Andrey Ignatov
5e43f899b0
bpf: Check attach type at prog load time ...
== The problem ==
There are use-cases when a program of some type can be attached to
multiple attach points and those attach points must have different
permissions to access context or to call helpers.
E.g. context structure may have fields for both IPv4 and IPv6 but it
doesn't make sense to read from / write to IPv6 field when attach point
is somewhere in IPv4 stack.
Same applies to BPF-helpers: it may make sense to call some helper from
some attach point, but not from other for same prog type.
== The solution ==
Introduce `expected_attach_type` field in in `struct bpf_attr` for
`BPF_PROG_LOAD` command. If scenario described in "The problem" section
is the case for some prog type, the field will be checked twice:
1) At load time prog type is checked to see if attach type for it must
be known to validate program permissions correctly. Prog will be
rejected with EINVAL if it's the case and `expected_attach_type` is
not specified or has invalid value.
2) At attach time `attach_type` is compared with `expected_attach_type`,
if prog type requires to have one, and, if they differ, attach will
be rejected with EINVAL.
The `expected_attach_type` is now available as part of `struct bpf_prog`
in both `bpf_verifier_ops->is_valid_access()` and
`bpf_verifier_ops->get_func_proto()` () and can be used to check context
accesses and calls to helpers correspondingly.
Initially the idea was discussed by Alexei Starovoitov <ast@fb.com> and
Daniel Borkmann <daniel@iogearbox.net> here:
https://marc.info/?l=linux-netdev&m=152107378717201&w=2
Signed-off-by: Andrey Ignatov <rdna@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
2018-03-31 02:14:44 +02:00
virtchnl: Add filter data structures
2018-02-14 09:43:22 -08:00
can: dev: Add support for limiting configured bitrate
2018-01-16 15:11:32 +01:00
firmware /meson
The is the bulk of GPIO changes for the v4.16 kernel cycle.
2018-01-31 12:25:27 -08:00
Staging/IIO patches for 4.16-rc1
2018-02-01 09:51:57 -08:00
KVM: arm/arm64: vgic: Don't populate multiple LRs with the same vintid
2018-03-14 18:31:04 +00:00
lockd: convert nlm_rqst.a_count from atomic_t to refcount_t
2018-01-14 23:06:30 -05:00
RTC for 4.16
2018-02-02 14:19:19 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
mmc: slot-gpio: add a helper to check capability of GPIO WP detection
2018-01-18 09:08:56 +01:00
Core changes:
2018-01-29 09:58:36 +01:00
mux: add SPDX identifiers to all mux source files
2018-01-09 16:51:44 +01:00
netfilter: x_tables: add and use xt_check_proc_name
2018-03-11 21:24:29 +01:00
arm_pmu: acpi: request IRQs up-front
2018-02-20 11:34:54 +00:00
pinctrl: remove include file from <linux/device.h>
2018-02-03 12:10:09 -08:00
platform-drivers-x86 for v4.16-1
2018-02-06 15:30:52 -08:00
regulator: add PM suspend and resume hooks
2018-01-26 14:43:55 +00:00
Merge branch 'akpm' (patches from Andrew)
2018-02-22 10:45:46 -08:00
ARM: SoC driver updates for 4.16
2018-02-01 16:35:31 -08:00
NFS client bugfixes and latency improvements for Linux 4.16
2018-02-09 14:55:30 -08:00
usb: quirks: add control message delay for 1b1c:1b20
2018-03-06 09:17:34 -08:00
device property: Constify device_get_match_data()
2018-02-12 10:41:11 +01:00
sched/cpufreq: Remove arch_scale_freq_capacity()'s 'sd' parameter
2018-01-10 12:53:34 +01:00
arm/arm64: smccc: Implement SMCCC v1.1 inline primitive
2018-02-06 22:54:15 +00:00
firmware: arm_sdei: Add driver for Software Delegated Exceptions
2018-01-13 10:44:56 +00:00
