54 struct uprobe {  struct
81 	struct uprobe *uprobe;  argument
282 delayed_uprobe_check(struct uprobe *uprobe, struct mm_struct *mm)  in delayed_uprobe_check()  argument
287 		if (du->uprobe == uprobe && du->mm == mm)  in delayed_uprobe_check()
292 static int delayed_uprobe_add(struct uprobe *uprobe, struct mm_struct *mm)  in delayed_uprobe_add()  argument
296 	if (delayed_uprobe_check(uprobe, mm))  in delayed_uprobe_add()
303 	du->uprobe = uprobe;  in delayed_uprobe_add()
317 static void delayed_uprobe_remove(struct uprobe *uprobe, struct mm_struct *mm)  in delayed_uprobe_remove()  argument
322 	if (!uprobe && !mm)  in delayed_uprobe_remove()
328 		if (uprobe && du->uprobe != uprobe)  in delayed_uprobe_remove()
337 static bool valid_ref_ctr_vma(struct uprobe *uprobe,  in valid_ref_ctr_vma()  argument
340 	unsigned long vaddr = offset_to_vaddr(vma, uprobe->ref_ctr_offset);  in valid_ref_ctr_vma()
342 	return uprobe->ref_ctr_offset &&  in valid_ref_ctr_vma()
344 		file_inode(vma->vm_file) == uprobe->inode &&  in valid_ref_ctr_vma()
351 find_ref_ctr_vma(struct uprobe *uprobe, struct mm_struct *mm)  in find_ref_ctr_vma()  argument
357 		if (valid_ref_ctr_vma(uprobe, tmp))  in find_ref_ctr_vma()
402 static void update_ref_ctr_warn(struct uprobe *uprobe,  in update_ref_ctr_warn()  argument
407 		d > 0 ? "increment" : "decrement", uprobe->inode->i_ino,  in update_ref_ctr_warn()
408 		(unsigned long long) uprobe->offset,  in update_ref_ctr_warn()
409 		(unsigned long long) uprobe->ref_ctr_offset, mm);  in update_ref_ctr_warn()
412 static int update_ref_ctr(struct uprobe *uprobe, struct mm_struct *mm,  in update_ref_ctr()  argument
419 	rc_vma = find_ref_ctr_vma(uprobe, mm);  in update_ref_ctr()
422 		rc_vaddr = offset_to_vaddr(rc_vma, uprobe->ref_ctr_offset);  in update_ref_ctr()
425 			update_ref_ctr_warn(uprobe, mm, d);  in update_ref_ctr()
433 		ret = delayed_uprobe_add(uprobe, mm);  in update_ref_ctr()
435 		delayed_uprobe_remove(uprobe, mm);  in update_ref_ctr()
462 	struct uprobe *uprobe;  in uprobe_write_opcode()  local
470 	uprobe = container_of(auprobe, struct uprobe, arch);  in uprobe_write_opcode()
491 	if (!ref_ctr_updated && uprobe->ref_ctr_offset) {  in uprobe_write_opcode()
492 		ret = update_ref_ctr(uprobe, mm, is_register ? 1 : -1);  in uprobe_write_opcode()
551 		update_ref_ctr(uprobe, mm, -1);  in uprobe_write_opcode()
590 static struct uprobe *get_uprobe(struct uprobe *uprobe)  in get_uprobe()  argument
592 	refcount_inc(&uprobe->ref);  in get_uprobe()
593 	return uprobe;  in get_uprobe()
596 static void put_uprobe(struct uprobe *uprobe)  in put_uprobe()  argument
598 	if (refcount_dec_and_test(&uprobe->ref)) {  in put_uprobe()
605 		delayed_uprobe_remove(uprobe, NULL);  in put_uprobe()
607 		kfree(uprobe);  in put_uprobe()
613 	       const struct uprobe *r)  in uprobe_cmp()
631 	rb_entry((node), struct uprobe, rb_node)
646 	struct uprobe *u = __node_2_uprobe(a);  in __uprobe_cmp()
650 static struct uprobe *__find_uprobe(struct inode *inode, loff_t offset)  in __find_uprobe()
