Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1753863AbdGUNfZ (ORCPT ); Fri, 21 Jul 2017 09:35:25 -0400 Received: from dispatch1-us1.ppe-hosted.com ([67.231.154.164]:50557 "EHLO dispatch1-us1.ppe-hosted.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752178AbdGUNfX (ORCPT ); Fri, 21 Jul 2017 09:35:23 -0400 From: Edward Cree Subject: [PATCH net 0/2] bpf: fix verifier min/max handling in BPF_SUB To: , Alexei Starovoitov , Alexei Starovoitov , Daniel Borkmann CC: , , iovisor-dev Message-ID: <2ebcb201-2f18-7276-f4f9-f2bbaffae179@solarflare.com> Date: Fri, 21 Jul 2017 14:35:17 +0100 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Thunderbird/45.1.0 MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 7bit X-Originating-IP: [10.17.20.45] X-ClientProxiedBy: ukex01.SolarFlarecom.com (10.17.10.4) To ukex01.SolarFlarecom.com (10.17.10.4) X-TM-AS-Product-Ver: SMEX-11.0.0.1191-8.100.1062-23208.003 X-TM-AS-Result: No--2.590500-0.000000-31 X-TM-AS-User-Approved-Sender: Yes X-TM-AS-User-Blocked-Sender: No X-MDID: 1500644123-PTd7jFcfFUBW Sender: linux-kernel-owner@vger.kernel.org List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 503 Lines: 11 I managed to come up with a test for the swapped bounds in BPF_SUB, so here it is along with a patch that fixes it, separated out from my 'rewrite everything' series so it can go to -stable. Edward Cree (2): selftests/bpf: subtraction bounds test bpf/verifier: fix min/max handling in BPF_SUB kernel/bpf/verifier.c | 21 +++++++++++++++------ tools/testing/selftests/bpf/test_verifier.c | 28 ++++++++++++++++++++++++++++ 2 files changed, 43 insertions(+), 6 deletions(-)