bpf: improve verifier resilience
Status from this message: Applied to bpf, thanks!
Get series with b4
b4 am [email protected]Versions newest first
Patches in v1 Applied
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/3 | bpf: check pending signals while verifying programskernel/ | +3 | 0 replies | |
| 2/3 | bpf: improve verifier branch analysiskernel/ tools/ | +82 | 0 replies | |
| 3/3 | bpf: add per-insn complexity limitkernel/ | +6 | 0 replies |
Reviews trailers per patch
All 3 patches have a Reviewed-by or Acked-by.
| Patch | Daniel Borkmann | Edward Cree |
|---|---|---|
| 1/3 | A-b | A-b |
| 2/3 | A-b | A-b |
| 3/3 | A-b | A-b |
Trailers given in replies are filled; those carried in the patches from earlier versions are outlined with dashes.
Cover letter [PATCH bpf 0/3] bpf: improve verifier resilience
Three patches to improve verifier ability to handle pathological bpf programs with a lot of branches:
- make sure prog_load syscall can be aborted
- improve branch taken analysis
- introduce per-insn complexity limit for unprivileged programs
Alexei Starovoitov (3):
bpf: check pending signals while verifying programs
bpf: improve verifier branch analysis
bpf: add per-insn complexity limit
kernel/bpf/verifier.c | 103 +++++++++++++++++--- tools/testing/selftests/bpf/test_verifier.c | 4 +- 2 files changed, 91 insertions(+), 16 deletions(-)
Signature · 1 line
2.17.1