Lines Matching refs:ptr

14 	struct bpf_dynptr ptr;  member
50 static int get_map_val_dynptr(struct bpf_dynptr *ptr) in get_map_val_dynptr() argument
60 bpf_dynptr_from_mem(map_val, sizeof(*map_val), 0, ptr); in get_map_val_dynptr()
71 struct bpf_dynptr ptr; in ringbuf_missing_release1() local
73 bpf_ringbuf_reserve_dynptr(&ringbuf, val, 0, &ptr); in ringbuf_missing_release1()
105 struct bpf_dynptr ptr; in missing_release_callback_fn() local
107 bpf_ringbuf_reserve_dynptr(&ringbuf, val, 0, &ptr); in missing_release_callback_fn()
126 struct bpf_dynptr ptr; in ringbuf_release_uninit_dynptr() local
129 bpf_ringbuf_submit_dynptr(&ptr, 0); in ringbuf_release_uninit_dynptr()
138 struct bpf_dynptr ptr; in use_after_invalid() local
141 bpf_ringbuf_reserve_dynptr(&ringbuf, sizeof(read_data), 0, &ptr); in use_after_invalid()
143 bpf_dynptr_read(read_data, sizeof(read_data), &ptr, 0, 0); in use_after_invalid()
145 bpf_ringbuf_submit_dynptr(&ptr, 0); in use_after_invalid()
148 bpf_dynptr_read(read_data, sizeof(read_data), &ptr, 0, 0); in use_after_invalid()
157 struct bpf_dynptr ptr; in ringbuf_invalid_api() local
160 bpf_ringbuf_reserve_dynptr(&ringbuf, sizeof(*sample), 0, &ptr); in ringbuf_invalid_api()
161 sample = bpf_dynptr_data(&ptr, 0, sizeof(*sample)); in ringbuf_invalid_api()
171 bpf_ringbuf_discard_dynptr(&ptr, 0); in ringbuf_invalid_api()
179 struct bpf_dynptr ptr; in add_dynptr_to_map1() local
182 bpf_ringbuf_reserve_dynptr(&ringbuf, val, 0, &ptr); in add_dynptr_to_map1()
185 bpf_map_update_elem(&array_map1, &key, &ptr, 0); in add_dynptr_to_map1()
187 bpf_ringbuf_submit_dynptr(&ptr, 0); in add_dynptr_to_map1()
199 bpf_ringbuf_reserve_dynptr(&ringbuf, val, 0, &x.ptr); in add_dynptr_to_map2()
204 bpf_ringbuf_submit_dynptr(&x.ptr, 0); in add_dynptr_to_map2()
213 struct bpf_dynptr ptr; in data_slice_out_of_bounds_ringbuf() local
216 bpf_ringbuf_reserve_dynptr(&ringbuf, 8, 0, &ptr); in data_slice_out_of_bounds_ringbuf()
218 data = bpf_dynptr_data(&ptr, 0, 8); in data_slice_out_of_bounds_ringbuf()
226 bpf_ringbuf_submit_dynptr(&ptr, 0); in data_slice_out_of_bounds_ringbuf()
234 struct bpf_dynptr ptr; in data_slice_out_of_bounds_map_value() local
237 get_map_val_dynptr(&ptr); in data_slice_out_of_bounds_map_value()
239 data = bpf_dynptr_data(&ptr, 0, sizeof(map_val)); in data_slice_out_of_bounds_map_value()
253 struct bpf_dynptr ptr; in data_slice_use_after_release1() local
256 bpf_ringbuf_reserve_dynptr(&ringbuf, sizeof(*sample), 0, &ptr); in data_slice_use_after_release1()
257 sample = bpf_dynptr_data(&ptr, 0, sizeof(*sample)); in data_slice_use_after_release1()
263 bpf_ringbuf_submit_dynptr(&ptr, 0); in data_slice_use_after_release1()
271 bpf_ringbuf_discard_dynptr(&ptr, 0); in data_slice_use_after_release1()
315 struct bpf_dynptr ptr; in data_slice_missing_null_check1() local
318 bpf_ringbuf_reserve_dynptr(&ringbuf, 8, 0, &ptr); in data_slice_missing_null_check1()
320 data = bpf_dynptr_data(&ptr, 0, 8); in data_slice_missing_null_check1()
327 bpf_ringbuf_submit_dynptr(&ptr, 0); in data_slice_missing_null_check1()
335 struct bpf_dynptr ptr; in data_slice_missing_null_check2() local
338 bpf_ringbuf_reserve_dynptr(&ringbuf, 16, 0, &ptr); in data_slice_missing_null_check2()
