wireguard-linux/tools/testing/selftests/bpf/verifier/pseudo_func.c, branch stableWireGuard for the Linux kernelhttps://git.zx2c4.com/wireguard-linux/atom/tools/testing/selftests/bpf/verifier/pseudo_func.c?h=stable2026-09-03T00:50:09Zselftests/bpf: BPF_PSEUDO_FUNC reference to the main program2026-09-03T00:50:09ZEduard Zingermaneddyz87@gmail.com2026-09-02T23:36:58Zurn:sha1:ac0aaef0aa997fcdcb2458bd584539ba8608d33e
Add a test case for a BPF_PSEUDO_FUNC load instruction that references
the entry function of the program it belongs to. W/o the previous
patch the verifier accepts this program thus allowing a runtime call
at a bogus address. See previous patch for detailed description.
Main function needs to be marked with BTF_FUNC_STATIC for the test to
trigger the bug, the patch uses test_verifier harness instead of
test_prog because libbpf has no way to convey this.
Reported-by: Nicholas Carlini <npc@anthropic.com>
Suggested-by: Nicholas Carlini <npc@anthropic.com>
Signed-off-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/r/20260902233658.1186477-2-eddyz87@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>