From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-pl1-f202.google.com (mail-pl1-f202.google.com [209.85.214.202]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 9A7DD1F1932 for ; Sun, 31 May 2026 00:48:23 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.214.202 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780188505; cv=none; b=HiuQitYLION8FBUCa/a7br6vM38Ji3S4UVFajVuFsubYjZ6SOO0M2iBvmMl7MadtrNAee2rU9uo1VtfFX878uIxmndlDQ5JTcv819RoJipbSfIt7ixEhR2bqNV+cRxuACdlyKPCM0HYYHy/Vh0RkHZbQAVygIPLC2AqyLG3fF+I= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780188505; c=relaxed/simple; bh=JE+XeIKTsotTh/xcFii2dHnI072msL/Mkm3HQLAo1nM=; h=Date:Mime-Version:Message-ID:Subject:From:To:Cc:Content-Type; b=JCxbV319ZGSAdRllCM7eJKeqHnuMdPfuPcmbix00TYb/TO7nB8BhktkCqZMaYPeu6F4K7Pm3Slg713pumk5aIqoJNqSNyi0PkEjL34x2YQF9etzM8Nk8y9IKYHLm63Oz7L7A9+o5rWmhcCYra0lhVaPiKkhXEZt0xZ6DNKXdBG0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com; spf=pass smtp.mailfrom=flex--yuyanghuang.bounces.google.com; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b=XkWmnJwp; arc=none smtp.client-ip=209.85.214.202 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=reject dis=none) header.from=google.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=flex--yuyanghuang.bounces.google.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=google.com header.i=@google.com header.b="XkWmnJwp" Received: by mail-pl1-f202.google.com with SMTP id d9443c01a7336-2bf3636d6c0so11117235ad.2 for ; Sat, 30 May 2026 17:48:23 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=20251104; t=1780188503; x=1780793303; darn=vger.kernel.org; h=cc:to:from:subject:message-id:mime-version:date:from:to:cc:subject :date:message-id:reply-to; bh=m9llWaUyY0QX+uCte5zZE9wTjpV+Ud2qZ4TJwZ1Uj1c=; b=XkWmnJwpXTNOLwm9uo6m+wyaANURz/Xi6Za9LQqmxzDCuuXpsDp20nNbmMld6I5Jre 6jI7WjcRQVbnAJV3CGUsUIICYq2RIh+ciMM2M+F5Fu48eGS4ZiHZP44lB1lizBAydBBO Jj9H3Wdz2/i33KNtFrSmRGa/kWL6EVVu0FHhQ76NII+9O3hzLxfEiASERtGbUDjKRzSe hWjTur64W/gKyJyCpbXknLHtI9t82UyLY7pl/m+U/tnzeNcGdOoM6iHfGQ/1UZdsKNnN /JVwisH9wSUwq4yYe8nA6meCvhyFBngBw2N9D978bb840hDIHstzoJI2+cGG0PamoqgP Fx/A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1780188503; x=1780793303; h=cc:to:from:subject:message-id:mime-version:date:x-gm-message-state :from:to:cc:subject:date:message-id:reply-to; bh=m9llWaUyY0QX+uCte5zZE9wTjpV+Ud2qZ4TJwZ1Uj1c=; b=eATd3dpSp4XBW28WBLNn+ADnMlgLXkWPB8jl1D6KEN8AZuqgw5F4CC1V+YTDpacE0Q Qr8VWHTO15ivynK8fLsb0RDJ4yqWsCE/ZlmcxxSOrWQH53PS0XmDc98nFN+QO/ry7FhF 58JMZvr9MIBLzf9Sxr7fJsio1rscIuTirW9p+SfhFS9fZ6YE539Yu0lIyR+v1IfD3X00 FPnIZ1mOQDgTFvuny2vR/Vo6z6TBRY+GJxzSMUK7UC+3j5A3cRc7tudnzl4y3Rwg6TRC bdLJYoPrpE1cJ1m/niK8/CTH+RnLQj7ewKgylId/F50mU05gCEVXTmuM6DfgDMt0sVlo xtUg== X-Forwarded-Encrypted: i=1; AFNElJ/LfqoalIKx8ooMxOYJt2kS84Os3CL6qOa8Eq/PeEtPFosHq2ZT8THeDxk8MhvC3PNRY1jfmHVtKqSpNLs=@vger.kernel.org X-Gm-Message-State: AOJu0YzwoS42qteADGfa/UFmoISfMEMA23l2KgbrCcYhDUkemqzCOpx9 yBY4UncVGzm6uvyt+efBIpGnYk4S8PoIfOJ2Wa8imC8Ada5lxF9LzblslokxyYIKrXXDZ43ZE4E Q886EFDxGUoCJPF8ozP8YqP3Z3Q== X-Received: from plav20.prod.google.com ([2002:a17:902:f0d4:b0:2bf:1a98:5111]) (user=yuyanghuang job=prod-delivery.src-stubby-dispatcher) by 2002:a17:902:c40d:b0:2bf:1778:88c4 with SMTP id d9443c01a7336-2bf368287bemr64886895ad.21.1780188502634; Sat, 30 May 2026 17:48:22 -0700 (PDT) Date: Sun, 31 May 2026 08:47:46 +0800 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: Mime-Version: 1.0 X-Mailer: git-send-email 2.54.0.823.g6e5bcc1fc9-goog Message-ID: <20260531004748.3567875-1-yuyanghuang@google.com> Subject: [PATCH bpf-next v2 0/2] bpf: Align syscall writeback behavior with user-declared size From: Yuyang Huang To: Yuyang Huang Cc: Alexei Starovoitov , Andrii Nakryiko , Daniel Borkmann , Eduard Zingerman , Jiri Olsa , John Fastabend , Kumar Kartikeya Dwivedi , Martin KaFai Lau , Shuah Khan , Song Liu , Yonghong Song , Leon Hwang , bpf@vger.kernel.org, linux-kernel@vger.kernel.org, linux-kselftest@vger.kernel.org Content-Type: text/plain; charset="UTF-8" This series addresses an out-of-bounds write regression in BPF_PROG_QUERY. Based on upstream feedback, we simplified the fix by checking the size only in the front-gate bpf_prog_query() function and returning -EFAULT. Changes since v1: - Simplify the kernel fix to checking the size only in bpf_prog_query(). - Revert all other subsystem query plumbing changes. - Update BPF selftest to target BPF_CGROUP_INET_INGRESS cgroup query, and add verification for attr size boundaries. Yuyang Huang (2): bpf: reject BPF_PROG_QUERY with short uattr size selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries kernel/bpf/syscall.c | 6 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 65 +++++++++++++++++++ 2 files changed, 69 insertions(+), 2 deletions(-) create mode 100644 tools/testing/selftests/bpf/prog_tests/bpf_attr_size.c -- 2.54.0.823.g6e5bcc1fc9-goog