Greg Kroah-Hartman 7855a721d9 bpf: Explicitly memset some bpf info structures declared on the stack ...

commit 5c6f258879 upstream.

Trying to initialize a structure with "= {};" will not always clean out
all padding locations in a structure. So be explicit and call memset to
initialize everything for a number of bpf information structures that
are then copied from userspace, sometimes from smaller memory locations
than the size of the structure.

Reported-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Yonghong Song <yhs@fb.com>
Link: https://lore.kernel.org/bpf/20200320162258.GA794295@kroah.com
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2020-04-02 16:34:37 +02:00

..

arraymap.c

bpf: sockmap, map_release does not hold refcnt for pinned maps

2018-11-04 14:52:44 +01:00

bpf_lru_list.c

bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4

2017-04-17 13:55:52 -04:00

bpf_lru_list.h

bpf: Only set node->ref = 1 if it has not been set

2017-09-01 09:57:39 -07:00

cgroup.c

bpf: BPF support for sock_ops

2017-07-01 16:15:13 -07:00

core.c

bpf: fix bpf_jit_limit knob for PAGE_SIZE >= 64K

2019-08-25 10:50:23 +02:00

devmap.c

bpf: devmap: fix wrong interface selection in notifier_call

2019-12-01 09:13:47 +01:00

hashtab.c

bpf, lru: avoid messing with eviction heuristics upon syscall lookup

2019-05-25 18:25:38 +02:00

helpers.c

…

inode.c

bpf: fix use after free in bpf_evict_inode

2019-04-20 09:15:07 +02:00

lpm_trie.c

bpf: fix rcu lockdep warning for lpm_trie map_free callback

2018-03-11 16:23:21 +01:00

Makefile

bpf: silence warning messages in core

2019-07-31 07:28:25 +02:00

map_in_map.c

bpf: fix inner map masking to prevent oob under speculation

2019-04-20 09:15:09 +02:00

map_in_map.h

bpf: Add syscall lookup support for fd array and htab

2017-06-29 13:13:25 -04:00

percpu_freelist.c

bpf: fix lockdep false positive in percpu_freelist

2019-03-13 14:03:20 -07:00

percpu_freelist.h

bpf: fix lockdep false positive in percpu_freelist

2019-03-13 14:03:20 -07:00

sockmap.c

bpf: sockmap, map_release does not hold refcnt for pinned maps

2018-11-04 14:52:44 +01:00

stackmap.c

bpf: Allow selecting numa node during map creation

2017-08-19 21:35:43 -07:00

syscall.c

bpf: Explicitly memset some bpf info structures declared on the stack

2020-04-02 16:34:37 +02:00

tnum.c

bpf/verifier: track signed and unsigned min/max values

2017-08-08 17:51:34 -07:00

verifier.c

bpf: Fix passing modified ctx to ld/abs/ind instruction

2020-01-12 12:12:02 +01:00