Loading...
1{
2 "direct map access, write test 1",
3 .insns = {
4 BPF_MOV64_IMM(BPF_REG_0, 1),
5 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
6 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
7 BPF_EXIT_INSN(),
8 },
9 .fixup_map_array_48b = { 1 },
10 .result = ACCEPT,
11 .retval = 1,
12},
13{
14 "direct map access, write test 2",
15 .insns = {
16 BPF_MOV64_IMM(BPF_REG_0, 1),
17 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 8),
18 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
19 BPF_EXIT_INSN(),
20 },
21 .fixup_map_array_48b = { 1 },
22 .result = ACCEPT,
23 .retval = 1,
24},
25{
26 "direct map access, write test 3",
27 .insns = {
28 BPF_MOV64_IMM(BPF_REG_0, 1),
29 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 8),
30 BPF_ST_MEM(BPF_DW, BPF_REG_1, 8, 4242),
31 BPF_EXIT_INSN(),
32 },
33 .fixup_map_array_48b = { 1 },
34 .result = ACCEPT,
35 .retval = 1,
36},
37{
38 "direct map access, write test 4",
39 .insns = {
40 BPF_MOV64_IMM(BPF_REG_0, 1),
41 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 40),
42 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
43 BPF_EXIT_INSN(),
44 },
45 .fixup_map_array_48b = { 1 },
46 .result = ACCEPT,
47 .retval = 1,
48},
49{
50 "direct map access, write test 5",
51 .insns = {
52 BPF_MOV64_IMM(BPF_REG_0, 1),
53 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 32),
54 BPF_ST_MEM(BPF_DW, BPF_REG_1, 8, 4242),
55 BPF_EXIT_INSN(),
56 },
57 .fixup_map_array_48b = { 1 },
58 .result = ACCEPT,
59 .retval = 1,
60},
61{
62 "direct map access, write test 6",
63 .insns = {
64 BPF_MOV64_IMM(BPF_REG_0, 1),
65 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 40),
66 BPF_ST_MEM(BPF_DW, BPF_REG_1, 4, 4242),
67 BPF_EXIT_INSN(),
68 },
69 .fixup_map_array_48b = { 1 },
70 .result = REJECT,
71 .errstr = "R1 min value is outside of the allowed memory range",
72 .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
73},
74{
75 "direct map access, write test 7",
76 .insns = {
77 BPF_MOV64_IMM(BPF_REG_0, 1),
78 BPF_LD_MAP_VALUE(BPF_REG_1, 0, -1),
79 BPF_ST_MEM(BPF_DW, BPF_REG_1, 4, 4242),
80 BPF_EXIT_INSN(),
81 },
82 .fixup_map_array_48b = { 1 },
83 .result = REJECT,
84 .errstr = "direct value offset of 4294967295 is not allowed",
85},
86{
87 "direct map access, write test 8",
88 .insns = {
89 BPF_MOV64_IMM(BPF_REG_0, 1),
90 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 1),
91 BPF_ST_MEM(BPF_DW, BPF_REG_1, -1, 4242),
92 BPF_EXIT_INSN(),
93 },
94 .fixup_map_array_48b = { 1 },
95 .result = ACCEPT,
96 .retval = 1,
97},
98{
99 "direct map access, write test 9",
100 .insns = {
101 BPF_MOV64_IMM(BPF_REG_0, 1),
102 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 48),
103 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
104 BPF_EXIT_INSN(),
105 },
106 .fixup_map_array_48b = { 1 },
107 .result = REJECT,
108 .errstr = "invalid access to map value pointer",
109},
110{
111 "direct map access, write test 10",
112 .insns = {
113 BPF_MOV64_IMM(BPF_REG_0, 1),
114 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 47),
115 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
116 BPF_EXIT_INSN(),
117 },
118 .fixup_map_array_48b = { 1 },
119 .result = ACCEPT,
120 .retval = 1,
121},
122{
123 "direct map access, write test 11",
124 .insns = {
125 BPF_MOV64_IMM(BPF_REG_0, 1),
