| /* |
| * Just-In-Time compiler for eBPF filters on MIPS |
| * |
| * Copyright (c) 2017 Cavium, Inc. |
| * |
| * Based on code from: |
| * |
| * Copyright (c) 2014 Imagination Technologies Ltd. |
| * Author: Markos Chandras <markos.chandras@imgtec.com> |
| * |
| * This program is free software; you can redistribute it and/or modify it |
| * under the terms of the GNU General Public License as published by the |
| * Free Software Foundation; version 2 of the License. |
| */ |
| |
| #include <linux/bitops.h> |
| #include <linux/errno.h> |
| #include <linux/filter.h> |
| #include <linux/bpf.h> |
| #include <linux/slab.h> |
| #include <asm/bitops.h> |
| #include <asm/byteorder.h> |
| #include <asm/cacheflush.h> |
| #include <asm/cpu-features.h> |
| #include <asm/uasm.h> |
| |
| /* Registers used by JIT */ |
| #define MIPS_R_ZERO 0 |
| #define MIPS_R_AT 1 |
| #define MIPS_R_V0 2 /* BPF_R0 */ |
| #define MIPS_R_V1 3 |
| #define MIPS_R_A0 4 /* BPF_R1 */ |
| #define MIPS_R_A1 5 /* BPF_R2 */ |
| #define MIPS_R_A2 6 /* BPF_R3 */ |
| #define MIPS_R_A3 7 /* BPF_R4 */ |
| #define MIPS_R_A4 8 /* BPF_R5 */ |
| #define MIPS_R_T4 12 /* BPF_AX */ |
| #define MIPS_R_T5 13 |
| #define MIPS_R_T6 14 |
| #define MIPS_R_T7 15 |
| #define MIPS_R_S0 16 /* BPF_R6 */ |
| #define MIPS_R_S1 17 /* BPF_R7 */ |
| #define MIPS_R_S2 18 /* BPF_R8 */ |
| #define MIPS_R_S3 19 /* BPF_R9 */ |
| #define MIPS_R_S4 20 /* BPF_TCC */ |
| #define MIPS_R_S5 21 |
| #define MIPS_R_S6 22 |
| #define MIPS_R_S7 23 |
| #define MIPS_R_T8 24 |
| #define MIPS_R_T9 25 |
| #define MIPS_R_SP 29 |
| #define MIPS_R_RA 31 |
| |
| /* eBPF flags */ |
| #define EBPF_SAVE_S0 BIT(0) |
| #define EBPF_SAVE_S1 BIT(1) |
| #define EBPF_SAVE_S2 BIT(2) |
| #define EBPF_SAVE_S3 BIT(3) |
| #define EBPF_SAVE_S4 BIT(4) |
| #define EBPF_SAVE_RA BIT(5) |
| #define EBPF_SEEN_FP BIT(6) |
| #define EBPF_SEEN_TC BIT(7) |
| #define EBPF_TCC_IN_V1 BIT(8) |
| |
| /* |
| * For the mips64 ISA, we need to track the value range or type for |
| * each JIT register. The BPF machine requires zero extended 32-bit |
| * values, but the mips64 ISA requires sign extended 32-bit values. |
| * At each point in the BPF program we track the state of every |
| * register so that we can zero extend or sign extend as the BPF |
| * semantics require. |
| */ |
| enum reg_val_type { |
| /* uninitialized */ |
| REG_UNKNOWN, |
| /* not known to be 32-bit compatible. */ |
| REG_64BIT, |
| /* 32-bit compatible, no truncation needed for 64-bit ops. */ |
| REG_64BIT_32BIT, |
| /* 32-bit compatible, need truncation for 64-bit ops. */ |
| REG_32BIT, |
| /* 32-bit zero extended. */ |
| REG_32BIT_ZERO_EX, |
| /* 32-bit no sign/zero extension needed. */ |
| REG_32BIT_POS |
| }; |
| |
| /* |
| * high bit of offsets indicates if long branch conversion done at |
| * this insn. |
| */ |
| #define OFFSETS_B_CONV BIT(31) |
| |
| /** |
| * struct jit_ctx - JIT context |
| * @skf: The sk_filter |
| * @stack_size: eBPF stack size |
| * @tmp_offset: eBPF $sp offset to 8-byte temporary memory |
| * @idx: Instruction index |
| * @flags: JIT flags |
| * @offsets: Instruction offsets |
| * @target: Memory location for the compiled filter |
| * @reg_val_types Packed enum reg_val_type for each register. |
| */ |
| struct jit_ctx { |
| const struct bpf_prog *skf; |
| int stack_size; |
| int tmp_offset; |
| u32 idx; |
| u32 flags; |
| u32 *offsets; |
| u32 *target; |
| u64 *reg_val_types; |
| unsigned int long_b_conversion:1; |
| unsigned int gen_b_offsets:1; |
| unsigned int use_bbit_insns:1; |
| }; |
| |
| static void set_reg_val_type(u64 *rvt, int reg, enum reg_val_type type) |
| { |
| *rvt &= ~(7ull << (reg * 3)); |
| *rvt |= ((u64)type << (reg * 3)); |
| } |
| |
| static enum reg_val_type get_reg_val_type(const struct jit_ctx *ctx, |
| int index, int reg) |
| { |
| return (ctx->reg_val_types[index] >> (reg * 3)) & 7; |
| } |
| |
| /* Simply emit the instruction if the JIT memory space has been allocated */ |
| #define emit_instr(ctx, func, ...) \ |
| do { \ |
| if ((ctx)->target != NULL) { \ |
| u32 *p = &(ctx)->target[ctx->idx]; \ |
| uasm_i_##func(&p, ##__VA_ARGS__); \ |
| } \ |
| (ctx)->idx++; \ |
| } while (0) |
| |
| static unsigned int j_target(struct jit_ctx *ctx, int target_idx) |
| { |
| unsigned long target_va, base_va; |
| unsigned int r; |
| |
| if (!ctx->target) |
| return 0; |
| |
| base_va = (unsigned long)ctx->target; |
| target_va = base_va + (ctx->offsets[target_idx] & ~OFFSETS_B_CONV); |
| |
| if ((base_va & ~0x0ffffffful) != (target_va & ~0x0ffffffful)) |
| return (unsigned int)-1; |
| r = target_va & 0x0ffffffful; |
| return r; |
| } |
| |
| /* Compute the immediate value for PC-relative branches. */ |
| static u32 b_imm(unsigned int tgt, struct jit_ctx *ctx) |
| { |
| if (!ctx->gen_b_offsets) |
| return 0; |
| |
| /* |
| * We want a pc-relative branch. tgt is the instruction offset |
| * we want to jump to. |
| |
| * Branch on MIPS: |
| * I: target_offset <- sign_extend(offset) |
| * I+1: PC += target_offset (delay slot) |
| * |
| * ctx->idx currently points to the branch instruction |
| * but the offset is added to the delay slot so we need |
| * to subtract 4. |
| */ |
| return (ctx->offsets[tgt] & ~OFFSETS_B_CONV) - |
| (ctx->idx * 4) - 4; |
| } |
| |
| int bpf_jit_enable __read_mostly; |
| |
| enum which_ebpf_reg { |
| src_reg, |
| src_reg_no_fp, |
| dst_reg, |
| dst_reg_fp_ok |
| }; |
| |
| /* |
| * For eBPF, the register mapping naturally falls out of the |
| * requirements of eBPF and the MIPS n64 ABI. We don't maintain a |
| * separate frame pointer, so BPF_REG_10 relative accesses are |
| * adjusted to be $sp relative. |
| */ |
| int ebpf_to_mips_reg(struct jit_ctx *ctx, const struct bpf_insn *insn, |
| enum which_ebpf_reg w) |
| { |
| int ebpf_reg = (w == src_reg || w == src_reg_no_fp) ? |
| insn->src_reg : insn->dst_reg; |
| |
| switch (ebpf_reg) { |
| case BPF_REG_0: |
| return MIPS_R_V0; |
| case BPF_REG_1: |
| return MIPS_R_A0; |
| case BPF_REG_2: |
| return MIPS_R_A1; |
| case BPF_REG_3: |
| return MIPS_R_A2; |
| case BPF_REG_4: |
| return MIPS_R_A3; |
| case BPF_REG_5: |
| return MIPS_R_A4; |
| case BPF_REG_6: |
| ctx->flags |= EBPF_SAVE_S0; |
| return MIPS_R_S0; |
| case BPF_REG_7: |
| ctx->flags |= EBPF_SAVE_S1; |
| return MIPS_R_S1; |
| case BPF_REG_8: |
| ctx->flags |= EBPF_SAVE_S2; |
| return MIPS_R_S2; |
| case BPF_REG_9: |
| ctx->flags |= EBPF_SAVE_S3; |
| return MIPS_R_S3; |
| case BPF_REG_10: |
| if (w == dst_reg || w == src_reg_no_fp) |
| goto bad_reg; |
| ctx->flags |= EBPF_SEEN_FP; |
| /* |
| * Needs special handling, return something that |
| * cannot be clobbered just in case. |
| */ |
| return MIPS_R_ZERO; |
| case BPF_REG_AX: |
| return MIPS_R_T4; |
| default: |
| bad_reg: |
| WARN(1, "Illegal bpf reg: %d\n", ebpf_reg); |
| return -EINVAL; |
| } |
| } |
| /* |
| * eBPF stack frame will be something like: |
| * |
| * Entry $sp ------> +--------------------------------+ |
| * | $ra (optional) | |
| * +--------------------------------+ |
| * | $s0 (optional) | |
| * +--------------------------------+ |
| * | $s1 (optional) | |
| * +--------------------------------+ |
| * | $s2 (optional) | |
| * +--------------------------------+ |
