Alexei Starovoitov b1977682a3 bpf: improve verifier packet range checks ...

llvm can optimize the 'if (ptr > data_end)' checks to be in the order
slightly different than the original C code which will confuse verifier.
Like:
if (ptr + 16 > data_end)
  return TC_ACT_SHOT;
// may be followed by
if (ptr + 14 > data_end)
  return TC_ACT_SHOT;
while llvm can see that 'ptr' is valid for all 16 bytes,
the verifier could not.
Fix verifier logic to account for such case and add a test.

Reported-by: Huapeng Zhou <hzhou@fb.com>
Fixes: 969bf05eb3ce ("bpf: direct packet access")
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

2017-03-24 20:51:28 -07:00

..

arraymap.c

bpf: mark all registered map/prog types as __ro_after_init

2017-02-17 13:40:04 -05:00

bpf_lru_list.c

bpf: Make unnecessarily global functions static

2017-01-10 21:00:59 -05:00

bpf_lru_list.h

bpf: Add percpu LRU list

2016-11-15 11:50:20 -05:00

cgroup.c

bpf: introduce BPF_F_ALLOW_OVERRIDE flag

2017-02-12 21:52:19 -05:00

core.c

bpf: make jited programs visible in traces

2017-02-17 13:40:05 -05:00

hashtab.c

bpf: fix hashmap extra_elems logic

2017-03-22 14:12:18 -07:00

helpers.c

bpf: rename ARG_PTR_TO_STACK

2017-01-09 16:56:27 -05:00

inode.c

bpf: add initial bpf tracepoints

2017-01-25 13:17:47 -05:00

lpm_trie.c

bpf: add get_next_key callback to LPM map

2017-03-05 17:55:29 -08:00

Makefile

bpf: add a longest prefix match trie map implementation

2017-01-23 16:10:38 -05:00

percpu_freelist.c

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

percpu_freelist.h

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

stackmap.c

bpf: mark all registered map/prog types as __ro_after_init

2017-02-17 13:40:04 -05:00

syscall.c

sched/headers: Prepare for new header dependencies before moving code to <linux/sched/signal.h>

2017-03-02 08:42:29 +01:00

verifier.c

bpf: improve verifier packet range checks

2017-03-24 20:51:28 -07:00