339bbff2d6
Daniel Borkmann says:
====================
pull-request: bpf-next 2018-12-21
The following pull-request contains BPF updates for your *net-next* tree.
There is a merge conflict in test_verifier.c. Result looks as follows:
[...]
},
{
"calls: cross frame pruning",
.insns = {
[...]
.prog_type = BPF_PROG_TYPE_SOCKET_FILTER,
.errstr_unpriv = "function calls to other bpf functions are allowed for root only",
.result_unpriv = REJECT,
.errstr = "!read_ok",
.result = REJECT,
},
{
"jset: functional",
.insns = {
[...]
{
"jset: unknown const compare not taken",
.insns = {
BPF_RAW_INSN(BPF_JMP | BPF_CALL, 0, 0, 0,
BPF_FUNC_get_prandom_u32),
BPF_JMP_IMM(BPF_JSET, BPF_REG_0, 1, 1),
BPF_LDX_MEM(BPF_B, BPF_REG_8, BPF_REG_9, 0),
BPF_EXIT_INSN(),
},
.prog_type = BPF_PROG_TYPE_SOCKET_FILTER,
.errstr_unpriv = "!read_ok",
.result_unpriv = REJECT,
.errstr = "!read_ok",
.result = REJECT,
},
[...]
{
"jset: range",
.insns = {
[...]
},
.prog_type = BPF_PROG_TYPE_SOCKET_FILTER,
.result_unpriv = ACCEPT,
.result = ACCEPT,
},
The main changes are:
1) Various BTF related improvements in order to get line info
working. Meaning, verifier will now annotate the corresponding
BPF C code to the error log, from Martin and Yonghong.
2) Implement support for raw BPF tracepoints in modules, from Matt.
3) Add several improvements to verifier state logic, namely speeding
up stacksafe check, optimizations for stack state equivalence
test and safety checks for liveness analysis, from Alexei.
4) Teach verifier to make use of BPF_JSET instruction, add several
test cases to kselftests and remove nfp specific JSET optimization
now that verifier has awareness, from Jakub.
5) Improve BPF verifier's slot_type marking logic in order to
allow more stack slot sharing, from Jiong.
6) Add sk_msg->size member for context access and add set of fixes
and improvements to make sock_map with kTLS usable with openssl
based applications, from John.
7) Several cleanups and documentation updates in bpftool as well as
auto-mount of tracefs for "bpftool prog tracelog" command,
from Quentin.
8) Include sub-program tags from now on in bpf_prog_info in order to
have a reliable way for user space to get all tags of the program
e.g. needed for kallsyms correlation, from Song.
9) Add BTF annotations for cgroup_local_storage BPF maps and
implement bpf fs pretty print support, from Roman.
10) Fix bpftool in order to allow for cross-compilation, from Ivan.
11) Update of bpftool license to GPLv2-only + BSD-2-Clause in order
to be compatible with libbfd and allow for Debian packaging,
from Jakub.
12) Remove an obsolete prog->aux sanitation in dump and get rid of
version check for prog load, from Daniel.
13) Fix a memory leak in libbpf's line info handling, from Prashant.
14) Fix cpumap's frame alignment for build_skb() so that skb_shared_info
does not get unaligned, from Jesper.
15) Fix test_progs kselftest to work with older compilers which are less
smart in optimizing (and thus throwing build error), from Stanislav.
16) Cleanup and simplify AF_XDP socket teardown, from Björn.
17) Fix sk lookup in BPF kselftest's test_sock_addr with regards
to netns_id argument, from Andrey.
