2 * trace_events_filter - generic event filtering
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
18 * Copyright (C) 2009 Tom Zanussi <tzanussi@gmail.com>
21 #include <linux/debugfs.h>
22 #include <linux/uaccess.h>
23 #include <linux/module.h>
24 #include <linux/ctype.h>
25 #include <linux/mutex.h>
28 #include "trace_output.h"
30 static DEFINE_MUTEX(filter_mutex);
52 static struct filter_op filter_ops[] = {
61 { OP_NONE, "OP_NONE", 0 },
62 { OP_OPEN_PAREN, "(", 0 },
68 FILT_ERR_UNBALANCED_PAREN,
69 FILT_ERR_TOO_MANY_OPERANDS,
70 FILT_ERR_OPERAND_TOO_LONG,
71 FILT_ERR_FIELD_NOT_FOUND,
72 FILT_ERR_ILLEGAL_FIELD_OP,
73 FILT_ERR_ILLEGAL_INTVAL,
74 FILT_ERR_BAD_SUBSYS_FILTER,
75 FILT_ERR_TOO_MANY_PREDS,
76 FILT_ERR_MISSING_FIELD,
77 FILT_ERR_INVALID_FILTER,
80 static char *err_text[] = {
87 "Illegal operation for field type",
88 "Illegal integer value",
89 "Couldn't find or set field in one of a subsystem's events",
90 "Too many terms in predicate expression",
91 "Missing field name and/or value",
92 "Meaningless filter expression",
97 struct list_head list;
103 struct list_head list;
106 struct filter_parse_state {
107 struct filter_op *ops;
108 struct list_head opstack;
109 struct list_head postfix;
120 char string[MAX_FILTER_STR_VAL];
126 DEFINE_COMPARISON_PRED(s64);
127 DEFINE_COMPARISON_PRED(u64);
128 DEFINE_COMPARISON_PRED(s32);
129 DEFINE_COMPARISON_PRED(u32);
130 DEFINE_COMPARISON_PRED(s16);
131 DEFINE_COMPARISON_PRED(u16);
132 DEFINE_COMPARISON_PRED(s8);
133 DEFINE_COMPARISON_PRED(u8);
135 DEFINE_EQUALITY_PRED(64);
136 DEFINE_EQUALITY_PRED(32);
137 DEFINE_EQUALITY_PRED(16);
138 DEFINE_EQUALITY_PRED(8);
140 static int filter_pred_and(struct filter_pred *pred __attribute((unused)),
141 void *event __attribute((unused)),
147 static int filter_pred_or(struct filter_pred *pred __attribute((unused)),
148 void *event __attribute((unused)),
154 /* Filter predicate for fixed sized arrays of characters */
155 static int filter_pred_string(struct filter_pred *pred, void *event,
158 char *addr = (char *)(event + pred->offset);
161 cmp = strncmp(addr, pred->str_val, pred->str_len);
163 match = (!cmp) ^ pred->not;
169 * Filter predicate for dynamic sized arrays of characters.
170 * These are implemented through a list of strings at the end
172 * Also each of these strings have a field in the entry which
173 * contains its offset from the beginning of the entry.
174 * We have then first to get this field, dereference it
175 * and add it to the address of the entry, and at last we have
176 * the address of the string.