| * | $s3 (optional) | |
| * +--------------------------------+ |
| * | $s4 (optional) | |
| * +--------------------------------+ |
| * | tmp-storage (if $ra saved) | |
| * $sp + tmp_offset --> +--------------------------------+ <--BPF_REG_10 |
| * | BPF_REG_10 relative storage | |
| * | MAX_BPF_STACK (optional) | |
| * | . | |
| * | . | |
| * | . | |
| * $sp --------> +--------------------------------+ |
| * |
| * If BPF_REG_10 is never referenced, then the MAX_BPF_STACK sized |
| * area is not allocated. |
| */ |
| static int gen_int_prologue(struct jit_ctx *ctx) |
| { |
| int stack_adjust = 0; |
| int store_offset; |
| int locals_size; |
| |
| if (ctx->flags & EBPF_SAVE_RA) |
| /* |
| * If RA we are doing a function call and may need |
| * extra 8-byte tmp area. |
| */ |
| stack_adjust += 16; |
| if (ctx->flags & EBPF_SAVE_S0) |
| stack_adjust += 8; |
| if (ctx->flags & EBPF_SAVE_S1) |
| stack_adjust += 8; |
| if (ctx->flags & EBPF_SAVE_S2) |
| stack_adjust += 8; |
| if (ctx->flags & EBPF_SAVE_S3) |
| stack_adjust += 8; |
| if (ctx->flags & EBPF_SAVE_S4) |
| stack_adjust += 8; |
| |
| BUILD_BUG_ON(MAX_BPF_STACK & 7); |
| locals_size = (ctx->flags & EBPF_SEEN_FP) ? MAX_BPF_STACK : 0; |
| |
| stack_adjust += locals_size; |
| ctx->tmp_offset = locals_size; |
| |
| ctx->stack_size = stack_adjust; |
| |
| /* |
| * First instruction initializes the tail call count (TCC). |
| * On tail call we skip this instruction, and the TCC is |
| * passed in $v1 from the caller. |
| */ |
| emit_instr(ctx, daddiu, MIPS_R_V1, MIPS_R_ZERO, MAX_TAIL_CALL_CNT); |
| if (stack_adjust) |
| emit_instr(ctx, daddiu, MIPS_R_SP, MIPS_R_SP, -stack_adjust); |
| else |
| return 0; |
| |
| store_offset = stack_adjust - 8; |
| |
| if (ctx->flags & EBPF_SAVE_RA) { |
| emit_instr(ctx, sd, MIPS_R_RA, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S0) { |
| emit_instr(ctx, sd, MIPS_R_S0, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S1) { |
| emit_instr(ctx, sd, MIPS_R_S1, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S2) { |
| emit_instr(ctx, sd, MIPS_R_S2, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S3) { |
| emit_instr(ctx, sd, MIPS_R_S3, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S4) { |
| emit_instr(ctx, sd, MIPS_R_S4, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| |
| if ((ctx->flags & EBPF_SEEN_TC) && !(ctx->flags & EBPF_TCC_IN_V1)) |
| emit_instr(ctx, daddu, MIPS_R_S4, MIPS_R_V1, MIPS_R_ZERO); |
| |
| return 0; |
| } |
| |
| static int build_int_epilogue(struct jit_ctx *ctx, int dest_reg) |
| { |
| const struct bpf_prog *prog = ctx->skf; |
| int stack_adjust = ctx->stack_size; |
| int store_offset = stack_adjust - 8; |
| int r0 = MIPS_R_V0; |
| |
| if (dest_reg == MIPS_R_RA && |
| get_reg_val_type(ctx, prog->len, BPF_REG_0) == REG_32BIT_ZERO_EX) |
| /* Don't let zero extended value escape. */ |
| emit_instr(ctx, sll, r0, r0, 0); |
| |
| if (ctx->flags & EBPF_SAVE_RA) { |
| emit_instr(ctx, ld, MIPS_R_RA, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S0) { |
| emit_instr(ctx, ld, MIPS_R_S0, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S1) { |
| emit_instr(ctx, ld, MIPS_R_S1, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S2) { |
| emit_instr(ctx, ld, MIPS_R_S2, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S3) { |
| emit_instr(ctx, ld, MIPS_R_S3, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| if (ctx->flags & EBPF_SAVE_S4) { |
| emit_instr(ctx, ld, MIPS_R_S4, store_offset, MIPS_R_SP); |
| store_offset -= 8; |
| } |
| emit_instr(ctx, jr, dest_reg); |
| |
| if (stack_adjust) |
| emit_instr(ctx, daddiu, MIPS_R_SP, MIPS_R_SP, stack_adjust); |
| else |
| emit_instr(ctx, nop); |
| |
| return 0; |
| } |
| |
| static void gen_imm_to_reg(const struct bpf_insn *insn, int reg, |
| struct jit_ctx *ctx) |
| { |
| if (insn->imm >= S16_MIN && insn->imm <= S16_MAX) { |
| emit_instr(ctx, addiu, reg, MIPS_R_ZERO, insn->imm); |
| } else { |
| int lower = (s16)(insn->imm & 0xffff); |
| int upper = insn->imm - lower; |
| |
| emit_instr(ctx, lui, reg, upper >> 16); |
| emit_instr(ctx, addiu, reg, reg, lower); |
| } |
| |
| } |
| |
| static int gen_imm_insn(const struct bpf_insn *insn, struct jit_ctx *ctx, |
| int idx) |
| { |
| int upper_bound, lower_bound; |
| int dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| |
| if (dst < 0) |
| return dst; |
| |
| switch (BPF_OP(insn->code)) { |
| case BPF_MOV: |
| case BPF_ADD: |
| upper_bound = S16_MAX; |
| lower_bound = S16_MIN; |
| break; |
| case BPF_SUB: |
| upper_bound = -(int)S16_MIN; |
| lower_bound = -(int)S16_MAX; |
| break; |
| case BPF_AND: |
| case BPF_OR: |
| case BPF_XOR: |
| upper_bound = 0xffff; |
| lower_bound = 0; |
| break; |
| case BPF_RSH: |
| case BPF_LSH: |
| case BPF_ARSH: |
| /* Shift amounts are truncated, no need for bounds */ |
| upper_bound = S32_MAX; |
| lower_bound = S32_MIN; |
| break; |
| default: |
| return -EINVAL; |
| } |
| |
| /* |
| * Immediate move clobbers the register, so no sign/zero |
| * extension needed. |
| */ |
| if (BPF_CLASS(insn->code) == BPF_ALU64 && |
| BPF_OP(insn->code) != BPF_MOV && |
| get_reg_val_type(ctx, idx, insn->dst_reg) == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| /* BPF_ALU | BPF_LSH doesn't need separate sign extension */ |
| if (BPF_CLASS(insn->code) == BPF_ALU && |
| BPF_OP(insn->code) != BPF_LSH && |
| BPF_OP(insn->code) != BPF_MOV && |
| get_reg_val_type(ctx, idx, insn->dst_reg) != REG_32BIT) |
| emit_instr(ctx, sll, dst, dst, 0); |
| |
| if (insn->imm >= lower_bound && insn->imm <= upper_bound) { |
| /* single insn immediate case */ |
| switch (BPF_OP(insn->code) | BPF_CLASS(insn->code)) { |
| case BPF_ALU64 | BPF_MOV: |
| emit_instr(ctx, daddiu, dst, MIPS_R_ZERO, insn->imm); |
| break; |
| case BPF_ALU64 | BPF_AND: |
| case BPF_ALU | BPF_AND: |
| emit_instr(ctx, andi, dst, dst, insn->imm); |
| break; |
| case BPF_ALU64 | BPF_OR: |
| case BPF_ALU | BPF_OR: |
| emit_instr(ctx, ori, dst, dst, insn->imm); |
| break; |
| case BPF_ALU64 | BPF_XOR: |
| case BPF_ALU | BPF_XOR: |
| emit_instr(ctx, xori, dst, dst, insn->imm); |
| break; |
| case BPF_ALU64 | BPF_ADD: |
| emit_instr(ctx, daddiu, dst, dst, insn->imm); |
| break; |
| case BPF_ALU64 | BPF_SUB: |
| emit_instr(ctx, daddiu, dst, dst, -insn->imm); |
| break; |
| case BPF_ALU64 | BPF_RSH: |
| emit_instr(ctx, dsrl_safe, dst, dst, insn->imm & 0x3f); |
| break; |
| case BPF_ALU | BPF_RSH: |
| emit_instr(ctx, srl, dst, dst, insn->imm & 0x1f); |
| break; |
| case BPF_ALU64 | BPF_LSH: |
| emit_instr(ctx, dsll_safe, dst, dst, insn->imm & 0x3f); |
| break; |
| case BPF_ALU | BPF_LSH: |
| emit_instr(ctx, sll, dst, dst, insn->imm & 0x1f); |
| break; |
| case BPF_ALU64 | BPF_ARSH: |
| emit_instr(ctx, dsra_safe, dst, dst, insn->imm & 0x3f); |
| break; |
| case BPF_ALU | BPF_ARSH: |
| emit_instr(ctx, sra, dst, dst, insn->imm & 0x1f); |
| break; |
| case BPF_ALU | BPF_MOV: |
| emit_instr(ctx, addiu, dst, MIPS_R_ZERO, insn->imm); |
| break; |
| case BPF_ALU | BPF_ADD: |
| emit_instr(ctx, addiu, dst, dst, insn->imm); |
| break; |
| case BPF_ALU | BPF_SUB: |
| emit_instr(ctx, addiu, dst, dst, -insn->imm); |
| break; |
| default: |
