Граф коммитов

1355 Коммитов

Автор SHA1 Сообщение Дата
dependabot[bot] cb4412ae6f
Bump external/Catch2 from `8008625` to `0631b60` (#2539)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `8008625` to `0631b60`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](8008625d7e...0631b607ee)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-07 15:49:51 +00:00
Dave Thaler 87b6520c34
Remove JIT and interpreter code from NativeOnly builds (#2475)
* Remove JIT and interpreter code from NativeOnly builds

Fixes #2030
Fixes #2488

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Try conditional project references

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Various test fixes

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Native-only fixes to deploy-ebpf.ps1

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Native-only support for setup-ebpf.ps1

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Native-only support for api_test.exe

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* Add connect_redirect_tests to deploy-ebpf.ps1

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* PR feedback from Anurag

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

---------

Signed-off-by: Dave Thaler <dthaler@microsoft.com>
2023-06-07 15:49:03 +00:00
Delaram Amiri a90d756de1
_update_hash_map_entry_with_handle - over release ref-count (#2524)
* api and multithread test

* deleted:    .azure/pipeline/azure-cicd.yml
deleted:    .azure/pipeline/azure-reusable-build.yml
deleted:    .azure/pipeline/azure-reusable-test.yml
modified:   libs/execution_context/ebpf_maps.c

* address PR comment
2023-06-07 15:49:01 +00:00
Sharmi 8adab0de10
stress test for tail calls (#2518)
* Add stress test for tail calls

* Added the code generated bindmonitor_mt_tailcall files

* Added the test case description to readme.md

* Update tests/stress/km/stress_tests_km.cpp

Co-authored-by: Dave Thaler <dthaler@microsoft.com>

* Update tests/stress/km/stress_tests_km.cpp

Co-authored-by: Dave Thaler <dthaler@microsoft.com>

* Addressed PR comments and Fixed merge conflicts with latest

* Fixed function name

* Regenerated the expected files, after the macro MAX TAIL CNT change done yesterday

* Update tests/stress/readme.md

Co-authored-by: Dave Thaler <dthaler@microsoft.com>

* Removed clean_up tail call

* Add bind in loop

* updated the readme

* Addressed PR comments

* Changed LOG_VERBOSE to LOG_ERROR

* Updated readme and addressed PR comment

---------

Co-authored-by: Dave Thaler <dthaler@microsoft.com>
2023-06-07 05:21:47 +00:00
dependabot[bot] 8dead3834e
Bump external/ebpf-verifier from `10eaee3` to `09a3349` (#2549)
Bumps [external/ebpf-verifier](https://github.com/vbpf/ebpf-verifier) from `10eaee3` to `09a3349`.
- [Release notes](https://github.com/vbpf/ebpf-verifier/releases)
- [Commits](10eaee343a...09a3349044)

---
updated-dependencies:
- dependency-name: external/ebpf-verifier
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 20:31:26 +00:00
dependabot[bot] 3e7d4a55e1
Bump external/ubpf from `c4201d9` to `96569a0` (#2550)
Bumps [external/ubpf](https://github.com/iovisor/ubpf) from `c4201d9` to `96569a0`.
- [Commits](c4201d9ef4...96569a0e19)

---
updated-dependencies:
- dependency-name: external/ubpf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-06 19:29:48 +00:00
Gianni Trevisiol 1ec8e90bd6
Add rundown files compression as an option to `ebpf_tracing.cmd`. (#2537)
* Add 'compress_rundown_state_files' option

* nit

* typo
2023-06-06 17:01:50 +00:00
Delaram Amiri e697c6c404
fix CICD failure (#2548)
Co-authored-by: Dhiren Vispute <86131363+dv-msft@users.noreply.github.com>
2023-06-06 17:01:22 +00:00
Dhiren Vispute f02a98e4f2
Add comments re. epoch awareness in code paths lacking the epoch sandwich. (#2523)
Co-authored-by: Dhiren Vispute <dhiren.vispute@microsoft.com>
2023-06-02 17:19:04 +00:00
Gianni Trevisiol d6bcf1958c
Refactor eBPFCore tracing to use less stack space. (#2501)
* refactor ebpfcore tracing

* feedback
2023-05-31 17:26:09 +00:00
Gianni Trevisiol 0b398dbae9
Tune ebpf_tracing.cmd to use the least amount of CPU. (#2499)
* Remove wfp compression

* Move the timestamp calculation.

