9 #include <symbol/kallsyms.h>
12 #ifndef HAVE_ELF_GETPHDRNUM_SUPPORT
13 static int elf_getphdrnum(Elf *elf, size_t *dst)
18 ehdr = gelf_getehdr(elf, &gehdr);
28 #ifndef NT_GNU_BUILD_ID
29 #define NT_GNU_BUILD_ID 3
33 * elf_symtab__for_each_symbol - iterate thru all the symbols
35 * @syms: struct elf_symtab instance to iterate
37 * @sym: GElf_Sym iterator
39 #define elf_symtab__for_each_symbol(syms, nr_syms, idx, sym) \
40 for (idx = 0, gelf_getsym(syms, idx, &sym);\
42 idx++, gelf_getsym(syms, idx, &sym))
44 static inline uint8_t elf_sym__type(const GElf_Sym *sym)
46 return GELF_ST_TYPE(sym->st_info);
49 static inline int elf_sym__is_function(const GElf_Sym *sym)
51 return elf_sym__type(sym) == STT_FUNC &&
53 sym->st_shndx != SHN_UNDEF;
56 static inline bool elf_sym__is_object(const GElf_Sym *sym)
58 return elf_sym__type(sym) == STT_OBJECT &&
60 sym->st_shndx != SHN_UNDEF;
63 static inline int elf_sym__is_label(const GElf_Sym *sym)
65 return elf_sym__type(sym) == STT_NOTYPE &&
67 sym->st_shndx != SHN_UNDEF &&
68 sym->st_shndx != SHN_ABS;
71 static bool elf_sym__is_a(GElf_Sym *sym, enum map_type type)
75 return elf_sym__is_function(sym);
77 return elf_sym__is_object(sym);
83 static inline const char *elf_sym__name(const GElf_Sym *sym,
84 const Elf_Data *symstrs)
86 return symstrs->d_buf + sym->st_name;
89 static inline const char *elf_sec__name(const GElf_Shdr *shdr,
90 const Elf_Data *secstrs)
92 return secstrs->d_buf + shdr->sh_name;
95 static inline int elf_sec__is_text(const GElf_Shdr *shdr,
96 const Elf_Data *secstrs)
98 return strstr(elf_sec__name(shdr, secstrs), "text") != NULL;
101 static inline bool elf_sec__is_data(const GElf_Shdr *shdr,
102 const Elf_Data *secstrs)
104 return strstr(elf_sec__name(shdr, secstrs), "data") != NULL;
107 static bool elf_sec__is_a(GElf_Shdr *shdr, Elf_Data *secstrs,
112 return elf_sec__is_text(shdr, secstrs);
114 return elf_sec__is_data(shdr, secstrs);
120 static size_t elf_addr_to_index(Elf *elf, GElf_Addr addr)
126 while ((sec = elf_nextscn(elf, sec)) != NULL) {
127 gelf_getshdr(sec, &shdr);
129 if ((addr >= shdr.sh_addr) &&
130 (addr < (shdr.sh_addr + shdr.sh_size)))
139 Elf_Scn *elf_section_by_name(Elf *elf, GElf_Ehdr *ep,
140 GElf_Shdr *shp, const char *name, size_t *idx)
145 /* Elf is corrupted/truncated, avoid calling elf_strptr. */
146 if (!elf_rawdata(elf_getscn(elf, ep->e_shstrndx), NULL))
149 while ((sec = elf_nextscn(elf, sec)) != NULL) {
152 gelf_getshdr(sec, shp);
153 str = elf_strptr(elf, ep->e_shstrndx, shp->sh_name);
154 if (str && !strcmp(name, str)) {
165 #define elf_section__for_each_rel(reldata, pos, pos_mem, idx, nr_entries) \
166 for (idx = 0, pos = gelf_getrel(reldata, 0, &pos_mem); \
168 ++idx, pos = gelf_getrel(reldata, idx, &pos_mem))
170 #define elf_section__for_each_rela(reldata, pos, pos_mem, idx, nr_entries) \
171 for (idx = 0, pos = gelf_getrela(reldata, 0, &pos_mem); \
173 ++idx, pos = gelf_getrela(reldata, idx, &pos_mem))
176 * We need to check if we have a .dynsym, so that we can handle the
177 * .plt, synthesizing its symbols, that aren't on the symtabs (be it
178 * .dynsym or .symtab).
179 * And always look at the original dso, not at debuginfo packages, that
180 * have the PLT data stripped out (shdr_rel_plt.sh_type == SHT_NOBITS).
