0001
0002
0003
0004 #include <test_progs.h>
0005 #include "dynptr_fail.skel.h"
0006 #include "dynptr_success.skel.h"
0007
0008 static size_t log_buf_sz = 1048576;
0009 static char obj_log_buf[1048576];
0010
0011 static struct {
0012 const char *prog_name;
0013 const char *expected_err_msg;
0014 } dynptr_tests[] = {
0015
0016 {"ringbuf_missing_release1", "Unreleased reference id=1"},
0017 {"ringbuf_missing_release2", "Unreleased reference id=2"},
0018 {"ringbuf_missing_release_callback", "Unreleased reference id"},
0019 {"use_after_invalid", "Expected an initialized dynptr as arg #3"},
0020 {"ringbuf_invalid_api", "type=mem expected=alloc_mem"},
0021 {"add_dynptr_to_map1", "invalid indirect read from stack"},
0022 {"add_dynptr_to_map2", "invalid indirect read from stack"},
0023 {"data_slice_out_of_bounds_ringbuf", "value is outside of the allowed memory range"},
0024 {"data_slice_out_of_bounds_map_value", "value is outside of the allowed memory range"},
0025 {"data_slice_use_after_release", "invalid mem access 'scalar'"},
0026 {"data_slice_missing_null_check1", "invalid mem access 'mem_or_null'"},
0027 {"data_slice_missing_null_check2", "invalid mem access 'mem_or_null'"},
0028 {"invalid_helper1", "invalid indirect read from stack"},
0029 {"invalid_helper2", "Expected an initialized dynptr as arg #3"},
0030 {"invalid_write1", "Expected an initialized dynptr as arg #1"},
0031 {"invalid_write2", "Expected an initialized dynptr as arg #3"},
0032 {"invalid_write3", "Expected an initialized ringbuf dynptr as arg #1"},
0033 {"invalid_write4", "arg 1 is an unacquired reference"},
0034 {"invalid_read1", "invalid read from stack"},
0035 {"invalid_read2", "cannot pass in dynptr at an offset"},
0036 {"invalid_read3", "invalid read from stack"},
0037 {"invalid_read4", "invalid read from stack"},
0038 {"invalid_offset", "invalid write to stack"},
0039 {"global", "type=map_value expected=fp"},
0040 {"release_twice", "arg 1 is an unacquired reference"},
0041 {"release_twice_callback", "arg 1 is an unacquired reference"},
0042 {"dynptr_from_mem_invalid_api",
0043 "Unsupported reg type fp for bpf_dynptr_from_mem data"},
0044
0045
0046 {"test_read_write", NULL},
0047 {"test_data_slice", NULL},
0048 {"test_ringbuf", NULL},
0049 };
0050
0051 static void verify_fail(const char *prog_name, const char *expected_err_msg)
0052 {
0053 LIBBPF_OPTS(bpf_object_open_opts, opts);
0054 struct bpf_program *prog;
0055 struct dynptr_fail *skel;
0056 int err;
0057
0058 opts.kernel_log_buf = obj_log_buf;
0059 opts.kernel_log_size = log_buf_sz;
0060 opts.kernel_log_level = 1;
0061
0062 skel = dynptr_fail__open_opts(&opts);
0063 if (!ASSERT_OK_PTR(skel, "dynptr_fail__open_opts"))
0064 goto cleanup;
0065
0066 prog = bpf_object__find_program_by_name(skel->obj, prog_name);
0067 if (!ASSERT_OK_PTR(prog, "bpf_object__find_program_by_name"))
0068 goto cleanup;
0069
0070 bpf_program__set_autoload(prog, true);
0071
0072 bpf_map__set_max_entries(skel->maps.ringbuf, getpagesize());
0073
0074 err = dynptr_fail__load(skel);
0075 if (!ASSERT_ERR(err, "unexpected load success"))
0076 goto cleanup;
0077
0078 if (!ASSERT_OK_PTR(strstr(obj_log_buf, expected_err_msg), "expected_err_msg")) {
0079 fprintf(stderr, "Expected err_msg: %s\n", expected_err_msg);
0080 fprintf(stderr, "Verifier output: %s\n", obj_log_buf);
0081 }
0082
0083 cleanup:
0084 dynptr_fail__destroy(skel);
0085 }
0086
0087 static void verify_success(const char *prog_name)
0088 {
0089 struct dynptr_success *skel;
0090 struct bpf_program *prog;
0091 struct bpf_link *link;
0092
0093 skel = dynptr_success__open();
0094 if (!ASSERT_OK_PTR(skel, "dynptr_success__open"))
0095 return;
0096
0097 skel->bss->pid = getpid();
0098
0099 bpf_map__set_max_entries(skel->maps.ringbuf, getpagesize());
0100
0101 dynptr_success__load(skel);
0102 if (!ASSERT_OK_PTR(skel, "dynptr_success__load"))
0103 goto cleanup;
0104
0105 prog = bpf_object__find_program_by_name(skel->obj, prog_name);
0106 if (!ASSERT_OK_PTR(prog, "bpf_object__find_program_by_name"))
0107 goto cleanup;
0108
0109 link = bpf_program__attach(prog);
0110 if (!ASSERT_OK_PTR(link, "bpf_program__attach"))
0111 goto cleanup;
0112
0113 usleep(1);
0114
0115 ASSERT_EQ(skel->bss->err, 0, "err");
0116
0117 bpf_link__destroy(link);
0118
0119 cleanup:
0120 dynptr_success__destroy(skel);
0121 }
0122
0123 void test_dynptr(void)
0124 {
0125 int i;
0126
0127 for (i = 0; i < ARRAY_SIZE(dynptr_tests); i++) {
0128 if (!test__start_subtest(dynptr_tests[i].prog_name))
0129 continue;
0130
0131 if (dynptr_tests[i].expected_err_msg)
0132 verify_fail(dynptr_tests[i].prog_name,
0133 dynptr_tests[i].expected_err_msg);
0134 else
0135 verify_success(dynptr_tests[i].prog_name);
0136 }
0137 }