Daniel Borkmann 44f8fc6499 bpf: restrict unknown scalars of mixed signed bounds for unprivileged ... [ commit 9d7eceede7 upstream ] For unknown scalars of mixed signed bounds, meaning their smin_value is negative and their smax_value is positive, we need to reject arithmetic with pointer to map value. For unprivileged the goal is to mask every map pointer arithmetic and this cannot reliably be done when it is unknown at verification time whether the scalar value is negative or positive. Given this is a corner case, the likelihood of breaking should be very small. Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: Sasha Levin <sashal@kernel.org>		2019-01-31 08:14:41 +01:00
..
arraymap.c	bpf: decouple btf from seq bpf fs dump and enable more maps	2018-08-13 00:52:45 +02:00
bpf_lru_list.c	bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4	2017-04-17 13:55:52 -04:00
bpf_lru_list.h	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
btf.c	bpf: btf: Fix end boundary calculation for type section	2018-09-12 22:00:23 +02:00
cgroup.c	bpf: introduce update_effective_progs()	2018-08-07 14:29:55 +02:00
core.c	bpf: enable access to ax register also from verifier rewrite	2019-01-31 08:14:40 +01:00
cpumap.c	bpf: fix redirect to map under tail calls	2018-08-17 15:56:23 -07:00
devmap.c	bpf: fix redirect to map under tail calls	2018-08-17 15:56:23 -07:00
disasm.c	bpf: Remove struct bpf_verifier_env argument from print_bpf_insn	2018-03-23 17:38:57 +01:00
disasm.h	bpf: Remove struct bpf_verifier_env argument from print_bpf_insn	2018-03-23 17:38:57 +01:00
hashtab.c	bpf: use per htab salt for bucket hash	2018-08-23 18:45:47 +02:00
helpers.c	bpf: introduce the bpf_get_local_storage() helper function	2018-08-03 00:47:32 +02:00
inode.c	bpf: decouple btf from seq bpf fs dump and enable more maps	2018-08-13 00:52:45 +02:00
local_storage.c	bpf: allocate local storage buffers using GFP_ATOMIC	2018-12-17 09:24:33 +01:00
lpm_trie.c	bpf: decouple btf from seq bpf fs dump and enable more maps	2018-08-13 00:52:45 +02:00
Makefile	bpf: Introduce BPF_MAP_TYPE_REUSEPORT_SOCKARRAY	2018-08-11 01:58:46 +02:00
map_in_map.c	bpf: don't allow create maps of cgroup local storages	2018-08-03 00:47:32 +02:00
map_in_map.h	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
offload.c	bpf: offload: allow program and map sharing per-ASIC	2018-07-18 15:10:34 +02:00
percpu_freelist.c	bpf: fix lockdep splat	2017-11-15 19:46:32 +09:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
reuseport_array.c	bpf: Introduce BPF_MAP_TYPE_REUSEPORT_SOCKARRAY	2018-08-11 01:58:46 +02:00
sockmap.c	bpf: sockmap, fix transition through disconnect without close	2018-09-22 02:46:41 +02:00
stackmap.c	bpf: decouple btf from seq bpf fs dump and enable more maps	2018-08-13 00:52:45 +02:00
syscall.c	bpf: fix bpf_prog_get_info_by_fd to return 0 func_lens for unpriv	2018-11-27 16:13:03 +01:00
tnum.c	bpf/verifier: improve register value range tracking with ARSH	2018-04-29 08:45:53 -07:00
verifier.c	bpf: restrict unknown scalars of mixed signed bounds for unprivileged	2019-01-31 08:14:41 +01:00
xskmap.c	xsk: do not call synchronize_net() under RCU read lock	2018-10-11 10:19:01 +02:00