Alexei Starovoitov 687f07156b bpf: fix out of bounds access in verifier log ... when the verifier log is enabled the print_bpf_insn() is doing bpf_alu_string[BPF_OP(insn->code) >> 4] and bpf_jmp_string[BPF_OP(insn->code) >> 4] where BPF_OP is a 4-bit instruction opcode. Malformed insns can cause out of bounds access. Fix it by sizing arrays appropriately. The bug was found by clang address sanitizer with libfuzzer. Reported-by: Yonghong Song <yhs@plumgrid.com> Signed-off-by: Alexei Starovoitov <ast@plumgrid.com> Acked-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-09-09 14:11:55 -07:00
..
arraymap.c
core.c
hashtab.c
helpers.c
Makefile
syscall.c
verifier.c	bpf: fix out of bounds access in verifier log	2015-09-09 14:11:55 -07:00