github-mirror/linux
1
0
Fork 0
mirror of https://github.com/torvalds/linux.git synced 2026-09-23 22:14:03 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity Graph

selftests/bpf: Add bpf_icmp_send no route test

Browse Source 
For normal live cgroup_skb paths, the skb should already be routed. The
exception is for test run via BPF_PROG_TEST_RUN with packets created
via bpf_prog_test_run_skb. Those lack dst route and thus the icmp_send
would quietly fail by returning early.

This test exercises this and makes sure the kfunc returns -ENETUNREACH.

Signed-off-by: Mahe Tardy <mahe.tardy@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: Emil Tsalapatis <emil@etsalapatis.com>
Reviewed-by: Jordan Rife <jordan@jrife.io>
Acked-by: Stanislav Fomichev <sdf@fomichev.me>
Link: https://lore.kernel.org/bpf/20260709144900.245904-6-mahe.tardy@gmail.com
This commit is contained in:
Mahe Tardy 2026-07-09 14:49:00 +00:00 committed by Daniel Borkmann
parent 49d07ba673
commit b1d4514ff1
1 changed files with 49 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

49
tools/testing/selftests/bpf/prog_tests/icmp_send_kfunc.c
View File

@ -169,6 +169,49 @@ static void run_icmp_test(struct icmp_send *skel, int af, const char *ip,
}
}
static void run_icmp_no_route_test(struct icmp_send *skel, int af)
{
union {
struct ipv4_packet v4;
struct ipv6_packet v6;
} pkt;
DECLARE_LIBBPF_OPTS(bpf_test_run_opts, opts,
.data_in = &pkt,
);
int err;
switch (af) {
case AF_INET:
pkt.v4 = pkt_v4;
pkt.v4.iph.version = 4;
pkt.v4.iph.daddr = htonl(INADDR_LOOPBACK);
pkt.v4.tcp.dest = htons(80);
opts.data_size_in = sizeof(pkt.v4);
skel->bss->unreach_type = ICMP_DEST_UNREACH;
break;
case AF_INET6:
pkt.v6 = pkt_v6;
pkt.v6.iph.version = 6;
pkt.v6.iph.daddr = in6addr_loopback;
pkt.v6.tcp.dest = htons(80);
opts.data_size_in = sizeof(pkt.v6);
skel->bss->unreach_type = ICMPV6_DEST_UNREACH;
break;
default:
ASSERT_FAIL("af_not_supported");
return;
}
skel->bss->server_port = 80;
skel->data->kfunc_ret = KFUNC_RET_UNSET;
err = bpf_prog_test_run_opts(bpf_program__fd(skel->progs.egress), &opts);
if (!ASSERT_OK(err, "test_run"))
return;
ASSERT_EQ(skel->data->kfunc_ret, -ENETUNREACH, "kfunc_ret_no_route");
}
void test_icmp_send_unreach_cgroup(void)
{
struct icmp_send *skel;
@ -193,6 +236,12 @@ void test_icmp_send_unreach_cgroup(void)
if (test__start_subtest("ipv6"))
run_icmp_test(skel, AF_INET6, "::1", ICMPV6_REJECT_ROUTE);
if (test__start_subtest("no_route_ipv4"))
run_icmp_no_route_test(skel, AF_INET);
if (test__start_subtest("no_route_ipv6"))
run_icmp_no_route_test(skel, AF_INET6);
cleanup:
icmp_send__destroy(skel);
if (cgroup_fd >= 0)