Cupertino MirandaandAlexei Starovoitov 2f4cb53eed bpf: detect non null pointer with register operand in JEQ/JNE. ...

This patch adds support to validate a pointer as not null when its
value is compared to a register whose value the verifier knows to be
null.
Initial pattern only verifies against an immediate operand.

Signed-off-by: Cupertino Miranda <cupertino.miranda@oracle.com>
Cc: David Faust  <david.faust@oracle.com>
Cc: Jose Marchesi  <jose.marchesi@oracle.com>
Cc: Elena Zannoni  <elena.zannoni@oracle.com>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/r/20260304195018.181396-3-cupertino.miranda@oracle.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

2026-03-10 11:51:18 -07:00

..

preload

umd: Remove usermode driver framework

2025-07-26 21:03:04 +02:00

arena.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

arraymap.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

bloom_filter.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

bpf_cgrp_storage.c

bpf: Switch to bpf_selem_unlink_nofail in bpf_local_storage_{map_free, destroy}

2026-02-06 14:47:59 -08:00

bpf_inode_storage.c

bpf: Switch to bpf_selem_unlink_nofail in bpf_local_storage_{map_free, destroy}

2026-02-06 14:47:59 -08:00

bpf_insn_array.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

bpf_iter.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

bpf_local_storage.c

bpf: Retire rcu_trace_implies_rcu_gp() from local storage

2026-02-27 15:39:00 -08:00

bpf_lru_list.c

bpf: Replace get_next_cpu() with cpumask_next_wrap()

2025-08-18 15:11:02 +02:00

bpf_lru_list.h

bpf: Adjust free target to avoid global starvation of LRU map

2025-06-18 18:50:14 -07:00

bpf_lsm_proto.c

bpf: annotate file argument as __nullable in bpf_lsm_mmap_file

2025-12-21 10:56:33 -08:00

bpf_lsm.c

bpf: annotate file argument as __nullable in bpf_lsm_mmap_file

2025-12-21 10:56:33 -08:00

bpf_struct_ops.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

bpf_task_storage.c

bpf: Switch to bpf_selem_unlink_nofail in bpf_local_storage_{map_free, destroy}

2026-02-06 14:47:59 -08:00

btf_iter.c

…

btf_relocate.c

…

btf.c

bpf: Allow void global functions in the verifier

2026-03-03 08:47:23 -08:00

cgroup_iter.c

bpf: add new BPF_CGROUP_ITER_CHILDREN control option

2026-01-27 09:05:54 -08:00

cgroup.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

core.c

bpf: Do not increment tailcall count when prog is NULL

2026-02-24 10:34:16 -08:00

cpumap.c

bpf: Add missing XDP_ABORTED handling in cpumap

2026-03-03 08:37:21 -08:00

cpumask.c

bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs

2026-01-02 12:04:28 -08:00

crypto.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

devmap.c

bpf: Fix race in devmap on PREEMPT_RT

2026-02-27 16:08:10 -08:00

disasm.c

bpf: disasm: add support for BPF_JMP|BPF_JA|BPF_X

2025-11-05 17:53:23 -08:00

disasm.h

…

dispatcher.c

…

dmabuf_iter.c

bpf: Fix truncated dmabuf iterator reads

2025-12-09 23:48:34 -08:00

hashtab.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

helpers.c

s390: Introduce bpf_get_lowcore() kfunc

2026-03-03 08:35:07 -08:00

inode.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

Kconfig

bpf: Update the bpf_prog_calc_tag to use SHA256

2025-09-18 19:10:20 -07:00

kmem_cache_iter.c

…

link_iter.c

bpf: Clean up individual BTF_ID code

2025-07-16 18:34:42 -07:00

liveness.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

local_storage.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

log.c

bpf: rename bpf_reg_state->off to bpf_reg_state->delta

2026-02-13 14:41:23 -08:00

lpm_trie.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

Makefile

bpf: annotate file argument as __nullable in bpf_lsm_mmap_file

2025-12-21 10:56:33 -08:00

map_in_map.c

…

map_in_map.h

…

map_iter.c

bpf: Remove redundant KF_TRUSTED_ARGS flag from all kfuncs

2026-01-02 12:04:28 -08:00

memalloc.c

bpf: Register dtor for freeing special fields

2026-02-27 15:39:00 -08:00

mmap_unlock_work.h

…

mprog.c

…

net_namespace.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

offload.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

percpu_freelist.c

…

percpu_freelist.h

…

prog_iter.c

bpf: Clean up individual BTF_ID code

2025-07-16 18:34:42 -07:00

queue_stack_maps.c

…

range_tree.c

bpf: arena: Reintroduce memcg accounting

2026-01-02 14:31:59 -08:00

range_tree.h

…

relo_core.c

…

reuseport_array.c

…

ringbuf.c

bpf: Add SPDX license identifiers to a few files

2026-01-16 14:50:00 -08:00

rqspinlock.c

Merge tag 'mm-nonmm-stable-2026-02-12-10-48' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-02-12 12:13:01 -08:00

rqspinlock.h

…

stackmap.c

Merge tag 'bpf-next-6.19' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2025-12-03 16:54:54 -08:00

stream.c

bpf: Add bpf_stream_print_stack stack dumping kfunc

2026-02-03 10:41:16 -08:00

syscall.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

sysfs_btf.c

Merge tag 'driver-core-6.17-rc1' of git://git.kernel.org/pub/scm/linux/kernel/git/driver-core/driver-core

2025-07-29 12:15:39 -07:00

task_iter.c

…

tcx.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

tnum.c

bpf: Introduce tnum_step to step through tnum's members

2026-02-27 16:11:50 -08:00

token.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

trampoline.c

bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim

2026-03-03 15:13:51 -08:00

verifier.c

bpf: detect non null pointer with register operand in JEQ/JNE.

2026-03-10 11:51:18 -07:00