netdev - Re: pull-request: bpf 2018-01-09

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date:   Wed, 10 Jan 2018 11:17:49 -0500 (EST)
From:   David Miller <davem@...emloft.net>
To:     daniel@...earbox.net
Cc:     ast@...nel.org, netdev@...r.kernel.org
Subject: Re: pull-request: bpf 2018-01-09

From: Daniel Borkmann <daniel@...earbox.net>
Date: Tue,  9 Jan 2018 23:03:21 +0100

> The following pull-request contains BPF updates for your *net* tree.
> 
> The main changes are:
> 
> 1) Prevent out-of-bounds speculation in BPF maps by masking the
>    index after bounds checks in order to fix spectre v1, and
>    add an option BPF_JIT_ALWAYS_ON into Kconfig that allows for
>    removing the BPF interpreter from the kernel in favor of
>    JIT-only mode to make spectre v2 harder, from Alexei.
> 
> 2) Remove false sharing of map refcount with max_entries which
>    was used in spectre v1, from Daniel.
> 
> 3) Add a missing NULL psock check in sockmap in order to fix
>    a race, from John.
> 
> 4) Fix test_align BPF selftest case since a recent change in
>    verifier rejects the bit-wise arithmetic on pointers
>    earlier but test_align update was missing, from Alexei.
> 
> Please consider pulling these changes from:
> 
>   git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git

Pulled, thanks Daniel.