Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next
Daniel Borkmann says: ==================== pull-request: bpf-next 2020-10-15 The main changes are: 1) Fix register equivalence tracking in verifier, from Alexei Starovoitov. 2) Fix sockmap error path to not call bpf_prog_put() with NULL, from Alex Dewar. 3) Fix sockmap to add locking annotations to iterator, from Lorenz Bauer. 4) Fix tcp_hdr_options test to use loopback address, from Martin KaFai Lau. ==================== Signed-off-by: Jakub Kicinski <kuba@kernel.org>
This commit is contained in:
@@ -15,7 +15,7 @@
|
||||
#include "test_tcp_hdr_options.skel.h"
|
||||
#include "test_misc_tcp_hdr_options.skel.h"
|
||||
|
||||
#define LO_ADDR6 "::eB9F"
|
||||
#define LO_ADDR6 "::1"
|
||||
#define CG_NAME "/tcpbpf-hdr-opt-test"
|
||||
|
||||
struct bpf_test_option exp_passive_estab_in;
|
||||
@@ -40,27 +40,6 @@ struct sk_fds {
|
||||
int active_lport;
|
||||
};
|
||||
|
||||
static int add_lo_addr(void)
|
||||
{
|
||||
char ip_addr_cmd[256];
|
||||
int cmdlen;
|
||||
|
||||
cmdlen = snprintf(ip_addr_cmd, sizeof(ip_addr_cmd),
|
||||
"ip -6 addr add %s/128 dev lo scope host",
|
||||
LO_ADDR6);
|
||||
|
||||
if (CHECK(cmdlen >= sizeof(ip_addr_cmd), "compile ip cmd",
|
||||
"failed to add host addr %s to lo. ip cmdlen is too long\n",
|
||||
LO_ADDR6))
|
||||
return -1;
|
||||
|
||||
if (CHECK(system(ip_addr_cmd), "run ip cmd",
|
||||
"failed to add host addr %s to lo\n", LO_ADDR6))
|
||||
return -1;
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
static int create_netns(void)
|
||||
{
|
||||
if (CHECK(unshare(CLONE_NEWNET), "create netns",
|
||||
@@ -72,9 +51,6 @@ static int create_netns(void)
|
||||
"failed to bring lo link up\n"))
|
||||
return -1;
|
||||
|
||||
if (add_lo_addr())
|
||||
return -1;
|
||||
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -16,7 +16,7 @@
|
||||
#define BPF_PROG_TEST_TCP_HDR_OPTIONS
|
||||
#include "test_tcp_hdr_options.h"
|
||||
|
||||
__u16 last_addr16_n = __bpf_htons(0xeB9F);
|
||||
__u16 last_addr16_n = __bpf_htons(1);
|
||||
__u16 active_lport_n = 0;
|
||||
__u16 active_lport_h = 0;
|
||||
__u16 passive_lport_n = 0;
|
||||
|
||||
@@ -241,3 +241,29 @@
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
},
|
||||
{
|
||||
"regalloc, spill, JEQ",
|
||||
.insns = {
|
||||
BPF_MOV64_REG(BPF_REG_6, BPF_REG_1),
|
||||
BPF_ST_MEM(BPF_DW, BPF_REG_10, -8, 0),
|
||||
BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
|
||||
BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
|
||||
BPF_LD_MAP_FD(BPF_REG_1, 0),
|
||||
BPF_EMIT_CALL(BPF_FUNC_map_lookup_elem),
|
||||
BPF_STX_MEM(BPF_DW, BPF_REG_10, BPF_REG_0, -8), /* spill r0 */
|
||||
BPF_JMP_IMM(BPF_JEQ, BPF_REG_0, 0, 0),
|
||||
/* The verifier will walk the rest twice with r0 == 0 and r0 == map_value */
|
||||
BPF_EMIT_CALL(BPF_FUNC_get_prandom_u32),
|
||||
BPF_MOV64_REG(BPF_REG_2, BPF_REG_0),
|
||||
BPF_JMP_IMM(BPF_JEQ, BPF_REG_2, 20, 0),
|
||||
/* The verifier will walk the rest two more times with r0 == 20 and r0 == unknown */
|
||||
BPF_LDX_MEM(BPF_DW, BPF_REG_3, BPF_REG_10, -8), /* fill r3 with map_value */
|
||||
BPF_JMP_IMM(BPF_JEQ, BPF_REG_3, 0, 1), /* skip ldx if map_value == NULL */
|
||||
/* Buggy verifier will think that r3 == 20 here */
|
||||
BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_3, 0), /* read from map_value */
|
||||
BPF_EXIT_INSN(),
|
||||
},
|
||||
.fixup_map_hash_48b = { 4 },
|
||||
.result = ACCEPT,
|
||||
.prog_type = BPF_PROG_TYPE_TRACEPOINT,
|
||||
},
|
||||
|
||||
Reference in New Issue
Block a user