From nobody Thu Apr 9 14:59:16 2026 Received: from mail-pf1-f173.google.com (mail-pf1-f173.google.com [209.85.210.173]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 171BE259CA9 for ; Sun, 8 Mar 2026 13:47:52 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.210.173 ARC-Seal: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772977674; cv=none; b=B7+vB7BGKfsT8Fn7E6dUeYqOkNWQeaGo478ypyj18CRLEFRMFgTYU3vf+ThWjHb6O2SfFJ/hYPeOZ96PqrZeUjC6hicnBIUcY/ImRkQ7I37zFirA57NzWyDVmtwKa3wyGATAA6mNbUJX+4Zd8d6mnBQXOrpeIZDLc1IU/POFZJQ= ARC-Message-Signature: i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1772977674; c=relaxed/simple; bh=Zw6ImnSf6lR/+yeVgzkNmTem6QdcwnLp6DHs2X5E5qk=; h=From:To:Cc:Subject:Date:Message-ID:In-Reply-To:References: MIME-Version; b=JYfn/FyhJs06hBNJAqumY5oX2bLaOwuO8xNLcgaEfAYTKCU0+GCwQbTcg6h87TCwgPo+ILsLUrMxouE+usZk8xF4x0IRQ6g9f0IzsLDA6ujmnJO8Otw4cEJdZFKJzrCK7qYMS88Q7pUr3q/RyDOvfSjHxAuTPeDFDPnBfRyGIkM= ARC-Authentication-Results: i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=Tgij0Y4L; arc=none smtp.client-ip=209.85.210.173 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="Tgij0Y4L" Received: by mail-pf1-f173.google.com with SMTP id d2e1a72fcca58-82989744ee0so2739188b3a.2 for ; Sun, 08 Mar 2026 06:47:52 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1772977672; x=1773582472; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:from:to:cc:subject:date :message-id:reply-to; bh=eNkJj3izrk8VdKqI7b13r9RBEyjaruaTSc4dC/sIOZs=; b=Tgij0Y4LmHt0UGkjj+6F8Xs8IU15gzIZSkyIpnMhEcvq1QAPo/iu1Da1Ot3MEMkdUP Ko9MUOhROb2hqmrjOtJ9Xdqg6ppAoeE0HOOyJxnsPAbsdoymGi9ctrOaqulxaMvjLxhp dbMr0oOCy83r6KHYWJKK1UuIFvhemI0sl1ukTG2v60NUFhKSkHUDz12iHRbZ75XyJFdB HnkYoLVTj3jyFtBWpzHvkeoAYWnHR0VixurK1x00Os2Axh+kwbLzTJupwCoeYS5hIrgl OEYgzbbFL9FdrioeWDLbkDpvLV46Jm/8rhBbeXPhK3orVVh3YZdCyveMdD+gTLmTovmn Im0w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1772977672; x=1773582472; h=content-transfer-encoding:mime-version:references:in-reply-to :message-id:date:subject:cc:to:from:x-gm-gg:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=eNkJj3izrk8VdKqI7b13r9RBEyjaruaTSc4dC/sIOZs=; b=BaOTGnNLtu5FTwvuI6gE/aWwmwsj/DJjpg4QkbHxKzYM7HgqUQOUDYwis643i/RreE g4PKqFdC5ffd+FOY5/Xp1rJG4oe76VxAAhuugc4JNGUt9fbCJ2PwrrGiceFiGl+LINbw yfL4Nla97z6q1NnQ43PbnCtRHAbNHTGnn2UYohHYRbz/4G3e7gCJy/Ftc7wiIDUIfOjX qwX0+y79b81QWMch4Pwg6QxGOeJLyqaj1vX4vrROpmmW4FwNI0/Na/25IpJFeHnIWKsb soqv3kPNZTtclcIpP+b5ABAIQ3lU2x6TKXmYKKw2B3l0vOjm2sWOC0gUmnurhZyD0vpt iw+Q== X-Forwarded-Encrypted: i=1; AJvYcCU8sE06ZOkjI/91Ec6HbctJzdQRJw4N876ddLD5uUGnQWCh7APE6j1J13TTEKa7NIC2CdtV78HH1D4WlX4=@vger.kernel.org X-Gm-Message-State: AOJu0YwkuwUESDc4/UAdDDsCFqTQKLVqZmRQu89gycNZXKQFX7VI/L45 3Ijf0Rw1scSMrMyPLxdtbeH6rEQnlFlqArde1sOfgX/85XsIfjgmb/LD X-Gm-Gg: ATEYQzyTquTTdXorjejwgH30/hUHKwWBeBfdRygNwTBlwPwR21J2PqHq0IODsoUaNsV 0wzPyPsQOsLLoX8HeUtrB+da4tpmNDbaZ6bBrXHyCZ34dXpL53ddtFxQCwzaZQ8audPYa+UpJqf I+X6xjl5/4yKUT/1PnZCGKCbYkyzkCTH1V7QUTlYmC05+y4ug+KuZFMO3pa/itSkCkMSDndgPg9 xfJ2vcJiL7K5assFe3Caac4p1H8OO/djLA/Irfr1cKVh3bSV0AxJ5rXMwk36l6DXGOhGMXQpFqU AwIOadZ3flmEwI2ik/ks/EreTuNUqVsRXHKM75/0+VZBf7ft3b8e0SrMHEVO4Sp/q0U3k13dSN1 hOzdYWSDJWY+qfQ+5Qq2yZPMJs8P4IBQtV1Y04w7o9xv7vM+CCa56DNKNh8jf4QFObT5CCNlAxT m3RFJexrxJoZ7OyIxeEwMormXUOn4uXaXdN9UzrR6Zgr0JJdEJ X-Received: by 2002:a05:6a00:f0e:b0:829:8ac8:ea35 with SMTP id