tools/testing/selftests/bpf/verifier/value.c

   1 {
   2         "map element value store of cleared call register",
   3         .insns = {
   4         BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
   5         BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
   6         BPF_ST_MEM(BPF_DW, BPF_REG_2, 0, 0),
   7         BPF_LD_MAP_FD(BPF_REG_1, 0),
   8         BPF_EMIT_CALL(BPF_FUNC_map_lookup_elem),
   9         BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 1),
  10         BPF_STX_MEM(BPF_DW, BPF_REG_0, BPF_REG_1, 0),
  11         BPF_EXIT_INSN(),
  12         },
  13         .fixup_map_hash_48b = { 3 },
  14         .errstr_unpriv = "R1 !read_ok",
  15         .errstr = "R1 !read_ok",
  16         .result = REJECT,
  17         .result_unpriv = REJECT,
  18 },
  19 {
  20         "map element value with unaligned store",
  21         .insns = {
  22         BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
  23         BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
  24         BPF_ST_MEM(BPF_DW, BPF_REG_2, 0, 0),
  25         BPF_LD_MAP_FD(BPF_REG_1, 0),
  26         BPF_EMIT_CALL(BPF_FUNC_map_lookup_elem),
  27         BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 17),
  28         BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 3),
  29         BPF_ST_MEM(BPF_DW, BPF_REG_0, 0, 42),
  30         BPF_ST_MEM(BPF_DW, BPF_REG_0, 2, 43),
  31         BPF_ST_MEM(BPF_DW, BPF_REG_0, -2, 44),
  32         BPF_MOV64_REG(BPF_REG_8, BPF_REG_0),
  33         BPF_ST_MEM(BPF_DW, BPF_REG_8, 0, 32),
  34         BPF_ST_MEM(BPF_DW, BPF_REG_8, 2, 33),
  35         BPF_ST_MEM(BPF_DW, BPF_REG_8, -2, 34),
  36         BPF_ALU64_IMM(BPF_ADD, BPF_REG_8, 5),
  37         BPF_ST_MEM(BPF_DW, BPF_REG_8, 0, 22),
  38         BPF_ST_MEM(BPF_DW, BPF_REG_8, 4, 23),
  39         BPF_ST_MEM(BPF_DW, BPF_REG_8, -7, 24),
  40         BPF_MOV64_REG(BPF_REG_7, BPF_REG_8),
  41         BPF_ALU64_IMM(BPF_ADD, BPF_REG_7, 3),
  42         BPF_ST_MEM(BPF_DW, BPF_REG_7, 0, 22),
  43         BPF_ST_MEM(BPF_DW, BPF_REG_7, 4, 23),
  44         BPF_ST_MEM(BPF_DW, BPF_REG_7, -4, 24),
  45         BPF_EXIT_INSN(),
  46         },
  47         .fixup_map_hash_48b = { 3 },
  48         .errstr_unpriv = "R0 leaks addr",
  49         .result = ACCEPT,
  50         .result_unpriv = REJECT,
  51         .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
  52 },
  53 {
  54         "map element value with unaligned load",
  55         .insns = {
  56         BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
  57         BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
  58         BPF_ST_MEM(BPF_DW, BPF_REG_2, 0, 0),
  59         BPF_LD_MAP_FD(BPF_REG_1, 0),
  60         BPF_EMIT_CALL(BPF_FUNC_map_lookup_elem),
  61         BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 11),
  62         BPF_LDX_MEM(BPF_W, BPF_REG_1, BPF_REG_0, 0),
  63         BPF_JMP_IMM(BPF_JGE, BPF_REG_1, MAX_ENTRIES, 9),
  64         BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 3),
  65         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_0, 0),
  66         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_0, 2),
  67         BPF_MOV64_REG(BPF_REG_8, BPF_REG_0),
  68         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_8, 0),
  69         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_8, 2),
  70         BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 5),
  71         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_0, 0),
  72         BPF_LDX_MEM(BPF_DW, BPF_REG_7, BPF_REG_0, 4),
  73         BPF_EXIT_INSN(),
  74         },
  75         .fixup_map_hash_48b = { 3 },
  76         .errstr_unpriv = "R0 leaks addr",
  77         .result = ACCEPT,
  78         .result_unpriv = REJECT,
  79         .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
  80 },
  81 {
  82         "map element value is preserved across register spilling",
  83         .insns = {
  84         BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
  85         BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
  86         BPF_ST_MEM(BPF_DW, BPF_REG_2, 0, 0),
  87         BPF_LD_MAP_FD(BPF_REG_1, 0),
  88         BPF_EMIT_CALL(BPF_FUNC_map_lookup_elem),
  89         BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 7),
  90         BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, offsetof(struct test_val, foo)),
  91         BPF_ST_MEM(BPF_DW, BPF_REG_0, 0, 42),
  92         BPF_MOV64_REG(BPF_REG_1, BPF_REG_10),
  93         BPF_ALU64_IMM(BPF_ADD, BPF_REG_1, -184),
  94         BPF_STX_MEM(BPF_DW, BPF_REG_1, BPF_REG_0, 0),
  95         BPF_LDX_MEM(BPF_DW, BPF_REG_3, BPF_REG_1, 0),
  96         BPF_ST_MEM(BPF_DW, BPF_REG_3, 0, 42),
  97         BPF_EXIT_INSN(),
  98         },
  99         .fixup_map_hash_48b = { 3 },
 100         .errstr_unpriv = "R0 leaks addr",
 101         .result = ACCEPT,
 102         .result_unpriv = REJECT,
 103         .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
 104 },