset(&load_attr, 0, sizeof(struct bpf_load_program_attr));
1487 load_attr.prog_type = prog->type;
1488 load_attr.expected_attach_type = prog->expected_attach_type;
1489 if (prog->caps->name)
1490 load_attr.name = prog->name;
1491 load_attr.insns = insns;
1492 load_attr.insns_cnt = insns_cnt;
1493 load_attr.license = license;
1494 load_attr.kern_version = kern_version;
1495 load_attr.prog_ifindex = prog->prog_ifindex;
1496 load_attr.prog_btf_fd = prog->btf_fd >= 0 ? prog->btf_fd : 0;
1497 load_attr.func_info = prog->func_info;
1498 load_attr.func_info_rec_size = prog->func_info_rec_size;
1499 load_attr.func_info_cnt = prog->func_info_cnt;
1500 load_attr.line_info = prog->line_info;
1501 load_attr.line_info_rec_size = prog->line_info_rec_size;
1502 load_attr.line_info_cnt = prog->line_info_cnt;
1503 if (!load_attr.insns || !load_attr.insns_cnt)
1506 log_buf = malloc(BPF_LOG_BUF_SIZE);
1508 pr_warning("Alloc log buffer for bpf loader error, continue without log\n");
1510 ret = bpf_load_program_xattr(&load_attr, log_buf, BPF_LOG_BUF_SIZE);
1518 ret = -LIBBPF_ERRNO__LOAD;
1519 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1520 pr_warning("load bpf program failed: %s\n", cp);
1522 if (log_buf && log_buf[0] != '\0') {
1523 ret = -LIBBPF_ERRNO__VERIFY;
1524 pr_warning("-- BEGIN DUMP LOG ---\n");
1525 pr_warning("\n%s\n", log_buf);
1526 pr_warning("-- END LOG --\n");
1527 } else if (load_attr.insns_cnt >= BPF_MAXINSNS) {
1528 pr_warning("Program too large (%zu insns), at most %d insns\n",
1529 load_attr.insns_cnt, BPF_MAXINSNS);
1530 ret = -LIBBPF_ERRNO__PROG2BIG;
1532 /* Wrong program type? */
1533 if (load_attr.prog_type != BPF_PROG_TYPE_KPROBE) {
1536 load_attr.prog_type = BPF_PROG_TYPE_KPROBE;
1537 load_attr.expected_attach_type = 0;
1538 fd = bpf_load_program_xattr(&load_attr, NULL, 0);
1541 ret = -LIBBPF_ERRNO__PROGTYPE;
1547 ret = -LIBBPF_ERRNO__KVER;
1556 bpf_program__load(struct bpf_program *prog,
1557 char *license, __u32 kern_version)
1561 if (prog->instances.nr < 0 || !prog->instances.fds) {
1562 if (prog->preprocessor) {
1563 pr_warning("Internal error: can't load program '%s'\n",
1564 prog->section_name);
1565 return -LIBBPF_ERRNO__INTERNAL;
1568 prog->instances.fds = malloc(sizeof(int));
1569 if (!prog->instances.fds) {
1570 pr_warning("Not enough memory for BPF fds\n");
1573 prog->instances.nr = 1;
1574 prog->instances.fds[0] = -1;
1577 if (!prog->preprocessor) {
1578 if (prog->instances.nr != 1) {
1579 pr_warning("Program '%s' is inconsistent: nr(%d) != 1\n",
1580 prog->section_name, prog->instances.nr);
1582 err = load_program(prog, prog->insns, prog->insns_cnt,
1583 license, kern_version, &fd);
1585 prog->instances.fds[0] = fd;
1589 for (i = 0; i < prog->instances.nr; i++) {
1590 struct bpf_prog_prep_result result;
1591 bpf_program_prep_t preprocessor = prog->preprocessor;
1593 memset(&result, 0, sizeof(result));
1594 err = preprocessor(prog, i, prog->insns,
1595 prog->insns_cnt, &result);
1597 pr_warning("Preprocessing the %dth instance of program '%s' failed\n",
1598 i, prog->section_name);
1602 if (!result.new_insn_ptr || !result.new_insn_cnt) {
1603 pr_debug("Skip loading the %dth instance of program '%s'\n",
1604 i, prog->section_name);
1605 prog->instances.fds[i] = -1;
1611 err = load_program(prog, result.new_insn_ptr,
1612 result.new_insn_cnt,
1613 license, kern_version, &fd);
1616 pr_warning("Loading the %dth instance of program '%s' failed\n",
1617 i, prog->section_name);
1623 prog->instances.fds[i] = fd;
1627 pr_warning("failed to load program '%s'\n",
1628 prog->section_name);
1629 zfree(&prog->insns);
1630 prog->insns_cnt = 0;
1634 static bool bpf_program__is_function_storage(struct bpf_program *prog,
1635 struct bpf_object *obj)
1637 return prog->idx == obj->efile.text_shndx && obj->has_pseudo_calls;
1641 bpf_object__load_progs(struct bpf_object *obj)
1646 for (i = 0; i < obj->nr_programs; i++) {
