Daniel Borkmann d93080cdba bpf: fix partial copy of map_ptr when dst is scalar ... commit 0962590e55 upstream. ALU operations on pointers such as scalar_reg += map_value_ptr are handled in adjust_ptr_min_max_vals(). Problem is however that map_ptr and range in the register state share a union, so transferring state through dst_reg->range = ptr_reg->range is just buggy as any new map_ptr in the dst_reg is then truncated (or null) for subsequent checks. Fix this by adding a raw member and use it for copying state over to dst_reg. Fixes: f1174f77b5 ("bpf/verifier: rework value tracking") Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Cc: Edward Cree <ecree@solarflare.com> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Edward Cree <ecree@solarflare.com> Signed-off-by: Sasha Levin <sashal@kernel.org>		2018-11-13 11:08:14 -08:00
..
acpi	ACPICA: Update version to 20180810	2018-08-14 23:49:13 +02:00
asm-generic	vmlinux.lds.h: Fix linker warnings about orphan .LPBX sections	2018-10-12 08:55:29 +11:00
clocksource
crypto
drm	drm: Get ref on CRTC commit object when waiting for flip_done	2018-10-18 14:23:13 -04:00
dt-bindings	ARM: SoC: late updates	2018-08-25 14:12:36 -07:00
keys
kvm	KVM: arm/arm64: vgic-v3: Add core support for Group0 SGIs	2018-08-12 12:06:34 +01:00
linux	bpf: fix partial copy of map_ptr when dst is scalar	2018-11-13 11:08:14 -08:00
math-emu
media	media: v4l: event: Prevent freeing event subscriptions while accessed	2018-10-03 06:32:51 -04:00
memory
misc
net	Revert "net: simplify sock_poll_wait"	2018-11-04 14:50:51 +01:00
pcmcia	pcmcia: remove long deprecated pcmcia_request_exclusive_irq() function	2018-08-18 12:30:42 -07:00
ras
rdma	Second merge window update	2018-08-23 15:34:48 -07:00
scsi	SCSI misc on 20180815	2018-08-15 22:06:26 -07:00
soc	soc: fsl: qbman: add APIs to retrieve the probing status	2018-09-27 15:43:35 -05:00
sound	ASoC: Fixes for v4.19	2018-09-17 18:59:21 +02:00
target
trace	RxRPC fixes	2018-10-10 22:27:38 -07:00
uapi	sctp: get pr_assoc and pr_stream all status with SCTP_PR_SCTP_ALL instead	2018-10-16 09:58:49 -07:00
video	fbdev changes for v4.19:	2018-08-23 15:44:58 -07:00
xen	xen/balloon: add runtime control for scrubbing ballooned out pages	2018-09-14 08:51:10 -04:00