vbpf / prevail / 26457482655

86%

push

github

Add sleepable program support and might_sleep helper gating (#1136)

Add might_sleep flag to EbpfHelperPrototype and is_sleepable flag to
EbpfProgramType. Helpers marked might_sleep are rejected in non-sleepable
programs via is_helper_usable.

Sleepable programs are detected by matching section prefixes ending in
.s/ (e.g., fentry.s/, lsm.s/). Added .s/ variants for tracing and
struct_ops program types.

Syscall programs always run in sleepable context, so they should be
able to call might_sleep helpers regardless of section suffix.

Marked 5 helpers as might_sleep: copy_from_user, copy_from_user_task,
d_path, ima_inode_hash, ima_file_hash.

Closes #1133

Signed-off-by: Elazar Gershuni <elazarg@gmail.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

5 of 5 new or added lines in 2 files covered. (100.0%)

8968 of 10382 relevant lines covered (86.38%)

6430884.19 hits per line