Received: by 2002:a05:6358:701b:b0:131:369:b2a3 with SMTP id 27csp2873602rwo; Mon, 24 Jul 2023 02:38:40 -0700 (PDT) X-Google-Smtp-Source: APBJJlGKoO+n+b41AJnAgALRRt+FDgN/VR87GmWQrmXO41VHrsUjXO0SS5aWwW3xm7wyyeYUz3Ux X-Received: by 2002:a05:6a20:8f2a:b0:133:fd64:8d48 with SMTP id b42-20020a056a208f2a00b00133fd648d48mr7794485pzk.4.1690191519782; Mon, 24 Jul 2023 02:38:39 -0700 (PDT) ARC-Seal: i=1; a=rsa-sha256; t=1690191519; cv=none; d=google.com; s=arc-20160816; b=hwav2tsbPIwuGZVgF8psvhQ0yLaS/JWeUB7M25xT3UJdb135/5rFUQUM9us3jMFYI0 YTSmpzk3Q2e334SxfD0cmFDScoMDyBxl9vijVx0ZLWM06StVAUIG74BCWj40CghDoAnS ioz1W57vUK/FwX7kTsIpcie0ijs1yC5SUKPT6w+OupIT0IQIQv08C3ZevZC5u3mNlhlX zQH4PsPJTg6K8xtMiOHBqnHAN8L2gt+uLKOOwRorD+4fDyUqgnOdkKgJn344elkS6Lz0 Ln2IZ0ZYIfwq8AF6h7eHJApIQbTdAk5HBzO+iqSvsvnFpwlYoVb/SXgHFn78lWfaeq50 3oQg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816; h=list-id:precedence:content-transfer-encoding:cc:to:subject :message-id:date:from:in-reply-to:references:mime-version :dkim-signature; bh=RvpQjdy2BZtG4KxZUJm0NSczIjObM2PdRZCjOhCuHqE=; fh=qz90kAigTYFhclHlljximUOfr/SuywHG4mueR2T8ae8=; b=PTXvuYw0OREOi05uiGTKurhhT5524CBCUCKnVpJDiLXoLFBj3OdxaR7SE9zS8Y6lT2 WDvRNgydkwzrXenfEu3qI5LA9fKiaigdIfZfLzDB2W+QXImBb5yXQ0qX6DSuiFYDqMgV VbJ4rzk4MGmx1oC0crxojMRpTIcC08duZ3WUHHaIA7yGPFWZ9QnJaV+1eigOPJ+qfaGG mck/4q29A2gG1i80MZeQET9Ort2WSkG9NDk37dgGs6ZFsMcTw0Sp3OPoNBV1bg0SjSvu 9rXwqnvxc9HgS8O3/BWa/b3aNZ30Pvji7p2luEsoIrwlyPiRBtd6J3I9xOnhsdTBQ5+u Ch+A== ARC-Authentication-Results: i=1; mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=L8ohUoQw; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Return-Path: Received: from out1.vger.email (out1.vger.email. [2620:137:e000::1:20]) by mx.google.com with ESMTP id h1-20020a170902704100b001b9ea60cd8bsi8257577plt.332.2023.07.24.02.38.27; Mon, 24 Jul 2023 02:38:39 -0700 (PDT) Received-SPF: pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) client-ip=2620:137:e000::1:20; Authentication-Results: mx.google.com; dkim=pass header.i=@isovalent.com header.s=google header.b=L8ohUoQw; spf=pass (google.com: domain of linux-kernel-owner@vger.kernel.org designates 2620:137:e000::1:20 as permitted sender) smtp.mailfrom=linux-kernel-owner@vger.kernel.org; dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=isovalent.com Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229547AbjGXIB7 (ORCPT + 99 others); Mon, 24 Jul 2023 04:01:59 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:43374 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229441AbjGXIB6 (ORCPT ); Mon, 24 Jul 2023 04:01:58 -0400 Received: from mail-ej1-x629.google.com (mail-ej1-x629.google.com [IPv6:2a00:1450:4864:20::629]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id C0B41F3 for ; Mon, 24 Jul 2023 01:01:56 -0700 (PDT) Received: by mail-ej1-x629.google.com with SMTP id a640c23a62f3a-9926623e367so721039166b.0 for ; Mon, 24 Jul 2023 