LCOV - code coverage report
Current view: top level - flamenco/vm - fd_vm.c (source / functions) Hit Total Coverage
Test: cov.lcov Lines: 233 363 64.2 %
Date: 2026-03-19 18:19:27 Functions: 8 11 72.7 %

          Line data    Source code
       1             : #include "fd_vm_private.h"
       2             : #include "../../ballet/sbpf/fd_sbpf_instr.h"
       3             : #include "../../ballet/sbpf/fd_sbpf_opcodes.h"
       4             : 
       5             : /* fd_vm_syscall_strerror() returns the error message corresponding to err,
       6             :    intended to be logged by log_collector, or an empty string if the error code
       7             :    should be omitted in logs for whatever reason.  Omitted examples are success,
       8             :    panic (logged in place)...
       9             :    See also fd_log_collector_program_failure(). */
      10             : char const *
      11         175 : fd_vm_syscall_strerror( int err ) {
      12             : 
      13         175 :   switch( err ) {
      14             : 
      15           5 :   case FD_VM_SYSCALL_ERR_INVALID_STRING:                         return "invalid utf-8 sequence"; // truncated
      16          12 :   case FD_VM_SYSCALL_ERR_ABORT:                                  return "SBF program panicked";
      17          10 :   case FD_VM_SYSCALL_ERR_PANIC:                                  return "SBF program Panicked in..."; // truncated
      18           0 :   case FD_VM_SYSCALL_ERR_INVOKE_CONTEXT_BORROW_FAILED:           return "Cannot borrow invoke context";
      19           0 :   case FD_VM_SYSCALL_ERR_MALFORMED_SIGNER_SEED:                  return "Malformed signer seed"; // truncated
      20           4 :   case FD_VM_SYSCALL_ERR_BAD_SEEDS:                              return "Could not create program address with signer seeds"; // truncated
      21           1 :   case FD_VM_SYSCALL_ERR_PROGRAM_NOT_SUPPORTED:                  return "Program not supported by inner instructions"; // truncated
      22          91 :   case FD_VM_SYSCALL_ERR_UNALIGNED_POINTER:                      return "Unaligned pointer";
      23           8 :   case FD_VM_SYSCALL_ERR_TOO_MANY_SIGNERS:                       return "Too many signers";
      24           0 :   case FD_VM_SYSCALL_ERR_INSTRUCTION_TOO_LARGE:                  return "Instruction passed to inner instruction is too large"; // truncated
      25           0 :   case FD_VM_SYSCALL_ERR_TOO_MANY_ACCOUNTS:                      return "Too many accounts passed to inner instruction";
      26           9 :   case FD_VM_SYSCALL_ERR_COPY_OVERLAPPING:                       return "Overlapping copy";
      27           0 :   case FD_VM_SYSCALL_ERR_RETURN_DATA_TOO_LARGE:                  return "Return data too large"; // truncated
      28           3 :   case FD_VM_SYSCALL_ERR_TOO_MANY_SLICES:                        return "Hashing too many sequences";
      29          20 :   case FD_VM_SYSCALL_ERR_INVALID_LENGTH:                         return "InvalidLength";
      30           0 :   case FD_VM_SYSCALL_ERR_MAX_INSTRUCTION_DATA_LEN_EXCEEDED:      return "Invoked an instruction with data that is too large"; // truncated
      31           0 :   case FD_VM_SYSCALL_ERR_MAX_INSTRUCTION_ACCOUNTS_EXCEEDED:      return "Invoked an instruction with too many accounts"; // truncated
      32           0 :   case FD_VM_SYSCALL_ERR_MAX_INSTRUCTION_ACCOUNT_INFOS_EXCEEDED: return "Invoked an instruction with too many account info's"; // truncated
      33          10 :   case FD_VM_SYSCALL_ERR_INVALID_ATTRIBUTE:                      return "InvalidAttribute";
      34           0 :   case FD_VM_SYSCALL_ERR_INVALID_POINTER:                        return "Invalid pointer";
      35           0 :   case FD_VM_SYSCALL_ERR_ARITHMETIC_OVERFLOW:                    return "Arithmetic overflow";
      36             : 
      37           0 :   case FD_VM_SYSCALL_ERR_INSTR_ERR:                              return "Instruction error";
      38           0 :   case FD_VM_SYSCALL_ERR_INVALID_PDA:                            return "Invalid PDA";
      39           0 :   case FD_VM_SYSCALL_ERR_COMPUTE_BUDGET_EXCEEDED:                return "Compute budget exceeded";
      40           0 :   case FD_VM_SYSCALL_ERR_SEGFAULT:                               return "Segmentation fault";
      41           0 :   case FD_VM_SYSCALL_ERR_OUTSIDE_RUNTIME:                        return "Syscall executed outside runtime";
      42             : 
      43             : 
      44           1 :   case FD_VM_SYSCALL_ERR_POSEIDON_INVALID_PARAMS:                return "Invalid parameters.";
      45           1 :   case FD_VM_SYSCALL_ERR_POSEIDON_INVALID_ENDIANNESS:            return "Invalid endianness.";
      46             : 
      47           0 :   default: break;
      48         175 :   }
      49             : 
      50           0 :   return "";
      51         175 : }
      52             : 
      53             : /* fd_vm_ebpf_strerror() returns the error message corresponding to err,
      54             :    intended to be logged by log_collector, or an empty string if the error code
      55             :    should be omitted in logs for whatever reason.
