From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mails.dpdk.org (mails.dpdk.org [217.70.189.124]) by smtp.lore.kernel.org (Postfix) with ESMTP id 1DFC7CD342C for ; Wed, 6 May 2026 17:41:37 +0000 (UTC) Received: from mails.dpdk.org (localhost [127.0.0.1]) by mails.dpdk.org (Postfix) with ESMTP id 5B09540ED0; Wed, 6 May 2026 19:39:45 +0200 (CEST) Received: from frasgout.his.huawei.com (frasgout.his.huawei.com [185.176.79.56]) by mails.dpdk.org (Postfix) with ESMTP id C554940A6E for ; Wed, 6 May 2026 19:39:24 +0200 (CEST) Received: from mail.maildlp.com (unknown [172.18.224.83]) by frasgout.his.huawei.com (SkyGuard) with ESMTPS id 4g9jKG40xfzHnGjR for ; Thu, 7 May 2026 01:38:26 +0800 (CST) Received: from frapema500003.china.huawei.com (unknown [7.182.19.114]) by mail.maildlp.com (Postfix) with ESMTPS id A5F7B40569 for ; Thu, 7 May 2026 01:39:24 +0800 (CST) Received: from localhost.localdomain (10.220.239.45) by frapema500003.china.huawei.com (7.182.19.114) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.2.1544.11; Wed, 6 May 2026 19:39:24 +0200 From: Marat Khalili To: CC: Subject: [PATCH 24/25] doc: add release notes for BPF validation fixes Date: Wed, 6 May 2026 18:38:42 +0100 Message-ID: <20260506173846.64914-25-marat.khalili@huawei.com> X-Mailer: git-send-email 2.43.0 In-Reply-To: <20260506173846.64914-1-marat.khalili@huawei.com> References: <20260506173846.64914-1-marat.khalili@huawei.com> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-Originating-IP: [10.220.239.45] X-ClientProxiedBy: frapema500008.china.huawei.com (7.182.19.65) To frapema500003.china.huawei.com (7.182.19.114) X-BeenThere: dev@dpdk.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: DPDK patches and discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Document the following new features and fixes: * Added BPF validation debugger API (rte_bpf_validate_debug_*). * Hardened BPF validator with numerous bug fixes and UB preventions. Signed-off-by: Marat Khalili --- doc/guides/rel_notes/release_26_07.rst | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/doc/guides/rel_notes/release_26_07.rst b/doc/guides/rel_notes/release_26_07.rst index 18810ab81d93..4ef2d354635b 100644 --- a/doc/guides/rel_notes/release_26_07.rst +++ b/doc/guides/rel_notes/release_26_07.rst @@ -83,6 +83,22 @@ New Features ``rte_bpf_eth_tx_install`` for installing already loaded BPF programs as port callbacks (as opposed to loading them directly from ELF files). +* **Hardened BPF validator.** + + Fixed numerous bugs in the BPF validator's abstract interpretation logic, + including incorrect bounds tracking for jumps and arithmetic operations, as + well as fixing several instances of undefined behavior (UB) when verifying + malicious or corrupt programs. + +* **Added BPF validation debugger API.** + + Introduced a new set of APIs (prefixed with ``rte_bpf_validate_debug_``) to + introspect the BPF validator. This provides a mechanism to set breakpoints or + catchpoints during validation and inspect the verifier's internal state + (such as tracked register bounds). This API is crucial primarily for writing + comprehensive tests for the validator, but also serves as a foundation for a + future interactive eBPF validation debugger. + Removed Items ------------- -- 2.43.0