* wip

* feedback

* Update scripts/ebpf_tracing.cmd

Co-authored-by: Dave Thaler <dthaler@microsoft.com>

* Setting max_file_size_mb to the final max allowed.

* maximize sizes

---------

Co-authored-by: Dave Thaler <dthaler@microsoft.com>
2023-05-30 22:33:39 +00:00
Anurag Saxena 3d8f1adfa7
fix (#2532) 2023-05-30 20:59:19 +00:00
Michael Friesen 15c88bb569
clean up native NMR handle only if not null (#2530) 2023-05-30 16:11:14 +00:00
dependabot[bot] 47429b6143
Bump github/codeql-action from 2.3.3 to 2.3.5 (#2525)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.3 to 2.3.5.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](29b1f65c5e...0225834cc5)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 16:00:33 +00:00
dependabot[bot] 492e574af3
Bump external/Catch2 from `689fdcd` to `8008625` (#2526)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `689fdcd` to `8008625`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](689fdcd7dc...8008625d7e)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 16:00:27 +00:00
dependabot[bot] d102280543
Bump external/ubpf from `91b1542` to `c4201d9` (#2527)
Bumps [external/ubpf](https://github.com/iovisor/ubpf) from `91b1542` to `c4201d9`.
- [Commits](91b1542ce7...c4201d9ef4)

---
updated-dependencies:
- dependency-name: external/ubpf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-30 16:00:20 +00:00
Dhiren Vispute b054f0fb32
tweak extension stop/restart, better handling of test runtime (#2519)
Co-authored-by: Dhiren Vispute <dhiren.vispute@microsoft.com>
2023-05-26 02:59:13 +00:00
Anurag Saxena c471719074
Fix closing native program / maps handles in system worker thread. (#2500)
* fix

* fix analyze build

* fix memory leak

* add tests

* code reorder

* mark new tests for DEBUG only

* fix Release build

* CR comments

* cr comments
2023-05-26 02:19:41 +00:00
Alan Jowett 904608de4e
Don't throw exceptions from ~_single_instance_hook (#2514)
* Don't throw exceptions from ~_single_instance_hook

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix AV

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-25 18:42:03 +00:00
Alan Jowett 396412bc56
Add recursive tail call test (#2504)
* Add recursive tail call test

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Add sequential tail call test

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* PR feedback

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* PR feedback

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix code analysis failure

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Document workaround for bpf_helpers.h conflict

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-24 20:01:01 +00:00
Alan Jowett 1a7155faba
Remove double free of ebpf_map_t (#2515)
Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-24 17:39:51 +00:00
Alan Jowett f084c9d4c3
Remove unneeded nuget package (#2507)
Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-24 14:38:32 +00:00
dependabot[bot] a072e655e9
Bump external/Catch2 from `06c0e1c` to `689fdcd` (#2506)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `06c0e1c` to `689fdcd`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](06c0e1cfab...689fdcd7dc)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 02:41:19 +00:00
dependabot[bot] 46650ef7e7
Bump external/ubpf from `8e1a158` to `91b1542` (#2505)
Bumps [external/ubpf](https://github.com/iovisor/ubpf) from `8e1a158` to `91b1542`.
- [Commits](8e1a1585b1...91b1542ce7)

