summaryrefslogtreecommitdiffstats
path: root/kernel/bpf/verifier.c
Commit message (Expand)AuthorAgeFilesLines
* bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_valsDaniel Borkmann2022-07-121-49/+23
* bpf: Fix incorrect verifier simulation around jmp32's jeq/jneDaniel Borkmann2022-07-121-17/+24
* bpf: Don't promote bogus looking registers after null check.Daniel Borkmann2022-01-271-6/+6
* bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)Hou Tao2022-01-271-3/+3
* bpf: Fix out of bounds access from invalid *_or_null type verificationDaniel Borkmann2022-01-161-3/+3
* bpf: Make 32->64 bounds propagation slightly more robustDaniel Borkmann2021-12-221-9/+15
* bpf: Fix signed bounds propagation after mov32Daniel Borkmann2021-12-221-0/+4
* bpf: Fix the off-by-two error in range markingsMaxim Mikityanskiy2021-12-141-1/+1
* bpf: Fix toctou on read-only map's constant scalar trackingDaniel Borkmann2021-12-011-1/+16
* bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.Alexei Starovoitov2021-11-181-1/+1
* bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.Alexei Starovoitov2021-11-181-1/+1
* bpf: Add oversize check before call kvcalloc()Bixuan Cui2021-09-301-0/+2
* bpf: Fix possible out of bound write in narrow load handlingAndrey Ignatov2021-09-151-0/+4
* bpf: Fix potential memleak and UAF in the verifier.He Fengqing2021-09-151-11/+16
* bpf: Fix ringbuf helper function compatibilityDaniel Borkmann2021-09-031-2/+6
* bpf: Clear zext_dst of dead insnsIlya Leoshkevich2021-08-261-0/+1
* bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann2021-08-041-10/+17
* bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer2021-08-041-31/+15
* bpf: Remove superfluous aux sanitation on subprog rejectionDaniel Borkmann2021-08-041-34/+0
* bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann2021-08-041-55/+32
* bpf: Fix tail_call_reachable rejection for interpreter when jit failedDaniel Borkmann2021-07-281-0/+2
* bpf: Track subprog poke descriptors correctly and fix use-after-freeJohn Fastabend2021-07-251-39/+21
* bpf: Fix null ptr deref with mixed tail calls and subprogsJohn Fastabend2021-07-141-2/+4
* bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann2021-06-231-2/+18
* bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann2021-06-231-1/+3
* bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann2021-06-231-4/+40
* bpf, offload: Reorder offload callback 'prepare' in verifierYinjun Zhang2021-06-031-6/+6
* bpf: No need to simulate speculative domain for immediatesDaniel Borkmann2021-05-281-1/+5
* bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann2021-05-281-10/+12
* bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann2021-05-281-7/+11
* bpf: Fix alu32 const subreg bound tracking on bitwise operationsDaniel Borkmann2021-05-141-13/+9
* bpf: Fix propagation of 32 bit unsigned bounds from 64 bit boundsDaniel Borkmann2021-05-141-5/+3
* bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann2021-05-071-10/+17
* bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann2021-05-071-8/+4
* bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann2021-04-281-29/+44
* bpf: Refactor and streamline bounds check into helperDaniel Borkmann2021-04-281-16/+33
* bpf: Allow variable-offset stack accessAndrei Matei2021-04-281-146/+511
* bpf: Permits pointers on stack for helper callsYonghong Song2021-04-281-1/+2
* bpf: Move sanitize_val_alu out of op switchDaniel Borkmann2021-04-211-6/+11
* bpf: Improve verifier error messages for usersDaniel Borkmann2021-04-211-23/+63
* bpf: Rework ptr_limit into alu_limit and add common error pathDaniel Borkmann2021-04-211-8/+13
* bpf: Move off_reg into sanitize_ptr_aluDaniel Borkmann2021-04-211-4/+5
* bpf: Ensure off_reg has no mixed signed bounds for all typesDaniel Borkmann2021-04-211-10/+9
* bpf: Use correct permission flag for mixed signed bounds arithmeticDaniel Borkmann2021-04-211-1/+1
* bpf: Enforce that struct_ops programs be GPL-onlyToke Høiland-Jørgensen2021-04-141-0/+5
* bpf: Add sanity check for upper ptr_limitPiotr Krysiuk2021-03-201-3/+8
* bpf: Simplify alu_limit masking for pointer arithmeticPiotr Krysiuk2021-03-201-5/+5
* bpf: Fix off-by-one for area size in creating mask to leftPiotr Krysiuk2021-03-201-2/+2
* bpf: Prohibit alu ops for pointer types not defining ptr_limitPiotr Krysiuk2021-03-201-6/+10
* bpf: Clear subreg_def for global function return valuesIlya Leoshkevich2021-03-041-1/+2