scsi: ata: enhance the definition of SET MAX feature field value
2018-01-10 23:25:08 -05:00
net: Make atalk_ptr depend on ATALK or IRDA
2018-02-14 11:55:33 -05:00
lockdep: Convert some users to const
2018-01-18 11:56:49 +01:00
block: display the correct diskname for bio
2018-03-01 08:41:25 -07:00
lib: optimize cpumask_next_and()
2018-02-06 18:32:44 -08:00
blkcg: simplify statistic accumulation code
2018-01-16 08:56:36 -07:00
blk-mq: rename blk_mq_hw_ctx->queue_rq_srcu to ->srcu
2018-01-09 09:31:15 -07:00
blk-mq: introduce BLK_STS_DEV_RESOURCE
2018-01-30 20:18:28 -07:00
block: fix a typo in comment of BLK_MQ_POLL_STATS_BKTS
2018-02-15 08:27:06 -07:00
bpf: NULL pointer check is not needed in BPF_CGROUP_RUN_PROG_INET_SOCK
2018-02-23 16:23:11 +01:00
bpf: Check attach type at prog load time
2018-03-31 02:14:44 +02:00
bpf: introduce BPF_RAW_TRACEPOINT
2018-03-28 22:55:19 +02:00
bpf: Add bpf_verifier_vlog() and bpf_verifier_log_needed()
2018-03-26 09:58:17 +02:00
for-linus-20180204
2018-02-04 11:16:35 -08:00
build_bug.h: remove BUILD_BUG_ON_NULL()
2018-02-06 18:32:46 -08:00
net: use skb_to_full_sk() in skb_update_prio()
2018-03-14 12:53:23 -04:00
Merge branches 'clk-remove-asm-clkdev', 'clk-debugfs-fixes', 'clk-renesas' and 'clk-meson' into clk-next
2018-01-26 16:43:32 -08:00
MIPS fixes for 4.16-rc5
2018-03-08 10:03:12 -08:00
x86/retpoline: Support retpoline builds with Clang
2018-02-20 11:17:58 +01:00
Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-02-26 09:34:21 -08:00
bug.h: work around GCC PR82365 in BUG()
2018-02-21 15:35:43 -08:00
locking/lockdep: Remove cross-release leftovers
2018-01-08 17:30:45 +01:00
Merge branch 'x86-pti-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-01-14 09:51:25 -08:00
cpufreq: Add and use cpufreq_for_each_{valid_,}entry_idx()
2018-02-08 10:21:39 +01:00
Merge branch 'for-linus' of git://git.armlinux.org.uk/~rmk/linux-arm
2018-02-02 09:50:51 -08:00
Merge branches 'pm-cpuidle' and 'pm-opp'
2018-02-15 12:01:53 +01:00
cpumask: Make for_each_cpu_wrap() available on UP as well
2018-02-16 10:40:24 +01:00
kernel/cpuset: current_cpuset_is_being_rebound can be boolean
2018-02-06 18:32:47 -08:00
kdump: write correct address of mem_section into vmcoreinfo
2018-01-13 10:42:48 -08:00
crash_dump: is_kdump_kernel can be boolean
2018-02-06 18:32:47 -08:00
lib/crc-ccitt: Add CCITT-FALSE CRC16 variant
2018-01-08 10:08:33 +00:00
crypto: hash - prevent using keyed hashes without setting key
2018-01-12 23:03:37 +11:00
vfs: factor out helpers d_instantiate_anon() and d_alloc_anon()
2018-01-24 11:25:59 +01:00
delayacct: Account blkio completion on the correct task
2018-01-16 03:29:36 +01:00
dm mpath: delay the retry of a request if the target responded as busy
2018-01-29 13:44:54 -05:00
pinctrl: remove include file from <linux/device.h>
2018-02-03 12:10:09 -08:00
dma-direct: reject too small dma masks
2018-01-15 09:35:15 +01:00
dma-mapping: fix a comment typo
2018-02-12 15:59:08 +00:00
Merge branch 'next-tpm' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security
2018-01-31 13:12:31 -08:00
block: Unexport elv_register_queue() and elv_unregister_queue()
2018-01-18 12:54:41 -07:00
error-injection: Add injectable error types
2018-01-12 17:33:38 -08:00
net: Extra '_get' in declaration of arch_get_platform_mac_address
2018-02-08 15:13:30 -05:00
net: ethtool: extend RXNFC API to support RSS spreading of filter matches
2018-03-08 21:54:52 -05:00
f2fs: support inode creation time
2018-01-25 14:10:39 -08:00
fbdev changes for v4.16:
2018-02-07 13:10:43 -08:00
