vbpf / prevail / 30767211297
86%

DEFAULT BRANCH: main
Ran
Jobs 1
Files 79
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.986%. Remained the same
30767211297

push

github

elazarg 
Cover the stale-svalue null-branch hole end to end (#1150)

ebpf-samples ships map_sequential_lookup_unsafe.o (contributed with #1149): two
sequential bpf_map_lookup_elem calls where the second result is dereferenced on
its null branch. It was the only object in the pinned submodule not registered
in the inventory, so nothing exercised it.

It is a real regression test for the hole #1155 closed. Built at ee56790c, the
commit before that fix, the verifier reports PASS on it; on main it reports

    20: Invalid type (r1.type in {ctx, stack, packet, shared, socket, alloc_mem})

The stale svalue does not come from the first lookup's null check, as the
sample's own comments say, but from clang hoisting the error return: r0 =
4294967295 (return -1) executes before the second lookup, so r0 enters it
carrying svalue = 4294967295, which survives the call under the pre-fix code:

    r0.type=shared, r0.shared_offset=0, r0.shared_region_size=4,
    r0.svalue=4294967295, r0.uvalue=[0, 2147418112]

assume r0 == 0 then intersects svalue == 0 with 4294967295, yields bottom, and
the null branch with its dereference is never analyzed.

Registered as a reject override, which asserts that rejection: reintroducing the
hole makes the program pass and flips this case to failing. The YAML cases
#1155 added to call.yaml cover the transformer paths; this covers the whole
pipeline on a clang-compiled program.

Co-Authored-By: Anurag Saxena <saxena-anurag@users.noreply.github.com>
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016M7MSRkggbwEHpXYY46j2R
Signed-off-by: Elazar Gershuni <elazarg@gmail.com>

9026 of 10497 relevant lines covered (85.99%)

3151156.98 hits per line

Jobs
ID Job ID Ran Files Coverage
1 30767211297.1 79
85.99
 GitHub Action Run
Source Files on build 30767211297