From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 910F81F2B8D; Mon, 8 Jun 2026 14:24:41 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780928682; cv=none; b=kku/+MhpLTH4yvfPTOQZ4LsRbjUYq7MpIDd9ufzALlPii3lxDDj6KJwcB7Xk0xjixjxWUw+ZtRVjZxXV1hL9plyu7K6BHKZdDYXEoyvtdBw+HL005ccyK99kKQ1a2cXKm/wP34yxJbDvZLxddhyAhq4clguKam7i83tt+09QOt8= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780928682; c=relaxed/simple; bh=uDa54GWYMrkBxHaq5K9lowraTi4tuG5uV8fAXG8gle8=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version:Content-Type; b=iDFX90AFgSuQqa45IIPYbjVtXTPFw0PoxVqhVAo1gWLZFjA1l20+IfcbIuPgNUEWIL7ad0UIAu9LQu+p7RYt5EoKyApfssvVB9Xgwj+sX3W+G/5YNridcQfNNSVGMl62+o4rjWSs0c3MAzaPOoI78BGn1ZAiVUXT5TkEhcQyDU8= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=R/3T+Dm1; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="R/3T+Dm1" Received: by smtp.kernel.org (Postfix) with ESMTPSA id E58E41F00893; Mon, 8 Jun 2026 14:24:38 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1780928681; bh=K04Y1frCYdc/og8m1FwqqV5Jgd0jJFUJxq4j5GJ5Zaw=; h=From:To:Cc:Subject:Date:In-Reply-To:References; b=R/3T+Dm1mBNK17pHZZQ7n/m8xt0h6N44zDNrCPEgOtRzfyF4QG/HOUEgXu1YwNtDV HF/zrkNBkNUptyzZy6RCFyx6HPvOiWukY2+CsTsBVhm3U5j4cdLERU2wsqrG8vEL1R HZSJwLgSRC23OgEfjBwLsX1MVz0py8mXAolVKxFSeEqsoTveBBx5THYmLSIl6biF9Q Fc5GlgkkQv498xNUA0Z0NknytZdQBxu/aQolz7/ADFxDV4vPRNb5TLArRIV9fJf3TG T1SoJ1XbJdbEivcIKJfnh/IW7l+BwwPSWZUQmNxAnmNLqO1Wx/hHk1fDpZZ8sewjC3 T5jhm9dCLVgpg== From: "Masami Hiramatsu (Google)" To: Steven Rostedt , Mathieu Desnoyers Cc: Jonathan Corbet , Shuah Khan , Masami Hiramatsu , linux-kernel@vger.kernel.org, linux-trace-kernel@vger.kernel.org, linux-doc@vger.kernel.org, linux-kselftest@vger.kernel.org Subject: [RFC PATCH 2/7] tracing/probes: Support nested typecast Date: Mon, 8 Jun 2026 23:24:36 +0900 Message-ID: <178092867670.163648.6658248217596569592.stgit@devnote2> X-Mailer: git-send-email 2.43.0 In-Reply-To: <178092865666.163648.10457567771536160909.stgit@devnote2> References: <178092865666.163648.10457567771536160909.stgit@devnote2> User-Agent: StGit/0.19 Precedence: bulk X-Mailing-List: linux-trace-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit From: Masami Hiramatsu (Google) When we hit an open parenthesis right after typecast closing parenthesis, it means we have nested typecast. This allows us to typecast a generic data member in a structure to a pointer to another structure. For example, to cast a DATA_MEMBER of VAR structure to STRUCT pointer and get MEMBER value. (STRUCT)(VAR->DATA_MEMBER)->MEMBER Also, we can nest typecast. (STRUCT1)((STRUCT2)$ARG->FIELD2)->FIELD1 Currently the max nest level is limited to 3. Signed-off-by: Masami Hiramatsu (Google) --- Documentation/trace/eprobetrace.rst | 2 + Documentation/trace/fprobetrace.rst | 2 + Documentation/trace/kprobetrace.rst | 2 + kernel/trace/trace.c | 1 kernel/trace/trace_probe.c | 76 ++++++++++++++++++++++++++++++++--- kernel/trace/trace_probe.h | 7 +++ 6 files changed, 82 insertions(+), 8 deletions(-) diff --git a/Documentation/trace/eprobetrace.rst b/Documentation/trace/eprobetrace.rst index fe3602540569..cd0b4aa7f896 100644 --- a/Documentation/trace/eprobetrace.rst +++ b/Documentation/trace/eprobetrace.rst @@ -50,6 +50,8 @@ Synopsis of eprobe_events a pointer to STRUCT and then derference the pointer defined by ->MEMBER. Note that when this is used, the FIELD name does not need to be prefixed with a '$'. + (STRUCT)(FETCHARG)->MEMBER[->MEMBER] : typecast can nest, so the above can + also be used with another FETCHARG instead of FIELD. Types ----- diff --git a/Documentation/trace/fprobetrace.rst b/Documentation/trace/fprobetrace.rst index 7435ded2d66d..6b8bb27bb62d 100644 --- a/Documentation/trace/fprobetrace.rst +++ b/Documentation/trace/fprobetrace.rst @@ -60,6 +60,8 @@ Synopsis of fprobe-events (STRUCT)FIELD->MEMBER[->MEMBER] : If BTF is supported, typecast FIELD to a pointer to STRUCT and then derference the pointer defined by ->MEMBER. + (STRUCT)(FETCHARG)->MEMBER[->MEMBER] : typecast can nest, so the above can + also be used with another FETCHARG instead of FIELD. (\*1) This is available only when BTF is enabled. (\*2) only for the probe on function entry (offs == 0). Note, this argument access diff --git a/Documentation/trace/kprobetrace.rst b/Documentation/trace/kprobetrace.rst index f73614997d52..c4382765d5b2 100644 --- a/Documentation/trace/kprobetrace.rst +++ b/Documentation/trace/kprobetrace.rst @@ -65,6 +65,8 @@ Synopsis