diff options
| author | Daniel Borkmann <daniel@iogearbox.net> | 2026-09-10 20:56:04 +0200 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2026-09-10 16:57:28 -0700 |
| commit | 2936aed9b02162df7fbe08fcd6bfbb3270ad9f95 (patch) | |
| tree | 86c16a0a69b094aa37f250b0dfdd800b95f254db /tools/perf/scripts/python | |
| parent | a903f145a8914d9ecba009b398d135154e4a5d94 (diff) | |
| download | linux-next-2936aed9b02162df7fbe08fcd6bfbb3270ad9f95.tar.gz linux-next-2936aed9b02162df7fbe08fcd6bfbb3270ad9f95.zip | |
bpf: Clear scalar delta on narrowing stack spill
check_stack_write_fixed_off() breaks the scalar link on a narrowing spill
by zeroing the id of the destination stack slot, but leaves the delta in
place. save_register_state() has just copied the source register verbatim,
so the slot keeps the BPF_ADD_CONST delta of a register it is no longer
linked to. This is the same shape as the case addressed in 1b327732c846
("bpf: Clear delta when clearing reg id for non-{add,sub} ops"). Unlike
the latter, no miscomputation seems reachable, so mainly consistency.
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/r/20260910185604.44949-1-daniel@iogearbox.net
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'tools/perf/scripts/python')
0 files changed, 0 insertions, 0 deletions