Hi! Daniel pointed out during the review of my previous patchset that the knowledge about context doesn't really belong directly in the verifier. This patch set takes a bit of a drastic approach to move the info out of there. I want to be able to use different set of verifier_ops for program analysis. To do that, I have to first move the test_run callback to a separate structure. Then verifier ops can be declared in the verifier directly and different sets can be picked for verification vs analysis.
Jakub Kicinski (4): bpf: split verifier and program ops bpf: remove the verifier ops from program structure bpf: move knowledge about post-translation offsets out of verifier bpf: allow access to skb->len from offloads include/linux/bpf.h | 17 ++++++--- include/linux/bpf_types.h | 28 +++++++------- include/linux/bpf_verifier.h | 1 + kernel/bpf/syscall.c | 6 +-- kernel/bpf/verifier.c | 70 +++++++++++++++-------------------- kernel/trace/bpf_trace.c | 15 ++++++-- net/core/filter.c | 87 +++++++++++++++++++++++++++++++++++++++----- 7 files changed, 149 insertions(+), 75 deletions(-) -- 2.14.1
