| /kernel/linux/linux-6.6/lib/ |
| D | Kconfig.ubsan | 38 def_bool $(cc-option,-fsanitize=bounds-strict)
40 The -fsanitize=bounds-strict option is only available on GCC,
43 -fsanitize=bounds.
46 def_bool $(cc-option,-fsanitize=array-bounds)
48 Under Clang, the -fsanitize=bounds option is actually composed
49 of two more specific options, -fsanitize=array-bounds and
50 -fsanitize=local-bounds. However, -fsanitize=local-bounds can
52 CONFIG_LOCAL_BOUNDS.) Explicitly check for -fsanitize=array-bounds
57 bool "Perform array index bounds checking"
61 This option enables detection of directly indexed out of bounds
[all …]
|
| /kernel/linux/linux-6.6/tools/testing/selftests/bpf/progs/ |
| D | verifier_bounds_deduction_non_const.c | 8 __description("check deducing bounds from non-const, jmp64, <non_const> == <const>, 1")
29 __description("check deducing bounds from non-const, jmp64, <non_const> == <const>, 2")
50 __description("check deducing bounds from non-const, jmp64, <non_const> != <const>, 1")
72 __description("check deducing bounds from non-const, jmp64, <non_const> != <const>, 2")
94 __description("check deducing bounds from non-const, jmp32, <non_const> == <const>, 1")
115 __description("check deducing bounds from non-const, jmp32, <non_const> == <const>, 2")
136 __description("check deducing bounds from non-const, jmp32, <non_const> != <const>, 1")
158 __description("check deducing bounds from non-const, jmp32, <non_const> != <const>, 2")
180 __description("check deducing bounds from non-const, jmp64, <const> > <non_const>, 1")
199 __description("check deducing bounds from non-const, jmp64, <const> > <non_const>, 2")
[all …]
|
| D | verifier_masking.c | 9 __description("masking, test out of bounds 1")
29 __description("masking, test out of bounds 2")
49 __description("masking, test out of bounds 3")
69 __description("masking, test out of bounds 4")
89 __description("masking, test out of bounds 5")
109 __description("masking, test out of bounds 6")
129 __description("masking, test out of bounds 7")
149 __description("masking, test out of bounds 8")
169 __description("masking, test out of bounds 9")
189 __description("masking, test out of bounds 10")
[all …]
|
| D | verifier_bounds_deduction.c | 9 __description("check deducing bounds from const, 1")
23 __description("check deducing bounds from const, 2")
41 __description("check deducing bounds from const, 3")
55 __description("check deducing bounds from const, 4")
74 __description("check deducing bounds from const, 5")
88 __description("check deducing bounds from const, 6")
103 __description("check deducing bounds from const, 7")
122 __description("check deducing bounds from const, 8")
141 __description("check deducing bounds from const, 9")
155 __description("check deducing bounds from const, 10")
|
| D | verifier_bounds.c | 2 /* Converted from tools/testing/selftests/bpf/verifier/bounds.c */
16 __description("subtraction bounds (map value) variant 1")
47 __description("subtraction bounds (map value) variant 2")
50 __msg_unpriv("R1 has unknown scalar with mixed signed bounds")
111 __description("bounds check based on zero-extended MOV")
141 __description("bounds check based on sign-extended MOV. test1")
172 __description("bounds check based on sign-extended MOV. test2")
203 __description("bounds check based on reg_off + var_off + insn_off. test1")
232 __description("bounds check based on reg_off + var_off + insn_off. test2")
262 __description("bounds check after truncation of non-boundary-crossing range")
[all …]
|
| D | verifier_bounds_mix_sign_unsign.c | 16 __description("bounds checks mixing signed and unsigned, positive bounds")
