Re: [PATCH 4.19 00/12] bpf: fix verifier selftests, add CVE-2021-29155 fixes

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, May 27, 2021 at 08:37:20PM +0300, Ovidiu Panait wrote:
> This patchset is based on Frank van der Linden's backport of CVE-2021-29155
> fixes to 5.4 and 4.14:
> https://lore.kernel.org/stable/20210429220839.15667-1-fllinden@xxxxxxxxxx/
> https://lore.kernel.org/stable/20210501043014.33300-1-fllinden@xxxxxxxxxx/
> 
> With this series, all verifier selftests but one (that has already been
> failing, see [1] for more details) succeed.

Thanks for doing this - when this gets queued up for 4.19, I can then
resubmit my 4.14 series.

Daniel mentioned the CVE-2021-33200 fixes that were just added. If you add
them to this series, I'll add them to the 4.14 series as well. They should
be clean cherry-picks on top of this.

The failing selftest is a little odd - why would it need allowing bounded
loops to succeed if it was written before those were allowed? In any case,
it was already failing, so that shouldn't stop this series from being
applied.

- Frank



[Index of Archives]     [Linux Kernel]     [Kernel Development Newbies]     [Linux USB Devel]     [Video for Linux]     [Linux Audio Users]     [Yosemite Hiking]     [Linux Kernel]     [Linux SCSI]

  Powered by Linux