182 int dso__synthesize_plt_symbols(struct dso *dso, struct symsrc *ss, struct map *map,
183 symbol_filter_t filter)
185 uint32_t nr_rel_entries, idx;
190 GElf_Shdr shdr_rel_plt, shdr_dynsym;
191 Elf_Data *reldata, *syms, *symstrs;
192 Elf_Scn *scn_plt_rel, *scn_symstrs, *scn_dynsym;
195 char sympltname[1024];
197 int nr = 0, symidx, err = 0;
205 scn_dynsym = ss->dynsym;
206 shdr_dynsym = ss->dynshdr;
207 dynsym_idx = ss->dynsym_idx;
209 if (scn_dynsym == NULL)
212 scn_plt_rel = elf_section_by_name(elf, &ehdr, &shdr_rel_plt,
214 if (scn_plt_rel == NULL) {
215 scn_plt_rel = elf_section_by_name(elf, &ehdr, &shdr_rel_plt,
217 if (scn_plt_rel == NULL)
223 if (shdr_rel_plt.sh_link != dynsym_idx)
226 if (elf_section_by_name(elf, &ehdr, &shdr_plt, ".plt", NULL) == NULL)
230 * Fetch the relocation section to find the idxes to the GOT
231 * and the symbols in the .dynsym they refer to.
233 reldata = elf_getdata(scn_plt_rel, NULL);
237 syms = elf_getdata(scn_dynsym, NULL);
241 scn_symstrs = elf_getscn(elf, shdr_dynsym.sh_link);
242 if (scn_symstrs == NULL)
245 symstrs = elf_getdata(scn_symstrs, NULL);
249 if (symstrs->d_size == 0)
252 nr_rel_entries = shdr_rel_plt.sh_size / shdr_rel_plt.sh_entsize;
253 plt_offset = shdr_plt.sh_offset;
255 if (shdr_rel_plt.sh_type == SHT_RELA) {
256 GElf_Rela pos_mem, *pos;
258 elf_section__for_each_rela(reldata, pos, pos_mem, idx,
260 symidx = GELF_R_SYM(pos->r_info);
261 plt_offset += shdr_plt.sh_entsize;
262 gelf_getsym(syms, symidx, &sym);
263 snprintf(sympltname, sizeof(sympltname),
264 "%s@plt", elf_sym__name(&sym, symstrs));
266 f = symbol__new(plt_offset, shdr_plt.sh_entsize,
267 STB_GLOBAL, sympltname);
271 if (filter && filter(map, f))
274 symbols__insert(&dso->symbols[map->type], f);
278 } else if (shdr_rel_plt.sh_type == SHT_REL) {
279 GElf_Rel pos_mem, *pos;
280 elf_section__for_each_rel(reldata, pos, pos_mem, idx,
282 symidx = GELF_R_SYM(pos->r_info);
283 plt_offset += shdr_plt.sh_entsize;
284 gelf_getsym(syms, symidx, &sym);
285 snprintf(sympltname, sizeof(sympltname),
286 "%s@plt", elf_sym__name(&sym, symstrs));
288 f = symbol__new(plt_offset, shdr_plt.sh_entsize,
289 STB_GLOBAL, sympltname);
293 if (filter && filter(map, f))
296 symbols__insert(&dso->symbols[map->type], f);
306 pr_debug("%s: problems reading %s PLT info.\n",
307 __func__, dso->long_name);
312 * Align offset to 4 bytes as needed for note name and descriptor data.
314 #define NOTE_ALIGN(n) (((n) + 3) & -4U)
316 static int elf_read_build_id(Elf *elf, void *bf, size_t size)
326 if (size < BUILD_ID_SIZE)
333 if (gelf_getehdr(elf, &ehdr) == NULL) {
334 pr_err("%s: cannot get elf header.\n", __func__);
339 * Check following sections for notes:
340 * '.note.gnu.build-id'
342 * '.note' (VDSO specific)
345 sec = elf_section_by_name(elf, &ehdr, &shdr,
346 ".note.gnu.build-id", NULL);
350 sec = elf_section_by_name(elf, &ehdr, &shdr,
355 sec = elf_section_by_name(elf, &ehdr, &shdr,
364 data = elf_getdata(sec, NULL);
369 while (ptr < (data->d_buf + data->d_size)) {
370 GElf_Nhdr *nhdr = ptr;
371 size_t namesz = NOTE_ALIGN(nhdr->n_namesz),
372 descsz = NOTE_ALIGN(nhdr->n_descsz);
375 ptr += sizeof(*nhdr);
378 if (nhdr->n_type == NT_GNU_BUILD_ID &&
379 nhdr->n_namesz == sizeof("GNU")) {
380 if (memcmp(name, "GNU", sizeof("GNU")) == 0) {
381 size_t sz = min(size, descsz);
383 memset(bf + sz, 0, size - sz);
395 int filename__read_build_id(const char *filename, void *bf, size_t size)
400 if (size < BUILD_ID_SIZE)
403 fd = open(filename, O_RDONLY);
407 elf = elf_begin(fd, PERF_ELF_C_READ_MMAP, NULL);
409 pr_debug2("%s: cannot read %s ELF file.\n", __func__, filename);
413 err = elf_read_build_id(elf, bf, size);
