Messages in this thread | | | From | Y Song <> | Date | Sat, 17 Nov 2018 00:44:13 +0000 | Subject | Re: [PATCH bpf] bpf: fix off-by-one error in adjust_subprog_starts |
| |
On Fri, Nov 16, 2018 at 12:00 PM Edward Cree <ecree@solarflare.com> wrote: > > When patching in a new sequence for the first insn of a subprog, the start > of that subprog does not change (it's the first insn of the sequence), so > adjust_subprog_starts should check start <= off (rather than < off). > Also added a test to test_verifier.c (it's essentially the syz reproducer). > > Fixes: cc8b0b92a169 ("bpf: introduce function calls (function boundaries)") > Reported-by: syzbot+4fc427c7af994b0948be@syzkaller.appspotmail.com > Signed-off-by: Edward Cree <ecree@solarflare.com>
Acked-by: Yonghong Song <yhs@fb.com>
| |