Toke Høiland-Jørgensen 3420b3ff1f cpumap: Zero-initialise xdp_rxq_info struct before running XDP program ...

[ Upstream commit 2487007aa3 ]

When running an XDP program that is attached to a cpumap entry, we don't
initialise the xdp_rxq_info data structure being used in the xdp_buff
that backs the XDP program invocation. Tobias noticed that this leads to
random values being returned as the xdp_md->rx_queue_index value for XDP
programs running in a cpumap.

This means we're basically returning the contents of the uninitialised
memory, which is bad. Fix this by zero-initialising the rxq data
structure before running the XDP program.

Fixes: 9216477449 ("bpf: cpumap: Add the possibility to attach an eBPF program to cpumap")
Reported-by: Tobias Böhm <tobias@aibor.de>
Signed-off-by: Toke Høiland-Jørgensen <toke@redhat.com>
Link: https://lore.kernel.org/r/20240305213132.11955-1-toke@redhat.com
Signed-off-by: Martin KaFai Lau <martin.lau@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2024-03-15 10:48:15 -04:00

..

preload

…

arraymap.c

bpf: Add map and need_defer parameters to .map_fd_put_ptr()

2024-01-25 15:27:26 -08:00

bloom_filter.c

…

bpf_inode_storage.c

…

bpf_iter.c

…

bpf_local_storage.c

bpf: Annotate data races in bpf_local_storage

2023-05-24 17:32:36 +01:00

bpf_lru_list.c

bpf: Address KCSAN report on bpf_lru_list

2023-07-27 08:50:34 +02:00

bpf_lru_list.h

bpf: Address KCSAN report on bpf_lru_list

2023-07-27 08:50:34 +02:00

bpf_lsm.c

bpf: Fix the kernel crash caused by bpf_setsockopt().

2023-02-09 11:28:02 +01:00

bpf_struct_ops_types.h

…

bpf_struct_ops.c

…

bpf_task_storage.c

…

btf.c

bpf: Fix an error in verifying a field in a union

2023-09-13 09:42:30 +02:00

cgroup_iter.c

cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers

2023-06-21 16:00:51 +02:00

cgroup.c

bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen

2023-07-19 16:21:05 +02:00

core.c

bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4

2024-01-10 17:10:36 +01:00

cpumap.c

cpumap: Zero-initialise xdp_rxq_info struct before running XDP program

2024-03-15 10:48:15 -04:00

devmap.c

…

disasm.c

…

disasm.h

…

dispatcher.c

…

hashtab.c

bpf: Add map and need_defer parameters to .map_fd_put_ptr()

2024-01-25 15:27:26 -08:00

helpers.c

bpf: Fix racing between bpf_timer_cancel_and_free and bpf_timer_cancel

2024-03-01 13:26:36 +01:00

inode.c

…

Kconfig

…

link_iter.c

…

local_storage.c

cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers

2023-06-21 16:00:51 +02:00

lpm_trie.c

bpf, lpm: Fix check prefixlen before walking trie

2024-01-25 15:27:24 -08:00

Makefile

…

map_in_map.c

bpf: Defer the free of inner map when necessary

2024-01-25 15:27:26 -08:00

map_in_map.h

bpf: Add map and need_defer parameters to .map_fd_put_ptr()

2024-01-25 15:27:26 -08:00

map_iter.c

…

memalloc.c

bpf: Zeroing allocated object from slab in bpf memory allocator

2023-03-10 09:33:06 +01:00

mmap_unlock_work.h

…

net_namespace.c

…

offload.c

bpf: restore the ebpf program ID for BPF_AUDIT_UNLOAD and PERF_BPF_EVENT_PROG_UNLOAD

2023-01-24 07:24:37 +01:00

percpu_freelist.c

…

percpu_freelist.h

…

prog_iter.c

…

queue_stack_maps.c

bpf: Avoid deadlock when using queue and stack maps from NMI

2023-10-06 14:56:35 +02:00

reuseport_array.c

…

ringbuf.c

…

stackmap.c

bpf: Add crosstask check to __bpf_get_stack

2024-01-25 15:27:24 -08:00

syscall.c

bpf: Set uattr->batch.count as zero before batched update or deletion

2024-02-05 20:12:51 +00:00

sysfs_btf.c

…

task_iter.c

bpf: keep a reference to the mm, in case the task is dead.

2023-01-24 07:24:31 +01:00

tnum.c

…

trampoline.c

bpf, x64: Fix tailcall infinite loop

2024-01-10 17:10:26 +01:00

verifier.c

bpf: Add struct for bin_args arg in bpf_bprintf_prepare

2024-02-23 09:12:51 +01:00