1 { 2 "meta access, test1", 3 .insns = { 4 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 5 offsetof(struct xdp_md, data_meta)), 6 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 7 BPF_MOV64_REG(BPF_REG_0, BPF_REG_2), 8 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 9 BPF_JMP_REG(BPF_JGT, BPF_REG_0, BPF_REG_3, 1), 10 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 11 BPF_MOV64_IMM(BPF_REG_0, 0), 12 BPF_EXIT_INSN(), 13 }, 14 .result = ACCEPT, 15 .prog_type = BPF_PROG_TYPE_XDP, 16 }, 17 { 18 "meta access, test2", 19 .insns = { 20 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 21 offsetof(struct xdp_md, data_meta)), 22 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 23 BPF_MOV64_REG(BPF_REG_0, BPF_REG_2), 24 BPF_ALU64_IMM(BPF_SUB, BPF_REG_0, 8), 25 BPF_MOV64_REG(BPF_REG_4, BPF_REG_2), 26 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 8), 27 BPF_JMP_REG(BPF_JGT, BPF_REG_4, BPF_REG_3, 1), 28 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_0, 0), 29 BPF_MOV64_IMM(BPF_REG_0, 0), 30 BPF_EXIT_INSN(), 31 }, 32 .result = REJECT, 33 .errstr = "invalid access to packet, off=-8", 34 .prog_type = BPF_PROG_TYPE_XDP, 35 }, 36 { 37 "meta access, test3", 38 .insns = { 39 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 40 offsetof(struct xdp_md, data_meta)), 41 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, 42 offsetof(struct xdp_md, data_end)), 43 BPF_MOV64_REG(BPF_REG_0, BPF_REG_2), 44 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 45 BPF_JMP_REG(BPF_JGT, BPF_REG_0, BPF_REG_3, 1), 46 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 47 BPF_MOV64_IMM(BPF_REG_0, 0), 48 BPF_EXIT_INSN(), 49 }, 50 .result = REJECT, 51 .errstr = "invalid access to packet", 52 .prog_type = BPF_PROG_TYPE_XDP, 53 }, 54 { 55 "meta access, test4", 56 .insns = { 57 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 58 offsetof(struct xdp_md, data_meta)), 59 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, 60 offsetof(struct xdp_md, data_end)), 61 BPF_LDX_MEM(BPF_W, BPF_REG_4, BPF_REG_1, offsetof(struct xdp_md, data)), 62 BPF_MOV64_REG(BPF_REG_0, BPF_REG_4), 63 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 64 BPF_JMP_REG(BPF_JGT, BPF_REG_0, BPF_REG_3, 1), 65 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 66 BPF_MOV64_IMM(BPF_REG_0, 0), 67 BPF_EXIT_INSN(), 68 }, 69 .result = REJECT, 70 .errstr = "invalid access to packet", 71 .prog_type = BPF_PROG_TYPE_XDP, 72 }, 73 { 74 "meta access, test5", 75 .insns = { 76 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, 77 offsetof(struct xdp_md, data_meta)), 78 BPF_LDX_MEM(BPF_W, BPF_REG_4, BPF_REG_1, offsetof(struct xdp_md, data)), 79 BPF_MOV64_REG(BPF_REG_0, BPF_REG_3), 80 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 81 BPF_JMP_REG(BPF_JGT, BPF_REG_0, BPF_REG_4, 3), 82 BPF_MOV64_IMM(BPF_REG_2, -8), 83 BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0, BPF_FUNC_xdp_adjust_meta), 84 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_3, 0), 85 BPF_MOV64_IMM(BPF_REG_0, 0), 86 BPF_EXIT_INSN(), 87 }, 88 .result = REJECT, 89 .errstr = "R3 !read_ok", 90 .prog_type = BPF_PROG_TYPE_XDP, 91 }, 92 { 93 "meta access, test6", 94 .insns = { 95 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 96 offsetof(struct xdp_md, data_meta)), 97 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 98 BPF_MOV64_REG(BPF_REG_0, BPF_REG_3), 99 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 100 BPF_MOV64_REG(BPF_REG_4, BPF_REG_2), 101 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 8), 102 BPF_JMP_REG(BPF_JGT, BPF_REG_4, BPF_REG_0, 1), 103 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 104 BPF_MOV64_IMM(BPF_REG_0, 0), 105 BPF_EXIT_INSN(), 106 }, 107 .result = REJECT, 108 .errstr = "invalid access to packet", 109 .prog_type = BPF_PROG_TYPE_XDP, 110 }, 111 { 112 "meta access, test7", 113 .insns = { 114 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 115 offsetof(struct xdp_md, data_meta)), 116 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 117 BPF_MOV64_REG(BPF_REG_0, BPF_REG_3), 118 BPF_ALU64_IMM(BPF_ADD, BPF_REG_0, 8), 119 BPF_MOV64_REG(BPF_REG_4, BPF_REG_2), 