668 static struct uprobe *find_uprobe(struct inode *inode, loff_t offset)  in find_uprobe()
670 	struct uprobe *uprobe;  in find_uprobe()  local
673 	uprobe = __find_uprobe(inode, offset);  in find_uprobe()
676 	return uprobe;  in find_uprobe()
679 static struct uprobe *__insert_uprobe(struct uprobe *uprobe)  in __insert_uprobe()  argument
683 	node = rb_find_add(&uprobe->rb_node, &uprobes_tree, __uprobe_cmp);  in __insert_uprobe()
688 	refcount_set(&uprobe->ref, 2);  in __insert_uprobe()
700 static struct uprobe *insert_uprobe(struct uprobe *uprobe)  in insert_uprobe()  argument
702 	struct uprobe *u;  in insert_uprobe()
705 	u = __insert_uprobe(uprobe);  in insert_uprobe()
712 ref_ctr_mismatch_warn(struct uprobe *cur_uprobe, struct uprobe *uprobe)  in ref_ctr_mismatch_warn()  argument
716 		uprobe->inode->i_ino, (unsigned long long) uprobe->offset,  in ref_ctr_mismatch_warn()
718 		(unsigned long long) uprobe->ref_ctr_offset);  in ref_ctr_mismatch_warn()
721 static struct uprobe *alloc_uprobe(struct inode *inode, loff_t offset,  in alloc_uprobe()
724 	struct uprobe *uprobe, *cur_uprobe;  in alloc_uprobe()  local
726 	uprobe = kzalloc(sizeof(struct uprobe), GFP_KERNEL);  in alloc_uprobe()
727 	if (!uprobe)  in alloc_uprobe()
730 	uprobe->inode = inode;  in alloc_uprobe()
731 	uprobe->offset = offset;  in alloc_uprobe()
732 	uprobe->ref_ctr_offset = ref_ctr_offset;  in alloc_uprobe()
733 	init_rwsem(&uprobe->register_rwsem);  in alloc_uprobe()
734 	init_rwsem(&uprobe->consumer_rwsem);  in alloc_uprobe()
737 	cur_uprobe = insert_uprobe(uprobe);  in alloc_uprobe()
740 		if (cur_uprobe->ref_ctr_offset != uprobe->ref_ctr_offset) {  in alloc_uprobe()
741 			ref_ctr_mismatch_warn(cur_uprobe, uprobe);  in alloc_uprobe()
743 			kfree(uprobe);  in alloc_uprobe()
746 		kfree(uprobe);  in alloc_uprobe()
747 		uprobe = cur_uprobe;  in alloc_uprobe()
750 	return uprobe;  in alloc_uprobe()
753 static void consumer_add(struct uprobe *uprobe, struct uprobe_consumer *uc)  in consumer_add()  argument
755 	down_write(&uprobe->consumer_rwsem);  in consumer_add()
756 	uc->next = uprobe->consumers;  in consumer_add()
757 	uprobe->consumers = uc;  in consumer_add()
758 	up_write(&uprobe->consumer_rwsem);  in consumer_add()
766 static bool consumer_del(struct uprobe *uprobe, struct uprobe_consumer *uc)  in consumer_del()  argument
771 	down_write(&uprobe->consumer_rwsem);  in consumer_del()
772 	for (con = &uprobe->consumers; *con; con = &(*con)->next) {  in consumer_del()
779 	up_write(&uprobe->consumer_rwsem);  in consumer_del()
806 static int copy_insn(struct uprobe *uprobe, struct file *filp)  in copy_insn()  argument
808 	struct address_space *mapping = uprobe->inode->i_mapping;  in copy_insn()
809 	loff_t offs = uprobe->offset;  in copy_insn()
810 	void *insn = &uprobe->arch.insn;  in copy_insn()
811 	int size = sizeof(uprobe->arch.insn);  in copy_insn()
816 		if (offs >= i_size_read(uprobe->inode))  in copy_insn()
