From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-4.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SPF_PASS,URIBL_BLOCKED autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 2E810C43387 for ; Wed, 16 Jan 2019 14:19:12 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id EE2B920675 for ; Wed, 16 Jan 2019 14:19:11 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2404610AbfAPOTL (ORCPT ); Wed, 16 Jan 2019 09:19:11 -0500 Received: from mail.kernel.org ([198.145.29.99]:35358 "EHLO mail.kernel.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2404349AbfAPOTL (ORCPT ); Wed, 16 Jan 2019 09:19:11 -0500 Received: from gandalf.local.home (cpe-66-24-58-225.stny.res.rr.com [66.24.58.225]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mail.kernel.org (Postfix) with ESMTPSA id DB869205C9; Wed, 16 Jan 2019 14:19:09 +0000 (UTC) Date: Wed, 16 Jan 2019 09:19:08 -0500 From: Steven Rostedt To: Slavomir Kaslev Cc: linux-trace-devel@vger.kernel.org, ykaradzhov@vmware.com, tstoyanov@vmware.com Subject: Re: [PATCH v4 5/8] trace-cmd: Add TRACE_REQ and TRACE_RESP messages Message-ID: <20190116091908.41584357@gandalf.local.home> In-Reply-To: <20190116134307.4185-6-kaslevs@vmware.com> References: <20190116134307.4185-1-kaslevs@vmware.com> <20190116134307.4185-6-kaslevs@vmware.com> X-Mailer: Claws Mail 3.16.0 (GTK+ 2.24.32; x86_64-pc-linux-gnu) MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: linux-trace-devel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-trace-devel@vger.kernel.org On Wed, 16 Jan 2019 15:43:04 +0200 Slavomir Kaslev wrote: > Add TRACE_REQ and TRACE_RESP messages which are used for initiating guest VM > tracing. I'm OK with this patch but a couple of things that will need to be addressed in the future. > diff --git a/tracecmd/trace-msg.c b/tracecmd/trace-msg.c > index 529ae2a..46b18aa 100644 > --- a/tracecmd/trace-msg.c > +++ b/tracecmd/trace-msg.c > @@ -16,6 +16,7 @@ > #include > #include > #include > +#include > #include > #include > #include > @@ -79,6 +80,16 @@ struct tracecmd_msg_rinit { > be32 cpus; > } __attribute__((packed)); > > +struct tracecmd_msg_trace_req { > + be32 flags; > + be32 argc; > +} __attribute__((packed)); > + > +struct tracecmd_msg_trace_resp { > + be32 cpus; > + be32 page_size; > +} __attribute__((packed)); > + > struct tracecmd_msg_header { > be32 size; > be32 cmd; > @@ -90,7 +101,9 @@ struct tracecmd_msg_header { > C(TINIT, 1, sizeof(struct tracecmd_msg_tinit)), \ > C(RINIT, 2, sizeof(struct tracecmd_msg_rinit)), \ > C(SEND_DATA, 3, 0), \ > - C(FIN_DATA, 4, 0), > + C(FIN_DATA, 4, 0), \ > + C(TRACE_REQ, 5, sizeof(struct tracecmd_msg_trace_req)), \ > + C(TRACE_RESP, 6, sizeof(struct tracecmd_msg_trace_resp)), > > #undef C > #define C(a,b,c) MSG_##a = b > @@ -122,6 +135,8 @@ struct tracecmd_msg { > union { > struct tracecmd_msg_tinit tinit; > struct tracecmd_msg_rinit rinit; > + struct tracecmd_msg_trace_req trace_req; > + struct tracecmd_msg_trace_resp trace_resp; > }; > union { > struct tracecmd_msg_opt *opt; > @@ -715,3 +730,192 @@ error: > msg_free(&msg); > return ret; > } > + > +static int make_trace_req(struct tracecmd_msg *msg, int argc, char **argv) > +{ > + size_t args_size = 0; > + char *p; > + int i; > + > + for (i = 0; i < argc; i++) > + args_size += strlen(argv[i]) + 1; > + > + msg->hdr.size = htonl(ntohl(msg->hdr.size) + args_size); > + msg->trace_req.argc = htonl(argc); > + msg->buf = calloc(args_size, 1); > + if (!msg->buf) > + return -ENOMEM; > + > + p = msg->buf; > + for (i = 0; i < argc; i++) > + p = stpcpy(p, argv[i]) + 1; > + > + return 0; > +} > + > +int tracecmd_msg_send_trace_req(struct tracecmd_msg_handle *msg_handle, > + int argc, char **argv) > +{ > + struct tracecmd_msg msg; > + int ret; > + > + tracecmd_msg_init(MSG_TRACE_REQ, &msg); > + ret = make_trace_req(&msg, argc, argv); > + if (ret) > + return ret; > + > + return tracecmd_msg_send(msg_handle->fd, &msg); > +} > + > + /* > + * NOTE: On success, the returned `argv` should be freed with: > + * free(argv[0]); > + * free(argv); > + */ All non static functions should have some