// SPDX-License-Identifier: GPL-2.0 #include <vmlinux.h> #include "bpf_experimental.h" #include "bpf_qdisc_common.h" #include "bpf_misc.h" char _license[] SEC("license") = "GPL"; int proto; SEC("struct_ops") __success int BPF_PROG(dynptr_use_after_invalidate_clone, struct sk_buff *skb, struct Qdisc *sch, struct bpf_sk_buff_ptr *to_free) { struct bpf_dynptr ptr, ptr_clone; struct ethhdr *hdr; bpf_dynptr_from_skb((struct __sk_buff *)skb, 0, &ptr); bpf_dynptr_clone(&ptr, &ptr_clone); hdr = bpf_dynptr_slice(&ptr_clone, 0, NULL, sizeof(*hdr)); if (!hdr) { bpf_qdisc_skb_drop(skb, to_free); return NET_XMIT_DROP; } *(int *)&ptr = 0; proto = hdr->h_proto; bpf_qdisc_skb_drop(skb, to_free); return NET_XMIT_DROP; } SEC("struct_ops") __auxiliary struct sk_buff *BPF_PROG(bpf_qdisc_test_dequeue, struct Qdisc *sch) { return NULL; } SEC("struct_ops") __auxiliary int BPF_PROG(bpf_qdisc_test_init, struct Qdisc *sch, struct nlattr *opt, struct netlink_ext_ack *extack) { return 0; } SEC("struct_ops") __auxiliary void BPF_PROG(bpf_qdisc_test_reset, struct Qdisc *sch) { } SEC("struct_ops") __auxiliary void BPF_PROG(bpf_qdisc_test_destroy, struct Qdisc *sch) { } SEC(".struct_ops") struct Qdisc_ops test = { .enqueue = (void *)dynptr_use_after_invalidate_clone, .dequeue = (void *)bpf_qdisc_test_dequeue, .init = (void *)bpf_qdisc_test_init, .reset = (void *)bpf_qdisc_test_reset, .destroy = (void *)bpf_qdisc_test_destroy, .id = "bpf_qdisc_test", };