vfs, fdtable: Prevent bounds-check bypass via speculative execution
2018-01-30 21:54:32 +01:00
bpf: Check attach type at prog load time
2018-03-31 02:14:44 +02:00
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2018-03-15 18:57:14 -07:00
fscrypt: move fscrypt_symlink_data to fscrypt_private.h
2018-01-11 23:30:08 -05:00
fscrypt: remove 'ci' parameter from fscrypt_put_encryption_info()
2018-01-11 23:30:13 -05:00
fscrypt: remove 'ci' parameter from fscrypt_put_encryption_info()
2018-01-11 23:30:13 -05:00
init_task out-of-lining
2018-01-29 09:08:34 -08:00
device property: Constify device_get_match_data()
2018-02-12 10:41:11 +01:00
genhd: Fix BUG in blkdev_open()
2018-02-26 09:48:42 -07:00
include/linux/genl_magic_func.h: remove own BUILD_BUG_ON*() defines
2018-02-06 18:32:46 -08:00
hrtimer: Implement support for softirq based hrtimers
2018-01-16 09:51:22 +01:00
hugetlb, mbind: fall back to default policy if vma is NULL
2018-01-31 17:18:40 -08:00
i2c: add 'set_sda' to bus_recovery_info
2018-01-16 00:04:19 +01:00
idr: Add documentation
2018-02-06 16:41:29 -05:00
mac80211: add get TID helper
2018-02-22 21:13:03 +01:00
net/core: Add drop counters to VF statistics
2018-01-09 07:40:48 +02:00
tun/tap: use ptr_ring instead of skb_array
2018-01-09 10:56:10 -05:00
vhost_net: examine pointer types during un-producing
2018-03-09 12:02:59 -05:00
vlan: Fix out of order vlan headers with reorder header off
2018-03-16 10:03:47 -04:00
devinet_ioctl(): take copyin/copyout to caller
2018-01-24 19:13:45 -05:00
x86/retpoline: Support retpoline builds with Clang
2018-02-20 11:17:58 +01:00
Expand INIT_STRUCT_PID and remove
2018-01-17 11:30:16 +00:00
iommu/vt-d: Add a check for 5-level paging support
2018-01-17 15:02:50 +01:00
kernel/resource: iomem_is_exclusive can be boolean
2018-02-06 18:32:47 -08:00
irq/work: Improve the flag definitions
2018-01-08 19:43:15 +01:00
init_task out-of-lining
2018-01-29 09:08:34 -08:00
iversion: Rename make inode_cmp_iversion{+raw} to inode_eq_iversion{+raw}
2018-02-01 08:15:25 -05:00
jbd2: fix sphinx kernel-doc build warnings
2018-01-10 00:27:29 -05:00
jump_label: Explicitly disable jump labels in __init code
2018-02-21 16:54:05 +01:00
kallsyms: let print_ip_sym() print raw addresses
2018-02-06 18:32:45 -08:00
kasan: clean up KASAN_SHADOW_SCALE_SHIFT usage
2018-02-06 18:32:43 -08:00
Merge branch 'akpm' (patches from Andrew)
2018-02-22 10:45:46 -08:00
vfs/proc/kcore, x86/mm/kcore: Fix SMAP fault when dumping vsyscall user page
2018-02-13 09:15:58 +01:00
macro: introduce COUNT_ARGS() macro
2018-03-28 22:55:19 +02:00
error-injection: Separate error-injection from kprobe
2018-01-12 17:33:38 -08:00
kvm: fix warning for non-x86 builds
2018-02-24 01:43:47 +01:00
libfdt: remove unnecessary include directive from <linux/libfdt.h>
2018-01-11 14:39:07 -06:00
acpi: nfit: add persistent memory control flag for nd_region
2018-02-01 15:01:15 -07:00
livepatch: Remove immediate feature
2018-01-11 10:58:03 +01:00
Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip
2018-01-30 10:44:56 -08:00
lib/lockref: __lockref_is_dead can be boolean
2018-02-06 18:32:47 -08:00
Revert "mm: page_alloc: skip over regions of invalid pfns where possible"
2018-03-22 17:07:01 -07:00
mm: memcontrol: fix NR_WRITEBACK leak in memcg and system stats
2018-02-21 15:35:42 -08:00
mm: pass the vmem_altmap to memmap_init_zone
2018-01-08 11:46:23 -08:00
memremap: change devm_memremap_pages interface to use struct dev_pagemap
2018-01-08 11:46:23 -08:00
libnvdimm for 4.16
2018-02-06 10:41:33 -08:00
