Unverified Commit a6bb214f authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!5787 bpf: fix check for attempt to corrupt spilled pointer 

Merge Pull Request from: @ci-robot 
 
PR sync from: Pu Lehui <pulehui@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/DN3EODWSKDLHJAS6BFKUURFWDVQ7NYZV/ 
 
https://gitee.com/src-openeuler/kernel/issues/I93ED4 
 
Link:https://gitee.com/openeuler/kernel/pulls/5787

 

Reviewed-by: default avatarXu Kuohai <xukuohai@huawei.com>
Signed-off-by: default avatarJialin Zhang <zhangjialin11@huawei.com>
parents 153a05b7 b6ff704c

kernel/bpf/verifier.c

+1 −1
Original line number Diff line number Diff line
@@ -2500,7 +2500,7 @@ static int check_stack_write_fixed_off(struct bpf_verifier_env *env, 
	 * so it's aligned access and [off, off + size) are within stack limits

	 */

	if (!env->allow_ptr_leaks &&

	    state->stack[spi].slot_type[0] == STACK_SPILL &&

	    is_spilled_reg(&state->stack[spi]) &&

	    size != BPF_REG_SIZE) {

		verbose(env, "attempt to corrupt spilled pointer on stack\n");

		return -EACCES;