Daniel Borkmann 80f1d68ccb ebpf: verifier: check that call reg with ARG_ANYTHING is initialized ... I noticed that a helper function with argument type ARG_ANYTHING does not need to have an initialized value (register). This can worst case lead to unintented stack memory leakage in future helper functions if they are not carefully designed, or unintended application behaviour in case the application developer was not careful enough to match a correct helper function signature in the API. The underlying issue is that ARG_ANYTHING should actually be split into two different semantics: 1) ARG_DONTCARE for function arguments that the helper function does not care about (in other words: the default for unused function arguments), and 2) ARG_ANYTHING that is an argument actually being used by a helper function and *guaranteed* to be an initialized register. The current risk is low: ARG_ANYTHING is only used for the 'flags' argument (r4) in bpf_map_update_elem() that internally does strict checking. Fixes: 17a5267067 ("bpf: verifier (add verifier core)") Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@plumgrid.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2015-03-12 15:29:31 -04:00
..
bpf	ebpf: verifier: check that call reg with ARG_ANYTHING is initialized	2015-03-12 15:29:31 -04:00
configs	…
debug	debug: prevent entering debug mode on panic/exception.	2015-02-19 12:39:03 -06:00
events	Merge branch 'perf-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2015-02-16 14:58:12 -08:00
gcov	kbuild,gcov: simplify kernel/gcov/Makefile more	2015-01-09 17:25:44 +01:00
irq	genirq / PM: Add flag for shared NO_SUSPEND interrupt lines	2015-03-04 21:42:19 +01:00
livepatch	livepatch: fix RCU usage in klp_find_external_symbol()	2015-03-03 00:22:55 +01:00
locking	locking/rtmutex: Set state back to running on error	2015-03-01 09:45:06 +01:00
power	PM / sleep: Re-implement suspend-to-idle handling	2015-02-13 23:49:36 +01:00
printk	console: Fix console name size mismatch	2015-03-07 03:39:55 +01:00
rcu	Merge branches 'core-urgent-for-linus' and 'irq-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2015-02-21 10:36:06 -08:00
sched	cpuidle / sleep: Use broadcast timer for states that stop local timer	2015-03-05 23:13:19 +01:00
time	Merge branch 'timers-urgent-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2015-02-21 11:05:22 -08:00
trace	ftrace: Fix ftrace enable ordering of sysctl ftrace_enabled	2015-03-09 10:55:34 -04:00
.gitignore	…
Kconfig.freezer	…
Kconfig.hz	…
Kconfig.locks	locking/mcs: Better differentiate between MCS variants	2015-01-14 15:07:32 +01:00
Kconfig.preempt	…
Makefile	Merge branch 'next' of git://git.kernel.org/pub/scm/linux/kernel/git/jmorris/linux-security	2015-02-11 20:25:11 -08:00
acct.c	new fs_pin killing logics	2015-01-25 23:17:28 -05:00
async.c	…
audit.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2014-12-30 10:45:47 -08:00
audit.h	audit: replace getname()/putname() hacks with reference counters	2015-01-23 00:23:58 -05:00
audit_tree.c	fsnotify: unify inode and mount marks handling	2014-12-13 12:42:53 -08:00
audit_watch.c	…
auditfilter.c	Merge branch 'upstream' of git://git.infradead.org/users/pcmoore/audit	2015-02-11 20:07:47 -08:00
auditsc.c	Merge branch 'getname2' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2015-02-17 15:27:47 -08:00
backtracetest.c	…
bounds.c	…
capability.c	…
cgroup.c	kernfs: remove KERNFS_STATIC_NAME	2015-02-13 21:21:36 -08:00
cgroup_freezer.c	…
compat.c	all arches, signal: move restart_block to struct task_struct	2015-02-12 18:54:12 -08:00
configs.c	…
context_tracking.c	…
cpu.c	hotplugcpu: Avoid deadlocks by waking active_writer	2015-01-06 11:01:14 -08:00
cpu_pm.c	…
cpuset.c	cpuset: Fix cpuset sched_relax_domain_level	2015-03-02 11:55:04 -05:00
crash_dump.c	…
cred.c	…
