lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-Id: <20191026224006.18149-1-daniel@iogearbox.net>
Date:   Sun, 27 Oct 2019 00:40:06 +0200
From:   Daniel Borkmann <daniel@...earbox.net>
To:     davem@...emloft.net
Cc:     jakub.kicinski@...ronome.com, daniel@...earbox.net, ast@...nel.org,
        netdev@...r.kernel.org, bpf@...r.kernel.org
Subject: pull-request: bpf 2019-10-27

Hi David,

The following pull-request contains BPF updates for your *net* tree.

We've added 7 non-merge commits during the last 11 day(s) which contain
a total of 7 files changed, 66 insertions(+), 16 deletions(-).

The main changes are:

1) Fix two use-after-free bugs in relation to RCU in jited symbol exposure to
   kallsyms, from Daniel Borkmann.

2) Fix NULL pointer dereference in AF_XDP rx-only sockets, from Magnus Karlsson.

3) Fix hang in netdev unregister for hash based devmap as well as another overflow
   bug on 32 bit archs in memlock cost calculation, from Toke Høiland-Jørgensen.

4) Fix wrong memory access in LWT BPF programs on reroute due to invalid dst.
   Also fix BPF selftests to use more compatible nc options, from Jiri Benc.

Please consider pulling these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git

Thanks a lot!

Also thanks to reporters, reviewers and testers of commits in this pull-request:

Jonathan Lemon, Kal Cutter Conley, Martin KaFai Lau, Peter Oskolkov, 
Tetsuo Handa, Yonghong Song

----------------------------------------------------------------

The following changes since commit 33902b4a4227877896dd9368ac10f4ca0d100de5:

  netdevsim: Fix error handling in nsim_fib_init and nsim_fib_exit (2019-10-13 11:30:14 -0700)

are available in the Git repository at:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git 

for you to fetch changes up to 2afd23f78f39da84937006ecd24aa664a4ab052b:

  xsk: Fix registration of Rx-only sockets (2019-10-23 20:22:11 -0700)

----------------------------------------------------------------
Daniel Borkmann (2):
      bpf: Fix use after free in subprog's jited symbol removal
      bpf: Fix use after free in bpf_get_prog_name

Jiri Benc (2):
      bpf: lwtunnel: Fix reroute supplying invalid dst
      selftests/bpf: More compatible nc options in test_tc_edt

Magnus Karlsson (1):
      xsk: Fix registration of Rx-only sockets

Toke Høiland-Jørgensen (2):
      xdp: Prevent overflow in devmap_hash cost calculation for 32-bit builds
      xdp: Handle device unregister for devmap_hash map type

 include/linux/filter.h                     |  1 -
 kernel/bpf/core.c                          |  2 +-
 kernel/bpf/devmap.c                        | 33 +++++++++++++++++++++++++++++-
 kernel/bpf/syscall.c                       | 31 ++++++++++++++++++----------
 net/core/lwt_bpf.c                         |  7 ++++++-
 net/xdp/xdp_umem.c                         |  6 ++++++
 tools/testing/selftests/bpf/test_tc_edt.sh |  2 +-
 7 files changed, 66 insertions(+), 16 deletions(-)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