Re: [PATCH stable 4.18] bpf/verifier: disallow pointer subtraction

On Tue, Sep 25, 2018 at 03:25:18PM +0200, Daniel Borkmann wrote:

From: Alexei Starovoitov ast@kernel.org

commit dd066823db2ac4e22f721ec85190817b58059a54 upstream.

Subtraction of pointers was accidentally allowed for unpriv programs by commit 82abbf8d2fc4. Revert that part of commit.

Fixes: 82abbf8d2fc4 ("bpf: do not allow root to mangle valid pointers") Reported-by: Jann Horn jannh@google.com Acked-by: Daniel Borkmann daniel@iogearbox.net Signed-off-by: Alexei Starovoitov ast@kernel.org Signed-off-by: Daniel Borkmann daniel@iogearbox.net

---

kernel/bpf/verifier.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-)

Now queued up, thanks.

greg k-h