Merge branch 'bpf-reject-mixed-arena-and-ordinary-atomic-paths'

Browse source

Yiyang Chen says:

====================
bpf: Reject mixed arena and ordinary atomic paths

Atomic RMW instructions use a single aux pointer type to select their final
instruction encoding. The verifier currently records that type only for
PTR_TO_ARENA, allowing a second path with an ordinary pointer to reach the
same instruction before fixups rewrite it to BPF_PROBE_ATOMIC.

Patch 1 records the destination type for every atomic RMW path so the existing
pointer mismatch check rejects incompatible uses of one instruction.

Patch 2 adds a verifier regression test with PTR_TO_ARENA and
PTR_TO_STACK paths converging on one atomic add.
====================

Link: https://patch.msgid.link/20260816-bpf-next-038-mixed-atomic-v1-v2-0-4644c1886dbc@mails.tsinghua.edu.cn
Signed-off-by: Eduard Zingerman <eddyz87@gmail.com>

...

This commit is contained in:

Eduard Zingerman 2026-08-16 15:54:18 -07:00

parent 4bc49ae344 5ab9fbeca8

commit 8eb1892064

1 changed files with 31 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

32

tools/testing/selftests/bpf/progs/verifier_arena.c

View file