[PATCH bpf 00/11] skb/arena bugfixes
From: Emil Tsalapatis <emil@etsalapatis.com>
Date: 2026-09-16 05:08:35
Also in:
bpf
From: etsal <redacted> Set of verifier-focused bugfixes related to dynptrs, SKB management in BPF, and dynptrs. Signed-off-by: Emil Tsalapatis <emil@etsalapatis.com> Emil Tsalapatis (11): bpf: Fix bounds check for skb-backed dynptrs selftests/bpf: Test dynptr slices past end of skb bpf: Fix bpf_sock context code generation selftests/bpf: Add selftests for rx_queue_mapping context access bpf: Reject pkt arguments in mutating subprogs selftests/bpf: Test rejection of pkt args to mutating subprogs bpf: Prevent variable arena/non-arena register contents selftests/bpf: Test for mixed arena/nonarena code paths bpf: Track whether dynptr type is known bpf: Track skb memory invalidation by packet-backed dynptrs selftests/bpf: Test dynptr slice invalidation on skb clobber include/linux/bpf_verifier.h | 5 + include/linux/skbuff.h | 3 +- kernel/bpf/cfg.c | 10 +- kernel/bpf/verifier.c | 112 +++++++++-- net/core/filter.c | 7 +- .../testing/selftests/bpf/prog_tests/dynptr.c | 10 + .../testing/selftests/bpf/progs/dynptr_fail.c | 183 ++++++++++++++++++ .../selftests/bpf/progs/dynptr_success.c | 20 ++ .../selftests/bpf/progs/verifier_arena.c | 49 +++++ .../bpf/progs/verifier_global_ptr_args.c | 53 +++++ .../selftests/bpf/progs/verifier_sock.c | 38 ++++ 11 files changed, 472 insertions(+), 18 deletions(-) -- 2.54.0