1647 if (bpf_program__is_function_storage(&obj->programs[i], obj))
1649 err = bpf_program__load(&obj->programs[i],
1658 static bool bpf_prog_type__needs_kver(enum bpf_prog_type type)
1661 case BPF_PROG_TYPE_SOCKET_FILTER:
1662 case BPF_PROG_TYPE_SCHED_CLS:
1663 case BPF_PROG_TYPE_SCHED_ACT:
1664 case BPF_PROG_TYPE_XDP:
1665 case BPF_PROG_TYPE_CGROUP_SKB:
1666 case BPF_PROG_TYPE_CGROUP_SOCK:
1667 case BPF_PROG_TYPE_LWT_IN:
1668 case BPF_PROG_TYPE_LWT_OUT:
1669 case BPF_PROG_TYPE_LWT_XMIT:
1670 case BPF_PROG_TYPE_LWT_SEG6LOCAL:
1671 case BPF_PROG_TYPE_SOCK_OPS:
1672 case BPF_PROG_TYPE_SK_SKB:
1673 case BPF_PROG_TYPE_CGROUP_DEVICE:
1674 case BPF_PROG_TYPE_SK_MSG:
1675 case BPF_PROG_TYPE_CGROUP_SOCK_ADDR:
1676 case BPF_PROG_TYPE_LIRC_MODE2:
1677 case BPF_PROG_TYPE_SK_REUSEPORT:
1678 case BPF_PROG_TYPE_FLOW_DISSECTOR:
1679 case BPF_PROG_TYPE_UNSPEC:
1680 case BPF_PROG_TYPE_TRACEPOINT:
1681 case BPF_PROG_TYPE_RAW_TRACEPOINT:
1682 case BPF_PROG_TYPE_PERF_EVENT:
1684 case BPF_PROG_TYPE_KPROBE:
1690 static int bpf_object__validate(struct bpf_object *obj, bool needs_kver)
1692 if (needs_kver && obj->kern_version == 0) {
1693 pr_warning("%s doesn't provide kernel version\n",
1695 return -LIBBPF_ERRNO__KVERSION;
1700 static struct bpf_object *
1701 __bpf_object__open(const char *path, void *obj_buf, size_t obj_buf_sz,
1702 bool needs_kver, int flags)
1704 struct bpf_object *obj;
1707 if (elf_version(EV_CURRENT) == EV_NONE) {
1708 pr_warning("failed to init libelf for %s\n", path);
1709 return ERR_PTR(-LIBBPF_ERRNO__LIBELF);
1712 obj = bpf_object__new(path, obj_buf, obj_buf_sz);
1716 CHECK_ERR(bpf_object__elf_init(obj), err, out);
1717 CHECK_ERR(bpf_object__check_endianness(obj), err, out);
1718 CHECK_ERR(bpf_object__elf_collect(obj, flags), err, out);
1719 CHECK_ERR(bpf_object__collect_reloc(obj), err, out);
1720 CHECK_ERR(bpf_object__validate(obj, needs_kver), err, out);
1722 bpf_object__elf_finish(obj);
1725 bpf_object__close(obj);
1726 return ERR_PTR(err);
1729 struct bpf_object *__bpf_object__open_xattr(struct bpf_object_open_attr *attr,
1732 /* param validation */
1736 pr_debug("loading %s\n", attr->file);
1738 return __bpf_object__open(attr->file, NULL, 0,
1739 bpf_prog_type__needs_kver(attr->prog_type),
1743 struct bpf_object *bpf_object__open_xattr(struct bpf_object_open_attr *attr)
1745 return __bpf_object__open_xattr(attr, 0);
1748 struct bpf_object *bpf_object__open(const char *path)
1750 struct bpf_object_open_attr attr = {
1752 .prog_type = BPF_PROG_TYPE_UNSPEC,
1755 return bpf_object__open_xattr(&attr);
1758 struct bpf_object *bpf_object__open_buffer(void *obj_buf,
1764 /* param validation */
1765 if (!obj_buf || obj_buf_sz <= 0)
1769 snprintf(tmp_name, sizeof(tmp_name), "%lx-%lx",
1770 (unsigned long)obj_buf,
1771 (unsigned long)obj_buf_sz);
1772 tmp_name[sizeof(tmp_name) - 1] = '\0';
1775 pr_debug("loading object '%s' from buffer\n",
1778 return __bpf_object__open(name, obj_buf, obj_buf_sz, true, true);
1781 int bpf_object__unload(struct bpf_object *obj)
1788 for (i = 0; i < obj->nr_maps; i++)
1789 zclose(obj->maps[i].fd);
1791 for (i = 0; i < obj->nr_programs; i++)
1792 bpf_program__unload(&obj->programs[i]);
1797 int bpf_object__load(struct bpf_object *obj)
1805 pr_warning("object should not be loaded twice\n");
1811 CHECK_ERR(bpf_object__probe_caps(obj), err, out);
1812 CHECK_ERR(bpf_object__create_maps(obj), err, out);
1813 CHECK_ERR(bpf_object__relocate(obj), err, out);
1814 CHECK_ERR(bpf_object__load_progs(obj), err, out);
1818 bpf_object__unload(obj);
1819 pr_warning("failed to load object '%s'\n", obj->path);
1823 static int check_path(const char *path)
1825 char *cp, errmsg[STRERR_BUFSIZE];
1826 struct statfs st_fs;
1833 dname = strdup(path);
1837 dir = dirname(dname);
1838 if (statfs(dir, &st_fs)) {
1839 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1840 pr_warning("failed to statfs %s: %s\n", dir, cp);
