Hello:
This series was applied to bpf/bpf.git (master)
by Eduard Zingerman <[email protected]>:
On Wed, 29 Jul 2026 15:18:26 +0000 you wrote:
> This series fixes pointer-state propagation for commuted scalar += pointer
> arithmetic in the verifier.
>
> Patch 1 simplifies sanitize_err() before the pointer-state change. Patch 2
> keeps the full pointer register state when the pointer operand is the source
> of the add, preserving fields such as the stack frame number and parent id.
> Patch 3 moves the untrusted PTR_TO_MEM early return after state propagation,
> so scalar += untrusted_pointer remains usable through the probe-read path.
> Patch 4 adds verifier selftests for stack frame number preservation,
> readonly-untrusted memory access, and dynptr data-slice invalidation.
>
> [...]
Here is the summary with links:
- [bpf,v4,1/4] bpf: simplify sanitize_err() signature
https://git.kernel.org/bpf/bpf/c/a15970d916b3
- [bpf,v4,2/4] bpf: Preserve pointer state for commuted arithmetic
https://git.kernel.org/bpf/bpf/c/a4c6f804b44c
- [bpf,v4,3/4] bpf: Propagate untrusted pointer state in commuted arithmetic
https://git.kernel.org/bpf/bpf/c/cdf19b1b3c01
- [bpf,v4,4/4] selftests/bpf: Cover commuted pointer state propagation
https://git.kernel.org/bpf/bpf/c/21596761ff37
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html