422 int sysfs__read_build_id(const char *filename, void *build_id, size_t size)
426 if (size < BUILD_ID_SIZE)
429 fd = open(filename, O_RDONLY);
436 size_t namesz, descsz;
438 if (read(fd, &nhdr, sizeof(nhdr)) != sizeof(nhdr))
441 namesz = NOTE_ALIGN(nhdr.n_namesz);
442 descsz = NOTE_ALIGN(nhdr.n_descsz);
443 if (nhdr.n_type == NT_GNU_BUILD_ID &&
444 nhdr.n_namesz == sizeof("GNU")) {
445 if (read(fd, bf, namesz) != (ssize_t)namesz)
447 if (memcmp(bf, "GNU", sizeof("GNU")) == 0) {
448 size_t sz = min(descsz, size);
449 if (read(fd, build_id, sz) == (ssize_t)sz) {
450 memset(build_id + sz, 0, size - sz);
454 } else if (read(fd, bf, descsz) != (ssize_t)descsz)
457 int n = namesz + descsz;
458 if (read(fd, bf, n) != n)
467 int filename__read_debuglink(const char *filename, char *debuglink,
478 fd = open(filename, O_RDONLY);
482 elf = elf_begin(fd, PERF_ELF_C_READ_MMAP, NULL);
484 pr_debug2("%s: cannot read %s ELF file.\n", __func__, filename);
492 if (gelf_getehdr(elf, &ehdr) == NULL) {
493 pr_err("%s: cannot get elf header.\n", __func__);
497 sec = elf_section_by_name(elf, &ehdr, &shdr,
498 ".gnu_debuglink", NULL);
502 data = elf_getdata(sec, NULL);
506 /* the start of this section is a zero-terminated string */
507 strncpy(debuglink, data->d_buf, size);
519 static int dso__swap_init(struct dso *dso, unsigned char eidata)
521 static unsigned int const endian = 1;
523 dso->needs_swap = DSO_SWAP__NO;
527 /* We are big endian, DSO is little endian. */
528 if (*(unsigned char const *)&endian != 1)
529 dso->needs_swap = DSO_SWAP__YES;
533 /* We are little endian, DSO is big endian. */
534 if (*(unsigned char const *)&endian != 0)
535 dso->needs_swap = DSO_SWAP__YES;
539 pr_err("unrecognized DSO data encoding %d\n", eidata);
546 bool symsrc__possibly_runtime(struct symsrc *ss)
548 return ss->dynsym || ss->opdsec;
551 bool symsrc__has_symtab(struct symsrc *ss)
553 return ss->symtab != NULL;
556 void symsrc__destroy(struct symsrc *ss)
563 int symsrc__init(struct symsrc *ss, struct dso *dso, const char *name,
564 enum dso_binary_type type)
571 fd = open(name, O_RDONLY);
575 elf = elf_begin(fd, PERF_ELF_C_READ_MMAP, NULL);
577 pr_debug("%s: cannot read %s ELF file.\n", __func__, name);
581 if (gelf_getehdr(elf, &ehdr) == NULL) {
582 pr_debug("%s: cannot get elf header.\n", __func__);
586 if (dso__swap_init(dso, ehdr.e_ident[EI_DATA]))
589 /* Always reject images with a mismatched build-id: */
590 if (dso->has_build_id) {
591 u8 build_id[BUILD_ID_SIZE];
593 if (elf_read_build_id(elf, build_id, BUILD_ID_SIZE) < 0)
596 if (!dso__build_id_equal(dso, build_id))
600 ss->symtab = elf_section_by_name(elf, &ehdr, &ss->symshdr, ".symtab",
602 if (ss->symshdr.sh_type != SHT_SYMTAB)
606 ss->dynsym = elf_section_by_name(elf, &ehdr, &ss->dynshdr, ".dynsym",
608 if (ss->dynshdr.sh_type != SHT_DYNSYM)
612 ss->opdsec = elf_section_by_name(elf, &ehdr, &ss->opdshdr, ".opd",
614 if (ss->opdshdr.sh_type != SHT_PROGBITS)
617 if (dso->kernel == DSO_TYPE_USER) {
619 ss->adjust_symbols = (ehdr.e_type == ET_EXEC ||
620 ehdr.e_type == ET_REL ||
621 elf_section_by_name(elf, &ehdr, &shdr,
625 ss->adjust_symbols = ehdr.e_type == ET_EXEC ||
626 ehdr.e_type == ET_REL;
629 ss->name = strdup(name);
648 * ref_reloc_sym_not_found - has kernel relocation symbol been found.
649 * @kmap: kernel maps and relocation reference symbol
651 * This function returns %true if we are dealing with the kernel maps and the
652 * relocation reference symbol has not yet been found. Otherwise %false is
655 static bool ref_reloc_sym_not_found(struct kmap *kmap)
657 return kmap && kmap->ref_reloc_sym && kmap->ref_reloc_sym->name &&
658 !kmap->ref_reloc_sym->unrelocated_addr;
662 * ref_reloc - kernel relocation offset.