x86/mm, mm/hwpoison: Don't unconditionally unmap kernel 1:1 pages
2018-02-13 16:25:06 +01:00
mm: remove reference to PG_buddy
2018-01-31 17:18:38 -08:00
mm, mmu_notifier: annotate mmu notifiers with blockable invalidate callbacks
2018-01-31 17:18:38 -08:00
include/linux/mmzone.h: fix explanation of lower bits in the SPARSEMEM mem_map pointer
2018-01-31 17:18:39 -08:00
kernel/module: module_is_live can be boolean
2018-02-06 18:32:47 -08:00
ip6mr: Remove MFC_NOTIFY and refactor flags
2018-03-01 13:13:23 -05:00
ip6mr: Remove MFC_NOTIFY and refactor flags
2018-03-01 13:13:23 -05:00
ipmr, ip6mr: Unite dumproute flows
2018-03-01 13:13:23 -05:00
locking/mutex: Add comment to __mutex_owner() to deter usage
2018-02-21 08:56:40 +01:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
net/dim: Fix fixpoint divide exception in net_dim_stats_compare
2018-01-19 14:53:32 -05:00
net: fix sysctl_fb_tunnels_only_for_init_net link error
2018-03-13 14:15:21 -04:00
netfilter: remove struct nf_afinfo and its helper functions
2018-01-08 18:11:02 +01:00
netfilter: reduce NF_MAX_HOOKS define
2018-01-08 18:01:12 +01:00
netfilter: move reroute indirection to struct nf_ipv6_ops
2018-01-08 18:10:53 +01:00
netfilter: move reroute indirection to struct nf_ipv6_ops
2018-01-08 18:10:53 +01:00
netlink: extack: avoid parenthesized string constant warning
2018-01-15 15:15:23 -05:00
NFS: Fix nfsstat breakage due to LOOKUPP
2018-01-14 23:06:29 -05:00
nospec: Include <asm/barrier.h> dependency
2018-02-17 08:40:59 +01:00
NTB: Fix UB/bug in ntb_mw_get_align()
2018-01-28 22:17:24 -05:00
nubus: Add support for the driver model
2018-01-16 16:47:29 +01:00
nvme-pci: clean up SMBSZ bit definitions
2018-01-17 17:55:14 +01:00
DeviceTree updates for 4.16:
2018-02-01 10:57:45 -08:00
of: Use SPDX license tag for DT files
2018-01-08 08:22:45 -06:00
of/fdt: use memblock_virt_alloc for early alloc
2018-01-08 08:24:34 -06:00
DeviceTree updates for 4.16:
2018-02-01 10:57:45 -08:00
of: Use SPDX license tag for DT files
2018-01-08 08:22:45 -06:00
iommu: Clean up of_iommu_init_fn
2018-01-17 15:25:50 +01:00
PCI: Move of_irq_parse_and_map_pci() declaration under OF_IRQ
2018-03-05 18:03:20 -06:00
of: Use SPDX license tag for DT files
2018-01-08 08:22:45 -06:00
of: Use SPDX license tag for DT files
2018-01-08 08:22:45 -06:00
mtd: onenand: omap2: Configure driver from DT
2018-01-12 16:41:15 +01:00
mm: remove PG_highmem description
2018-01-31 17:18:40 -08:00
mm: get 7% more pages in a pagevec
2018-01-31 17:18:37 -08:00
PCI: Remove NULL device handling from PCI DMA API
2018-01-17 18:05:51 -06:00
PCI: Add SPDX GPL-2.0 to replace GPL v2 boilerplate
2018-01-28 15:48:29 -06:00
PCI: Add SPDX GPL-2.0 to replace GPL v2 boilerplate
2018-01-28 15:48:29 -06:00
Merge branch 'pci/spdx' into next
2018-02-01 11:40:07 -06:00
PCI: Add SPDX GPL-2.0 to replace GPL v2 boilerplate
2018-01-28 15:48:29 -06:00
pci-v4.16-changes
2018-02-06 09:59:40 -08:00
PCI: Add SPDX GPL-2.0+ to replace GPL v2 or later boilerplate
2018-01-28 15:49:06 -06:00
wireless-drivers-next patches for 4.16
2018-02-08 15:32:25 -05:00
percpu_ref: Update doc to dissuade users from depending on internal RCU grace periods
2018-03-19 10:09:44 -07:00
mm, dax: introduce pfn_t_special()
2018-01-19 16:50:53 -08:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
pipe: reject F_SETPIPE_SZ with size over UINT_MAX
2018-02-06 18:32:47 -08:00
PM / wakeup: Add device_set_wakeup_path() helper to control wakeup path
2018-01-09 13:09:17 +01:00
unify {de,}mangle_poll(), get rid of kernel-side POLL...
