[roll] Roll fuchsia [Starnix] Implement complete packet access support in cBPF converter
Previously, the packet access support in the cBPF converter was
implemented in a way that prevented using for network filters where
the packet size is variable, and the program can use LD with negative
addresses to load fields outside of the packet body.
This CL includes the following changes to address these issue:
1. The converter now uses two eBPF instructions that are intended for
packet access. This ensures that the `PacketAccessor` is always
invoked for loads in cBPF.
2. `BPF_LEN` is supported in cBPF now. It can be used to retrieve
the size of the current packet.
3. PacketAccessor now allows negative offsets.
4. PacketAccessor implementation is expected to read the data from
the `context`, `sk_buf_ptr` argument is redundant and has been
removed.
5. Fixed R6 validation for the packet load instruction.
Original-Bug: 42079971
Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/1119509
Original-Revision: 478ebab165636cb300483191290a427b0cc8541c
GitOrigin-RevId: 79662926e04e31f2f99db63c87ed646819e99d5d
Change-Id: I54878059ad58f354aee0a199963eb4eb3e2fa8a4
This repository contains Fuchsia's Global Integration manifest files.
All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.
Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance in one of the communication channels documented at get involved.
First install Jiri.
Next run:
$ jiri init $ jiri import minimal https://fuchsia.googlesource.com/integration $ jiri update
Third party projects should have their own subdirectory in ./third_party.