Daniel Borkmann f37a8cb84c bpf: reject stores into ctx via st and xadd ...

Alexei found that verifier does not reject stores into context
via BPF_ST instead of BPF_STX. And while looking at it, we
also should not allow XADD variant of BPF_STX.

The context rewriter is only assuming either BPF_LDX_MEM- or
BPF_STX_MEM-type operations, thus reject anything other than
that so that assumptions in the rewriter properly hold. Add
test cases as well for BPF selftests.

Fixes: d691f9e8d440 ("bpf: allow programs to write to certain skb fields")
Reported-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

2018-01-16 15:04:58 -08:00

..

arraymap.c

bpf, array: fix overflow in max_entries and undefined behavior in index_mask

2018-01-10 14:46:39 -08:00

bpf_lru_list.c

bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4

2017-04-17 13:55:52 -04:00

bpf_lru_list.h

bpf: Only set node->ref = 1 if it has not been set

2017-09-01 09:57:39 -07:00

cgroup.c

bpf, cgroup: implement eBPF-based device controller for cgroup v2

2017-11-05 23:26:51 +09:00

core.c

bpf: fix divides by zero

2018-01-14 09:03:43 -08:00

cpumap.c

bpf: cpumap micro-optimization in cpu_map_enqueue

2017-11-02 16:13:14 +09:00

devmap.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2017-10-22 13:39:14 +01:00

disasm.c

bpf: move instruction printing into a separate file

2017-10-10 12:30:16 -07:00

disasm.h

bpf: move instruction printing into a separate file

2017-10-10 12:30:16 -07:00

hashtab.c

bpf: add schedule points to map alloc/free

2017-12-12 15:27:22 -08:00

helpers.c

bpf: rename ARG_PTR_TO_STACK

2017-01-09 16:56:27 -05:00

inode.c

fix "netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'"

2018-01-05 11:43:39 -05:00

lpm_trie.c

bpf: Add file mode configuration into bpf maps

2017-10-20 13:32:59 +01:00

Makefile

bpf: offload: add infrastructure for loading programs for a specific netdev

2017-11-05 22:26:18 +09:00

map_in_map.c

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

map_in_map.h

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

offload.c

bpf: offload: add a license header

2017-11-27 22:24:51 +01:00

percpu_freelist.c

bpf: fix lockdep splat

2017-11-15 19:46:32 +09:00

percpu_freelist.h

bpf: introduce percpu_freelist

2016-03-08 15:28:31 -05:00

sockmap.c

bpf: sockmap missing NULL psock check

2018-01-07 00:01:46 +01:00

stackmap.c

bpf: Add file mode configuration into bpf maps

2017-10-20 13:32:59 +01:00

syscall.c

fix "netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'"

2018-01-05 11:43:39 -05:00

tnum.c

bpf/verifier: track signed and unsigned min/max values

2017-08-08 17:51:34 -07:00

verifier.c

bpf: reject stores into ctx via st and xadd

2018-01-16 15:04:58 -08:00