1845 if (!err && st_fs.f_type != BPF_FS_MAGIC) {
1846 pr_warning("specified path %s is not on BPF FS\n", path);
1853 int bpf_program__pin_instance(struct bpf_program *prog, const char *path,
1856 char *cp, errmsg[STRERR_BUFSIZE];
1859 err = check_path(path);
1864 pr_warning("invalid program pointer\n");
1868 if (instance < 0 || instance >= prog->instances.nr) {
1869 pr_warning("invalid prog instance %d of prog %s (max %d)\n",
1870 instance, prog->section_name, prog->instances.nr);
1874 if (bpf_obj_pin(prog->instances.fds[instance], path)) {
1875 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
1876 pr_warning("failed to pin program: %s\n", cp);
1879 pr_debug("pinned program '%s'\n", path);
1884 int bpf_program__unpin_instance(struct bpf_program *prog, const char *path,
1889 err = check_path(path);
1894 pr_warning("invalid program pointer\n");
1898 if (instance < 0 || instance >= prog->instances.nr) {
1899 pr_warning("invalid prog instance %d of prog %s (max %d)\n",
1900 instance, prog->section_name, prog->instances.nr);
1907 pr_debug("unpinned program '%s'\n", path);
1912 static int make_dir(const char *path)
1914 char *cp, errmsg[STRERR_BUFSIZE];
1917 if (mkdir(path, 0700) && errno != EEXIST)
1921 cp = libbpf_strerror_r(-err, errmsg, sizeof(errmsg));
1922 pr_warning("failed to mkdir %s: %s\n", path, cp);
1927 int bpf_program__pin(struct bpf_program *prog, const char *path)
1931 err = check_path(path);
1936 pr_warning("invalid program pointer\n");
1940 if (prog->instances.nr <= 0) {
1941 pr_warning("no instances of prog %s to pin\n",
1942 prog->section_name);
1946 if (prog->instances.nr == 1) {
1947 /* don't create subdirs when pinning single instance */
1948 return bpf_program__pin_instance(prog, path, 0);
1951 err = make_dir(path);
1955 for (i = 0; i < prog->instances.nr; i++) {
1959 len = snprintf(buf, PATH_MAX, "%s/%d", path, i);
1963 } else if (len >= PATH_MAX) {
1964 err = -ENAMETOOLONG;
1968 err = bpf_program__pin_instance(prog, buf, i);
1976 for (i = i - 1; i >= 0; i--) {
1980 len = snprintf(buf, PATH_MAX, "%s/%d", path, i);
1983 else if (len >= PATH_MAX)
1986 bpf_program__unpin_instance(prog, buf, i);
1994 int bpf_program__unpin(struct bpf_program *prog, const char *path)
1998 err = check_path(path);
2003 pr_warning("invalid program pointer\n");
2007 if (prog->instances.nr <= 0) {
2008 pr_warning("no instances of prog %s to pin\n",
2009 prog->section_name);
2013 if (prog->instances.nr == 1) {
2014 /* don't create subdirs when pinning single instance */
2015 return bpf_program__unpin_instance(prog, path, 0);
2018 for (i = 0; i < prog->instances.nr; i++) {
2022 len = snprintf(buf, PATH_MAX, "%s/%d", path, i);
2025 else if (len >= PATH_MAX)
2026 return -ENAMETOOLONG;
2028 err = bpf_program__unpin_instance(prog, buf, i);
2040 int bpf_map__pin(struct bpf_map *map, const char *path)
2042 char *cp, errmsg[STRERR_BUFSIZE];
2045 err = check_path(path);
2050 pr_warning("invalid map pointer\n");
2054 if (bpf_obj_pin(map->fd, path)) {
2055 cp = libbpf_strerror_r(errno, errmsg, sizeof(errmsg));
2056 pr_warning("failed to pin map: %s\n", cp);
2060 pr_debug("pinned map '%s'\n", path);
2065 int bpf_map__unpin(struct bpf_map *map, const char *path)
2069 err = check_path(path);
2074 pr_warning("invalid map pointer\n");
2081 pr_debug("unpinned map '%s'\n", path);
2086 int bpf_object__pin_maps(struct bpf_object *obj, const char *path)
2088 struct bpf_map *map;
2095 pr_warning("object not yet loaded; load it first\n");
2099 err = make_dir(path);
2103 bpf_object__for_each_map(map, obj) {
2107 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2108 bpf_map__name(map));
2111 goto err_unpin_maps;
2112 } else if (len >= PATH_MAX) {
2113 err = -ENAMETOOLONG;
2114 goto err_unpin_maps;
2117 err = bpf_map__pin(map, buf);
2119 goto err_unpin_maps;
2125 while ((map = bpf_map__prev(map, obj))) {
2129 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2130 bpf_map__name(map));