====================
Signed-off-by: David S. Miller <davem@davemloft.net>
|
||
|---|---|---|
| .. | ||
| android | ||
| byteorder | ||
| caif | ||
| can | ||
| cifs | ||
| dvb | ||
| genwqe | ||
| hdlc | ||
| hsi | ||
| iio | ||
| isdn | ||
| mmc | ||
| netfilter | ||
| netfilter_arp | ||
| netfilter_bridge | ||
| netfilter_ipv4 | ||
| netfilter_ipv6 | ||
| nfsd | ||
| raid | ||
| sched | ||
| spi | ||
| sunrpc | ||
| tc_act | ||
| tc_ematch | ||
| usb | ||
| wimax | ||
| a.out.h | ||
| acct.h | ||
| adb.h | ||
| adfs_fs.h | ||
| affs_hardblocks.h | ||
| agpgart.h | ||
| aio_abi.h | ||
| am437x-vpfe.h | ||
| apm_bios.h | ||
| arcfb.h | ||
| arm_sdei.h | ||
| aspeed-lpc-ctrl.h | ||
| atalk.h | ||
| atm.h | ||
| atm_eni.h | ||
| atm_he.h | ||
| atm_idt77105.h | ||
| atm_nicstar.h | ||
| atm_tcp.h | ||
| atm_zatm.h | ||
| atmapi.h | ||
| atmarp.h | ||
| atmbr2684.h | ||
| atmclip.h | ||
| atmdev.h | ||
| atmioc.h | ||
| atmlec.h | ||
| atmmpc.h | ||
| atmppp.h | ||
| atmsap.h | ||
| atmsvc.h | ||
| audit.h | ||
| auto_dev-ioctl.h | ||
| auto_fs.h | ||
| auto_fs4.h | ||
| auxvec.h | ||
| ax25.h | ||
| b1lli.h | ||
| batadv_packet.h | ||
| batman_adv.h | ||
| baycom.h | ||
| bcache.h | ||
| bcm933xx_hcs.h | ||
| bfs_fs.h | ||
| binfmts.h | ||
| blkpg.h | ||
| blktrace_api.h | ||
| blkzoned.h | ||
| bpf.h | ||
| bpf_common.h | ||
| bpf_perf_event.h | ||
| bpfilter.h | ||
| bpqether.h | ||
| bsg.h | ||
| bt-bmc.h | ||
| btf.h | ||
| btrfs.h | ||
| btrfs_tree.h | ||
| can.h | ||
| capability.h | ||
| capi.h | ||
| cciss_defs.h | ||
| cciss_ioctl.h | ||
| cdrom.h | ||
| cec-funcs.h | ||
| cec.h | ||
| cgroupstats.h | ||
| chio.h | ||
| cm4000_cs.h | ||
| cn_proc.h | ||
| coda.h | ||
| coda_psdev.h | ||
| coff.h | ||
| connector.h | ||
| const.h | ||
| coresight-stm.h | ||
| cramfs_fs.h | ||
| cryptouser.h | ||
| cuda.h | ||
| cyclades.h | ||
| cycx_cfm.h | ||
| dcbnl.h | ||
| dccp.h | ||
| devlink.h | ||
| dlm.h | ||
| dlm_device.h | ||
| dlm_netlink.h | ||
| dlm_plock.h | ||
| dlmconstants.h | ||
| dm-ioctl.h | ||
| dm-log-userspace.h | ||
| dma-buf.h | ||
| dn.h | ||
| dns_resolver.h | ||
| dqblk_xfs.h | ||
| edd.h | ||
| efs_fs_sb.h | ||
| elf-em.h | ||
| elf-fdpic.h | ||
| elf.h | ||
| elfcore.h | ||
| errno.h | ||
| errqueue.h | ||
| erspan.h | ||
| ethtool.h | ||
| eventpoll.h | ||
| fadvise.h | ||
| falloc.h | ||
| fanotify.h | ||
| fb.h | ||
| fcntl.h | ||
| fd.h | ||
| fdreg.h | ||
| fib_rules.h | ||
| fiemap.h | ||
| filter.h | ||
| firewire-cdev.h | ||
| firewire-constants.h | ||
| flat.h | ||
| fou.h | ||
| fpga-dfl.h | ||
| fs.h | ||
| fsi.h | ||
| fsl_hypervisor.h | ||
| fsmap.h | ||
| fuse.h | ||
| futex.h | ||
| gameport.h | ||
| gen_stats.h | ||
| genetlink.h | ||
| gfs2_ondisk.h | ||
| gigaset_dev.h | ||
| gpio.h | ||
| gsmmux.h | ||
| gtp.h | ||
| hash_info.h | ||
| hdlc.h | ||
| hdlcdrv.h | ||
| hdreg.h | ||
| hid.h | ||
| hiddev.h | ||
| hidraw.h | ||
| hpet.h | ||
| hsr_netlink.h | ||
| hw_breakpoint.h | ||
| hyperv.h | ||
| hysdn_if.h | ||
| i2c-dev.h | ||
| i2c.h | ||
| i2o-dev.h | ||