48 __description("bounds checks mixing signed and unsigned")
80 __description("bounds checks mixing signed and unsigned, variant 2")
114 __description("bounds checks mixing signed and unsigned, variant 3")
147 __description("bounds checks mixing signed and unsigned, variant 4")
178 __description("bounds checks mixing signed and unsigned, variant 5")
211 __description("bounds checks mixing signed and unsigned, variant 6")
242 __description("bounds checks mixing signed and unsigned, variant 7")
274 __description("bounds checks mixing signed and unsigned, variant 8")
308 __description("bounds checks mixing signed and unsigned, variant 9")
[all …]
|
| D | verifier_runtime_jit.c | 86 __description("runtime/jit: tail_call within bounds, prog once")
103 __description("runtime/jit: tail_call within bounds, prog loop")
120 __description("runtime/jit: tail_call within bounds, no prog")
137 __description("runtime/jit: tail_call within bounds, key 2")
154 __description("runtime/jit: tail_call within bounds, key 2 / key 2, first branch")
179 __description("runtime/jit: tail_call within bounds, key 2 / key 2, second branch")
204 __description("runtime/jit: tail_call within bounds, key 0 / key 2, first branch")
229 __description("runtime/jit: tail_call within bounds, key 0 / key 2, second branch")
254 __description("runtime/jit: tail_call within bounds, different maps, first branch")
281 __description("runtime/jit: tail_call within bounds, different maps, second branch")
[all …]
|
| /kernel/linux/linux-5.10/tools/testing/selftests/bpf/verifier/ |
| D | masking.c | 2 "masking, test out of bounds 1",
18 "masking, test out of bounds 2",
34 "masking, test out of bounds 3",
50 "masking, test out of bounds 4",
66 "masking, test out of bounds 5",
82 "masking, test out of bounds 6",
98 "masking, test out of bounds 7",
114 "masking, test out of bounds 8",
130 "masking, test out of bounds 9",
146 "masking, test out of bounds 10",
[all …]
|
| D | bounds_deduction.c | 2 "check deducing bounds from const, 1",
14 "check deducing bounds from const, 2",
30 "check deducing bounds from const, 3",
42 "check deducing bounds from const, 4",
58 "check deducing bounds from const, 5",
70 "check deducing bounds from const, 6",
83 "check deducing bounds from const, 7",
98 "check deducing bounds from const, 8",
113 "check deducing bounds from const, 9",
125 "check deducing bounds from const, 10",
|
| D | bounds.c | 2 "subtraction bounds (map value) variant 1",
27 "subtraction bounds (map value) variant 2",
48 .errstr_unpriv = "R1 has unknown scalar with mixed signed bounds",
79 "bounds check based on zero-extended MOV",
103 "bounds check based on sign-extended MOV. test1",
128 "bounds check based on sign-extended MOV. test2",
153 "bounds check based on reg_off + var_off + insn_off. test1",
177 "bounds check based on reg_off + var_off + insn_off. test2",
201 "bounds check after truncation of non-boundary-crossing range",
234 "bounds check after truncation of boundary-crossing range (1)",
[all …]
|
| D | runtime_jit.c | 2 "runtime/jit: tail_call within bounds, prog once",
15 "runtime/jit: tail_call within bounds, prog loop",
28 "runtime/jit: tail_call within bounds, no prog",
41 "runtime/jit: tail_call within bounds, key 2",
54 "runtime/jit: tail_call within bounds, key 2 / key 2, first branch",
76 "runtime/jit: tail_call within bounds, key 2 / key 2, second branch",
98 "runtime/jit: tail_call within bounds, key 0 / key 2, first branch",
120 "runtime/jit: tail_call within bounds, key 0 / key 2, second branch",