178 static int filter_pred_strloc(struct filter_pred *pred, void *event,
181 int str_loc = *(int *)(event + pred->offset);
182 char *addr = (char *)(event + str_loc);
185 cmp = strncmp(addr, pred->str_val, pred->str_len);
187 match = (!cmp) ^ pred->not;
192 static int filter_pred_none(struct filter_pred *pred, void *event,
198 /* return 1 if event matches, 0 otherwise (discard) */
199 int filter_match_preds(struct ftrace_event_call *call, void *rec)
201 struct event_filter *filter = call->filter;
202 int match, top = 0, val1 = 0, val2 = 0;
203 int stack[MAX_FILTER_PRED];
204 struct filter_pred *pred;
207 for (i = 0; i < filter->n_preds; i++) {
208 pred = filter->preds[i];
210 match = pred->fn(pred, rec, val1, val2);
211 stack[top++] = match;
214 if (pred->pop_n > top) {
220 match = pred->fn(pred, rec, val1, val2);
221 stack[top++] = match;
226 EXPORT_SYMBOL_GPL(filter_match_preds);
228 static void parse_error(struct filter_parse_state *ps, int err, int pos)
231 ps->lasterr_pos = pos;
234 static void remove_filter_string(struct event_filter *filter)
236 kfree(filter->filter_string);
237 filter->filter_string = NULL;
240 static int replace_filter_string(struct event_filter *filter,
243 kfree(filter->filter_string);
244 filter->filter_string = kstrdup(filter_string, GFP_KERNEL);
245 if (!filter->filter_string)
251 static int append_filter_string(struct event_filter *filter,
255 char *new_filter_string;
257 BUG_ON(!filter->filter_string);
258 newlen = strlen(filter->filter_string) + strlen(string) + 1;
259 new_filter_string = kmalloc(newlen, GFP_KERNEL);
260 if (!new_filter_string)
263 strcpy(new_filter_string, filter->filter_string);
264 strcat(new_filter_string, string);
265 kfree(filter->filter_string);
266 filter->filter_string = new_filter_string;
271 static void append_filter_err(struct filter_parse_state *ps,
272 struct event_filter *filter)
274 int pos = ps->lasterr_pos;
277 buf = (char *)__get_free_page(GFP_TEMPORARY);
281 append_filter_string(filter, "\n");
282 memset(buf, ' ', PAGE_SIZE);
283 if (pos > PAGE_SIZE - 128)
286 pbuf = &buf[pos] + 1;
288 sprintf(pbuf, "\nparse_error: %s\n", err_text[ps->lasterr]);
289 append_filter_string(filter, buf);
290 free_page((unsigned long) buf);
293 void print_event_filter(struct ftrace_event_call *call, struct trace_seq *s)
295 struct event_filter *filter = call->filter;
297 mutex_lock(&filter_mutex);
298 if (filter->filter_string)
299 trace_seq_printf(s, "%s\n", filter->filter_string);
301 trace_seq_printf(s, "none\n");
302 mutex_unlock(&filter_mutex);
305 void print_subsystem_event_filter(struct event_subsystem *system,
308 struct event_filter *filter = system->filter;
310 mutex_lock(&filter_mutex);
311 if (filter->filter_string)
312 trace_seq_printf(s, "%s\n", filter->filter_string);
314 trace_seq_printf(s, "none\n");
315 mutex_unlock(&filter_mutex);
318 static struct ftrace_event_field *
319 find_event_field(struct ftrace_event_call *call, char *name)
321 struct ftrace_event_field *field;
323 list_for_each_entry(field, &call->fields, link) {
324 if (!strcmp(field->name, name))
331 static void filter_free_pred(struct filter_pred *pred)
336 kfree(pred->field_name);
340 static void filter_clear_pred(struct filter_pred *pred)
342 kfree(pred->field_name);
343 pred->field_name = NULL;
