Hi David, hi Jakub, hi Paolo, hi Eric, The following pull-request contains BPF updates for your *net* tree. We've added 7 non-merge commits during the last 7 day(s) which contain a total of 12 files changed, 112 insertions(+), 7 deletions(-). The main changes are: 1) Fix a use-after-free in BPF's task local storage, from KP Singh. 2) Make struct path handling more robust in bpf_d_path, from Jiri Olsa. 3) Fix a syzbot NULL-pointer dereference in sockmap, from Eric Dumazet. 4) UAPI fix for BPF_NETFILTER before final kernel ships, from Florian Westphal. 5) Fix map-in-map array_map_gen_lookup code generation where elem_size was not being set for inner maps, from Rhys Rustad-Elliott. 6) Fix sockopt_sk selftest's NETLINK_LIST_MEMBERSHIPS assertion, from Yonghong Song. Please consider pulling these changes from: git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev Thanks a lot! Also thanks to reporters, reviewers and testers of commits in this pull-request: Anastasios Papagiannis, John Fastabend, Kuba Piecuch, Song Liu, Stanislav Fomichev, syzbot, Yonghong Song ---------------------------------------------------------------- The following changes since commit be7f8012a513f5099916ee2da28420156cbb8cf3: net: ipa: Use correct value for IPA_STATUS_SIZE (2023-06-01 13:29:18 +0200) are available in the Git repository at: https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf.git tags/for-netdev for you to fetch changes up to f46fab0e36e611a2389d3843f34658c849b6bd60: bpf: Add extra path pointer check to d_path helper (2023-06-07 15:03:43 +0200) ---------------------------------------------------------------- bpf-for-netdev ---------------------------------------------------------------- Eric Dumazet (1): bpf, sockmap: Avoid potential NULL dereference in sk_psock_verdict_data_ready() Florian Westphal (1): bpf: netfilter: Add BPF_NETFILTER bpf_attach_type Jiri Olsa (1): bpf: Add extra path pointer check to d_path helper KP Singh (1): bpf: Fix UAF in task local storage Martin KaFai Lau (1): Merge branch 'Fix elem_size not being set for inner maps' Rhys Rustad-Elliott (2): bpf: Fix elem_size not being set for inner maps selftests/bpf: Add access_inner_map selftest Yonghong Song (1): selftests/bpf: Fix sockopt_sk selftest include/uapi/linux/bpf.h | 1 + kernel/bpf/map_in_map.c | 8 +++- kernel/bpf/syscall.c | 9 +++++ kernel/fork.c | 2 +- kernel/trace/bpf_trace.c | 12 +++++- net/core/skmsg.c | 3 +- tools/include/uapi/linux/bpf.h | 1 + tools/lib/bpf/libbpf.c | 3 +- tools/lib/bpf/libbpf_probes.c | 2 + .../selftests/bpf/prog_tests/inner_array_lookup.c | 31 +++++++++++++++ .../testing/selftests/bpf/prog_tests/sockopt_sk.c | 2 +- .../selftests/bpf/progs/inner_array_lookup.c | 45 ++++++++++++++++++++++ 12 files changed, 112 insertions(+), 7 deletions(-) create mode 100644 tools/testing/selftests/bpf/prog_tests/inner_array_lookup.c create mode 100644 tools/testing/selftests/bpf/progs/inner_array_lookup.c