d2e1a72fcca58-829a2f6f491mr7428397b3a.51.1772977672416; Sun, 08 Mar 2026 06:47:52 -0700 (PDT) Received: from localhost.localdomain ([113.218.252.35]) by smtp.gmail.com with ESMTPSA id d2e1a72fcca58-829a4636968sm7095056b3a.9.2026.03.08.06.47.41 (version=TLS1_3 cipher=TLS_CHACHA20_POLY1305_SHA256 bits=256/256); Sun, 08 Mar 2026 06:47:52 -0700 (PDT) From: Chengkaitao To: martin.lau@linux.dev, ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, eddyz87@gmail.com, song@kernel.org, yonghong.song@linux.dev, john.fastabend@gmail.com, kpsingh@kernel.org, sdf@fomichev.me, haoluo@google.com, jolsa@kernel.org, shuah@kernel.org, chengkaitao@kylinos.cn, linux-kselftest@vger.kernel.org Cc: bpf@vger.kernel.org, linux-kernel@vger.kernel.org Subject: [PATCH bpf-next v7 5/5] bpf: refactor kfunc checks using table-driven approach in verifier Date: Sun, 8 Mar 2026 21:46:14 +0800 Message-ID: <20260308134614.29711-6-pilgrimtao@gmail.com> X-Mailer: git-send-email 2.50.1 In-Reply-To: <20260308134614.29711-1-pilgrimtao@gmail.com> References: <20260308134614.29711-1-pilgrimtao@gmail.com> Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" From: Kaitao Cheng Replace per-kfunc btf_id chains in list/rbtree/res_lock and graph node checks with btf_id_in_kfunc_table() and static kfunc tables for easier maintenance. Signed-off-by: Kaitao Cheng --- kernel/bpf/verifier.c | 97 +++++++++++++++++++++++++++++-------------- 1 file changed, 66 insertions(+), 31 deletions(-) diff --git a/kernel/bpf/verifier.c b/kernel/bpf/verifier.c index 5e32e02429c4..853716f599ce 100644 --- a/kernel/bpf/verifier.c +++ b/kernel/bpf/verifier.c @@ -12602,6 +12602,62 @@ BTF_ID(func, bpf_session_is_return) BTF_ID(func, bpf_stream_vprintk) BTF_ID(func, bpf_stream_print_stack) =20 +static const enum special_kfunc_type bpf_list_api_kfuncs[] =3D { + KF_bpf_list_push_front_impl, + KF_bpf_list_push_back_impl, + KF_bpf_list_add_impl, + KF_bpf_list_pop_front, + KF_bpf_list_pop_back, + KF_bpf_list_del, + KF_bpf_list_front, + KF_bpf_list_back, + KF_bpf_list_is_first, + KF_bpf_list_is_last, + KF_bpf_list_empty, +}; + +/* Kfuncs that take a list node argument (bpf_list_node *). */ +static const enum special_kfunc_type bpf_list_node_api_kfuncs[] =3D { + KF_bpf_list_push_front_impl, + KF_bpf_list_push_back_impl, + KF_bpf_list_add_impl, + KF_bpf_list_del, + KF_bpf_list_is_first, + KF_bpf_list_is_last, +}; + +/* Kfuncs that take an rbtree node argument (bpf_rb_node *). */ +static const enum special_kfunc_type bpf_rbtree_node_api_kfuncs[] =3D { + KF_bpf_rbtree_remove, + KF_bpf_rbtree_add_impl, + KF_bpf_rbtree_left, + KF_bpf_rbtree_right, +}; + +static const enum special_kfunc_type bpf_rbtree_api_kfuncs[] =3D { + KF_bpf_rbtree_add_impl, + KF_bpf_rbtree_remove, + KF_bpf_rbtree_first, + KF_bpf_rbtree_root, + KF_bpf_rbtree_left, + KF_bpf_rbtree_right, +}; + +static const enum special_kfunc_type bpf_res_spin_lock_kfuncs[] =3D { + KF_bpf_res_spin_lock, + KF_bpf_res_spin_unlock, + KF_bpf_res_spin_lock_irqsave, + KF_bpf_res_spin_unlock_irqrestore, +}; + +static bool btf_id_in_kfunc_table(u32 btf_id, const enum special_kfunc_typ= e *kfuncs, int n) +{ + for (int i =3D 0; i < n; i++) + if (btf_id =3D=3D special_kfunc_list[kfuncs[i]]) + return true; + return false; +} + static bool is_task_work_add_kfunc(u32 func_id) { return func_id =3D=3D special_kfunc_list[KF_bpf_task_work_schedule_signal= ] || @@ -13002,27 +13058,14 @@ static int check_reg_allocation_locked(struct bpf= _verifier_env *env, struct bpf_ =20 static bool is_bpf_list_api_kfunc(u32 btf_id) { - return btf_id =3D=3D special_kfunc_list[KF_bpf_list_push_front_impl] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_push_back_impl] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_add_impl] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_pop_front] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_pop_back] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_del] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_front] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_back] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_is_first] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_is_last] || - btf_id =3D=3D special_kfunc_list[KF_bpf_list_empty]; + return btf_id_in_kfunc_table(btf_id, bpf_list_api_kfuncs, + ARRAY_SIZE(bpf_list_api_kfuncs)); } =20 static bool is_bpf_rbtree_api_kfunc(u32 btf_id) { - return btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_add_impl] || - btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_remove] || - btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_first] || - btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_root] || - btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_left] || - btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_right]; + return btf_id_in_kfunc_table(btf_id, bpf_rbtree_api_kfuncs, + ARRAY_SIZE(bpf_rbtree_api_kfuncs)); } =20 static bool is_bpf_iter_num_api_kfunc(u32 btf_id) @@ -13040,10 +13083,8 @@ static bool is_bpf_graph_api_kfunc(u32 btf_id) =20 static bool is_bpf_res_spin_lock_kfunc(u32 btf_id) { - return btf_id =3D=3D special_kfunc_list[KF_bpf_res_spin_lock] || - btf_id =3D=3D special_kfunc_list[KF_bpf_res_spin_unlock] || - btf_id =3D=3D special_kfunc_list[KF_bpf_res_spin_lock_irqsave] || - btf_id =3D=3D special_kfunc_list[KF_bpf_res_spin_unlock_irqrestore= ]; + return btf_id_in_kfunc_table(btf_id, bpf_res_spin_lock_kfuncs, + ARRAY_SIZE(bpf_res_spin_lock_kfuncs)); } =20 static bool is_bpf_arena_kfunc(u32 btf_id) @@ -13132,18 +13173,12 @@ static bool check_kfunc_is_graph_node_api(struct = bpf_verifier_env *env, =20 switch (node_field_type) { case BPF_LIST_NODE: - ret =3D (kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_push_front_i= mpl] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_push_back_impl= ] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_add_impl] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_del] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_is_first] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_list_is_last]); + ret =3D btf_id_in_kfunc_table(kfunc_btf_id, bpf_list_node_api_kfuncs, + ARRAY_SIZE(bpf_list_node_api_kfuncs)); break; case BPF_RB_NODE: - ret =3D (kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_remove] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_add_impl] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_left] || - kfunc_btf_id =3D=3D special_kfunc_list[KF_bpf_rbtree_right]); + ret =3D btf_id_in_kfunc_table(kfunc_btf_id, bpf_rbtree_node_api_kfuncs, + ARRAY_SIZE(bpf_rbtree_node_api_kfuncs)); break; default: verbose(env, "verifier internal error: unexpected graph node argument ty= pe %s\n", --=20 2.50.1 (Apple Git-155)