Andrey Ignatov
b9e0d4095d
BACKPORT: bpf: Check attach type at prog load time ...
== The problem ==
There are use-cases when a program of some type can be attached to
multiple attach points and those attach points must have different
permissions to access context or to call helpers.
E.g. context structure may have fields for both IPv4 and IPv6 but it
doesn't make sense to read from / write to IPv6 field when attach point
is somewhere in IPv4 stack.
Same applies to BPF-helpers: it may make sense to call some helper from
some attach point, but not from other for same prog type.
== The solution ==
Introduce `expected_attach_type` field in in `struct bpf_attr` for
`BPF_PROG_LOAD` command. If scenario described in "The problem" section
is the case for some prog type, the field will be checked twice:
1) At load time prog type is checked to see if attach type for it must
be known to validate program permissions correctly. Prog will be
rejected with EINVAL if it's the case and `expected_attach_type` is
not specified or has invalid value.
2) At attach time `attach_type` is compared with `expected_attach_type`,
if prog type requires to have one, and, if they differ, attach will
be rejected with EINVAL.
The `expected_attach_type` is now available as part of `struct bpf_prog`
in both `bpf_verifier_ops->is_valid_access()` and
`bpf_verifier_ops->get_func_proto()` () and can be used to check context
accesses and calls to helpers correspondingly.
Initially the idea was discussed by Alexei Starovoitov <ast@fb.com> and
Daniel Borkmann <daniel@iogearbox.net> here:
https://marc.info/?l=linux-netdev&m=152107378717201&w=2
Change-Id: Iea40e7ab753ac77256b64a464944e73daacee5db
Signed-off-by: Andrey Ignatov <rdna@fb.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Sorayukii <sorayukii69@gmail.com>
2026-05-15 17:56:14 +07:00
UPSTREAM: binder: add flag to clear buffer on txn complete
2022-11-30 02:27:36 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
install several missing uapi headers
2020-08-21 11:01:49 +02:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge "Merge android-4.9.227(892702560) into msm-4.9"
2020-07-08 02:20:36 -07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
NFC: Add snapshot of NQxxx NFC driver
2017-05-26 15:05:08 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-18.1-caf-sdm845
2021-04-26 01:27:02 +03:00
uapi: export all headers under uapi directories
2020-04-09 15:39:35 +05:30
audit: fix undefined behavior in bit shift for AUDIT_BIT
2022-12-08 11:15:39 +01:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
soc: qcom: bgdaemon: add uevent support for TWM BG
2020-03-16 20:57:55 -07:00
BACKPORT: bpf: Check attach type at prog load time
2026-05-15 17:56:14 +07:00
UPSTREAM: bpf: add comments to BPF ld/ldx sizes
2026-05-15 17:56:05 +07:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
2022-11-25 17:35:35 +01:00
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
cec: move cec headers to uapi directory
2020-06-22 14:15:29 +05:30
uapi linux/coda_psdev.h: move upc_req definition from uapi to kernel side headers
2019-08-06 18:29:38 +02:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
Merge android-4.9.219(6ee8be4) into msm-4.9
2020-04-28 15:06:13 +08:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
BACKPORT: sock: add MSG_ZEROCOPY
2026-05-15 17:55:01 +07:00
esoc: Add provision to handle shutdown request in userspace
2017-10-27 16:39:16 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
eventpoll.h: fix epoll event masks
