vbpf / prevail / 26462976981

push

github

Enforce map-function compatibility checks (#1127)

Add allowed_map_types bitmask to EbpfHelperPrototype, threaded through
CallContract and checked via a new ValidMapType assertion. This encodes
the function→map direction of the kernel's check_map_func_compatibility
(v6.18): each helper that requires specific map types now declares them,
and the checker rejects mismatches at verification time.

Covers 34 helpers across perf_event, ringbuf, storage, redirect, queue/
stack, cgroup, and reuseport families. Map type UNSPEC (0) is treated
as unknown and silently allowed to avoid false positives from incomplete
ELF metadata.

Closes #1123

Signed-off-by: Elazar Gershuni <elazarg@gmail.com>
Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

12 of 16 new or added lines in 6 files covered. (75.0%)

8980 of 10398 relevant lines covered (86.36%)

6420743.39 hits per line