Skip to content

Conversation

ti-mo
Copy link
Collaborator

@ti-mo ti-mo commented Dec 17, 2024

When the verifier hits a bug, it returns EFAULT while clobbering other retcodes. This defeats the buffer growth algorithm, so the user needs a break-glass procedure for obtaining the full verifier log.

Also, reinstate maxVerifierLogSize since the maxu32 >> 2 limit is still in effect in the Linux kernel. This can be removed if the limit is removed one day and someone has a verifier log that's actually this big.

EFAULT can't be reliably triggered in CI, and I'm currently out of ideas for testing this.

Fixes #1554

@ti-mo ti-mo requested a review from a team as a code owner December 17, 2024 20:41
@ti-mo ti-mo force-pushed the tb/revive-logsize branch 2 times, most recently from fad6c41 to 657e854 Compare December 17, 2024 20:52
Signed-off-by: Timo Beckers <timo@isovalent.com>
…er bug

When the verifier hits a bug, it returns EFAULT while clobbering other retcodes.
This defeats the buffer growth algorithm, so the user needs a break-glass
procedure for obtaining the full verifier log.

Also, reinstate maxVerifierLogSize since the maxu32 >> 2 limit is still in effect
in the Linux kernel. This can be removed if the limit is removed one day and
someone has a verifier log that's actually this big.

EFAULT can't be reliably triggered in CI, and I'm currently out of ideas for
testing this.

Signed-off-by: Timo Beckers <timo@isovalent.com>
@ti-mo ti-mo force-pushed the tb/revive-logsize branch from 657e854 to 6394ee2 Compare December 18, 2024 10:54
@ti-mo ti-mo merged commit e8b05c5 into cilium:main Dec 18, 2024
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Incomplete verifier log in 1.16
2 participants