kernel/bpf/verifier.c

66  * If instruction is BPF_MOV64_REG(BPF_REG_1, BPF_REG_5), then type of R5 is
79  *    BPF_MOV64_REG(BPF_REG_1, BPF_REG_10),
80  *    BPF_ALU64_IMM(BPF_ADD, BPF_REG_1, -20),
132  *    BPF_LD_MAP_FD(BPF_REG_1, map_fd),      // after this insn R1 type is CONST_PTR_TO_MAP
1753 	BPF_REG_0, BPF_REG_1, BPF_REG_2, BPF_REG_3, BPF_REG_4, BPF_REG_5
3740 				for (i = BPF_REG_1; i <= BPF_REG_5; i++) {
3769 			for (i = BPF_REG_1; i <= BPF_REG_5; i++)
3803 				for (i = BPF_REG_1; i <= BPF_REG_5; i++)
8520 			state = &regs[BPF_REG_1 + i];
8626 	u32 regno = BPF_REG_1 + arg;
9675 	callee->regs[BPF_REG_1] = caller->regs[BPF_REG_1];
9679 	callee->regs[BPF_REG_2].map_ptr = caller->regs[BPF_REG_1].map_ptr;
9683 	callee->regs[BPF_REG_3].map_ptr = caller->regs[BPF_REG_1].map_ptr;
9702 	for (i = BPF_REG_1; i <= BPF_REG_5; i++)
9742 	callee->regs[BPF_REG_1].type = SCALAR_VALUE;
9760 	struct bpf_map *map_ptr = caller->regs[BPF_REG_1].map_ptr;
9765 	callee->regs[BPF_REG_1].type = CONST_PTR_TO_MAP;
9766 	__mark_reg_known_zero(&callee->regs[BPF_REG_1]);
9767 	callee->regs[BPF_REG_1].map_ptr = map_ptr;
9795 	callee->regs[BPF_REG_1] = caller->regs[BPF_REG_1];
9823 	mark_dynptr_cb_reg(env, &callee->regs[BPF_REG_1], BPF_DYNPTR_TYPE_LOCAL);
9850 	field = reg_find_field_offset(&caller->regs[BPF_REG_1], caller->regs[BPF_REG_1].off,
9855 	mark_reg_graph_node(callee->regs, BPF_REG_1, &field->graph_root);
9856 	ref_set_non_owning(env, &callee->regs[BPF_REG_1]);
10355 		if (arg_type_is_dynptr(fn->arg_type[meta.release_regno - BPF_REG_1])) {
10433 		err = mark_chain_precision(env, BPF_REG_1);
10436 		if (cur_func(env)->callback_depth < regs[BPF_REG_1].umax_value) {
10447 		if (regs[BPF_REG_1].type != PTR_TO_MAP_VALUE) {
10449 				reg_type_str(env, regs[BPF_REG_1].type));
10525 		struct bpf_reg_state *reg = &regs[BPF_REG_1];
12413 			err = check_return_code(env, BPF_REG_1, "R1");
17421 					iter_reg = &cur_frame->regs[BPF_REG_1];
19696 		insn_buf[0] = BPF_MOV64_IMM(BPF_REG_1, obj_new_size);
19747 		insn_buf[0] = BPF_MOV64_REG(BPF_REG_0, BPF_REG_1);
19811 			BPF_MOV64_REG(BPF_REG_0, BPF_REG_1),
20170 			insn_buf[0] = BPF_LDX_MEM(BPF_DW, BPF_REG_1, BPF_REG_1, 0);
20336 			insn_buf[0] = BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_1, -8);
20339 			insn_buf[3] = BPF_ALU64_REG(BPF_ADD, BPF_REG_2, BPF_REG_1);
20363 				insn_buf[0] = BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_1, -8);
20365 				insn_buf[2] = BPF_ALU64_REG(BPF_ADD, BPF_REG_0, BPF_REG_1);
20389 			insn_buf[0] = BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_1, -8);
20404 			insn_buf[0] = BPF_LDX_MEM(BPF_DW, BPF_REG_0, BPF_REG_1, -16);
20476 			insn_buf[1] = BPF_ATOMIC_OP(BPF_DW, BPF_XCHG, BPF_REG_1, BPF_REG_0, 0);
20583 		BPF_JMP_IMM(BPF_JLE, BPF_REG_1, BPF_MAX_LOOPS, 2),
20591 		BPF_MOV64_REG(reg_loop_max, BPF_REG_1),
20601 		BPF_MOV64_REG(BPF_REG_1, reg_loop_cnt),
20777 		for (i = BPF_REG_1; i <= sub->arg_cnt; i++) {
20778 			arg = &sub->args[i - BPF_REG_1];
20814 					  i - BPF_REG_1, arg->arg_type);
20831 		regs[BPF_REG_1].type = PTR_TO_CTX;
20832 		mark_reg_known_zero(env, regs, BPF_REG_1);