| return -EINVAL; |
| } |
| } else { |
| /* multi insn immediate case */ |
| if (BPF_OP(insn->code) == BPF_MOV) { |
| gen_imm_to_reg(insn, dst, ctx); |
| } else { |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| switch (BPF_OP(insn->code) | BPF_CLASS(insn->code)) { |
| case BPF_ALU64 | BPF_AND: |
| case BPF_ALU | BPF_AND: |
| emit_instr(ctx, and, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU64 | BPF_OR: |
| case BPF_ALU | BPF_OR: |
| emit_instr(ctx, or, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU64 | BPF_XOR: |
| case BPF_ALU | BPF_XOR: |
| emit_instr(ctx, xor, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU64 | BPF_ADD: |
| emit_instr(ctx, daddu, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU64 | BPF_SUB: |
| emit_instr(ctx, dsubu, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU | BPF_ADD: |
| emit_instr(ctx, addu, dst, dst, MIPS_R_AT); |
| break; |
| case BPF_ALU | BPF_SUB: |
| emit_instr(ctx, subu, dst, dst, MIPS_R_AT); |
| break; |
| default: |
| return -EINVAL; |
| } |
| } |
| } |
| |
| return 0; |
| } |
| |
| static void * __must_check |
| ool_skb_header_pointer(const struct sk_buff *skb, int offset, |
| int len, void *buffer) |
| { |
| return skb_header_pointer(skb, offset, len, buffer); |
| } |
| |
| static int size_to_len(const struct bpf_insn *insn) |
| { |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_B: |
| return 1; |
| case BPF_H: |
| return 2; |
| case BPF_W: |
| return 4; |
| case BPF_DW: |
| return 8; |
| } |
| return 0; |
| } |
| |
| static void emit_const_to_reg(struct jit_ctx *ctx, int dst, u64 value) |
| { |
| if (value >= 0xffffffffffff8000ull || value < 0x8000ull) { |
| emit_instr(ctx, daddiu, dst, MIPS_R_ZERO, (int)value); |
| } else if (value >= 0xffffffff80000000ull || |
| (value < 0x80000000 && value > 0xffff)) { |
| emit_instr(ctx, lui, dst, (s32)(s16)(value >> 16)); |
| emit_instr(ctx, ori, dst, dst, (unsigned int)(value & 0xffff)); |
| } else { |
| int i; |
| bool seen_part = false; |
| int needed_shift = 0; |
| |
| for (i = 0; i < 4; i++) { |
| u64 part = (value >> (16 * (3 - i))) & 0xffff; |
| |
| if (seen_part && needed_shift > 0 && (part || i == 3)) { |
| emit_instr(ctx, dsll_safe, dst, dst, needed_shift); |
| needed_shift = 0; |
| } |
| if (part) { |
| if (i == 0 || (!seen_part && i < 3 && part < 0x8000)) { |
| emit_instr(ctx, lui, dst, (s32)(s16)part); |
| needed_shift = -16; |
| } else { |
| emit_instr(ctx, ori, dst, |
| seen_part ? dst : MIPS_R_ZERO, |
| (unsigned int)part); |
| } |
| seen_part = true; |
| } |
| if (seen_part) |
| needed_shift += 16; |
| } |
| } |
| } |
| |
| static int emit_bpf_tail_call(struct jit_ctx *ctx, int this_idx) |
| { |
| int off, b_off; |
| |
| ctx->flags |= EBPF_SEEN_TC; |
| /* |
| * if (index >= array->map.max_entries) |
| * goto out; |
| */ |
| off = offsetof(struct bpf_array, map.max_entries); |
| emit_instr(ctx, lwu, MIPS_R_T5, off, MIPS_R_A1); |
| emit_instr(ctx, sltu, MIPS_R_AT, MIPS_R_T5, MIPS_R_A2); |
| b_off = b_imm(this_idx + 1, ctx); |
| emit_instr(ctx, bne, MIPS_R_AT, MIPS_R_ZERO, b_off); |
| /* |
| * if (--TCC < 0) |
| * goto out; |
| */ |
| /* Delay slot */ |
| emit_instr(ctx, daddiu, MIPS_R_T5, |
| (ctx->flags & EBPF_TCC_IN_V1) ? MIPS_R_V1 : MIPS_R_S4, -1); |
| b_off = b_imm(this_idx + 1, ctx); |
| emit_instr(ctx, bltz, MIPS_R_T5, b_off); |
| /* |
| * prog = array->ptrs[index]; |
| * if (prog == NULL) |
| * goto out; |
| */ |
| /* Delay slot */ |
| emit_instr(ctx, dsll, MIPS_R_T8, MIPS_R_A2, 3); |
| emit_instr(ctx, daddu, MIPS_R_T8, MIPS_R_T8, MIPS_R_A1); |
| off = offsetof(struct bpf_array, ptrs); |
| emit_instr(ctx, ld, MIPS_R_AT, off, MIPS_R_T8); |
| b_off = b_imm(this_idx + 1, ctx); |
| emit_instr(ctx, beq, MIPS_R_AT, MIPS_R_ZERO, b_off); |
| /* Delay slot */ |
| emit_instr(ctx, nop); |
| |
| /* goto *(prog->bpf_func + 4); */ |
| off = offsetof(struct bpf_prog, bpf_func); |
| emit_instr(ctx, ld, MIPS_R_T9, off, MIPS_R_AT); |
| /* All systems are go... propagate TCC */ |
| emit_instr(ctx, daddu, MIPS_R_V1, MIPS_R_T5, MIPS_R_ZERO); |
| /* Skip first instruction (TCC initialization) */ |
| emit_instr(ctx, daddiu, MIPS_R_T9, MIPS_R_T9, 4); |
| return build_int_epilogue(ctx, MIPS_R_T9); |
| } |
| |
| static bool is_bad_offset(int b_off) |
| { |
| return b_off > 0x1ffff || b_off < -0x20000; |
| } |
| |
| /* Returns the number of insn slots consumed. */ |
| static int build_one_insn(const struct bpf_insn *insn, struct jit_ctx *ctx, |
| int this_idx, int exit_idx) |
| { |
| int src, dst, r, td, ts, mem_off, b_off; |
| bool need_swap, did_move, cmp_eq; |
| unsigned int target = 0; |
| u64 t64; |
| s64 t64s; |
| int bpf_op = BPF_OP(insn->code); |
| |
| switch (insn->code) { |
| case BPF_ALU64 | BPF_ADD | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_SUB | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_OR | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_AND | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_LSH | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_RSH | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_XOR | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_ARSH | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU64 | BPF_MOV | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_MOV | BPF_K: /* ALU32_IMM */ |
| case BPF_ALU | BPF_ADD | BPF_K: /* ALU32_IMM */ |
| case BPF_ALU | BPF_SUB | BPF_K: /* ALU32_IMM */ |
| case BPF_ALU | BPF_OR | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_AND | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_LSH | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_RSH | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_XOR | BPF_K: /* ALU64_IMM */ |
| case BPF_ALU | BPF_ARSH | BPF_K: /* ALU64_IMM */ |
| r = gen_imm_insn(insn, ctx, this_idx); |
| if (r < 0) |
| return r; |
| break; |
| case BPF_ALU64 | BPF_MUL | BPF_K: /* ALU64_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| if (get_reg_val_type(ctx, this_idx, insn->dst_reg) == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| if (insn->imm == 1) /* Mult by 1 is a nop */ |
| break; |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| emit_instr(ctx, dmultu, MIPS_R_AT, dst); |
| emit_instr(ctx, mflo, dst); |
| break; |
| case BPF_ALU64 | BPF_NEG | BPF_K: /* ALU64_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| if (get_reg_val_type(ctx, this_idx, insn->dst_reg) == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| emit_instr(ctx, dsubu, dst, MIPS_R_ZERO, dst); |
| break; |
| case BPF_ALU | BPF_MUL | BPF_K: /* ALU_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| if (td == REG_64BIT || td == REG_32BIT_ZERO_EX) { |
| /* sign extend */ |
| emit_instr(ctx, sll, dst, dst, 0); |
| } |
| if (insn->imm == 1) /* Mult by 1 is a nop */ |
| break; |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| emit_instr(ctx, multu, dst, MIPS_R_AT); |
| emit_instr(ctx, mflo, dst); |
| break; |
| case BPF_ALU | BPF_NEG | BPF_K: /* ALU_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| if (td == REG_64BIT || td == REG_32BIT_ZERO_EX) { |
| /* sign extend */ |
| emit_instr(ctx, sll, dst, dst, 0); |
| } |
| emit_instr(ctx, subu, dst, MIPS_R_ZERO, dst); |
| break; |