347 static int filter_set_pred(struct filter_pred *dest,
348 struct filter_pred *src,
352 if (src->field_name) {
353 dest->field_name = kstrdup(src->field_name, GFP_KERNEL);
354 if (!dest->field_name)
362 static void filter_disable_preds(struct ftrace_event_call *call)
364 struct event_filter *filter = call->filter;
367 call->filter_active = 0;
370 for (i = 0; i < MAX_FILTER_PRED; i++)
371 filter->preds[i]->fn = filter_pred_none;
374 void destroy_preds(struct ftrace_event_call *call)
376 struct event_filter *filter = call->filter;
379 for (i = 0; i < MAX_FILTER_PRED; i++) {
380 if (filter->preds[i])
381 filter_free_pred(filter->preds[i]);
383 kfree(filter->preds);
388 int init_preds(struct ftrace_event_call *call)
390 struct event_filter *filter;
391 struct filter_pred *pred;
394 filter = call->filter = kzalloc(sizeof(*filter), GFP_KERNEL);
398 call->filter_active = 0;
401 filter->preds = kzalloc(MAX_FILTER_PRED * sizeof(pred), GFP_KERNEL);
405 for (i = 0; i < MAX_FILTER_PRED; i++) {
406 pred = kzalloc(sizeof(*pred), GFP_KERNEL);
409 pred->fn = filter_pred_none;
410 filter->preds[i] = pred;
420 EXPORT_SYMBOL_GPL(init_preds);
422 static void filter_free_subsystem_preds(struct event_subsystem *system)
424 struct event_filter *filter = system->filter;
425 struct ftrace_event_call *call;
428 if (filter->n_preds) {
429 for (i = 0; i < filter->n_preds; i++)
430 filter_free_pred(filter->preds[i]);
431 kfree(filter->preds);
432 filter->preds = NULL;
436 mutex_lock(&event_mutex);
437 list_for_each_entry(call, &ftrace_events, list) {
438 if (!call->define_fields)
441 if (!strcmp(call->system, system->name)) {
442 filter_disable_preds(call);
443 remove_filter_string(call->filter);
446 mutex_unlock(&event_mutex);
449 static int filter_add_pred_fn(struct filter_parse_state *ps,
450 struct ftrace_event_call *call,
451 struct filter_pred *pred,
454 struct event_filter *filter = call->filter;
457 if (filter->n_preds == MAX_FILTER_PRED) {
458 parse_error(ps, FILT_ERR_TOO_MANY_PREDS, 0);
462 idx = filter->n_preds;
463 filter_clear_pred(filter->preds[idx]);
464 err = filter_set_pred(filter->preds[idx], pred, fn);
469 call->filter_active = 1;
475 FILTER_STATIC_STRING = 1,
479 static int is_string_field(const char *type)
481 if (strstr(type, "__data_loc") && strstr(type, "char"))
482 return FILTER_DYN_STRING;
484 if (strchr(type, '[') && strstr(type, "char"))
485 return FILTER_STATIC_STRING;
490 static int is_legal_op(struct ftrace_event_field *field, int op)
492 if (is_string_field(field->type) && (op != OP_EQ && op != OP_NE))
498 static filter_pred_fn_t select_comparison_fn(int op, int field_size,
501 filter_pred_fn_t fn = NULL;
503 switch (field_size) {
505 if (op == OP_EQ || op == OP_NE)
507 else if (field_is_signed)
508 fn = filter_pred_s64;
510 fn = filter_pred_u64;
513 if (op == OP_EQ || op == OP_NE)
515 else if (field_is_signed)
516 fn = filter_pred_s32;
518 fn = filter_pred_u32;
521 if (op == OP_EQ || op == OP_NE)
523 else if (field_is_signed)
524 fn = filter_pred_s16;
526 fn = filter_pred_u16;
529 if (op == OP_EQ || op == OP_NE)
531 else if (field_is_signed)
541 static int filter_add_pred(struct filter_parse_state *ps,
542 struct ftrace_event_call *call,
543 struct filter_pred *pred)
545 struct ftrace_event_field *field;
547 unsigned long long val;
551 pred->fn = filter_pred_none;
