1 // SPDX-License-Identifier: GPL-2.0
2 /* XSKMAP used for AF_XDP sockets
3  * Copyright(c) 2018 Intel Corporation.
4  */
5 
6 #include <linux/bpf.h>
7 #include <linux/capability.h>
8 #include <net/xdp_sock.h>
9 #include <linux/slab.h>
10 #include <linux/sched.h>
11 
12 #include "xsk.h"
13 
xsk_map_node_alloc(struct xsk_map * map,struct xdp_sock __rcu ** map_entry)14 static struct xsk_map_node *xsk_map_node_alloc(struct xsk_map *map,
15 					       struct xdp_sock __rcu **map_entry)
16 {
17 	struct xsk_map_node *node;
18 
19 	node = bpf_map_kzalloc(&map->map, sizeof(*node),
20 			       GFP_ATOMIC | __GFP_NOWARN);
21 	if (!node)
22 		return ERR_PTR(-ENOMEM);
23 
24 	bpf_map_inc(&map->map);
25 
26 	node->map = map;
27 	node->map_entry = map_entry;
28 	return node;
29 }
30 
xsk_map_node_free(struct xsk_map_node * node)31 static void xsk_map_node_free(struct xsk_map_node *node)
32 {
33 	bpf_map_put(&node->map->map);
34 	kfree(node);
35 }
36 
xsk_map_sock_add(struct xdp_sock * xs,struct xsk_map_node * node)37 static void xsk_map_sock_add(struct xdp_sock *xs, struct xsk_map_node *node)
38 {
39 	spin_lock_bh(&xs->map_list_lock);
40 	list_add_tail(&node->node, &xs->map_list);
41 	spin_unlock_bh(&xs->map_list_lock);
42 }
43 
xsk_map_sock_delete(struct xdp_sock * xs,struct xdp_sock __rcu ** map_entry)44 static void xsk_map_sock_delete(struct xdp_sock *xs,
45 				struct xdp_sock __rcu **map_entry)
46 {
47 	struct xsk_map_node *n, *tmp;
48 
49 	spin_lock_bh(&xs->map_list_lock);
50 	list_for_each_entry_safe(n, tmp, &xs->map_list, node) {
51 		if (map_entry == n->map_entry) {
52 			list_del(&n->node);
53 			xsk_map_node_free(n);
54 		}
55 	}
56 	spin_unlock_bh(&xs->map_list_lock);
57 }
58 
xsk_map_alloc(union bpf_attr * attr)59 static struct bpf_map *xsk_map_alloc(union bpf_attr *attr)
60 {
61 	struct xsk_map *m;
62 	int numa_node;
63 	u64 size;
64 
65 	if (!capable(CAP_NET_ADMIN))
66 		return ERR_PTR(-EPERM);
67 
68 	if (attr->max_entries == 0 || attr->key_size != 4 ||
69 	    attr->value_size != 4 ||
70 	    attr->map_flags & ~(BPF_F_NUMA_NODE | BPF_F_RDONLY | BPF_F_WRONLY))
71 		return ERR_PTR(-EINVAL);
72 
73 	numa_node = bpf_map_attr_numa_node(attr);
74 	size = struct_size(m, xsk_map, attr->max_entries);
75 
76 	m = bpf_map_area_alloc(size, numa_node);
77 	if (!m)
78 		return ERR_PTR(-ENOMEM);
79 
80 	bpf_map_init_from_attr(&m->map, attr);
81 	spin_lock_init(&m->lock);
82 
83 	return &m->map;
84 }
85 
xsk_map_free(struct bpf_map * map)86 static void xsk_map_free(struct bpf_map *map)
87 {
88 	struct xsk_map *m = container_of(map, struct xsk_map, map);
89 
90 	synchronize_net();
91 	bpf_map_area_free(m);
92 }
93 
xsk_map_get_next_key(struct bpf_map * map,void * key,void * next_key)94 static int xsk_map_get_next_key(struct bpf_map *map, void *key, void *next_key)
95 {
96 	struct xsk_map *m = container_of(map, struct xsk_map, map);
97 	u32 index = key ? *(u32 *)key : U32_MAX;
