summaryrefslogtreecommitdiff
path: root/kernel/bpf/verifier.c
AgeCommit message (Expand)Author
2022-01-27bpf: Don't promote bogus looking registers after null check.Daniel Borkmann
2022-01-27bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)Hou Tao
2022-01-16bpf: Fix out of bounds access from invalid *_or_null type verificationDaniel Borkmann
2021-12-22bpf: Make 32->64 bounds propagation slightly more robustDaniel Borkmann
2021-12-22bpf: Fix signed bounds propagation after mov32Daniel Borkmann
2021-12-14bpf: Fix the off-by-two error in range markingsMaxim Mikityanskiy
2021-12-01bpf: Fix toctou on read-only map's constant scalar trackingDaniel Borkmann
2021-11-18bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.Alexei Starovoitov
2021-11-18bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.Alexei Starovoitov
2021-09-30bpf: Add oversize check before call kvcalloc()Bixuan Cui
2021-09-15bpf: Fix possible out of bound write in narrow load handlingAndrey Ignatov
2021-09-15bpf: Fix potential memleak and UAF in the verifier.He Fengqing
2021-09-03bpf: Fix ringbuf helper function compatibilityDaniel Borkmann
2021-08-26bpf: Clear zext_dst of dead insnsIlya Leoshkevich
2021-08-04bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann
2021-08-04bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer
2021-08-04bpf: Remove superfluous aux sanitation on subprog rejectionDaniel Borkmann
2021-08-04bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann
2021-07-28bpf: Fix tail_call_reachable rejection for interpreter when jit failedDaniel Borkmann
2021-07-25bpf: Track subprog poke descriptors correctly and fix use-after-freeJohn Fastabend
2021-07-14bpf: Fix null ptr deref with mixed tail calls and subprogsJohn Fastabend
2021-06-23bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann
2021-06-23bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann
2021-06-23bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann
2021-06-03bpf, offload: Reorder offload callback 'prepare' in verifierYinjun Zhang
2021-05-28bpf: No need to simulate speculative domain for immediatesDaniel Borkmann
2021-05-28bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann
2021-05-28bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann
2021-05-14bpf: Fix alu32 const subreg bound tracking on bitwise operationsDaniel Borkmann
2021-05-14bpf: Fix propagation of 32 bit unsigned bounds from 64 bit boundsDaniel Borkmann
2021-05-07bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann
2021-05-07bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann
2021-04-28bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann
2021-04-28bpf: Refactor and streamline bounds check into helperDaniel Borkmann
2021-04-28bpf: Allow variable-offset stack accessAndrei Matei
2021-04-28bpf: Permits pointers on stack for helper callsYonghong Song
2021-04-21bpf: Move sanitize_val_alu out of op switchDaniel Borkmann
2021-04-21bpf: Improve verifier error messages for usersDaniel Borkmann
2021-04-21bpf: Rework ptr_limit into alu_limit and add common error pathDaniel Borkmann
2021-04-21bpf: Move off_reg into sanitize_ptr_aluDaniel Borkmann
2021-04-21bpf: Ensure off_reg has no mixed signed bounds for all typesDaniel Borkmann
2021-04-21bpf: Use correct permission flag for mixed signed bounds arithmeticDaniel Borkmann
2021-04-14bpf: Enforce that struct_ops programs be GPL-onlyToke Høiland-Jørgensen
2021-03-20bpf: Add sanity check for upper ptr_limitPiotr Krysiuk
2021-03-20bpf: Simplify alu_limit masking for pointer arithmeticPiotr Krysiuk
2021-03-20bpf: Fix off-by-one for area size in creating mask to leftPiotr Krysiuk
2021-03-20bpf: Prohibit alu ops for pointer types not defining ptr_limitPiotr Krysiuk
2021-03-04bpf: Clear subreg_def for global function return valuesIlya Leoshkevich
2021-02-26bpf: Fix truncation handling for mod32 dst reg wrt zeroDaniel Borkmann
2021-02-13bpf: Fix verifier jsgt branch analysis on max boundDaniel Borkmann