Tiezhu Yang 30419a0aa1 LoongArch: BPF: Fix off-by-one error for insn_is_cast_user() ... In the LoongArch BPF JIT code, the branch offset represents the number of instructions. An offset of 1 means the target of the "beq" is the current PC plus 1 instruction (PC + 4 bytes). This matches the exact same path as the sequential non-branch execution, the "or" instruction is always executed for the cast_user JIT arm in build_insn(). If the pointer is not NULL, there is no side effect. But if the pointer is NULL, it is incorrectly combined with the base address and turns into a non-zero address, meaning a zero arena offset no longer casts to NULL. Fix this by changing the branch offset from 1 to 2, which properly skips the "or" instruction and jumps directly to the "move_reg" instruction if the pointer is NULL, ensuring the destination register is safely cleared to 0. Cc: stable@vger.kernel.org Fixes: 4fdb5dd8ae ("LoongArch: BPF: Implement bpf_addr_space_cast instruction") Signed-off-by: Tiezhu Yang <yangtiezhu@loongson.cn> Signed-off-by: Huacai Chen <chenhuacai@loongson.cn>		2026-09-04 21:44:43 +08:00
..
bpf_jit.c	LoongArch: BPF: Fix off-by-one error for insn_is_cast_user()	2026-09-04 21:44:43 +08:00
bpf_jit.h	LoongArch: BPF: Remove redundant zext jumping in move_imm()	2026-08-17 22:07:24 +08:00
bpf_timed_may_goto.S	LoongArch: BPF: Add timed may_goto implementation	2026-08-17 22:07:40 +08:00
Makefile	LoongArch: BPF: Add timed may_goto implementation	2026-08-17 22:07:40 +08:00