]> www.infradead.org Git - users/willy/xarray.git/commit
bpf: add check for invalid name in btf_name_valid_section()
authorJeongjun Park <aha310510@gmail.com>
Sat, 31 Aug 2024 05:47:02 +0000 (14:47 +0900)
committerAlexei Starovoitov <ast@kernel.org>
Wed, 4 Sep 2024 18:56:34 +0000 (11:56 -0700)
commitbb6705c3f93bed2af03d43691743d4c43e3c8e6f
tree930dce457cb48dc146e4fadd65db839cdb2487d4
parentb408473ea01b2e499d23503e2bf898416da9d7ac
bpf: add check for invalid name in btf_name_valid_section()

If the length of the name string is 1 and the value of name[0] is NULL
byte, an OOB vulnerability occurs in btf_name_valid_section() and the
return value is true, so the invalid name passes the check.

To solve this, you need to check if the first position is NULL byte and
if the first character is printable.

Suggested-by: Eduard Zingerman <eddyz87@gmail.com>
Fixes: bd70a8fb7ca4 ("bpf: Allow all printable characters in BTF DATASEC names")
Signed-off-by: Jeongjun Park <aha310510@gmail.com>
Link: https://lore.kernel.org/r/20240831054702.364455-1-aha310510@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
kernel/bpf/btf.c