summaryrefslogtreecommitdiff
path: root/kernel/bpf/verifier.c
AgeCommit message (Expand)AuthorFilesLines
2023-02-06bpf: Fix pointer-leak due to insufficient speculative store bypass mitigationLuis Gerhorst1-1/+3
2022-08-25bpf: Verifer, adjust_scalar_min_max_vals to always call update_reg_bounds()Ovidiu Panait1-0/+1
2021-12-14bpf: Fix the off-by-two error in range markingsMaxim Mikityanskiy1-1/+1
2021-09-22bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann1-10/+17
2021-09-22bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer1-29/+13
2021-09-22bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann1-55/+33
2021-09-22bpf: track spill/fill of constantsAlexei Starovoitov1-23/+63
2021-09-22bpf: Sanity check max value for var_off stack accessAndrey Ignatov1-3/+15
2021-09-22bpf: Reject indirect var_off stack access in unpriv modeAndrey Ignatov1-0/+13
2021-09-22bpf: Reject indirect var_off stack access in raw modeAndrey Ignatov1-0/+9
2021-09-22bpf: Support variable offset stack access from helpersAndrey Ignatov1-21/+54
2021-09-22bpf: correct slot_type marking logic to allow more stack slot sharingJiong Wang1-0/+5
2021-09-22bpf/verifier: per-register parent pointersEdward Cree1-139/+44
2021-09-03bpf: Fix truncation handling for mod32 dst reg wrt zeroDaniel Borkmann1-4/+5
2021-09-03bpf: Fix 32 bit src register truncation on div/modDaniel Borkmann1-11/+11
2021-08-15bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann1-4/+40
2021-08-15bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann1-2/+15
2021-08-15bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann1-2/+5
2021-06-10bpf: Add BPF_F_ANY_ALIGNMENT.David S. Miller1-0/+3
2021-06-03bpf: No need to simulate speculative domain for immediatesDaniel Borkmann1-1/+5
2021-06-03bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann1-10/+12
2021-06-03bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann1-7/+11
2021-06-03bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann1-10/+17
2021-06-03bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann1-26/+44
2021-06-03bpf: Move sanitize_val_alu out of op switchDaniel Borkmann1-5/+10
2021-06-03bpf: Refactor and streamline bounds check into helperDaniel Borkmann1-17/+37
2021-06-03bpf: Improve verifier error messages for usersDaniel Borkmann1-22/+62
2021-06-03bpf: Rework ptr_limit into alu_limit and add common error pathDaniel Borkmann1-8/+13
2021-06-03bpf: Ensure off_reg has no mixed signed bounds for all typesDaniel Borkmann1-9/+9
2021-06-03bpf: Move off_reg into sanitize_ptr_aluDaniel Borkmann1-4/+5
2021-06-03bpf: extend is_branch_taken to registersAlexei Starovoitov1-14/+18
2021-05-07bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann1-8/+4
2021-03-20bpf: Add sanity check for upper ptr_limitPiotr Krysiuk1-3/+8
2021-03-20bpf: Simplify alu_limit masking for pointer arithmeticPiotr Krysiuk1-5/+5
2021-03-20bpf: Fix off-by-one for area size in creating mask to leftPiotr Krysiuk1-2/+2
2021-03-20bpf: Prohibit alu ops for pointer types not defining ptr_limitPiotr Krysiuk1-6/+10
2020-04-23bpf: fix buggy r0 retval refinement for tracing helpersDaniel Borkmann1-11/+34
2020-01-27bpf: Add missed newline in verifier verbose logAndrey Ignatov1-1/+1
2020-01-23bpf: Fix incorrect verifier simulation of ARSH under ALU32Daniel Borkmann1-3/+10
2020-01-12bpf: Fix passing modified ctx to ld/abs/ind instructionDaniel Borkmann1-2/+7
2019-07-03bpf: fix unconnected udp hooksDaniel Borkmann1-4/+8
2019-06-15bpf: fix undefined behavior in narrow load handlingKrzesimir Nowak1-1/+1
2019-04-03bpf: do not restore dst_reg when cur_state is freedXu Yu1-1/+1
2019-03-10bpf: fix sanitation rewrite in case of non-pointersDaniel Borkmann1-1/+2
2019-01-31bpf: fix sanitation of alu op with pointer / scalar type from different pathsDaniel Borkmann1-13/+48
2019-01-31bpf: prevent out of bounds speculation on pointer arithmeticDaniel Borkmann1-7/+179
2019-01-31bpf: fix check_map_access smin_value test when pointer contains offsetDaniel Borkmann1-1/+5
2019-01-31bpf: restrict unknown scalars of mixed signed bounds for unprivilegedDaniel Borkmann1-1/+7
2019-01-31bpf: restrict stack pointer arithmetic for unprivilegedDaniel Borkmann1-22/+41
2019-01-31bpf: restrict map value pointer arithmetic for unprivilegedDaniel Borkmann1-0/+11