microsoft / microsoft/ebpf-for-windows
Change max size of ebpf program to be INT_MAX instructions.
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 311
- Avg merge
- 6d 10h
- Merged PRs (30d)
- 21
Description
### Describe the bug
Currently the number of ebpf instructions supported in an ebpf program in ebpf-for-windows is INT_MAX / sizeof(ebpf_inst). Linux has the limit of INT_MAX instructions (since 5.2 -- earlier limit was 4096 instructions). We should match that limit.
### OS information
_No response_
### Steps taken to reproduce bug
NA
### Expected behavior
NA
### Actual outcome
NA
### Additional details
_No response_
Contributor guide
Research direction
Start by locating where ebpf-for-windows calculates the maximum number of supported eBPF instructions, then compare that calculation with Linux's INT_MAX-instruction limit described in the issue. Done means the Windows implementation accepts the same maximum instruction count without dividing INT_MAX by sizeof(ebpf_inst).
Written by the indexing model from the issue text.
Assessment
- Tech stack
- c
- Domain
- operating-systems
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100