126 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 48),
127 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
128 BPF_EXIT_INSN(),
129 },
130 .fixup_map_array_48b = { 1 },
131 .result = REJECT,
132 .errstr = "invalid access to map value pointer",
133},
134{
135 "direct map access, write test 12",
136 .insns = {
137 BPF_MOV64_IMM(BPF_REG_0, 1),
138 BPF_LD_MAP_VALUE(BPF_REG_1, 0, (1<<29)),
139 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
140 BPF_EXIT_INSN(),
141 },
142 .fixup_map_array_48b = { 1 },
143 .result = REJECT,
144 .errstr = "direct value offset of 536870912 is not allowed",
145},
146{
147 "direct map access, write test 13",
148 .insns = {
149 BPF_MOV64_IMM(BPF_REG_0, 1),
150 BPF_LD_MAP_VALUE(BPF_REG_1, 0, (1<<29)-1),
151 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
152 BPF_EXIT_INSN(),
153 },
154 .fixup_map_array_48b = { 1 },
155 .result = REJECT,
156 .errstr = "invalid access to map value pointer, value_size=48 off=536870911",
157},
158{
159 "direct map access, write test 14",
160 .insns = {
161 BPF_MOV64_IMM(BPF_REG_0, 1),
162 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 47),
163 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
164 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
165 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_1, 0),
166 BPF_EXIT_INSN(),
167 },
168 .fixup_map_array_48b = { 1, 3 },
169 .result = ACCEPT,
170 .retval = 0xff,
171},
172{
173 "direct map access, write test 15",
174 .insns = {
175 BPF_MOV64_IMM(BPF_REG_0, 1),
176 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
177 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
178 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
179 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
180 BPF_EXIT_INSN(),
181 },
182 .fixup_map_array_48b = { 1, 3 },
183 .result = ACCEPT,
184 .retval = 0xffff,
185},
186{
187 "direct map access, write test 16",
188 .insns = {
189 BPF_MOV64_IMM(BPF_REG_0, 1),
190 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
191 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 47),
192 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
193 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
194 BPF_EXIT_INSN(),
195 },
196 .fixup_map_array_48b = { 1, 3 },
197 .result = REJECT,
198 .errstr = "invalid access to map value, value_size=48 off=47 size=2",
199 .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
200},
201{
202 "direct map access, write test 17",
203 .insns = {
204 BPF_MOV64_IMM(BPF_REG_0, 1),
205 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
206 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
207 BPF_ST_MEM(BPF_H, BPF_REG_2, 1, 0xffff),
208 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
209 BPF_EXIT_INSN(),
210 },
211 .fixup_map_array_48b = { 1, 3 },
212 .result = REJECT,
213 .errstr = "invalid access to map value, value_size=48 off=47 size=2",
214 .flags = F_NEEDS_EFFICIENT_UNALIGNED_ACCESS,
215},
216{
217 "direct map access, write test 18",
218 .insns = {
219 BPF_MOV64_IMM(BPF_REG_0, 1),
220 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
221 BPF_ST_MEM(BPF_H, BPF_REG_1, 0, 42),
222 BPF_EXIT_INSN(),
223 },
224 .fixup_map_array_small = { 1 },
225 .result = REJECT,
226 .errstr = "R1 min value is outside of the allowed memory range",
227},
228{
