Kumar Kartikeya Dwivedi 3c58c83c6f bpf: Fix slot type check in check_stack_write_var_off ...

[ Upstream commit f5e477a861e4a20d8a1c5f7a245f3a3c3c376b03 ]

For the case where allow_ptr_leaks is false, code is checking whether
slot type is STACK_INVALID and STACK_SPILL and rejecting other cases.
This is a consequence of incorrectly checking for register type instead
of the slot type (NOT_INIT and SCALAR_VALUE respectively). Fix the
check.

Fixes: 01f810ace9 ("bpf: Allow variable-offset stack access")
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>
Link: https://lore.kernel.org/r/20221103191013.1236066-5-memxor@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-12-31 13:14:08 +01:00

..

preload

…

arraymap.c

bpf: Acquire map uref in .init_seq_private for array map iterator

2022-08-25 11:40:03 +02:00

bpf_inode_storage.c

…

bpf_iter.c

…

bpf_local_storage.c

bpf: Do not copy spin lock field from user in bpf_selem_alloc

2022-12-08 11:28:39 +01:00

bpf_lru_list.c

…

bpf_lru_list.h

…

bpf_lsm.c

…

bpf_struct_ops_types.h

…

bpf_struct_ops.c

…

bpf_task_storage.c

bpf: Use this_cpu_{inc|dec|inc_return} for bpf_task_storage_busy

2022-10-26 12:34:41 +02:00

btf.c

bpf: btf: fix truncated last_member_type_id in btf_struct_resolve

2022-10-26 12:34:42 +02:00

cgroup.c

bpf, cgroup: Fix kernel BUG in purge_effective_progs

2022-09-08 12:28:01 +02:00

core.c

bpf: Make sure mac_header was set before using it

2022-07-29 17:25:24 +02:00

cpumap.c

…

devmap.c

…

disasm.c

…

disasm.h

…

dispatcher.c

…

hashtab.c

bpf: Propagate error from htab_lock_bucket() to userspace

2022-10-26 12:34:40 +02:00

helpers.c

bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem.

2022-05-01 17:22:26 +02:00

inode.c

bpf: Fix mount source show for bpffs

2022-01-27 11:05:26 +01:00

Kconfig

…

local_storage.c

…

lpm_trie.c

…

Makefile

…

map_in_map.c

…

map_in_map.h

…

map_iter.c

bpf: Introduce MEM_RDONLY flag

2022-05-01 17:22:24 +02:00

net_namespace.c

…

offload.c

…

percpu_freelist.c

bpf: Initialize same number of free nodes for each pcpu_freelist

2022-11-26 09:24:38 +01:00

percpu_freelist.h

…

prog_iter.c

…

queue_stack_maps.c

…

reuseport_array.c

…

ringbuf.c

bpf: Add MEM_RDONLY for helper args that are pointers to rdonly mem.

2022-05-01 17:22:26 +02:00

stackmap.c

bpf: Fix excessive memory allocation in stack_map_alloc()

2022-06-06 08:43:42 +02:00

syscall.c

bpf: Ensure correct locking around vulnerable function find_vpid()

2022-10-26 12:34:44 +02:00

sysfs_btf.c

…

task_iter.c

…

tnum.c

…

trampoline.c

bpf: Fix potential array overflow in bpf_trampoline_get_progs()

2022-06-06 08:43:42 +02:00

verifier.c

bpf: Fix slot type check in check_stack_write_var_off

2022-12-31 13:14:08 +01:00