Re: [PATCH v2 net] bpf: fix branch pruning logic

2017-11-23 Thread Daniel Borkmann
On 11/23/2017 01:42 AM, Alexei Starovoitov wrote: > when the verifier detects that register contains a runtime constant > and it's compared with another constant it will prune exploration > of the branch that is guaranteed not to be taken at runtime. > This is all correct, but malicious program may

[PATCH v2 net] bpf: fix branch pruning logic

2017-11-22 Thread Alexei Starovoitov
when the verifier detects that register contains a runtime constant and it's compared with another constant it will prune exploration of the branch that is guaranteed not to be taken at runtime. This is all correct, but malicious program may be constructed in such a way that it always has a constan