| // SPDX-License-Identifier: GPL-2.0 |
| /* Copyright (c) 2022, Oracle and/or its affiliates. */ |
| |
| #include "vmlinux.h" |
| |
| #include <bpf/bpf_core_read.h> |
| #include <bpf/bpf_helpers.h> |
| #include <bpf/bpf_tracing.h> |
| #include "bpf_misc.h" |
| |
| int uprobe_byname_parm1 = 0; |
| int uprobe_byname_ran = 0; |
| int uretprobe_byname_rc = 0; |
| int uretprobe_byname_ret = 0; |
| int uretprobe_byname_ran = 0; |
| u64 uprobe_byname2_parm1 = 0; |
| int uprobe_byname2_ran = 0; |
| u64 uretprobe_byname2_rc = 0; |
| int uretprobe_byname2_ran = 0; |
| |
| int test_pid; |
| |
| int a[8]; |
| |
| /* This program cannot auto-attach, but that should not stop other |
| * programs from attaching. |
| */ |
| SEC("uprobe") |
| int handle_uprobe_noautoattach(struct pt_regs *ctx) |
| { |
| return 0; |
| } |
| |
| SEC("uprobe//proc/self/exe:autoattach_trigger_func") |
| int BPF_UPROBE(handle_uprobe_byname |
| , int arg1 |
| , int arg2 |
| , int arg3 |
| #if FUNC_REG_ARG_CNT > 3 |
| , int arg4 |
| #endif |
| #if FUNC_REG_ARG_CNT > 4 |
| , int arg5 |
| #endif |
| #if FUNC_REG_ARG_CNT > 5 |
| , int arg6 |
| #endif |
| #if FUNC_REG_ARG_CNT > 6 |
| , int arg7 |
| #endif |
| #if FUNC_REG_ARG_CNT > 7 |
| , int arg8 |
| #endif |
| ) |
| { |
| uprobe_byname_parm1 = PT_REGS_PARM1_CORE(ctx); |
| uprobe_byname_ran = 1; |
| |
| a[0] = arg1; |
| a[1] = arg2; |
| a[2] = arg3; |
| #if FUNC_REG_ARG_CNT > 3 |
| a[3] = arg4; |
| #endif |
| #if FUNC_REG_ARG_CNT > 4 |
| a[4] = arg5; |
| #endif |
| #if FUNC_REG_ARG_CNT > 5 |
| a[5] = arg6; |
| #endif |
| #if FUNC_REG_ARG_CNT > 6 |
| a[6] = arg7; |
| #endif |
| #if FUNC_REG_ARG_CNT > 7 |
| a[7] = arg8; |
| #endif |
| return 0; |
| } |
| |
| SEC("uretprobe//proc/self/exe:autoattach_trigger_func") |
| int BPF_URETPROBE(handle_uretprobe_byname, int ret) |
| { |
| uretprobe_byname_rc = PT_REGS_RC_CORE(ctx); |
| uretprobe_byname_ret = ret; |
| uretprobe_byname_ran = 2; |
| |
| return 0; |
| } |
| |
| |
| SEC("uprobe/libc.so.6:fopen") |
| int BPF_UPROBE(handle_uprobe_byname2, const char *pathname, const char *mode) |
| { |
| int pid = bpf_get_current_pid_tgid() >> 32; |
| |
| /* ignore irrelevant invocations */ |
| if (test_pid != pid) |
| return 0; |
| uprobe_byname2_parm1 = (u64)(long)pathname; |
| uprobe_byname2_ran = 3; |
| return 0; |
| } |
| |
| SEC("uretprobe/libc.so.6:fopen") |
| int BPF_URETPROBE(handle_uretprobe_byname2, void *ret) |
| { |
| int pid = bpf_get_current_pid_tgid() >> 32; |
| |
| /* ignore irrelevant invocations */ |
| if (test_pid != pid) |
| return 0; |
| uretprobe_byname2_rc = (u64)(long)ret; |
| uretprobe_byname2_ran = 4; |
| return 0; |
| } |
| |
| char _license[] SEC("license") = "GPL"; |