]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
bpf: Fix regsafe() for pointers to packet
authorAlexei Starovoitov <ast@kernel.org>
Tue, 31 Mar 2026 20:42:28 +0000 (13:42 -0700)
committerAndrii Nakryiko <andrii@kernel.org>
Tue, 31 Mar 2026 22:18:10 +0000 (15:18 -0700)
commita8502a79e832b861e99218cbd2d8f4312d62e225
tree5c802b9a27feb43017196e3cf8abcd14e52ec0c9
parentdbf00d8d23b43a7a1d717e704c50651731d01d71
bpf: Fix regsafe() for pointers to packet

In case rold->reg->range == BEYOND_PKT_END && rcur->reg->range == N
regsafe() may return true which may lead to current state with
valid packet range not being explored. Fix the bug.

Fixes: 6d94e741a8ff ("bpf: Support for pointers beyond pkt_end.")
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Reviewed-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: Amery Hung <ameryhung@gmail.com>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/bpf/20260331204228.26726-1-alexei.starovoitov@gmail.com
kernel/bpf/verifier.c