229 "direct map access, write test 19",
230 .insns = {
231 BPF_MOV64_IMM(BPF_REG_0, 1),
232 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
233 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 42),
234 BPF_EXIT_INSN(),
235 },
236 .fixup_map_array_small = { 1 },
237 .result = ACCEPT,
238 .retval = 1,
239},
240{
241 "direct map access, write test 20",
242 .insns = {
243 BPF_MOV64_IMM(BPF_REG_0, 1),
244 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 1),
245 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 42),
246 BPF_EXIT_INSN(),
247 },
248 .fixup_map_array_small = { 1 },
249 .result = REJECT,
250 .errstr = "invalid access to map value pointer",
251},
252{
253 "direct map access, invalid insn test 1",
254 .insns = {
255 BPF_MOV64_IMM(BPF_REG_0, 1),
256 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 0, 1, 0, 47),
257 BPF_EXIT_INSN(),
258 },
259 .fixup_map_array_48b = { 1 },
260 .result = REJECT,
261 .errstr = "invalid bpf_ld_imm64 insn",
262},
263{
264 "direct map access, invalid insn test 2",
265 .insns = {
266 BPF_MOV64_IMM(BPF_REG_0, 1),
267 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 1, 0, 0, 47),
268 BPF_EXIT_INSN(),
269 },
270 .fixup_map_array_48b = { 1 },
271 .result = REJECT,
272 .errstr = "BPF_LD_IMM64 uses reserved fields",
273},
274{
275 "direct map access, invalid insn test 3",
276 .insns = {
277 BPF_MOV64_IMM(BPF_REG_0, 1),
278 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, ~0, 0, 0, 47),
279 BPF_EXIT_INSN(),
280 },
281 .fixup_map_array_48b = { 1 },
282 .result = REJECT,
283 .errstr = "BPF_LD_IMM64 uses reserved fields",
284},
285{
286 "direct map access, invalid insn test 4",
287 .insns = {
288 BPF_MOV64_IMM(BPF_REG_0, 1),
289 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 0, ~0, 0, 47),
290 BPF_EXIT_INSN(),
291 },
292 .fixup_map_array_48b = { 1 },
293 .result = REJECT,
294 .errstr = "invalid bpf_ld_imm64 insn",
295},
296{
297 "direct map access, invalid insn test 5",
298 .insns = {
299 BPF_MOV64_IMM(BPF_REG_0, 1),
300 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, ~0, ~0, 0, 47),
301 BPF_EXIT_INSN(),
302 },
303 .fixup_map_array_48b = { 1 },
304 .result = REJECT,
305 .errstr = "invalid bpf_ld_imm64 insn",
306},
307{
308 "direct map access, invalid insn test 6",
309 .insns = {
310 BPF_MOV64_IMM(BPF_REG_0, 1),
311 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, ~0, 0, 0, 0),
312 BPF_EXIT_INSN(),
313 },
314 .fixup_map_array_48b = { 1 },
315 .result = REJECT,
316 .errstr = "BPF_LD_IMM64 uses reserved fields",
317},
318{
319 "direct map access, invalid insn test 7",
320 .insns = {
321 BPF_MOV64_IMM(BPF_REG_0, 1),
322 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, 0, ~0, 0, 0),
323 BPF_EXIT_INSN(),
324 },
325 .fixup_map_array_48b = { 1 },
326 .result = REJECT,
327 .errstr = "invalid bpf_ld_imm64 insn",
328},
329{
330 "direct map access, invalid insn test 8",
331 .insns = {
332 BPF_MOV64_IMM(BPF_REG_0, 1),
333 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, ~0, ~0, 0, 0),
334 BPF_EXIT_INSN(),
335 },
336 .fixup_map_array_48b = { 1 },
337 .result = REJECT,
338 .errstr = "invalid bpf_ld_imm64 insn",
339},
340{
341 "direct map access, invalid insn test 9",
342 .insns = {
343 BPF_MOV64_IMM(BPF_REG_0, 1),
344 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, 0, 0, 0, 47),
