mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-12-15 15:04:27 +08:00
Merge branch 'RISC-V selftest/bpf fixes'
Björn Töpel says: ==================== This series contain some fixes for selftests/bpf when building/running on a RISC-V host. Details can be found in each individual commit. v2: Makefile cosmetics. (Andrii) Simplified unpriv check and added comment. (Andrii) ==================== Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
This commit is contained in:
commit
4e99d115d8
@ -219,7 +219,8 @@ $(RESOLVE_BTFIDS): $(BPFOBJ) | $(BUILD_DIR)/resolve_btfids \
|
||||
# build would have failed anyways.
|
||||
define get_sys_includes
|
||||
$(shell $(1) -v -E - </dev/null 2>&1 \
|
||||
| sed -n '/<...> search starts here:/,/End of search list./{ s| \(/.*\)|-idirafter \1|p }')
|
||||
| sed -n '/<...> search starts here:/,/End of search list./{ s| \(/.*\)|-idirafter \1|p }') \
|
||||
$(shell $(1) -dM -E - </dev/null | grep '#define __riscv_xlen ' | sed 's/#define /-D/' | sed 's/ /=/')
|
||||
endef
|
||||
|
||||
# Determine target endianness.
|
||||
|
@ -1152,6 +1152,19 @@ static void get_unpriv_disabled()
|
||||
|
||||
static bool test_as_unpriv(struct bpf_test *test)
|
||||
{
|
||||
#ifndef CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS
|
||||
/* Some architectures have strict alignment requirements. In
|
||||
* that case, the BPF verifier detects if a program has
|
||||
* unaligned accesses and rejects them. A user can pass
|
||||
* BPF_F_ANY_ALIGNMENT to a program to override this
|
||||
* check. That, however, will only work when a privileged user
|
||||
* loads a program. An unprivileged user loading a program
|
||||
* with this flag will be rejected prior entering the
|
||||
* verifier.
|
||||
*/
|
||||
if (test->flags & F_NEEDS_EFFICIENT_UNALIGNED_ACCESS)
|
||||
return false;
|
||||
#endif
|
||||
return !test->prog_type ||
|
||||
test->prog_type == BPF_PROG_TYPE_SOCKET_FILTER ||
|
||||
test->prog_type == BPF_PROG_TYPE_CGROUP_SKB;
|
||||
|
@ -266,6 +266,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"invalid 8-byte read from bpf_sk_lookup remote_ip4 field",
|
||||
@ -292,6 +293,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"invalid 8-byte read from bpf_sk_lookup remote_port field",
|
||||
@ -305,6 +307,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"invalid 8-byte read from bpf_sk_lookup local_ip4 field",
|
||||
@ -331,6 +334,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"invalid 8-byte read from bpf_sk_lookup local_port field",
|
||||
@ -344,6 +348,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
/* invalid 1,2,4-byte reads from 8-byte fields in bpf_sk_lookup */
|
||||
{
|
||||
@ -410,6 +415,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"invalid 4-byte unaligned read from bpf_sk_lookup at even offset",
|
||||
@ -422,6 +428,7 @@
|
||||
.result = REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_SK_LOOKUP,
|
||||
.expected_attach_type = BPF_SK_LOOKUP,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
/* in-bound and out-of-bound writes to bpf_sk_lookup */
|
||||
{
|
||||
|
@ -69,6 +69,7 @@
|
||||
.fixup_map_array_48b = { 1 },
|
||||
.result = REJECT,
|
||||
.errstr = "R1 min value is outside of the allowed memory range",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"direct map access, write test 7",
|
||||
@ -195,6 +196,7 @@
|
||||
.fixup_map_array_48b = { 1, 3 },
|
||||
.result = REJECT,
|
||||
.errstr = "invalid access to map value, value_size=48 off=47 size=2",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"direct map access, write test 17",
|
||||
@ -209,6 +211,7 @@
|
||||
.fixup_map_array_48b = { 1, 3 },
|
||||
.result = REJECT,
|
||||
.errstr = "invalid access to map value, value_size=48 off=47 size=2",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"direct map access, write test 18",
|
||||
|
@ -44,6 +44,7 @@
|
||||
.errstr_unpriv = "bpf_array access is allowed only to CAP_PERFMON and CAP_SYS_ADMIN",
|
||||
.result = REJECT,
|
||||
.errstr = "cannot access ptr member ops with moff 0 in struct bpf_map with off 1 size 4",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"bpf_map_ptr: read ops field accepted",
|
||||
|
@ -31,4 +31,5 @@
|
||||
.fixup_map_hash_8b = { 1, },
|
||||
.prog_type = BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE,
|
||||
.errstr = "R6 invalid variable buffer offset: off=0, var_off=(0x0; 0xffffffff)",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
|
@ -675,6 +675,7 @@
|
||||
.prog_type = BPF_PROG_TYPE_SCHED_CLS,
|
||||
.result = REJECT,
|
||||
.errstr = "invalid mem access",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"reference tracking: use ptr from bpf_sk_fullsock() after release",
|
||||
@ -698,6 +699,7 @@
|
||||
.prog_type = BPF_PROG_TYPE_SCHED_CLS,
|
||||
.result = REJECT,
|
||||
.errstr = "invalid mem access",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"reference tracking: use ptr from bpf_sk_fullsock(tp) after release",
|
||||
