Skip to content

feat: agent - eBPF Enhance HTTP2 Protocol Inference #9662

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yinjiping merged 4 commits into from
May 21, 2025
Merged

feat: agent - eBPF Enhance HTTP2 Protocol Inference #9662

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
44ab759
feat: agent - eBPF Enhance HTTP2 Protocol Inference
yinjiping May 17, 2025
a37eac2
Merge branch 'main' into enhance_http2_infer
yinjiping May 20, 2025
fd51459
Merge branch 'main' into enhance_http2_infer
sharang May 20, 2025
529c2cc
Merge branch 'main' into enhance_http2_infer
yinjiping May 21, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
17 changes: 16 additions & 1 deletion agent/src/ebpf/kernel/include/protocol_inference.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -426,7 +426,7 @@ static __inline enum message_type parse_http2_headers_frame(const char
#if defined(LINUX_VER_KFUNC) || defined(LINUX_VER_5_2_PLUS)
#define HTTPV2_LOOP_MAX 8
#else
#define HTTPV2_LOOP_MAX 6
#define HTTPV2_LOOP_MAX 5
#endif
/*
* HTTPV2_FRAME_READ_SZ取值考虑以下3部分：
Expand All @@ -452,6 +452,21 @@ static __inline enum message_type parse_http2_headers_frame(const char
if (count < HTTPV2_FRAME_PROTO_SZ)
return MSG_UNKNOWN;

/*
* The frame payload length (excluding the initial 9 bytes) must not
* exceed the actual length of the system call.
*/
if ((__bpf_ntohl(*(__u32 *) buf_kern) >> 8) > syscall_len - HTTPV2_FRAME_PROTO_SZ)
return MSG_UNKNOWN;

/*
* The highest bit of the 5th byte (i.e., the first byte of the Stream
* Identifier) must be 0, indicating that the reserved bit (R) is 0;
* otherwise, it violates the HTTP/2 specification.
*/
if (buf_kern[5] >> 7 != 0)
return MSG_UNKNOWN;

__u32 offset = 0;
__u8 flags_unset = 0, flags_padding = 0, flags_priority = 0;
__u8 type = 0, reserve = 0, static_table_idx, i, block_fragment_offset;
Expand Down