netdev - Re: [PATCH bpf-next 0/5] Fix bugs and issues found by static analysis in libbpf

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <34069e64-e39c-f095-ad94-9f67f88e0c64@iogearbox.net>
Date:   Thu, 7 Nov 2019 17:35:59 +0100
From:   Daniel Borkmann <daniel@...earbox.net>
To:     Andrii Nakryiko <andriin@...com>, bpf@...r.kernel.org,
        netdev@...r.kernel.org, ast@...com
Cc:     andrii.nakryiko@...il.com, kernel-team@...com
Subject: Re: [PATCH bpf-next 0/5] Fix bugs and issues found by static analysis
 in libbpf

On 11/7/19 3:08 AM, Andrii Nakryiko wrote:
> Github's mirror of libbpf got LGTM and Coverity statis analysis running
> against it and spotted few real bugs and few potential issues. This patch
> series fixes found issues.
> 
> Andrii Nakryiko (5):
>    libbpf: fix memory leak/double free issue
>    libbpf: fix potential overflow issue
>    libbpf: fix another potential overflow issue in bpf_prog_linfo
>    libbpf: make btf__resolve_size logic always check size error condition
>    libbpf: improve handling of corrupted ELF during map initialization
> 
>   tools/lib/bpf/bpf.c            |  2 +-
>   tools/lib/bpf/bpf_prog_linfo.c | 14 +++++++-------
>   tools/lib/bpf/btf.c            |  3 +--
>   tools/lib/bpf/libbpf.c         |  6 +++---
>   4 files changed, 12 insertions(+), 13 deletions(-)
> 

All look good, applied, thanks!