Proper BPF support? about klint HOT 8 OPEN

BPF programs might be a good showcase.

Good idea, I'll check with the hierachy :)

Hoo, a bunch of existing programs to try klint on: https://github.com/zoidbergwill/awesome-ebpf#examples
Correct me if I'm wrong, there is (or was) support for eBPF Maps in code?

from klint.

There was indeed, IIRC the main difference from Klint's map_* stuff is that BPF maps copy keys and values rather than partially owning key poiners.

from klint.

quick update: the hierarchy validated 🥳

from klint.

support for eBPF in angr is in progress at angr/angr-platforms#55

from klint.

@tharvik any news on this?

from klint.

upstream isn't really proactive, I bumped them, hopefully we'll have some news this week.

anyway, the PR is working (minus relocation & some specials instructions), feel free to use it, I'm happy to help with/fix any issue you might encounter.

from klint.

I see the PR was merged 🎉 I guess angr-platforms should become a dependency of klint now? I don't know how the packaging of it works (so that we can point Klint to an ebpf binary and it "just works")

from klint.

yeah, it took a while but it finally landed 🥳

I guess angr-platforms should become a dependency of klint now?

yep, it's quite easy in fact. as each angr arch register itself on import, you simply have to import angr_platforms.ebpf to support it.
and for the dep itself, it seems that it's not available via pip.. but you can depend on its git by adding a
"angr-platforms @ git+https://github.com/angr/angr-platforms.git" item in the dependencies' array.

from klint.