Xu Kuohai be006212bd bpf: Do not copy spin lock field from user in bpf_selem_alloc ... [ Upstream commit 836e49e103 ] bpf_selem_alloc function is used by inode_storage, sk_storage and task_storage maps to set map value, for these map types, there may be a spin lock in the map value, so if we use memcpy to copy the whole map value from user, the spin lock field may be initialized incorrectly. Since the spin lock field is zeroed by kzalloc, call copy_map_value instead of memcpy to skip copying the spin lock field to fix it. Fixes: 6ac99e8f23 ("bpf: Introduce bpf sk local storage") Signed-off-by: Xu Kuohai <xukuohai@huawei.com> Link: https://lore.kernel.org/r/20221114134720.1057939-2-xukuohai@huawei.com Signed-off-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Sasha Levin <sashal@kernel.org>		2022-12-08 11:23:55 +01:00
..
preload
arraymap.c	bpf: Acquire map uref in .init_seq_private for array map iterator	2022-08-25 11:37:55 +02:00
bpf_inode_storage.c
bpf_iter.c
bpf_local_storage.c	bpf: Do not copy spin lock field from user in bpf_selem_alloc	2022-12-08 11:23:55 +01:00
bpf_lru_list.c
bpf_lru_list.h
bpf_lsm.c
bpf_struct_ops_types.h
bpf_struct_ops.c	bpf: Handle return value of BPF_PROG_TYPE_STRUCT_OPS prog	2021-10-06 15:55:50 +02:00
btf.c	bpf: btf: fix truncated last_member_type_id in btf_struct_resolve	2022-10-26 13:25:20 +02:00
cgroup.c	bpf, cgroup: Fix kernel BUG in purge_effective_progs	2022-09-08 11:11:36 +02:00
core.c	bpf: Make sure mac_header was set before using it	2022-07-29 17:19:23 +02:00
cpumap.c
devmap.c	bpf: Fix integer overflow in argument calculation for bpf_map_area_alloc	2021-12-17 10:14:41 +01:00
disasm.c	bpf: Introduce BPF nospec instruction for mitigating Spectre v4	2021-08-04 12:46:44 +02:00
disasm.h
dispatcher.c
hashtab.c	bpf: Acquire map uref in .init_seq_private for hash map iterator	2022-08-25 11:37:55 +02:00
helpers.c	bpf: Fix potentially incorrect results with bpf_get_local_storage()	2021-09-03 10:09:31 +02:00
inode.c	bpf: link: Refuse non-O_RDWR flags in BPF_OBJ_GET	2021-04-14 08:42:00 +02:00
local_storage.c	bpf: Fix NULL pointer dereference in bpf_get_local_storage() helper	2021-09-03 10:09:21 +02:00
lpm_trie.c
Makefile
map_in_map.c
map_in_map.h
map_iter.c
net_namespace.c
offload.c
percpu_freelist.c	bpf: Initialize same number of free nodes for each pcpu_freelist	2022-11-25 17:45:45 +01:00
percpu_freelist.h
prog_iter.c
queue_stack_maps.c
reuseport_array.c
ringbuf.c	bpf: Use VM_MAP instead of VM_ALLOC for ringbuf	2022-02-08 18:30:39 +01:00
stackmap.c	bpf: Fix incorrect memory charge cost calculation in stack_map_alloc()	2022-06-22 14:13:12 +02:00
syscall.c	bpf: Ensure correct locking around vulnerable function find_vpid()	2022-10-26 13:25:21 +02:00
sysfs_btf.c
task_iter.c
tnum.c
trampoline.c	bpf: Fix potential array overflow in bpf_trampoline_get_progs()	2022-06-06 08:42:45 +02:00
verifier.c	bpf: Fix wrong reg type conversion in release_reference()	2022-11-16 09:57:09 +01:00