bpf/verifier/basic_stack.c

0001 {
0002     "stack out of bounds",
0003     .insns = {
0004     BPF_ST_MEM(BPF_DW, BPF_REG_10, 8, 0),
0005     BPF_EXIT_INSN(),
0006     },
0007     .errstr = "invalid write to stack",
0008     .result = REJECT,
0009 },
0010 {
0011     "uninitialized stack1",
0012     .insns = {
0013     BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
0014     BPF_ALU64_IMM(BPF_ADD, BPF_REG_2, -8),
0015     BPF_LD_MAP_FD(BPF_REG_1, 0),
0016     BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0, BPF_FUNC_map_lookup_elem),
0017     BPF_EXIT_INSN(),
0018     },
0019     .fixup_map_hash_8b = { 2 },
0020     .errstr = "invalid indirect read from stack",
0021     .result = REJECT,
0022 },
0023 {
0024     "uninitialized stack2",
0025     .insns = {
0026     BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
0027     BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_2, -8),
0028     BPF_EXIT_INSN(),
0029     },
0030     .errstr = "invalid read from stack",
0031     .result = REJECT,
0032 },
0033 {
0034     "invalid fp arithmetic",
0035     /* If this gets ever changed, make sure JITs can deal with it. */
0036     .insns = {
0037     BPF_MOV64_IMM(BPF_REG_0, 0),
0038     BPF_MOV64_REG(BPF_REG_1, BPF_REG_10),
0039     BPF_ALU64_IMM(BPF_SUB, BPF_REG_1, 8),
0040     BPF_STX_MEM(BPF_DW, BPF_REG_1, BPF_REG_0, 0),
0041     BPF_EXIT_INSN(),
0042     },
0043     .errstr = "R1 subtraction from stack pointer",
0044     .result = REJECT,
0045 },
0046 {
0047     "non-invalid fp arithmetic",
0048     .insns = {
0049     BPF_MOV64_IMM(BPF_REG_0, 0),
0050     BPF_STX_MEM(BPF_DW, BPF_REG_10, BPF_REG_0, -8),
0051     BPF_EXIT_INSN(),
0052     },
0053     .result = ACCEPT,
0054 },
0055 {
0056     "misaligned read from stack",
0057     .insns = {
0058     BPF_MOV64_REG(BPF_REG_2, BPF_REG_10),
0059     BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_2, -4),
0060     BPF_EXIT_INSN(),
0061     },
0062     .errstr = "misaligned stack access",
0063     .result = REJECT,
0064 },