maps.go

// Copyright 2022-2023 The Parca Authors
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
//

package process

import (
	"debug/elf"
	"errors"
	"fmt"
	"io/fs"
	"os"
	"path"
	"strconv"
	"strings"
	"sync"

	"github.com/google/pprof/profile"
	profilestorepb "github.com/parca-dev/parca/gen/proto/go/parca/profilestore/v1alpha1"
	"github.com/parca-dev/parca/pkg/parcacol"
	"github.com/prometheus/client_golang/prometheus"
	"github.com/prometheus/client_golang/prometheus/promauto"
	"github.com/prometheus/procfs"

	"github.com/parca-dev/parca-agent/pkg/elfreader"
	"github.com/parca-dev/parca-agent/pkg/kernel"
	"github.com/parca-dev/parca-agent/pkg/objectfile"
)

type executableInfoMetrics struct {
	executableInfoExtractionSuccess prometheus.Counter
	executableInfoExtractionError   prometheus.Counter
}

func newExecutableInfoMetrics(reg prometheus.Registerer) *executableInfoMetrics {
	executableInfo := promauto.With(reg).NewCounterVec(
		prometheus.CounterOpts{
			Name: "parca_agent_executable_info_extraction_total",
			Help: "Total number of base calculation attempts by stage.",
		},
		[]string{"stage", "result"},
	)
	m := &executableInfoMetrics{
		executableInfoExtractionSuccess: executableInfo.WithLabelValues("addr", "success"),
		executableInfoExtractionError:   executableInfo.WithLabelValues("addr", "error"),
	}
	return m
}

type MapManager struct {
	procfs.FS

	executableInfoMetrics *executableInfoMetrics

	objFilePool *objectfile.Pool
}

func NewMapManager(
	reg prometheus.Registerer,
	fs procfs.FS,
	objFilePool *objectfile.Pool,
) *MapManager {
	return &MapManager{
		FS:                    fs,
		objFilePool:           objFilePool,
		executableInfoMetrics: newExecutableInfoMetrics(reg),
	}
}

type Mappings []*Mapping

func (ms Mappings) ConvertToPprof() []*profile.Mapping {
	res := make([]*profile.Mapping, 0, len(ms))

	// pprof IDs start at 1 to be able to distinguish them from 0 (default
	// value aka unset).
	i := uint64(1)
	for _, m := range ms {
		pprofMapping := m.convertToPprof()
		pprofMapping.ID = i
		res = append(res, pprofMapping)
		i++
	}
	return res
}

func (ms Mappings) ExecutableSections() []*Mapping {
	res := make([]*Mapping, 0, len(ms))

	for _, m := range ms {
		if m.isExecutable() {
			res = append(res, m)
		}
	}

	return res
}

var (
	ErrProcessMapNotFound = errors.New("perf-map not found")
	ErrProcNotFound       = errors.New("process not found")
)

// MappingsForPID returns all the mappings for the given PID.
func (mm *MapManager) MappingsForPID(pid int) (Mappings, error) {
	proc, err := mm.Proc(pid)
	if err != nil {
		return nil, errors.Join(ErrProcNotFound, fmt.Errorf("failed to open proc %d: %w", pid, err))
	}

	maps, err := proc.ProcMaps()
	if err != nil {
		return nil, errors.Join(ErrProcNotFound, fmt.Errorf("failed to read proc maps for proc %d: %w", pid, err))
	}

	// We only ever care about executable mappings.
	executableMapsCount := 0
	for _, m := range maps {
		if m.Perms.Execute {
			executableMapsCount += 1
		}
	}
	executableMaps := make([]*procfs.ProcMap, 0, executableMapsCount)
	for _, m := range maps {
		if m.Perms.Execute {
			executableMaps = append(executableMaps, m)
		}
	}

	res := make([]*Mapping, 0, len(executableMaps))
	var errs error
	for _, m := range executableMaps {
		mapping, err := mm.NewUserMapping(m, pid)
		if err != nil {
			var elfErr *elf.FormatError
			if errors.As(err, &elfErr) {
				// We don't want to count these as errors. This just means the file
				// is not an ELF file.
				continue
			}
			errs = errors.Join(errs, fmt.Errorf("failed to initialize mapping %s: %w", m.Pathname, err))
			if os.IsNotExist(err) || errors.Is(err, fs.ErrNotExist) {
				// High likely the file was unreachable due to short-lived process.
				break
			}
		}
		res = append(res, mapping)
	}
	// Any errors that are returned prevent agent to cache the process info.
	return res, errs
}

type Mapping struct {
	mm *MapManager

	*procfs.ProcMap

	// Process related fields.
	PID int

	// This will be populated if mappping has executable and symbolizable.
	// We intentionally do NOT use an ObjectFile here.
	// So that it could be GCed and closed.
	// This is needed for pprof conversion.
	BuildID string

	executableInfo     *profilestorepb.ExecutableInfo
	executableInfoOnce *sync.Once
	executableInfoSet  bool
	executableInfoErr  error