142 "runtime/jit: tail_call within bounds, different maps, first branch",
167 "runtime/jit: tail_call within bounds, different maps, second branch",
[all …]
|
| D | bounds_mix_sign_unsign.c | 2 "bounds checks mixing signed and unsigned, positive bounds",
26 "bounds checks mixing signed and unsigned",
50 "bounds checks mixing signed and unsigned, variant 2",
76 "bounds checks mixing signed and unsigned, variant 3",
101 "bounds checks mixing signed and unsigned, variant 4",
124 "bounds checks mixing signed and unsigned, variant 5",
149 "bounds checks mixing signed and unsigned, variant 6",
173 "bounds checks mixing signed and unsigned, variant 7",
196 "bounds checks mixing signed and unsigned, variant 8",
222 "bounds checks mixing signed and unsigned, variant 9",
[all …]
|
| /kernel/linux/linux-5.10/ |
| D | Kbuild | 6 # Generate bounds.h
8 bounds-file := include/generated/bounds.h
10 always-y := $(bounds-file)
11 targets := kernel/bounds.s
13 $(bounds-file): kernel/bounds.s FORCE
34 arch/$(SRCARCH)/kernel/asm-offsets.s: $(timeconst-file) $(bounds-file)
|
| /kernel/linux/linux-6.6/mm/kasan/ |
| D | kasan_test_module.c | 40 pr_info("out-of-bounds in copy_from_user()\n"); in copy_user_test()
43 pr_info("out-of-bounds in copy_to_user()\n"); in copy_user_test()
46 pr_info("out-of-bounds in __copy_from_user()\n"); in copy_user_test()
49 pr_info("out-of-bounds in __copy_to_user()\n"); in copy_user_test()
52 pr_info("out-of-bounds in __copy_from_user_inatomic()\n"); in copy_user_test()
55 pr_info("out-of-bounds in __copy_to_user_inatomic()\n"); in copy_user_test()
58 pr_info("out-of-bounds in strncpy_from_user()\n"); in copy_user_test()
|
| /kernel/linux/linux-5.10/mm/kasan/ |
| D | generic_report.c | 66 bug_type = "out-of-bounds"; in get_shadow_bug_type()
70 bug_type = "slab-out-of-bounds"; in get_shadow_bug_type()
73 bug_type = "global-out-of-bounds"; in get_shadow_bug_type()
79 bug_type = "stack-out-of-bounds"; in get_shadow_bug_type()
88 bug_type = "alloca-out-of-bounds"; in get_shadow_bug_type()
91 bug_type = "vmalloc-out-of-bounds"; in get_shadow_bug_type()
116 * defined as out-of-bounds bug type. in get_bug_type()
120 * so that this can qualify as out-of-bounds. in get_bug_type()
123 return "out-of-bounds"; in get_bug_type()
|
| /kernel/linux/linux-5.10/drivers/staging/media/rkisp1/ |
| D | rkisp1-common.c | 20 const struct v4l2_rect *bounds) in rkisp1_sd_adjust_crop_rect() argument
23 v4l2_rect_map_inside(crop, bounds); in rkisp1_sd_adjust_crop_rect()
27 const struct v4l2_mbus_framefmt *bounds) in rkisp1_sd_adjust_crop() argument
32 .width = bounds->width, in rkisp1_sd_adjust_crop()
33 .height = bounds->height, in rkisp1_sd_adjust_crop()
|
| /kernel/linux/linux-5.10/lib/ |
| D | test_kasan_module.c | 40 pr_info("out-of-bounds in copy_from_user()\n"); in copy_user_test()
43 pr_info("out-of-bounds in copy_to_user()\n"); in copy_user_test()
46 pr_info("out-of-bounds in __copy_from_user()\n"); in copy_user_test()
49 pr_info("out-of-bounds in __copy_to_user()\n"); in copy_user_test()
52 pr_info("out-of-bounds in __copy_from_user_inatomic()\n"); in copy_user_test()
55 pr_info("out-of-bounds in __copy_to_user_inatomic()\n"); in copy_user_test()
58 pr_info("out-of-bounds in strncpy_from_user()\n"); in copy_user_test()
|
| D | Kconfig.ubsan | 32 …depends on !$(cc-option,-Werror=unused-command-line-argument -fsanitize=bounds -fsanitize-coverage…
40 bool "Perform array index bounds checking"
44 This option enables detection of directly indexed out of bounds
51 bool "Perform array local bounds checking"
56 This option enables -fsanitize=local-bounds which traps when an
62 out-of-bounds.