| case BPF_ALU | BPF_DIV | BPF_K: /* ALU_IMM */ |
| case BPF_ALU | BPF_MOD | BPF_K: /* ALU_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| if (insn->imm == 0) { /* Div by zero */ |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, beq, MIPS_R_ZERO, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, addu, MIPS_R_V0, MIPS_R_ZERO, MIPS_R_ZERO); |
| } |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| if (td == REG_64BIT || td == REG_32BIT_ZERO_EX) |
| /* sign extend */ |
| emit_instr(ctx, sll, dst, dst, 0); |
| if (insn->imm == 1) { |
| /* div by 1 is a nop, mod by 1 is zero */ |
| if (bpf_op == BPF_MOD) |
| emit_instr(ctx, addu, dst, MIPS_R_ZERO, MIPS_R_ZERO); |
| break; |
| } |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| emit_instr(ctx, divu, dst, MIPS_R_AT); |
| if (bpf_op == BPF_DIV) |
| emit_instr(ctx, mflo, dst); |
| else |
| emit_instr(ctx, mfhi, dst); |
| break; |
| case BPF_ALU64 | BPF_DIV | BPF_K: /* ALU_IMM */ |
| case BPF_ALU64 | BPF_MOD | BPF_K: /* ALU_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| if (insn->imm == 0) { /* Div by zero */ |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, beq, MIPS_R_ZERO, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, addu, MIPS_R_V0, MIPS_R_ZERO, MIPS_R_ZERO); |
| } |
| if (get_reg_val_type(ctx, this_idx, insn->dst_reg) == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| |
| if (insn->imm == 1) { |
| /* div by 1 is a nop, mod by 1 is zero */ |
| if (bpf_op == BPF_MOD) |
| emit_instr(ctx, addu, dst, MIPS_R_ZERO, MIPS_R_ZERO); |
| break; |
| } |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| emit_instr(ctx, ddivu, dst, MIPS_R_AT); |
| if (bpf_op == BPF_DIV) |
| emit_instr(ctx, mflo, dst); |
| else |
| emit_instr(ctx, mfhi, dst); |
| break; |
| case BPF_ALU64 | BPF_MOV | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_ADD | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_SUB | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_XOR | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_OR | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_AND | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_MUL | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_DIV | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_MOD | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_LSH | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_RSH | BPF_X: /* ALU64_REG */ |
| case BPF_ALU64 | BPF_ARSH | BPF_X: /* ALU64_REG */ |
| src = ebpf_to_mips_reg(ctx, insn, src_reg); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (src < 0 || dst < 0) |
| return -EINVAL; |
| if (get_reg_val_type(ctx, this_idx, insn->dst_reg) == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| did_move = false; |
| if (insn->src_reg == BPF_REG_10) { |
| if (bpf_op == BPF_MOV) { |
| emit_instr(ctx, daddiu, dst, MIPS_R_SP, MAX_BPF_STACK); |
| did_move = true; |
| } else { |
| emit_instr(ctx, daddiu, MIPS_R_AT, MIPS_R_SP, MAX_BPF_STACK); |
| src = MIPS_R_AT; |
| } |
| } else if (get_reg_val_type(ctx, this_idx, insn->src_reg) == REG_32BIT) { |
| int tmp_reg = MIPS_R_AT; |
| |
| if (bpf_op == BPF_MOV) { |
| tmp_reg = dst; |
| did_move = true; |
| } |
| emit_instr(ctx, daddu, tmp_reg, src, MIPS_R_ZERO); |
| emit_instr(ctx, dinsu, tmp_reg, MIPS_R_ZERO, 32, 32); |
| src = MIPS_R_AT; |
| } |
| switch (bpf_op) { |
| case BPF_MOV: |
| if (!did_move) |
| emit_instr(ctx, daddu, dst, src, MIPS_R_ZERO); |
| break; |
| case BPF_ADD: |
| emit_instr(ctx, daddu, dst, dst, src); |
| break; |
| case BPF_SUB: |
| emit_instr(ctx, dsubu, dst, dst, src); |
| break; |
| case BPF_XOR: |
| emit_instr(ctx, xor, dst, dst, src); |
| break; |
| case BPF_OR: |
| emit_instr(ctx, or, dst, dst, src); |
| break; |
| case BPF_AND: |
| emit_instr(ctx, and, dst, dst, src); |
| break; |
| case BPF_MUL: |
| emit_instr(ctx, dmultu, dst, src); |
| emit_instr(ctx, mflo, dst); |
| break; |
| case BPF_DIV: |
| case BPF_MOD: |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, beq, src, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, movz, MIPS_R_V0, MIPS_R_ZERO, src); |
| emit_instr(ctx, ddivu, dst, src); |
| if (bpf_op == BPF_DIV) |
| emit_instr(ctx, mflo, dst); |
| else |
| emit_instr(ctx, mfhi, dst); |
| break; |
| case BPF_LSH: |
| emit_instr(ctx, dsllv, dst, dst, src); |
| break; |
| case BPF_RSH: |
| emit_instr(ctx, dsrlv, dst, dst, src); |
| break; |
| case BPF_ARSH: |
| emit_instr(ctx, dsrav, dst, dst, src); |
| break; |
| default: |
| pr_err("ALU64_REG NOT HANDLED\n"); |
| return -EINVAL; |
| } |
| break; |
| case BPF_ALU | BPF_MOV | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_ADD | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_SUB | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_XOR | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_OR | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_AND | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_MUL | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_DIV | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_MOD | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_LSH | BPF_X: /* ALU_REG */ |
| case BPF_ALU | BPF_RSH | BPF_X: /* ALU_REG */ |
| src = ebpf_to_mips_reg(ctx, insn, src_reg_no_fp); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (src < 0 || dst < 0) |
| return -EINVAL; |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| if (td == REG_64BIT || td == REG_32BIT_ZERO_EX) { |
| /* sign extend */ |
| emit_instr(ctx, sll, dst, dst, 0); |
| } |
| did_move = false; |
| ts = get_reg_val_type(ctx, this_idx, insn->src_reg); |
| if (ts == REG_64BIT || ts == REG_32BIT_ZERO_EX) { |
| int tmp_reg = MIPS_R_AT; |
| |
| if (bpf_op == BPF_MOV) { |
| tmp_reg = dst; |
| did_move = true; |
| } |
| /* sign extend */ |
| emit_instr(ctx, sll, tmp_reg, src, 0); |
| src = MIPS_R_AT; |
| } |
| switch (bpf_op) { |
| case BPF_MOV: |
| if (!did_move) |
| emit_instr(ctx, addu, dst, src, MIPS_R_ZERO); |
| break; |
| case BPF_ADD: |
| emit_instr(ctx, addu, dst, dst, src); |
| break; |
| case BPF_SUB: |
| emit_instr(ctx, subu, dst, dst, src); |
| break; |
| case BPF_XOR: |
| emit_instr(ctx, xor, dst, dst, src); |
| break; |
| case BPF_OR: |
| emit_instr(ctx, or, dst, dst, src); |
| break; |
| case BPF_AND: |
| emit_instr(ctx, and, dst, dst, src); |
| break; |
| case BPF_MUL: |
| emit_instr(ctx, mul, dst, dst, src); |
| break; |
| case BPF_DIV: |
| case BPF_MOD: |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, beq, src, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, movz, MIPS_R_V0, MIPS_R_ZERO, src); |
| emit_instr(ctx, divu, dst, src); |
| if (bpf_op == BPF_DIV) |
| emit_instr(ctx, mflo, dst); |
| else |
| emit_instr(ctx, mfhi, dst); |
| break; |
| case BPF_LSH: |
| emit_instr(ctx, sllv, dst, dst, src); |
| break; |
| case BPF_RSH: |
| emit_instr(ctx, srlv, dst, dst, src); |
| break; |
| default: |
| pr_err("ALU_REG NOT HANDLED\n"); |
| return -EINVAL; |
| } |
| break; |
| case BPF_JMP | BPF_EXIT: |
| if (this_idx + 1 < exit_idx) { |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, beq, MIPS_R_ZERO, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, nop); |
| } |
| break; |
