summaryrefslogtreecommitdiff
path: root/kernel/bpf/verifier.c
AgeCommit message (Expand)AuthorFilesLines
2021-09-15bpf: Fix possible out of bound write in narrow load handlingAndrey Ignatov1-0/+4
2021-09-15bpf: Fix potential memleak and UAF in the verifier.He Fengqing1-11/+16
2021-09-03bpf: Fix ringbuf helper function compatibilityDaniel Borkmann1-2/+6
2021-08-26bpf: Clear zext_dst of dead insnsIlya Leoshkevich1-0/+1
2021-08-04bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann1-10/+17
2021-08-04bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer1-31/+15
2021-08-04bpf: Remove superfluous aux sanitation on subprog rejectionDaniel Borkmann1-34/+0
2021-08-04bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann1-55/+32
2021-07-28bpf: Fix tail_call_reachable rejection for interpreter when jit failedDaniel Borkmann1-0/+2
2021-07-25bpf: Track subprog poke descriptors correctly and fix use-after-freeJohn Fastabend1-39/+21
2021-07-14bpf: Fix null ptr deref with mixed tail calls and subprogsJohn Fastabend1-2/+4
2021-06-23bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann1-2/+18
2021-06-23bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann1-1/+3
2021-06-23bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann1-4/+40
2021-06-03bpf, offload: Reorder offload callback 'prepare' in verifierYinjun Zhang1-6/+6
2021-05-28bpf: No need to simulate speculative domain for immediatesDaniel Borkmann1-1/+5
2021-05-28bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann1-10/+12
2021-05-28bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann1-7/+11
2021-05-14bpf: Fix alu32 const subreg bound tracking on bitwise operationsDaniel Borkmann1-13/+9
2021-05-14bpf: Fix propagation of 32 bit unsigned bounds from 64 bit boundsDaniel Borkmann1-5/+3
2021-05-07bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann1-10/+17
2021-05-07bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann1-8/+4
2021-04-28bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann1-29/+44
2021-04-28bpf: Refactor and streamline bounds check into helperDaniel Borkmann1-16/+33
2021-04-28bpf: Allow variable-offset stack accessAndrei Matei1-146/+511
2021-04-28bpf: Permits pointers on stack for helper callsYonghong Song1-1/+2
2021-04-21bpf: Move sanitize_val_alu out of op switchDaniel Borkmann1-6/+11
2021-04-21bpf: Improve verifier error messages for usersDaniel Borkmann1-23/+63
2021-04-21bpf: Rework ptr_limit into alu_limit and add common error pathDaniel Borkmann1-8/+13
2021-04-21bpf: Move off_reg into sanitize_ptr_aluDaniel Borkmann1-4/+5
2021-04-21bpf: Ensure off_reg has no mixed signed bounds for all typesDaniel Borkmann1-10/+9
2021-04-21bpf: Use correct permission flag for mixed signed bounds arithmeticDaniel Borkmann1-1/+1
2021-04-14bpf: Enforce that struct_ops programs be GPL-onlyToke Høiland-Jørgensen1-0/+5
2021-03-20bpf: Add sanity check for upper ptr_limitPiotr Krysiuk1-3/+8
2021-03-20bpf: Simplify alu_limit masking for pointer arithmeticPiotr Krysiuk1-5/+5
2021-03-20bpf: Fix off-by-one for area size in creating mask to leftPiotr Krysiuk1-2/+2
2021-03-20bpf: Prohibit alu ops for pointer types not defining ptr_limitPiotr Krysiuk1-6/+10
2021-03-04bpf: Clear subreg_def for global function return valuesIlya Leoshkevich1-1/+2
2021-02-26bpf: Fix truncation handling for mod32 dst reg wrt zeroDaniel Borkmann1-4/+6
2021-02-13bpf: Fix verifier jsgt branch analysis on max boundDaniel Borkmann1-2/+2
2021-02-13bpf: Fix 32 bit src register truncation on div/modDaniel Borkmann1-15/+13
2021-02-13bpf: Fix verifier jmp32 pruning decision logicDaniel Borkmann1-1/+5
2021-01-23bpf: Support PTR_TO_MEM{,_OR_NULL} register spillingGilad Reti1-0/+2
2021-01-23bpf: Fix signed_{sub,add32}_overflows type handlingDaniel Borkmann1-3/+3
2020-12-11bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds.Alexei Starovoitov1-5/+5
2020-11-14bpf: Relax return code check for subprogramsDmitrii Banshchikov1-2/+13
2020-11-11bpf: Fix unsigned 'datasec_id' compared with zero in check_pseudo_btf_idKaixu Xia1-1/+2
2020-10-20bpf: Enforce id generation for all may-be-null register typeMartin KaFai Lau1-6/+5
2020-10-15bpf: Fix register equivalence tracking.Alexei Starovoitov1-13/+25
2020-10-13Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-nextJakub Kicinski1-19/+251