832 static int prepare_uprobe(struct uprobe *uprobe, struct file *file,  in prepare_uprobe()  argument
837 	if (test_bit(UPROBE_COPY_INSN, &uprobe->flags))  in prepare_uprobe()
841 	down_write(&uprobe->consumer_rwsem);  in prepare_uprobe()
842 	if (test_bit(UPROBE_COPY_INSN, &uprobe->flags))  in prepare_uprobe()
845 	ret = copy_insn(uprobe, file);  in prepare_uprobe()
850 	if (is_trap_insn((uprobe_opcode_t *)&uprobe->arch.insn))  in prepare_uprobe()
853 	ret = arch_uprobe_analyze_insn(&uprobe->arch, mm, vaddr);  in prepare_uprobe()
858 	set_bit(UPROBE_COPY_INSN, &uprobe->flags);  in prepare_uprobe()
861 	up_write(&uprobe->consumer_rwsem);  in prepare_uprobe()
872 static bool filter_chain(struct uprobe *uprobe,  in filter_chain()  argument
878 	down_read(&uprobe->consumer_rwsem);  in filter_chain()
879 	for (uc = uprobe->consumers; uc; uc = uc->next) {  in filter_chain()
884 	up_read(&uprobe->consumer_rwsem);  in filter_chain()
890 install_breakpoint(struct uprobe *uprobe, struct mm_struct *mm,  in install_breakpoint()  argument
896 	ret = prepare_uprobe(uprobe, vma->vm_file, mm, vaddr);  in install_breakpoint()
908 	ret = set_swbp(&uprobe->arch, mm, vaddr);  in install_breakpoint()
918 remove_breakpoint(struct uprobe *uprobe, struct mm_struct *mm, unsigned long vaddr)  in remove_breakpoint()  argument
921 	return set_orig_insn(&uprobe->arch, mm, vaddr);  in remove_breakpoint()
924 static inline bool uprobe_is_active(struct uprobe *uprobe)  in uprobe_is_active()  argument
926 	return !RB_EMPTY_NODE(&uprobe->rb_node);  in uprobe_is_active()
933 static void delete_uprobe(struct uprobe *uprobe)  in delete_uprobe()  argument
935 	if (WARN_ON(!uprobe_is_active(uprobe)))  in delete_uprobe()
939 	rb_erase(&uprobe->rb_node, &uprobes_tree);  in delete_uprobe()
941 	RB_CLEAR_NODE(&uprobe->rb_node); /* for uprobe_is_active() */  in delete_uprobe()
942 	put_uprobe(uprobe);  in delete_uprobe()
1029 register_for_each_vma(struct uprobe *uprobe, struct uprobe_consumer *new)  in register_for_each_vma()  argument
1036 	info = build_map_info(uprobe->inode->i_mapping,  in register_for_each_vma()
1037 					uprobe->offset, is_register);  in register_for_each_vma()
1053 		    file_inode(vma->vm_file) != uprobe->inode)  in register_for_each_vma()
1057 		    vaddr_to_offset(vma, info->vaddr) != uprobe->offset)  in register_for_each_vma()
1064 				err = install_breakpoint(uprobe, mm, vma, info->vaddr);  in register_for_each_vma()
1066 			if (!filter_chain(uprobe,  in register_for_each_vma()
1068 				err |= remove_breakpoint(uprobe, mm, info->vaddr);  in register_for_each_vma()
1083 __uprobe_unregister(struct uprobe *uprobe, struct uprobe_consumer *uc)  in __uprobe_unregister()  argument
1087 	if (WARN_ON(!consumer_del(uprobe, uc)))  in __uprobe_unregister()
1090 	err = register_for_each_vma(uprobe, NULL);  in __uprobe_unregister()
1092 	if (!uprobe->consumers && !err)  in __uprobe_unregister()
1093 		delete_uprobe(uprobe);  in __uprobe_unregister()
1104 	struct uprobe *uprobe;  in uprobe_unregister()  local