| case BPF_JMP | BPF_JEQ | BPF_K: /* JMP_IMM */ |
| case BPF_JMP | BPF_JNE | BPF_K: /* JMP_IMM */ |
| cmp_eq = (bpf_op == BPF_JEQ); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg_fp_ok); |
| if (dst < 0) |
| return dst; |
| if (insn->imm == 0) { |
| src = MIPS_R_ZERO; |
| } else { |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| src = MIPS_R_AT; |
| } |
| goto jeq_common; |
| case BPF_JMP | BPF_JEQ | BPF_X: /* JMP_REG */ |
| case BPF_JMP | BPF_JNE | BPF_X: |
| case BPF_JMP | BPF_JSLT | BPF_X: |
| case BPF_JMP | BPF_JSLE | BPF_X: |
| case BPF_JMP | BPF_JSGT | BPF_X: |
| case BPF_JMP | BPF_JSGE | BPF_X: |
| case BPF_JMP | BPF_JLT | BPF_X: |
| case BPF_JMP | BPF_JLE | BPF_X: |
| case BPF_JMP | BPF_JGT | BPF_X: |
| case BPF_JMP | BPF_JGE | BPF_X: |
| case BPF_JMP | BPF_JSET | BPF_X: |
| src = ebpf_to_mips_reg(ctx, insn, src_reg_no_fp); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (src < 0 || dst < 0) |
| return -EINVAL; |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| ts = get_reg_val_type(ctx, this_idx, insn->src_reg); |
| if (td == REG_32BIT && ts != REG_32BIT) { |
| emit_instr(ctx, sll, MIPS_R_AT, src, 0); |
| src = MIPS_R_AT; |
| } else if (ts == REG_32BIT && td != REG_32BIT) { |
| emit_instr(ctx, sll, MIPS_R_AT, dst, 0); |
| dst = MIPS_R_AT; |
| } |
| if (bpf_op == BPF_JSET) { |
| emit_instr(ctx, and, MIPS_R_AT, dst, src); |
| cmp_eq = false; |
| dst = MIPS_R_AT; |
| src = MIPS_R_ZERO; |
| } else if (bpf_op == BPF_JSGT || bpf_op == BPF_JSLE) { |
| emit_instr(ctx, dsubu, MIPS_R_AT, dst, src); |
| if ((insn + 1)->code == (BPF_JMP | BPF_EXIT) && insn->off == 1) { |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| if (bpf_op == BPF_JSGT) |
| emit_instr(ctx, blez, MIPS_R_AT, b_off); |
| else |
| emit_instr(ctx, bgtz, MIPS_R_AT, b_off); |
| emit_instr(ctx, nop); |
| return 2; /* We consumed the exit. */ |
| } |
| b_off = b_imm(this_idx + insn->off + 1, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| if (bpf_op == BPF_JSGT) |
| emit_instr(ctx, bgtz, MIPS_R_AT, b_off); |
| else |
| emit_instr(ctx, blez, MIPS_R_AT, b_off); |
| emit_instr(ctx, nop); |
| break; |
| } else if (bpf_op == BPF_JSGE || bpf_op == BPF_JSLT) { |
| emit_instr(ctx, slt, MIPS_R_AT, dst, src); |
| cmp_eq = bpf_op == BPF_JSGE; |
| dst = MIPS_R_AT; |
| src = MIPS_R_ZERO; |
| } else if (bpf_op == BPF_JGT || bpf_op == BPF_JLE) { |
| /* dst or src could be AT */ |
| emit_instr(ctx, dsubu, MIPS_R_T8, dst, src); |
| emit_instr(ctx, sltu, MIPS_R_AT, dst, src); |
| /* SP known to be non-zero, movz becomes boolean not */ |
| emit_instr(ctx, movz, MIPS_R_T9, MIPS_R_SP, MIPS_R_T8); |
| emit_instr(ctx, movn, MIPS_R_T9, MIPS_R_ZERO, MIPS_R_T8); |
| emit_instr(ctx, or, MIPS_R_AT, MIPS_R_T9, MIPS_R_AT); |
| cmp_eq = bpf_op == BPF_JGT; |
| dst = MIPS_R_AT; |
| src = MIPS_R_ZERO; |
| } else if (bpf_op == BPF_JGE || bpf_op == BPF_JLT) { |
| emit_instr(ctx, sltu, MIPS_R_AT, dst, src); |
| cmp_eq = bpf_op == BPF_JGE; |
| dst = MIPS_R_AT; |
| src = MIPS_R_ZERO; |
| } else { /* JNE/JEQ case */ |
| cmp_eq = (bpf_op == BPF_JEQ); |
| } |
| jeq_common: |
| /* |
| * If the next insn is EXIT and we are jumping arround |
| * only it, invert the sense of the compare and |
| * conditionally jump to the exit. Poor man's branch |
| * chaining. |
| */ |
| if ((insn + 1)->code == (BPF_JMP | BPF_EXIT) && insn->off == 1) { |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) { |
| target = j_target(ctx, exit_idx); |
| if (target == (unsigned int)-1) |
| return -E2BIG; |
| cmp_eq = !cmp_eq; |
| b_off = 4 * 3; |
| if (!(ctx->offsets[this_idx] & OFFSETS_B_CONV)) { |
| ctx->offsets[this_idx] |= OFFSETS_B_CONV; |
| ctx->long_b_conversion = 1; |
| } |
| } |
| |
| if (cmp_eq) |
| emit_instr(ctx, bne, dst, src, b_off); |
| else |
| emit_instr(ctx, beq, dst, src, b_off); |
| emit_instr(ctx, nop); |
| if (ctx->offsets[this_idx] & OFFSETS_B_CONV) { |
| emit_instr(ctx, j, target); |
| emit_instr(ctx, nop); |
| } |
| return 2; /* We consumed the exit. */ |
| } |
| b_off = b_imm(this_idx + insn->off + 1, ctx); |
| if (is_bad_offset(b_off)) { |
| target = j_target(ctx, this_idx + insn->off + 1); |
| if (target == (unsigned int)-1) |
| return -E2BIG; |
| cmp_eq = !cmp_eq; |
| b_off = 4 * 3; |
| if (!(ctx->offsets[this_idx] & OFFSETS_B_CONV)) { |
| ctx->offsets[this_idx] |= OFFSETS_B_CONV; |
| ctx->long_b_conversion = 1; |
| } |
| } |
| |
| if (cmp_eq) |
| emit_instr(ctx, beq, dst, src, b_off); |
| else |
| emit_instr(ctx, bne, dst, src, b_off); |
| emit_instr(ctx, nop); |
| if (ctx->offsets[this_idx] & OFFSETS_B_CONV) { |
| emit_instr(ctx, j, target); |
| emit_instr(ctx, nop); |
| } |
| break; |
| case BPF_JMP | BPF_JSGT | BPF_K: /* JMP_IMM */ |
| case BPF_JMP | BPF_JSGE | BPF_K: /* JMP_IMM */ |
| case BPF_JMP | BPF_JSLT | BPF_K: /* JMP_IMM */ |
| case BPF_JMP | BPF_JSLE | BPF_K: /* JMP_IMM */ |
| cmp_eq = (bpf_op == BPF_JSGE); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg_fp_ok); |
| if (dst < 0) |
| return dst; |
| |
| if (insn->imm == 0) { |
| if ((insn + 1)->code == (BPF_JMP | BPF_EXIT) && insn->off == 1) { |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| switch (bpf_op) { |
| case BPF_JSGT: |
| emit_instr(ctx, blez, dst, b_off); |
| break; |
| case BPF_JSGE: |
| emit_instr(ctx, bltz, dst, b_off); |
| break; |
| case BPF_JSLT: |
| emit_instr(ctx, bgez, dst, b_off); |
| break; |
| case BPF_JSLE: |
| emit_instr(ctx, bgtz, dst, b_off); |
| break; |
| } |
| emit_instr(ctx, nop); |
| return 2; /* We consumed the exit. */ |
| } |
| b_off = b_imm(this_idx + insn->off + 1, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| switch (bpf_op) { |
| case BPF_JSGT: |
| emit_instr(ctx, bgtz, dst, b_off); |
| break; |
| case BPF_JSGE: |
| emit_instr(ctx, bgez, dst, b_off); |
| break; |
| case BPF_JSLT: |
| emit_instr(ctx, bltz, dst, b_off); |
| break; |
| case BPF_JSLE: |
| emit_instr(ctx, blez, dst, b_off); |
| break; |
| } |
| emit_instr(ctx, nop); |
| break; |
| } |
| /* |
| * only "LT" compare available, so we must use imm + 1 |
| * to generate "GT" and imm -1 to generate LE |
| */ |
| if (bpf_op == BPF_JSGT) |
| t64s = insn->imm + 1; |
| else if (bpf_op == BPF_JSLE) |
| t64s = insn->imm + 1; |
| else |
| t64s = insn->imm; |
| |
| cmp_eq = bpf_op == BPF_JSGT || bpf_op == BPF_JSGE; |
| if (t64s >= S16_MIN && t64s <= S16_MAX) { |
| emit_instr(ctx, slti, MIPS_R_AT, dst, (int)t64s); |
| src = MIPS_R_AT; |
| dst = MIPS_R_ZERO; |
| goto jeq_common; |
| } |
| emit_const_to_reg(ctx, MIPS_R_AT, (u64)t64s); |
| emit_instr(ctx, slt, MIPS_R_AT, dst, MIPS_R_AT); |
| src = MIPS_R_AT; |
| dst = MIPS_R_ZERO; |
| goto jeq_common; |
| |
| case BPF_JMP | BPF_JGT | BPF_K: |
| case BPF_JMP | BPF_JGE | BPF_K: |
| case BPF_JMP | BPF_JLT | BPF_K: |
| case BPF_JMP | BPF_JLE | BPF_K: |
| cmp_eq = (bpf_op == BPF_JGE); |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg_fp_ok); |
| if (dst < 0) |
| return dst; |
| /* |
| * only "LT" compare available, so we must use imm + 1 |
| * to generate "GT" and imm -1 to generate LE |
| */ |
| if (bpf_op == BPF_JGT) |
| t64s = (u64)(u32)(insn->imm) + 1; |
| else if (bpf_op == BPF_JLE) |
| t64s = (u64)(u32)(insn->imm) + 1; |
| else |
| t64s = (u64)(u32)(insn->imm); |
| |