| i8k.h | ||
| icmp.h | ||
| icmpv6.h | ||
| if.h | ||
| if_addr.h | ||
| if_addrlabel.h | ||
| if_alg.h | ||
| if_arcnet.h | ||
| if_arp.h | ||
| if_bonding.h | ||
| if_bridge.h | ||
| if_cablemodem.h | ||
| if_eql.h | ||
| if_ether.h | ||
| if_fc.h | ||
| if_fddi.h | ||
| if_frad.h | ||
| if_hippi.h | ||
| if_infiniband.h | ||
| if_link.h | ||
| if_ltalk.h | ||
| if_macsec.h | ||
| if_packet.h | ||
| if_phonet.h | ||
| if_plip.h | ||
| if_ppp.h | ||
| if_pppol2tp.h | ||
| if_pppox.h | ||
| if_slip.h | ||
| if_team.h | ||
| if_tun.h | ||
| if_tunnel.h | ||
| if_vlan.h | ||
| if_x25.h | ||
| if_xdp.h | ||
| ife.h | ||
| igmp.h | ||
| ila.h | ||
| in.h | ||
| in6.h | ||
| in_route.h | ||
| inet_diag.h | ||
| inotify.h | ||
| input-event-codes.h | ||
| input.h | ||
| ioctl.h | ||
| ip.h | ||
| ip6_tunnel.h | ||
| ip_vs.h | ||
| ipc.h | ||
| ipmi.h | ||
| ipmi_bmc.h | ||
| ipmi_msgdefs.h | ||
| ipsec.h | ||
| ipv6.h | ||
| ipv6_route.h | ||
| ipx.h | ||
| irqnr.h | ||
| isdn.h | ||
| isdn_divertif.h | ||
| isdn_ppp.h | ||
| isdnif.h | ||
| iso_fs.h | ||
| ivtv.h | ||
| ivtvfb.h | ||
| jffs2.h | ||
| joystick.h | ||
| Kbuild | ||
| kcm.h | ||
| kcmp.h | ||
| kcov.h | ||
| kd.h | ||
| kdev_t.h | ||
| kernel-page-flags.h | ||
| kernel.h | ||
| kernelcapi.h | ||
| kexec.h | ||
| keyboard.h | ||
| keyctl.h | ||
| kfd_ioctl.h | ||
| kvm.h | ||
| kvm_para.h | ||
| l2tp.h | ||
| libc-compat.h | ||
| lightnvm.h | ||
| limits.h | ||
| lirc.h | ||
| llc.h | ||
| loop.h | ||
| lp.h | ||
| lwtunnel.h | ||
| magic.h | ||
| major.h | ||
| map_to_7segment.h | ||
| matroxfb.h | ||
| max2175.h | ||
| mdio.h | ||
| media-bus-format.h | ||
| media.h | ||
| mei.h | ||
| membarrier.h | ||
| memfd.h | ||
| mempolicy.h | ||
| meye.h | ||
| mic_common.h | ||
| mic_ioctl.h | ||
| mii.h | ||
| minix_fs.h | ||
| mman.h | ||
| mmtimer.h | ||
| module.h | ||
| mpls.h | ||
| mpls_iptunnel.h | ||
| mqueue.h | ||
| mroute.h | ||
| mroute6.h | ||
| msdos_fs.h | ||
| msg.h | ||
| mtio.h | ||
| n_r3964.h | ||
| nbd-netlink.h | ||
| nbd.h | ||
| ncsi.h | ||
| ndctl.h | ||
| neighbour.h | ||
| net.h | ||
| net_dropmon.h | ||
| net_namespace.h | ||
| net_tstamp.h | ||
| netconf.h | ||
| netdevice.h | ||
| netfilter.h | ||
| netfilter_arp.h | ||
| netfilter_bridge.h | ||
| netfilter_decnet.h | ||
| netfilter_ipv4.h | ||
| netfilter_ipv6.h | ||
| netlink.h | ||
| netlink_diag.h | ||
| netrom.h | ||
| nfc.h | ||
| nfs.h | ||
| nfs2.h | ||
| nfs3.h | ||
| nfs4.h | ||
| nfs4_mount.h | ||
| nfs_fs.h | ||
| nfs_idmap.h | ||
| nfs_mount.h | ||
| nfsacl.h | ||
| nilfs2_api.h | ||
| nilfs2_ondisk.h | ||
| nl80211.h | ||
| nsfs.h | ||
| nubus.h | ||
| nvme_ioctl.h | ||
| nvram.h | ||
| omap3isp.h | ||
| omapfb.h | ||
| oom.h | ||
| openvswitch.h | ||
| packet_diag.h | ||
| param.h | ||
| parport.h | ||
| patchkey.h | ||
| pci.h | ||
| pci_regs.h | ||
| pcitest.h | ||
| perf_event.h | ||
| personality.h | ||
| pfkeyv2.h | ||
| pg.h | ||
| phantom.h | ||
| phonet.h | ||
| pkt_cls.h | ||
| pkt_sched.h | ||
| pktcdvd.h | ||
| pmu.h | ||
| poll.h | ||