2018-03-22 09:17:38 +01:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include: fib: Remove the deprecated UID fields
2017-09-06 15:09:16 -07:00
crypto: msm: Add QTI crypto drivers
2017-04-11 16:49:21 -07:00
Merge android-4.9.149 ( ed0b11d) into msm-4.9
2019-02-12 11:18:51 +08:00
Merge android-4.9.181 ( 6ccab84) into msm-4.9
2019-08-07 15:58:44 +08:00
input: misc: hbtp_input: support active blob flag
2018-02-28 14:42:44 -08:00
Merge android-4.9.160 ( fd5657a) into msm-4.9
2019-03-21 14:06:06 +08:00
BACKPORT: xdp: add reporting of offload mode
2026-05-15 17:54:51 +07:00
net: l2tp: deprecate PPPOL2TP_MSG_* in favour of L2TP_MSG_*
2020-05-27 16:41:53 +02:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
Revert "ANDROID: ALSA: jack: Update supported jack switch types"
2026-01-06 16:27:45 +02:00
UPSTREAM: HID: sony: Report DS4 motion sensors through a separate device
2018-10-24 17:03:59 -07:00
netfilter: nf_defrag_ipv4: Add sysctl to disable per interface
2018-01-10 19:42:37 -07:00
msm: ipa: add support for HW stats to QMI
2018-05-04 16:09:13 +05:30
BACKPORT: ipv6: implement dataplane support for rthdr type 4 (Segment Routing Header)
2026-05-15 17:54:16 +07:00
net: ipv6: RTF_PCPU should not be settable from userspace
2017-05-03 08:36:36 -07:00
install several missing uapi headers
2020-08-21 11:01:49 +02:00
UPSTREAM: kcov: support comparison operands collection
2017-12-18 15:21:35 -08:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
x86/kvm/hyper-v: Explicitly align hcall param for kvm_hyperv_exit
2020-06-20 10:24:14 +02:00
uapi: fix linux/if_pppol2tp.h userspace compilation errors
2020-06-03 08:16:33 +02:00
uapi/if_ether.h: move __UAPI_DEF_ETHHDR libc define
2019-02-20 10:18:35 +01:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
BACKPORT: loop: Add LOOP_CONFIGURE ioctl
2020-08-11 09:26:34 +02:00
BACKPORT: bpf: BPF for lightweight tunnel infrastructure
2026-05-15 17:54:17 +07:00
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
msm: mhi_dev: Add cv2x HW channel support in MHI driver
2019-07-30 05:53:20 -07:00
uapi: move constants from <linux/kernel.h> to <linux/const.h>
2021-01-09 13:35:49 +01:00
block: Move SECTOR_SIZE and SECTOR_SHIFT definitions into <linux/blkdev.h>
2020-09-12 11:47:36 +02:00
uapi: Add missing header file msm_dsps.h.
2017-03-23 13:52:08 -07:00
msm: ipa3: Send pipe info based on tethering protocol
2020-04-02 23:57:00 +05:30
msm: kgsl: Log context type in case of GPU faults
2018-10-15 16:06:11 +05:30
msm: mdss: Allow resource update during secure UI
2020-03-05 05:50:00 +05:30
msm: mdss: Add support to update backlight when display commit
2018-06-20 17:51:10 +05:30
uapi: Add display-related uapi headers for Android compilation
2017-03-23 13:55:19 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
include: Add snapshot of vidc encoder and decoder headers in msm-4.9
2018-05-22 20:34:11 -07:00
UPSTREAM: net: add new control message for incoming HW-timestamped packets
2026-05-15 17:55:02 +07:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
uapi: fix linux/nfc.h userspace compilation errors
2022-01-05 12:31:25 +01:00
nilfs2: do not use unexported cpu_to_le32()/le32_to_cpu() in uapi header
2019-07-21 09:06:04 +02:00
nl80211: add WPA3 definition for SAE authentication
2024-12-13 22:46:35 +01:00
drivers misc: add okl4-link-shbuf driver
2018-12-09 18:41:17 -08:00
Merge remote-tracking branch 'common/android-4.9-q' into lineage-18.1-caf-sdm845
2021-12-27 02:07:39 +02:00
UPSTREAM: bpf/tracing: allow user space to query prog array on the same tp
