netdev - Re: [PATCH v7 bpf-next 3/3] bpf: add selftest for BPF_ENABLE

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date:   Tue, 28 Apr 2020 21:57:20 -0700
From:   Alexei Starovoitov <alexei.starovoitov@...il.com>
To:     Song Liu <songliubraving@...com>
Cc:     bpf@...r.kernel.org, netdev@...r.kernel.org, ast@...nel.org,
        daniel@...earbox.net, kernel-team@...com
Subject: Re: [PATCH v7 bpf-next 3/3] bpf: add selftest for BPF_ENABLE_STATS

On Tue, Apr 28, 2020 at 08:58:41PM -0700, Song Liu wrote:
> +
> +	skel = test_enable_stats__open_and_load();
> +	if (CHECK(!skel, "skel_open_and_load", "skeleton open/load failed\n"))
> +		return;
> +
> +	stats_fd = bpf_enable_stats(BPF_STATS_RUNTIME_CNT);

Just realized that the name is wrong.
The stats are enabling run_cnt and run_time_ns.
runtime_cnt sounds like 'snark' from 'The Hunting of the Snark' :)
May be BPF_STATS_RUN_TIME ?

> +	if (CHECK(stats_fd < 0, "get_stats_fd", "failed %d\n", errno)) {
> +		test_enable_stats__destroy(skel);
> +		return;
> +	}
> +
> +	err = test_enable_stats__attach(skel);
> +	if (CHECK(err, "attach_raw_tp", "err %d\n", err))
> +		goto cleanup;
> +
> +	/* generate 100 sys_enter */
> +	for (i = 0; i < 100; i++)
> +		usleep(1);
> +
> +	test_enable_stats__detach(skel);
> +
> +	prog_fd = bpf_program__fd(skel->progs.test_enable_stats);
> +	memset(&info, 0, info_len);
> +	err = bpf_obj_get_info_by_fd(prog_fd, &info, &info_len);
> +	if (CHECK(err, "get_prog_info",
> +		  "failed to get bpf_prog_info for fd %d\n", prog_fd))
> +		goto cleanup;
> +	if (CHECK(info.run_time_ns == 0, "check_stats_enabled",
> +		  "failed to enable run_time_ns stats\n"))
> +		goto cleanup;
> +
> +	bss_fd = bpf_map__fd(skel->maps.bss);
> +	err = bpf_map_lookup_elem(bss_fd, &zero, &count);

'count' is a global var. It's accessible directly via skeleton.
No need for map_lookup.
Even after __detach(skel) the global data is still valid.

> +	if (CHECK(err, "map_lookup_elem",
> +		  "failed map_lookup_elem for fd %d\n", bss_fd))
> +		goto cleanup;
> +
> +	CHECK(info.run_cnt != count, "check_run_cnt_valid",
> +	      "invalid run_cnt stats\n");

what happens if there are other syscalls during for(i<100) loop?
The count will still match, right?
Then why 100 ? and why usleep() at all?
test_enable_stats__attach() will generate at least one syscall.

> +
> +cleanup:
> +	test_enable_stats__destroy(skel);
> +	close(stats_fd);

May be close(stats_fd) first.
Then test_enable_stats__attach(skel); again.
Generate few more syscalls and check that 'count' incrementing,
but info.run_cnt doesnt ?
That check assumes that sysctl is off. Overkill?