diff options
| author | Eduard Zingerman <eddyz87@gmail.com> | 2026-04-26 01:48:24 +0300 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2026-04-27 19:56:39 +0300 |
| commit | af469e10b4bc1446391514f69eeede843f29cf9c (patch) | |
| tree | 140489e30dfb07d202abaf35e220d09e1822a898 /include/uapi/linux | |
| parent | cd5b460ed1eca9e48f3eb07db1ee0a522c0eaa23 (diff) | |
| download | linux-af469e10b4bc1446391514f69eeede843f29cf9c.tar.xz | |
selftests/bpf: a test for proper cnums compare in is_state_visited()
Test case demonstrating a bug in cnum comparison logic fixed by
previous commit. A pruning point is reached with r6 in two states:
1. 32-bit range of [0x7FFFFFF0, U32_MAX] ∪ [0, 0x10]
2. 32-bit range of [0x100, 0x200]
At pruning point the buggy is_state_visited() logic would assume that
would assume range (2) to be a subset of (1) and fail to explore the
path performing division by zero.
Signed-off-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/r/20260425-cnum-range-within-v1-2-2fdca70cb09d@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'include/uapi/linux')
0 files changed, 0 insertions, 0 deletions