Daniel Borkmann 342332fb0b bpf: Don't promote bogus looking registers after null check. ... [ Upstream commit e60b0d12a95dcf16a63225cead4541567f5cb517 ] If we ever get to a point again where we convert a bogus looking <ptr>_or_null typed register containing a non-zero fixed or variable offset, then lets not reset these bounds to zero since they are not and also don't promote the register to a <ptr> type, but instead leave it as <ptr>_or_null. Converting to a unknown register could be an avenue as well, but then if we run into this case it would allow to leak a kernel pointer this way. Fixes: f1174f77b5 ("bpf/verifier: rework value tracking") Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-01-27 10:54:00 +01:00
..
preload
arraymap.c	bpf: Fix potential race in tail call compatibility check	2021-11-02 19:48:21 +01:00
bpf_inode_storage.c
bpf_iter.c
bpf_local_storage.c
bpf_lru_list.c
bpf_lru_list.h
bpf_lsm.c
bpf_struct_ops_types.h
bpf_struct_ops.c
btf.c	bpf: Disallow BPF_LOG_KERNEL log level for bpf(BPF_BTF_LOAD)	2022-01-27 10:53:54 +01:00
cgroup.c
core.c	bpf: Prevent increasing bpf_jit_limit above max	2021-11-18 14:03:42 +01:00
cpumap.c
devmap.c	bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc	2021-12-17 10:14:41 +01:00
disasm.c
disasm.h
dispatcher.c
hashtab.c
helpers.c
inode.c
local_storage.c
lpm_trie.c
Makefile
map_in_map.c
map_in_map.h
map_iter.c
net_namespace.c
offload.c
percpu_freelist.c
percpu_freelist.h
prog_iter.c
queue_stack_maps.c
reuseport_array.c
ringbuf.c
stackmap.c
syscall.c	bpf: Add kconfig knob for disabling unpriv bpf by default	2022-01-05 12:40:34 +01:00
sysfs_btf.c
task_iter.c
tnum.c
trampoline.c
verifier.c	bpf: Don't promote bogus looking registers after null check.	2022-01-27 10:54:00 +01:00