eBPF Vulnerability Testing Suite

This project is a structured testing suite that demonstrates real-world security vulnerabilities in eBPF and XDP kernel programs, mapping each finding to coding rules defined in ISO/IEC TS 17961 (C Secure Coding Rules). The suite covers issues such as out-of-bounds memory access, uninitialized map values, integer overflows in packet offset calculations, and verifier bypass patterns.

Each test case ships as a pair of intentionally vulnerable and patched C programs, loadable into the kernel via bpftool. The test environment is isolated inside a KVM/QEMU virtual machine to prevent any risk of destabilising the host kernel during verifier stress tests and deliberately crashing probes.

The companion tool XVTLAS (XDP Vulnerability Testing and Liveness Analysis Suite), written in Go, automates the entire workflow: it injects vulnerability patches into source files, compiles them with the BPF backend, loads them via the kernel verifier, and records whether the verifier accepts or rejects each variant. This produces a reproducible matrix of verifier behaviour useful for security audits, kernel version regression testing, and research into eBPF verifier soundness.