selftests/bpf: Check that JMP32 pointer vs zero jumps are not predicted

Browse source

Add jmp32_ptr_vs_zero_jne: the fall-through of the 32-bit compare, which
the verifier used to skip, contains an out of bounds map value access,
hence w/o the previous patch the program is accepted. See previous patch
for detailed description.

Reported-by: Nicholas Carlini <npc@anthropic.com>
Suggested-by: Nicholas Carlini <npc@anthropic.com>
Signed-off-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/bpf/20260904083325.2083493-6-eddyz87@gmail.com
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>

...

This commit is contained in:

Eduard Zingerman 2026-09-04 01:33:23 -07:00 • committed by Kumar Kartikeya Dwivedi

parent e51179a4e0

commit 836b2fe544

No known key found for this signature in database

GPG key ID: 472D377B63542F83

1 changed files with 27 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

27

tools/testing/selftests/bpf/progs/verifier_jeq_infer_not_null.c

View file