553 if (pred->op == OP_AND) {
555 return filter_add_pred_fn(ps, call, pred, filter_pred_and);
556 } else if (pred->op == OP_OR) {
558 return filter_add_pred_fn(ps, call, pred, filter_pred_or);
561 field = find_event_field(call, pred->field_name);
563 parse_error(ps, FILT_ERR_FIELD_NOT_FOUND, 0);
567 pred->offset = field->offset;
569 if (!is_legal_op(field, pred->op)) {
570 parse_error(ps, FILT_ERR_ILLEGAL_FIELD_OP, 0);
574 string_type = is_string_field(field->type);
576 if (string_type == FILTER_STATIC_STRING)
577 fn = filter_pred_string;
579 fn = filter_pred_strloc;
580 pred->str_len = field->size;
581 if (pred->op == OP_NE)
583 return filter_add_pred_fn(ps, call, pred, fn);
585 if (field->is_signed)
586 ret = strict_strtoll(pred->str_val, 0, &val);
588 ret = strict_strtoull(pred->str_val, 0, &val);
590 parse_error(ps, FILT_ERR_ILLEGAL_INTVAL, 0);
596 fn = select_comparison_fn(pred->op, field->size, field->is_signed);
598 parse_error(ps, FILT_ERR_INVALID_OP, 0);
602 if (pred->op == OP_NE)
605 return filter_add_pred_fn(ps, call, pred, fn);
608 static int filter_add_subsystem_pred(struct filter_parse_state *ps,
609 struct event_subsystem *system,
610 struct filter_pred *pred,
613 struct event_filter *filter = system->filter;
614 struct ftrace_event_call *call;
617 if (!filter->preds) {
618 filter->preds = kzalloc(MAX_FILTER_PRED * sizeof(pred),
625 if (filter->n_preds == MAX_FILTER_PRED) {
626 parse_error(ps, FILT_ERR_TOO_MANY_PREDS, 0);
630 filter->preds[filter->n_preds] = pred;
633 mutex_lock(&event_mutex);
634 list_for_each_entry(call, &ftrace_events, list) {
636 if (!call->define_fields)
639 if (strcmp(call->system, system->name))
642 err = filter_add_pred(ps, call, pred);
644 mutex_unlock(&event_mutex);
645 filter_free_subsystem_preds(system);
646 parse_error(ps, FILT_ERR_BAD_SUBSYS_FILTER, 0);
649 replace_filter_string(call->filter, filter_string);
651 mutex_unlock(&event_mutex);
656 static void parse_init(struct filter_parse_state *ps,
657 struct filter_op *ops,
660 memset(ps, '\0', sizeof(*ps));
662 ps->infix.string = infix_string;
663 ps->infix.cnt = strlen(infix_string);
666 INIT_LIST_HEAD(&ps->opstack);
667 INIT_LIST_HEAD(&ps->postfix);
670 static char infix_next(struct filter_parse_state *ps)
674 return ps->infix.string[ps->infix.tail++];
677 static char infix_peek(struct filter_parse_state *ps)
679 if (ps->infix.tail == strlen(ps->infix.string))
682 return ps->infix.string[ps->infix.tail];
685 static void infix_advance(struct filter_parse_state *ps)
691 static inline int is_precedence_lower(struct filter_parse_state *ps,
694 return ps->ops[a].precedence < ps->ops[b].precedence;
697 static inline int is_op_char(struct filter_parse_state *ps, char c)
701 for (i = 0; strcmp(ps->ops[i].string, "OP_NONE"); i++) {
702 if (ps->ops[i].string[0] == c)
709 static int infix_get_op(struct filter_parse_state *ps, char firstc)
711 char nextc = infix_peek(ps);
719 for (i = 0; strcmp(ps->ops[i].string, "OP_NONE"); i++) {
720 if (!strcmp(opstr, ps->ops[i].string)) {
722 return ps->ops[i].id;
728 for (i = 0; strcmp(ps->ops[i].string, "OP_NONE"); i++) {
729 if (!strcmp(opstr, ps->ops[i].string))
730 return ps->ops[i].id;
736 static inline void clear_operand_string(struct filter_parse_state *ps)
738 memset(ps->operand.string, '\0', MAX_FILTER_STR_VAL);
739 ps->operand.tail = 0;
