On Tue, Mar 19, 2024 at 2:16 PM Harishankar Vishwanathan <harishankar.vishwanathan@xxxxxxxxxxx> wrote: > > > To run Agni on the latest kernels requires a preprocessing step because > regs_refine_cond_op has a goto-label that introduces a backwards edge in the > control-flow graph of the verifier, something that Agni does not support yet. We > provide a patch that essentially removes this backwards edge and makes the > verifier code a DAG, while keeping it functionally equivalent. The patch and the > instructions to recreate our results are available at [2]. Thank you for doing the analysis. Maybe send a patch to refactor regs_refine_cond_op() to avoid that goto? case BPF_JGE:... can be moved before the main switch as another switch that flips opcode.