345 BPF_EXIT_INSN(),
346 },
347 .fixup_map_array_48b = { 1 },
348 .result = REJECT,
349 .errstr = "unrecognized bpf_ld_imm64 insn",
350},
1{
2 "direct map access, write test 1",
3 .insns = {
4 BPF_MOV64_IMM(BPF_REG_0, 1),
5 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
6 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
7 BPF_EXIT_INSN(),
8 },
9 .fixup_map_array_48b = { 1 },
10 .result = ACCEPT,
11 .retval = 1,
12},
13{
14 "direct map access, write test 2",
15 .insns = {
16 BPF_MOV64_IMM(BPF_REG_0, 1),
17 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 8),
18 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
19 BPF_EXIT_INSN(),
20 },
21 .fixup_map_array_48b = { 1 },
22 .result = ACCEPT,
23 .retval = 1,
24},
25{
26 "direct map access, write test 3",
27 .insns = {
28 BPF_MOV64_IMM(BPF_REG_0, 1),
29 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 8),
30 BPF_ST_MEM(BPF_DW, BPF_REG_1, 8, 4242),
31 BPF_EXIT_INSN(),
32 },
33 .fixup_map_array_48b = { 1 },
34 .result = ACCEPT,
35 .retval = 1,
36},
37{
38 "direct map access, write test 4",
39 .insns = {
40 BPF_MOV64_IMM(BPF_REG_0, 1),
41 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 40),
42 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
43 BPF_EXIT_INSN(),
44 },
45 .fixup_map_array_48b = { 1 },
46 .result = ACCEPT,
47 .retval = 1,
48},
49{
50 "direct map access, write test 5",
51 .insns = {
52 BPF_MOV64_IMM(BPF_REG_0, 1),
53 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 32),
54 BPF_ST_MEM(BPF_DW, BPF_REG_1, 8, 4242),
55 BPF_EXIT_INSN(),
56 },
57 .fixup_map_array_48b = { 1 },
58 .result = ACCEPT,
59 .retval = 1,
60},
61{
62 "direct map access, write test 6",
63 .insns = {
64 BPF_MOV64_IMM(BPF_REG_0, 1),
65 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 40),
66 BPF_ST_MEM(BPF_DW, BPF_REG_1, 4, 4242),
67 BPF_EXIT_INSN(),
68 },
69 .fixup_map_array_48b = { 1 },
70 .result = REJECT,
71 .errstr = "R1 min value is outside of the allowed memory range",
72},
73{
74 "direct map access, write test 7",
75 .insns = {
76 BPF_MOV64_IMM(BPF_REG_0, 1),
77 BPF_LD_MAP_VALUE(BPF_REG_1, 0, -1),
78 BPF_ST_MEM(BPF_DW, BPF_REG_1, 4, 4242),
79 BPF_EXIT_INSN(),
80 },
81 .fixup_map_array_48b = { 1 },
82 .result = REJECT,
83 .errstr = "direct value offset of 4294967295 is not allowed",
84},
85{
86 "direct map access, write test 8",
87 .insns = {
88 BPF_MOV64_IMM(BPF_REG_0, 1),
89 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 1),
90 BPF_ST_MEM(BPF_DW, BPF_REG_1, -1, 4242),
91 BPF_EXIT_INSN(),
92 },
93 .fixup_map_array_48b = { 1 },
94 .result = ACCEPT,
95 .retval = 1,
96},
97{
98 "direct map access, write test 9",
99 .insns = {
100 BPF_MOV64_IMM(BPF_REG_0, 1),
101 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 48),
102 BPF_ST_MEM(BPF_DW, BPF_REG_1, 0, 4242),
103 BPF_EXIT_INSN(),
104 },
105 .fixup_map_array_48b = { 1 },
106 .result = REJECT,
107 .errstr = "invalid access to map value pointer",
108},
109{
110 "direct map access, write test 10",
111 .insns = {
112 BPF_MOV64_IMM(BPF_REG_0, 1),
113 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 47),
114 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
115 BPF_EXIT_INSN(),
116 },
117 .fixup_map_array_48b = { 1 },
118 .result = ACCEPT,
119 .retval = 1,
120},
121{
122 "direct map access, write test 11",
123 .insns = {
