github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-24 06:24:02 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

selftests/bpf: Test pseudo-function policy diagnostics

Browse Source 
Load a socket-filter program that passes a callback to bpf_loop() without
making a BPF-to-BPF call. Verify that the privileged load succeeds and the
unprivileged Policy report identifies the BPF function reference at its
ldimm64 instruction.

Also reject the inaccurate BPF-to-BPF call wording in the portion of the log
covered by the structured report.

Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>
Link: https://lore.kernel.org/bpf/d02e6a6d3b2dc43a207b8ba836ce62497b250dede9252e7409c5212201c794b7@mail.kernel.org
Link: https://lore.kernel.org/bpf/20260816015746.2632990-15-memxor@gmail.com
This commit is contained in:
Kumar Kartikeya Dwivedi 2026-08-16 03:57:42 +02:00
parent fc009f4658
commit 6ab6a94c4f
No known key found for this signature in database
GPG Key ID: 472D377B63542F83
1 changed files with 18 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
tools/testing/selftests/bpf/progs/verifier_unpriv.c
View File

@ -96,6 +96,24 @@ __naked void pseudo_btf_id_log_masks_address(void)
: __clobber_all);
}
static int pseudo_func_callback(__u32 index, void *ctx)
{
return 0;
}
SEC("socket")
__description("unpriv: pseudo function policy diagnostic")
__success __failure_unpriv
__msg_unpriv("loading/calling other bpf or kernel functions")
__not_msg_unpriv("BPF-to-BPF function call")
__msg_unpriv("policy check failed for BPF function reference")
__msg_unpriv("avoid BPF function references in unprivileged")
int unpriv_pseudo_func_policy(void *ctx)
{
bpf_loop(1, pseudo_func_callback, NULL, 0);
return 0;
}
SEC("socket")
__description("unpriv: return pointer")
__success __failure_unpriv __msg_unpriv("R0 leaks addr")