iovisor / ubpf
79%

DEFAULT BRANCH: main
Repo Added
Files 205
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: SELECT
CHANGE BRANCH
x

coverage: 78.793% (-0.2%) from 79.028%
28978499608

push

github

web-flow 
Loader and verifier fixes for clang/LLVM BPF outputLoader verifier fixes (#802)

* verifier: accept sub-programs that end in an unconditional jump

check_for_self_contained_sub_programs() accepted a local-call sub-program
only if it ended in EXIT or had an unconditional jump as its penultimate
instruction, rejecting one whose final instruction is itself the jump.
clang produces this layout when a function's tail is a loop back-edge:
every exit path leaves through an EXIT in the loop body and the last
instruction is a JA back to the top.

This change accepts a trailing JA/JA32 as a terminator in addition to the
penultimate-jump check for more common layouts.

Signed-off-by: Alex Forster <alex@alexforster.com>
Co-Authored-By: Claude <noreply@anthropic.com>

* Recompute un-relocated intra-section bpf-to-bpf call targets after link

clang emits calls between static functions in the same section with a
PC-relative imm and no relocation entry. The imm is computed against the
.o instruction layout, but the loader lands functions in symbol-table
order, which differs from .o offset order whenever the main function is
not first in its section. When the two orders differ the imm is stale and
the call jumps to the wrong function.

Add a fixup pass after the relocation pass that finds these un-relocated
local calls, decodes the original target offset from the raw imm, locates
the target by its section start, and rewrites the imm from the landed
positions the same way the relocation pass does. Call sites that already
carry a relocation (SHT_REL or SHT_RELA) are detected and skipped. The
loader still only applies SHT_REL; SHT_RELA is scanned here only so a call
carrying one is recognized as relocated and left alone rather than
re-decoded into a wrong target.

The added test exercises the no-relocation path; the skip and error
branches are not covered.

Signed-off-by: Alex Forster <alex@alexforster.com>
Co-Authored-By: Claude <noreply@anthropic.com>

* loader: accept... (continued)

139 of 168 new or added lines in 3 files covered. (82.74%)

117 existing lines in 11 files now uncovered.

9270 of 11765 relevant lines covered (78.79%)

933162.88 hits per line

Relevant lines Covered
11765 RELEVANT LINES 9270 COVERED LINES
933162.88 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
28978499608 main Loader and verifier fixes for clang/LLVM BPF outputLoader verifier fixes (#802) * verifier: accept sub-programs that end in an unconditional jump check_for_self_contained_sub_programs() accepted a local-call sub-program only if it ended in EXIT ... push web-flow github
78.79
28966034061 main Loader and verifier fixes for clang/LLVM BPF outputLoader verifier fixes (#802) * verifier: accept sub-programs that end in an unconditional jump check_for_self_contained_sub_programs() accepted a local-call sub-program only if it ended in EXIT ... push web-flow github
78.59
28901743260 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
79.03
28826397445 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
79.03
28755970210 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
79.03
28720585854 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
78.94
28710181226 dependabot/github_actions/actions-2c4587cf48 Merge 5e71315e4 into 2a8edd11e Pull #806 web-flow github
79.03
28710157220 dependabot/pip/actions-baf6301acb Merge ab9d83d30 into 2a8edd11e Pull #789 web-flow github
79.03
28684926116 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
79.03
28622413659 main build(deps): bump the actions group across 1 directory with 8 updates (#804) Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/... push web-flow github
79.03
See All Builds (2514)