Repository files (latest commit first)

Filename	Latest commit message	Latest commit date
Stanislav Fomichev 89357aa97b bpf: Prevent decl_tag from being referenced in func_proto arg ... [ Upstream commit f17472d4599697d701aa239b4c475a506bccfd19 ] Syzkaller managed to hit another decl_tag issue: btf_func_proto_check kernel/bpf/btf.c:4506 [inline] btf_check_all_types kernel/bpf/btf.c:4734 [inline] btf_parse_type_sec+0x1175/0x1980 kernel/bpf/btf.c:4763 btf_parse kernel/bpf/btf.c:5042 [inline] btf_new_fd+0x65a/0xb00 kernel/bpf/btf.c:6709 bpf_btf_load+0x6f/0x90 kernel/bpf/syscall.c:4342 __sys_bpf+0x50a/0x6c0 kernel/bpf/syscall.c:5034 __do_sys_bpf kernel/bpf/syscall.c:5093 [inline] __se_sys_bpf kernel/bpf/syscall.c:5091 [inline] __x64_sys_bpf+0x7c/0x90 kernel/bpf/syscall.c:5091 do_syscall_64+0x54/0x70 arch/x86/entry/common.c:48 This seems similar to commit ea68376c8bed ("bpf: prevent decl_tag from being referenced in func_proto") but for the argument. Reported-by: syzbot+8dd0551dda6020944c5d@syzkaller.appspotmail.com Signed-off-by: Stanislav Fomichev <sdf@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Yonghong Song <yhs@fb.com> Link: https://lore.kernel.org/bpf/20221123035422.872531-2-sdf@google.com Signed-off-by: Sasha Levin <sashal@kernel.org>		2023-01-18 11:41:37 +01:00
..
arraymap.c
bpf_lru_list.c	bpf_lru_list: Read double-checked variable once without lock	2021-03-04 10:26:16 +01:00
bpf_lru_list.h
btf.c	bpf: Prevent decl_tag from being referenced in func_proto arg	2023-01-18 11:41:37 +01:00
cgroup.c	bpf, cgroup: Fix problematic bounds check	2021-02-10 09:25:27 +01:00
core.c	bpf: Make sure mac_header was set before using it	2022-07-29 17:14:16 +02:00
cpumap.c
devmap.c	bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc	2021-12-17 10:12:24 +01:00
disasm.c	bpf: Introduce BPF nospec instruction for mitigating Spectre v4	2021-09-15 09:47:38 +02:00
disasm.h
hashtab.c	bpf: Zero-fill re-used per-cpu map element	2020-11-18 19:20:26 +01:00
helpers.c	bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback	2021-01-23 15:57:56 +01:00
inode.c
local_storage.c
lpm_trie.c
Makefile	bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE	2020-11-18 19:20:26 +01:00
map_in_map.c
map_in_map.h
offload.c
percpu_freelist.c
percpu_freelist.h
queue_stack_maps.c
reuseport_array.c
stackmap.c	bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()	2022-06-22 14:11:02 +02:00
syscall.c	bpf: Ensure correct locking around vulnerable function find_vpid()	2022-10-26 13:22:24 +02:00
sysfs_btf.c
tnum.c
verifier.c	bpf: propagate precision in ALU/ALU64 operations	2023-01-18 11:41:02 +01:00
xskmap.c