---
updated-dependencies:
- dependency-name: external/ubpf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 20:38:48 +00:00
dependabot[bot] 667a9489b9
Bump external/Catch2 from `5a40b22` to `06c0e1c` (#2493)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `5a40b22` to `06c0e1c`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](5a40b2275c...06c0e1cfab)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-21 20:04:11 +00:00
dependabot[bot] 23d7d9136d
Bump codecov/codecov-action from 3.1.3 to 3.1.4 (#2495)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](894ff025c7...eaaf4bedf3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-21 20:04:10 +00:00
Anthony Nandaa 1210a5553e
fix: minor typo in bpf2c.exe help text (#2485)
fixes #1905
2023-05-19 15:56:24 +00:00
Sharmi d1c171d872
Configuring Segment Heap for bpf2c binary (#2455)
* Use SegmentHeap for ebpf-for-windows application

* Use SegmentHeap for ebpf-for-windows application

* Removed applications from reusable-test.yml

* Added to cicd.yml

* Add SegmentHeap to bpf2c.exe only

* Added asmv3

* Added assemblyIdentity in manifest

* Changes in manifest

* Embed manifest into exe

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Changed version from 0.9.0 to 0.9.0.0, 4 digit versioning

* Changed nuget.vcxproj

* Addressed PR comments

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
Co-authored-by: Alan Jowett <alanjo@microsoft.com>
2023-05-18 23:17:54 +00:00
Matthew Ige 2c54cc872d
Capture bpftool output in diagnostic scripts (#2484)
* tmp working commit

* working script

* working E2E scripts

* minor formatting
2023-05-18 20:57:43 +00:00
Dhiren Vispute 92a2728021
Ensure valid shift values for *SH* instructions (#2470)
Co-authored-by: Dhiren Vispute <dhiren.vispute@microsoft.com>
2023-05-18 19:18:21 +00:00
Dave Thaler 05be0228db
Fix build errors with Visual Studio 17.6.0 (#2483)
* Fix build errors with Visual Studio 17.6.0

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

* PR feedback

Signed-off-by: Dave Thaler <dthaler@microsoft.com>

---------

Signed-off-by: Dave Thaler <dthaler@microsoft.com>
2023-05-17 23:02:46 +00:00
Anurag Saxena 82c2c05724
fix (#2479) 2023-05-17 21:51:29 +00:00
Gianni Trevisiol 5950a9785b
Load/Attach/Unload programs only once for connect_redirect tests. (#2450)
* draft

* comments, rename

* nit

* test

* nit

* test

* test

* aggregate globals

* Fix C26495 warnings

* debug

* test

* debug

* debug instrument

* instrument

* comment

* debug

* fix hints and address_info leak

* fix leak

* wip

* fix

* fix

* tests

* Finalize and remove instrumentation.

* Merge bpf_object_ptr definitions

* feedback

* nit

* fixed SAL annotation

* feedback

* nit

* revert
2023-05-17 17:32:04 +00:00
Dave Thaler 67ef157802
Revert bpf_printk thunk (#2472)
Fixes #1715

Signed-off-by: Dave Thaler <dthaler@microsoft.com>
2023-05-16 16:07:05 +00:00
Anurag Saxena cbbb7597d5
Add check for IRQL between epoch enter / exit (#2344)
* fix

* fix
2023-05-16 15:16:16 +00:00
Dhiren Vispute 574d41b49c
Code clean-up, duplicate code refactoring (#2467)
Co-authored-by: Dhiren Vispute <dhiren.vispute@microsoft.com>
2023-05-16 02:29:28 +00:00
Anurag Saxena 5ad65e59e2
Add basic regression test for 0.9.0 (#2444)
* add regression test

* fix
2023-05-15 20:36:44 +00:00
Alan Jowett 6d31ca1261
Remove NMR extension wrapper code. (#2434)
* Remove NMR extension wrapper code.

