函数逻辑报告

Linux Kernel

v5.5.9

Brick Technologies Co., Ltd

Source Code:kernel\bpf\verifier.c Create Date:2022-07-27 14:09:19
Last Modify:2022-05-19 20:02:10 Copyright©Brick
首页 函数Tree
注解内核,赢得工具下载SCCTEnglish

函数名称：print_verifier_state

函数原型：static void print_verifier_state(struct bpf_verifier_env *env, const struct bpf_func_state *state)

返回类型：void

参数：

类型参数名称
struct bpf_verifier_env *env
const struct bpf_func_state *state
493  如果stack frame number of this function state from pov of* enclosing bpf_verifier_state.* 0 = main function, 1 = first callee.则verbose(env, " frame%d:", stack frame number of this function state from pov of* enclosing bpf_verifier_state.* 0 = main function, 1 = first callee.)
495  以i小于BPF has 10 general purpose 64-bit registers and stack frame. 循环
496  reg等于regs[i]
497  t等于 Ordering of fields matters. See states_equal()
498  如果t恒等于hing was written into register 则继续下一循环
500  verbose(env, " R%d", i)
501  print_liveness(env, live)
502  verbose(env, "=%s", string representation of 'enum bpf_reg_type' [t])
503  如果t恒等于g doesn't contain a valid pointer 且 if (!precise && SCALAR_VALUE) min/max/tnum don't affect safety 则verbose(env, "P")
505  如果t恒等于g doesn't contain a valid pointer 或t恒等于g == frame_pointer + offset 的值且Returns true if @a is a known constant 则
508  verbose(env, "%lld", value + Fixed part of pointer offset, pointer types only )
509  否则
510  如果t恒等于g points to kernel struct 则verbose(env, "%s", kernel_type_name( for PTR_TO_BTF_ID ))
512  verbose(env, "(id=%d", For PTR_TO_PACKET, used to find other pointers with the same variable * offset, so they can share range knowledge. * For PTR_TO_MAP_VALUE_OR_NULL this is used to share which map value we * came from, when one is tested for != NULL. * For PTR_TO_SOCKET thi)
513  如果reg_type_may_be_refcounted_or_null(t)则verbose(env, ",ref_obj_id=%d", PTR_TO_SOCKET and PTR_TO_TCP_SOCK could be a ptr returned * from a pointer-cast helper, bpf_sk_fullsock() and * bpf_tcp_sock(). * Consider the following where "sk" is a reference counted * pointer returned from "sk = bpf_sk_lookup_tcp();": * 1: sk = bpf_s)
515  如果t不等于g doesn't contain a valid pointer 则verbose(env, ",off=%d", Fixed part of pointer offset, pointer types only )
517  如果type_is_pkt_pointer(t)则verbose(env, ",r=%d", valid when type == PTR_TO_PACKET )
519  否则如果t恒等于g points to struct bpf_map 或t恒等于g points to map element value 或t恒等于points to map elem value or NULL 则verbose(env, ",ks=%d,vs=%d", key_size, value_size)
525  如果Returns true if @a is a known constant 则
530  verbose(env, ",imm=%llx", value)
531  否则
553  verbose(env, ")")
556  以i小于allocated_stack除size of eBPF register in bytes 循环
558  bool valid = false
561  以j小于size of eBPF register in bytes 循环
562  如果slot_type[j]不等于 nothing was stored in this stack slot 则valid = true
564  types_buf[j]等于slot_type_char[slot_type[j]]
567  types_buf[size of eBPF register in bytes ]等于0
568  如果非valid则继续下一循环
570  verbose(env, " fp%d", ( - i - 1) * size of eBPF register in bytes )
571  print_liveness(env, live)
572  如果slot_type[0]恒等于 register spilled into stack 则
573  reg等于spilled_ptr
574  t等于 Ordering of fields matters. See states_equal()
575  verbose(env, "=%s", string representation of 'enum bpf_reg_type' [t])
576  如果t恒等于g doesn't contain a valid pointer 且 if (!precise && SCALAR_VALUE) min/max/tnum don't affect safety 则verbose(env, "P")
578  如果t恒等于g doesn't contain a valid pointer 且Returns true if @a is a known constant 则verbose(env, "%lld", value + Fixed part of pointer offset, pointer types only )
580  否则
581  verbose(env, "=%s", types_buf)
584  如果The following fields should be last. See copy_func_state() 且 Track each reference created with a unique id, even if the same * instruction creates the reference multiple times (eg, via CALL).则
585  verbose(env, " refs=%d", Track each reference created with a unique id, even if the same * instruction creates the reference multiple times (eg, via CALL).)
586  以i小于The following fields should be last. See copy_func_state() 循环如果 Track each reference created with a unique id, even if the same * instruction creates the reference multiple times (eg, via CALL).则
588  verbose(env, ",%d", Track each reference created with a unique id, even if the same * instruction creates the reference multiple times (eg, via CALL).)
590  verbose(env, "\n")
调用者
名称描述
__mark_chain_precision
check_map_accessheck read/write into a map element with possible variable offset
check_func_call
prepare_func_exit
adjust_reg_min_max_valsHandles ALU ops other than BPF_END, BPF_NEG and BPF_MOV: computes new min/max* and var_off.
check_cond_jmp_op
do_check