michael/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
Files
linux-6.8.y
linux/kernel/bpf
History
Stanislav Fomichev 67929e973f bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE 
[ Upstream commit 543576ec15 ]

bpf_prog_attach uses attach_type_to_prog_type to enforce proper
attach type for BPF_PROG_TYPE_CGROUP_SKB. link_create uses
bpf_prog_get and relies on bpf_prog_attach_check_attach_type
to properly verify prog_type <> attach_type association.

Add missing attach_type enforcement for the link_create case.
Otherwise, it's currently possible to attach cgroup_skb prog
types to other cgroup hooks.

Fixes: af6eea5743 ("bpf: Implement bpf_link-based cgroup BPF program attachment")
Link: https://lore.kernel.org/bpf/0000000000004792a90615a1dde0@google.com/
Reported-by: syzbot+838346b979830606c854@syzkaller.appspotmail.com
Signed-off-by: Stanislav Fomichev <sdf@google.com>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/r/20240426231621.2716876-2-sdf@google.com
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
2024-05-30 09:49:19 +02:00
..
preload
bpf: make preloaded map iterators to display map elements count
2023-07-06 12:42:25 -07:00
arraymap.c
Revert BPF token-related functionality
2023-12-19 08:23:03 -08:00
bloom_filter.c
bpf: Check bloom filter map value size
2024-05-17 12:14:39 +02:00
bpf_cgrp_storage.c
bpf: Enable bpf_cgrp_storage for cgroup1 non-attach case
2023-12-08 17:08:18 -08:00
bpf_inode_storage.c
Merge tag 'net-next-6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net-next
2023-04-26 16:07:23 -07:00
bpf_iter.c
bpf: Add __bpf_kfunc_{start,end}_defs macros
2023-11-01 22:33:53 -07:00
bpf_local_storage.c
bpf: bpf_sk_storage: Fix the missing uncharge in sk_omem_alloc
2023-09-06 11:08:14 +02:00
bpf_lru_list.c
bpf: Address KCSAN report on bpf_lru_list
2023-05-12 12:01:03 -07:00
bpf_lru_list.h
bpf: lru: Remove unused declaration bpf_lru_promote()
2023-08-08 17:21:42 -07:00
bpf_lsm.c
Revert BPF token-related functionality
2023-12-19 08:23:03 -08:00
bpf_struct_ops_types.h
…
bpf_struct_ops.c
x86/cfi,bpf: Fix bpf_struct_ops CFI
2023-12-15 16:25:55 -08:00
bpf_task_storage.c
bpf: Teach verifier that certain helpers accept NULL pointer.
2023-04-04 16:57:16 -07:00
btf.c
bpf: don't emit warnings intended for global subprogs for static subprogs
2024-03-26 18:16:38 -04:00
cgroup_iter.c
bpf: Let verifier consider {task,cgroup} is trusted in bpf_iter_reg
2023-11-07 15:24:25 -08:00
cgroup.c
Revert BPF token-related functionality
2023-12-19 08:23:03 -08:00
core.c
bpf: hardcode BPF_PROG_PACK_SIZE to 2MB * num_possible_nodes()
2024-03-26 18:16:57 -04:00
cpumap.c
bpf: report RCU QS in cpumap kthread
2024-03-26 18:17:38 -04:00
cpumask.c
bpf: Fix dtor CFI
2023-12-15 16:25:55 -08:00
devmap.c
bpf: Fix DEVMAP_HASH overflow check on 32-bit arches
2024-03-26 18:16:55 -04:00
disasm.c
bpf: change bpf_alu_sign_string and bpf_movsx_string to static
2023-08-04 16:15:50 -07:00
disasm.h
…
dispatcher.c
bpf: Use arch_bpf_trampoline_size
2023-12-06 17:17:20 -08:00
hashtab.c
bpf: Fix hashtab overflow check on 32-bit arches
2024-03-26 18:16:55 -04:00
helpers.c
bpf: Mark bpf_spin_{lock,unlock}() helpers with notrace correctly
2024-03-26 18:16:43 -04:00
inode.c
bpf: Re-support uid and gid when mounting bpffs
2023-12-21 14:24:30 +01:00
Kconfig
bpf: Add fd-based tcx multi-prog infra with link support
2023-07-19 10:07:27 -07:00
link_iter.c
…
local_storage.c
Merge tag 'cgroup-for-6.4' of git://git.kernel.org/pub/scm/linux/kernel/git/tj/cgroup
2023-04-29 10:05:22 -07:00
log.c
bpf: emit more dynptr information in verifier log
2023-12-11 19:21:22 -08:00
lpm_trie.c
bpf, lpm: Fix check prefixlen before walking trie
2023-11-09 19:07:38 -08:00
Makefile
kbuild: make -Woverride-init warnings more consistent
2024-04-10 16:38:00 +02:00
map_in_map.c
bpf: Optimize the free of inner map
2023-12-04 17:50:26 -08:00
map_in_map.h
bpf: Add map and need_defer parameters to .map_fd_put_ptr()
2023-12-04 17:50:26 -08:00
map_iter.c
bpf: Add __bpf_kfunc_{start,end}_defs macros
2023-11-01 22:33:53 -07:00
memalloc.c
bpf: Remove unnecessary cpu == 0 check in memalloc
2024-01-04 10:18:14 -08:00
mmap_unlock_work.h
…
mprog.c
bpf: Handle bpf_mprog_query with NULL entry
2023-10-06 17:11:20 -07:00
net_namespace.c
…
offload.c
Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net
2023-09-21 21:49:45 +02:00
percpu_freelist.c
…
percpu_freelist.h
…
prog_iter.c
…
queue_stack_maps.c
bpf: Avoid deadlock when using queue and stack maps from NMI
2023-09-11 19:04:49 -07:00
reuseport_array.c
bpf: Centralize permissions checks for all BPF map types
2023-06-19 14:04:04 +02:00
ringbuf.c
bpf: Fold smp_mb__before_atomic() into atomic_set_release()
2023-10-24 14:26:07 +02:00
stackmap.c
bpf: Fix stackmap overflow check on 32-bit arches
2024-03-26 18:16:55 -04:00
syscall.c
bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE
2024-05-30 09:49:19 +02:00
sysfs_btf.c
…
task_iter.c
bpf: Fix an issue due to uninitialized bpf_iter_task
2024-02-19 12:28:15 +01:00
tcx.c
bpf, tcx: Get rid of tcx_link_const
2023-10-23 15:01:53 -07:00
tnum.c
bpf: simplify tnum output if a fully known constant
2023-12-02 11:36:51 -08:00
trampoline.c
bpf: Use arch_bpf_trampoline_size
2023-12-06 17:17:20 -08:00
verifier.c
bpf: Fix verifier assumptions about socket->sk
2024-05-30 09:49:17 +02:00