120 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 8), 121 BPF_JMP_REG(BPF_JGT, BPF_REG_4, BPF_REG_3, 1), 122 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 123 BPF_MOV64_IMM(BPF_REG_0, 0), 124 BPF_EXIT_INSN(), 125 }, 126 .result = ACCEPT, 127 .prog_type = BPF_PROG_TYPE_XDP, 128 }, 129 { 130 "meta access, test8", 131 .insns = { 132 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 133 offsetof(struct xdp_md, data_meta)), 134 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 135 BPF_MOV64_REG(BPF_REG_4, BPF_REG_2), 136 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 0xFFFF), 137 BPF_JMP_REG(BPF_JGT, BPF_REG_4, BPF_REG_3, 1), 138 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 139 BPF_MOV64_IMM(BPF_REG_0, 0), 140 BPF_EXIT_INSN(), 141 }, 142 .result = ACCEPT, 143 .prog_type = BPF_PROG_TYPE_XDP, 144 }, 145 { 146 "meta access, test9", 147 .insns = { 148 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 149 offsetof(struct xdp_md, data_meta)), 150 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 151 BPF_MOV64_REG(BPF_REG_4, BPF_REG_2), 152 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 0xFFFF), 153 BPF_ALU64_IMM(BPF_ADD, BPF_REG_4, 1), 154 BPF_JMP_REG(BPF_JGT, BPF_REG_4, BPF_REG_3, 1), 155 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 156 BPF_MOV64_IMM(BPF_REG_0, 0), 157 BPF_EXIT_INSN(), 158 }, 159 .result = REJECT, 160 .errstr = "invalid access to packet", 161 .prog_type = BPF_PROG_TYPE_XDP, 162 }, 163 { 164 "meta access, test10", 165 .insns = { 166 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 167 offsetof(struct xdp_md, data_meta)), 168 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 169 BPF_LDX_MEM(BPF_W, BPF_REG_4, BPF_REG_1, 170 offsetof(struct xdp_md, data_end)), 171 BPF_MOV64_IMM(BPF_REG_5, 42), 172 BPF_MOV64_IMM(BPF_REG_6, 24), 173 BPF_STX_MEM(BPF_DW, BPF_REG_10, BPF_REG_5, -8), 174 BPF_STX_XADD(BPF_DW, BPF_REG_10, BPF_REG_6, -8), 175 BPF_LDX_MEM(BPF_DW, BPF_REG_5, BPF_REG_10, -8), 176 BPF_JMP_IMM(BPF_JGT, BPF_REG_5, 100, 6), 177 BPF_ALU64_REG(BPF_ADD, BPF_REG_3, BPF_REG_5), 178 BPF_MOV64_REG(BPF_REG_5, BPF_REG_3), 179 BPF_MOV64_REG(BPF_REG_6, BPF_REG_2), 180 BPF_ALU64_IMM(BPF_ADD, BPF_REG_6, 8), 181 BPF_JMP_REG(BPF_JGT, BPF_REG_6, BPF_REG_5, 1), 182 BPF_LDX_MEM(BPF_B, BPF_REG_2, BPF_REG_2, 0), 183 BPF_MOV64_IMM(BPF_REG_0, 0), 184 BPF_EXIT_INSN(), 185 }, 186 .result = REJECT, 187 .errstr = "invalid access to packet", 188 .prog_type = BPF_PROG_TYPE_XDP, 189 }, 190 { 191 "meta access, test11", 192 .insns = { 193 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 194 offsetof(struct xdp_md, data_meta)), 195 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 196 BPF_MOV64_IMM(BPF_REG_5, 42), 197 BPF_MOV64_IMM(BPF_REG_6, 24), 198 BPF_STX_MEM(BPF_DW, BPF_REG_10, BPF_REG_5, -8), 199 BPF_STX_XADD(BPF_DW, BPF_REG_10, BPF_REG_6, -8), 200 BPF_LDX_MEM(BPF_DW, BPF_REG_5, BPF_REG_10, -8), 201 BPF_JMP_IMM(BPF_JGT, BPF_REG_5, 100, 6), 202 BPF_ALU64_REG(BPF_ADD, BPF_REG_2, BPF_REG_5), 203 BPF_MOV64_REG(BPF_REG_5, BPF_REG_2), 204 BPF_MOV64_REG(BPF_REG_6, BPF_REG_2), 205 BPF_ALU64_IMM(BPF_ADD, BPF_REG_6, 8), 206 BPF_JMP_REG(BPF_JGT, BPF_REG_6, BPF_REG_3, 1), 207 BPF_LDX_MEM(BPF_B, BPF_REG_5, BPF_REG_5, 0), 208 BPF_MOV64_IMM(BPF_REG_0, 0), 209 BPF_EXIT_INSN(), 210 }, 211 .result = ACCEPT, 212 .prog_type = BPF_PROG_TYPE_XDP, 213 }, 214 { 215 "meta access, test12", 216 .insns = { 217 BPF_LDX_MEM(BPF_W, BPF_REG_2, BPF_REG_1, 218 offsetof(struct xdp_md, data_meta)), 219 BPF_LDX_MEM(BPF_W, BPF_REG_3, BPF_REG_1, offsetof(struct xdp_md, data)), 220 BPF_LDX_MEM(BPF_W, BPF_REG_4, BPF_REG_1, 221 offsetof(struct xdp_md, data_end)), 222 BPF_MOV64_REG(BPF_REG_5, BPF_REG_3), 223 BPF_ALU64_IMM(BPF_ADD, BPF_REG_5, 16), 224 BPF_JMP_REG(BPF_JGT, BPF_REG_5, BPF_REG_4, 5), 225 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_3, 0), 226 BPF_MOV64_REG(BPF_REG_5, BPF_REG_2), 227 BPF_ALU64_IMM(BPF_ADD, BPF_REG_5, 16), 228 BPF_JMP_REG(BPF_JGT, BPF_REG_5, BPF_REG_3, 1), 229 BPF_LDX_MEM(BPF_B, BPF_REG_0, BPF_REG_2, 0), 230 BPF_MOV64_IMM(BPF_REG_0, 0), 231 BPF_EXIT_INSN(), 232 }, 233 .result = ACCEPT, 234 .prog_type = BPF_PROG_TYPE_XDP, 235 }, 236
