4 ms·
I call bullshit! Ebpf programs cannot crash the kernel since they cannot be run if they contain bugs in the first place.
by zokula 5y ago
I call bullshit! Ebpf programs cannot crash the kernel since they cannot be run if they contain bugs in the first place.
- daenz 5y agoThat assumes that the virtual machine has no bugs
- tptacek 5y agoNot so much (eBPF VM bugs are pretty rare, as you'd expect, since the VM is very simple) --- you're much more likely to run into bugs in the C-code helpers the kernel exports. If you're malicious, you can also hit verifier bugs that'll give your eBPF code raw pointers, but I don't think you're likely to stumble on them accidentally.
- xyzzy_plugh 5y agoThe kernel, however, can and does have bugs. I've seen several thousand hosts get taken down with a perfectly correct eBPF program due to a buggy kernel.