Unverified Commit ee997750 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!15747 bpf: Fix pointer-leak due to insufficient speculative store bypass mitigation 

Merge Pull Request from: @ci-robot 
 
PR sync from: Pu Lehui <pulehui@huawei.com>
https://mailweb.openeuler.org/archives/list/kernel@openeuler.org/message/SMQYTICK7WKIEQWJQEUVTKPQTIWZXUF4/ 
 
https://gitee.com/src-openeuler/kernel/issues/IBWVYS 
 
Link:https://gitee.com/openeuler/kernel/pulls/15747

 

Reviewed-by: default avatarYe Weihua <yeweihua4@huawei.com>
Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents 4701c39f 90b3f0d6

kernel/bpf/verifier.c

+3 −1
Original line number Diff line number Diff line
@@ -1013,7 +1013,9 @@ static int check_stack_write(struct bpf_verifier_env *env, 
		bool sanitize = reg && is_spillable_regtype(reg->type);



		for (i = 0; i < size; i++) {

			if (state->stack[spi].slot_type[i] == STACK_INVALID) {

			u8 type = state->stack[spi].slot_type[i];



			if (type != STACK_MISC && type != STACK_ZERO) {

				sanitize = true;

				break;

			}