1106 	uprobe = find_uprobe(inode, offset);  in uprobe_unregister()
1107 	if (WARN_ON(!uprobe))  in uprobe_unregister()
1110 	down_write(&uprobe->register_rwsem);  in uprobe_unregister()
1111 	__uprobe_unregister(uprobe, uc);  in uprobe_unregister()
1112 	up_write(&uprobe->register_rwsem);  in uprobe_unregister()
1113 	put_uprobe(uprobe);  in uprobe_unregister()
1138 	struct uprobe *uprobe;  in __uprobe_register()  local
1163 	uprobe = alloc_uprobe(inode, offset, ref_ctr_offset);  in __uprobe_register()
1164 	if (!uprobe)  in __uprobe_register()
1166 	if (IS_ERR(uprobe))  in __uprobe_register()
1167 		return PTR_ERR(uprobe);  in __uprobe_register()
1173 	down_write(&uprobe->register_rwsem);  in __uprobe_register()
1175 	if (likely(uprobe_is_active(uprobe))) {  in __uprobe_register()
1176 		consumer_add(uprobe, uc);  in __uprobe_register()
1177 		ret = register_for_each_vma(uprobe, uc);  in __uprobe_register()
1179 			__uprobe_unregister(uprobe, uc);  in __uprobe_register()
1181 	up_write(&uprobe->register_rwsem);  in __uprobe_register()
1182 	put_uprobe(uprobe);  in __uprobe_register()
1213 	struct uprobe *uprobe;  in uprobe_apply()  local
1217 	uprobe = find_uprobe(inode, offset);  in uprobe_apply()
1218 	if (WARN_ON(!uprobe))  in uprobe_apply()
1221 	down_write(&uprobe->register_rwsem);  in uprobe_apply()
1222 	for (con = uprobe->consumers; con && con != uc ; con = con->next)  in uprobe_apply()
1225 		ret = register_for_each_vma(uprobe, add ? uc : NULL);  in uprobe_apply()
1226 	up_write(&uprobe->register_rwsem);  in uprobe_apply()
1227 	put_uprobe(uprobe);  in uprobe_apply()
1232 static int unapply_uprobe(struct uprobe *uprobe, struct mm_struct *mm)  in unapply_uprobe()  argument
1244 		    file_inode(vma->vm_file) != uprobe->inode)  in unapply_uprobe()
1248 		if (uprobe->offset <  offset ||  in unapply_uprobe()
1249 		    uprobe->offset >= offset + vma->vm_end - vma->vm_start)  in unapply_uprobe()
1252 		vaddr = offset_to_vaddr(vma, uprobe->offset);  in unapply_uprobe()
1253 		err |= remove_breakpoint(uprobe, mm, vaddr);  in unapply_uprobe()
1266 		struct uprobe *u = rb_entry(n, struct uprobe, rb_node);  in find_node_in_range()
1295 	struct uprobe *u;  in build_probe_list()
1305 			u = rb_entry(t, struct uprobe, rb_node);  in build_probe_list()
1312 			u = rb_entry(t, struct uprobe, rb_node);  in build_probe_list()
1335 		    !valid_ref_ctr_vma(du->uprobe, vma))  in delayed_ref_ctr_inc()
1338 		vaddr = offset_to_vaddr(vma, du->uprobe->ref_ctr_offset);  in delayed_ref_ctr_inc()
1341 			update_ref_ctr_warn(du->uprobe, vma->vm_mm, 1);  in delayed_ref_ctr_inc()
1360 	struct uprobe *uprobe, *u;  in uprobe_mmap()  local
1385 	list_for_each_entry_safe(uprobe, u, &tmp_list, pending_list) {  in uprobe_mmap()
1387 		    filter_chain(uprobe, UPROBE_FILTER_MMAP, vma->vm_mm)) {  in uprobe_mmap()
1388 			unsigned long vaddr = offset_to_vaddr(vma, uprobe->offset);  in uprobe_mmap()
1389 			install_breakpoint(uprobe, vma->vm_mm, vma, vaddr);  in uprobe_mmap()
