Daniel Borkmann d3bd7413e0 bpf: fix sanitation of alu op with pointer / scalar type from different paths ... While 979d63d50c ("bpf: prevent out of bounds speculation on pointer arithmetic") took care of rejecting alu op on pointer when e.g. pointer came from two different map values with different map properties such as value size, Jann reported that a case was not covered yet when a given alu op is used in both "ptr_reg += reg" and "numeric_reg += reg" from different branches where we would incorrectly try to sanitize based on the pointer's limit. Catch this corner case and reject the program instead. Fixes: 979d63d50c ("bpf: prevent out of bounds speculation on pointer arithmetic") Reported-by: Jann Horn <jannh@google.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org>		2019-01-05 21:32:38 -08:00
..
acpi	Merge branch 'x86-cleanups-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2018-12-26 17:03:51 -08:00
asm-generic	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
clocksource
crypto	crypto: skcipher - remove remnants of internal IV generators	2018-12-23 11:52:45 +08:00
drm
dt-bindings	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input	2019-01-02 18:56:59 -08:00
keys
kvm	KVM: arm/arm64: Remove arch timer workqueue	2018-12-19 17:47:07 +00:00
linux	bpf: fix sanitation of alu op with pointer / scalar type from different paths	2019-01-05 21:32:38 -08:00
math-emu
media	media fixes for v4.20-rc8	2018-12-25 13:11:30 -08:00
memory
misc
net	Remove 'type' argument from access_ok() function	2019-01-03 18:57:57 -08:00
pcmcia
ras
rdma	IB/core: uverbs copy to struct or zero helper	2018-12-20 15:18:18 -07:00
scsi	4.21 merge window pull request	2018-12-28 14:57:10 -08:00
soc	ARM: SoC driver updates	2018-12-31 17:32:35 -08:00
sound	ALSA: HD-Audio: SKL+: force HDaudio legacy or SKL+ driver selection	2018-12-19 18:07:23 +01:00
target
trace	NFS client updates for Linux 4.21	2019-01-02 16:35:23 -08:00
uapi	virtio, vhost: features, fixes, cleanups	2019-01-02 18:54:45 -08:00
video
xen	xen: Introduce shared buffer helpers for page directory...	2018-12-18 12:15:55 -05:00