https://github.com/torvalds/linux
Revision e4298d25830a866cc0f427d4bccb858e76715859 authored by Daniel Borkmann on 02 January 2019, 23:58:31 UTC, committed by Alexei Starovoitov on 03 January 2019, 00:01:24 UTC
Restrict stack pointer arithmetic for unprivileged users in that
arithmetic itself must not go out of bounds as opposed to the actual
access later on. Therefore after each adjust_ptr_min_max_vals() with
a stack pointer as a destination we simulate a check_stack_access()
of 1 byte on the destination and once that fails the program is
rejected for unprivileged program loads. This is analog to map
value pointer arithmetic and needed for masking later on.

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
1 parent 0d6303d
History
Tip revision: e4298d25830a866cc0f427d4bccb858e76715859 authored by Daniel Borkmann on 02 January 2019, 23:58:31 UTC
bpf: restrict stack pointer arithmetic for unprivileged
Tip revision: e4298d2
File Mode Size
Documentation
LICENSES
arch
block
certs
crypto
drivers
firmware
fs
include
init
ipc
kernel
lib
mm
net
samples
scripts
security
sound
tools
usr
virt
.clang-format -rw-r--r-- 12.7 KB
.cocciconfig -rw-r--r-- 59 bytes
.get_maintainer.ignore -rw-r--r-- 31 bytes
.gitattributes -rw-r--r-- 30 bytes
.gitignore -rw-r--r-- 1.5 KB
.mailmap -rw-r--r-- 10.6 KB
COPYING -rw-r--r-- 423 bytes
CREDITS -rw-r--r-- 96.7 KB
Kbuild -rw-r--r-- 2.2 KB
Kconfig -rw-r--r-- 563 bytes
MAINTAINERS -rw-r--r-- 477.2 KB
Makefile -rw-r--r-- 59.6 KB
README -rw-r--r-- 727 bytes

README

back to top