Skip to content

devices: work around kernel OOB write in BPF_PROG_QUERY #69

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
kolyshkin wants to merge 1 commit into
base: main
Choose a base branch
from
+9 −0
Open

devices: work around kernel OOB write in BPF_PROG_QUERY #69

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 9 additions & 0 deletions devices/ebpf_linux.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,15 @@ func findAttachedCgroupDeviceFilters(dirFd int) (_ []*ebpf.Program, retErr error
AttachFlags uint32
ProgIds uint64 // __aligned_u64
ProgCnt uint32
// Kernels v6.17+ have a bug: they write the Revision field no matter
// what size is provided to bpf(2). This was fixed in kernel v7.2
// (commit 21c4b99b27f3). None of the fields below are used here,
// but they must be declared to work around the kernel bug.
_ uint32 // padding
ProgAttachFlags uint64 // __aligned_u64
LinkIDs uint64 // __aligned_u64
LinkAttachFlags uint64 // __aligned_u64
Revision uint64
}

// Currently you can only have 64 eBPF programs attached to a cgroup.
Expand Down