]> git.baikalelectronics.ru Git - kernel.git/commitdiff
selftests/bpf: Fix OOB write in test_verifier
authorKumar Kartikeya Dwivedi <memxor@gmail.com>
Tue, 14 Dec 2021 01:48:00 +0000 (07:18 +0530)
committerDaniel Borkmann <daniel@iogearbox.net>
Tue, 14 Dec 2021 14:28:15 +0000 (15:28 +0100)
The commit referenced below added fixup_map_timer support (to create a
BPF map containing timers), but failed to increase the size of the
map_fds array, leading to out of bounds write. Fix this by changing
MAX_NR_MAPS to 22.

Fixes: c937fba9060b ("selftests/bpf: Add tests for restricted helpers")
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/bpf/20211214014800.78762-1-memxor@gmail.com
tools/testing/selftests/bpf/test_verifier.c

index 465ef3f112c0c96446e48dbbfc3f73eac170bbeb..d3bf83d5c6cff2dafc48e6edfec57601c1efc689 100644 (file)
@@ -54,7 +54,7 @@
 #define MAX_INSNS      BPF_MAXINSNS
 #define MAX_TEST_INSNS 1000000
 #define MAX_FIXUPS     8
-#define MAX_NR_MAPS    21
+#define MAX_NR_MAPS    22
 #define MAX_TEST_RUNS  8
 #define POINTER_VALUE  0xcafe4all
 #define TEST_DATA_LEN  64