	IsJitDump bool

	// This mapping had no path associated with it. Usually this means the
	// mapping is a JIT compiled section.
	NoFileMapping bool

	containsDebuginfoToUpload bool
}

// newUserMapping makes sure the mapped file is open and computes the kernel offset.
func (mm *MapManager) NewUserMapping(pm *procfs.ProcMap, pid int) (*Mapping, error) {
	m := &Mapping{
		mm:      mm,
		ProcMap: pm,
		PID:     pid,

		executableInfoOnce:        &sync.Once{},
		containsDebuginfoToUpload: true,
	}

	if !m.isSymbolizable() { // No need to open/initialize unsymbolizable mappings.
		if m.Pathname == "" {
			m.NoFileMapping = true
		}
		m.containsDebuginfoToUpload = false
		return m, nil
	}

	obj, err := m.mm.objFilePool.Open(m.AbsolutePath())
	if err != nil {
		var elfErr *elf.FormatError
		// This magic number is the magic number for JITDump files.
		if errors.As(err, &elfErr) && elfErr.Error() == "bad magic number '[68 84 105 74]' in record at byte 0x0" {
			m.containsDebuginfoToUpload = false
			m.IsJitDump = true

			return m, nil
		}
		return nil, fmt.Errorf("failed to open mapped object file: %w", err)
	}

	ef, err := obj.ELF()
	if err != nil {
		return nil, fmt.Errorf("failed to get ELF file: %w", err)
	}

	m.BuildID = obj.BuildID

	// Check that we can compute a base for the binary. This may not be the
	// correct base value, so we don't save it. We delay computing the actual base
	// value until we have a sample address for this mapping, so that we can
	// correctly identify the associated program segment that is needed to compute
	// the base.
	m.executableInfo = m.extractExecutableInfoWithoutAddress(ef)
	return m, nil
}

// isExecutable returns true if the mapping is executable.
func (m *Mapping) isExecutable() bool {
	return m.Perms.Execute
}

// isSymbolizable returns true if the mapping is symbolizable.
func (m *Mapping) isSymbolizable() bool {
	return doesReferToFile(m.Pathname) && m.isExecutable()
}

func doesReferToFile(path string) bool {
	path = strings.TrimSpace(path)
	return path != "" &&
		path != "jit" &&
		!strings.HasPrefix(path, "[") &&
		!strings.HasPrefix(path, "anon_inode:[") &&
		!strings.Contains(path, "(deleted)") &&
		!strings.Contains(path, "memfd:")
	// NOTICE: Add more patterns when needed.
}

// Root returns the root filesystem of the process that owns the mapping.
func (m *Mapping) Root() string {
	return path.Join("/proc", strconv.Itoa(m.PID), "/root")
}

// AbsolutePath returns path relative to the root namespace of the system.
func (m *Mapping) AbsolutePath() string {
	return path.Join("/proc", strconv.Itoa(m.PID), "/root", m.Pathname)
}

// findProgramHeader returns the program segment that matches the current
// mapping and the given address, or an error if it cannot find a unique program
// header.
func (m *Mapping) findProgramHeader(ef *elf.File, addr uint64) (*elf.ProgHeader, error) {
	// For user space executables, we try to find the actual program segment that
	// is associated with the given mapping. Skip this search if limit <= start.
	if m.StartAddr >= m.EndAddr || uint64(m.EndAddr) >= (uint64(1)<<63) {
		return elfreader.FindTextProgHeader(ef), nil
	}

	// Fetch all the loadable segments.
	var phdrs []elf.ProgHeader
	for i := range ef.Progs {
		if ef.Progs[i].Type == elf.PT_LOAD {
			phdrs = append(phdrs, ef.Progs[i].ProgHeader)
		}
	}
	// Some ELF files don't contain any loadable program segments, e.g. .ko
	// kernel modules. It's not an error to have no header in such cases.
	if len(phdrs) == 0 {
		return nil, nil //nolint:nilnil
	}
	// Get all program headers associated with the mapping.
	headers := elfreader.ProgramHeadersForMapping(phdrs, uint64(m.Offset), uint64(m.EndAddr)-uint64(m.StartAddr))
	if len(headers) == 0 {
		return nil, errors.New("no program header matches mapping info")
	}
	if len(headers) == 1 {
		return headers[0], nil
	}

