]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
bpf: fix check of allowed specifiers in bpf_trace_printk
authorMartynas Pumputis <m@lambda.lt>
Fri, 23 Nov 2018 16:43:26 +0000 (17:43 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 17 Dec 2018 08:24:35 +0000 (09:24 +0100)
commit6bfebedaa8100b20854fd09820143a3dd5d6539c
treeaede97f1d68724d971456a7e9dcbc4ba41ce265f
parent4c7d50c23a88f3e655bf241c4be67d6716fa87a6
bpf: fix check of allowed specifiers in bpf_trace_printk

[ Upstream commit 1efb6ee3edea57f57f9fb05dba8dcb3f7333f61f ]

A format string consisting of "%p" or "%s" followed by an invalid
specifier (e.g. "%p%\n" or "%s%") could pass the check which
would make format_decode (lib/vsprintf.c) to warn.

Fixes: 9c959c863f82 ("tracing: Allow BPF programs to call bpf_trace_printk()")
Reported-by: syzbot+1ec5c5ec949c4adaa0c4@syzkaller.appspotmail.com
Signed-off-by: Martynas Pumputis <m@lambda.lt>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Sasha Levin <sashal@kernel.org>
kernel/trace/bpf_trace.c