18b08807dSDmitrii Banshchikov // SPDX-License-Identifier: GPL-2.0-only 28b08807dSDmitrii Banshchikov #include <stddef.h> 38b08807dSDmitrii Banshchikov #include <linux/bpf.h> 48b08807dSDmitrii Banshchikov #include <bpf/bpf_helpers.h> 595ebb376SAndrii Nakryiko #include "bpf_misc.h" 68b08807dSDmitrii Banshchikov 78b08807dSDmitrii Banshchikov struct Small { 8*6715df8dSEduard Zingerman long x; 98b08807dSDmitrii Banshchikov }; 108b08807dSDmitrii Banshchikov 118b08807dSDmitrii Banshchikov struct Big { 12*6715df8dSEduard Zingerman long x; 13*6715df8dSEduard Zingerman long y; 148b08807dSDmitrii Banshchikov }; 158b08807dSDmitrii Banshchikov foo(const struct Big * big)168b08807dSDmitrii Banshchikov__noinline int foo(const struct Big *big) 178b08807dSDmitrii Banshchikov { 1804ea63e3SJiapeng Chong if (!big) 198b08807dSDmitrii Banshchikov return 0; 208b08807dSDmitrii Banshchikov 218b08807dSDmitrii Banshchikov return bpf_get_prandom_u32() < big->y; 228b08807dSDmitrii Banshchikov } 238b08807dSDmitrii Banshchikov 248b08807dSDmitrii Banshchikov SEC("cgroup_skb/ingress") 25*6715df8dSEduard Zingerman __failure __msg("invalid indirect access to stack") global_func10(struct __sk_buff * skb)2695ebb376SAndrii Nakryikoint global_func10(struct __sk_buff *skb) 278b08807dSDmitrii Banshchikov { 288b08807dSDmitrii Banshchikov const struct Small small = {.x = skb->len }; 298b08807dSDmitrii Banshchikov 308b08807dSDmitrii Banshchikov return foo((struct Big *)&small) ? 1 : 0; 318b08807dSDmitrii Banshchikov } 32