Daniel Borkmann ff2b3f77ec bpf: Fix mask direction swap upon off reg sign change ... commit bb01a1bba579b4b1c5566af24d95f1767859771e upstream. Masking direction as indicated via mask_to_left is considered to be calculated once and then used to derive pointer limits. Thus, this needs to be placed into bpf_sanitize_info instead so we can pass it to sanitize_ptr_alu() call after the pointer move. Piotr noticed a corner case where the off reg causes masking direction change which then results in an incorrect final aux->alu_limit. Fixes: 7fedb63a8307 ("bpf: Tighten speculative pointer arithmetic mask") Reported-by: Piotr Krysiuk <piotras@gmail.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Reviewed-by: Piotr Krysiuk <piotras@gmail.com> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2022-07-21 11:32:29 +08:00
..
Makefile	bpf: Don't rely on GCC __attribute__((optimize)) to disable GCSE	2021-03-16 16:40:48 +08:00
arraymap.c	bpf: Fix bug in mmap() implementation for BPF array map	2021-03-16 16:43:59 +08:00
bpf_lru_list.c	bpf_lru_list: Read double-checked variable once without lock	2021-04-12 12:52:15 +08:00
bpf_lru_list.h	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
btf.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
cgroup.c	bpf: Allow bpf_get_netns_cookie in BPF_PROG_TYPE_CGROUP_SOCKOPT	2022-03-02 10:48:06 +08:00
core.c	merge bpf_jiffies64 api from 5576b991e9c1a11d2cc21c4b94fc75ec27603896	2021-03-16 16:43:59 +08:00
cpumap.c	cpumap: Avoid warning when CONFIG_DEBUG_PER_CPU_MAPS is enabled	2021-03-16 16:27:10 +08:00
devmap.c	devmap: Use bpf_map_area_alloc() for allocating hash buckets	2021-03-16 16:30:57 +08:00
disasm.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
disasm.h	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
hashtab.c	bpf: Zero-fill re-used per-cpu map element	2021-03-16 16:40:49 +08:00
helpers.c	bpf: Fix helper bpf_map_peek_elem_proto pointing to wrong callback	2021-03-16 16:44:00 +08:00
inode.c	bpf: Convert bpf_prog refcnt to atomic64_t	2021-03-16 16:43:58 +08:00
local_storage.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
lpm_trie.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
map_in_map.c	bpf: Switch bpf_map ref counter to atomic64_t so bpf_map_inc() never fails	2021-03-16 16:43:58 +08:00
map_in_map.h	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
offload.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
percpu_freelist.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
percpu_freelist.h	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
queue_stack_maps.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
reuseport_array.c	bpf, net: Rework cookie generator as per-cpu one	2022-03-02 10:48:06 +08:00
stackmap.c	bpf: Check for integer overflow when using roundup_pow_of_two()	2021-04-12 12:52:03 +08:00
syscall.c	bpf: fix double free for btf in map_create()	2021-11-30 10:38:54 +08:00
sysfs_btf.c	bpf: Fix sysfs export of empty BTF section	2021-03-16 16:37:55 +08:00
tnum.c	Init Repo base on linux 5.4.32 long term, and add base tlinux kernel interfaces.	2021-03-16 11:01:34 +08:00
verifier.c	bpf: Fix mask direction swap upon off reg sign change	2022-07-21 11:32:29 +08:00
xskmap.c	bpf: Switch bpf_map ref counter to atomic64_t so bpf_map_inc() never fails	2021-03-16 16:43:58 +08:00