On Wed, 2024-07-17 at 22:02 -0700, Yonghong Song wrote: > The following tests are added to verifier_ldsx.c: > - sign extension of data/data_end/data_meta for tcx programs. > The actual checking is in bpf_skb_is_valid_access() which > is called by sk_filter, cg_skb, lwt, tc(tcx) and sk_skb. > - sign extension of data/data_end/data_meta for xdp programs. > - sign extension of data/data_end for flow_dissector programs. > > All newly-added tests have verification failure with message > "invalid bpf_context access". Without previous patch, all these > tests succeeded verification. > > Signed-off-by: Yonghong Song <yonghong.song@xxxxxxxxx> Acked-by: Eduard Zingerman <eddyz87@xxxxxxxxx> [...]