| cmp_eq = bpf_op == BPF_JGT || bpf_op == BPF_JGE; |
| |
| emit_const_to_reg(ctx, MIPS_R_AT, (u64)t64s); |
| emit_instr(ctx, sltu, MIPS_R_AT, dst, MIPS_R_AT); |
| src = MIPS_R_AT; |
| dst = MIPS_R_ZERO; |
| goto jeq_common; |
| |
| case BPF_JMP | BPF_JSET | BPF_K: /* JMP_IMM */ |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg_fp_ok); |
| if (dst < 0) |
| return dst; |
| |
| if (ctx->use_bbit_insns && hweight32((u32)insn->imm) == 1) { |
| if ((insn + 1)->code == (BPF_JMP | BPF_EXIT) && insn->off == 1) { |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, bbit0, dst, ffs((u32)insn->imm) - 1, b_off); |
| emit_instr(ctx, nop); |
| return 2; /* We consumed the exit. */ |
| } |
| b_off = b_imm(this_idx + insn->off + 1, ctx); |
| if (is_bad_offset(b_off)) |
| return -E2BIG; |
| emit_instr(ctx, bbit1, dst, ffs((u32)insn->imm) - 1, b_off); |
| emit_instr(ctx, nop); |
| break; |
| } |
| t64 = (u32)insn->imm; |
| emit_const_to_reg(ctx, MIPS_R_AT, t64); |
| emit_instr(ctx, and, MIPS_R_AT, dst, MIPS_R_AT); |
| src = MIPS_R_AT; |
| dst = MIPS_R_ZERO; |
| cmp_eq = false; |
| goto jeq_common; |
| |
| case BPF_JMP | BPF_JA: |
| /* |
| * Prefer relative branch for easier debugging, but |
| * fall back if needed. |
| */ |
| b_off = b_imm(this_idx + insn->off + 1, ctx); |
| if (is_bad_offset(b_off)) { |
| target = j_target(ctx, this_idx + insn->off + 1); |
| if (target == (unsigned int)-1) |
| return -E2BIG; |
| emit_instr(ctx, j, target); |
| } else { |
| emit_instr(ctx, b, b_off); |
| } |
| emit_instr(ctx, nop); |
| break; |
| case BPF_LD | BPF_DW | BPF_IMM: |
| if (insn->src_reg != 0) |
| return -EINVAL; |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| t64 = ((u64)(u32)insn->imm) | ((u64)(insn + 1)->imm << 32); |
| emit_const_to_reg(ctx, dst, t64); |
| return 2; /* Double slot insn */ |
| |
| case BPF_JMP | BPF_CALL: |
| ctx->flags |= EBPF_SAVE_RA; |
| t64s = (s64)insn->imm + (s64)__bpf_call_base; |
| emit_const_to_reg(ctx, MIPS_R_T9, (u64)t64s); |
| emit_instr(ctx, jalr, MIPS_R_RA, MIPS_R_T9); |
| /* delay slot */ |
| emit_instr(ctx, nop); |
| break; |
| |
| case BPF_JMP | BPF_TAIL_CALL: |
| if (emit_bpf_tail_call(ctx, this_idx)) |
| return -EINVAL; |
| break; |
| |
| case BPF_LD | BPF_B | BPF_ABS: |
| case BPF_LD | BPF_H | BPF_ABS: |
| case BPF_LD | BPF_W | BPF_ABS: |
| case BPF_LD | BPF_DW | BPF_ABS: |
| ctx->flags |= EBPF_SAVE_RA; |
| |
| gen_imm_to_reg(insn, MIPS_R_A1, ctx); |
| emit_instr(ctx, addiu, MIPS_R_A2, MIPS_R_ZERO, size_to_len(insn)); |
| |
| if (insn->imm < 0) { |
| emit_const_to_reg(ctx, MIPS_R_T9, (u64)bpf_internal_load_pointer_neg_helper); |
| } else { |
| emit_const_to_reg(ctx, MIPS_R_T9, (u64)ool_skb_header_pointer); |
| emit_instr(ctx, daddiu, MIPS_R_A3, MIPS_R_SP, ctx->tmp_offset); |
| } |
| goto ld_skb_common; |
| |
| case BPF_LD | BPF_B | BPF_IND: |
| case BPF_LD | BPF_H | BPF_IND: |
| case BPF_LD | BPF_W | BPF_IND: |
| case BPF_LD | BPF_DW | BPF_IND: |
| ctx->flags |= EBPF_SAVE_RA; |
| src = ebpf_to_mips_reg(ctx, insn, src_reg_no_fp); |
| if (src < 0) |
| return src; |
| ts = get_reg_val_type(ctx, this_idx, insn->src_reg); |
| if (ts == REG_32BIT_ZERO_EX) { |
| /* sign extend */ |
| emit_instr(ctx, sll, MIPS_R_A1, src, 0); |
| src = MIPS_R_A1; |
| } |
| if (insn->imm >= S16_MIN && insn->imm <= S16_MAX) { |
| emit_instr(ctx, daddiu, MIPS_R_A1, src, insn->imm); |
| } else { |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| emit_instr(ctx, daddu, MIPS_R_A1, MIPS_R_AT, src); |
| } |
| /* truncate to 32-bit int */ |
| emit_instr(ctx, sll, MIPS_R_A1, MIPS_R_A1, 0); |
| emit_instr(ctx, daddiu, MIPS_R_A3, MIPS_R_SP, ctx->tmp_offset); |
| emit_instr(ctx, slt, MIPS_R_AT, MIPS_R_A1, MIPS_R_ZERO); |
| |
| emit_const_to_reg(ctx, MIPS_R_T8, (u64)bpf_internal_load_pointer_neg_helper); |
| emit_const_to_reg(ctx, MIPS_R_T9, (u64)ool_skb_header_pointer); |
| emit_instr(ctx, addiu, MIPS_R_A2, MIPS_R_ZERO, size_to_len(insn)); |
| emit_instr(ctx, movn, MIPS_R_T9, MIPS_R_T8, MIPS_R_AT); |
| |
| ld_skb_common: |
| emit_instr(ctx, jalr, MIPS_R_RA, MIPS_R_T9); |
| /* delay slot move */ |
| emit_instr(ctx, daddu, MIPS_R_A0, MIPS_R_S0, MIPS_R_ZERO); |
| |
| /* Check the error value */ |
| b_off = b_imm(exit_idx, ctx); |
| if (is_bad_offset(b_off)) { |
| target = j_target(ctx, exit_idx); |
| if (target == (unsigned int)-1) |
| return -E2BIG; |
| |
| if (!(ctx->offsets[this_idx] & OFFSETS_B_CONV)) { |
| ctx->offsets[this_idx] |= OFFSETS_B_CONV; |
| ctx->long_b_conversion = 1; |
| } |
| emit_instr(ctx, bne, MIPS_R_V0, MIPS_R_ZERO, 4 * 3); |
| emit_instr(ctx, nop); |
| emit_instr(ctx, j, target); |
| emit_instr(ctx, nop); |
| } else { |
| emit_instr(ctx, beq, MIPS_R_V0, MIPS_R_ZERO, b_off); |
| emit_instr(ctx, nop); |
| } |
| |
| #ifdef __BIG_ENDIAN |
| need_swap = false; |
| #else |
| need_swap = true; |
| #endif |
| dst = MIPS_R_V0; |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_B: |
| emit_instr(ctx, lbu, dst, 0, MIPS_R_V0); |
| break; |
| case BPF_H: |
| emit_instr(ctx, lhu, dst, 0, MIPS_R_V0); |
| if (need_swap) |
| emit_instr(ctx, wsbh, dst, dst); |
| break; |
| case BPF_W: |
| emit_instr(ctx, lw, dst, 0, MIPS_R_V0); |
| if (need_swap) { |
| emit_instr(ctx, wsbh, dst, dst); |
| emit_instr(ctx, rotr, dst, dst, 16); |
| } |
| break; |
| case BPF_DW: |
| emit_instr(ctx, ld, dst, 0, MIPS_R_V0); |
| if (need_swap) { |
| emit_instr(ctx, dsbh, dst, dst); |
| emit_instr(ctx, dshd, dst, dst); |
| } |
| break; |
| } |
| |
| break; |
| case BPF_ALU | BPF_END | BPF_FROM_BE: |
| case BPF_ALU | BPF_END | BPF_FROM_LE: |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| td = get_reg_val_type(ctx, this_idx, insn->dst_reg); |
| if (insn->imm == 64 && td == REG_32BIT) |
| emit_instr(ctx, dinsu, dst, MIPS_R_ZERO, 32, 32); |
| |
| if (insn->imm != 64 && |
| (td == REG_64BIT || td == REG_32BIT_ZERO_EX)) { |
| /* sign extend */ |
| emit_instr(ctx, sll, dst, dst, 0); |
| } |
| |
| #ifdef __BIG_ENDIAN |
| need_swap = (BPF_SRC(insn->code) == BPF_FROM_LE); |
| #else |
| need_swap = (BPF_SRC(insn->code) == BPF_FROM_BE); |
| #endif |
| if (insn->imm == 16) { |
| if (need_swap) |
| emit_instr(ctx, wsbh, dst, dst); |
| emit_instr(ctx, andi, dst, dst, 0xffff); |
| } else if (insn->imm == 32) { |
| if (need_swap) { |
| emit_instr(ctx, wsbh, dst, dst); |
| emit_instr(ctx, rotr, dst, dst, 16); |
| } |
| } else { /* 64-bit*/ |
| if (need_swap) { |
| emit_instr(ctx, dsbh, dst, dst); |
| emit_instr(ctx, dshd, dst, dst); |
| } |
| } |
| break; |
| |
| case BPF_ST | BPF_B | BPF_MEM: |
| case BPF_ST | BPF_H | BPF_MEM: |
| case BPF_ST | BPF_W | BPF_MEM: |
| case BPF_ST | BPF_DW | BPF_MEM: |
| if (insn->dst_reg == BPF_REG_10) { |
| ctx->flags |= EBPF_SEEN_FP; |
| dst = MIPS_R_SP; |
| mem_off = insn->off + MAX_BPF_STACK; |
| } else { |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| mem_off = insn->off; |
| } |
| gen_imm_to_reg(insn, MIPS_R_AT, ctx); |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_B: |
| emit_instr(ctx, sb, MIPS_R_AT, mem_off, dst); |
| break; |
| case BPF_H: |
| emit_instr(ctx, sh, MIPS_R_AT, mem_off, dst); |
| break; |
| case BPF_W: |
| emit_instr(ctx, sw, MIPS_R_AT, mem_off, dst); |
| break; |
| case BPF_DW: |
| emit_instr(ctx, sd, MIPS_R_AT, mem_off, dst); |
