From: Edward Cree <ecree@solarflare.com>
To: davem <davem@davemloft.net>
Cc: <netdev@vger.kernel.org>, Jann Horn <jannh@google.com>,
Alexei Starovoitov <ast@kernel.org>,
Daniel Borkmann <daniel@iogearbox.net>
Subject: [PATCH net 2/2] selftests/bpf: Add a test for shifts of values that might be negative
Date: Tue, 5 Dec 2017 19:15:57 +0000 [thread overview]
Message-ID: <2ed58e2e-40b7-a57b-a784-33d441b13a42@solarflare.com> (raw)
In-Reply-To: <7c4a1470-3cf1-ceae-c99f-6591f1882063@solarflare.com>
Signed-off-by: Edward Cree <ecree@solarflare.com>
---
tools/testing/selftests/bpf/test_align.c | 39 ++++++++++++++++++++++++++++++++
1 file changed, 39 insertions(+)
diff --git a/tools/testing/selftests/bpf/test_align.c b/tools/testing/selftests/bpf/test_align.c
index 8591c89c0828..24c6757b4c51 100644
--- a/tools/testing/selftests/bpf/test_align.c
+++ b/tools/testing/selftests/bpf/test_align.c
@@ -601,6 +601,45 @@ static struct bpf_align_test tests[] = {
{20, "R5=pkt(id=2,off=0,r=4,umin_value=2,umax_value=1082,var_off=(0x2; 0x7fc))"},
},
},
+ {
+ .descr = "unknown shift negative",
+ /* This isn't really a test of the alignment code, rather of the
+ * signed min/max value handling, but it makes use of the
+ * register-state-extracting code in do_test_single(), which
+ * test_verifier.c doesn't have.
+ */
+ .insns = {
+ LOAD_UNKNOWN(BPF_REG_3),
+ BPF_ALU64_IMM(BPF_SUB, BPF_REG_3, 0xff),
+ BPF_ALU64_IMM(BPF_LSH, BPF_REG_3, 1),
+ LOAD_UNKNOWN(BPF_REG_4),
+ BPF_ALU64_IMM(BPF_SUB, BPF_REG_4, 0xff),
+ BPF_MOV64_REG(BPF_REG_5, BPF_REG_4),
+ BPF_ALU64_IMM(BPF_RSH, BPF_REG_4, 1),
+ BPF_ALU64_IMM(BPF_SUB, BPF_REG_5, 1),
+ BPF_ALU64_IMM(BPF_RSH, BPF_REG_5, 1),
+ BPF_MOV64_IMM(BPF_REG_0, 0),
+ BPF_EXIT_INSN(),
+ },
+ .prog_type = BPF_PROG_TYPE_SCHED_CLS,
+ .matches = {
+ {7, "R0=pkt(id=0,off=8,r=8,imm=0)"},
+ {7, "R3=inv(id=0,umax_value=255,var_off=(0x0; 0xff))"},
+ {8, "R3=inv(id=0,smin_value=-255,smax_value=0)"},
+ /* All the verifier knows is, it's even. While we could
+ * conclude something tighter (the sign bit does not
+ * change), the verifier doesn't bother right now.
+ */
+ {9, "R3=inv(id=0,smax_value=9223372036854775806,umax_value=18446744073709551614,var_off=(0x0; 0xfffffffffffffffe))"},
+ {16, "R3=pkt_end(id=0,off=0,imm=0)"},
+ {16, "R4=inv(id=0,umax_value=255,var_off=(0x0; 0xff))"},
+ {17, "R4=inv(id=0,smin_value=-255,smax_value=0)"},
+ /* both 0 and 0x7f...fff are possible */
+ {19, "R4=inv(id=0,umax_value=9223372036854775807,var_off=(0x0; 0x7fffffffffffffff))"},
+ {20, "R5=inv(id=0,umin_value=18446744073709551360,var_off=(0xffffffffffffff00; 0xff))"},
+ {21, "R5=inv(id=0,umin_value=9223372036854775680,umax_value=9223372036854775807,var_off=(0x7fffffffffffff80; 0x7f))"},
+ },
+ },
};
static int probe_filter_length(const struct bpf_insn *fp)
next prev parent reply other threads:[~2017-12-05 19:16 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-12-05 19:13 [PATCH net 0/2] bpf/verifier: fix bounds calculation on BPF_RSH Edward Cree
2017-12-05 19:15 ` [PATCH net 1/2] " Edward Cree
2017-12-05 19:35 ` Jann Horn
2017-12-05 19:44 ` Alexei Starovoitov
2017-12-07 1:47 ` Alexei Starovoitov
2017-12-05 19:15 ` Edward Cree [this message]
2017-12-05 19:40 ` [PATCH net 2/2] selftests/bpf: Add a test for shifts of values that might be negative Alexei Starovoitov
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=2ed58e2e-40b7-a57b-a784-33d441b13a42@solarflare.com \
--to=ecree@solarflare.com \
--cc=ast@kernel.org \
--cc=daniel@iogearbox.net \
--cc=davem@davemloft.net \
--cc=jannh@google.com \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox