Re: [PATCH] bpf: reject blacklisted symbols in kprobe_multi to avoid recursive trap
From: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Date: 2023-05-16 05:10:38
Also in:
bpf, lkml
From: Masami Hiramatsu (Google) <mhiramat@kernel.org>
Date: 2023-05-16 05:10:38
Also in:
bpf, lkml
On Tue, 16 May 2023 13:31:53 +0900 Masami Hiramatsu (Google) [off-list ref] wrote:
On Sat, 13 May 2023 00:17:57 -0400 Steven Rostedt [off-list ref] wrote:quoted
On Fri, 12 May 2023 07:29:02 -0700 Yonghong Song [off-list ref] wrote:quoted
A fprobe_blacklist might make sense indeed as fprobe and kprobe are quite different... Thanks for working on this.Hmm, I think I see the problem: fprobe_kprobe_handler() { kprobe_busy_begin() { preempt_disable() { preempt_count_add() { <-- trace fprobe_kprobe_handler() { [ wash, rinse, repeat, CRASH!!! ] Either the kprobe_busy_begin() needs to use preempt_disable_notrace() versions, or fprobe_kprobe_handle() needs a ftrace_test_recursion_trylock() call.Oops, I got it. Is preempt_count_add() tracable? If so, kprobe_busy_begin() should be updated.
OK, preempt_count_add() is NOKPROBE_SYMBOL() so kprobe_busy_begin() should be safe. The problem is in fprobe_kprobe_handler() then. Thanks!
Thanks,quoted
-- Steve-- Masami Hiramatsu (Google) [off-list ref]
-- Masami Hiramatsu (Google) [off-list ref]