Merge git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf
Daniel Borkmann says:
====================
pull-request: bpf 2018-01-09
The following pull-request contains BPF updates for your *net* tree.
The main changes are:
1) Prevent out-of-bounds speculation in BPF maps by masking the
index after bounds checks in order to fix spectre v1, and
add an option BPF_JIT_ALWAYS_ON into Kconfig that allows for
removing the BPF interpreter from the kernel in favor of
JIT-only mode to make spectre v2 harder, from Alexei.
2) Remove false sharing of map refcount with max_entries which
was used in spectre v1, from Daniel.
3) Add a missing NULL psock check in sockmap in order to fix
a race, from John.
4) Fix test_align BPF selftest case since a recent change in
verifier rejects the bit-wise arithmetic on pointers
earlier but test_align update was missing, from Alexei.
====================
Signed-off-by:
David S. Miller <davem@davemloft.net>
No related branches found
No related tags found
Showing
- include/linux/bpf.h 18 additions, 8 deletionsinclude/linux/bpf.h
- init/Kconfig 7 additions, 0 deletionsinit/Kconfig
- kernel/bpf/arraymap.c 36 additions, 11 deletionskernel/bpf/arraymap.c
- kernel/bpf/core.c 19 additions, 0 deletionskernel/bpf/core.c
- kernel/bpf/sockmap.c 9 additions, 2 deletionskernel/bpf/sockmap.c
- kernel/bpf/verifier.c 36 additions, 0 deletionskernel/bpf/verifier.c
- lib/test_bpf.c 7 additions, 4 deletionslib/test_bpf.c
- net/core/filter.c 2 additions, 4 deletionsnet/core/filter.c
- net/core/sysctl_net_core.c 6 additions, 0 deletionsnet/core/sysctl_net_core.c
- net/socket.c 9 additions, 0 deletionsnet/socket.c
- tools/testing/selftests/bpf/test_align.c 1 addition, 21 deletionstools/testing/selftests/bpf/test_align.c
Loading
Please register or sign in to comment