@ -725,6 +727,7 @@
|
||||
.prog_type = BPF_PROG_TYPE_SCHED_CLS,
|
||||
.result = REJECT,
|
||||
.errstr = "invalid mem access",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"reference tracking: use sk after bpf_sk_release(tp)",
|
||||
@ -747,6 +750,7 @@
|
||||
.prog_type = BPF_PROG_TYPE_SCHED_CLS,
|
||||
.result = REJECT,
|
||||
.errstr = "invalid mem access",
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"reference tracking: use ptr from bpf_get_listener_sock() after bpf_sk_release(sk)",
|
||||
|
@ -21,6 +21,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc negative",
|
||||
@ -71,6 +72,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc src_reg negative",
|
||||
@ -97,6 +99,7 @@
|
||||
.result = REJECT,
|
||||
.errstr = "invalid access to map value, value_size=48 off=44 size=8",
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc and spill",
|
||||
@ -126,6 +129,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc and spill negative",
|
||||
@ -156,6 +160,7 @@
|
||||
.result = REJECT,
|
||||
.errstr = "invalid access to map value, value_size=48 off=48 size=8",
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc three regs",
|
||||
@ -182,6 +187,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc after call",
|
||||
@ -210,6 +216,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc in callee",
|
||||
@ -240,6 +247,7 @@
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
.flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
|
||||
},
|
||||
{
|
||||
"regalloc, spill, JEQ",
|
||||
|
@ -1,4 +1,4 @@
|
||||
#define BPF_SOCK_ADDR_STORE(field, off, res, err) \
|
||||
#define BPF_SOCK_ADDR_STORE(field, off, res, err, flgs) \
|
||||
{ \
|
||||
"wide store to bpf_sock_addr." #field "[" #off "]", \
|
||||
.insns = { \
|
||||
@ -11,31 +11,36 @@
|
||||
.prog_type = BPF_PROG_TYPE_CGROUP_SOCK_ADDR, \
|
||||
.expected_attach_type = BPF_CGROUP_UDP6_SENDMSG, \
|
||||
.errstr = err, \
|
||||
.flags = flgs, \
|
||||
}
|
||||
|
||||
/* user_ip6[0] is u64 aligned */
|
||||
BPF_SOCK_ADDR_STORE(user_ip6, 0, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_STORE(user_ip6, 1, REJECT,
|
||||
"invalid bpf_context access off=12 size=8"),
|
||||
"invalid bpf_context access off=12 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_STORE(user_ip6, 2, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_STORE(user_ip6, 3, REJECT,
|
||||
"invalid bpf_context access off=20 size=8"),
|
||||
"invalid bpf_context access off=20 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
|
||||
/* msg_src_ip6[0] is _not_ u64 aligned */
|
||||
BPF_SOCK_ADDR_STORE(msg_src_ip6, 0, REJECT,
|
||||
"invalid bpf_context access off=44 size=8"),
|
||||
"invalid bpf_context access off=44 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_STORE(msg_src_ip6, 1, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_STORE(msg_src_ip6, 2, REJECT,
|
||||
"invalid bpf_context access off=52 size=8"),
|
||||
"invalid bpf_context access off=52 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_STORE(msg_src_ip6, 3, REJECT,
|
||||
"invalid bpf_context access off=56 size=8"),
|
||||
"invalid bpf_context access off=56 size=8", 0),
|
||||
|
||||
#undef BPF_SOCK_ADDR_STORE
|
||||
|
||||
#define BPF_SOCK_ADDR_LOAD(field, off, res, err) \
|
||||
#define BPF_SOCK_ADDR_LOAD(field, off, res, err, flgs) \
|
||||
{ \
|
||||
"wide load from bpf_sock_addr." #field "[" #off "]", \
|
||||
.insns = { \
|
||||
@ -48,26 +53,31 @@ BPF_SOCK_ADDR_STORE(msg_src_ip6, 3, REJECT,
|
||||
.prog_type = BPF_PROG_TYPE_CGROUP_SOCK_ADDR, \
|
||||
.expected_attach_type = BPF_CGROUP_UDP6_SENDMSG, \
|
||||
.errstr = err, \
|
||||
.flags = flgs, \
|
||||
}
|
||||
|
||||
/* user_ip6[0] is u64 aligned */
|
||||
BPF_SOCK_ADDR_LOAD(user_ip6, 0, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_LOAD(user_ip6, 1, REJECT,
|
||||
"invalid bpf_context access off=12 size=8"),
|
||||
"invalid bpf_context access off=12 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_LOAD(user_ip6, 2, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_LOAD(user_ip6, 3, REJECT,
|
||||
"invalid bpf_context access off=20 size=8"),
|
||||
"invalid bpf_context access off=20 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
|
||||
/* msg_src_ip6[0] is _not_ u64 aligned */
|
||||
BPF_SOCK_ADDR_LOAD(msg_src_ip6, 0, REJECT,
|
||||
"invalid bpf_context access off=44 size=8"),
|
||||
"invalid bpf_context access off=44 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_LOAD(msg_src_ip6, 1, ACCEPT,
|
||||
NULL),
|
||||
NULL, 0),
|
||||
BPF_SOCK_ADDR_LOAD(msg_src_ip6, 2, REJECT,
|
||||
"invalid bpf_context access off=52 size=8"),
|
||||
"invalid bpf_context access off=52 size=8",
|
||||
F_NEEDS_EFFICIENT_UNALIGNED_ACCESS),
|
||||
BPF_SOCK_ADDR_LOAD(msg_src_ip6, 3, REJECT,
|
||||
"invalid bpf_context access off=56 size=8"),
|
||||
"invalid bpf_context access off=56 size=8", 0),
|
||||
|
||||
#undef BPF_SOCK_ADDR_LOAD
|
||||
|
Loading…
Reference in New Issue
Block a user