Alexei Starovoitov bc35488686 bpf/verifier: disallow pointer subtraction ...

commit dd066823db upstream.

Subtraction of pointers was accidentally allowed for unpriv programs
by commit 82abbf8d2f. Revert that part of commit.

Fixes: 82abbf8d2f ("bpf: do not allow root to mangle valid pointers")
Reported-by: Jann Horn <jannh@google.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-09-29 02:55:57 -07:00

..

arraymap.c

bpf: btf: Use exact btf value_size match in map_check_btf()

2018-07-27 03:45:49 +02:00

bpf_lru_list.c

bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4

2017-04-17 13:55:52 -04:00

bpf_lru_list.h

bpf: Only set node->ref = 1 if it has not been set

2017-09-01 09:57:39 -07:00

btf.c

bpf: btf: Ensure the member->offset is in the right order

2018-07-24 01:20:44 +02:00

cgroup.c

bpf: fix rcu annotations in compute_effective_progs()

2018-09-26 08:39:36 +02:00

core.c

bpf: undo prog rejection on read-only lock failure

2018-06-29 10:47:35 -07:00

cpumap.c

xdp: fix bug in cpumap teardown code path

2018-08-09 21:50:44 +02:00

devmap.c

xdp: fix bug in devmap teardown code path

2018-08-09 21:50:44 +02:00

disasm.c

bpf: Remove struct bpf_verifier_env argument from print_bpf_insn

2018-03-23 17:38:57 +01:00

disasm.h

bpf: Remove struct bpf_verifier_env argument from print_bpf_insn

2018-03-23 17:38:57 +01:00

hashtab.c

bpf: hash map: decrement counter on error

2018-07-03 23:26:28 +02:00

helpers.c

bpf: implement bpf_get_current_cgroup_id() helper

2018-06-03 18:22:41 -07:00

inode.c

bpf: fix bpffs non-array map seq_show issue

2018-09-15 09:46:51 +02:00

lpm_trie.c

treewide: kmalloc() -> kmalloc_array()

2018-06-12 16:19:22 -07:00

Makefile

bpf: introduce new bpf AF_XDP map type BPF_MAP_TYPE_XSKMAP

2018-05-03 15:55:24 -07:00

map_in_map.c

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

map_in_map.h

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

offload.c

bpf: offload: allow offloaded programs to use perf event arrays

2018-05-04 23:41:03 +02:00

percpu_freelist.c

bpf: fix lockdep splat

2017-11-15 19:46:32 +09:00

percpu_freelist.h

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

sockmap.c

bpf, sockmap: fix leakage of smap_psock_map_entry

2018-09-15 09:46:48 +02:00

stackmap.c

bpf: avoid -Wmaybe-uninitialized warning

2018-05-28 17:40:59 +02:00

syscall.c

bpf: sockhash, disallow bpf_tcp_close and update in parallel

2018-07-07 15:19:30 -07:00

tnum.c

bpf/verifier: improve register value range tracking with ARSH

2018-04-29 08:45:53 -07:00

verifier.c

bpf/verifier: disallow pointer subtraction

2018-09-29 02:55:57 -07:00

xskmap.c

xsk: clean up SPDX headers

2018-05-18 16:07:02 +02:00