663 * @kmap: kernel maps and relocation reference symbol
665 * This function returns the offset of kernel addresses as determined by using
666 * the relocation reference symbol i.e. if the kernel has not been relocated
667 * then the return value is zero.
669 static u64 ref_reloc(struct kmap *kmap)
671 if (kmap && kmap->ref_reloc_sym &&
672 kmap->ref_reloc_sym->unrelocated_addr)
673 return kmap->ref_reloc_sym->addr -
674 kmap->ref_reloc_sym->unrelocated_addr;
678 int dso__load_sym(struct dso *dso, struct map *map,
679 struct symsrc *syms_ss, struct symsrc *runtime_ss,
680 symbol_filter_t filter, int kmodule)
682 struct kmap *kmap = dso->kernel ? map__kmap(map) : NULL;
683 struct map *curr_map = map;
684 struct dso *curr_dso = dso;
685 Elf_Data *symstrs, *secstrs;
691 Elf_Data *syms, *opddata = NULL;
693 Elf_Scn *sec, *sec_strndx;
696 bool remap_kernel = false, adjust_kernel_syms = false;
698 dso->symtab_type = syms_ss->type;
699 dso->rel = syms_ss->ehdr.e_type == ET_REL;
702 * Modules may already have symbols from kallsyms, but those symbols
703 * have the wrong values for the dso maps, so remove them.
705 if (kmodule && syms_ss->symtab)
706 symbols__delete(&dso->symbols[map->type]);
708 if (!syms_ss->symtab) {
709 syms_ss->symtab = syms_ss->dynsym;
710 syms_ss->symshdr = syms_ss->dynshdr;
714 ehdr = syms_ss->ehdr;
715 sec = syms_ss->symtab;
716 shdr = syms_ss->symshdr;
718 if (runtime_ss->opdsec)
719 opddata = elf_rawdata(runtime_ss->opdsec, NULL);
721 syms = elf_getdata(sec, NULL);
725 sec = elf_getscn(elf, shdr.sh_link);
729 symstrs = elf_getdata(sec, NULL);
733 sec_strndx = elf_getscn(elf, ehdr.e_shstrndx);
734 if (sec_strndx == NULL)
737 secstrs = elf_getdata(sec_strndx, NULL);
741 nr_syms = shdr.sh_size / shdr.sh_entsize;
743 memset(&sym, 0, sizeof(sym));
746 * The kernel relocation symbol is needed in advance in order to adjust
747 * kernel maps correctly.
749 if (ref_reloc_sym_not_found(kmap)) {
750 elf_symtab__for_each_symbol(syms, nr_syms, idx, sym) {
751 const char *elf_name = elf_sym__name(&sym, symstrs);
753 if (strcmp(elf_name, kmap->ref_reloc_sym->name))
755 kmap->ref_reloc_sym->unrelocated_addr = sym.st_value;
756 map->reloc = kmap->ref_reloc_sym->addr -
757 kmap->ref_reloc_sym->unrelocated_addr;
762 dso->adjust_symbols = runtime_ss->adjust_symbols || ref_reloc(kmap);
764 * Initial kernel and module mappings do not map to the dso. For
765 * function mappings, flag the fixups.
767 if (map->type == MAP__FUNCTION && (dso->kernel || kmodule)) {
769 adjust_kernel_syms = dso->adjust_symbols;
771 elf_symtab__for_each_symbol(syms, nr_syms, idx, sym) {
773 const char *elf_name = elf_sym__name(&sym, symstrs);
774 char *demangled = NULL;
775 int is_label = elf_sym__is_label(&sym);
776 const char *section_name;
777 bool used_opd = false;
779 if (!is_label && !elf_sym__is_a(&sym, map->type))
782 /* Reject ARM ELF "mapping symbols": these aren't unique and
783 * don't identify functions, so will confuse the profile
785 if (ehdr.e_machine == EM_ARM) {
786 if (!strcmp(elf_name, "$a") ||
787 !strcmp(elf_name, "$d") ||
788 !strcmp(elf_name, "$t"))
792 if (runtime_ss->opdsec && sym.st_shndx == runtime_ss->opdidx) {
793 u32 offset = sym.st_value - syms_ss->opdshdr.sh_addr;
794 u64 *opd = opddata->d_buf + offset;
795 sym.st_value = DSO__SWAP(dso, u64, *opd);
796 sym.st_shndx = elf_addr_to_index(runtime_ss->elf,
801 * When loading symbols in a data mapping, ABS symbols (which
802 * has a value of SHN_ABS in its st_shndx) failed at
803 * elf_getscn(). And it marks the loading as a failure so
804 * already loaded symbols cannot be fixed up.
806 * I'm not sure what should be done. Just ignore them for now.
