Hello:
This series was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <[email protected]>:
On Sat, 17 Oct 2026 22:38:12 +0800 you wrote:
> A BPF program can read the middle of a u64 field in struct bpf_tcp_sock:
>
> tp = bpf_tcp_sock(listener);
> /* +0x54 is in the middle of the u64 bytes_received */
> unsigned hi = *(unsigned *)((char *)tp + 0x54);
>
> bpf_tcp_sock_is_valid_access() allows this 4-byte read (the default case
> only checks size == 4), but bpf_tcp_sock_convert_ctx_access() only knows
> the field starts and has no idea how to handle such an offset. It emits
> no instruction, cnt stays 0 and the fixup pass trips verifier_bug():
>
> [...]
Here is the summary with links:
- [bpf,v2,1/2] bpf: Fix verifier WARN on narrow read of bpf_tcp_sock u64
fields
https://git.kernel.org/bpf/bpf-next/c/af873495cbcb
- [bpf,v2,2/2] selftests/bpf: Test narrow read of bpf_tcp_sock u64 fields
https://git.kernel.org/bpf/bpf-next/c/5256161e3573
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