1391 		put_uprobe(uprobe);  in uprobe_mmap()
1606 static unsigned long xol_get_insn_slot(struct uprobe *uprobe)  in xol_get_insn_slot()  argument
1620 			      &uprobe->arch.ixol, sizeof(uprobe->arch.ixol));  in xol_get_insn_slot()
1703 	put_uprobe(ri->uprobe);  in free_ret_instance()
1764 		get_uprobe(n->uprobe);  in dup_utask()
1856 static void prepare_uretprobe(struct uprobe *uprobe, struct pt_regs *regs)  in prepare_uretprobe()  argument
1907 	ri->uprobe = get_uprobe(uprobe);  in prepare_uretprobe()
1924 pre_ssout(struct uprobe *uprobe, struct pt_regs *regs, unsigned long bp_vaddr)  in pre_ssout()  argument
1934 	xol_vaddr = xol_get_insn_slot(uprobe);  in pre_ssout()
1941 	err = arch_uprobe_pre_xol(&uprobe->arch, regs);  in pre_ssout()
1947 	utask->active_uprobe = uprobe;  in pre_ssout()
2039 static struct uprobe *find_active_uprobe(unsigned long bp_vaddr, int *is_swbp)  in find_active_uprobe()
2042 	struct uprobe *uprobe = NULL;  in find_active_uprobe()  local
2052 			uprobe = find_uprobe(inode, offset);  in find_active_uprobe()
2055 		if (!uprobe)  in find_active_uprobe()
2061 	if (!uprobe && test_and_clear_bit(MMF_RECALC_UPROBES, &mm->flags))  in find_active_uprobe()
2065 	return uprobe;  in find_active_uprobe()
2068 static void handler_chain(struct uprobe *uprobe, struct pt_regs *regs)  in handler_chain()  argument
2074 	down_read(&uprobe->register_rwsem);  in handler_chain()
2075 	for (uc = uprobe->consumers; uc; uc = uc->next) {  in handler_chain()
2091 		prepare_uretprobe(uprobe, regs); /* put bp at return */  in handler_chain()
2093 	if (remove && uprobe->consumers) {  in handler_chain()
2094 		WARN_ON(!uprobe_is_active(uprobe));  in handler_chain()
2095 		unapply_uprobe(uprobe, current->mm);  in handler_chain()
2097 	up_read(&uprobe->register_rwsem);  in handler_chain()
2103 	struct uprobe *uprobe = ri->uprobe;  in handle_uretprobe_chain()  local
2106 	down_read(&uprobe->register_rwsem);  in handle_uretprobe_chain()
2107 	for (uc = uprobe->consumers; uc; uc = uc->next) {  in handle_uretprobe_chain()
2111 	up_read(&uprobe->register_rwsem);  in handle_uretprobe_chain()
2185 	struct uprobe *uprobe;  in handle_swbp()  local
2193 	uprobe = find_active_uprobe(bp_vaddr, &is_swbp);  in handle_swbp()
2194 	if (!uprobe) {  in handle_swbp()
2220 	if (unlikely(!test_bit(UPROBE_COPY_INSN, &uprobe->flags)))  in handle_swbp()
2236 	if (arch_uprobe_ignore(&uprobe->arch, regs))  in handle_swbp()
2239 	handler_chain(uprobe, regs);  in handle_swbp()
2241 	if (arch_uprobe_skip_sstep(&uprobe->arch, regs))  in handle_swbp()
2244 	if (!pre_ssout(uprobe, regs, bp_vaddr))  in handle_swbp()
2249 	put_uprobe(uprobe);  in handle_swbp()
2258 	struct uprobe *uprobe;  in handle_singlestep()  local
2261 	uprobe = utask->active_uprobe;  in handle_singlestep()
2263 		err = arch_uprobe_post_xol(&uprobe->arch, regs);  in handle_singlestep()
2265 		arch_uprobe_abort_xol(&uprobe->arch, regs);  in handle_singlestep()
2269 	put_uprobe(uprobe);  in handle_singlestep()