| posix_acl.h | ||
| posix_acl_xattr.h | ||
| posix_types.h | ||
| ppdev.h | ||
| ppp-comp.h | ||
| ppp-ioctl.h | ||
| ppp_defs.h | ||
| pps.h | ||
| pr.h | ||
| prctl.h | ||
| psample.h | ||
| psci.h | ||
| psp-sev.h | ||
| ptp_clock.h | ||
| ptrace.h | ||
| qemu_fw_cfg.h | ||
| qnx4_fs.h | ||
| qnxtypes.h | ||
| qrtr.h | ||
| quota.h | ||
| radeonfb.h | ||
| random.h | ||
| raw.h | ||
| rds.h | ||
| reboot.h | ||
| reiserfs_fs.h | ||
| reiserfs_xattr.h | ||
| resource.h | ||
| rfkill.h | ||
| rio_cm_cdev.h | ||
| rio_mport_cdev.h | ||
| romfs_fs.h | ||
| rose.h | ||
| route.h | ||
| rpmsg.h | ||
| rseq.h | ||
| rtc.h | ||
| rtnetlink.h | ||
| rxrpc.h | ||
| scc.h | ||
| sched.h | ||
| scif_ioctl.h | ||
| screen_info.h | ||
| sctp.h | ||
| sdla.h | ||
| seccomp.h | ||
| securebits.h | ||
| sed-opal.h | ||
| seg6.h | ||
| seg6_genl.h | ||
| seg6_hmac.h | ||
| seg6_iptunnel.h | ||
| seg6_local.h | ||
| selinux_netlink.h | ||
| sem.h | ||
| serial.h | ||
| serial_core.h | ||
| serial_reg.h | ||
| serio.h | ||
| shm.h | ||
| signal.h | ||
| signalfd.h | ||
| smc.h | ||
| smc_diag.h | ||
| smiapp.h | ||
| snmp.h | ||
| sock_diag.h | ||
| socket.h | ||
| sockios.h | ||
| sonet.h | ||
| sonypi.h | ||
| sound.h | ||
| soundcard.h | ||
| stat.h | ||
| stddef.h | ||
| stm.h | ||
| string.h | ||
| suspend_ioctls.h | ||
| swab.h | ||
| switchtec_ioctl.h | ||
| sync_file.h | ||
| synclink.h | ||
| sysctl.h | ||
| sysinfo.h | ||
| target_core_user.h | ||
| taskstats.h | ||
| tcp.h | ||
| tcp_metrics.h | ||
| tee.h | ||
| termios.h | ||
| thermal.h | ||
| time.h | ||
| timerfd.h | ||
| times.h | ||
| timex.h | ||
| tiocl.h | ||
| tipc.h | ||
| tipc_config.h | ||
| tipc_netlink.h | ||
| tipc_sockets_diag.h | ||
| tls.h | ||
| toshiba.h | ||
| tty.h | ||
| tty_flags.h | ||
| types.h | ||
| udf_fs_i.h | ||
| udmabuf.h | ||
| udp.h | ||
| uhid.h | ||
| uinput.h | ||
| uio.h | ||
| uleds.h | ||
| ultrasound.h | ||
| un.h | ||
| unistd.h | ||
| unix_diag.h | ||
| usbdevice_fs.h | ||
| usbip.h | ||
| userfaultfd.h | ||
| userio.h | ||
| utime.h | ||
| utsname.h | ||
| uuid.h | ||
| uvcvideo.h | ||
| v4l2-common.h | ||
| v4l2-controls.h | ||
| v4l2-dv-timings.h | ||
| v4l2-mediabus.h | ||
| v4l2-subdev.h | ||
| vbox_err.h | ||
| vbox_vmmdev_types.h | ||
| vboxguest.h | ||
| veth.h | ||
| vfio.h | ||
| vfio_ccw.h | ||
| vhost.h | ||
| videodev2.h | ||
| virtio_9p.h | ||
| virtio_balloon.h | ||
| virtio_blk.h | ||
| virtio_config.h | ||
| virtio_console.h | ||
| virtio_crypto.h | ||
| virtio_gpu.h | ||
| virtio_ids.h | ||
| virtio_input.h | ||
| virtio_mmio.h | ||
| virtio_net.h | ||
| virtio_pci.h | ||
| virtio_ring.h | ||
| virtio_rng.h | ||
| virtio_scsi.h | ||
| virtio_types.h | ||
| virtio_vsock.h | ||
| vm_sockets.h | ||
| vm_sockets_diag.h | ||
| vmcore.h | ||
| vsockmon.h | ||
| vt.h | ||
| vtpm_proxy.h | ||
| wait.h | ||
| wanrouter.h | ||
| watchdog.h | ||
| wimax.h | ||
| wireless.h | ||
| wmi.h | ||
| x25.h | ||
| xattr.h | ||
| xfrm.h | ||
| xilinx-v4l2-controls.h | ||
| zorro.h | ||
| zorro_ids.h | ||