of kprobe_events a pointer to STRUCT and then derference the pointer defined by ->MEMBER. Note that this is available only when the probe is on function entry. + (STRUCT)(FETCHARG)->MEMBER[->MEMBER] : typecast can nest, so the above can + also be used with another FETCHARG instead of FIELD. (\*1) only for the probe on function entry (offs == 0). Note, this argument access is best effort, because depending on the argument type, it may be passed on diff --git a/kernel/trace/trace.c b/kernel/trace/trace.c index aa93e7b01146..4f70318918c2 100644 --- a/kernel/trace/trace.c +++ b/kernel/trace/trace.c @@ -4326,6 +4326,7 @@ static const char readme_msg[] = "\t $stack, $stack, $retval, $comm, $arg,\n" #ifdef CONFIG_PROBE_EVENTS_BTF_ARGS "\t [(structname)][->field[->field|.field...]],\n" + "\t [(structname)](fetcharg)->field[->field|.field...],\n" #endif #else "\t $stack, $stack, $retval, $comm,\n" diff --git a/kernel/trace/trace_probe.c b/kernel/trace/trace_probe.c index 609b156986c5..ddd9b1b63a17 100644 --- a/kernel/trace/trace_probe.c +++ b/kernel/trace/trace_probe.c @@ -832,10 +832,35 @@ static int query_btf_struct(const char *sname, struct traceprobe_parse_context * return 0; } +/* Find the matching closing parenthesis for a given opening parenthesis. */ +static char *find_matched_close_paren(char *s) +{ + char *p = s; + int count = 0; + + while (*p) { + if (*p == '(') + count++; + else if (*p == ')') { + if (--count == 0) + return p; + } + p++; + } + return NULL; +} + +static int +parse_probe_arg(char *arg, const struct fetch_type *type, + struct fetch_insn **pcode, struct fetch_insn *end, + struct traceprobe_parse_context *ctx); + static int handle_typecast(char *arg, struct fetch_insn **pcode, struct fetch_insn *end, struct traceprobe_parse_context *ctx) { + int orig_offset = ctx->offset; + bool nested = false; char *tmp; int ret; @@ -850,19 +875,56 @@ static int handle_typecast(char *arg, struct fetch_insn **pcode, DEREF_OPEN_BRACE); return -EINVAL; } - *tmp = '\0'; - ret = query_btf_struct(arg + 1, ctx); - *tmp = ')'; + *tmp++ = '\0'; + + /* Handle the nested structure like (STRUCT)(VAR->FIELD)->... */ + if (*tmp == '(') { + char *close = find_matched_close_paren(tmp); + + ctx->offset += tmp - arg; + if (!close) { + trace_probe_log_err(ctx->offset, DEREF_OPEN_BRACE); + return -EINVAL; + } + /* We expect a field access for typecast */ + if (close[1] != '-' || close[2] != '>') { + trace_probe_log_err(ctx->offset + close - tmp + 1, + TYPECAST_REQ_FIELD); + return -EINVAL; + } + ctx->nested_level++; + if (ctx->nested_level > TRACEPROBE_MAX_NESTED_LEVEL) { + trace_probe_log_err(ctx->offset, TOO_MANY_NESTED); + return -E2BIG; + } + *close = '\0'; + + ctx->offset += 1; /* for the '(' */ + /* We need to parse the nested one */ + ret = parse_probe_arg(tmp + 1, find_fetch_type(NULL, ctx->flags), + pcode, end, ctx); + if (ret < 0) + return ret; + ctx->nested_level--; + clear_struct_btf(ctx); + + tmp = close + 1; + nested = true; + } + + ret = query_btf_struct(arg + 1, ctx); if (ret < 0) { trace_probe_log_err(ctx->offset + 1, NO_PTR_STRCT); return -EINVAL; } - tmp++; - - ctx->offset += tmp - arg; - ret = parse_btf_arg(tmp, pcode, end, ctx); + ctx->offset = orig_offset + tmp - arg; + /* If it is nested, tmp points to the field name. */ + if (nested) + ret = parse_btf_field(tmp, ctx->last_struct, pcode, end, ctx); + else + ret = parse_btf_arg(tmp, pcode, end, ctx); return ret; } diff --git a/kernel/trace/trace_probe.h b/kernel/trace/trace_probe.h index 15758cc11fc6..8dcc65e4e1db 100644 --- a/kernel/trace/trace_probe.h +++ b/kernel/trace/trace_probe.h @@ -430,8 +430,11 @@ struct traceprobe_parse_context { struct trace_probe *tp; unsigned int flags; int offset; + int nested_level; }; +#define TRACEPROBE_MAX_NESTED_LEVEL 3 + extern int traceprobe_parse_probe_arg(struct trace_probe *tp, int i, const char *argv, struct traceprobe_parse_context *ctx); @@ -566,7 +569,9 @@ extern int traceprobe_define_arg_fields(struct trace_event_call *event_call, C(TOO_MANY_ARGS, "Too many arguments are specified"), \ C(TOO_MANY_EARGS, "Too many entry arguments specified"), \ C(EVENT_TOO_BIG, "Event too big (too many fields?)"), \ - C(TYPECAST_NOT_EVENT, "Typecasts are only for eprobe fields"), + C(TYPECAST_NOT_EVENT, "Typecasts are only for eprobe fields"), \ + C(TYPECAST_REQ_FIELD, "Typecast requires a field access"), \ + C(TOO_MANY_NESTED, "Too many nested typecasts/dereferences"), #undef C #define C(a, b) TP_ERR_##a