Martin KaFai Lau 82e9697250 bpf: btf: Avoid WARN_ON when CONFIG_REFCOUNT_FULL=y ... If CONFIG_REFCOUNT_FULL=y, refcount_inc() WARN when refcount is 0. When creating a new btf, the initial btf->refcnt is 0 and triggered the following: [ 34.855452] refcount_t: increment on 0; use-after-free. [ 34.856252] WARNING: CPU: 6 PID: 1857 at lib/refcount.c:153 refcount_inc+0x26/0x30 .... [ 34.868809] Call Trace: [ 34.869168] btf_new_fd+0x1af6/0x24d0 [ 34.869645] ? btf_type_seq_show+0x200/0x200 [ 34.870212] ? lock_acquire+0x3b0/0x3b0 [ 34.870726] ? security_capable+0x54/0x90 [ 34.871247] __x64_sys_bpf+0x1b2/0x310 [ 34.871761] ? __ia32_sys_bpf+0x310/0x310 [ 34.872285] ? bad_area_access_error+0x310/0x310 [ 34.872894] do_syscall_64+0x95/0x3f0 This patch uses refcount_set() instead. Reported-by: Yonghong Song <yhs@fb.com> Tested-by: Yonghong Song <yhs@fb.com> Signed-off-by: Martin KaFai Lau <kafai@fb.com> Acked-by: Song Liu <songliubraving@fb.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>		2018-05-09 17:25:13 +02:00
..
arraymap.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2018-04-25 23:04:22 -04:00
bpf_lru_list.c	bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4	2017-04-17 13:55:52 -04:00
bpf_lru_list.h	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
btf.c	bpf: btf: Avoid WARN_ON when CONFIG_REFCOUNT_FULL=y	2018-05-09 17:25:13 +02:00
cgroup.c	bpf: Hooks for sys_bind	2018-03-31 02:15:18 +02:00
core.c	bpf: export bpf_event_output()	2018-05-04 23:41:03 +02:00
cpumap.c	xdp: transition into using xdp_frame for return API	2018-04-17 10:50:29 -04:00
devmap.c	bpf: add helper for copying attrs to struct bpf_map	2018-01-14 23:36:29 +01:00
disasm.c	bpf: Remove struct bpf_verifier_env argument from print_bpf_insn	2018-03-23 17:38:57 +01:00
disasm.h	bpf: Remove struct bpf_verifier_env argument from print_bpf_insn	2018-03-23 17:38:57 +01:00
hashtab.c	bpf: add helper for copying attrs to struct bpf_map	2018-01-14 23:36:29 +01:00
helpers.c	bpf: rename ARG_PTR_TO_STACK	2017-01-09 16:56:27 -05:00
inode.c	bpf: remove tracepoints from bpf core	2018-04-30 10:55:56 +02:00
lpm_trie.c	bpf: fix rcu lockdep warning for lpm_trie map_free callback	2018-02-22 21:29:12 +01:00
Makefile	bpf: introduce new bpf AF_XDP map type BPF_MAP_TYPE_XSKMAP	2018-05-03 15:55:24 -07:00
map_in_map.c	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
map_in_map.h	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
offload.c	bpf: offload: allow offloaded programs to use perf event arrays	2018-05-04 23:41:03 +02:00
percpu_freelist.c	bpf: fix lockdep splat	2017-11-15 19:46:32 +09:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
sockmap.c	bpf: sockmap, fix error handling in redirect failures	2018-05-02 15:30:45 -07:00
stackmap.c	bpf: add bpf_get_stack helper	2018-04-29 08:45:53 -07:00
syscall.c	nfp: bpf: record offload neutral maps in the driver	2018-05-04 23:41:03 +02:00
tnum.c	bpf/verifier: improve register value range tracking with ARSH	2018-04-29 08:45:53 -07:00
verifier.c	bpf: fix references to free_bpf_prog_info() in comments	2018-05-04 23:41:04 +02:00
xskmap.c	bpf, xskmap: fix crash in xsk_map_alloc error path handling	2018-05-04 14:55:54 -07:00