2133 else if (len >= PATH_MAX)
2136 bpf_map__unpin(map, buf);
2142 int bpf_object__unpin_maps(struct bpf_object *obj, const char *path)
2144 struct bpf_map *map;
2150 bpf_object__for_each_map(map, obj) {
2154 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2155 bpf_map__name(map));
2158 else if (len >= PATH_MAX)
2159 return -ENAMETOOLONG;
2161 err = bpf_map__unpin(map, buf);
2169 int bpf_object__pin_programs(struct bpf_object *obj, const char *path)
2171 struct bpf_program *prog;
2178 pr_warning("object not yet loaded; load it first\n");
2182 err = make_dir(path);
2186 bpf_object__for_each_program(prog, obj) {
2190 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2194 goto err_unpin_programs;
2195 } else if (len >= PATH_MAX) {
2196 err = -ENAMETOOLONG;
2197 goto err_unpin_programs;
2200 err = bpf_program__pin(prog, buf);
2202 goto err_unpin_programs;
2208 while ((prog = bpf_program__prev(prog, obj))) {
2212 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2216 else if (len >= PATH_MAX)
2219 bpf_program__unpin(prog, buf);
2225 int bpf_object__unpin_programs(struct bpf_object *obj, const char *path)
2227 struct bpf_program *prog;
2233 bpf_object__for_each_program(prog, obj) {
2237 len = snprintf(buf, PATH_MAX, "%s/%s", path,
2241 else if (len >= PATH_MAX)
2242 return -ENAMETOOLONG;
2244 err = bpf_program__unpin(prog, buf);
2252 int bpf_object__pin(struct bpf_object *obj, const char *path)
2256 err = bpf_object__pin_maps(obj, path);
2260 err = bpf_object__pin_programs(obj, path);
2262 bpf_object__unpin_maps(obj, path);
2269 void bpf_object__close(struct bpf_object *obj)
2276 if (obj->clear_priv)
2277 obj->clear_priv(obj, obj->priv);
2279 bpf_object__elf_finish(obj);
2280 bpf_object__unload(obj);
2281 btf__free(obj->btf);
2282 btf_ext__free(obj->btf_ext);
2284 for (i = 0; i < obj->nr_maps; i++) {
2285 zfree(&obj->maps[i].name);
2286 if (obj->maps[i].clear_priv)
2287 obj->maps[i].clear_priv(&obj->maps[i],
2289 obj->maps[i].priv = NULL;
2290 obj->maps[i].clear_priv = NULL;
2295 if (obj->programs && obj->nr_programs) {
2296 for (i = 0; i < obj->nr_programs; i++)
2297 bpf_program__exit(&obj->programs[i]);
2299 zfree(&obj->programs);
2301 list_del(&obj->list);
2306 bpf_object__next(struct bpf_object *prev)
2308 struct bpf_object *next;
2311 next = list_first_entry(&bpf_objects_list,
2315 next = list_next_entry(prev, list);
2317 /* Empty list is noticed here so don't need checking on entry. */
2318 if (&next->list == &bpf_objects_list)
2324 const char *bpf_object__name(struct bpf_object *obj)
2326 return obj ? obj->path : ERR_PTR(-EINVAL);
2329 unsigned int bpf_object__kversion(struct bpf_object *obj)
2331 return obj ? obj->kern_version : 0;
2334 struct btf *bpf_object__btf(struct bpf_object *obj)
2336 return obj ? obj->btf : NULL;
2339 int bpf_object__btf_fd(const struct bpf_object *obj)
2341 return obj->btf ? btf__fd(obj->btf) : -1;
2344 int bpf_object__set_priv(struct bpf_object *obj, void *priv,
2345 bpf_object_clear_priv_t clear_priv)
2347 if (obj->priv && obj->clear_priv)
2348 obj->clear_priv(obj, obj->priv);
2351 obj->clear_priv = clear_priv;
2355 void *bpf_object__priv(struct bpf_object *obj)
2357 return obj ? obj->priv : ERR_PTR(-EINVAL);
2360 static struct bpf_program *
2361 __bpf_program__iter(struct bpf_program *p, struct bpf_object *obj, bool forward)
2363 size_t nr_programs = obj->nr_programs;
2370 /* Iter from the beginning */
2371 return forward ? &obj->programs[0] :
2372 &obj->programs[nr_programs - 1];
2374 if (p->obj != obj) {
2375 pr_warning("error: program handler doesn't match object\n");
2379 idx = (p - obj->programs) + (forward ? 1 : -1);
2380 if (idx >= obj->nr_programs || idx < 0)
2382 return &obj->programs[idx];
2385 struct bpf_program *
2386 bpf_program__next(struct bpf_program *prev, struct bpf_object *obj)
2388 struct bpf_program *prog = prev;
2391 prog = __bpf_program__iter(prog, obj, true);
