git.kernel.dk Git - linux-2.6-block.git/commit

author	Christophe Leroy <christophe.leroy@csgroup.eu>
	Fri, 8 Mar 2024 05:38:07 +0000 (06:38 +0100)
committer	Alexei Starovoitov <ast@kernel.org>
	Fri, 15 Mar 2024 02:28:52 +0000 (19:28 -0700)
commit	7d2cc63eca0c993c99d18893214abf8f85d566d8
tree	f76363657d57f38f950856a1c399dad1ad31780b	tree \| snapshot
parent	4d8926a0407cff0c864b759b59104f4fb6f8efab	commit \| diff

bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()

set_memory_ro() can fail, leaving memory unprotected.

Check its return and take it into account as an error.

Link: https://github.com/KSPP/linux/issues/7
Signed-off-by: Christophe Leroy <christophe.leroy@csgroup.eu>
Cc: linux-hardening@vger.kernel.org <linux-hardening@vger.kernel.org>
Reviewed-by: Kees Cook <keescook@chromium.org>
Message-ID: <286def78955e04382b227cb3e4b6ba272a7442e3.1709850515.git.christophe.leroy@csgroup.eu>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

include/linux/filter.h		diff \| blob \| blame \| history
kernel/bpf/core.c		diff \| blob \| blame \| history
kernel/bpf/verifier.c		diff \| blob \| blame \| history