Hello:
This series was applied to bpf/bpf.git (master)
by Alexei Starovoitov <[email protected]>:
On Tue, 23 Jun 2026 06:11:08 +0000 you wrote:
> bpf_refcount_acquire() is modeled as returning a refcounted allocation
> base, but it currently accepts PTR_TO_BTF_ID | MEM_ALLOC arguments whose
> offset already points at an embedded graph node returned from a list or
> rbtree operation.
>
> At runtime the kfunc starts from the supplied pointer and adds the type's
> refcount offset. With a graph-node pointer, that starts from base +
> node_off, while the verifier treats the returned pointer as the allocation
> base. Reject non-zero fixed-offset arguments to keep the runtime operation
> and the verifier model aligned.
>
> [...]
Here is the summary with links:
- [bpf-next,v4,1/2] bpf: Reject offset refcount acquire arguments
https://git.kernel.org/bpf/bpf/c/931a577fc79e
- [bpf-next,v4,2/2] selftests/bpf: Cover refcount acquire node offsets
https://git.kernel.org/bpf/bpf/c/0371fb57a0c9
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
