Skip to content

Comments

prog: add ProgramOptions.LogSizeStart to obtain full log after verifier bug#1630

Merged
ti-mo merged 2 commits intocilium:mainfrom
ti-mo:tb/revive-logsize
Dec 18, 2024
Merged

prog: add ProgramOptions.LogSizeStart to obtain full log after verifier bug#1630
ti-mo merged 2 commits intocilium:mainfrom
ti-mo:tb/revive-logsize

Conversation

@ti-mo
Copy link
Contributor

@ti-mo ti-mo commented Dec 17, 2024

When the verifier hits a bug, it returns EFAULT while clobbering other retcodes. This defeats the buffer growth algorithm, so the user needs a break-glass procedure for obtaining the full verifier log.

Also, reinstate maxVerifierLogSize since the maxu32 >> 2 limit is still in effect in the Linux kernel. This can be removed if the limit is removed one day and someone has a verifier log that's actually this big.

EFAULT can't be reliably triggered in CI, and I'm currently out of ideas for testing this.

Fixes #1554

@ti-mo ti-mo requested a review from a team as a code owner December 17, 2024 20:41
@ti-mo ti-mo force-pushed the tb/revive-logsize branch 2 times, most recently from fad6c41 to 657e854 Compare December 17, 2024 20:52
…er bug

When the verifier hits a bug, it returns EFAULT while clobbering other retcodes.
This defeats the buffer growth algorithm, so the user needs a break-glass
procedure for obtaining the full verifier log.

Also, reinstate maxVerifierLogSize since the maxu32 >> 2 limit is still in effect
in the Linux kernel. This can be removed if the limit is removed one day and
someone has a verifier log that's actually this big.

EFAULT can't be reliably triggered in CI, and I'm currently out of ideas for
testing this.

Signed-off-by: Timo Beckers <[email protected]>
@ti-mo ti-mo force-pushed the tb/revive-logsize branch from 657e854 to 6394ee2 Compare December 18, 2024 10:54
@ti-mo ti-mo merged commit e8b05c5 into cilium:main Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Incomplete verifier log in 1.16

2 participants