OSDN Git Service

bpf: fix missing error return in check_stack_boundary()
authorDaniel Borkmann <daniel@iogearbox.net>
Fri, 22 Dec 2017 15:23:08 +0000 (16:23 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 25 Dec 2017 13:26:32 +0000 (14:26 +0100)
commit2120fca0ecfb4552d27608d409ebd3403ce02ce4
tree60f786ba1a49e94fa1b88870a86f831a89030af9
parent6c8e098d0324412d4ae9e06c7e611a96b87faf80
bpf: fix missing error return in check_stack_boundary()

From: Jann Horn <jannh@google.com>

Prevent indirect stack accesses at non-constant addresses, which would
permit reading and corrupting spilled pointers.

Fixes: f1174f77b50c ("bpf/verifier: rework value tracking")
Signed-off-by: Jann Horn <jannh@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
kernel/bpf/verifier.c