01:01:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=isovalent.com; s=google; t=1690185715; x=1690790515; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=RvpQjdy2BZtG4KxZUJm0NSczIjObM2PdRZCjOhCuHqE=; b=L8ohUoQwhRgvUZKLkgt2VAsrzphG3+p7mgJ/gQ+hDxT+HVl0t3pJLoFEdQrx/EQwy8 xN1jUdg4iR/MYSLHSdB0o3Yg4cMoEfFfJyuO4WEkhPBIWYOyMlTGIrl4OG209ohSxtQD DQ/4D3OMZFqg3Mf/skvNwVLRIbKNFakNb+F8IzAU2JEIS0I+8iyUqV3ouJTt/iLoqnbv TkD15YOuPNF7Z6yAakkJUlScTQgfZQXvscA83nD8qR63JT1c/g6Q1+T4UwOETkE86fMg 1NAHj9FRSpcvm/jIUFC37I2Hwi1EHaTDTYdpKW4AXtemRlwTju6DmY0fzVkMBXE4QIIT SiCA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20221208; t=1690185715; x=1690790515; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=RvpQjdy2BZtG4KxZUJm0NSczIjObM2PdRZCjOhCuHqE=; b=G2vGkI+M2bGDG4n2sOx/DkoUlL6wtRVr5bMH9Rq0mSRIi31GKMPVxVJklb8u5SYOwq eN0FypAEu7EnTp9LlHGBg/XM4T/C4aw1i/2e6LN5wBRL0i1fB7KF9uBjO7EBQByv0Clw vgllpbOYv/FD6TNOUZUIfDMi9Ev44IdOaWIURYRn6ZvVUjAWShAXZ5h9gVkMu1clRty8 CQjPU8s3zwr7taeYVgU9w2ARqyhIJopgbYm/9Pyh3lS7jl9i2XU6vQ+VPpV4XJOW0Pi3 9/8ysZgTOcUL+fCci/oaBz1jNsonZBUUeNOR03xHw7oC5JLIJYfrt6Flxb3i94LHcy2t +jTw== X-Gm-Message-State: ABy/qLbBpe3Z9JuPzIkm2Mlfuzu1qia5Xtk2dNJ2dCX9J1YaKXUghCtd JsQ5tEpriyJ858fhEBFrtWtzYFTe732K0u6g5R+3pw== X-Received: by 2002:a17:907:7846:b0:994:8e9:67fe with SMTP id lb6-20020a170907784600b0099408e967femr8119394ejc.35.1690185715296; Mon, 24 Jul 2023 01:01:55 -0700 (PDT) MIME-Version: 1.0 References: <20230720-so-reuseport-v6-2-7021b683cdae@isovalent.com> <20230720211646.34782-1-kuniyu@amazon.com> In-Reply-To: <20230720211646.34782-1-kuniyu@amazon.com> From: Lorenz Bauer Date: Mon, 24 Jul 2023 10:01:44 +0200 Message-ID: Subject: Re: [PATCH bpf-next v6 2/8] bpf: reject unhashed sockets in bpf_sk_assign To: Kuniyuki Iwashima Cc: andrii@kernel.org, ast@kernel.org, bpf@vger.kernel.org, daniel@iogearbox.net, davem@davemloft.net, dsahern@kernel.org, edumazet@google.com, haoluo@google.com, hemanthmalla@gmail.com, joe@cilium.io, joe@wand.net.nz, john.fastabend@gmail.com, jolsa@kernel.org, kpsingh@kernel.org, kuba@kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org, martin.lau@linux.dev, mykolal@fb.com, netdev@vger.kernel.org, pabeni@redhat.com, sdf@google.com, shuah@kernel.org, song@kernel.org, willemdebruijn.kernel@gmail.com, yhs@fb.com Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=-2.1 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, SPF_HELO_NONE,SPF_PASS,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.6 X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on lindbergh.monkeyblade.net Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org On Thu, Jul 20, 2023 at 11:17=E2=80=AFPM Kuniyuki Iwashima wrote: > > Fix the problem by rejecting unhashed sockets in bpf_sk_assign(). > > This matches the behaviour of __inet_lookup_skb which is ultimately > > the goal of bpf_sk_assign(). > > > > Fixes: cf7fbe660f2d ("bpf: Add socket assign support") > > Should this be 0c48eefae712 then ? I think it makes sense to target it at the original helper add, since we really should've done the unhashed check back then. Relying on unhashed not being available is too subtle.