summaryrefslogtreecommitdiff
path: root/kernel/bpf/verifier.c
AgeCommit message (Expand)Author
2021-12-14bpf: Fix the off-by-two error in range markingsMaxim Mikityanskiy
2021-12-01bpf: Fix toctou on read-only map's constant scalar trackingDaniel Borkmann
2021-11-18bpf: Fix propagation of signed bounds from 64-bit min/max into 32-bit.Alexei Starovoitov
2021-11-18bpf: Fix propagation of bounds from 64-bit min/max into 32-bit and var_off.Alexei Starovoitov
2021-09-30bpf: Add oversize check before call kvcalloc()Bixuan Cui
2021-09-15bpf: Fix possible out of bound write in narrow load handlingAndrey Ignatov
2021-09-15bpf: Fix potential memleak and UAF in the verifier.He Fengqing
2021-09-03bpf: Fix ringbuf helper function compatibilityDaniel Borkmann
2021-08-26bpf: Clear zext_dst of dead insnsIlya Leoshkevich
2021-08-04bpf: Fix pointer arithmetic mask tightening under state pruningDaniel Borkmann
2021-08-04bpf: verifier: Allocate idmap scratch in verifier envLorenz Bauer
2021-08-04bpf: Remove superfluous aux sanitation on subprog rejectionDaniel Borkmann
2021-08-04bpf: Fix leakage due to insufficient speculative store bypass mitigationDaniel Borkmann
2021-07-28bpf: Fix tail_call_reachable rejection for interpreter when jit failedDaniel Borkmann
2021-07-25bpf: Track subprog poke descriptors correctly and fix use-after-freeJohn Fastabend
2021-07-14bpf: Fix null ptr deref with mixed tail calls and subprogsJohn Fastabend
2021-06-23bpf: Do not mark insn as seen under speculative path verificationDaniel Borkmann
2021-06-23bpf: Inherit expanded/patched seen count from old aux dataDaniel Borkmann
2021-06-23bpf: Fix leakage under speculation on mispredicted branchesDaniel Borkmann
2021-06-03bpf, offload: Reorder offload callback 'prepare' in verifierYinjun Zhang
2021-05-28bpf: No need to simulate speculative domain for immediatesDaniel Borkmann
2021-05-28bpf: Fix mask direction swap upon off reg sign changeDaniel Borkmann
2021-05-28bpf: Wrap aux data inside bpf_sanitize_info containerDaniel Borkmann
2021-05-14bpf: Fix alu32 const subreg bound tracking on bitwise operationsDaniel Borkmann
2021-05-14bpf: Fix propagation of 32 bit unsigned bounds from 64 bit boundsDaniel Borkmann
2021-05-07bpf: Fix leakage of uninitialized bpf stack under speculationDaniel Borkmann
2021-05-07bpf: Fix masking negation logic upon negative dst registerDaniel Borkmann
2021-04-28bpf: Tighten speculative pointer arithmetic maskDaniel Borkmann
2021-04-28bpf: Refactor and streamline bounds check into helperDaniel Borkmann
2021-04-28bpf: Allow variable-offset stack accessAndrei Matei
2021-04-28bpf: Permits pointers on stack for helper callsYonghong Song
2021-04-21bpf: Move sanitize_val_alu out of op switchDaniel Borkmann
2021-04-21bpf: Improve verifier error messages for usersDaniel Borkmann
2021-04-21bpf: Rework ptr_limit into alu_limit and add common error pathDaniel Borkmann
2021-04-21bpf: Move off_reg into sanitize_ptr_aluDaniel Borkmann
2021-04-21bpf: Ensure off_reg has no mixed signed bounds for all typesDaniel Borkmann
2021-04-21bpf: Use correct permission flag for mixed signed bounds arithmeticDaniel Borkmann
2021-04-14bpf: Enforce that struct_ops programs be GPL-onlyToke Høiland-Jørgensen
2021-03-20bpf: Add sanity check for upper ptr_limitPiotr Krysiuk
2021-03-20bpf: Simplify alu_limit masking for pointer arithmeticPiotr Krysiuk
2021-03-20bpf: Fix off-by-one for area size in creating mask to leftPiotr Krysiuk
2021-03-20bpf: Prohibit alu ops for pointer types not defining ptr_limitPiotr Krysiuk
2021-03-04bpf: Clear subreg_def for global function return valuesIlya Leoshkevich
2021-02-26bpf: Fix truncation handling for mod32 dst reg wrt zeroDaniel Borkmann
2021-02-13bpf: Fix verifier jsgt branch analysis on max boundDaniel Borkmann
2021-02-13bpf: Fix 32 bit src register truncation on div/modDaniel Borkmann
2021-02-13bpf: Fix verifier jmp32 pruning decision logicDaniel Borkmann
2021-01-23bpf: Support PTR_TO_MEM{,_OR_NULL} register spillingGilad Reti
2021-01-23bpf: Fix signed_{sub,add32}_overflows type handlingDaniel Borkmann
2020-12-10bpf: Fix propagation of 32-bit signed bounds from 64-bit bounds.Alexei Starovoitov