2392 } while (prog && bpf_program__is_function_storage(prog, obj));
2397 struct bpf_program *
2398 bpf_program__prev(struct bpf_program *next, struct bpf_object *obj)
2400 struct bpf_program *prog = next;
2403 prog = __bpf_program__iter(prog, obj, false);
2404 } while (prog && bpf_program__is_function_storage(prog, obj));
2409 int bpf_program__set_priv(struct bpf_program *prog, void *priv,
2410 bpf_program_clear_priv_t clear_priv)
2412 if (prog->priv && prog->clear_priv)
2413 prog->clear_priv(prog, prog->priv);
2416 prog->clear_priv = clear_priv;
2420 void *bpf_program__priv(struct bpf_program *prog)
2422 return prog ? prog->priv : ERR_PTR(-EINVAL);
2425 void bpf_program__set_ifindex(struct bpf_program *prog, __u32 ifindex)
2427 prog->prog_ifindex = ifindex;
2430 const char *bpf_program__title(struct bpf_program *prog, bool needs_copy)
2434 title = prog->section_name;
2436 title = strdup(title);
2438 pr_warning("failed to strdup program title\n");
2439 return ERR_PTR(-ENOMEM);
2446 int bpf_program__fd(struct bpf_program *prog)
2448 return bpf_program__nth_fd(prog, 0);
2451 int bpf_program__set_prep(struct bpf_program *prog, int nr_instances,
2452 bpf_program_prep_t prep)
2456 if (nr_instances <= 0 || !prep)
2459 if (prog->instances.nr > 0 || prog->instances.fds) {
2460 pr_warning("Can't set pre-processor after loading\n");
2464 instances_fds = malloc(sizeof(int) * nr_instances);
2465 if (!instances_fds) {
2466 pr_warning("alloc memory failed for fds\n");
2470 /* fill all fd with -1 */
2471 memset(instances_fds, -1, sizeof(int) * nr_instances);
2473 prog->instances.nr = nr_instances;
2474 prog->instances.fds = instances_fds;
2475 prog->preprocessor = prep;
2479 int bpf_program__nth_fd(struct bpf_program *prog, int n)
2486 if (n >= prog->instances.nr || n < 0) {
2487 pr_warning("Can't get the %dth fd from program %s: only %d instances\n",
2488 n, prog->section_name, prog->instances.nr);
2492 fd = prog->instances.fds[n];
2494 pr_warning("%dth instance of program '%s' is invalid\n",
2495 n, prog->section_name);
2502 void bpf_program__set_type(struct bpf_program *prog, enum bpf_prog_type type)
2507 static bool bpf_program__is_type(struct bpf_program *prog,
2508 enum bpf_prog_type type)
2510 return prog ? (prog->type == type) : false;
2513 #define BPF_PROG_TYPE_FNS(NAME, TYPE) \
2514 int bpf_program__set_##NAME(struct bpf_program *prog) \
2518 bpf_program__set_type(prog, TYPE); \
2522 bool bpf_program__is_##NAME(struct bpf_program *prog) \
2524 return bpf_program__is_type(prog, TYPE); \
2527 BPF_PROG_TYPE_FNS(socket_filter, BPF_PROG_TYPE_SOCKET_FILTER);
2528 BPF_PROG_TYPE_FNS(kprobe, BPF_PROG_TYPE_KPROBE);
2529 BPF_PROG_TYPE_FNS(sched_cls, BPF_PROG_TYPE_SCHED_CLS);
2530 BPF_PROG_TYPE_FNS(sched_act, BPF_PROG_TYPE_SCHED_ACT);
2531 BPF_PROG_TYPE_FNS(tracepoint, BPF_PROG_TYPE_TRACEPOINT);
2532 BPF_PROG_TYPE_FNS(raw_tracepoint, BPF_PROG_TYPE_RAW_TRACEPOINT);
2533 BPF_PROG_TYPE_FNS(xdp, BPF_PROG_TYPE_XDP);
2534 BPF_PROG_TYPE_FNS(perf_event, BPF_PROG_TYPE_PERF_EVENT);
2536 void bpf_program__set_expected_attach_type(struct bpf_program *prog,
2537 enum bpf_attach_type type)
2539 prog->expected_attach_type = type;
2542 #define BPF_PROG_SEC_IMPL(string, ptype, eatype, is_attachable, atype) \
2543 { string, sizeof(string) - 1, ptype, eatype, is_attachable, atype }
2545 /* Programs that can NOT be attached. */
2546 #define BPF_PROG_SEC(string, ptype) BPF_PROG_SEC_IMPL(string, ptype, 0, 0, 0)
2548 /* Programs that can be attached. */
2549 #define BPF_APROG_SEC(string, ptype, atype) \
2550 BPF_PROG_SEC_IMPL(string, ptype, 0, 1, atype)
2552 /* Programs that must specify expected attach type at load time. */
2553 #define BPF_EAPROG_SEC(string, ptype, eatype) \
2554 BPF_PROG_SEC_IMPL(string, ptype, eatype, 1, eatype)
2556 /* Programs that can be attached but attach type can't be identified by section
2557 * name. Kept for backward compatibility.
