ubpf
ubpf copied to clipboard
iovisor
Userspace eBPF VM
Currently MAX_EXT_FUNCS is hardcoded in code and has a value of 64, see https://github.com/iovisor/ubpf/blob/39872ad471c206051407d89ab8ed62d9ba0d7310/vm/ubpf_vm.c#L33 This seems to be too small, since kernel has more than 200 helpers (see https://github.com/libbpf/libbpf/blob/master/src/bpf_helper_defs.h) What...
ubpf_exec passes mem and mem_len as r1 and r2. JIT code only passes mem as r1, doesn't set r2.
Hi, I tried to build uBPF on Mac M1. I successfully installed all prerequisites for the project. However, when I want to build the project, I get this: ```bash $...
Hi, I'm working on a research project where I want to use eBPF for auditing purposes, specifically for the following objectives: - Monitoring the creation and termination of each process....
In the upstream kernel eBPF specification, the offset of the arithmetic shift should be mask [0] In the interpreter of ubpf, the mask is missing for EBPF_OP_ARSH64 and EBPF_OP_ARSH https://github.com/iovisor/ubpf/blob/a6082a2124e25045161a4ea9aa1a5a7dbd995379/vm/ubpf_vm.c#L572-L577...
## Summary This pull request is created by [StepSecurity](https://app.stepsecurity.io/securerepo) at the request of @Alan-Jowett. Please merge the Pull Request to incorporate the requested changes. Please tag @Alan-Jowett on your message...
``` $ cmake -S . -B build -DUBPF_ENABLE_TESTS=true cmake --build build --config Debug -- The C compiler identification is GNU 11.4.0 -- The CXX compiler identification is GNU 11.4.0 --...
