]> git.baikalelectronics.ru Git - kernel.git/commit
bpf: fix missing error return in check_stack_boundary()
authorJann Horn <jannh@google.com>
Tue, 19 Dec 2017 04:11:57 +0000 (20:11 -0800)
committerDaniel Borkmann <daniel@iogearbox.net>
Thu, 21 Dec 2017 01:15:41 +0000 (02:15 +0100)
commitad7d17a840b0cdd86003e41509d0a8902ffa465a
treeae74d60039bef82d303017c162822f4fa8ddbf02
parenta0e6193c2fadc5c3b2c92638b7e733e63934bdaa
bpf: fix missing error return in check_stack_boundary()

Prevent indirect stack accesses at non-constant addresses, which would
permit reading and corrupting spilled pointers.

Fixes: 8e11845d64e4 ("bpf/verifier: rework value tracking")
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
kernel/bpf/verifier.c