124 BPF_MOV64_IMM(BPF_REG_0, 1),
125 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 48),
126 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
127 BPF_EXIT_INSN(),
128 },
129 .fixup_map_array_48b = { 1 },
130 .result = REJECT,
131 .errstr = "invalid access to map value pointer",
132},
133{
134 "direct map access, write test 12",
135 .insns = {
136 BPF_MOV64_IMM(BPF_REG_0, 1),
137 BPF_LD_MAP_VALUE(BPF_REG_1, 0, (1<<29)),
138 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
139 BPF_EXIT_INSN(),
140 },
141 .fixup_map_array_48b = { 1 },
142 .result = REJECT,
143 .errstr = "direct value offset of 536870912 is not allowed",
144},
145{
146 "direct map access, write test 13",
147 .insns = {
148 BPF_MOV64_IMM(BPF_REG_0, 1),
149 BPF_LD_MAP_VALUE(BPF_REG_1, 0, (1<<29)-1),
150 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 4),
151 BPF_EXIT_INSN(),
152 },
153 .fixup_map_array_48b = { 1 },
154 .result = REJECT,
155 .errstr = "invalid access to map value pointer, value_size=48 off=536870911",
156},
157{
158 "direct map access, write test 14",
159 .insns = {
160 BPF_MOV64_IMM(BPF_REG_0, 1),
161 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 47),
162 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
163 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
164 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_1, 0),
165 BPF_EXIT_INSN(),
166 },
167 .fixup_map_array_48b = { 1, 3 },
168 .result = ACCEPT,
169 .retval = 0xff,
170},
171{
172 "direct map access, write test 15",
173 .insns = {
174 BPF_MOV64_IMM(BPF_REG_0, 1),
175 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
176 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
177 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
178 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
179 BPF_EXIT_INSN(),
180 },
181 .fixup_map_array_48b = { 1, 3 },
182 .result = ACCEPT,
183 .retval = 0xffff,
184},
185{
186 "direct map access, write test 16",
187 .insns = {
188 BPF_MOV64_IMM(BPF_REG_0, 1),
189 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
190 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 47),
191 BPF_ST_MEM(BPF_H, BPF_REG_2, 0, 0xffff),
192 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
193 BPF_EXIT_INSN(),
194 },
195 .fixup_map_array_48b = { 1, 3 },
196 .result = REJECT,
197 .errstr = "invalid access to map value, value_size=48 off=47 size=2",
198},
199{
200 "direct map access, write test 17",
201 .insns = {
202 BPF_MOV64_IMM(BPF_REG_0, 1),
203 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 46),
204 BPF_LD_MAP_VALUE(BPF_REG_2, 0, 46),
205 BPF_ST_MEM(BPF_H, BPF_REG_2, 1, 0xffff),
206 BPF_LDX_MEM(BPF_H, BPF_REG_0, BPF_REG_1, 0),
207 BPF_EXIT_INSN(),
208 },
209 .fixup_map_array_48b = { 1, 3 },
210 .result = REJECT,
211 .errstr = "invalid access to map value, value_size=48 off=47 size=2",
212},
213{
214 "direct map access, write test 18",
215 .insns = {
216 BPF_MOV64_IMM(BPF_REG_0, 1),
217 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
218 BPF_ST_MEM(BPF_H, BPF_REG_1, 0, 42),
219 BPF_EXIT_INSN(),
220 },
221 .fixup_map_array_small = { 1 },
222 .result = REJECT,
223 .errstr = "R1 min value is outside of the allowed memory range",
224},
225{
226 "direct map access, write test 19",
227 .insns = {
228 BPF_MOV64_IMM(BPF_REG_0, 1),
