bpf/verifier: fix min/max handling in BPF_SUB
authorEdward Cree <ecree@solarflare.com>
Fri, 21 Jul 2017 13:37:34 +0000 (14:37 +0100)
committerDavid S. Miller <davem@davemloft.net>
Mon, 24 Jul 2017 21:02:55 +0000 (14:02 -0700)
commit9305706c2e808ae59f1eb201867f82f1ddf6d7a6
treed90dcd6dc8670134778a891336b3b3c29f86c51a
parent545722cb0fc993226a01844fb27cf832459eb1c0
bpf/verifier: fix min/max handling in BPF_SUB

We have to subtract the src max from the dst min, and vice-versa, since
 (e.g.) the smallest result comes from the largest subtrahend.

Fixes: 484611357c19 ("bpf: allow access into map value arrays")
Signed-off-by: Edward Cree <ecree@solarflare.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
kernel/bpf/verifier.c