Files
android_kernel_xiaomi_sm8450/kernel
Daniel Borkmann c87ef240a8 bpf: Fix mask direction swap upon off reg sign change
commit bb01a1bba579b4b1c5566af24d95f1767859771e upstream.

Masking direction as indicated via mask_to_left is considered to be
calculated once and then used to derive pointer limits. Thus, this
needs to be placed into bpf_sanitize_info instead so we can pass it
to sanitize_ptr_alu() call after the pointer move. Piotr noticed a
corner case where the off reg causes masking direction change which
then results in an incorrect final aux->alu_limit.

Fixes: 7fedb63a8307 ("bpf: Tighten speculative pointer arithmetic mask")
Reported-by: Piotr Krysiuk <piotras@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: Piotr Krysiuk <piotras@gmail.com>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
2021-05-28 13:17:43 +02:00
..
2021-05-19 10:13:04 +02:00
2021-04-14 08:41:58 +02:00
2020-08-26 09:10:39 -04:00
2021-03-30 14:31:52 +02:00
2020-08-12 10:58:02 -07:00
2021-02-07 15:37:17 +01:00
2021-03-25 09:04:11 +01:00
2020-11-14 11:26:04 -08:00
2020-07-27 14:31:12 -04:00
2021-02-07 15:37:17 +01:00
2020-06-04 19:06:24 -07:00
2020-05-09 13:57:12 +02:00