Re: [PATCH bpf-next v2 1/2] bpf: Reject narrower access to pointer ctx fields

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to bpf/bpf-next.git (net)
by Martin KaFai Lau <martin.lau@kernel.org>:

On Tue, 22 Jul 2025 16:32:32 +0200 you wrote:
> The following BPF program, simplified from a syzkaller repro, causes a
> kernel warning:
> 
>     r0 = *(u8 *)(r1 + 169);
>     exit;
> 
> With pointer field sk being at offset 168 in __sk_buff. This access is
> detected as a narrower read in bpf_skb_is_valid_access because it
> doesn't match offsetof(struct __sk_buff, sk). It is therefore allowed
> and later proceeds to bpf_convert_ctx_access. At that point,
> target_size is null and the verifier errors with a kernel warning and:
> 
> [...]

Here is the summary with links:
  - [bpf-next,v2,1/2] bpf: Reject narrower access to pointer ctx fields
    https://git.kernel.org/bpf/bpf-next/c/e09299225d5b
  - [bpf-next,v2,2/2] selftests/bpf: Test invalid narrower ctx load
    https://git.kernel.org/bpf/bpf-next/c/ba578b87fe2b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html