Daniel Borkmann d3bd7413e0 bpf: fix sanitation of alu op with pointer / scalar type from different paths ... While 979d63d50c ("bpf: prevent out of bounds speculation on pointer arithmetic") took care of rejecting alu op on pointer when e.g. pointer came from two different map values with different map properties such as value size, Jann reported that a case was not covered yet when a given alu op is used in both "ptr_reg += reg" and "numeric_reg += reg" from different branches where we would incorrectly try to sanitize based on the pointer's limit. Catch this corner case and reject the program instead. Fixes: 979d63d50c ("bpf: prevent out of bounds speculation on pointer arithmetic") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org>		2019-01-05 21:32:38 -08:00
..
acpi	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
asm-generic	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
clocksource	…
crypto	…
drm	…
dt-bindings	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2019-01-02 18:56:59 -08:00
keys	…
kvm	…
linux	bpf: fix sanitation of alu op with pointer / scalar type from different paths	2019-01-05 21:32:38 -08:00
math-emu	…
media	…
memory	…
misc	…
net	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
pcmcia	…
ras	…
rdma	…
scsi	4.21 merge window pull request	2018-12-28 14:57:10 -08:00
soc	ARM: SoC driver updates	2018-12-31 17:32:35 -08:00
sound	…
target	…
trace	NFS client updates for Linux 4.21	2019-01-02 16:35:23 -08:00
uapi	virtio, vhost: features, fixes, cleanups	2019-01-02 18:54:45 -08:00
video	…
xen	…