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* PR feedback

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* PR feedback

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix code analysis and cmake failures

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Don't call NMR apis are dispatch

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix code analysis failure

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-15 18:49:55 +00:00
Sharmi 144b28f0cd
Add test for SeAccessCheckFromState Kernel OS user-mode API (#2464)
* Test SeAccessCheckFromState Kernel OS usermode API

* Removed contents in ebpf_nethooks.h

* Addressed PR comments
2023-05-15 05:00:22 +00:00
dependabot[bot] 10e71956df
Bump external/Catch2 from `0dc82e0` to `5a40b22` (#2469)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `0dc82e0` to `5a40b22`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](0dc82e08df...5a40b2275c)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-14 22:35:52 +00:00
Alan Jowett 174757e4d3
_ebpf_object_tracking_list_insert returns success if table is full (#2459)
Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-12 00:28:33 +00:00
Dhiren Vispute f93849612b
Remove premature assert (#2458)
Co-authored-by: Dhiren Vispute <dhiren.vispute@microsoft.com>
2023-05-12 00:26:52 +00:00
Alan Jowett f8f413a25d
Kill test process if it takes more than 5 minutes to execute (#2454)
* Kill test process if it takes more than 5 minutes to execute

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Update scripts/Test-FaultInjection.ps1

Co-authored-by: Dave Thaler <dthaler@microsoft.com>

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
Co-authored-by: Dave Thaler <dthaler@microsoft.com>
2023-05-12 00:22:43 +00:00
dependabot[bot] 0ac0a2f552
Bump external/Catch2 from `d84777c` to `0dc82e0` (#2462)
Bumps [external/Catch2](https://github.com/catchorg/Catch2) from `d84777c` to `0dc82e0`.
- [Release notes](https://github.com/catchorg/Catch2/releases)
- [Commits](d84777c9cb...0dc82e08df)

---
updated-dependencies:
- dependency-name: external/Catch2
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 21:20:30 +00:00
dependabot[bot] 850806706c
Bump external/ubpf from `2071abb` to `8e1a158` (#2461)
* Bump external/ubpf from `2071abb` to `8e1a158`

Bumps [external/ubpf](https://github.com/iovisor/ubpf) from `2071abb` to `8e1a158`.
- [Commits](2071abbed9...8e1a1585b1)

---
updated-dependencies:
- dependency-name: external/ubpf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Remove duplicated code

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix cmake build

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Alan Jowett <alanjo@microsoft.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alan Jowett <alanjo@microsoft.com>
2023-05-11 18:20:46 +00:00
Alan Jowett f92c9995b0
Add object history tracking instrumentation (#2449)
* Add object history tracking instrumentation

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix file_id type in history

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Code analysis failure

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* PR feedback

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

* Fix incorrect instrumentation

Signed-off-by: Alan Jowett <alanjo@microsoft.com>

---------

Signed-off-by: Alan Jowett <alanjo@microsoft.com>
2023-05-11 02:50:50 +00:00
Gianni Trevisiol 6df36ed81e
disable JIT and interpreter (#2448) 2023-05-10 03:03:09 +00:00
Sharmi 67665591aa
Add Fault Injection in Kernel OS APIs in kernel_um.cpp (#2424)
* Add Fault Injection in Kernel OS APIs in kernel_um.cpp

* Removed fault injection from RtlCreateAcl and RtlULongAdd

* Removed fault injection from RtlCreateSecurityDescriptor and RtlSetDaclSecurityDescriptor

* Fixed codecov coverage

* fix SeAccessCheckFromState for the reported Code coverage warnings

* Addressed PR comment
2023-05-09 22:40:27 +00:00
Tyler Retzlaff e1b8ed8ea0
propertly initialize pe_section_name_counter (#2452)
properly initialize the pe_section_name_counter

bpf2c crashes in set_pe_section_name during call to strncpy_s when provided
invalid prefix_length as count due tointeger underflow. the root cause is
pe_section_name_counter is not appropriately initialized to 0
2023-05-09 20:56:08 +00:00
dependabot[bot] b9cf492a36
Bump external/ubpf from `cc95d94` to `2071abb` (#2441)
Bumps [external/ubpf](https://github.com/iovisor/ubpf) from `cc95d94` to `2071abb`.
- [Commits](cc95d94c3b...2071abbed9)

---
updated-dependencies:
- dependency-name: external/ubpf
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-09 14:43:20 +00:00