      56             :    See also fd_log_collector_program_failure(). */
      57             : char const *
      58        1921 : fd_vm_ebpf_strerror( int err ) {
      59             : 
      60        1921 :   switch( err ) {
      61             : 
      62           0 :   case FD_VM_ERR_EBPF_ELF_ERROR:                   return "ELF error"; // truncated
      63           0 :   case FD_VM_ERR_EBPF_FUNCTION_ALREADY_REGISTERED: return "function was already registered"; // truncated
      64           1 :   case FD_VM_ERR_EBPF_CALL_DEPTH_EXCEEDED:         return "exceeded max BPF to BPF call depth";
      65           0 :   case FD_VM_ERR_EBPF_EXIT_ROOT_CALL_FRAME:        return "attempted to exit root call frame";
      66           1 :   case FD_VM_ERR_EBPF_DIVIDE_BY_ZERO:              return "divide by zero at BPF instruction";
      67           0 :   case FD_VM_ERR_EBPF_DIVIDE_OVERFLOW:             return "division overflow at BPF instruction";
      68           1 :   case FD_VM_ERR_EBPF_EXECUTION_OVERRUN:           return "attempted to execute past the end of the text segment at BPF instruction";
      69           2 :   case FD_VM_ERR_EBPF_CALL_OUTSIDE_TEXT_SEGMENT:   return "callx attempted to call outside of the text segment";
      70        1332 :   case FD_VM_ERR_EBPF_EXCEEDED_MAX_INSTRUCTIONS:   return "exceeded CUs meter at BPF instruction";
      71           0 :   case FD_VM_ERR_EBPF_JIT_NOT_COMPILED:            return "program has not been JIT-compiled";
      72           0 :   case FD_VM_ERR_EBPF_INVALID_VIRTUAL_ADDRESS:     return "invalid virtual address"; // truncated
      73           0 :   case FD_VM_ERR_EBPF_INVALID_MEMORY_REGION:       return "Invalid memory region at index"; // truncated
      74         519 :   case FD_VM_ERR_EBPF_ACCESS_VIOLATION:            return "Access violation"; // truncated
      75          37 :   case FD_VM_ERR_EBPF_STACK_ACCESS_VIOLATION:      return "Access violation in stack frame"; // truncated
      76           0 :   case FD_VM_ERR_EBPF_INVALID_INSTRUCTION:         return "invalid BPF instruction";
      77          28 :   case FD_VM_ERR_EBPF_UNSUPPORTED_INSTRUCTION:     return "unsupported BPF instruction";
      78           0 :   case FD_VM_ERR_EBPF_EXHAUSTED_TEXT_SEGMENT:      return "Compilation exhausted text segment at BPF instruction"; // truncated
      79           0 :   case FD_VM_ERR_EBPF_LIBC_INVOCATION_FAILED:      return "Libc calling returned error code"; // truncated
      80           0 :   case FD_VM_ERR_EBPF_VERIFIER_ERROR:              return "Verifier error"; // truncated
      81           0 :   case FD_VM_ERR_EBPF_SYSCALL_ERROR:               return ""; // handled explicitly via fd_vm_syscall_strerror()
      82             : 
      83           0 :   default: break;
      84        1921 :   }
      85             : 
      86           0 :   return "";
      87        1921 : }
      88             : 
      89             : /* fd_vm_strerror() returns the error message corresponding to err, used internally
      90             :    for system logs, NOT for log_collector / transaction logs. */
      91             : char const *
      92           0 : fd_vm_strerror( int err ) {
      93             : 
      94           0 :   switch( err ) {
      95             : 
      96             :   /* "Standard" Firedancer error codes */
      97             : 
      98           0 :   case FD_VM_SUCCESS:   return "SUCCESS success";
      99           0 :   case FD_VM_ERR_INVAL: return "INVAL invalid request";
     100           0 :   case FD_VM_ERR_UNSUP: return "UNSUP unsupported request";
     101           0 :   case FD_VM_ERR_FULL:  return "FULL storage full";
     102           0 :   case FD_VM_ERR_EMPTY: return "EMPTY nothing to do";
     103           0 :   case FD_VM_ERR_IO:    return "IO input-output error";
     104             : 
     105             :   /* VM exec error codes */
     106             : 
     107           0 :   case FD_VM_ERR_SIGFPE:      return "SIGFPE division by zero";
     108             : 
     109             :   /* VM validate error codes */
     110             : 
     111           0 :   case FD_VM_ERR_INVALID_OPCODE:    return "INVALID_OPCODE detected an invalid opcode";
     112           0 :   case FD_VM_ERR_INVALID_SRC_REG:   return "INVALID_SRC_REG detected an invalid source register";
     113           0 :   case FD_VM_ERR_INVALID_DST_REG:   return "INVALID_DST_REG detected an invalid destination register";
     114           0 :   case FD_VM_ERR_JMP_OUT_OF_BOUNDS: return "JMP_OUT_OF_BOUNDS detected an out of bounds jump";
     115           0 :   case FD_VM_ERR_JMP_TO_ADDL_IMM:   return "JMP_TO_ADDL_IMM detected a jump to an addl imm";
     116           0 :   case FD_VM_ERR_INVALID_END_IMM:   return "INVALID_END_IMM detected an invalid immediate for an endianness conversion instruction";
     117           0 :   case FD_VM_ERR_INCOMPLETE_LDQ:    return "INCOMPLETE_LDQ detected an incomplete ldq at program end";
     118           0 :   case FD_VM_ERR_LDQ_NO_ADDL_IMM:   return "LDQ_NO_ADDL_IMM detected a ldq without an addl imm following it";
     119           0 :   case FD_VM_ERR_INVALID_REG:       return "INVALID_REG detected an invalid register number in a callx instruction";
     120           0 :   case FD_VM_ERR_BAD_TEXT:          return "BAD_TEXT detected a bad text section";
     121           0 :   case FD_VM_SH_OVERFLOW:           return "SH_OVERFLOW detected a shift overflow in an instruction";
     122           0 :   case FD_VM_TEXT_SZ_UNALIGNED:     return "TEXT_SZ_UNALIGNED detected an unaligned text section size (not a multiple of 8)";
     123             : 
     124           0 :   default: break;
     125           0 :   }
     126             : 
     127           0 :   return "UNKNOWN probably not a FD_VM_ERR code";
     128           0 : }
     129             : 
     130             : /* FIXME: add a pedantic version of this validation that does things
     131             :    like:
     132             :   - only 0 imms when the instruction does not use an imm
     133             :   - same as above but for src/dst reg, offset */
     134             : /* FIXME: HANDLING OF LDQ ON NEWER SBPF VERSUS OLDER SBPF (AND WITH CALL
     135             :    REG) */
     136             : /* FIXME: LINK TO SOLANA CODE VALIDATE AND DOUBLE CHECK THIS BEHAVES
     137             :    IDENTICALLY! */
     138             : 
     139             : int
     140       10161 : fd_vm_validate( fd_vm_t const * vm ) {
     141             : 
     142       10161 :   ulong sbpf_version = vm->sbpf_version;
     143             : 
     144             :   /* A mapping of all the possible 1-byte sBPF opcodes to their
     145             :      validation criteria. */
     146             : 
     147    74970373 : # define FD_VALID               ((uchar)0) /* Valid opcode */
     148    19945340 : # define FD_CHECK_JMP           ((uchar)1) /* Validation should check that the instruction is a valid jump */
     149       35811 : # define FD_CHECK_END           ((uchar)2) /* Validation should check that the instruction is a valid endianness conversion */
     150    18616251 : # define FD_CHECK_ST            ((uchar)3) /* Validation should check that the instruction is a valid store */
     151     6527427 : # define FD_CHECK_LDQ           ((uchar)4) /* Validation should check that the instruction is a valid load-quad */
     152      248809 : # define FD_CHECK_DIV           ((uchar)5) /* Validation should check that the instruction is a valid division by immediate */
     153       30852 : # define FD_CHECK_SH32          ((uchar)6) /* Validation should check that the immediate is a valid 32-bit shift exponent */
     154     7467823 : # define FD_CHECK_SH64          ((uchar)7) /* Validation should check that the immediate is a valid 64-bit shift exponent */
     155     2148118 : # define FD_INVALID             ((uchar)8) /* The opcode is invalid */
     156       10838 : # define FD_CHECK_CALL_REG      ((uchar)9) /* Validation should check that callx has valid register number */
     157      494197 : # define FD_CHECK_CALL_REG_DEPR ((uchar)10) /* Older / deprecated FD_CHECK_CALLX */
     158       10161 : # define FD_CHECK_CALL_IMM      ((uchar)11) /* Check call against functions registry */
     159       10161 : # define FD_CHECK_SYSCALL       ((uchar)12) /* Check call against syscalls registry */
     160             : 
     161       10161 :   uchar validation_map[ 256 ] = {
     162             :     /* 0x00 */ FD_INVALID,    /* 0x01 */ FD_INVALID,    /* 0x02 */ FD_INVALID,    /* 0x03 */ FD_INVALID,
     163             :     /* 0x04 */ FD_VALID,      /* 0x05 */ FD_CHECK_JMP,  /* 0x06 */ FD_INVALID,    /* 0x07 */ FD_VALID,
     164             :     /* 0x08 */ FD_INVALID,    /* 0x09 */ FD_INVALID,    /* 0x0a */ FD_INVALID,    /* 0x0b */ FD_INVALID,
     165             :     /* 0x0c */ FD_VALID,      /* 0x0d */ FD_INVALID,    /* 0x0e */ FD_INVALID,    /* 0x0f */ FD_VALID,
     166             :     /* 0x10 */ FD_INVALID,    /* 0x11 */ FD_INVALID,    /* 0x12 */ FD_INVALID,    /* 0x13 */ FD_INVALID,
     167             :     /* 0x14 */ FD_VALID,      /* 0x15 */ FD_CHECK_JMP,  /* 0x16 */ FD_INVALID,    /* 0x17 */ FD_VALID,
     168             :     /* 0x18 */ FD_INVALID,    /* 0x19 */ FD_INVALID,    /* 0x1a */ FD_INVALID,    /* 0x1b */ FD_INVALID,
     169             :     /* 0x1c */ FD_VALID,      /* 0x1d */ FD_CHECK_JMP,  /* 0x1e */ FD_INVALID,    /* 0x1f */ FD_VALID,
     170             :     /* 0x20 */ FD_INVALID,    /* 0x21 */ FD_INVALID,    /* 0x22 */ FD_INVALID,    /* 0x23 */ FD_INVALID,
     171             :     /* 0x24 */ FD_INVALID,    /* 0x25 */ FD_CHECK_JMP,  /* 0x26 */ FD_INVALID,    /* 0x27 */ FD_CHECK_ST,
     172             :     /* 0x28 */ FD_INVALID,    /* 0x29 */ FD_INVALID,    /* 0x2a */ FD_INVALID,    /* 0x2b */ FD_INVALID,
     173             :     /* 0x2c */ FD_VALID,      /* 0x2d */ FD_CHECK_JMP,  /* 0x2e */ FD_INVALID,    /* 0x2f */ FD_CHECK_ST,
     174             :     /* 0x30 */ FD_INVALID,    /* 0x31 */ FD_INVALID,    /* 0x32 */ FD_INVALID,    /* 0x33 */ FD_INVALID,
     175             :     /* 0x34 */ FD_INVALID,    /* 0x35 */ FD_CHECK_JMP,  /* 0x36 */ FD_VALID,      /* 0x37 */ FD_CHECK_ST,
     176             :     /* 0x38 */ FD_INVALID,    /* 0x39 */ FD_INVALID,    /* 0x3a */ FD_INVALID,    /* 0x3b */ FD_INVALID,
     177             :     /* 0x3c */ FD_VALID,      /* 0x3d */ FD_CHECK_JMP,  /* 0x3e */ FD_VALID,      /* 0x3f */ FD_CHECK_ST,
     178             :     /* 0x40 */ FD_INVALID,    /* 0x41 */ FD_INVALID,    /* 0x42 */ FD_INVALID,    /* 0x43 */ FD_INVALID,
     179             :     /* 0x44 */ FD_VALID,      /* 0x45 */ FD_CHECK_JMP,  /* 0x46 */ FD_CHECK_DIV,  /* 0x47 */ FD_VALID,
     180             :     /* 0x48 */ FD_INVALID,    /* 0x49 */ FD_INVALID,    /* 0x4a */ FD_INVALID,    /* 0x4b */ FD_INVALID,
     181             :     /* 0x4c */ FD_VALID,      /* 0x4d */ FD_CHECK_JMP,  /* 0x4e */ FD_VALID,      /* 0x4f */ FD_VALID,
     182             :     /* 0x50 */ FD_INVALID,    /* 0x51 */ FD_INVALID,    /* 0x52 */ FD_INVALID,    /* 0x53 */ FD_INVALID,
     183             :     /* 0x54 */ FD_VALID,      /* 0x55 */ FD_CHECK_JMP,  /* 0x56 */ FD_CHECK_DIV,  /* 0x57 */ FD_VALID,
     184             :     /* 0x58 */ FD_INVALID,    /* 0x59 */ FD_INVALID,    /* 0x5a */ FD_INVALID,    /* 0x5b */ FD_INVALID,
     185             :     /* 0x5c */ FD_VALID,      /* 0x5d */ FD_CHECK_JMP,  /* 0x5e */ FD_VALID,      /* 0x5f */ FD_VALID,
     186             :     /* 0x60 */ FD_INVALID,    /* 0x61 */ FD_INVALID,    /* 0x62 */ FD_INVALID,    /* 0x63 */ FD_INVALID,
     187             :     /* 0x64 */ FD_CHECK_SH32, /* 0x65 */ FD_CHECK_JMP,  /* 0x66 */ FD_CHECK_DIV,  /* 0x67 */ FD_CHECK_SH64,
     188             :     /* 0x68 */ FD_INVALID,    /* 0x69 */ FD_INVALID,    /* 0x6a */ FD_INVALID,    /* 0x6b */ FD_INVALID,
     189             :     /* 0x6c */ FD_VALID,      /* 0x6d */ FD_CHECK_JMP,  /* 0x6e */ FD_VALID,      /* 0x6f */ FD_VALID,
     190             :     /* 0x70 */ FD_INVALID,    /* 0x71 */ FD_INVALID,    /* 0x72 */ FD_INVALID,    /* 0x73 */ FD_INVALID,
     191             :     /* 0x74 */ FD_CHECK_SH32, /* 0x75 */ FD_CHECK_JMP,  /* 0x76 */ FD_CHECK_DIV,  /* 0x77 */ FD_CHECK_SH64,
     192             :     /* 0x78 */ FD_INVALID,    /* 0x79 */ FD_INVALID,    /* 0x7a */ FD_INVALID,    /* 0x7b */ FD_INVALID,
     193             :     /* 0x7c */ FD_VALID,      /* 0x7d */ FD_CHECK_JMP,  /* 0x7e */ FD_VALID,      /* 0x7f */ FD_VALID,
     194             :     /* 0x80 */ FD_INVALID,    /* 0x81 */ FD_INVALID,    /* 0x82 */ FD_INVALID,    /* 0x83 */ FD_INVALID,
     195             :     /* 0x84 */ FD_INVALID,    /* 0x85 */ FD_VALID,      /* 0x86 */ FD_VALID,      /* 0x87 */ FD_CHECK_ST,
     196             :     /* 0x88 */ FD_INVALID,    /* 0x89 */ FD_INVALID,    /* 0x8a */ FD_INVALID,    /* 0x8b */ FD_INVALID,
     197             :     /* 0x8c */ FD_VALID,      /* 0x8d */ FD_CHECK_CALL_REG,/*0x8e*/FD_VALID,      /* 0x8f */ FD_CHECK_ST,
     198             :     /* 0x90 */ FD_INVALID,    /* 0x91 */ FD_INVALID,    /* 0x92 */ FD_INVALID,    /* 0x93 */ FD_INVALID,
     199             :     /* 0x94 */ FD_INVALID,    /* 0x95 */ FD_VALID,      /* 0x96 */ FD_VALID,      /* 0x97 */ FD_CHECK_ST,
     200             :     /* 0x98 */ FD_INVALID,    /* 0x99 */ FD_INVALID,    /* 0x9a */ FD_INVALID,    /* 0x9b */ FD_INVALID,
     201             :     /* 0x9c */ FD_VALID,      /* 0x9d */ FD_INVALID,    /* 0x9e */ FD_VALID,      /* 0x9f */ FD_CHECK_ST,
     202             :     /* 0xa0 */ FD_INVALID,    /* 0xa1 */ FD_INVALID,    /* 0xa2 */ FD_INVALID,    /* 0xa3 */ FD_INVALID,
     203             :     /* 0xa4 */ FD_VALID,      /* 0xa5 */ FD_CHECK_JMP,  /* 0xa6 */ FD_INVALID,    /* 0xa7 */ FD_VALID,
     204             :     /* 0xa8 */ FD_INVALID,    /* 0xa9 */ FD_INVALID,    /* 0xaa */ FD_INVALID,    /* 0xab */ FD_INVALID,
     205             :     /* 0xac */ FD_VALID,      /* 0xad */ FD_CHECK_JMP,  /* 0xae */ FD_INVALID,    /* 0xaf */ FD_VALID,
     206             :     /* 0xb0 */ FD_INVALID,    /* 0xb1 */ FD_INVALID,    /* 0xb2 */ FD_INVALID,    /* 0xb3 */ FD_INVALID,
     207             :     /* 0xb4 */ FD_VALID,      /* 0xb5 */ FD_CHECK_JMP,  /* 0xb6 */ FD_VALID,      /* 0xb7 */ FD_VALID,
     208             :     /* 0xb8 */ FD_INVALID,    /* 0xb9 */ FD_INVALID,    /* 0xba */ FD_INVALID,    /* 0xbb */ FD_INVALID,
     209             :     /* 0xbc */ FD_VALID,      /* 0xbd */ FD_CHECK_JMP,  /* 0xbe */ FD_VALID,      /* 0xbf */ FD_VALID,
     210             :     /* 0xc0 */ FD_INVALID,    /* 0xc1 */ FD_INVALID,    /* 0xc2 */ FD_INVALID,    /* 0xc3 */ FD_INVALID,
     211             :     /* 0xc4 */ FD_CHECK_SH32, /* 0xc5 */ FD_CHECK_JMP,  /* 0xc6 */ FD_CHECK_DIV,  /* 0xc7 */ FD_CHECK_SH64,
     212             :     /* 0xc8 */ FD_INVALID,    /* 0xc9 */ FD_INVALID,    /* 0xca */ FD_INVALID,    /* 0xcb */ FD_INVALID,
     213             :     /* 0xcc */ FD_VALID,      /* 0xcd */ FD_CHECK_JMP,  /* 0xce */ FD_VALID,      /* 0xcf */ FD_VALID,
     214             :     /* 0xd0 */ FD_INVALID,    /* 0xd1 */ FD_INVALID,    /* 0xd2 */ FD_INVALID,    /* 0xd3 */ FD_INVALID,
     215             :     /* 0xd4 */ FD_INVALID,    /* 0xd5 */ FD_CHECK_JMP,  /* 0xd6 */ FD_CHECK_DIV,  /* 0xd7 */ FD_INVALID,
     216             :     /* 0xd8 */ FD_INVALID,    /* 0xd9 */ FD_INVALID,    /* 0xda */ FD_INVALID,    /* 0xdb */ FD_INVALID,
     217             :     /* 0xdc */ FD_CHECK_END,  /* 0xdd */ FD_CHECK_JMP,  /* 0xde */ FD_VALID,      /* 0xdf */ FD_INVALID,
     218             :     /* 0xe0 */ FD_INVALID,    /* 0xe1 */ FD_INVALID,    /* 0xe2 */ FD_INVALID,    /* 0xe3 */ FD_INVALID,
     219             :     /* 0xe4 */ FD_INVALID,    /* 0xe5 */ FD_INVALID,    /* 0xe6 */ FD_CHECK_DIV,  /* 0xe7 */ FD_INVALID,
     220             :     /* 0xe8 */ FD_INVALID,    /* 0xe9 */ FD_INVALID,    /* 0xea */ FD_INVALID,    /* 0xeb */ FD_INVALID,
     221             :     /* 0xec */ FD_INVALID,    /* 0xed */ FD_INVALID,    /* 0xee */ FD_VALID,      /* 0xef */ FD_INVALID,
     222             :     /* 0xf0 */ FD_INVALID,    /* 0xf1 */ FD_INVALID,    /* 0xf2 */ FD_INVALID,    /* 0xf3 */ FD_INVALID,
     223             :     /* 0xf4 */ FD_INVALID,    /* 0xf5 */ FD_INVALID,    /* 0xf6 */ FD_CHECK_DIV,  /* 0xf7 */ FD_VALID,
     224             :     /* 0xf8 */ FD_INVALID,    /* 0xf9 */ FD_INVALID,    /* 0xfa */ FD_INVALID,    /* 0xfb */ FD_INVALID,
     225             :     /* 0xfc */ FD_INVALID,    /* 0xfd */ FD_INVALID,    /* 0xfe */ FD_VALID,      /* 0xff */ FD_INVALID,
     226       10161 :   };
     227             : 
     228             :   /* SIMD-0173: LDDW */
     229       10161 :   validation_map[ 0x18 ] = FD_VM_SBPF_ENABLE_LDDW(sbpf_version) ? FD_CHECK_LDQ : FD_INVALID;
     230       10161 :   validation_map[ 0xf7 ] = FD_VM_SBPF_ENABLE_LDDW(sbpf_version) ? FD_INVALID   : FD_VALID; /* HOR64 */
     231             : 
     232             :   /* SIMD-0173: LE */
     233       10161 :   validation_map[ 0xd4 ] = FD_VM_SBPF_ENABLE_LE  (sbpf_version) ? FD_CHECK_END : FD_INVALID;
     234             : 
     235             :   /* SIMD-0173: LDXW, STW, STXW */
     236       10161 :   validation_map[ 0x61 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_VALID;
     237       10161 :   validation_map[ 0x62 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     238       10161 :   validation_map[ 0x63 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     239       10161 :   validation_map[ 0x8c ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_VALID     : FD_INVALID;
     240       10161 :   validation_map[ 0x87 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_VALID; /* VALID because it's NEG64 */
     241       10161 :   validation_map[ 0x8f ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_INVALID;
     242             : 
     243             :   /* SIMD-0173: LDXH, STH, STXH */
     244       10161 :   validation_map[ 0x69 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_VALID;
     245       10161 :   validation_map[ 0x6a ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     246       10161 :   validation_map[ 0x6b ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     247       10161 :   validation_map[ 0x3c ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_VALID     : FD_VALID;
     248       10161 :   validation_map[ 0x37 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_CHECK_DIV;
     249       10161 :   validation_map[ 0x3f ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_VALID;
     250             : 
     251             :   /* SIMD-0173: LDXB, STB, STXB */
     252       10161 :   validation_map[ 0x71 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_VALID;
     253       10161 :   validation_map[ 0x72 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     254       10161 :   validation_map[ 0x73 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     255       10161 :   validation_map[ 0x2c ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_VALID     : FD_VALID;
     256       10161 :   validation_map[ 0x27 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_VALID;
     257       10161 :   validation_map[ 0x2f ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_VALID;
     258             : 
     259             :   /* SIMD-0173: LDXDW, STDW, STXDW */
     260       10161 :   validation_map[ 0x79 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_VALID;
     261       10161 :   validation_map[ 0x7a ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     262       10161 :   validation_map[ 0x7b ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_INVALID   : FD_CHECK_ST;
     263       10161 :   validation_map[ 0x9c ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_VALID     : FD_VALID;
     264       10161 :   validation_map[ 0x97 ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_CHECK_DIV;
     265       10161 :   validation_map[ 0x9f ] = FD_VM_SBPF_MOVE_MEMORY_IX_CLASSES(sbpf_version) ? FD_CHECK_ST  : FD_VALID;
     266             : 
     267             :   /* SIMD-0173: CALLX */
     268       10161 :   validation_map[ 0x8d ] = FD_VM_SBPF_CALLX_USES_SRC_REG(sbpf_version) ? FD_CHECK_CALL_REG : FD_CHECK_CALL_REG_DEPR;
     269             : 
     270             :   /* SIMD-0174: MUL, DIV, MOD */
     271       10161 :   validation_map[ 0x24 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_INVALID : FD_VALID;
     272       10161 :   validation_map[ 0x34 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_INVALID : FD_CHECK_DIV;
     273       10161 :   validation_map[ 0x94 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_INVALID : FD_CHECK_DIV;
     274             :   /* note: 0x?c, 0x?7, 0x?f should not be overwritten because they're now load/store ix */
     275             : 
     276             :   /* SIMD-0174: NEG */
     277       10161 :   validation_map[ 0x84 ] = FD_VM_SBPF_ENABLE_NEG (sbpf_version) ? FD_VALID : FD_INVALID;
     278             :   /* note: 0x87 should not be overwritten because it was NEG64 and it becomes STW */
     279             : 
     280             :   /* SIMD-0174: MUL, DIV, MOD */
     281       10161 :   validation_map[ 0x36 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID; /* UHMUL64 */
     282       10161 :   validation_map[ 0x3e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     283       10161 :   validation_map[ 0x46 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* UDIV32 */
     284       10161 :   validation_map[ 0x4e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     285       10161 :   validation_map[ 0x56 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* UDIV64 */
     286       10161 :   validation_map[ 0x5e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     287       10161 :   validation_map[ 0x66 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* UREM32 */
     288       10161 :   validation_map[ 0x6e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     289       10161 :   validation_map[ 0x76 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* UREM64 */
     290       10161 :   validation_map[ 0x7e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     291       10161 :   validation_map[ 0x86 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID; /* LMUL32 */
     292       10161 :   validation_map[ 0x8e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     293       10161 :   validation_map[ 0x96 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID; /* LMUL64 */
     294       10161 :   validation_map[ 0x9e ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     295       10161 :   validation_map[ 0xb6 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID; /* SHMUL64 */
     296       10161 :   validation_map[ 0xbe ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     297       10161 :   validation_map[ 0xc6 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* SDIV32 */
     298       10161 :   validation_map[ 0xce ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     299       10161 :   validation_map[ 0xd6 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* SDIV64 */
     300       10161 :   validation_map[ 0xde ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     301       10161 :   validation_map[ 0xe6 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* SREM32 */
     302       10161 :   validation_map[ 0xee ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     303       10161 :   validation_map[ 0xf6 ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_CHECK_DIV : FD_INVALID; /* SREM64 */
     304       10161 :   validation_map[ 0xfe ] = FD_VM_SBPF_ENABLE_PQR (sbpf_version) ? FD_VALID     : FD_INVALID;
     305             : 
     306             :   /* FIXME: These checks are not necessary assuming fd_vm_t is populated by metadata
     307             :      generated in fd_sbpf_elf_peek (which performs these checks). But there is no guarantee, and
     308             :      this non-guarantee is (rightfully) exploited by the fuzz harnesses.
     309             :      Agave doesn't perform these checks explicitly due to Rust's guarantees  */
     310       10161 :   if( FD_UNLIKELY( vm->text_sz / 8UL != vm->text_cnt ||
     311       10161 :                    (const uchar *)vm->text < vm->rodata ||
     312       10161 :                    (ulong)vm->text > (ulong)vm->text + vm->text_sz || /* Overflow chk */
     313       10161 :                    (const uchar *)vm->text + vm->text_sz > vm->rodata + vm->rodata_sz ) )
     314           0 :     return FD_VM_ERR_BAD_TEXT;
     315             : 
     316       10161 :   if( FD_UNLIKELY( !fd_ulong_is_aligned( vm->text_sz, 8UL ) ) ) /* https://github.com/solana-labs/rbpf/blob/v0.8.0/src/verifier.rs#L109 */
     317           0 :     return FD_VM_TEXT_SZ_UNALIGNED;
     318             : 
     319       10161 :   if ( FD_UNLIKELY( vm->text_cnt == 0UL ) ) /* https://github.com/solana-labs/rbpf/blob/v0.8.0/src/verifier.rs#L112 */
     320           2 :     return FD_VM_ERR_EMPTY;
     321             : 
     322       10159 :   ulong const * text     = vm->text;
     323       10159 :   ulong         text_cnt = vm->text_cnt;
     324             : 
     325   119331474 :   for( ulong i=0UL; i<text_cnt; i++ ) {
     326   119331474 :     fd_sbpf_instr_t instr = fd_sbpf_instr( text[i] );
     327             : 
     328   119331474 :     uchar validation_code = validation_map[ instr.opcode.raw ];
     329   119331474 :     switch( validation_code ) {
     330             : 
     331    74142634 :     case FD_VALID: break;
     332             : 
     333             :     /* Store ops are special because they allow dreg==r10.
     334             :        We use a special validation_code, used later in the
     335             :        "Check registers" section.
     336             :        But there's nothing to do at this time. */
     337    18372387 :     case FD_CHECK_ST: break;
     338             : 
     339    19711637 :     case FD_CHECK_JMP: {
     340    19711637 :       long jmp_dst = (long)i + (long)instr.offset + 1L;
     341    19711637 :       if( FD_UNLIKELY( (jmp_dst<0) | (jmp_dst>=(long)text_cnt)                          ) ) return FD_VM_ERR_JMP_OUT_OF_BOUNDS;
     342             :       //FIXME: this shouldn't be here?
     343    19711637 :       if( FD_UNLIKELY( fd_sbpf_instr( text[ jmp_dst ] ).opcode.raw==FD_SBPF_OP_ADDL_IMM ) ) return FD_VM_ERR_JMP_TO_ADDL_IMM;
     344    19711603 :       break;
     345    19711637 :     }
     346             : 
     347    19711603 :     case FD_CHECK_END: {
     348       16160 :       if( FD_UNLIKELY( !((instr.imm==16) | (instr.imm==32) | (instr.imm==64)) ) ) return FD_VM_ERR_INVALID_END_IMM;
     349       16160 :       break;
     350       16160 :     }
     351             : 
     352             :     /* https://github.com/solana-labs/rbpf/blob/b503a1867a9cfa13f93b4d99679a17fe219831de/src/verifier.rs#L244 */
     353     6517937 :     case FD_CHECK_LDQ: {
     354             :       /* https://github.com/solana-labs/rbpf/blob/b503a1867a9cfa13f93b4d99679a17fe219831de/src/verifier.rs#L131 */
     355     6517937 :       if( FD_UNLIKELY( (i+1UL)>=text_cnt ) ) return FD_VM_ERR_INCOMPLETE_LDQ;
     356             : 
     357             :       /* https://github.com/solana-labs/rbpf/blob/b503a1867a9cfa13f93b4d99679a17fe219831de/src/verifier.rs#L137-L139 */
     358     6517937 :       fd_sbpf_instr_t addl_imm = fd_sbpf_instr( text[ i+1UL ] );
     359     6517937 :       if( FD_UNLIKELY( addl_imm.opcode.raw!=FD_SBPF_OP_ADDL_IMM ) ) return FD_VM_ERR_LDQ_NO_ADDL_IMM;
     360             : 
     361             :       /* FIXME: SET A BIT MAP HERE OF ADDL_IMM TO DENOTE * AS FORBIDDEN
     362             :          BRANCH TARGETS OF CALL_REG?? */
     363             : 
     364     6517937 :       i++; /* Skip the addl imm */
     365     6517937 :       break;
     366     6517937 :     }
     367             : 
     368       83549 :     case FD_CHECK_DIV: {
     369       83549 :       if( FD_UNLIKELY( instr.imm==0 ) ) return FD_VM_ERR_SIGFPE;
     370       83549 :       break;
     371       83549 :     }
     372             : 
     373       83549 :     case FD_CHECK_SH32: {
     374         369 :       if( FD_UNLIKELY( instr.imm>=32 ) ) return FD_VM_SH_OVERFLOW;
     375         369 :       break;
     376         369 :     }
     377             : 
     378     7437340 :     case FD_CHECK_SH64: {
     379     7437340 :       if( FD_UNLIKELY( instr.imm>=64 ) ) return FD_VM_SH_OVERFLOW;
     380     7437339 :       break;
     381     7437340 :     }
     382             : 
     383             :     /* https://github.com/anza-xyz/sbpf/blob/v0.11.1/src/verifier.rs#L220 */
     384     7437339 :     case FD_CHECK_CALL_REG: {
     385           6 :       if( FD_UNLIKELY( instr.src_reg > 9 ) ) {
     386           0 :         return FD_VM_ERR_INVALID_REG;
     387           0 :       }
     388           6 :       break;
     389           6 :     }
     390      474546 :     case FD_CHECK_CALL_REG_DEPR: {
     391      474546 :       if( FD_UNLIKELY( instr.imm > 9 ) ) {
     392           0 :         return FD_VM_ERR_INVALID_REG;
     393           0 :       }
     394      474546 :       break;
     395      474546 :     }
     396             : 
     397             :     /* https://github.com/anza-xyz/sbpf/blob/v0.12.2/src/verifier.rs#L403-L409 */
     398      474546 :     case FD_CHECK_CALL_IMM: {
     399           0 :       ulong target_pc = (ulong)( fd_long_sat_add( (long)i, fd_long_sat_add( (long)(int)instr.imm, 1 ) ) );
     400           0 :       if( FD_UNLIKELY( !(
     401           0 :         target_pc<text_cnt && fd_sbpf_is_function_start( fd_sbpf_instr( text[target_pc] ) )
     402           0 :       ) ) ) {
     403           0 :         return FD_VM_INVALID_FUNCTION;
     404           0 :       }
     405           0 :       break;
     406           0 :     }
     407             : 
     408             :     /* https://github.com/anza-xyz/sbpf/blob/v0.12.2/src/verifier.rs#L414-L423 */
     409           0 :     case FD_CHECK_SYSCALL: {
     410             :       /* check active syscall */
     411           0 :       fd_sbpf_syscalls_t const * syscall = fd_sbpf_syscalls_query_const( vm->syscalls, (ulong)instr.imm, NULL );
     412           0 :       if( FD_UNLIKELY( !syscall ) ) {
     413           0 :         return FD_VM_INVALID_SYSCALL;
     414           0 :       }
     415           0 :       break;
     416           0 :     }
     417             : 
     418          26 :     case FD_INVALID: default: return FD_VM_ERR_INVALID_OPCODE;
     419   119331474 :     }
     420             : 
     421             :     /* Check registers
     422             :        https://github.com/solana-labs/rbpf/blob/v0.8.5/src/verifier.rs#L177 */
     423             : 
     424             :     /* Source register */
     425   119288030 :     if( FD_UNLIKELY( instr.src_reg>10 ) ) return FD_VM_ERR_INVALID_SRC_REG;
     426             : 
     427             :     /* Special R10 register allowed for ADD64_IMM */
     428   119288029 :     if( instr.dst_reg==10U
     429   119288029 :         && FD_VM_SBPF_DYNAMIC_STACK_FRAMES( sbpf_version )
     430   119288029 :         && instr.opcode.raw == 0x07
     431   119288029 :         && ( instr.imm % FD_VM_SBPF_DYNAMIC_STACK_FRAMES_ALIGN )==0 )
     432           0 :         continue;
     433             : 
     434             :     /* Destination register. */
     435   119288029 :     if( FD_UNLIKELY( instr.dst_reg==10U && validation_code != FD_CHECK_ST ) ) return FD_VM_ERR_INVALID_DST_REG;
     436   119288029 :     if( FD_UNLIKELY( instr.dst_reg > 10U ) ) return FD_VM_ERR_INVALID_DST_REG;
     437   119288029 :   }
     438             : 
     439 >1844*10^16 :   return FD_VM_SUCCESS;
     440       10159 : }
     441             : 
     442             : FD_FN_CONST ulong
     443       47255 : fd_vm_align( void ) {
     444       47255 :   return FD_VM_ALIGN;
     445       47255 : }
     446             : 
     447             : FD_FN_CONST ulong
     448       26021 : fd_vm_footprint( void ) {
     449       26021 :   return FD_VM_FOOTPRINT;
     450       26021 : }
     451             : 
     452             : void *
     453       21275 : fd_vm_new( void * shmem ) {
     454             : 
     455       21275 :   if( FD_UNLIKELY( !shmem ) ) {
     456           0 :     FD_LOG_WARNING(( "NULL shmem" ));
     457           0 :     return NULL;
     458           0 :   }
     459             : 
     460       21275 :   if( FD_UNLIKELY( !fd_ulong_is_aligned( (ulong)shmem, fd_vm_align() ) ) ) {
     461           0 :     FD_LOG_WARNING(( "misaligned shmem" ));
     462           0 :     return NULL;
     463           0 :   }
     464             : 
     465       21275 :   fd_vm_t * vm = (fd_vm_t *)shmem;
     466       21275 :   fd_memset( vm, 0, fd_vm_footprint() );
     467             : 
     468       21275 :   FD_COMPILER_MFENCE();
     469       21275 :   FD_VOLATILE( vm->magic ) = FD_VM_MAGIC;
     470       21275 :   FD_COMPILER_MFENCE();
     471             : 
     472       21275 :   return shmem;
     473       21275 : }
     474             : 
     475             : fd_vm_t *
     476       21267 : fd_vm_join( void * shmem ) {
     477             : 
     478       21267 :   if( FD_UNLIKELY( !shmem ) ) {
     479           0 :     FD_LOG_WARNING(( "NULL shmem" ));
     480           0 :     return NULL;
     481           0 :   }
     482             : 
     483       21267 :   if( FD_UNLIKELY( !fd_ulong_is_aligned( (ulong)shmem, fd_vm_align() ) ) ) {
     484           0 :     FD_LOG_WARNING(( "misaligned shmem" ));
     485           0 :     return NULL;
     486           0 :   }
     487             : 
     488       21267 :   fd_vm_t * vm = (fd_vm_t *)shmem;
     489             : 
     490       21267 :   if( FD_UNLIKELY( vm->magic!=FD_VM_MAGIC ) ) {
     491           0 :     FD_LOG_WARNING(( "bad magic" ));
     492           0 :     return NULL;
     493           0 :   }
     494             : 
     495       21267 :   return vm;
     496       21267 : }
     497             : 
     498             : void *
     499           0 : fd_vm_leave( fd_vm_t * vm ) {
     500             : 
     501           0 :   if( FD_UNLIKELY( !vm ) ) {
     502           0 :     FD_LOG_WARNING(( "NULL vm" ));
     503           0 :     return NULL;
     504           0 :   }
     505             : 
     506           0 :   return (void *)vm;
     507           0 : }
     508             : 
     509             : void *
     510           0 : fd_vm_delete( void * shmem ) {
     511             : 
     512           0 :   if( FD_UNLIKELY( !shmem ) ) {
     513           0 :     FD_LOG_WARNING(( "NULL shmem" ));
     514           0 :     return NULL;
     515           0 :   }
     516             : 
     517           0 :   if( FD_UNLIKELY( !fd_ulong_is_aligned( (ulong)shmem, fd_vm_align() ) ) ) {
     518           0 :     FD_LOG_WARNING(( "misaligned shmem" ));
     519           0 :     return NULL;
     520           0 :   }
     521             : 
     522           0 :   fd_vm_t * vm = (fd_vm_t *)shmem;
     523             : 
     524           0 :   if( FD_UNLIKELY( vm->magic!=FD_VM_MAGIC ) ) {
     525           0 :     FD_LOG_WARNING(( "bad magic" ));
     526           0 :     return NULL;
     527           0 :   }
     528             : 
     529           0 :   FD_COMPILER_MFENCE();
     530           0 :   FD_VOLATILE( vm->magic ) = 0UL;
     531           0 :   FD_COMPILER_MFENCE();
     532             : 
     533           0 :   return (void *)vm;
     534           0 : }
     535             : 
     536             : fd_vm_t *
     537             : fd_vm_init(
     538             :    fd_vm_t *                 vm,
     539             :    fd_exec_instr_ctx_t *     instr_ctx,
     540             :    ulong                     heap_max,
     541             :    ulong                     entry_cu,
     542             :    uchar const *             rodata,
     543             :    ulong                     rodata_sz,
     544             :    ulong const *             text,
     545             :    ulong                     text_cnt,
     546             :    ulong                     text_off,
     547             :    ulong                     text_sz,
     548             :    ulong                     entry_pc,
     549             :    ulong const *             calldests,
     550             :    ulong                     sbpf_version,
     551             :    fd_sbpf_syscalls_t *      syscalls,
     552             :    fd_vm_trace_t *           trace,
     553             :    fd_sha256_t *             sha,
     554             :    fd_vm_input_region_t *    mem_regions,
     555             :    uint                      mem_regions_cnt,
     556             :    fd_vm_acc_region_meta_t * acc_region_metas,
     557             :    uchar                     is_deprecated,
     558             :    int                       direct_mapping,
     559             :    int                       stricter_abi_and_runtime_constraints,
     560             :    int                       dump_syscall_to_pb,
     561       21280 :    ulong                     r2_initial_value ) {
     562             : 
     563       21280 :   if ( FD_UNLIKELY( vm == NULL ) ) {
     564           0 :     FD_LOG_WARNING(( "NULL vm" ));
     565           0 :     return NULL;
     566           0 :   }
     567             : 
     568       21280 :   if ( FD_UNLIKELY( vm->magic != FD_VM_MAGIC ) ) {
     569           0 :     FD_LOG_WARNING(( "bad magic" ));
     570           0 :     return NULL;
     571           0 :   }
     572             : 
     573       21280 :   if ( FD_UNLIKELY( heap_max > FD_VM_HEAP_MAX ) ) {
     574           0 :     FD_LOG_WARNING(( "heap_max > FD_VM_HEAP_MAX" ));
     575           0 :     return NULL;
     576           0 :   }
     577             : 
     578             :   /* We do support calldests==NULL for tests that do not require
     579             :      program execution, e.g. just testing some interpreter functionality
     580             :      or syscalls.
     581             :      SBPF v3+ no longer needs calldests, so we enforce it to be NULL. */
     582       21280 :   if( FD_UNLIKELY( calldests && fd_sbpf_enable_stricter_elf_headers_enabled( sbpf_version ) ) ) {
     583           0 :     return NULL;
     584           0 :   }
     585             : 
     586             :   // Set the vm fields
     587       21280 :   vm->instr_ctx                            = instr_ctx;
     588       21280 :   vm->heap_max                             = heap_max;
     589       21280 :   vm->entry_cu                             = entry_cu;
     590       21280 :   vm->rodata                               = rodata;
     591       21280 :   vm->rodata_sz                            = rodata_sz;
     592       21280 :   vm->text                                 = text;
     593       21280 :   vm->text_cnt                             = text_cnt;
     594       21280 :   vm->text_off                             = text_off;
     595       21280 :   vm->text_sz                              = text_sz;
     596       21280 :   vm->entry_pc                             = entry_pc;
     597       21280 :   vm->calldests                            = calldests;
     598       21280 :   vm->sbpf_version                         = sbpf_version;
     599       21280 :   vm->syscalls                             = syscalls;
     600       21280 :   vm->trace                                = trace;
     601       21280 :   vm->sha                                  = sha;
     602       21280 :   vm->input_mem_regions                    = mem_regions;
     603       21280 :   vm->input_mem_regions_cnt                = mem_regions_cnt;
     604       21280 :   vm->acc_region_metas                     = acc_region_metas;
     605       21280 :   vm->is_deprecated                        = is_deprecated;
     606       21280 :   vm->direct_mapping                       = direct_mapping;
     607       21280 :   vm->stricter_abi_and_runtime_constraints = stricter_abi_and_runtime_constraints;
     608       21280 :   vm->segv_vaddr                           = ULONG_MAX;
     609       21280 :   vm->segv_access_len                      = 0UL;
     610       21280 :   vm->segv_access_type                     = 0;
     611       21280 :   vm->dump_syscall_to_pb                   = dump_syscall_to_pb;
     612             : 
     613             :   /* Unpack input and rodata */
     614       21280 :   fd_vm_mem_cfg( vm );
     615             : 
     616             :   /* Initialize registers */
     617             :   /* FIXME: Zero out shadow, stack and heap here? */
     618       21280 :   fd_memset( vm->reg, 0, FD_VM_REG_MAX * sizeof(ulong) );
     619       21280 :   vm->reg[1]  = FD_VM_MEM_MAP_INPUT_REGION_START;
     620       21280 :   vm->reg[2]  = r2_initial_value;
     621             :   /* https://github.com/solana-labs/rbpf/blob/4ad935be45e5663be23b30cfc750b1ae1ad03c44/src/vm.rs#L326-L333 */
     622       21280 :   vm->reg[10] = FD_VM_MEM_MAP_STACK_REGION_START +
     623       21280 :     ( FD_VM_SBPF_DYNAMIC_STACK_FRAMES( vm->sbpf_version ) ? FD_VM_STACK_MAX : FD_VM_STACK_FRAME_SZ );
     624             :   /* Note: Agave uses r11 as pc, we don't */
     625             : 
     626             :   /* Set execution state */
     627       21280 :   vm->pc        = vm->entry_pc;
     628       21280 :   vm->ic        = 0UL;
     629       21280 :   vm->cu        = vm->entry_cu;
     630       21280 :   vm->frame_cnt = 0UL;
     631             : 
     632       21280 :   vm->heap_sz = 0UL;
     633             : 
     634             :   /* Do NOT reset logs */
     635             : 
     636       21280 :   return vm;
     637       21280 : }

Generated by: LCOV version 1.14