form of "kerneldoc" documentation, that also explains the above. Each of the non static functions in this file should have it. But we can add another patch for that in the future (let's just not forget ;-) > +int tracecmd_msg_recv_trace_req(struct tracecmd_msg_handle *msg_handle, > + int *argc, char ***argv) > +{ > + struct tracecmd_msg msg; > + char *p, *buf_end, **args; > + int i, ret, nr_args; > + size_t buf_len; > + > + ret = tracecmd_msg_recv(msg_handle->fd, &msg); > + if (ret < 0) > + return ret; > + > + if (ntohl(msg.hdr.cmd) != MSG_TRACE_REQ) > + goto out; > + > + if (ntohl(msg.trace_req.argc) < 0) > + goto out; > + > + buf_len = ntohl(msg.hdr.size) - MSG_HDR_LEN - ntohl(msg.hdr.cmd_size); > + buf_end = (char *)msg.buf + buf_len; > + p = msg.buf; > + nr_args = ntohl(msg.trace_req.argc); > + args = calloc(nr_args, sizeof(*args)); > + if (!args) { > + ret = -ENOMEM; > + goto out; > + } > + for (i = 0; i < nr_args; i++) { > + if (p >= buf_end) { > + ret = -1; > + free(args); > + goto out; > + } > + > + args[i] = p; > + p = strchr(p, '\0'); > + p++; As I'm looking at this, I realized we need to go through this code again and add protections against a rouge guest. Currently, we are just assuming that the guest is friendly, but I'm sure there's going to be use cases where that will not be the case. We need to add a check before this loop that msg.buf ends with '\0', to make sure that p doesn't go past the end even on the last iteration (which isn't checked by that if (p >= buf_end)). I'll take this patch, but add a check on top of this. Thanks, -- Steve > + } > + > + /* > + * On success we're passing msg.buf to the caller through argv[0] so we > + * reset it here to avoid getting it freed below. > + */ > + msg.buf = NULL; > + *argc = nr_args; > + *argv = args; > + ret = 0; > + > +out: > + msg_free(&msg); > + return ret; > +} > + > +static int make_trace_resp(struct tracecmd_msg *msg, > + int page_size, int nr_cpus, unsigned int *ports) > +{ > + int ports_size = nr_cpus * sizeof(*msg->port_array); > + int i; > + > + msg->hdr.size = htonl(ntohl(msg->hdr.size) + ports_size); > + msg->trace_resp.cpus = htonl(nr_cpus); > + msg->trace_resp.page_size = htonl(page_size); > + > + msg->port_array = malloc(ports_size); > + if (!msg->port_array) > + return -ENOMEM; > + > + for (i = 0; i < nr_cpus; i++) > + msg->port_array[i] = htonl(ports[i]); > + > + return 0; > +} > + > +int tracecmd_msg_send_trace_resp(struct tracecmd_msg_handle *msg_handle, > + int nr_cpus, int page_size, > + unsigned int *ports) > +{ > + struct tracecmd_msg msg; > + int ret; > + > + tracecmd_msg_init(MSG_TRACE_RESP, &msg); > + ret = make_trace_resp(&msg, page_size, nr_cpus, ports); > + if (ret < 0) > + return ret; > + > + return tracecmd_msg_send(msg_handle->fd, &msg); > +} > + > +int tracecmd_msg_recv_trace_resp(struct tracecmd_msg_handle *msg_handle, > + int *nr_cpus, int *page_size, > + unsigned int **ports) > +{ > + struct tracecmd_msg msg; > + size_t buf_len; > + int i, ret; > + > + ret = tracecmd_msg_recv(msg_handle->fd, &msg); > + if (ret < 0) > + return ret; > + > + if (ntohl(msg.hdr.cmd) != MSG_TRACE_RESP) { > + ret = -1; > + goto out; > + } > + > + buf_len = ntohl(msg.hdr.size) - MSG_HDR_LEN - ntohl(msg.hdr.cmd_size); > + if (buf_len <= 0 || > + buf_len != sizeof(*msg.port_array) * ntohl(msg.trace_resp.cpus)) { > + ret = -1; > + goto out; > + } > + > + *nr_cpus = ntohl(msg.trace_resp.cpus); > + *page_size = ntohl(msg.trace_resp.page_size); > + *ports = calloc(*nr_cpus, sizeof(**ports)); > + if (!*ports) { > + ret = -ENOMEM; > + goto out; > + } > + for (i = 0; i < *nr_cpus; i++) > + (*ports)[i] = ntohl(msg.port_array[i]); > + > + ret = 0; > + > +out: > + msg_free(&msg); > + return ret; > +} > + > +int tracecmd_msg_wait_close(struct tracecmd_msg_handle *msg_handle) > +{ > + struct tracecmd_msg msg; > + int ret; > + > + memset(&msg, 0, sizeof(msg)); > + for (;;) { > + ret = tracecmd_msg_wait_for_msg(msg_handle->fd, &msg); > + msg_free(&msg); > + > + if (ret == -ECONNABORTED) > + return 0; > + if (ret < 0) > + return ret; > + } > + > + return -1; > +}