809 if (sym.st_shndx == SHN_ABS)
812 sec = elf_getscn(runtime_ss->elf, sym.st_shndx);
816 gelf_getshdr(sec, &shdr);
818 if (is_label && !elf_sec__is_a(&shdr, secstrs, map->type))
821 section_name = elf_sec__name(&shdr, secstrs);
823 /* On ARM, symbols for thumb functions have 1 added to
824 * the symbol address as a flag - remove it */
825 if ((ehdr.e_machine == EM_ARM) &&
826 (map->type == MAP__FUNCTION) &&
830 if (dso->kernel || kmodule) {
831 char dso_name[PATH_MAX];
833 /* Adjust symbol to map to file offset */
834 if (adjust_kernel_syms)
835 sym.st_value -= shdr.sh_addr - shdr.sh_offset;
837 if (strcmp(section_name,
838 (curr_dso->short_name +
839 dso->short_name_len)) == 0)
842 if (strcmp(section_name, ".text") == 0) {
844 * The initial kernel mapping is based on
845 * kallsyms and identity maps. Overwrite it to
846 * map to the kernel dso.
848 if (remap_kernel && dso->kernel) {
849 remap_kernel = false;
850 map->start = shdr.sh_addr +
852 map->end = map->start + shdr.sh_size;
853 map->pgoff = shdr.sh_offset;
854 map->map_ip = map__map_ip;
855 map->unmap_ip = map__unmap_ip;
856 /* Ensure maps are correctly ordered */
857 map_groups__remove(kmap->kmaps, map);
858 map_groups__insert(kmap->kmaps, map);
862 * The initial module mapping is based on
863 * /proc/modules mapped to offset zero.
864 * Overwrite it to map to the module dso.
866 if (remap_kernel && kmodule) {
867 remap_kernel = false;
868 map->pgoff = shdr.sh_offset;
879 snprintf(dso_name, sizeof(dso_name),
880 "%s%s", dso->short_name, section_name);
882 curr_map = map_groups__find_by_name(kmap->kmaps, map->type, dso_name);
883 if (curr_map == NULL) {
884 u64 start = sym.st_value;
887 start += map->start + shdr.sh_offset;
889 curr_dso = dso__new(dso_name);
890 if (curr_dso == NULL)
892 curr_dso->kernel = dso->kernel;
893 curr_dso->long_name = dso->long_name;
894 curr_dso->long_name_len = dso->long_name_len;
895 curr_map = map__new2(start, curr_dso,
897 if (curr_map == NULL) {
898 dso__delete(curr_dso);
901 if (adjust_kernel_syms) {
902 curr_map->start = shdr.sh_addr +
904 curr_map->end = curr_map->start +
906 curr_map->pgoff = shdr.sh_offset;
908 curr_map->map_ip = identity__map_ip;
909 curr_map->unmap_ip = identity__map_ip;
911 curr_dso->symtab_type = dso->symtab_type;
912 map_groups__insert(kmap->kmaps, curr_map);
913 dsos__add(&dso->node, curr_dso);
914 dso__set_loaded(curr_dso, map->type);
916 curr_dso = curr_map->dso;
921 if ((used_opd && runtime_ss->adjust_symbols)
922 || (!used_opd && syms_ss->adjust_symbols)) {
923 pr_debug4("%s: adjusting symbol: st_value: %#" PRIx64 " "
924 "sh_addr: %#" PRIx64 " sh_offset: %#" PRIx64 "\n", __func__,
925 (u64)sym.st_value, (u64)shdr.sh_addr,
926 (u64)shdr.sh_offset);
927 sym.st_value -= shdr.sh_addr - shdr.sh_offset;
931 * We need to figure out if the object was created from C++ sources
932 * DWARF DW_compile_unit has this, but we don't always have access
935 if (symbol_conf.demangle) {
936 demangled = bfd_demangle(NULL, elf_name,
937 DMGL_PARAMS | DMGL_ANSI);
938 if (demangled != NULL)
939 elf_name = demangled;
941 f = symbol__new(sym.st_value, sym.st_size,
942 GELF_ST_BIND(sym.st_info), elf_name);
947 if (filter && filter(curr_map, f))
950 symbols__insert(&curr_dso->symbols[curr_map->type], f);
956 * For misannotated, zeroed, ASM function sizes.
959 symbols__fixup_duplicate(&dso->symbols[map->type]);
960 symbols__fixup_end(&dso->symbols[map->type]);
963 * We need to fixup this here too because we create new
964 * maps here, for things like vsyscall sections.
966 __map_groups__fixup_end(kmap->kmaps, map->type);
974 static int elf_read_maps(Elf *elf, bool exe, mapfn_t mapfn, void *data)
981 if (elf_getphdrnum(elf, &phdrnum))
984 for (i = 0; i < phdrnum; i++) {
985 if (gelf_getphdr(elf, i, &phdr) == NULL)
987 if (phdr.p_type != PT_LOAD)
990 if (!(phdr.p_flags & PF_X))
993 if (!(phdr.p_flags & PF_R))
996 sz = min(phdr.p_memsz, phdr.p_filesz);
999 err = mapfn(phdr.p_vaddr, sz, phdr.p_offset, data);
1006 int file__read_maps(int fd, bool exe, mapfn_t mapfn, void *data,
1012 elf = elf_begin(fd, PERF_ELF_C_READ_MMAP, NULL);
1017 *is_64_bit = (gelf_getclass(elf) == ELFCLASS64);
1019 err = elf_read_maps(elf, exe, mapfn, data);
1025 static int copy_bytes(int from, off_t from_offs, int to, off_t to_offs, u64 len)
1030 char *buf = malloc(page_size);
1035 if (lseek(to, to_offs, SEEK_SET) != to_offs)
1038 if (lseek(from, from_offs, SEEK_SET) != from_offs)
1045 /* Use read because mmap won't work on proc files */
1046 r = read(from, buf, n);
1052 r = write(to, buf, n);
1073 static int kcore__open(struct kcore *kcore, const char *filename)
1077 kcore->fd = open(filename, O_RDONLY);
1078 if (kcore->fd == -1)
1081 kcore->elf = elf_begin(kcore->fd, ELF_C_READ, NULL);
1085 kcore->elfclass = gelf_getclass(kcore->elf);
1086 if (kcore->elfclass == ELFCLASSNONE)
1089 ehdr = gelf_getehdr(kcore->elf, &kcore->ehdr);
1096 elf_end(kcore->elf);
1102 static int kcore__init(struct kcore *kcore, char *filename, int elfclass,
1107 kcore->elfclass = elfclass;
1110 kcore->fd = mkstemp(filename);
1112 kcore->fd = open(filename, O_WRONLY | O_CREAT | O_EXCL, 0400);
1113 if (kcore->fd == -1)
1116 kcore->elf = elf_begin(kcore->fd, ELF_C_WRITE, NULL);
1120 if (!gelf_newehdr(kcore->elf, elfclass))
1123 ehdr = gelf_getehdr(kcore->elf, &kcore->ehdr);
1130 elf_end(kcore->elf);
1137 static void kcore__close(struct kcore *kcore)
1139 elf_end(kcore->elf);
1143 static int kcore__copy_hdr(struct kcore *from, struct kcore *to, size_t count)
1145 GElf_Ehdr *ehdr = &to->ehdr;
1146 GElf_Ehdr *kehdr = &from->ehdr;
1148 memcpy(ehdr->e_ident, kehdr->e_ident, EI_NIDENT);
1149 ehdr->e_type = kehdr->e_type;
1150 ehdr->e_machine = kehdr->e_machine;
1151 ehdr->e_version = kehdr->e_version;
1154 ehdr->e_flags = kehdr->e_flags;
1155 ehdr->e_phnum = count;
1156 ehdr->e_shentsize = 0;
1158 ehdr->e_shstrndx = 0;
1160 if (from->elfclass == ELFCLASS32) {
1161 ehdr->e_phoff = sizeof(Elf32_Ehdr);
1162 ehdr->e_ehsize = sizeof(Elf32_Ehdr);
1163 ehdr->e_phentsize = sizeof(Elf32_Phdr);
1165 ehdr->e_phoff = sizeof(Elf64_Ehdr);
1166 ehdr->e_ehsize = sizeof(Elf64_Ehdr);
1167 ehdr->e_phentsize = sizeof(Elf64_Phdr);
1170 if (!gelf_update_ehdr(to->elf, ehdr))
1173 if (!gelf_newphdr(to->elf, count))
1179 static int kcore__add_phdr(struct kcore *kcore, int idx, off_t offset,
1185 phdr = gelf_getphdr(kcore->elf, idx, &gphdr);
1189 phdr->p_type = PT_LOAD;
1190 phdr->p_flags = PF_R | PF_W | PF_X;
1191 phdr->p_offset = offset;
1192 phdr->p_vaddr = addr;
1194 phdr->p_filesz = len;
1195 phdr->p_memsz = len;
1196 phdr->p_align = page_size;
1198 if (!gelf_update_phdr(kcore->elf, idx, phdr))
1204 static off_t kcore__write(struct kcore *kcore)
1206 return elf_update(kcore->elf, ELF_C_WRITE);
1215 struct kcore_copy_info {
1221 u64 last_module_symbol;
1222 struct phdr_data kernel_map;
1223 struct phdr_data modules_map;
1226 static int kcore_copy__process_kallsyms(void *arg, const char *name, char type,
1229 struct kcore_copy_info *kci = arg;
1231 if (!symbol_type__is_a(type, MAP__FUNCTION))
1234 if (strchr(name, '[')) {
1235 if (start > kci->last_module_symbol)
1236 kci->last_module_symbol = start;
1240 if (!kci->first_symbol || start < kci->first_symbol)
1241 kci->first_symbol = start;
1243 if (!kci->last_symbol || start > kci->last_symbol)
1244 kci->last_symbol = start;
1246 if (!strcmp(name, "_stext")) {
1251 if (!strcmp(name, "_etext")) {
1259 static int kcore_copy__parse_kallsyms(struct kcore_copy_info *kci,
1262 char kallsyms_filename[PATH_MAX];
1264 scnprintf(kallsyms_filename, PATH_MAX, "%s/kallsyms", dir);
1266 if (symbol__restricted_filename(kallsyms_filename, "/proc/kallsyms"))
1269 if (kallsyms__parse(kallsyms_filename, kci,
1270 kcore_copy__process_kallsyms) < 0)
