Skip to content
On this page

Syscall Entrance

BPF_PROG_LOAD

Processed by bpf_prog_load, which:

  1. Checks the permission, the flags, license compatibility;
  2. Initializes a struct bpf_prog;
  3. Runs the verifier with bpf_check;
  4. Tries to JIT the program with bpf_prog_select_runtime;
  5. Allocates an ID to the program, and maybe calls bpf_prog_kallsyms_add (no idea what it does).