Eduard Zingerman ac0aaef0aa selftests/bpf: BPF_PSEUDO_FUNC reference to the main program ...

Add a test case for a BPF_PSEUDO_FUNC load instruction that references
the entry function of the program it belongs to. W/o the previous
patch the verifier accepts this program thus allowing a runtime call
at a bogus address. See previous patch for detailed description.

Main function needs to be marked with BTF_FUNC_STATIC for the test to
trigger the bug, the patch uses test_verifier harness instead of
test_prog because libbpf has no way to convey this.

Reported-by: Nicholas Carlini <[email protected]>
Suggested-by: Nicholas Carlini <[email protected]>
Signed-off-by: Eduard Zingerman <[email protected]>
Link: https://lore.kernel.org/r/[email protected]
Signed-off-by: Alexei Starovoitov <[email protected]>

2026-09-02 17:50:09 -07:00

..

.gitignore

…

atomic_and.c

…

atomic_bounds.c

…

atomic_cmpxchg.c

…

atomic_fetch_add.c

…

atomic_fetch.c

…

atomic_invalid.c

…

atomic_or.c

…

atomic_xchg.c

…

atomic_xor.c

…

basic_call.c

…

basic_instr.c

…

basic_stx_ldx.c

…

basic.c

…

bpf_loop_inline.c

…

bpf_st_mem.c

bpf: disable and remove registers chain based liveness

2025-09-19 09:27:23 -07:00

calls.c

selftests/bpf: Test stack depth stats without BTF subprog names

2026-08-12 17:45:07 -07:00

ctx_sk_lookup.c

…

ctx_skb.c

…

dead_code.c

bpf: Fall back to nospec for Spectre v1

2025-06-09 20:11:10 -07:00

direct_value_access.c

bpf/verifier: Do not limit maximum direct offset into arena map

2025-12-16 10:42:55 -08:00

event_output.c

…

jit.c

…

jmp32.c

bpf: Fall back to nospec for Spectre v1

2025-06-09 20:11:10 -07:00

jset.c

bpf: Fall back to nospec for Spectre v1

2025-06-09 20:11:10 -07:00

jump.c

…

junk_insn.c

bpf: Move checks for reserved fields out of the main pass

2026-04-11 15:24:41 -07:00

ld_abs.c

…

ld_dw.c

…

ld_imm64.c

…

map_kptr.c

…

perf_event_sample_period.c

…

precise.c

bpf: collect only live registers in linked regs

2026-03-06 21:49:40 -08:00

pseudo_func.c

selftests/bpf: BPF_PSEUDO_FUNC reference to the main program

2026-09-02 17:50:09 -07:00

scale.c

…

sleepable.c

selftests/bpf: Add tests for sleepable tracepoint programs

2026-04-22 22:44:30 +02:00

wide_access.c

…