1276 static int kcore_copy__process_modules(void *arg,
1277 const char *name __maybe_unused,
1280 struct kcore_copy_info *kci = arg;
1282 if (!kci->first_module || start < kci->first_module)
1283 kci->first_module = start;
1288 static int kcore_copy__parse_modules(struct kcore_copy_info *kci,
1291 char modules_filename[PATH_MAX];
1293 scnprintf(modules_filename, PATH_MAX, "%s/modules", dir);
1295 if (symbol__restricted_filename(modules_filename, "/proc/modules"))
1298 if (modules__parse(modules_filename, kci,
1299 kcore_copy__process_modules) < 0)
1305 static void kcore_copy__map(struct phdr_data *p, u64 start, u64 end, u64 pgoff,
1308 if (p->addr || s < start || s >= end)
1312 p->offset = (s - start) + pgoff;
1313 p->len = e < end ? e - s : end - s;
1316 static int kcore_copy__read_map(u64 start, u64 len, u64 pgoff, void *data)
1318 struct kcore_copy_info *kci = data;
1319 u64 end = start + len;
1321 kcore_copy__map(&kci->kernel_map, start, end, pgoff, kci->stext,
1324 kcore_copy__map(&kci->modules_map, start, end, pgoff, kci->first_module,
1325 kci->last_module_symbol);
1330 static int kcore_copy__read_maps(struct kcore_copy_info *kci, Elf *elf)
1332 if (elf_read_maps(elf, true, kcore_copy__read_map, kci) < 0)
1338 static int kcore_copy__calc_maps(struct kcore_copy_info *kci, const char *dir,
1341 if (kcore_copy__parse_kallsyms(kci, dir))
1344 if (kcore_copy__parse_modules(kci, dir))
1348 kci->stext = round_down(kci->stext, page_size);
1350 kci->stext = round_down(kci->first_symbol, page_size);
1353 kci->etext = round_up(kci->etext, page_size);
1354 } else if (kci->last_symbol) {
1355 kci->etext = round_up(kci->last_symbol, page_size);
1356 kci->etext += page_size;
1359 kci->first_module = round_down(kci->first_module, page_size);
1361 if (kci->last_module_symbol) {
1362 kci->last_module_symbol = round_up(kci->last_module_symbol,
1364 kci->last_module_symbol += page_size;
1367 if (!kci->stext || !kci->etext)
1370 if (kci->first_module && !kci->last_module_symbol)
1373 return kcore_copy__read_maps(kci, elf);
1376 static int kcore_copy__copy_file(const char *from_dir, const char *to_dir,
1379 char from_filename[PATH_MAX];
1380 char to_filename[PATH_MAX];
1382 scnprintf(from_filename, PATH_MAX, "%s/%s", from_dir, name);
1383 scnprintf(to_filename, PATH_MAX, "%s/%s", to_dir, name);
1385 return copyfile_mode(from_filename, to_filename, 0400);
1388 static int kcore_copy__unlink(const char *dir, const char *name)
1390 char filename[PATH_MAX];
1392 scnprintf(filename, PATH_MAX, "%s/%s", dir, name);
1394 return unlink(filename);
1397 static int kcore_copy__compare_fds(int from, int to)
1405 buf_from = malloc(page_size);
1406 buf_to = malloc(page_size);
1407 if (!buf_from || !buf_to)
1411 /* Use read because mmap won't work on proc files */
1412 ret = read(from, buf_from, page_size);
1421 if (readn(to, buf_to, len) != (int)len)
1424 if (memcmp(buf_from, buf_to, len))
1435 static int kcore_copy__compare_files(const char *from_filename,
1436 const char *to_filename)
1438 int from, to, err = -1;
1440 from = open(from_filename, O_RDONLY);
1444 to = open(to_filename, O_RDONLY);
1446 goto out_close_from;
1448 err = kcore_copy__compare_fds(from, to);
1456 static int kcore_copy__compare_file(const char *from_dir, const char *to_dir,
1459 char from_filename[PATH_MAX];
1460 char to_filename[PATH_MAX];
1462 scnprintf(from_filename, PATH_MAX, "%s/%s", from_dir, name);
1463 scnprintf(to_filename, PATH_MAX, "%s/%s", to_dir, name);
1465 return kcore_copy__compare_files(from_filename, to_filename);
1469 * kcore_copy - copy kallsyms, modules and kcore from one directory to another.
1470 * @from_dir: from directory
1471 * @to_dir: to directory
1473 * This function copies kallsyms, modules and kcore files from one directory to
1474 * another. kallsyms and modules are copied entirely. Only code segments are
1475 * copied from kcore. It is assumed that two segments suffice: one for the
1476 * kernel proper and one for all the modules. The code segments are determined
1477 * from kallsyms and modules files. The kernel map starts at _stext or the
1478 * lowest function symbol, and ends at _etext or the highest function symbol.
