Re: [PATCH bpf] bpf: fix bpf_skb_load_bytes_relative pkt length check

2018-07-29 Thread Alexei Starovoitov
On Sat, Jul 28, 2018 at 10:04 PM, Daniel Borkmann wrote: > The len > skb_headlen(skb) cannot be used as a maximum upper bound > for the packet length since it does not have any relation to the full > linear packet length when filtering is used from upper layers (e.g. > in case of reuseport BPF pro

[PATCH bpf] bpf: fix bpf_skb_load_bytes_relative pkt length check

2018-07-28 Thread Daniel Borkmann
The len > skb_headlen(skb) cannot be used as a maximum upper bound for the packet length since it does not have any relation to the full linear packet length when filtering is used from upper layers (e.g. in case of reuseport BPF programs) as by then skb->data, skb->len already got mangled through