cachepc-linux

Fork of AMDESE/linux with modifications for CachePC side-channel attack
git clone https://git.sinitax.com/sinitax/cachepc-linux
Log | Files | Refs | README | LICENSE | sfeed.txt

cgroup_skb_sk_lookup.c (2421B)

      1// SPDX-License-Identifier: GPL-2.0
      2// Copyright (c) 2020 Facebook
      3
      4#include <test_progs.h>
      5
      6#include "network_helpers.h"
      7#include "cgroup_skb_sk_lookup_kern.skel.h"
      8
      9static void run_lookup_test(__u16 *g_serv_port, int out_sk)
     10{
     11	int serv_sk = -1, in_sk = -1, serv_in_sk = -1, err;
     12	struct sockaddr_in6 addr = {};
     13	socklen_t addr_len = sizeof(addr);
     14	__u32 duration = 0;
     15
     16	serv_sk = start_server(AF_INET6, SOCK_STREAM, NULL, 0, 0);
     17	if (CHECK(serv_sk < 0, "start_server", "failed to start server\n"))
     18		return;
     19
     20	err = getsockname(serv_sk, (struct sockaddr *)&addr, &addr_len);
     21	if (CHECK(err, "getsockname", "errno %d\n", errno))
     22		goto cleanup;
     23
     24	*g_serv_port = addr.sin6_port;
     25
     26	/* Client outside of test cgroup should fail to connect by timeout. */
     27	err = connect_fd_to_fd(out_sk, serv_sk, 1000);
     28	if (CHECK(!err || errno != EINPROGRESS, "connect_fd_to_fd",
     29		  "unexpected result err %d errno %d\n", err, errno))
     30		goto cleanup;
     31
     32	/* Client inside test cgroup should connect just fine. */
     33	in_sk = connect_to_fd(serv_sk, 0);
     34	if (CHECK(in_sk < 0, "connect_to_fd", "errno %d\n", errno))
     35		goto cleanup;
     36
     37	serv_in_sk = accept(serv_sk, NULL, NULL);
     38	if (CHECK(serv_in_sk < 0, "accept", "errno %d\n", errno))
     39		goto cleanup;
     40
     41cleanup:
     42	close(serv_in_sk);
     43	close(in_sk);
     44	close(serv_sk);
     45}
     46
     47static void run_cgroup_bpf_test(const char *cg_path, int out_sk)
     48{
     49	struct cgroup_skb_sk_lookup_kern *skel;
     50	struct bpf_link *link;
     51	__u32 duration = 0;
     52	int cgfd = -1;
     53
     54	skel = cgroup_skb_sk_lookup_kern__open_and_load();
     55	if (CHECK(!skel, "skel_open_load", "open_load failed\n"))
     56		return;
     57
     58	cgfd = test__join_cgroup(cg_path);
     59	if (CHECK(cgfd < 0, "cgroup_join", "cgroup setup failed\n"))
     60		goto cleanup;
     61
     62	link = bpf_program__attach_cgroup(skel->progs.ingress_lookup, cgfd);
     63	if (!ASSERT_OK_PTR(link, "cgroup_attach"))
     64		goto cleanup;
     65
     66	run_lookup_test(&skel->bss->g_serv_port, out_sk);
     67
     68	bpf_link__destroy(link);
     69
     70cleanup:
     71	close(cgfd);
     72	cgroup_skb_sk_lookup_kern__destroy(skel);
     73}
     74
     75void test_cgroup_skb_sk_lookup(void)
     76{
     77	const char *cg_path = "/foo";
     78	int out_sk;
     79
     80	/* Create a socket before joining testing cgroup so that its cgroup id
     81	 * differs from that of testing cgroup. Moving selftests process to
     82	 * testing cgroup won't change cgroup id of an already created socket.
     83	 */
     84	out_sk = socket(AF_INET6, SOCK_STREAM, 0);
     85	if (CHECK_FAIL(out_sk < 0))
     86		return;
     87
     88	run_cgroup_bpf_test(cg_path, out_sk);
     89
     90	close(out_sk);
     91}