bpf: Compare iterator types during state pruning - #8649
bpf: Compare iterator types during state pruning#8649kernel-patches-daemon-bpf-rc[bot] wants to merge 2 commits into
Conversation
|
Upstream branch: 8c7f55d |
6ac2541 to
bbe1ae8
Compare
|
Upstream branch: 41c129f |
c33cd12 to
277dbaa
Compare
bbe1ae8 to
dd2acb0
Compare
|
Upstream branch: 2b1f9f6 |
277dbaa to
ab225b3
Compare
dd2acb0 to
75f1c0e
Compare
|
Upstream branch: e1d9b82 |
ab225b3 to
3058faa
Compare
75f1c0e to
f776207
Compare
|
Upstream branch: 51476f6 |
3058faa to
523703d
Compare
f776207 to
b882df0
Compare
|
Upstream branch: 8b365b3 |
523703d to
6acfd10
Compare
b882df0 to
818432c
Compare
|
Upstream branch: d114bb9 |
An iterator stack slot can be MEM_RCU or PTR_UNTRUSTED. These states must not be equal, or the verifier can prune an unsafe path. Compare the pointer type for STACK_ITER slots. Fixes: dfab99d ("bpf: teach the verifier to enforce css_iter and task_iter in RCU CS") Signed-off-by: Ning Ding <dingning04@gmail.com>
Add a path where RCU protection reaches zero and then starts again. The iterator is untrusted after this gap and must be rejected. Signed-off-by: Ning Ding <dingning04@gmail.com>
6acfd10 to
1adf422
Compare
Pull request for series with
subject: bpf: Compare iterator types during state pruning
version: 1
url: https://patchwork.kernel.org/project/netdevbpf/list/?series=1141840