diff options
| author |   Alexei Starovoitov <ast@kernel.org> | 2026-04-05 18:45:05 -0700 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2026-04-05 18:45:06 -0700 |
| commit | c6095cb9684e278a59cb5a25deff6bfef9aecf27 (patch) | |
| tree | 315465f33f330ac4aa8ef2009651b978dccbb505 /samples/kobject/ssh:/git@git.zx2c4.com | |
| parent | Merge branch 'bpf-fix-torn-writes-in-non-prealloc-htab-with-bpf_f_lock' (diff) | |
| parent | selftests/bpf: add get_next_key boundary test for cgroup_storage (diff) | |
Merge branch 'bpf-fix-end-of-list-detection-in-cgroup_storage_get_next_key'
Weiming Shi says:
====================
bpf: fix end-of-list detection in cgroup_storage_get_next_key()
list_next_entry() never returns NULL, so the NULL check in
cgroup_storage_get_next_key() is dead code. When iterating past the last
element, the function reads storage->key from a bogus pointer that aliases
internal map fields and copies the result to userspace.
Patch 1 replaces the NULL check with list_entry_is_head() so the function
correctly returns -ENOENT when there are no more entries.
Patch 2 adds a selftest to cover this corner case, as suggested by Sun Jian
and Paul Chaignon.
v2:
- Added selftest (Paul Chaignon)
- Collected Reviewed-by and Acked-by tags
====================
Link: https://patch.msgid.link/20260403132951.43533-1-bestswngs@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'samples/kobject/ssh:/git@git.zx2c4.com')
0 files changed, 0 insertions, 0 deletions