diff options
| author | Xu Yunxiang <xyx2021@mail.ustc.edu.cn> | 2026-11-03 03:03:50 +0800 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2026-11-02 22:42:11 +0000 |
| commit | 68851f7d3e2054d5d435449850cb4a97d2003e7d (patch) | |
| tree | c6870eab1b4a175a9c79dac62bedd7f62786e2ff /scripts/basic/split-include.c | |
| parent | d537252cc8a53b6ed6a3e7d0d895cb1cdd3ba42c (diff) | |
| download | linux-68851f7d3e2054d5d435449850cb4a97d2003e7d.tar.gz linux-68851f7d3e2054d5d435449850cb4a97d2003e7d.zip | |
selftests/bpf: Exercise stack argument precision on state reuse
Add two asm regressions for the precision of the sixth argument, which
is passed in a stack argument slot and used as a map value offset.
The first test reuses a safe state after storing arg6 from a register.
Precision must propagate from that slot to the register at an earlier
checkpoint, so a later out-of-bounds path cannot reuse that checkpoint.
The second test triggers conservative precision fallback by backtracking
across a store through a register that later becomes a scalar through
pointer subtraction. The caller's argument slot must become precise so
an out-of-bounds argument cannot reuse the safe state.
Both programs are load-only rejection tests and use the existing stack
argument compiler and architecture guards.
The two test programs were supplied by Alexei Starovoitov during review
and are included unchanged.
AI assistance was used in preparing this patch.
Suggested-by: Alexei Starovoitov <alexei.starovoitov@gmail.com>
Signed-off-by: Xu Yunxiang <xyx2021@mail.ustc.edu.cn>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Link: https://lore.kernel.org/bpf/DMJI3GWXQOC9.UA3K9X139AR@gmail.com/
Link: https://patch.msgid.link/20261102190350.788433-3-xyx2021@mail.ustc.edu.cn
Diffstat (limited to 'scripts/basic/split-include.c')
0 files changed, 0 insertions, 0 deletions
