Shung-Hsi Yu 345652866a bpf: fix overflow check in adjust_jmp_off() ...

[ Upstream commit 4a04b4f0de ]

adjust_jmp_off() incorrectly used the insn->imm field for all overflow check,
which is incorrect as that should only be done or the BPF_JMP32 | BPF_JA case,
not the general jump instruction case. Fix it by using insn->off for overflow
check in the general case.

Fixes: 5337ac4c9b ("bpf: Fix the corner case with may_goto and jump to the 1st insn.")
Signed-off-by: Shung-Hsi Yu <shung-hsi.yu@suse.com>
Link: https://lore.kernel.org/r/20240712080127.136608-2-shung-hsi.yu@suse.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-08-03 08:59:46 +02:00

..

preload

…

arena.c

bpf: Fix remap of arena.

2024-06-18 17:19:46 +02:00

arraymap.c

bpf: Do not walk twice the map on free

2024-04-30 16:28:33 +02:00

bloom_filter.c

…

bpf_cgrp_storage.c

…

bpf_inode_storage.c

…

bpf_iter.c

…

bpf_local_storage.c

bpf: fix order of args in call to bpf_map_kvcalloc

2024-07-10 15:31:19 -07:00

bpf_lru_list.c

…

bpf_lru_list.h

…

bpf_lsm.c

…

bpf_struct_ops.c

…

bpf_task_storage.c

…

btf.c

bpf: Eliminate remaining "make W=1" warnings in kernel/bpf/btf.o

2024-08-03 08:59:46 +02:00

cgroup_iter.c

…

cgroup.c

…

core.c

kallsyms: rework symbol lookup return codes

2024-06-27 17:43:40 +02:00

cpumap.c

…

cpumask.c

…

crypto.c

…

devmap.c

bpf, devmap: Remove unnecessary if check in for loop

2024-06-03 17:09:23 +02:00

disasm.c

…

disasm.h

…

dispatcher.c

…

hashtab.c

bpf: Do not walk twice the hash map on free

2024-04-30 16:28:46 +02:00

helpers.c

bpf: helpers: fix bpf_wq_set_callback_impl signature

2024-08-03 08:59:44 +02:00

inode.c

…

Kconfig

bpf: remove CONFIG_BPF_JIT dependency on CONFIG_MODULES of

2024-05-14 00:36:29 -07:00

link_iter.c

…

local_storage.c

…

log.c

…

lpm_trie.c

…

Makefile

bpf: crypto: fix build when CONFIG_CRYPTO=m

2024-05-01 13:32:26 -07:00

map_in_map.c

bpf: save extended inner map info for percpu array maps as well

2024-05-15 09:34:54 -07:00

map_in_map.h

…

map_iter.c

…

memalloc.c

…

mmap_unlock_work.h

…

mprog.c

…

net_namespace.c

…

offload.c

…

percpu_freelist.c

…

percpu_freelist.h

…

prog_iter.c

…

queue_stack_maps.c

…

reuseport_array.c

…

ringbuf.c

bpf: Fix overrunning reservations in ringbuf

2024-06-21 13:04:21 -07:00

stackmap.c

…

syscall.c

bpf: Fix a potential use-after-free in bpf_link_free()

2024-06-03 18:16:19 +02:00

sysfs_btf.c

…

task_iter.c

…

tcx.c

…

tnum.c

…

token.c

…

trampoline.c

Merge tag 'net-next-6.10' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next

2024-05-14 19:42:24 -07:00

verifier.c

bpf: fix overflow check in adjust_jmp_off()

2024-08-03 08:59:46 +02:00