2026-05-15 17:55:59 +07:00
UPSTREAM: bpf: expose prog id for cls_bpf and act_bpf
2026-05-15 17:54:51 +07:00
uapi: includes linux/types.h before exporting files
2020-08-21 11:01:49 +02:00
Merge android-4.9.176 ( e0625b3) into msm-4.9
2019-06-13 14:31:04 +08:00
arm/arm64: KVM: Add PSCI_VERSION helper
2018-04-20 08:21:04 +02:00
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
include: uapi: Add QBG UAPI headers
2021-06-29 14:18:55 +05:30
qbt1000: Add support for fingerprint gestures
2018-02-14 20:40:01 +05:30
msm: crypto: Add support for map and unmap ioctls
2018-04-20 10:56:50 -07:00
power: qpnp-qg: Add support for PMI632 v2.0
2018-06-18 11:37:25 +05:30
power: qpnp-qg: Add support for voltage-only mode of QG
2019-01-17 17:27:28 +05:30
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
ice: msm: Encrypt only userdata
2018-06-01 14:39:35 +05:30
random: ignore GRND_RANDOM in getentropy(2)
2022-06-25 11:45:02 +02:00
uapi: fix linux/rds.h userspace compilation errors
2017-11-21 09:23:28 +01:00
msm: ipa: Add support for per client lan statistics
2017-10-30 23:23:51 +05:30
UPSTREAM: net: ipv4: add new RTM_F_FIB_MATCH flag for use with RTM_GETROUTE
2026-05-15 17:54:44 +07:00
BACKPORT: clone: add CLONE_PIDFD
2019-09-03 13:44:48 -07:00
seccomp: Add filter flag to opt-out of SSB mitigation
2018-05-22 16:58:01 +02:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
seemp: read hypervisor rooting detections
2017-07-12 10:12:23 -07:00
UPSTREAM: ipv6: sr: remove cleanup flag and fix HMAC computation
2026-05-15 17:54:25 +07:00
UPSTREAM: ipv6: sr: add code base for control plane support of SR-IPv6
2026-05-15 17:54:16 +07:00
BACKPORT: ipv6: sr: add core files for SR HMAC support
2026-05-15 17:54:16 +07:00
UPSTREAM: ipv6: sr: add support for SRH encapsulation and injection with lwtunnels
2026-05-15 17:54:16 +07:00
serial: 8250: Define RX trigger levels for OxSemi 950 devices
2021-09-22 11:43:06 +02:00
uapi: Add UAPI headers for slatecom_interface driver
2021-09-09 15:16:49 +05:30
net/tcp_fastopen: Add snmp counter for blackhole detection
2026-05-15 17:55:39 +07:00
net: Add snapshot of sockev module
2017-03-29 16:54:34 -07:00
spcom: move SPCOM_MAX_CHANNELS define to uapi/linux/spcom.h
2017-08-13 08:35:44 -07:00
statx: Add a system call to make enhanced file info available
2025-07-10 14:15:39 -04:00
include/uapi/linux/swab: Fix potentially missing __always_inline
2023-01-07 12:07:28 +01:00
Merge branch 'android-4.9-q' of https://android.googlesource.com/kernel/common into lineage-17.1-caf-sdm845
2021-01-17 05:04:08 +02:00
BACKPORT: delayacct: track delays from thrashing cache pages
2019-03-22 14:08:39 -07:00
UPSTREAM: tcp_diag: report TCP MD5 signing keys and addresses
2026-05-15 17:55:21 +07:00
BACKPORT: tee: add register user memory
2018-02-21 15:40:42 +00:00
Revert "rtc: alarm: Add power-on alarm feature"
2017-11-01 01:19:42 -07:00
tipc: Avoid copying bytes beyond the supplied data
2019-06-11 12:22:34 +02:00
BACKPORT: tls: kernel TLS support
2026-05-15 17:54:50 +07:00
tty: actually undefine superseded ASYNC flags
2021-05-22 10:40:24 +02:00
msm: vidc: Add support for setting dynamic QP range
2019-05-19 14:09:11 +05:30
Merge remote-tracking branch 'common/android-4.9-q' into android13-4.9-sdm845
2022-11-09 19:25:28 +02:00
power: vm-bms: Add snapshot of qpnp-vm-bms driver
2018-05-02 17:19:36 +05:30
UPSTREAM: wireguard: global: fix spelling mistakes in comments
2021-03-23 02:09:21 +02:00
BACKPORT: xfrm: Add a new lookup key to match xfrm interfaces.
2018-10-26 21:39:51 -07:00
b9e0d4095d