Re: [PATCH net-next] bpf: cgroup skb progs cannot access ld_abs/ind

2017-06-06 Thread David Miller
From: Daniel Borkmann Date: Tue, 6 Jun 2017 18:38:04 +0200 > Commit fb9a307d11d6 ("bpf: Allow CGROUP_SKB eBPF program to > access sk_buff") enabled programs of BPF_PROG_TYPE_CGROUP_SKB > type to use ld_abs/ind instructions. However, at this point, > we cannot use them, since offsets relative to

[PATCH net-next] bpf: cgroup skb progs cannot access ld_abs/ind

2017-06-06 Thread Daniel Borkmann
Commit fb9a307d11d6 ("bpf: Allow CGROUP_SKB eBPF program to access sk_buff") enabled programs of BPF_PROG_TYPE_CGROUP_SKB type to use ld_abs/ind instructions. However, at this point, we cannot use them, since offsets relative to SKF_LL_OFF will end up pointing skb_mac_header(skb) out of bounds sinc