selftests/bpf: Cover MEM_ALLOC access past object bounds

Browse source

Add a linked_list negative loader case for a program-BTF type whose last
member is a zero-length flexible array. The program writes through the
first flexible-array element of an object allocated by bpf_obj_new().

The verifier should reject the access when the BTF walk reaches beyond the
static size of the allocated object.

Signed-off-by: Yiyang Chen <chenyy23@mails.tsinghua.edu.cn>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/bpf/e36fd5d2f4047809f0e5da46a7077083297e64db.1782807039.git.chenyy23@mails.tsinghua.edu.cn
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>

...

This commit is contained in:

Yiyang Chen 2026-06-30 08:41:27 +00:00 • committed by Kumar Kartikeya Dwivedi

parent 9c9ee0324c

commit 4137bbd9af

No known key found for this signature in database

GPG key ID: 472D377B63542F83

2 changed files with 24 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

tools/testing/selftests/bpf/prog_tests/linked_list.c

View file

23

tools/testing/selftests/bpf/progs/linked_list_fail.c

View file