Commit 593a841

committed

bpf_verifier_ksym: populate the offset table

Add per-arch #if offset blocks (7450 rows, keyed on the full-uname FNV-1a-64) so the verifier-log leak pins the image base, not just the interior bracket. check_hash_parity checks row distinctness per #if block (the same uname repeats across arch blocks with the same hash). tests/vm/init enables unprivileged bpf in the permissive profiles so the leak fires under qemu, and dumps the k_func offsets as ground truth for the pinned base.

1 parent 27f4722 commit 593a841Copy full SHA for 593a841

3 files changed

src/components
- bpf_verifier_ksym.c
tests
- check_hash_parity.c
- vm
  - init.c

Comments

(0)

File tree

0 commit comments