	// Use the file offset corresponding to the address to symbolize, to narrow
	// down the header.
	return elfreader.HeaderForFileOffset(headers, addr-uint64(m.StartAddr)+uint64(m.Offset))
}

func (m *Mapping) extractExecutableInfo(ef *elf.File, addr uint64) (*profilestorepb.ExecutableInfo, error) {
	if m == nil {
		return nil, nil //nolint:nilnil
	}
	if addr < uint64(m.StartAddr) || addr >= uint64(m.EndAddr) {
		return nil, fmt.Errorf("specified address %x is outside the mapping range [%x, %x]", addr, m.StartAddr, m.EndAddr)
	}

	loadSegment, err := m.findProgramHeader(ef, addr)
	if err != nil {
		return nil, fmt.Errorf("failed to find program header for mapping %#v: %w", m, err)
	}

	res := &profilestorepb.ExecutableInfo{
		ElfType: uint32(ef.FileHeader.Type),
	}

	if loadSegment != nil {
		res.LoadSegment = &profilestorepb.LoadSegment{
			Offset: loadSegment.Off,
			Vaddr:  loadSegment.Vaddr,
		}
	}

	return res, nil
}

func (m *Mapping) Normalize(addr uint64) (uint64, error) {
	ei, err := m.ExecutableInfo(addr)
	if err != nil {
		return 0, err
	}

	return parcacol.NormalizeAddress(
		addr,
		ei,
		uint64(m.StartAddr),
		uint64(m.EndAddr),
		uint64(m.Offset),
	)
}

func (m *Mapping) extractExecutableInfoWithoutAddress(ef *elf.File) *profilestorepb.ExecutableInfo {
	loadSegment := elfreader.FindTextProgHeader(ef)

	res := &profilestorepb.ExecutableInfo{
		ElfType: uint32(ef.FileHeader.Type),
	}

	if loadSegment != nil {
		res.LoadSegment = &profilestorepb.LoadSegment{
			Offset: loadSegment.Off,
			Vaddr:  loadSegment.Vaddr,
		}
	}

	return res
}

// Normalize converts the given address to the address relative to the start of the
// object file.
func (m *Mapping) ExecutableInfo(addr uint64) (*profilestorepb.ExecutableInfo, error) {
	// Fast path: if the base is already set, we can just subtract it from the address.
	if m.executableInfoSet {
		return m.executableInfo, nil
	}

	// Slow path: we need to compute the base using the received address to find the program header.
	if m.executableInfoErr == nil {
		m.executableInfoOnce.Do(func() {
			defer func() {
				m.executableInfoSet = true

				if m.executableInfoErr != nil {
					m.mm.executableInfoMetrics.executableInfoExtractionError.Inc()
				}
			}()

			path := m.AbsolutePath()
			if m.Pathname == "[vdso]" {
				// vdso is a special case.
				// On some systems, the vdso is mapped to a global file shared by all processes.
				var err error
				path, err = kernel.FindVDSO()
				if err != nil {
					m.executableInfoErr = fmt.Errorf("failed to find vdso file: %w", err)
					return
				}
			}

			obj, err := m.mm.objFilePool.Open(path)
			if err != nil {
				m.executableInfoErr = fmt.Errorf("failed to open mapped object file: %w", err)
				return
			}

			ef, err := obj.ELF()
			if err != nil {
				m.executableInfoErr = fmt.Errorf("failed to get ELF file: %w", err)
				return
			}

			executableInfo, err := m.extractExecutableInfo(ef, addr)
			if err != nil {
				m.executableInfoErr = fmt.Errorf("failed to compute base: %w", err)
				return
			}

			m.executableInfo = executableInfo
			m.mm.executableInfoMetrics.executableInfoExtractionSuccess.Inc()
		})
		if m.executableInfoErr != nil {
			return nil, fmt.Errorf("failed to compute base: %w", m.executableInfoErr)
		}
	}

	// If base address not set previously, it might be set now.
	if m.executableInfoSet {
		return m.executableInfo, nil
	}

	// Failed to compute base address. Leave the address as is.
	return nil, nil //nolint:nilnil
}

// convertToPprof converts the Mapping to a pprof profile.Mapping.
func (m *Mapping) convertToPprof() *profile.Mapping {
	var (
		buildID = m.BuildID
		path    = m.Pathname
	)

	if buildID == "" {
		buildID = "unknown"
	}
	if path == "" {
		// TODO: Maybe add detection for JITs that use files.
		path = "jit"
	}

	return &profile.Mapping{
		Start:   uint64(m.StartAddr),
		Limit:   uint64(m.EndAddr),
		Offset:  uint64(m.Offset),
		BuildID: buildID,
		File:    path,
	}
}