On Thu, Jan 3, 2019 at 1:08 AM Alexei Starovoitov <alexei.starovoi...@gmail.com> wrote: > On Thu, Jan 03, 2019 at 12:58:26AM +0100, Daniel Borkmann wrote: > > This set fixes an out of bounds case under speculative execution > > by implementing masking of pointer alu into the verifier. For > > details please see the individual patches. > > > > Thanks! > > > > v2 -> v3: > > - 8/9: change states_equal condition into old->speculative && > > !cur->speculative, thanks Jakub! > > - 8/9: remove incorrect speculative state test in > > propagate_liveness(), thanks Jakub! > > v1 -> v2: > > - Typo fixes in commit msg and a comment, thanks David! > > Applied, Thanks
This series and the followup fix ("bpf: fix sanitation of alu op with pointer / scalar type from different paths") have been in Linus' tree for six days, but from what I can tell, they aren't queued up for stable yet. @davem: Are you going to send this through stable, or is this only going to be in 5.0?