tools: psock_lib: harden socket filter used by psock tests
authorSowmini Varadhan <[email protected]>
Thu, 12 Jan 2017 13:10:11 +0000 (05:10 -0800)
committerDavid S. Miller <[email protected]>
Thu, 12 Jan 2017 15:23:26 +0000 (10:23 -0500)
commit4d7b9dc1f36a99423a6171d393040165fb135530
tree9cf9841d98aa2b47e2b41ab5c6e2ed652d2cce80
parent79471b10d67a52f5b3744d2e14c06437a65746f2
tools: psock_lib: harden socket filter used by psock tests

The filter added by sock_setfilter is intended to only permit
packets matching the pattern set up by create_payload(), but
we only check the ip_len, and a single test-character in
the IP packet to ensure this condition.

Harden the filter by adding additional constraints so that we only
permit UDP/IPv4 packets that meet the ip_len and test-character
requirements. Include the bpf_asm src as a comment, in case this
needs to be enhanced in the future

Signed-off-by: Sowmini Varadhan <[email protected]>
Acked-by: Daniel Borkmann <[email protected]>
Signed-off-by: David S. Miller <[email protected]>
tools/testing/selftests/net/psock_lib.h