Daniel Xu 8f7cc7c763 bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write ...

[ Upstream commit 8ac412a336 ]

MEM_WRITE attribute is defined as: "Non-presence of MEM_WRITE means that
MEM is only being read". bpf_load_hdr_opt() both reads and writes from
its arg2 - void *search_res.

This matters a lot for the next commit where we more precisely track
stack accesses. Without this annotation, the verifier will make false
assumptions about the contents of memory written to by helpers and
possibly prune valid branches.

Fixes: 6fad274f06 ("bpf: Add MEM_WRITE attribute")
Acked-by: Martin KaFai Lau <martin.lau@kernel.org>
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
Link: https://lore.kernel.org/r/730e45f8c39be2a5f3d8c4406cceca9d574cbf14.1736886479.git.dxu@dxuuu.xyz
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-02-21 13:49:09 +01:00

..

bpf_sk_storage.c

bpf: Refactor some inode/task/sk storage functions for reuse

2024-07-18 13:18:34 +02:00

datagram.c

net: fix rc7's __skb_datagram_iter()

2024-07-18 13:18:33 +02:00

dev_addr_lists_test.c

…

dev_addr_lists.c

…

dev_ioctl.c

net: dev: Convert sa_data to flexible array in struct sockaddr

2024-03-01 13:26:36 +01:00

dev.c

net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets

2025-01-09 13:30:02 +01:00

dev.h

…

drop_monitor.c

drop_monitor: replace spin_lock by raw_spin_lock

2024-06-27 13:46:15 +02:00

dst_cache.c

…

dst.c

net: do not delay dst_entries_add() in dst_release()

2024-11-14 13:15:17 +01:00

failover.c

…

fib_notifier.c

…

fib_rules.c

…

filter.c

bpf: tcp: Mark bpf_load_hdr_opt() arg2 as read-write

2025-02-21 13:49:09 +01:00

flow_dissector.c

net: flow_dissector: use DEBUG_NET_WARN_ON_ONCE

2024-08-03 08:49:24 +02:00

flow_offload.c

…

gen_estimator.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

gen_stats.c

…

gro_cells.c

…

gro.c

gro: fix ownership transfer

2024-04-10 16:28:26 +02:00

hwbm.c

…

link_watch.c

net: linkwatch: use system_unbound_wq

2024-08-14 13:52:44 +02:00

lwt_bpf.c

…

lwtunnel.c

…

Makefile

…

neighbour.c

net/neighbor: clear error in case strict check is not set

2024-12-14 19:54:45 +01:00

net_namespace.c

net: add exit_batch_rtnl() method

2025-01-23 17:17:09 +01:00

net-procfs.c

…

net-sysfs.c

ethtool: check device is present when getting link settings

2024-09-04 13:25:01 +02:00

net-sysfs.h

…

net-traces.c

…

netclassid_cgroup.c

…

netevent.c

…

netpoll.c

netpoll: Use rcu_access_pointer() in __netpoll_setup

2024-12-14 19:54:45 +01:00

netprio_cgroup.c

…

of_net.c

…

page_pool.c

…

pktgen.c

pktgen: Avoid out-of-bounds access in get_imix_entries

2025-01-23 17:17:09 +01:00

ptp_classifier.c

…

request_sock.c

…

rtnetlink.c

net: fix crash when config small gso_max_size/gso_ipv4_max_size

2024-12-14 19:53:11 +01:00

scm.c

io_uring/unix: drop usage of io_uring socket

2024-03-26 18:20:22 -04:00

secure_seq.c

…

selftests.c

…

skbuff.c

net: dsa: tag_ocelot: call only the relevant portion of __skb_vlan_pop() on TX

2024-08-29 17:30:43 +02:00

skmsg.c

tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection

2025-01-02 10:30:48 +01:00

sock_destructor.h

…

sock_diag.c

net: use unrcu_pointer() helper

2024-12-14 19:53:33 +01:00

sock_map.c

bpf, sockmap: Fix race between element replace and close()

2025-01-17 13:34:36 +01:00

sock_reuseport.c

…

sock.c

net: restrict SO_REUSEPORT to inet sockets

2025-01-09 13:30:02 +01:00

stream.c

…

sysctl_net_core.c

net: let net.core.dev_weight always be non-zero

2025-02-21 13:49:05 +01:00

timestamping.c

…

tso.c

…

utils.c

…

xdp.c

xdp: fix invalid wait context of page_pool_destroy()

2024-08-03 08:49:09 +02:00