Hello:
This series was applied to bpf/bpf-next.git (master)
by Kumar Kartikeya Dwivedi <[email protected]>:
On Tue, 30 Jun 2026 08:41:25 +0000 you wrote:
> BTF struct walks can relax the top-level struct-size check for trailing
> flexible arrays. That relaxation must not let a PTR_TO_BTF_ID | MEM_ALLOC
> access escape the bytes allocated by bpf_obj_new() or bpf_percpu_obj_new().
>
> Patch 1 rejects MEM_ALLOC BTF walks whose access range reaches past the
> current struct size before applying the flexible-array relaxation. This now
> also applies to struct ID matching used by kfunc and kptr type checks.
> Patch 2 adds a linked_list negative loader case for this path.
>
> [...]
Here is the summary with links:
- [bpf-next,v3,1/2] bpf: Reject MEM_ALLOC BTF accesses past object bounds
https://git.kernel.org/bpf/bpf-next/c/a642e693cecb
- [bpf-next,v3,2/2] selftests/bpf: Cover MEM_ALLOC access past object bounds
https://git.kernel.org/bpf/bpf-next/c/d17f5823ca8c
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