| break; |
| } |
| break; |
| |
| case BPF_LDX | BPF_B | BPF_MEM: |
| case BPF_LDX | BPF_H | BPF_MEM: |
| case BPF_LDX | BPF_W | BPF_MEM: |
| case BPF_LDX | BPF_DW | BPF_MEM: |
| if (insn->src_reg == BPF_REG_10) { |
| ctx->flags |= EBPF_SEEN_FP; |
| src = MIPS_R_SP; |
| mem_off = insn->off + MAX_BPF_STACK; |
| } else { |
| src = ebpf_to_mips_reg(ctx, insn, src_reg_no_fp); |
| if (src < 0) |
| return src; |
| mem_off = insn->off; |
| } |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_B: |
| emit_instr(ctx, lbu, dst, mem_off, src); |
| break; |
| case BPF_H: |
| emit_instr(ctx, lhu, dst, mem_off, src); |
| break; |
| case BPF_W: |
| emit_instr(ctx, lw, dst, mem_off, src); |
| break; |
| case BPF_DW: |
| emit_instr(ctx, ld, dst, mem_off, src); |
| break; |
| } |
| break; |
| |
| case BPF_STX | BPF_B | BPF_MEM: |
| case BPF_STX | BPF_H | BPF_MEM: |
| case BPF_STX | BPF_W | BPF_MEM: |
| case BPF_STX | BPF_DW | BPF_MEM: |
| case BPF_STX | BPF_W | BPF_XADD: |
| case BPF_STX | BPF_DW | BPF_XADD: |
| if (insn->dst_reg == BPF_REG_10) { |
| ctx->flags |= EBPF_SEEN_FP; |
| dst = MIPS_R_SP; |
| mem_off = insn->off + MAX_BPF_STACK; |
| } else { |
| dst = ebpf_to_mips_reg(ctx, insn, dst_reg); |
| if (dst < 0) |
| return dst; |
| mem_off = insn->off; |
| } |
| src = ebpf_to_mips_reg(ctx, insn, src_reg_no_fp); |
| if (src < 0) |
| return src; |
| if (BPF_MODE(insn->code) == BPF_XADD) { |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_W: |
| if (get_reg_val_type(ctx, this_idx, insn->src_reg) == REG_32BIT) { |
| emit_instr(ctx, sll, MIPS_R_AT, src, 0); |
| src = MIPS_R_AT; |
| } |
| emit_instr(ctx, ll, MIPS_R_T8, mem_off, dst); |
| emit_instr(ctx, addu, MIPS_R_T8, MIPS_R_T8, src); |
| emit_instr(ctx, sc, MIPS_R_T8, mem_off, dst); |
| /* |
| * On failure back up to LL (-4 |
| * instructions of 4 bytes each |
| */ |
| emit_instr(ctx, beq, MIPS_R_T8, MIPS_R_ZERO, -4 * 4); |
| emit_instr(ctx, nop); |
| break; |
| case BPF_DW: |
| if (get_reg_val_type(ctx, this_idx, insn->src_reg) == REG_32BIT) { |
| emit_instr(ctx, daddu, MIPS_R_AT, src, MIPS_R_ZERO); |
| emit_instr(ctx, dinsu, MIPS_R_AT, MIPS_R_ZERO, 32, 32); |
| src = MIPS_R_AT; |
| } |
| emit_instr(ctx, lld, MIPS_R_T8, mem_off, dst); |
| emit_instr(ctx, daddu, MIPS_R_T8, MIPS_R_T8, src); |
| emit_instr(ctx, scd, MIPS_R_T8, mem_off, dst); |
| emit_instr(ctx, beq, MIPS_R_T8, MIPS_R_ZERO, -4 * 4); |
| emit_instr(ctx, nop); |
| break; |
| } |
| } else { /* BPF_MEM */ |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_B: |
| emit_instr(ctx, sb, src, mem_off, dst); |
| break; |
| case BPF_H: |
| emit_instr(ctx, sh, src, mem_off, dst); |
| break; |
| case BPF_W: |
| emit_instr(ctx, sw, src, mem_off, dst); |
| break; |
| case BPF_DW: |
| if (get_reg_val_type(ctx, this_idx, insn->src_reg) == REG_32BIT) { |
| emit_instr(ctx, daddu, MIPS_R_AT, src, MIPS_R_ZERO); |
| emit_instr(ctx, dinsu, MIPS_R_AT, MIPS_R_ZERO, 32, 32); |
| src = MIPS_R_AT; |
| } |
| emit_instr(ctx, sd, src, mem_off, dst); |
| break; |
| } |
| } |
| break; |
| |
| default: |
| pr_err("NOT HANDLED %d - (%02x)\n", |
| this_idx, (unsigned int)insn->code); |
| return -EINVAL; |
| } |
| return 1; |
| } |
| |
| #define RVT_VISITED_MASK 0xc000000000000000ull |
| #define RVT_FALL_THROUGH 0x4000000000000000ull |
| #define RVT_BRANCH_TAKEN 0x8000000000000000ull |
| #define RVT_DONE (RVT_FALL_THROUGH | RVT_BRANCH_TAKEN) |
| |
| static int build_int_body(struct jit_ctx *ctx) |
| { |
| const struct bpf_prog *prog = ctx->skf; |
| const struct bpf_insn *insn; |
| int i, r; |
| |
| for (i = 0; i < prog->len; ) { |
| insn = prog->insnsi + i; |
| if ((ctx->reg_val_types[i] & RVT_VISITED_MASK) == 0) { |
| /* dead instruction, don't emit it. */ |
| i++; |
| continue; |
| } |
| |
| if (ctx->target == NULL) |
| ctx->offsets[i] = (ctx->offsets[i] & OFFSETS_B_CONV) | (ctx->idx * 4); |
| |
| r = build_one_insn(insn, ctx, i, prog->len); |
| if (r < 0) |
| return r; |
| i += r; |
| } |
| /* epilogue offset */ |
| if (ctx->target == NULL) |
| ctx->offsets[i] = ctx->idx * 4; |
| |
| /* |
| * All exits have an offset of the epilogue, some offsets may |
| * not have been set due to banch-around threading, so set |
| * them now. |
| */ |
| if (ctx->target == NULL) |
| for (i = 0; i < prog->len; i++) { |
| insn = prog->insnsi + i; |
| if (insn->code == (BPF_JMP | BPF_EXIT)) |
| ctx->offsets[i] = ctx->idx * 4; |
| } |
| return 0; |
| } |
| |
| /* return the last idx processed, or negative for error */ |
| static int reg_val_propagate_range(struct jit_ctx *ctx, u64 initial_rvt, |
| int start_idx, bool follow_taken) |
| { |
| const struct bpf_prog *prog = ctx->skf; |
| const struct bpf_insn *insn; |
| u64 exit_rvt = initial_rvt; |
| u64 *rvt = ctx->reg_val_types; |
| int idx; |
| int reg; |
| |
| for (idx = start_idx; idx < prog->len; idx++) { |
| rvt[idx] = (rvt[idx] & RVT_VISITED_MASK) | exit_rvt; |
| insn = prog->insnsi + idx; |
| switch (BPF_CLASS(insn->code)) { |
| case BPF_ALU: |
| switch (BPF_OP(insn->code)) { |
| case BPF_ADD: |
| case BPF_SUB: |
| case BPF_MUL: |
| case BPF_DIV: |
| case BPF_OR: |
| case BPF_AND: |
| case BPF_LSH: |
| case BPF_RSH: |
| case BPF_NEG: |
| case BPF_MOD: |
| case BPF_XOR: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| break; |
| case BPF_MOV: |
| if (BPF_SRC(insn->code)) { |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| } else { |
| /* IMM to REG move*/ |
| if (insn->imm >= 0) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| else |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| } |
| break; |
| case BPF_END: |
| if (insn->imm == 64) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| else if (insn->imm == 32) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| else /* insn->imm == 16 */ |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| break; |
| } |
| rvt[idx] |= RVT_DONE; |
| break; |
| case BPF_ALU64: |
| switch (BPF_OP(insn->code)) { |
| case BPF_MOV: |
| if (BPF_SRC(insn->code)) { |
| /* REG to REG move*/ |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| } else { |
| /* IMM to REG move*/ |
| if (insn->imm >= 0) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| else |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT_32BIT); |
| } |
| break; |
| default: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| } |
| rvt[idx] |= RVT_DONE; |
| break; |
| case BPF_LD: |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_DW: |
| if (BPF_MODE(insn->code) == BPF_IMM) { |
| s64 val; |
| |
| val = (s64)((u32)insn->imm | ((u64)(insn + 1)->imm << 32)); |
| if (val > 0 && val <= S32_MAX) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| else if (val >= S32_MIN && val <= S32_MAX) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT_32BIT); |
| else |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| rvt[idx] |= RVT_DONE; |
| idx++; |
| } else { |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| } |
| break; |
| case BPF_B: |
| case BPF_H: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| break; |
| case BPF_W: |
| if (BPF_MODE(insn->code) == BPF_IMM) |
| set_reg_val_type(&exit_rvt, insn->dst_reg, |
| insn->imm >= 0 ? REG_32BIT_POS : REG_32BIT); |
