Hello:
This patch was applied to bpf/bpf.git (master)
by Daniel Borkmann <daniel@xxxxxxxxxxxxx>:
On Wed, 20 Sep 2023 12:20:55 +0200 you wrote:
> With a SOCKMAP/SOCKHASH map and an sk_msg program user can steer messages
> sent from one TCP socket (s1) to actually egress from another TCP
> socket (s2):
>
> tcp_bpf_sendmsg(s1) // = sk_prot->sendmsg
> tcp_bpf_send_verdict(s1) // __SK_REDIRECT case
> tcp_bpf_sendmsg_redir(s2)
> tcp_bpf_push_locked(s2)
> tcp_bpf_push(s2)
> tcp_rate_check_app_limited(s2) // expects tcp_sock
> tcp_sendmsg_locked(s2) // ditto
>
> [...]
Here is the summary with links:
- [bpf] bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets
https://git.kernel.org/bpf/bpf/c/b80e31baa436
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