229 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 0),
230 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 42),
231 BPF_EXIT_INSN(),
232 },
233 .fixup_map_array_small = { 1 },
234 .result = ACCEPT,
235 .retval = 1,
236},
237{
238 "direct map access, write test 20",
239 .insns = {
240 BPF_MOV64_IMM(BPF_REG_0, 1),
241 BPF_LD_MAP_VALUE(BPF_REG_1, 0, 1),
242 BPF_ST_MEM(BPF_B, BPF_REG_1, 0, 42),
243 BPF_EXIT_INSN(),
244 },
245 .fixup_map_array_small = { 1 },
246 .result = REJECT,
247 .errstr = "invalid access to map value pointer",
248},
249{
250 "direct map access, invalid insn test 1",
251 .insns = {
252 BPF_MOV64_IMM(BPF_REG_0, 1),
253 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 0, 1, 0, 47),
254 BPF_EXIT_INSN(),
255 },
256 .fixup_map_array_48b = { 1 },
257 .result = REJECT,
258 .errstr = "invalid bpf_ld_imm64 insn",
259},
260{
261 "direct map access, invalid insn test 2",
262 .insns = {
263 BPF_MOV64_IMM(BPF_REG_0, 1),
264 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 1, 0, 0, 47),
265 BPF_EXIT_INSN(),
266 },
267 .fixup_map_array_48b = { 1 },
268 .result = REJECT,
269 .errstr = "BPF_LD_IMM64 uses reserved fields",
270},
271{
272 "direct map access, invalid insn test 3",
273 .insns = {
274 BPF_MOV64_IMM(BPF_REG_0, 1),
275 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, ~0, 0, 0, 47),
276 BPF_EXIT_INSN(),
277 },
278 .fixup_map_array_48b = { 1 },
279 .result = REJECT,
280 .errstr = "BPF_LD_IMM64 uses reserved fields",
281},
282{
283 "direct map access, invalid insn test 4",
284 .insns = {
285 BPF_MOV64_IMM(BPF_REG_0, 1),
286 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, 0, ~0, 0, 47),
287 BPF_EXIT_INSN(),
288 },
289 .fixup_map_array_48b = { 1 },
290 .result = REJECT,
291 .errstr = "invalid bpf_ld_imm64 insn",
292},
293{
294 "direct map access, invalid insn test 5",
295 .insns = {
296 BPF_MOV64_IMM(BPF_REG_0, 1),
297 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_VALUE, ~0, ~0, 0, 47),
298 BPF_EXIT_INSN(),
299 },
300 .fixup_map_array_48b = { 1 },
301 .result = REJECT,
302 .errstr = "invalid bpf_ld_imm64 insn",
303},
304{
305 "direct map access, invalid insn test 6",
306 .insns = {
307 BPF_MOV64_IMM(BPF_REG_0, 1),
308 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, ~0, 0, 0, 0),
309 BPF_EXIT_INSN(),
310 },
311 .fixup_map_array_48b = { 1 },
312 .result = REJECT,
313 .errstr = "BPF_LD_IMM64 uses reserved fields",
314},
315{
316 "direct map access, invalid insn test 7",
317 .insns = {
318 BPF_MOV64_IMM(BPF_REG_0, 1),
319 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, 0, ~0, 0, 0),
320 BPF_EXIT_INSN(),
321 },
322 .fixup_map_array_48b = { 1 },
323 .result = REJECT,
324 .errstr = "invalid bpf_ld_imm64 insn",
325},
326{
327 "direct map access, invalid insn test 8",
328 .insns = {
329 BPF_MOV64_IMM(BPF_REG_0, 1),
330 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, ~0, ~0, 0, 0),
331 BPF_EXIT_INSN(),
332 },
333 .fixup_map_array_48b = { 1 },
334 .result = REJECT,
335 .errstr = "invalid bpf_ld_imm64 insn",
336},
337{
338 "direct map access, invalid insn test 9",
339 .insns = {
340 BPF_MOV64_IMM(BPF_REG_0, 1),
341 BPF_LD_IMM64_RAW_FULL(BPF_REG_1, BPF_PSEUDO_MAP_FD, 0, 0, 0, 47),
342 BPF_EXIT_INSN(),
343 },
344 .fixup_map_array_48b = { 1 },
345 .result = REJECT,
346 .errstr = "unrecognized bpf_ld_imm64 insn",
347},