2559 #define BPF_APROG_COMPAT(string, ptype) BPF_PROG_SEC(string, ptype)
2561 static const struct {
2564 enum bpf_prog_type prog_type;
2565 enum bpf_attach_type expected_attach_type;
2567 enum bpf_attach_type attach_type;
2568 } section_names[] = {
2569 BPF_PROG_SEC("socket", BPF_PROG_TYPE_SOCKET_FILTER),
2570 BPF_PROG_SEC("kprobe/", BPF_PROG_TYPE_KPROBE),
2571 BPF_PROG_SEC("kretprobe/", BPF_PROG_TYPE_KPROBE),
2572 BPF_PROG_SEC("classifier", BPF_PROG_TYPE_SCHED_CLS),
2573 BPF_PROG_SEC("action", BPF_PROG_TYPE_SCHED_ACT),
2574 BPF_PROG_SEC("tracepoint/", BPF_PROG_TYPE_TRACEPOINT),
2575 BPF_PROG_SEC("raw_tracepoint/", BPF_PROG_TYPE_RAW_TRACEPOINT),
2576 BPF_PROG_SEC("xdp", BPF_PROG_TYPE_XDP),
2577 BPF_PROG_SEC("perf_event", BPF_PROG_TYPE_PERF_EVENT),
2578 BPF_PROG_SEC("lwt_in", BPF_PROG_TYPE_LWT_IN),
2579 BPF_PROG_SEC("lwt_out", BPF_PROG_TYPE_LWT_OUT),
2580 BPF_PROG_SEC("lwt_xmit", BPF_PROG_TYPE_LWT_XMIT),
2581 BPF_PROG_SEC("lwt_seg6local", BPF_PROG_TYPE_LWT_SEG6LOCAL),
2582 BPF_APROG_SEC("cgroup_skb/ingress", BPF_PROG_TYPE_CGROUP_SKB,
2583 BPF_CGROUP_INET_INGRESS),
2584 BPF_APROG_SEC("cgroup_skb/egress", BPF_PROG_TYPE_CGROUP_SKB,
2585 BPF_CGROUP_INET_EGRESS),
2586 BPF_APROG_COMPAT("cgroup/skb", BPF_PROG_TYPE_CGROUP_SKB),
2587 BPF_APROG_SEC("cgroup/sock", BPF_PROG_TYPE_CGROUP_SOCK,
2588 BPF_CGROUP_INET_SOCK_CREATE),
2589 BPF_EAPROG_SEC("cgroup/post_bind4", BPF_PROG_TYPE_CGROUP_SOCK,
2590 BPF_CGROUP_INET4_POST_BIND),
2591 BPF_EAPROG_SEC("cgroup/post_bind6", BPF_PROG_TYPE_CGROUP_SOCK,
2592 BPF_CGROUP_INET6_POST_BIND),
2593 BPF_APROG_SEC("cgroup/dev", BPF_PROG_TYPE_CGROUP_DEVICE,
2595 BPF_APROG_SEC("sockops", BPF_PROG_TYPE_SOCK_OPS,
2596 BPF_CGROUP_SOCK_OPS),
2597 BPF_APROG_SEC("sk_skb/stream_parser", BPF_PROG_TYPE_SK_SKB,
2598 BPF_SK_SKB_STREAM_PARSER),
2599 BPF_APROG_SEC("sk_skb/stream_verdict", BPF_PROG_TYPE_SK_SKB,
2600 BPF_SK_SKB_STREAM_VERDICT),
2601 BPF_APROG_COMPAT("sk_skb", BPF_PROG_TYPE_SK_SKB),
2602 BPF_APROG_SEC("sk_msg", BPF_PROG_TYPE_SK_MSG,
2603 BPF_SK_MSG_VERDICT),
2604 BPF_APROG_SEC("lirc_mode2", BPF_PROG_TYPE_LIRC_MODE2,
2606 BPF_APROG_SEC("flow_dissector", BPF_PROG_TYPE_FLOW_DISSECTOR,
2607 BPF_FLOW_DISSECTOR),
2608 BPF_EAPROG_SEC("cgroup/bind4", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2609 BPF_CGROUP_INET4_BIND),
2610 BPF_EAPROG_SEC("cgroup/bind6", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2611 BPF_CGROUP_INET6_BIND),
2612 BPF_EAPROG_SEC("cgroup/connect4", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2613 BPF_CGROUP_INET4_CONNECT),
2614 BPF_EAPROG_SEC("cgroup/connect6", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2615 BPF_CGROUP_INET6_CONNECT),
2616 BPF_EAPROG_SEC("cgroup/sendmsg4", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2617 BPF_CGROUP_UDP4_SENDMSG),
2618 BPF_EAPROG_SEC("cgroup/sendmsg6", BPF_PROG_TYPE_CGROUP_SOCK_ADDR,
2619 BPF_CGROUP_UDP6_SENDMSG),
2622 #undef BPF_PROG_SEC_IMPL
2624 #undef BPF_APROG_SEC
2625 #undef BPF_EAPROG_SEC
2626 #undef BPF_APROG_COMPAT
2628 #define MAX_TYPE_NAME_SIZE 32
2630 static char *libbpf_get_type_names(bool attach_type)
2632 int i, len = ARRAY_SIZE(section_names) * MAX_TYPE_NAME_SIZE;
2640 /* Forge string buf with all available names */
2641 for (i = 0; i < ARRAY_SIZE(section_names); i++) {
2642 if (attach_type && !section_names[i].is_attachable)
2645 if (strlen(buf) + strlen(section_names[i].sec) + 2 > len) {
2650 strcat(buf, section_names[i].sec);
2656 int libbpf_prog_type_by_name(const char *name, enum bpf_prog_type *prog_type,
2657 enum bpf_attach_type *expected_attach_type)
2665 for (i = 0; i < ARRAY_SIZE(section_names); i++) {
2666 if (strncmp(name, section_names[i].sec, section_names[i].len))
2668 *prog_type = section_names[i].prog_type;
2669 *expected_attach_type = section_names[i].expected_attach_type;
2672 pr_warning("failed to guess program type based on ELF section name '%s'\n", name);
2673 type_names = libbpf_get_type_names(false);
2674 if (type_names != NULL) {
2675 pr_info("supported section(type) names are:%s\n", type_names);
2682 int libbpf_attach_type_by_name(const char *name,
2683 enum bpf_attach_type *attach_type)
2691 for (i = 0; i < ARRAY_SIZE(section_names); i++) {
2692 if (strncmp(name, section_names[i].sec, section_names[i].len))
2694 if (!section_names[i].is_attachable)
2696 *attach_type = section_names[i].attach_type;
2699 pr_warning("failed to guess attach type based on ELF section name '%s'\n", name);
2700 type_names = libbpf_get_type_names(true);
2701 if (type_names != NULL) {
2702 pr_info("attachable section(type) names are:%s\n", type_names);
2710 bpf_program__identify_section(struct bpf_program *prog,
2711 enum bpf_prog_type *prog_type,
2712 enum bpf_attach_type *expected_attach_type)
2714 return libbpf_prog_type_by_name(prog->section_name, prog_type,
2715 expected_attach_type);
2718 int bpf_map__fd(struct bpf_map *map)
2720 return map ? map->fd : -EINVAL;
2723 const struct bpf_map_def *bpf_map__def(struct bpf_map *map)
2725 return map ? &map->def : ERR_PTR(-EINVAL);
2728 const char *bpf_map__name(struct bpf_map *map)
2730 return map ? map->name : NULL;
2733 __u32 bpf_map__btf_key_type_id(const struct bpf_map *map)
2735 return map ? map->btf_key_type_id : 0;
2738 __u32 bpf_map__btf_value_type_id(const struct bpf_map *map)
2740 return map ? map->btf_value_type_id : 0;
2743 int bpf_map__set_priv(struct bpf_map *map, void *priv,
2744 bpf_map_clear_priv_t clear_priv)
2750 if (map->clear_priv)
2751 map->clear_priv(map, map->priv);
2755 map->clear_priv = clear_priv;
2759 void *bpf_map__priv(struct bpf_map *map)
2761 return map ? map->priv : ERR_PTR(-EINVAL);
2764 bool bpf_map__is_offload_neutral(struct bpf_map *map)
2766 return map->def.type == BPF_MAP_TYPE_PERF_EVENT_ARRAY;
2769 void bpf_map__set_ifindex(struct bpf_map *map, __u32 ifindex)
2771 map->map_ifindex = ifindex;
2774 int bpf_map__set_inner_map_fd(struct bpf_map *map, int fd)
2776 if (!bpf_map_type__is_map_in_map(map->def.type)) {
2777 pr_warning("error: unsupported map type\n");
2780 if (map->inner_map_fd != -1) {
2781 pr_warning("error: inner_map_fd already specified\n");
2784 map->inner_map_fd = fd;
2788 static struct bpf_map *
2789 __bpf_map__iter(struct bpf_map *m, struct bpf_object *obj, int i)
2792 struct bpf_map *s, *e;
2794 if (!obj || !obj->maps)
2798 e = obj->maps + obj->nr_maps;
2800 if ((m < s) || (m >= e)) {
2801 pr_warning("error in %s: map handler doesn't belong to object\n",
2806 idx = (m - obj->maps) + i;
2807 if (idx >= obj->nr_maps || idx < 0)
2809 return &obj->maps[idx];
2813 bpf_map__next(struct bpf_map *prev, struct bpf_object *obj)
2818 return __bpf_map__iter(prev, obj, 1);
2822 bpf_map__prev(struct bpf_map *next, struct bpf_object *obj)
2827 return obj->maps + obj->nr_maps - 1;
2830 return __bpf_map__iter(next, obj, -1);
