kernel/bpf/verifier.c

2543 		ret = aux->func_info[i].insn_off;
2545 		 * later, so assume this is the right insn_off for now.
2548 			verbose(env, "invalid exception callback insn_off in func_info: 0\n");
15960 		/* check insn_off */
15963 			if (krecord[i].insn_off) {
15965 					"nonzero insn_off %u for the first func info record",
15966 					krecord[i].insn_off);
15969 		} else if (krecord[i].insn_off <= prev_offset) {
15972 				krecord[i].insn_off, prev_offset);
15989 		prev_offset = krecord[i].insn_off;
16040 		/* check insn_off */
16043 		if (env->subprog_info[i].start != krecord[i].insn_off) {
16087 		aux->func_info[i].insn_off = env->subprog_info[i].start;
16152 		 * Check insn_off to ensure
16156 		 * The linfo[0].insn_off == 0 check logically falls into
16158 		 * because the first linfo[0].insn_off must be the
16162 		if ((i && linfo[i].insn_off <= prev_offset) ||
16163 		    linfo[i].insn_off >= prog->len) {
16164 			verbose(env, "Invalid line_info[%u].insn_off:%u (prev_offset:%u prog->len:%u)\n",
16165 				i, linfo[i].insn_off, prev_offset,
16171 		if (!prog->insnsi[linfo[i].insn_off].code) {
16173 				"Invalid insn code at line_info[%u].insn_off\n",
16187 			if (linfo[i].insn_off == sub[s].start) {
16190 			} else if (sub[s].start < linfo[i].insn_off) {
16197 		prev_offset = linfo[i].insn_off;
16274 		if (core_relo.insn_off % 8 || core_relo.insn_off / 8 >= prog->len) {
16275 			verbose(env, "Invalid core_relo[%u].insn_off:%u prog->len:%u\n",
16276 				i, core_relo.insn_off, prog->len);
16282 				     &prog->insnsi[core_relo.insn_off / 8]);
18580 			/* func_info->insn_off is set after all code rewrites,
18612 		if (linfo[i].insn_off >= off)
18618 		if (linfo[i].insn_off < off + cnt)
18628 	    (i == nr_linfo || linfo[i].insn_off != off + cnt)) {
18630 		linfo[--i].insn_off = off + cnt;
18642 	/* pull all linfo[i].insn_off >= off + cnt in by cnt */
18644 		linfo[i].insn_off -= cnt;