742 static inline int append_operand_char(struct filter_parse_state *ps, char c)
744 if (ps->operand.tail == MAX_FILTER_STR_VAL - 1)
747 ps->operand.string[ps->operand.tail++] = c;
752 static int filter_opstack_push(struct filter_parse_state *ps, int op)
754 struct opstack_op *opstack_op;
756 opstack_op = kmalloc(sizeof(*opstack_op), GFP_KERNEL);
761 list_add(&opstack_op->list, &ps->opstack);
766 static int filter_opstack_empty(struct filter_parse_state *ps)
768 return list_empty(&ps->opstack);
771 static int filter_opstack_top(struct filter_parse_state *ps)
773 struct opstack_op *opstack_op;
775 if (filter_opstack_empty(ps))
778 opstack_op = list_first_entry(&ps->opstack, struct opstack_op, list);
780 return opstack_op->op;
783 static int filter_opstack_pop(struct filter_parse_state *ps)
785 struct opstack_op *opstack_op;
788 if (filter_opstack_empty(ps))
791 opstack_op = list_first_entry(&ps->opstack, struct opstack_op, list);
793 list_del(&opstack_op->list);
800 static void filter_opstack_clear(struct filter_parse_state *ps)
802 while (!filter_opstack_empty(ps))
803 filter_opstack_pop(ps);
806 static char *curr_operand(struct filter_parse_state *ps)
808 return ps->operand.string;
811 static int postfix_append_operand(struct filter_parse_state *ps, char *operand)
813 struct postfix_elt *elt;
815 elt = kmalloc(sizeof(*elt), GFP_KERNEL);
820 elt->operand = kstrdup(operand, GFP_KERNEL);
826 list_add_tail(&elt->list, &ps->postfix);
831 static int postfix_append_op(struct filter_parse_state *ps, int op)
833 struct postfix_elt *elt;
835 elt = kmalloc(sizeof(*elt), GFP_KERNEL);
842 list_add_tail(&elt->list, &ps->postfix);
847 static void postfix_clear(struct filter_parse_state *ps)
849 struct postfix_elt *elt;
851 while (!list_empty(&ps->postfix)) {
852 elt = list_first_entry(&ps->postfix, struct postfix_elt, list);
854 list_del(&elt->list);
858 static int filter_parse(struct filter_parse_state *ps)
864 while ((ch = infix_next(ps))) {
876 if (is_op_char(ps, ch)) {
877 op = infix_get_op(ps, ch);
879 parse_error(ps, FILT_ERR_INVALID_OP, 0);
883 if (strlen(curr_operand(ps))) {
884 postfix_append_operand(ps, curr_operand(ps));
885 clear_operand_string(ps);
888 while (!filter_opstack_empty(ps)) {
889 top_op = filter_opstack_top(ps);
890 if (!is_precedence_lower(ps, top_op, op)) {
891 top_op = filter_opstack_pop(ps);
892 postfix_append_op(ps, top_op);
898 filter_opstack_push(ps, op);
903 filter_opstack_push(ps, OP_OPEN_PAREN);
908 if (strlen(curr_operand(ps))) {
909 postfix_append_operand(ps, curr_operand(ps));
910 clear_operand_string(ps);
913 top_op = filter_opstack_pop(ps);
914 while (top_op != OP_NONE) {
915 if (top_op == OP_OPEN_PAREN)
917 postfix_append_op(ps, top_op);
918 top_op = filter_opstack_pop(ps);
920 if (top_op == OP_NONE) {
921 parse_error(ps, FILT_ERR_UNBALANCED_PAREN, 0);
927 if (append_operand_char(ps, ch)) {
928 parse_error(ps, FILT_ERR_OPERAND_TOO_LONG, 0);
933 if (strlen(curr_operand(ps)))
934 postfix_append_operand(ps, curr_operand(ps));
936 while (!filter_opstack_empty(ps)) {
937 top_op = filter_opstack_pop(ps);
938 if (top_op == OP_NONE)
940 if (top_op == OP_OPEN_PAREN) {
941 parse_error(ps, FILT_ERR_UNBALANCED_PAREN, 0);
944 postfix_append_op(ps, top_op);
950 static struct filter_pred *create_pred(int op, char *operand1, char *operand2)
