[PATCH bpf-next 0/5] bpf: Fix three bugs around constant blinding and nop removal
From: Qiliang Yuan
Date: Mon Nov 02 2026 - 08:14:37 EST
Alexei listed three bugs that were in the tree before the patch list
series [1]. Each patch fixes one, the last two add tests:
bug fix test
line info stays blinded when the JIT falls back 1 -
removing a nospec jump as a nop drops its barrier 2 4
log_true_size misses an error from blinding 3 5
Patch 1 needs a JIT failure behind blinding with
CONFIG_BPF_JIT_ALWAYS_ON=n, which a selftest can't cause, so its log
shows a run with fail-nth instead. Each bug shows up on bpf-next and is
gone with its fix. test_verifier and test_progs show no new failures.
[1] https://lore.kernel.org/bpf/DMKHZS5B5CNO.186F6YH1T6YU4@xxxxxxxxx/
Signed-off-by: Qiliang Yuan <odys.yuan@xxxxxxxxx>
---
Qiliang Yuan (5):
bpf: Put the line info back when the JIT falls back after blinding
bpf: Keep the barrier of a nospec insn when removing nops
bpf: Finalize the verifier log after the runtime is selected
selftests/bpf: Cover a nospec jump that becomes a nop
selftests/bpf: Test log_true_size with an error from blinding
include/linux/bpf.h | 6 +++
kernel/bpf/core.c | 29 ++++++++++-
kernel/bpf/fixups.c | 3 +-
kernel/bpf/verifier.c | 13 +++--
.../selftests/bpf/prog_tests/blinding_log.c | 59 ++++++++++++++++++++++
.../testing/selftests/bpf/progs/verifier_unpriv.c | 35 +++++++++++++
6 files changed, 138 insertions(+), 7 deletions(-)
---
base-commit: cd5bc55288d4fd999595c8f2af6a5408cbe92a52
change-id: 20261102-bpf-blind-nops-fixes-e45e91d65c75
Best regards,
--
Qiliang Yuan <odys.yuan@xxxxxxxxx>