summaryrefslogtreecommitdiff
path: root/kernel/bpf/verifier.c
AgeCommit message (Expand)Author
2023-02-15bpf: Do not reject when the stack read size is different from the tracked sca...Martin KaFai Lau
2023-02-15bpf: Fix to preserve reg parent/live fields when copying range infoEduard Zingerman
2023-02-15bpf: Support <8-byte scalar spill and refillMartin KaFai Lau
2023-02-15bpf: Fix incorrect state pruning for <8B spill/fillPaul Chaignon
2023-02-01bpf: Fix pointer-leak due to insufficient speculative store bypass mitigationLuis Gerhorst
2023-01-14bpf: propagate precision across all frames, not just the last oneAndrii Nakryiko
2023-01-14bpf: Check the other end of slot_type for STACK_SPILLMartin KaFai Lau
2023-01-14bpf: propagate precision in ALU/ALU64 operationsAndrii Nakryiko
2023-01-14bpf: Fix slot type check in check_stack_write_var_offKumar Kartikeya Dwivedi
2022-11-16bpf: Fix wrong reg type conversion in release_reference()Youlin Li
2022-11-16bpf: Add helper macro bpf_for_each_reg_in_vstateKumar Kartikeya Dwivedi
2022-11-16bpf: Support for pointers beyond pkt_end.Alexei Starovoitov
2022-08-31bpf: Don't use tnum_range on array range checking for poke descriptorsDaniel Borkmann
2022-08-21bpf: Fix subprog names in stack traces.Alexei Starovoitov
2022-07-12bpf: Fix insufficient bounds propagation from adjust_scalar_min_max_valsDaniel Borkmann
2022-07-12bpf: Fix incorrect verifier simulation around jmp32's jeq/jneDaniel Borkmann
2022-01-27bpf: Don't promote bogus looking registers after null check.Daniel Borkmann
2022-01-27bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)Hou Tao
2022-01-16bpf: Fix out of bounds access from invalid *_or_null type verificationDaniel Borkmann
2021-12-22bpf: Make 32->64 bounds propagation slightly more robustDaniel Borkmann
2021-12-22bpf: Fix signed bounds propagation after mov32Daniel Borkmann
2021-12-14bpf: Fix the off-by-two error in range markingsMaxim Mikityanskiy
2021-12-01bpf: Fix toctou on read-only map's constant scalar trackingDaniel Borkmann
2021-11-18bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.Alexei Starovoitov
2021-11-18bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.Alexei Starovoitov
2021-09-30bpf: Add oversize check before call kvcalloc()Bixuan Cui
2021-09-15bpf: Fix possible out of bound write in narrow load handlingAndrey Ignatov
2021-09-15bpf: Fix potential memleak and UAF in the verifier.He Fengqing
2021-09-03bpf: Fix ringbuf helper function compatibilityDaniel Borkmann
2021-08-26bpf: Clear zext_dst of dead insnsIlya Leoshkevich
2021-08-04bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann
2021-08-04bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer
2021-08-04bpf: Remove superfluous aux sanitation on subprog rejectionDaniel Borkmann
2021-08-04bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann
2021-07-28bpf: Fix tail_call_reachable rejection for interpreter when jit failedDaniel Borkmann
2021-07-25bpf: Track subprog poke descriptors correctly and fix use-after-freeJohn Fastabend
2021-07-14bpf: Fix null ptr deref with mixed tail calls and subprogsJohn Fastabend
2021-06-23bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann
2021-06-23bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann
2021-06-23bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann
2021-06-03bpf, offload: Reorder offload callback 'prepare' in verifierYinjun Zhang
2021-05-28bpf: No need to simulate speculative domain for immediatesDaniel Borkmann
2021-05-28bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann
2021-05-28bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann
2021-05-14bpf: Fix alu32 const subreg bound tracking on bitwise operationsDaniel Borkmann
2021-05-14bpf: Fix propagation of 32 bit unsigned bounds from 64 bit boundsDaniel Borkmann
2021-05-07bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann
2021-05-07bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann
2021-04-28bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann
2021-04-28bpf: Refactor and streamline bounds check into helperDaniel Borkmann