98 	u32 *next = next_key;
99 
100 	if (index >= m->map.max_entries) {
101 		*next = 0;
102 		return 0;
103 	}
104 
105 	if (index == m->map.max_entries - 1)
106 		return -ENOENT;
107 	*next = index + 1;
108 	return 0;
109 }
110 
xsk_map_gen_lookup(struct bpf_map * map,struct bpf_insn * insn_buf)111 static int xsk_map_gen_lookup(struct bpf_map *map, struct bpf_insn *insn_buf)
112 {
113 	const int ret = BPF_REG_0, mp = BPF_REG_1, index = BPF_REG_2;
114 	struct bpf_insn *insn = insn_buf;
115 
116 	*insn++ = BPF_LDX_MEM(BPF_W, ret, index, 0);
117 	*insn++ = BPF_JMP_IMM(BPF_JGE, ret, map->max_entries, 5);
118 	*insn++ = BPF_ALU64_IMM(BPF_LSH, ret, ilog2(sizeof(struct xsk_sock *)));
119 	*insn++ = BPF_ALU64_IMM(BPF_ADD, mp, offsetof(struct xsk_map, xsk_map));
120 	*insn++ = BPF_ALU64_REG(BPF_ADD, ret, mp);
121 	*insn++ = BPF_LDX_MEM(BPF_SIZEOF(struct xsk_sock *), ret, ret, 0);
122 	*insn++ = BPF_JMP_IMM(BPF_JA, 0, 0, 1);
123 	*insn++ = BPF_MOV64_IMM(ret, 0);
124 	return insn - insn_buf;
125 }
126 
127 /* Elements are kept alive by RCU; either by rcu_read_lock() (from syscall) or
128  * by local_bh_disable() (from XDP calls inside NAPI). The
129  * rcu_read_lock_bh_held() below makes lockdep accept both.
130  */
__xsk_map_lookup_elem(struct bpf_map * map,u32 key)131 static void *__xsk_map_lookup_elem(struct bpf_map *map, u32 key)
132 {
133 	struct xsk_map *m = container_of(map, struct xsk_map, map);
134 
135 	if (key >= map->max_entries)
136 		return NULL;
137 
138 	return rcu_dereference_check(m->xsk_map[key], rcu_read_lock_bh_held());
139 }
140 
xsk_map_lookup_elem(struct bpf_map * map,void * key)141 static void *xsk_map_lookup_elem(struct bpf_map *map, void *key)
142 {
143 	return __xsk_map_lookup_elem(map, *(u32 *)key);
144 }
145 
xsk_map_lookup_elem_sys_only(struct bpf_map * map,void * key)146 static void *xsk_map_lookup_elem_sys_only(struct bpf_map *map, void *key)
147 {
148 	return ERR_PTR(-EOPNOTSUPP);
149 }
150 
xsk_map_update_elem(struct bpf_map * map,void * key,void * value,u64 map_flags)151 static int xsk_map_update_elem(struct bpf_map *map, void *key, void *value,
152 			       u64 map_flags)
153 {
154 	struct xsk_map *m = container_of(map, struct xsk_map, map);
155 	struct xdp_sock __rcu **map_entry;
156 	struct xdp_sock *xs, *old_xs;
157 	u32 i = *(u32 *)key, fd = *(u32 *)value;
158 	struct xsk_map_node *node;
159 	struct socket *sock;
160 	int err;
161 
162 	if (unlikely(map_flags > BPF_EXIST))
163 		return -EINVAL;
164 	if (unlikely(i >= m->map.max_entries))
165 		return -E2BIG;
166 
167 	sock = sockfd_lookup(fd, &err);
168 	if (!sock)
169 		return err;
170 
171 	if (sock->sk->sk_family != PF_XDP) {
172 		sockfd_put(sock);
173 		return -EOPNOTSUPP;
174 	}
175 
176 	xs = (struct xdp_sock *)sock->sk;
177 
178 	map_entry = &m->xsk_map[i];
179 	node = xsk_map_node_alloc(m, map_entry);
180 	if (IS_ERR(node)) {
181 		sockfd_put(sock);
182 		return PTR_ERR(node);