delayacct.c	…
dma.c	…
elfcore.c	…
exec_domain.c	…
exit.c	oom, PM: make OOM detection in the freezer path raceless	2015-02-11 17:06:03 -08:00
extable.c	ftrace/x86/extable: Add is_ftrace_trampoline() function	2014-11-19 15:25:26 -05:00
fork.c	mm: do not use mm->nr_pmds on !MMU configurations	2015-02-12 18:54:10 -08:00
freezer.c	…
futex.c	all arches, signal: move restart_block to struct task_struct	2015-02-12 18:54:12 -08:00
futex_compat.c	…
groups.c	userns: Don't allow setgroups until a gid mapping has been setablished	2014-12-09 16:58:40 -06:00
hung_task.c	…
irq_work.c	…
jump_label.c	…
kallsyms.c	…
kcmp.c	…
kexec.c	kexec: simplify conditional	2015-02-17 14:34:51 -08:00
kmod.c	usermodehelper: kill the kmod_thread_locker logic	2014-12-10 17:41:17 -08:00
kprobes.c	kprobes: makes kprobes/enabled works correctly for optimized kprobes.	2015-02-13 21:21:42 -08:00
ksysfs.c	…
kthread.c	…
latencytop.c	…
module-internal.h	…
module.c	kernel/module.c: Update debug alignment after symtable generation	2015-03-06 12:04:22 +00:00
module_signing.c	…
notifier.c	rcu: Make SRCU optional by using CONFIG_SRCU	2015-01-06 11:04:29 -08:00
nsproxy.c	bury struct proc_ns in fs/proc	2014-12-04 14:34:54 -05:00
padata.c	padata: use %*pb[l] to print bitmaps including cpumasks and nodemasks	2015-02-13 21:21:38 -08:00
panic.c	livepatch: kernel: add TAINT_LIVEPATCH	2014-12-22 15:40:48 +01:00
params.c	param: fix uninitialized read with CONFIG_DEBUG_LOCK_ALLOC	2015-01-20 11:38:31 +10:30
pid.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-12-16 15:53:03 -08:00
pid_namespace.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2014-12-16 15:53:03 -08:00
profile.c	profile: use %*pb[l] to print bitmaps including cpumasks and nodemasks	2015-02-13 21:21:38 -08:00
ptrace.c	ptrace: remove linux/compat.h inclusion under CONFIG_COMPAT	2015-02-17 14:34:51 -08:00
range.c	kernel: avoid overflow in cmp_range	2015-01-17 10:02:23 +13:00
reboot.c	…
relay.c	…
resource.c	resources: Move struct resource_list_entry from ACPI into resource core	2015-02-05 15:09:25 +01:00
seccomp.c	seccomp: cap SECCOMP_RET_ERRNO data to MAX_ERRNO	2015-02-17 14:34:55 -08:00
signal.c	signal: use current->state helpers	2015-02-17 14:34:51 -08:00
smp.c	…
smpboot.c	smpboot: Add missing get_online_cpus() in smpboot_register_percpu_thread()	2015-01-23 11:33:51 +01:00
smpboot.h	…
softirq.c	Merge branch 'locking-core-for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/tip/tip	2015-02-09 15:24:03 -08:00
stacktrace.c	stacktrace: introduce snprint_stack_trace for buffer output	2014-12-13 12:42:48 -08:00
stop_machine.c	…
sys.c	kernel/sys.c: fix UNAME26 for 4.0	2015-02-28 09:57:51 -08:00
sys_ni.c	syscalls: implement execveat() system call	2014-12-13 12:42:51 -08:00
sysctl.c	mm, hugetlb: remove unnecessary lower bound on sysctl handlers"?	2015-02-10 14:30:34 -08:00
sysctl_binary.c	kernel: add panic_on_warn	2014-12-10 17:41:10 -08:00
system_certificates.S	…
system_keyring.c	…
task_work.c	…
taskstats.c	netlink: make nlmsg_end() and genlmsg_end() void	2015-01-18 01:03:45 -05:00
test_kprobes.c	…
torture.c	…
tracepoint.c	…
tsacct.c	…
uid16.c	groups: Consolidate the setgroups permission checks	2014-12-05 17:19:27 -06:00
up.c	…
user-return-notifier.c	…
user.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2014-12-17 12:31:40 -08:00
user_namespace.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/ebiederm/user-namespace	2014-12-17 12:31:40 -08:00
utsname.c	copy address of proc_ns_ops into ns_common	2014-12-04 14:34:47 -05:00
utsname_sysctl.c	…
watchdog.c	kernel/sched/clock.c: add another clock for use with the soft lockup watchdog	2015-02-12 18:54:13 -08:00
workqueue.c	workqueue: fix hang involving racing cancel[_delayed]_work_sync()'s for PREEMPT_NONE	2015-03-05 08:04:13 -05:00
workqueue_internal.h	…