tools/testing/selftests/bpf/prog_tests/sock_post_bind.c

Source file repositories/reference/linux-study-clean/tools/testing/selftests/bpf/prog_tests/sock_post_bind.c

File Facts

System: Linux kernel
Corpus path: tools/testing/selftests/bpf/prog_tests/sock_post_bind.c
Extension: .c
Size: 10309 bytes
Lines: 427
Domain: Support Tooling And Documentation
Bucket: tools
Inferred role: Support Tooling And Documentation: implementation source
Status: source implementation candidate

Why This File Exists

Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.

Repository support layer: documentation, build tooling, samples, user-space helper tools, generated initramfs support, licenses, and validation utilities.
Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.

Dependency Surface

linux/bpf.h
test_progs.h
cgroup_helpers.h

Detected Declarations

function load_prog
function bind_sock
function run_test
function test_sock_post_bind

Annotated Snippet

.descr = "attach type mismatch bind6 vs sock_create",
		.insns = {
			BPF_MOV64_IMM(BPF_REG_0, 1),
			BPF_EXIT_INSN(),
		},
		.expected_attach_type = BPF_CGROUP_INET6_POST_BIND,
		.attach_type = BPF_CGROUP_INET_SOCK_CREATE,
		.result = ATTACH_REJECT,
	},
	{
		.descr = "bind4 reject all",
		.insns = {
			BPF_MOV64_IMM(BPF_REG_0, 0),
			BPF_EXIT_INSN(),
		},
		.expected_attach_type = BPF_CGROUP_INET4_POST_BIND,
		.attach_type = BPF_CGROUP_INET4_POST_BIND,
		.domain = AF_INET,
		.type = SOCK_STREAM,
		.ip = "0.0.0.0",
		.result = BIND_REJECT,
	},
	{
		.descr = "bind6 reject all",
		.insns = {
			BPF_MOV64_IMM(BPF_REG_0, 0),
			BPF_EXIT_INSN(),
		},
		.expected_attach_type = BPF_CGROUP_INET6_POST_BIND,
		.attach_type = BPF_CGROUP_INET6_POST_BIND,
		.domain = AF_INET6,
		.type = SOCK_STREAM,
		.ip = "::",
		.result = BIND_REJECT,
	},
	{
		.descr = "bind6 deny specific IP & port",
		.insns = {
			BPF_MOV64_REG(BPF_REG_6, BPF_REG_1),

			/* if (ip == expected && port == expected) */
			BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_6,
				    offsetof(struct bpf_sock, src_ip6[3])),
			BPF_JMP_IMM(BPF_JNE, BPF_REG_7,
				    __bpf_constant_ntohl(0x00000001), 4),
			BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_6,
				    offsetof(struct bpf_sock, src_port)),
			BPF_JMP_IMM(BPF_JNE, BPF_REG_7, 0x2001, 2),

			/* return DENY; */
			BPF_MOV64_IMM(BPF_REG_0, 0),
			BPF_JMP_A(1),

			/* else return ALLOW; */
			BPF_MOV64_IMM(BPF_REG_0, 1),
			BPF_EXIT_INSN(),
		},
		.expected_attach_type = BPF_CGROUP_INET6_POST_BIND,
		.attach_type = BPF_CGROUP_INET6_POST_BIND,
		.domain = AF_INET6,
		.type = SOCK_STREAM,
		.ip = "::1",
		.port = 8193,
		.result = BIND_REJECT,
	},
	{
		.descr = "bind4 allow specific IP & port",
		.insns = {
			BPF_MOV64_REG(BPF_REG_6, BPF_REG_1),

			/* if (ip == expected && port == expected) */
			BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_6,
				    offsetof(struct bpf_sock, src_ip4)),
			BPF_JMP_IMM(BPF_JNE, BPF_REG_7,
				    __bpf_constant_ntohl(0x7F000001), 4),
			BPF_LDX_MEM(BPF_W, BPF_REG_7, BPF_REG_6,
				    offsetof(struct bpf_sock, src_port)),
			BPF_JMP_IMM(BPF_JNE, BPF_REG_7, 0x1002, 2),

			/* return ALLOW; */
			BPF_MOV64_IMM(BPF_REG_0, 1),
			BPF_JMP_A(1),

			/* else return DENY; */
			BPF_MOV64_IMM(BPF_REG_0, 0),
			BPF_EXIT_INSN(),
		},
		.expected_attach_type = BPF_CGROUP_INET4_POST_BIND,
		.attach_type = BPF_CGROUP_INET4_POST_BIND,
		.domain = AF_INET,

Annotation

Immediate include surface: `linux/bpf.h`, `test_progs.h`, `cgroup_helpers.h`.
Detected declarations: `function load_prog`, `function bind_sock`, `function run_test`, `function test_sock_post_bind`.
Atlas domain: Support Tooling And Documentation / tools.
Implementation status: source implementation candidate.

Implementation Notes

This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.