952 struct filter_pred *pred;
954 pred = kzalloc(sizeof(*pred), GFP_KERNEL);
958 pred->field_name = kstrdup(operand1, GFP_KERNEL);
959 if (!pred->field_name) {
964 strcpy(pred->str_val, operand2);
965 pred->str_len = strlen(operand2);
972 static struct filter_pred *create_logical_pred(int op)
974 struct filter_pred *pred;
976 pred = kzalloc(sizeof(*pred), GFP_KERNEL);
985 static int check_preds(struct filter_parse_state *ps)
987 int n_normal_preds = 0, n_logical_preds = 0;
988 struct postfix_elt *elt;
990 list_for_each_entry(elt, &ps->postfix, list) {
991 if (elt->op == OP_NONE)
994 if (elt->op == OP_AND || elt->op == OP_OR) {
1001 if (!n_normal_preds || n_logical_preds >= n_normal_preds) {
1002 parse_error(ps, FILT_ERR_INVALID_FILTER, 0);
1009 static int replace_preds(struct event_subsystem *system,
1010 struct ftrace_event_call *call,
1011 struct filter_parse_state *ps,
1012 char *filter_string)
1014 char *operand1 = NULL, *operand2 = NULL;
1015 struct filter_pred *pred;
1016 struct postfix_elt *elt;
1019 err = check_preds(ps);
1023 list_for_each_entry(elt, &ps->postfix, list) {
1024 if (elt->op == OP_NONE) {
1026 operand1 = elt->operand;
1028 operand2 = elt->operand;
1030 parse_error(ps, FILT_ERR_TOO_MANY_OPERANDS, 0);
1036 if (elt->op == OP_AND || elt->op == OP_OR) {
1037 pred = create_logical_pred(elt->op);
1039 err = filter_add_pred(ps, call, pred);
1040 filter_free_pred(pred);
1042 err = filter_add_subsystem_pred(ps, system,
1043 pred, filter_string);
1047 operand1 = operand2 = NULL;
1051 if (!operand1 || !operand2) {
1052 parse_error(ps, FILT_ERR_MISSING_FIELD, 0);
1056 pred = create_pred(elt->op, operand1, operand2);
1058 err = filter_add_pred(ps, call, pred);
1059 filter_free_pred(pred);
1061 err = filter_add_subsystem_pred(ps, system, pred,
1066 operand1 = operand2 = NULL;
1072 int apply_event_filter(struct ftrace_event_call *call, char *filter_string)
1076 struct filter_parse_state *ps;
1078 mutex_lock(&filter_mutex);
1080 if (!strcmp(strstrip(filter_string), "0")) {
1081 filter_disable_preds(call);
1082 remove_filter_string(call->filter);
1083 mutex_unlock(&filter_mutex);
1088 ps = kzalloc(sizeof(*ps), GFP_KERNEL);
1092 filter_disable_preds(call);
1093 replace_filter_string(call->filter, filter_string);
1095 parse_init(ps, filter_ops, filter_string);
1096 err = filter_parse(ps);
1098 append_filter_err(ps, call->filter);
1102 err = replace_preds(NULL, call, ps, filter_string);
1104 append_filter_err(ps, call->filter);
1107 filter_opstack_clear(ps);
1111 mutex_unlock(&filter_mutex);
1116 int apply_subsystem_event_filter(struct event_subsystem *system,
1117 char *filter_string)
1121 struct filter_parse_state *ps;
1123 mutex_lock(&filter_mutex);
1125 if (!strcmp(strstrip(filter_string), "0")) {
1126 filter_free_subsystem_preds(system);
1127 remove_filter_string(system->filter);
1128 mutex_unlock(&filter_mutex);
1133 ps = kzalloc(sizeof(*ps), GFP_KERNEL);
1137 filter_free_subsystem_preds(system);
1138 replace_filter_string(system->filter, filter_string);
1140 parse_init(ps, filter_ops, filter_string);
1141 err = filter_parse(ps);
1143 append_filter_err(ps, system->filter);
1147 err = replace_preds(system, NULL, ps, filter_string);
1149 append_filter_err(ps, system->filter);
1152 filter_opstack_clear(ps);
1156 mutex_unlock(&filter_mutex);