diff options
author | Daniel Borkmann <daniel@iogearbox.net> | 2022-01-05 11:35:13 -0800 |
---|---|---|
committer | Alexei Starovoitov <ast@kernel.org> | 2022-01-05 12:00:19 -0800 |
commit | e60b0d12a95dcf16a63225cead4541567f5cb517 (patch) | |
tree | b5f8436c56edd7b551079b06936efb2de2b27f96 /tools | |
parent | 218d747a4142f281a256687bb513a135c905867b (diff) | |
download | linux-e60b0d12a95dcf16a63225cead4541567f5cb517.tar.bz2 |
bpf: Don't promote bogus looking registers after null check.
If we ever get to a point again where we convert a bogus looking <ptr>_or_null
typed register containing a non-zero fixed or variable offset, then lets not
reset these bounds to zero since they are not and also don't promote the register
to a <ptr> type, but instead leave it as <ptr>_or_null. Converting to a unknown
register could be an avenue as well, but then if we run into this case it would
allow to leak a kernel pointer this way.
Fixes: f1174f77b50c ("bpf/verifier: rework value tracking")
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'tools')
0 files changed, 0 insertions, 0 deletions