netdev - pull-request: bpf 2018-03-21

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date:   Wed, 21 Mar 2018 02:50:20 +0100
From:   Daniel Borkmann <daniel@...earbox.net>
To:     davem@...emloft.net
Cc:     daniel@...earbox.net, ast@...nel.org, netdev@...r.kernel.org
Subject: pull-request: bpf 2018-03-21

Hi David,

The following pull-request contains BPF updates for your *net* tree.

The main changes are:

1) Follow-up fix to the fault injection framework to prevent jump
   optimization on the kprobe by installing a dummy post-handler,
   from Masami.

2) Drop bpf_perf_prog_read_value helper from tracepoint type programs
   which was mistakenly added there and would otherwise crash due to
   wrong input context, from Yonghong.

3) Fix a crash in BPF fs when compiled with clang. Code appears to
   be fine just that clang tries to overly aggressive optimize in
   non C conform ways, therefore fix the kernel's Makefile to
   generally prevent such issues, from Daniel.

4) Skip unnecessary capability checks in bpf syscall, which is otherwise
   triggering unnecessary security hooks on capability checking and
   causing false alarms on unprivileged processes trying to access
   CAP_SYS_ADMIN restricted infra, from Chenbo.

5) Fix the test_bpf.ko module when CONFIG_BPF_JIT_ALWAYS_ON is set
   with regards to a test case that is really just supposed to fail
   on x8_64 JIT but not others, from Thadeu.

Please consider pulling these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git

Thanks a lot!

----------------------------------------------------------------

The following changes since commit 9e5fb7207024e53700bdac23f53d1e44d530a7f6:

  Merge branch 'bnxt_en-Bug-fixes' (2018-03-12 10:58:28 -0400)

are available in the git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git 

for you to fetch changes up to 87e0d4f0f37fb0c8c4aeeac46fff5e957738df79:

  kbuild: disable clang's default use of -fmerge-all-constants (2018-03-20 17:43:15 -0700)

----------------------------------------------------------------
Chenbo Feng (1):
      bpf: skip unnecessary capability check

Daniel Borkmann (1):
      kbuild: disable clang's default use of -fmerge-all-constants

Masami Hiramatsu (1):
      error-injection: Fix to prohibit jump optimization

Thadeu Lima de Souza Cascardo (1):
      test_bpf: Fix testing with CONFIG_BPF_JIT_ALWAYS_ON=y on other arches

Yonghong Song (1):
      trace/bpf: remove helper bpf_perf_prog_read_value from tracepoint type programs

 Makefile                 |  9 +++++++
 kernel/bpf/syscall.c     |  2 +-
 kernel/fail_function.c   | 10 +++++++
 kernel/trace/bpf_trace.c | 68 ++++++++++++++++++++++++++++--------------------
 lib/test_bpf.c           |  2 +-
 5 files changed, 61 insertions(+), 30 deletions(-)