| else |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| break; |
| } |
| rvt[idx] |= RVT_DONE; |
| break; |
| case BPF_LDX: |
| switch (BPF_SIZE(insn->code)) { |
| case BPF_DW: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_64BIT); |
| break; |
| case BPF_B: |
| case BPF_H: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT_POS); |
| break; |
| case BPF_W: |
| set_reg_val_type(&exit_rvt, insn->dst_reg, REG_32BIT); |
| break; |
| } |
| rvt[idx] |= RVT_DONE; |
| break; |
| case BPF_JMP: |
| switch (BPF_OP(insn->code)) { |
| case BPF_EXIT: |
| rvt[idx] = RVT_DONE | exit_rvt; |
| rvt[prog->len] = exit_rvt; |
| return idx; |
| case BPF_JA: |
| rvt[idx] |= RVT_DONE; |
| idx += insn->off; |
| break; |
| case BPF_JEQ: |
| case BPF_JGT: |
| case BPF_JGE: |
| case BPF_JLT: |
| case BPF_JLE: |
| case BPF_JSET: |
| case BPF_JNE: |
| case BPF_JSGT: |
| case BPF_JSGE: |
| case BPF_JSLT: |
| case BPF_JSLE: |
| if (follow_taken) { |
| rvt[idx] |= RVT_BRANCH_TAKEN; |
| idx += insn->off; |
| follow_taken = false; |
| } else { |
| rvt[idx] |= RVT_FALL_THROUGH; |
| } |
| break; |
| case BPF_CALL: |
| set_reg_val_type(&exit_rvt, BPF_REG_0, REG_64BIT); |
| /* Upon call return, argument registers are clobbered. */ |
| for (reg = BPF_REG_0; reg <= BPF_REG_5; reg++) |
| set_reg_val_type(&exit_rvt, reg, REG_64BIT); |
| |
| rvt[idx] |= RVT_DONE; |
| break; |
| default: |
| WARN(1, "Unhandled BPF_JMP case.\n"); |
| rvt[idx] |= RVT_DONE; |
| break; |
| } |
| break; |
| default: |
| rvt[idx] |= RVT_DONE; |
| break; |
| } |
| } |
| return idx; |
| } |
| |
| /* |
| * Track the value range (i.e. 32-bit vs. 64-bit) of each register at |
| * each eBPF insn. This allows unneeded sign and zero extension |
| * operations to be omitted. |
| * |
| * Doesn't handle yet confluence of control paths with conflicting |
| * ranges, but it is good enough for most sane code. |
| */ |
| static int reg_val_propagate(struct jit_ctx *ctx) |
| { |
| const struct bpf_prog *prog = ctx->skf; |
| u64 exit_rvt; |
| int reg; |
| int i; |
| |
| /* |
| * 11 registers * 3 bits/reg leaves top bits free for other |
| * uses. Bit-62..63 used to see if we have visited an insn. |
| */ |
| exit_rvt = 0; |
| |
| /* Upon entry, argument registers are 64-bit. */ |
| for (reg = BPF_REG_1; reg <= BPF_REG_5; reg++) |
| set_reg_val_type(&exit_rvt, reg, REG_64BIT); |
| |
| /* |
| * First follow all conditional branches on the fall-through |
| * edge of control flow.. |
| */ |
| reg_val_propagate_range(ctx, exit_rvt, 0, false); |
| restart_search: |
| /* |
| * Then repeatedly find the first conditional branch where |
| * both edges of control flow have not been taken, and follow |
| * the branch taken edge. We will end up restarting the |
| * search once per conditional branch insn. |
| */ |
| for (i = 0; i < prog->len; i++) { |
| u64 rvt = ctx->reg_val_types[i]; |
| |
| if ((rvt & RVT_VISITED_MASK) == RVT_DONE || |
| (rvt & RVT_VISITED_MASK) == 0) |
| continue; |
| if ((rvt & RVT_VISITED_MASK) == RVT_FALL_THROUGH) { |
| reg_val_propagate_range(ctx, rvt & ~RVT_VISITED_MASK, i, true); |
| } else { /* RVT_BRANCH_TAKEN */ |
| WARN(1, "Unexpected RVT_BRANCH_TAKEN case.\n"); |
| reg_val_propagate_range(ctx, rvt & ~RVT_VISITED_MASK, i, false); |
| } |
| goto restart_search; |
| } |
| /* |
| * Eventually all conditional branches have been followed on |
| * both branches and we are done. Any insn that has not been |
| * visited at this point is dead. |
| */ |
| |
| return 0; |
| } |
| |
| static void jit_fill_hole(void *area, unsigned int size) |
| { |
| u32 *p; |
| |
| /* We are guaranteed to have aligned memory. */ |
| for (p = area; size >= sizeof(u32); size -= sizeof(u32)) |
| uasm_i_break(&p, BRK_BUG); /* Increments p */ |
| } |
| |
| struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) |
| { |
| struct bpf_prog *orig_prog = prog; |
| bool tmp_blinded = false; |
| struct bpf_prog *tmp; |
| struct bpf_binary_header *header = NULL; |
| struct jit_ctx ctx; |
| unsigned int image_size; |
| u8 *image_ptr; |
| |
| if (!bpf_jit_enable || !cpu_has_mips64r2) |
| return prog; |
| |
| tmp = bpf_jit_blind_constants(prog); |
| /* If blinding was requested and we failed during blinding, |
| * we must fall back to the interpreter. |
| */ |
| if (IS_ERR(tmp)) |
| return orig_prog; |
| if (tmp != prog) { |
| tmp_blinded = true; |
| prog = tmp; |
| } |
| |
| memset(&ctx, 0, sizeof(ctx)); |
| |
| preempt_disable(); |
| switch (current_cpu_type()) { |
| case CPU_CAVIUM_OCTEON: |
| case CPU_CAVIUM_OCTEON_PLUS: |
| case CPU_CAVIUM_OCTEON2: |
| case CPU_CAVIUM_OCTEON3: |
| ctx.use_bbit_insns = 1; |
| break; |
| default: |
| ctx.use_bbit_insns = 0; |
| } |
| preempt_enable(); |
| |
| ctx.offsets = kcalloc(prog->len + 1, sizeof(*ctx.offsets), GFP_KERNEL); |
| if (ctx.offsets == NULL) |
| goto out_err; |
| |
| ctx.reg_val_types = kcalloc(prog->len + 1, sizeof(*ctx.reg_val_types), GFP_KERNEL); |
| if (ctx.reg_val_types == NULL) |
| goto out_err; |
| |
| ctx.skf = prog; |
| |
| if (reg_val_propagate(&ctx)) |
| goto out_err; |
| |
| /* |
| * First pass discovers used resources and instruction offsets |
| * assuming short branches are used. |
| */ |
| if (build_int_body(&ctx)) |
| goto out_err; |
| |
| /* |
| * If no calls are made (EBPF_SAVE_RA), then tail call count |
| * in $v1, else we must save in n$s4. |
| */ |
| if (ctx.flags & EBPF_SEEN_TC) { |
| if (ctx.flags & EBPF_SAVE_RA) |
| ctx.flags |= EBPF_SAVE_S4; |
| else |
| ctx.flags |= EBPF_TCC_IN_V1; |
| } |
| |
| /* |
| * Second pass generates offsets, if any branches are out of |
| * range a jump-around long sequence is generated, and we have |
| * to try again from the beginning to generate the new |
| * offsets. This is done until no additional conversions are |
| * necessary. |
| */ |
| do { |
| ctx.idx = 0; |
| ctx.gen_b_offsets = 1; |
| ctx.long_b_conversion = 0; |
| if (gen_int_prologue(&ctx)) |
| goto out_err; |
| if (build_int_body(&ctx)) |
| goto out_err; |
| if (build_int_epilogue(&ctx, MIPS_R_RA)) |
| goto out_err; |
| } while (ctx.long_b_conversion); |
| |
| image_size = 4 * ctx.idx; |
| |
| header = bpf_jit_binary_alloc(image_size, &image_ptr, |
| sizeof(u32), jit_fill_hole); |
| if (header == NULL) |
| goto out_err; |
| |
| ctx.target = (u32 *)image_ptr; |
| |
| /* Third pass generates the code */ |
| ctx.idx = 0; |
| if (gen_int_prologue(&ctx)) |
| goto out_err; |
| if (build_int_body(&ctx)) |
| goto out_err; |
| if (build_int_epilogue(&ctx, MIPS_R_RA)) |
| goto out_err; |
| |
| /* Update the icache */ |
| flush_icache_range((unsigned long)ctx.target, |
| (unsigned long)(ctx.target + ctx.idx * sizeof(u32))); |
| |
| if (bpf_jit_enable > 1) |
| /* Dump JIT code */ |
| bpf_jit_dump(prog->len, image_size, 2, ctx.target); |
| |
| bpf_jit_binary_lock_ro(header); |
| prog->bpf_func = (void *)ctx.target; |
| prog->jited = 1; |
| prog->jited_len = image_size; |
| out_normal: |
| if (tmp_blinded) |
| bpf_jit_prog_release_other(prog, prog == orig_prog ? |
| tmp : orig_prog); |
| kfree(ctx.offsets); |
| kfree(ctx.reg_val_types); |
| |
| return prog; |
| |
| out_err: |
| prog = orig_prog; |
| if (header) |
| bpf_jit_binary_free(header); |
| goto out_normal; |
| } |