You are now the owner of this repo.

vbpf / prevail
90%

DEFAULT BRANCH: main
Repo Added
Token ENVZUPw7kXSVTNwI0SnEWS5mIrwoBd6UH regen
Build 728 Last
Files 113
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

LAST BUILD ON BRANCH main
branch: SELECT
CHANGE BRANCH
x
Sync Branches

coverage: 89.601% (+0.06%) from 89.543%
25071483533

push

github

web-flow 
Fix heap-buffer-overflow from non-instruction-aligned FUNC symbols (#1106)

* Fix heap-buffer-overflow from non-instruction-aligned FUNC symbols

Reject ELF FUNC symbols in executable sections whose st_value is not a
multiple of sizeof(EbpfInst) (8 bytes). A malformed ELF with such a
symbol causes get_program_name_and_size() to produce non-aligned program
boundaries. When read_programs() advances offset by a non-aligned
symbol_size, compute_reachable_program_span() uses truncating integer
division (offset / sizeof(EbpfInst)), inflating the computed span and
causing vector_of<EbpfInst> to memcpy past the section data buffer.

The root-cause fix validates FUNC symbol alignment in
get_program_name_and_size(), which is shared by both read_programs() and
ElfObjectState::discover_programs(). A defense-in-depth bounds check
before the vector_of call in read_programs() guards against future
regressions in span computation.

Add a test that constructs a minimal ELF with a FUNC symbol at an
unaligned offset and verifies it is cleanly rejected.

* Add acceptance test for instruction-aligned FUNC symbols

Companion to the rejection test — verifies that FUNC symbols at
8-byte-aligned offsets are accepted without error, ensuring the
alignment validation does not reject well-formed ELF files.

---------

Signed-off-by: Michael Agun <danielagun@microsoft.com>
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

75 of 76 new or added lines in 2 files covered. (98.68%)

13863 of 15472 relevant lines covered (89.6%)

4364924.2 hits per line

Relevant lines Covered
15472 RELEVANT LINES 13863 COVERED LINES
4364924.2 HITS PER LINE
Source Files on main

Recent builds

Builds Branch Commit Type Ran Committer Via Coverage
25071483533 main Fix heap-buffer-overflow from non-instruction-aligned FUNC symbols (#1106) * Fix heap-buffer-overflow from non-instruction-aligned FUNC symbols Reject ELF FUNC symbols in executable sections whose st_value is not a multiple of sizeof(EbpfInst) (... push web-flow github
89.6
25067030364 fix-unaligned-func-symbol-overflow Merge eaf6b2187 into 5d5cbe189 Pull #1106 web-flow github
89.6
25065375325 fix-unaligned-func-symbol-overflow Merge 8089a5af1 into 5d5cbe189 Pull #1106 web-flow github
89.58
25039571607 main Classify errors as bugs vs runtime input errors (#1104) - Introduces a shallow error hierarchy (`PrevailError`, `RuntimeInputError`, `InternalError`) in a new dependency-free header `crab_utils/prevail_errors.hpp`. The single load-bearing distinc... push web-flow github
89.54
25028013417 better-error-handling Merge bec90cce1 into 305f59f98 Pull #1104 web-flow github
89.54
25026938822 better-error-handling Merge 84edc721f into 305f59f98 Pull #1104 web-flow github
89.55
25013164561 main Share helper/kfunc arg resolution; compact kfunc prototype table (#1102) Extract the duplicated single-/pair-arg kind mappings and the args-walk switch from call_resolver.cpp and kfunc.cpp into a shared header (ir/arg_kind.hpp). Each caller dispa... push web-flow github
89.57
25009785730 refactor/call-resolver-kfunc Merge de09c4949 into ef68e10c5 Pull #1102 web-flow github
89.57
25009382349 refactor/call-resolver-kfunc Merge 41d4ad31e into ef68e10c5 Pull #1102 web-flow github
89.57
24963666837 main Split runtime semantics from presentation/orchestration (#1101) Closes #1085. Introduces `RuntimeConfig` — the subset of verifier options that affects which programs are accepted — and reshapes `VerifierOptions` so a signature reveals whether a k... push web-flow github
89.28
See All Builds (708)

Badge your Repo: prevail

We detected this repo isn’t badged! Grab the embed code to the right, add it to your repo to show off your code coverage, and when the badge is live hit the refresh button to remove this message.
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst

Refresh