Daniel Borkmann faa74a862a bpf: reject stores into ctx via st and xadd ... [ upstream commit f37a8cb84cce18762e8f86a70bd6a49a66ab964c ] Alexei found that verifier does not reject stores into context via BPF_ST instead of BPF_STX. And while looking at it, we also should not allow XADD variant of BPF_STX. The context rewriter is only assuming either BPF_LDX_MEM- or BPF_STX_MEM-type operations, thus reject anything other than that so that assumptions in the rewriter properly hold. Add test cases as well for BPF selftests. Fixes: d691f9e8d4 ("bpf: allow programs to write to certain skb fields") Reported-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2018-02-03 17:04:25 +01:00
..
arraymap.c	bpf, array: fix overflow in max_entries and undefined behavior in index_mask	2018-01-17 09:35:31 +01:00
core.c	bpf: fix divides by zero	2018-02-03 17:04:24 +01:00
hashtab.c	bpf: fix allocation warnings in bpf maps and integer overflow	2015-12-02 23:36:00 -05:00
helpers.c	bpf: avoid copying junk bytes in bpf_get_current_comm()	2016-04-20 15:42:01 +09:00
inode.c	bpf, inode: disallow userns mounts	2016-06-24 10:18:17 -07:00
Makefile	bpf: add support for persistent maps/progs	2015-11-02 22:48:39 -05:00
syscall.c	bpf: move fixup_bpf_calls() function	2018-01-17 09:35:30 +01:00
verifier.c	bpf: reject stores into ctx via st and xadd	2018-02-03 17:04:25 +01:00