|
| /kernel/linux/linux-6.6/drivers/gpu/drm/nouveau/dispnv50/ |
| D | head917d.c | 53 u32 bounds = 0; in head917d_base() local
58 case 8: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_64); break; in head917d_base()
59 case 4: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_32); break; in head917d_base()
60 case 2: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_16); break; in head917d_base()
61 case 1: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_8); break; in head917d_base()
66 bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, USABLE, TRUE); in head917d_base()
67 bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, BASE_LUT, USAGE_1025); in head917d_base()
73 PUSH_MTHD(push, NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS(i), bounds); in head917d_base()
|
| D | head907d.c | 100 u32 bounds = 0; in head907d_ovly() local
105 case 8: bounds |= NVDEF(NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS, PIXEL_DEPTH, BPP_64); break; in head907d_ovly()
106 case 4: bounds |= NVDEF(NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS, PIXEL_DEPTH, BPP_32); break; in head907d_ovly()
107 case 2: bounds |= NVDEF(NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS, PIXEL_DEPTH, BPP_16); break; in head907d_ovly()
112 bounds |= NVDEF(NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS, USABLE, TRUE); in head907d_ovly()
114 bounds |= NVDEF(NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS, PIXEL_DEPTH, BPP_16); in head907d_ovly()
120 PUSH_MTHD(push, NV907D, HEAD_SET_OVERLAY_USAGE_BOUNDS(i), bounds); in head907d_ovly()
129 u32 bounds = 0; in head907d_base() local
134 case 8: bounds |= NVDEF(NV907D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_64); break; in head907d_base()
135 case 4: bounds |= NVDEF(NV907D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_32); break; in head907d_base()
[all …]
|
| /kernel/linux/linux-5.10/drivers/gpu/drm/nouveau/dispnv50/ |
| D | head917d.c | 53 u32 bounds = 0; in head917d_base() local
58 case 8: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_64); break; in head917d_base()
59 case 4: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_32); break; in head917d_base()
60 case 2: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_16); break; in head917d_base()
61 case 1: bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, PIXEL_DEPTH, BPP_8); break; in head917d_base()
66 bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, USABLE, TRUE); in head917d_base()
67 bounds |= NVDEF(NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS, BASE_LUT, USAGE_1025); in head917d_base()
73 PUSH_MTHD(push, NV917D, HEAD_SET_BASE_CHANNEL_USAGE_BOUNDS(i), bounds); in head917d_base()
|
| /kernel/linux/linux-6.6/ |
| D | Kbuild | 8 # Generate bounds.h
10 bounds-file := include/generated/bounds.h
12 targets := kernel/bounds.s
14 $(bounds-file): kernel/bounds.s FORCE
32 arch/$(SRCARCH)/kernel/asm-offsets.s: $(timeconst-file) $(bounds-file)
|
| /kernel/linux/linux-6.6/include/linux/ |
| D | nospec.h | 23 * When @index is out of bounds (@index >= @size), the sign bit will be
25 * zero for an out of bounds index, or ~0 if within bounds [0, @size).
42 * array_index_nospec - sanitize an array index after a bounds check
51 * ...if the CPU speculates past the bounds check then
|
| /kernel/linux/linux-5.10/include/linux/ |
| D | nospec.h | 23 * When @index is out of bounds (@index >= @size), the sign bit will be
25 * zero for an out of bounds index, or ~0 if within bounds [0, @size).
42 * array_index_nospec - sanitize an array index after a bounds check
51 * ...if the CPU speculates past the bounds check then
|
| /kernel/linux/linux-5.10/tools/testing/selftests/bpf/progs/ |
| D | sockopt_sk.c | 71 return 0; /* EPERM, bounds check */ in _getsockopt()
81 return 0; /* EPERM, bounds check */ in _getsockopt()
103 return 0; /* EPERM, bounds check */ in _getsockopt()
142 return 0; /* EPERM, bounds check */ in _setsockopt()
154 return 0; /* EPERM, bounds check */ in _setsockopt()
168 return 0; /* EPERM, bounds check */ in _setsockopt()
188 return 0; /* EPERM, bounds check */ in _setsockopt()
|