1479 * The module map starts at the lowest module address and ends at the highest
1480 * module symbol. Start addresses are rounded down to the nearest page. End
1481 * addresses are rounded up to the nearest page. An extra page is added to the
1482 * highest kernel symbol and highest module symbol to, hopefully, encompass that
1483 * symbol too. Because it contains only code sections, the resulting kcore is
1484 * unusual. One significant peculiarity is that the mapping (start -> pgoff)
1485 * is not the same for the kernel map and the modules map. That happens because
1486 * the data is copied adjacently whereas the original kcore has gaps. Finally,
1487 * kallsyms and modules files are compared with their copies to check that
1488 * modules have not been loaded or unloaded while the copies were taking place.
1490 * Return: %0 on success, %-1 on failure.
1492 int kcore_copy(const char *from_dir, const char *to_dir)
1495 struct kcore extract;
1497 int idx = 0, err = -1;
1498 off_t offset = page_size, sz, modules_offset = 0;
1499 struct kcore_copy_info kci = { .stext = 0, };
1500 char kcore_filename[PATH_MAX];
1501 char extract_filename[PATH_MAX];
1503 if (kcore_copy__copy_file(from_dir, to_dir, "kallsyms"))
1506 if (kcore_copy__copy_file(from_dir, to_dir, "modules"))
1507 goto out_unlink_kallsyms;
1509 scnprintf(kcore_filename, PATH_MAX, "%s/kcore", from_dir);
1510 scnprintf(extract_filename, PATH_MAX, "%s/kcore", to_dir);
1512 if (kcore__open(&kcore, kcore_filename))
1513 goto out_unlink_modules;
1515 if (kcore_copy__calc_maps(&kci, from_dir, kcore.elf))
1516 goto out_kcore_close;
1518 if (kcore__init(&extract, extract_filename, kcore.elfclass, false))
1519 goto out_kcore_close;
1521 if (!kci.modules_map.addr)
1524 if (kcore__copy_hdr(&kcore, &extract, count))
1525 goto out_extract_close;
1527 if (kcore__add_phdr(&extract, idx++, offset, kci.kernel_map.addr,
1528 kci.kernel_map.len))
1529 goto out_extract_close;
1531 if (kci.modules_map.addr) {
1532 modules_offset = offset + kci.kernel_map.len;
1533 if (kcore__add_phdr(&extract, idx, modules_offset,
1534 kci.modules_map.addr, kci.modules_map.len))
1535 goto out_extract_close;
1538 sz = kcore__write(&extract);
1539 if (sz < 0 || sz > offset)
1540 goto out_extract_close;
1542 if (copy_bytes(kcore.fd, kci.kernel_map.offset, extract.fd, offset,
1543 kci.kernel_map.len))
1544 goto out_extract_close;
1546 if (modules_offset && copy_bytes(kcore.fd, kci.modules_map.offset,
1547 extract.fd, modules_offset,
1548 kci.modules_map.len))
1549 goto out_extract_close;
1551 if (kcore_copy__compare_file(from_dir, to_dir, "modules"))
1552 goto out_extract_close;
1554 if (kcore_copy__compare_file(from_dir, to_dir, "kallsyms"))
1555 goto out_extract_close;
1560 kcore__close(&extract);
1562 unlink(extract_filename);
1564 kcore__close(&kcore);
1567 kcore_copy__unlink(to_dir, "modules");
1568 out_unlink_kallsyms:
1570 kcore_copy__unlink(to_dir, "kallsyms");
1575 int kcore_extract__create(struct kcore_extract *kce)
1578 struct kcore extract;
1580 int idx = 0, err = -1;
1581 off_t offset = page_size, sz;
1583 if (kcore__open(&kcore, kce->kcore_filename))
1586 strcpy(kce->extract_filename, PERF_KCORE_EXTRACT);
1587 if (kcore__init(&extract, kce->extract_filename, kcore.elfclass, true))
1588 goto out_kcore_close;
1590 if (kcore__copy_hdr(&kcore, &extract, count))
1591 goto out_extract_close;
1593 if (kcore__add_phdr(&extract, idx, offset, kce->addr, kce->len))
1594 goto out_extract_close;
1596 sz = kcore__write(&extract);
1597 if (sz < 0 || sz > offset)
1598 goto out_extract_close;
1600 if (copy_bytes(kcore.fd, kce->offs, extract.fd, offset, kce->len))
1601 goto out_extract_close;
1606 kcore__close(&extract);
1608 unlink(kce->extract_filename);
1610 kcore__close(&kcore);
1615 void kcore_extract__delete(struct kcore_extract *kce)
1617 unlink(kce->extract_filename);
1620 void symbol__elf_init(void)
1622 elf_version(EV_CURRENT);