github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-07-27 09:36:22 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

selftests/bpf: test rejection of a packet-modifying SK_SKB stream parser

Browse Source 
Verify that attaching an SK_SKB stream parser that can modify the packet
is rejected, while a read-only parser still attaches.

Reviewed-by: Jiayuan Chen <jiayuan.chen@linux.dev>
Signed-off-by: Sechang Lim <rhkrqnwk98@gmail.com>
Link: https://lore.kernel.org/r/20260620024423.4141004-4-rhkrqnwk98@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
This commit is contained in:
Sechang Lim 2026-06-20 02:44:18 +00:00 committed by Alexei Starovoitov
parent 31e2f36d38
commit 05fb34384d
2 changed files with 38 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
tools/testing/selftests/bpf/prog_tests/sockmap_strp.c
View File

@ -431,6 +431,35 @@ static void test_sockmap_strp_verdict(int family, int sotype)
test_sockmap_strp__destroy(strp);
}
static void test_sockmap_strp_parser_reject(void)
{
struct test_sockmap_strp *strp = NULL;
int parser_mod, parser_ro, link;
int err, map;
strp = test_sockmap_strp__open_and_load();
if (!ASSERT_OK_PTR(strp, "test_sockmap_strp__open_and_load"))
return;
map = bpf_map__fd(strp->maps.sock_map);
parser_mod = bpf_program__fd(strp->progs.prog_skb_parser_resize);
parser_ro = bpf_program__fd(strp->progs.prog_skb_parser);
err = bpf_prog_attach(parser_mod, map, BPF_SK_SKB_STREAM_PARSER, 0);
ASSERT_ERR(err, "bpf_prog_attach parser_mod");
link = bpf_link_create(parser_ro, map, BPF_SK_SKB_STREAM_PARSER, NULL);
if (!ASSERT_GE(link, 0, "bpf_link_create parser_ro"))
goto out;
err = bpf_link_update(link, parser_mod, NULL);
ASSERT_ERR(err, "bpf_link_update parser_mod");
out:
if (link >= 0)
close(link);
test_sockmap_strp__destroy(strp);
}
void test_sockmap_strp(void)
{
if (test__start_subtest("sockmap strp tcp pass"))
@ -451,4 +480,6 @@ void test_sockmap_strp(void)
test_sockmap_strp_multiple_pkt(AF_INET, SOCK_STREAM);
if (test__start_subtest("sockmap strp tcp dispatch"))
test_sockmap_strp_dispatch_pkt(AF_INET, SOCK_STREAM);
if (test__start_subtest("sockmap strp parser reject pkt mod"))
test_sockmap_strp_parser_reject();
}

7
tools/testing/selftests/bpf/progs/test_sockmap_strp.c
View File

@ -50,4 +50,11 @@ int prog_skb_parser_partial(struct __sk_buff *skb)
return 10;
}
SEC("sk_skb/stream_parser")
int prog_skb_parser_resize(struct __sk_buff *skb)
{
bpf_skb_change_tail(skb, skb->len, 0);
return skb->len;
}
char _license[] SEC("license") = "GPL";