340 data1 = bpf_dynptr_data(&ptr, 0, 8); in data_slice_missing_null_check2()
341 data2 = bpf_dynptr_data(&ptr, 0, 8); in data_slice_missing_null_check2()
347 bpf_ringbuf_discard_dynptr(&ptr, 0); in data_slice_missing_null_check2()
357 struct bpf_dynptr ptr; in invalid_helper1() local
359 get_map_val_dynptr(&ptr); in invalid_helper1()
362 bpf_strncmp((const char *)&ptr, sizeof(ptr), "hello!"); in invalid_helper1()
371 struct bpf_dynptr ptr; in invalid_helper2() local
374 get_map_val_dynptr(&ptr); in invalid_helper2()
377 bpf_dynptr_read(read_data, sizeof(read_data), (void *)&ptr + 8, 0, 0); in invalid_helper2()
386 struct bpf_dynptr ptr; in invalid_write1() local
390 get_map_val_dynptr(&ptr); in invalid_write1()
392 memcpy(&ptr, &x, sizeof(x)); in invalid_write1()
395 data = bpf_dynptr_data(&ptr, 0, 1); in invalid_write1()
407 struct bpf_dynptr ptr; in invalid_write2() local
411 bpf_ringbuf_reserve_dynptr(&ringbuf, 64, 0, &ptr); in invalid_write2()
413 memcpy((void *)&ptr + 8, &x, sizeof(x)); in invalid_write2()
416 bpf_dynptr_read(read_data, sizeof(read_data), &ptr, 0, 0); in invalid_write2()
418 bpf_ringbuf_submit_dynptr(&ptr, 0); in invalid_write2()
430 struct bpf_dynptr ptr; in invalid_write3() local
435 bpf_ringbuf_reserve_dynptr(&ringbuf, 8, 0, &ptr); in invalid_write3()
440 memcpy((void *)&ptr + len, &x, sizeof(x)); in invalid_write3()
443 bpf_ringbuf_submit_dynptr(&ptr, 0); in invalid_write3()
461 struct bpf_dynptr ptr; in invalid_write4() local
463 bpf_ringbuf_reserve_dynptr(&ringbuf, 64, 0, &ptr); in invalid_write4()
465 bpf_loop(10, invalid_write4_callback, &ptr, 0); in invalid_write4()
468 bpf_ringbuf_submit_dynptr(&ptr, 0); in invalid_write4()
490 struct bpf_dynptr ptr; in invalid_read1() local
492 bpf_ringbuf_reserve_dynptr(&ringbuf, 64, 0, &ptr); in invalid_read1()
495 val = *(int *)&ptr; in invalid_read1()
497 bpf_ringbuf_discard_dynptr(&ptr, 0); in invalid_read1()
506 struct bpf_dynptr ptr; in invalid_read2() local
509 get_map_val_dynptr(&ptr); in invalid_read2()
512 bpf_dynptr_read(read_data, sizeof(read_data), (void *)&ptr + 1, 0, 0); in invalid_read2()
547 struct bpf_dynptr ptr; in invalid_read4() local
549 bpf_ringbuf_reserve_dynptr(&ringbuf, 64, 0, &ptr); in invalid_read4()
551 bpf_loop(10, invalid_read4_callback, &ptr, 0); in invalid_read4()
553 bpf_ringbuf_submit_dynptr(&ptr, 0); in invalid_read4()
562 struct bpf_dynptr ptr; in invalid_offset() local
565 bpf_ringbuf_reserve_dynptr(&ringbuf, 64, 0, &ptr + 1); in invalid_offset()
567 bpf_ringbuf_discard_dynptr(&ptr, 0); in invalid_offset()
576 struct bpf_dynptr ptr; in release_twice() local
578 bpf_ringbuf_reserve_dynptr(&ringbuf, 16, 0, &ptr); in release_twice()
580 bpf_ringbuf_discard_dynptr(&ptr, 0); in release_twice()
583 bpf_ringbuf_discard_dynptr(&ptr, 0); in release_twice()
602 struct bpf_dynptr ptr; in release_twice_callback() local
604 bpf_ringbuf_reserve_dynptr(&ringbuf, 32, 0, &ptr); in release_twice_callback()
606 bpf_ringbuf_discard_dynptr(&ptr, 0); in release_twice_callback()
608 bpf_loop(10, release_twice_callback_fn, &ptr, 0); in release_twice_callback()
617 struct bpf_dynptr ptr; in dynptr_from_mem_invalid_api() local
621 bpf_dynptr_from_mem(&x, sizeof(x), 0, &ptr); in dynptr_from_mem_invalid_api()