selftests/bpf: Cover dynamic inner array lookup nullability

Browse source

Add a verifier regression test that looks up a constant key through a
dynamic inner array template and dereferences the result without a NULL
check.

The verifier must reject the program because BPF_F_INNER_MAP allows the
concrete runtime array to have fewer entries than the template.

Signed-off-by: Nuoqi Gui <gnq25@mails.tsinghua.edu.cn>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Acked-by: Jiri Olsa <jolsa@kernel.org>
Link: https://lore.kernel.org/bpf/20260607-f01-v2-v2-2-da48453146e8@mails.tsinghua.edu.cn
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>

...

This commit is contained in:

Nuoqi Gui 2026-06-07 21:24:14 +08:00 • committed by Kumar Kartikeya Dwivedi

parent 53040a81ae

commit a3847994b4

No known key found for this signature in database

GPG key ID: 472D377B63542F83

1 changed files with 40 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

40

tools/testing/selftests/bpf/progs/verifier_map_in_map.c

View file