Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

netsh ebpf show verif should verify all sections #4154

Draft
wants to merge 2 commits into
base: main
Choose a base branch
from

Conversation

dthaler
Copy link
Collaborator

@dthaler dthaler commented Jan 21, 2025

Description

Fixes #3884

This PR also fixes an issue uncovered by adding more SAL annotations. Specifically, _ebpf_api_elf_verify_program_from_stream() was passing a possibly NULL stats pointer to ebpf_verify_program() which would dereference it and crash.

Testing

Added a new unit test to run "show verif" on bindmonitor_bpf2bpf.c which has multiple programs and sections

Documentation

No impact.

Installation

No impact.

Signed-off-by: Dave Thaler <[email protected]>
@dthaler dthaler marked this pull request as draft January 21, 2025 22:44
@dthaler dthaler changed the title [DRAFT] netsh ebpf show verif should verify all sections netsh ebpf show verif should verify all sections Jan 21, 2025
_ebpf_api_elf_verify_program_from_stream() was passing a possibly
NULL stats pointer to ebpf_verify_program() which would dereference
it and crash.

Signed-off-by: Dave Thaler <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

In tail call scenario, netsh ebpf show verif command to verify all sections.
1 participant