lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Sat, 16 Apr 2022 18:57:58 +0800 From: Liu Jian <liujian56@...wei.com> To: <ast@...nel.org>, <daniel@...earbox.net>, <andrii@...nel.org>, <kafai@...com>, <songliubraving@...com>, <yhs@...com>, <john.fastabend@...il.com>, <kpsingh@...nel.org>, <davem@...emloft.net>, <kuba@...nel.org>, <sdf@...gle.com>, <netdev@...r.kernel.org>, <bpf@...r.kernel.org>, <pabeni@...hat.com> CC: <liujian56@...wei.com> Subject: [PATCH bpf-next v4 0/3] Enlarge offset check value in bpf_skb_load_bytes The data length of skb frags + frag_list may be greater than 0xffff, and skb_header_pointer can not handle negative offset. So here INT_MAX is used to check the validity of offset. And add the test case for the change. Liu Jian (3): net: Enlarge offset check value from 0xffff to INT_MAX in bpf_skb_load_bytes net: change skb_ensure_writable()'s write_len param to unsigned int type selftests: bpf: add test for skb_load_bytes include/linux/skbuff.h | 2 +- net/core/filter.c | 4 +- net/core/skbuff.c | 2 +- .../selftests/bpf/prog_tests/skb_load_bytes.c | 45 +++++++++++++++++++ .../selftests/bpf/progs/skb_load_bytes.c | 19 ++++++++ 5 files changed, 68 insertions(+), 4 deletions(-) create mode 100644 tools/testing/selftests/bpf/prog_tests/skb_load_bytes.c create mode 100644 tools/testing/selftests/bpf/progs/skb_load_bytes.c -- 2.17.1
Powered by blists - more mailing lists