Cong Wang 9a57119d11 bpf: Check negative offsets in __bpf_skb_min_len() ... [ Upstream commit 9ecc4d858b92c1bb0673ad9c327298e600c55659 ] skb_network_offset() and skb_transport_offset() can be negative when they are called after we pull the transport header, for example, when we use eBPF sockmap at the point of ->sk_data_ready(). __bpf_skb_min_len() uses an unsigned int to get these offsets, this leads to a very large number which then causes bpf_skb_change_tail() failed unexpectedly. Fix this by using a signed int to get these offsets and ensure the minimum is at least zero. Fixes: 5293efe62d ("bpf: add bpf_skb_change_tail helper") Signed-off-by: Cong Wang <cong.wang@bytedance.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: John Fastabend <john.fastabend@gmail.com> Link: https://lore.kernel.org/bpf/20241213034057.246437-2-xiyou.wangcong@gmail.com Signed-off-by: Sasha Levin <sashal@kernel.org>		2025-01-02 10:30:48 +01:00
..
6lowpan
9p	9p/xen: fix release of IRQ	2024-12-14 19:54:08 +01:00
802
8021q
appletalk
atm
ax25
batman-adv	batman-adv: Do not let TT changes list grows indefinitely	2024-12-19 18:08:52 +01:00
bluetooth	Bluetooth: SCO: Add support for 16 bits transparent voice setting	2024-12-19 18:08:57 +01:00
bpf
bpfilter
bridge	netfilter: br_netfilter: fix panic with metadata_dst skb	2024-10-17 15:22:19 +02:00
caif
can	net: af_can: do not leave a dangling sk pointer in can_create()	2024-12-14 19:54:41 +01:00
ceph
core	bpf: Check negative offsets in __bpf_skb_min_len()	2025-01-02 10:30:48 +01:00
dcb
dccp	dccp: Fix memory leak in dccp_feat_change_recv	2024-12-14 19:54:22 +01:00
devlink	devlink: bump the instance index directly when iterating	2024-10-22 15:56:43 +02:00
dns_resolver
dsa
ethernet
ethtool	ethtool: Fix wrong mod state in case of verbose and no_mask bitset	2024-12-14 19:54:23 +01:00
hsr	net: hsr: avoid potential out-of-bound access in fill_frame_info()	2024-12-14 19:54:21 +01:00
ieee802154	net: ieee802154: do not leave a dangling sk pointer in ieee802154_create()	2024-12-14 19:54:41 +01:00
ife
ipv4	tcp_bpf: Add sk_rmem_alloc related logic for tcp_bpf ingress redirection	2025-01-02 10:30:48 +01:00
ipv6	net: inet6: do not leave a dangling sk pointer in inet6_create()	2024-12-14 19:54:41 +01:00
iucv	s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()	2024-12-14 19:53:50 +01:00
kcm
key
l2tp	genetlink: hold RCU in genlmsg_mcast()	2024-11-01 01:56:00 +01:00
l3mdev
lapb
llc	llc: Improve setsockopt() handling of malformed user input	2024-12-14 19:53:51 +01:00
mac80211	wifi: mac80211: fix station NSS capability initialization order	2024-12-19 18:08:52 +01:00
mac802154
mctp	mctp: Handle error of rtnl_register_module().	2024-10-17 15:22:23 +02:00
mpls
mptcp	mptcp: fix possible integer overflow in mptcp_reset_tout_timer	2024-12-14 19:53:13 +01:00
ncsi
netfilter	netfilter: ipset: Fix for recursive locking warning	2024-12-27 13:52:55 +01:00
netlabel
netlink	sock_diag: add module pointer to "struct sock_diag_handler"	2024-12-14 19:53:32 +01:00
netrom
nfc	nfc: llcp: fix nfc_llcp_setsockopt() unsafe copies	2024-11-22 15:37:33 +01:00
nsh
openvswitch
packet	af_packet: avoid erroring out after sock_init_data() in packet_create()	2024-12-14 19:54:41 +01:00
phonet
psample
qrtr	net: qrtr: Update packets cloning when broadcasting	2024-10-17 15:21:13 +02:00
rds
rfkill	net: rfkill: gpio: Add check for clk_enable()	2024-12-14 19:53:33 +01:00
rose
rxrpc	rxrpc: Improve setsockopt() handling of malformed user input	2024-12-14 19:53:52 +01:00
sched	net: sched: fix ordering of qlen adjustment	2024-12-27 13:52:51 +01:00
sctp	sctp: properly validate chunk size in sctp_sf_ootb()	2024-11-14 13:15:11 +01:00
smc	net/smc: check return value of sock_recvmsg when draining clc data	2024-12-27 13:52:54 +01:00
strparser
sunrpc	sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport	2024-12-14 19:54:09 +01:00
switchdev
tipc	tipc: fix NULL deref in cleanup_bearer()	2024-12-19 18:08:52 +01:00
tls
unix	sock_diag: add module pointer to "struct sock_diag_handler"	2024-12-14 19:53:32 +01:00
vmw_vsock	sock_diag: add module pointer to "struct sock_diag_handler"	2024-12-14 19:53:32 +01:00
wireless	wifi: nl80211: fix NL80211_ATTR_MLO_LINK_ID off-by-one	2024-12-19 18:08:51 +01:00
x25
xdp	xsk: fix OOB map writes when deleting elements	2024-12-14 19:54:36 +01:00
xfrm	xfrm: validate new SA's prefixlen using SA family when sel.family is unset	2024-11-01 01:56:07 +01:00
compat.c
devres.c
Kconfig
Kconfig.debug
Makefile
socket.c	net: explicitly clear the sk pointer, when pf->create fails	2024-10-17 15:22:27 +02:00
sysctl_net.c