Thadeu Lima de Souza Cascardo 4b81ccebae bpf, ringbuf: Deny reserve of buffers larger than ringbuf ... A BPF program might try to reserve a buffer larger than the ringbuf size. If the consumer pointer is way ahead of the producer, that would be successfully reserved, allowing the BPF program to read or write out of the ringbuf allocated area. Reported-by: Ryota Shiga (Flatt Security) Fixes: 457f44363a ("bpf: Implement BPF ring buffer and verifier support for it") Signed-off-by: Thadeu Lima de Souza Cascardo <cascardo@canonical.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Andrii Nakryiko <andrii@kernel.org> Acked-by: Alexei Starovoitov <ast@kernel.org>		2021-05-11 13:30:45 +02:00
..
preload	bpf: Fix umd memory leak in copy_process()	2021-03-19 22:23:19 +01:00
arraymap.c	bpf: Add batched ops support for percpu array	2021-04-28 01:17:45 +02:00
bpf_inode_storage.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-03-25 15:31:22 -07:00
bpf_iter.c	bpf: Add bpf_for_each_map_elem() helper	2021-02-26 13:23:52 -08:00
bpf_local_storage.c	bpf: Prevent deadlock from recursive bpf_task_storage_[get|delete]	2021-02-26 11:51:48 -08:00
bpf_lru_list.c	bpf_lru_list: Read double-checked variable once without lock	2021-02-10 15:54:26 -08:00
bpf_lru_list.h
bpf_lsm.c	Networking changes for 5.13.	2021-04-29 11:57:23 -07:00
bpf_struct_ops.c	bpf: Fix fexit trampoline.	2021-03-18 00:22:51 +01:00
bpf_struct_ops_types.h
bpf_task_storage.c	bpf: Make symbol 'bpf_task_storage_busy' static	2021-03-16 12:24:20 -07:00
btf.c	bpf: Forbid trampoline attach for functions with variable arguments	2021-05-07 01:28:28 +02:00
cgroup.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2021-02-16 13:14:06 -08:00
core.c	bpf: Remove unused parameter from ___bpf_prog_run	2021-04-03 01:38:52 +02:00
cpumap.c	bpf, cpumap: Bulk skb using netif_receive_skb_list	2021-04-27 17:13:49 +02:00
devmap.c	bpf, devmap: Move drop error path to devmap for XDP_REDIRECT	2021-03-18 16:38:51 +01:00
disasm.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2021-04-09 20:48:35 -07:00
disasm.h
dispatcher.c
hashtab.c	kernel/bpf/: Fix misspellings using codespell tool	2021-03-16 12:22:20 -07:00
helpers.c	bpf: Implement formatted output helpers with bstr_printf	2021-04-27 15:56:31 -07:00
inode.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next	2021-04-25 18:02:32 -07:00
local_storage.c	bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper	2021-03-25 18:31:36 -07:00
lpm_trie.c	bpf: Add support for batched ops in LPM trie maps	2021-03-25 18:51:08 -07:00
Makefile	bpf: Enable task local storage for tracing programs	2021-02-26 11:51:47 -08:00
map_in_map.c
map_in_map.h
map_iter.c
net_namespace.c
offload.c
percpu_freelist.c
percpu_freelist.h
prog_iter.c
queue_stack_maps.c
reuseport_array.c
ringbuf.c	bpf, ringbuf: Deny reserve of buffers larger than ringbuf	2021-05-11 13:30:45 +02:00
stackmap.c	bpf: Refcount task stack in bpf_get_task_stack	2021-04-01 13:58:07 -07:00
syscall.c	bpf: Allow trampoline re-attach for tracing and lsm programs	2021-04-25 21:09:01 -07:00
sysfs_btf.c
task_iter.c	bpf: Introduce task_vma bpf_iter	2021-02-12 12:56:53 -08:00
tnum.c
trampoline.c	bpf: Allow trampoline re-attach for tracing and lsm programs	2021-04-25 21:09:01 -07:00
verifier.c	bpf: Fix alu32 const subreg bound tracking on bitwise operations	2021-05-11 08:55:53 +02:00