Kumar Kartikeya Dwivedi d1a374a1ae bpf: Limit maximum modifier chain length in btf_check_type_tags
On processing a module BTF of module built for an older kernel, we might
sometimes find that some type points to itself forming a loop. If such a
type is a modifier, btf_check_type_tags's while loop following modifier
chain will be caught in an infinite loop.

Fix this by defining a maximum chain length and bailing out if we spin
any longer than that.

Fixes: eb596b090558 ("bpf: Ensure type tags precede modifiers in BTF")
Reported-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Kumar Kartikeya Dwivedi <memxor@gmail.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Acked-by: Yonghong Song <yhs@fb.com>
Link: https://lore.kernel.org/bpf/20220615042151.2266537-1-memxor@gmail.com
2022-06-15 19:32:12 +02:00
..
2022-03-07 22:19:32 -08:00
2020-03-13 12:49:52 -07:00
2022-05-23 14:31:28 -07:00
2022-05-10 11:20:45 -07:00
2022-05-10 11:20:45 -07:00
2020-08-28 15:41:30 +02:00
2021-12-18 13:27:41 -08:00
2022-05-23 14:31:28 -07:00
2022-05-23 14:31:28 -07:00