2834 bpf_object__find_map_by_name(struct bpf_object *obj, const char *name)
2836 struct bpf_map *pos;
2838 bpf_object__for_each_map(pos, obj) {
2839 if (pos->name && !strcmp(pos->name, name))
2846 bpf_object__find_map_fd_by_name(struct bpf_object *obj, const char *name)
2848 return bpf_map__fd(bpf_object__find_map_by_name(obj, name));
2852 bpf_object__find_map_by_offset(struct bpf_object *obj, size_t offset)
2856 for (i = 0; i < obj->nr_maps; i++) {
2857 if (obj->maps[i].offset == offset)
2858 return &obj->maps[i];
2860 return ERR_PTR(-ENOENT);
2863 long libbpf_get_error(const void *ptr)
2866 return PTR_ERR(ptr);
2870 int bpf_prog_load(const char *file, enum bpf_prog_type type,
2871 struct bpf_object **pobj, int *prog_fd)
2873 struct bpf_prog_load_attr attr;
2875 memset(&attr, 0, sizeof(struct bpf_prog_load_attr));
2877 attr.prog_type = type;
2878 attr.expected_attach_type = 0;
2880 return bpf_prog_load_xattr(&attr, pobj, prog_fd);
2883 int bpf_prog_load_xattr(const struct bpf_prog_load_attr *attr,
2884 struct bpf_object **pobj, int *prog_fd)
2886 struct bpf_object_open_attr open_attr = {
2888 .prog_type = attr->prog_type,
2890 struct bpf_program *prog, *first_prog = NULL;
2891 enum bpf_attach_type expected_attach_type;
2892 enum bpf_prog_type prog_type;
2893 struct bpf_object *obj;
2894 struct bpf_map *map;
2902 obj = bpf_object__open_xattr(&open_attr);
2903 if (IS_ERR_OR_NULL(obj))
2906 bpf_object__for_each_program(prog, obj) {
2908 * If type is not specified, try to guess it based on
2911 prog_type = attr->prog_type;
2912 prog->prog_ifindex = attr->ifindex;
2913 expected_attach_type = attr->expected_attach_type;
2914 if (prog_type == BPF_PROG_TYPE_UNSPEC) {
2915 err = bpf_program__identify_section(prog, &prog_type,
2916 &expected_attach_type);
2918 bpf_object__close(obj);
2923 bpf_program__set_type(prog, prog_type);
2924 bpf_program__set_expected_attach_type(prog,
2925 expected_attach_type);
2931 bpf_object__for_each_map(map, obj) {
2932 if (!bpf_map__is_offload_neutral(map))
2933 map->map_ifindex = attr->ifindex;
2937 pr_warning("object file doesn't contain bpf program\n");
2938 bpf_object__close(obj);
2942 err = bpf_object__load(obj);
2944 bpf_object__close(obj);
2949 *prog_fd = bpf_program__fd(first_prog);
2953 enum bpf_perf_event_ret
2954 bpf_perf_event_read_simple(void *mmap_mem, size_t mmap_size, size_t page_size,
2955 void **copy_mem, size_t *copy_size,
2956 bpf_perf_event_print_t fn, void *private_data)
2958 struct perf_event_mmap_page *header = mmap_mem;
2959 __u64 data_head = ring_buffer_read_head(header);
2960 __u64 data_tail = header->data_tail;
2961 void *base = ((__u8 *)header) + page_size;
2962 int ret = LIBBPF_PERF_EVENT_CONT;
2963 struct perf_event_header *ehdr;
2966 while (data_head != data_tail) {
2967 ehdr = base + (data_tail & (mmap_size - 1));
2968 ehdr_size = ehdr->size;
2970 if (((void *)ehdr) + ehdr_size > base + mmap_size) {
2971 void *copy_start = ehdr;
2972 size_t len_first = base + mmap_size - copy_start;
2973 size_t len_secnd = ehdr_size - len_first;
2975 if (*copy_size < ehdr_size) {
2977 *copy_mem = malloc(ehdr_size);
2980 ret = LIBBPF_PERF_EVENT_ERROR;
2983 *copy_size = ehdr_size;
2986 memcpy(*copy_mem, copy_start, len_first);
2987 memcpy(*copy_mem + len_first, base, len_secnd);
2991 ret = fn(ehdr, private_data);
2992 data_tail += ehdr_size;
2993 if (ret != LIBBPF_PERF_EVENT_CONT)
2997 ring_buffer_write_tail(header, data_tail);