183 	}
184 
185 	spin_lock_bh(&m->lock);
186 	old_xs = rcu_dereference_protected(*map_entry, lockdep_is_held(&m->lock));
187 	if (old_xs == xs) {
188 		err = 0;
189 		goto out;
190 	} else if (old_xs && map_flags == BPF_NOEXIST) {
191 		err = -EEXIST;
192 		goto out;
193 	} else if (!old_xs && map_flags == BPF_EXIST) {
194 		err = -ENOENT;
195 		goto out;
196 	}
197 	xsk_map_sock_add(xs, node);
198 	rcu_assign_pointer(*map_entry, xs);
199 	if (old_xs)
200 		xsk_map_sock_delete(old_xs, map_entry);
201 	spin_unlock_bh(&m->lock);
202 	sockfd_put(sock);
203 	return 0;
204 
205 out:
206 	spin_unlock_bh(&m->lock);
207 	sockfd_put(sock);
208 	xsk_map_node_free(node);
209 	return err;
210 }
211 
xsk_map_delete_elem(struct bpf_map * map,void * key)212 static int xsk_map_delete_elem(struct bpf_map *map, void *key)
213 {
214 	struct xsk_map *m = container_of(map, struct xsk_map, map);
215 	struct xdp_sock __rcu **map_entry;
216 	struct xdp_sock *old_xs;
217 	int k = *(u32 *)key;
218 
219 	if (k >= map->max_entries)
220 		return -EINVAL;
221 
222 	spin_lock_bh(&m->lock);
223 	map_entry = &m->xsk_map[k];
224 	old_xs = unrcu_pointer(xchg(map_entry, NULL));
225 	if (old_xs)
226 		xsk_map_sock_delete(old_xs, map_entry);
227 	spin_unlock_bh(&m->lock);
228 
229 	return 0;
230 }
231 
xsk_map_redirect(struct bpf_map * map,u32 ifindex,u64 flags)232 static int xsk_map_redirect(struct bpf_map *map, u32 ifindex, u64 flags)
233 {
234 	return __bpf_xdp_redirect_map(map, ifindex, flags, 0,
235 				      __xsk_map_lookup_elem);
236 }
237 
xsk_map_try_sock_delete(struct xsk_map * map,struct xdp_sock * xs,struct xdp_sock __rcu ** map_entry)238 void xsk_map_try_sock_delete(struct xsk_map *map, struct xdp_sock *xs,
239 			     struct xdp_sock __rcu **map_entry)
240 {
241 	spin_lock_bh(&map->lock);
242 	if (rcu_access_pointer(*map_entry) == xs) {
243 		rcu_assign_pointer(*map_entry, NULL);
244 		xsk_map_sock_delete(xs, map_entry);
245 	}
246 	spin_unlock_bh(&map->lock);
247 }
248 
xsk_map_meta_equal(const struct bpf_map * meta0,const struct bpf_map * meta1)249 static bool xsk_map_meta_equal(const struct bpf_map *meta0,
250 			       const struct bpf_map *meta1)
251 {
252 	return meta0->max_entries == meta1->max_entries &&
253 		bpf_map_meta_equal(meta0, meta1);
254 }
255 
256 static int xsk_map_btf_id;
257 const struct bpf_map_ops xsk_map_ops = {
258 	.map_meta_equal = xsk_map_meta_equal,
259 	.map_alloc = xsk_map_alloc,
260 	.map_free = xsk_map_free,
261 	.map_get_next_key = xsk_map_get_next_key,
262 	.map_lookup_elem = xsk_map_lookup_elem,
263 	.map_gen_lookup = xsk_map_gen_lookup,
264 	.map_lookup_elem_sys_only = xsk_map_lookup_elem_sys_only,
265 	.map_update_elem = xsk_map_update_elem,
266 	.map_delete_elem = xsk_map_delete_elem,
267 	.map_check_btf = map_check_no_btf,
268 	.map_btf_name = "xsk_map",
269 	.map_btf_id = &xsk_map_btf_id,
270 	.map_redirect = xsk_map_redirect,
271 };
272