bpf/verifier: reject BPF_ALU64|BPF_END
Neither ___bpf_prog_run nor the JITs accept it.
Also adds a new test case.
Fixes: 17a5267067
("bpf: verifier (add verifier core)")
Signed-off-by: Edward Cree <ecree@solarflare.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
这个提交包含在:
@@ -2292,7 +2292,8 @@ static int check_alu_op(struct bpf_verifier_env *env, struct bpf_insn *insn)
|
||||
}
|
||||
} else {
|
||||
if (insn->src_reg != BPF_REG_0 || insn->off != 0 ||
|
||||
(insn->imm != 16 && insn->imm != 32 && insn->imm != 64)) {
|
||||
(insn->imm != 16 && insn->imm != 32 && insn->imm != 64) ||
|
||||
BPF_CLASS(insn->code) == BPF_ALU64) {
|
||||
verbose("BPF_END uses reserved fields\n");
|
||||
return -EINVAL;
|
||||
}
|
||||
|
在新工单中引用
屏蔽一个用户