2018-02-11 14:37:22 -08:00
device property: Constify device_get_match_data()
2018-02-12 10:41:11 +01:00
firmware/psci: Expose SMCCC version through psci_ops
2018-02-06 22:54:11 +00:00
net: ptp: Add stub for ptp_classify_raw()
2018-02-14 14:33:36 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-02-19 18:46:11 -05:00
idr: Remove idr_alloc_ext
2018-02-06 16:41:28 -05:00
Char/Misc driver patches for 4.16-rc1
2018-02-01 10:31:17 -08:00
remoteproc: Drop dangling find_rsc_table dummies
2018-01-15 09:30:00 -08:00
rhashtable: Fix rhlist duplicates insertion
2018-03-07 10:44:02 -05:00
net: Add rtnl_lock_killable()
2018-03-16 12:31:19 -04:00
- New Drivers
2018-01-29 10:59:24 -08:00
lib/scatterlist: add sg_init_marker() helper
2018-03-30 22:50:15 +02:00
Merge branch 'akpm' (patches from Andrew)
2018-02-06 22:15:42 -08:00
vfs: do bulk POLL* -> EPOLL* replacement
2018-02-11 14:34:03 -08:00
locking/semaphore: Update the file path in documentation
2018-02-13 15:00:06 +01:00
seq_file: Introduce DEFINE_SHOW_ATTRIBUTE() helper macro
2018-02-07 12:50:21 +02:00
TTY/Staging driver updates for 4.16-rc1
2018-02-01 09:46:00 -08:00
More ACPI updates for v4.16-rc1
2018-02-09 09:44:25 -08:00
phylink,sfp: negotiate interface format with MAC
2018-02-28 11:07:11 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-01-09 10:37:00 -05:00
shmem: rename functions that are memfd-related
2018-01-31 17:18:39 -08:00
signal: Remove unnecessary ifdefs now that there is only one struct siginfo
2018-01-12 14:34:49 -06:00
skb_array: use __ptr_ring_empty
2018-01-29 12:02:54 -05:00
Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net
2018-03-23 11:31:58 -04:00
usercopy: Allow strict enforcement of whitelists
2018-01-15 12:07:48 -08:00
usercopy: Prepare for usercopy whitelisting
2018-01-15 12:07:47 -08:00
usercopy: Prepare for usercopy whitelisting
2018-01-15 12:07:47 -08:00
net: do_tcp_sendpages flag to avoid SKBTX_SHARED_FRAG
2018-03-19 21:14:38 +01:00
sound: Remove unused register_sound_midi() and co
2018-01-11 17:05:23 +01:00
lockdep: Convert some users to const
2018-01-18 11:56:49 +01:00
stddef.h: Introduce sizeof_field()
2018-01-15 12:07:46 -08:00
Merge branch 'work.misc' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs
2018-01-31 09:25:20 -08:00
x86: hibernate: fix swsusp_arch_resume() prototype
2018-02-07 12:18:23 +01:00
mm, mlock, vmscan: no more skipping pagevecs
2018-02-21 15:35:42 -08:00
mm, page_vma_mapped: Drop faulty pointer arithmetics in check_pte()
2018-01-21 17:44:47 -08:00
swiotlb: add common swiotlb_map_ops
2018-01-15 09:35:45 +01:00
pci-v4.16-changes
2018-02-06 09:59:40 -08:00
locking: Introduce sync_core_before_usermode()
2018-02-05 21:34:50 +01:00
pipe, sysctl: remove pipe_proc_fn()
2018-02-06 18:32:47 -08:00
sysfs.h: Use octal permissions
2018-01-09 16:27:43 +01:00
bpf: Adds field bpf_sock_ops_cb_flags to tcp_sock
2018-01-25 16:41:14 -08:00
This pull request updates the previous tee-drv-dynamic-shm-for-v4.16 pull
2018-01-11 18:05:06 -08:00
tpm: Keep CLKRUN enabled throughout the duration of transmit_cmd()
2018-01-08 12:58:38 +02:00
tpm: add event log format version
2018-01-08 12:58:34 +02:00
bpf: introduce BPF_RAW_TRACEPOINT
2018-03-28 22:55:19 +02:00
bpf: introduce BPF_RAW_TRACEPOINT
2018-03-28 22:55:19 +02:00
tty: make n_tty_read() always abort if hangup is in progress
2018-02-28 13:21:10 +01:00
net: usbnet: fix potential deadlock on 32bit hosts
2018-03-07 11:46:39 -05:00
usercopy: WARN() on slab cache usercopy region violations
2018-01-15 12:07:48 -08:00
uuid: cleanup <uapi/linux/uuid.h>
2018-02-06 18:32:44 -08:00
Revert "module: Add retpoline tag to VERMAGIC"
2018-01-24 09:00:05 -08:00
mm: remove unused pgdat_reclaimable_pages()
2018-01-31 17:18:37 -08:00
workqueue: remove unused cancel_work()
2018-03-13 13:37:42 -07:00
zswap: only save zswap header when necessary
2018-01-31 17:18:39 -08:00
