aa293983d2
Add new negative selftests which are intended to cover the out-of-bounds memory access that could be performed on a CONST_PTR_TO_DYNPTR within functions taking a ARG_PTR_TO_DYNPTR | MEM_RDONLY as an argument, and acceptance of invalid register types i.e. PTR_TO_BTF_ID within functions taking a ARG_PTR_TO_DYNPTR | MEM_RDONLY. Reported-by: Kumar Kartikeya Dwivedi <memxor@gmail.com> Acked-by: Kumar Kartikeya Dwivedi <memxor@gmail.com> Acked-by: Eduard Zingerman <eddyz87@gmail.com> Signed-off-by: Matt Bobrowski <mattbobrowski@google.com> Link: https://lore.kernel.org/r/20240625062857.92760-2-mattbobrowski@google.com Signed-off-by: Alexei Starovoitov <ast@kernel.org>
43 lines
883 B
C
43 lines
883 B
C
// SPDX-License-Identifier: GPL-2.0
|
|
/* Copyright (c) 2024 Meta Platforms, Inc */
|
|
#include <vmlinux.h>
|
|
#include <bpf/bpf_helpers.h>
|
|
#include "bpf_misc.h"
|
|
#include "bpf_kfuncs.h"
|
|
#include "../bpf_testmod/bpf_testmod_kfunc.h"
|
|
|
|
SEC("tc")
|
|
int kfunc_dynptr_nullable_test1(struct __sk_buff *skb)
|
|
{
|
|
struct bpf_dynptr data;
|
|
|
|
bpf_dynptr_from_skb(skb, 0, &data);
|
|
bpf_kfunc_dynptr_test(&data, NULL);
|
|
|
|
return 0;
|
|
}
|
|
|
|
SEC("tc")
|
|
int kfunc_dynptr_nullable_test2(struct __sk_buff *skb)
|
|
{
|
|
struct bpf_dynptr data;
|
|
|
|
bpf_dynptr_from_skb(skb, 0, &data);
|
|
bpf_kfunc_dynptr_test(&data, &data);
|
|
|
|
return 0;
|
|
}
|
|
|
|
SEC("tc")
|
|
__failure __msg("expected pointer to stack or const struct bpf_dynptr")
|
|
int kfunc_dynptr_nullable_test3(struct __sk_buff *skb)
|
|
{
|
|
struct bpf_dynptr data;
|
|
|
|
bpf_dynptr_from_skb(skb, 0, &data);
|
|
bpf_kfunc_dynptr_test(NULL, &data);
|
|
|
|
return 0;
|
|
}
|
|
|
|
char _license[] SEC("license") = "GPL";
|