Hello:

This series was applied to bpf/bpf-next.git (master)
by Kumar Kartikeya Dwivedi <[email protected]>:

On Fri, 17 Jul 2026 12:53:46 +0000 you wrote:
> bpf_arena_free_pages() can be called with a scalar arena address. The
> runtime reconstructs a full user address from the arena base and the low
> 32 bits before returning the range to the arena free tree. A scalar one
> page below the arena base can otherwise produce an out-of-domain free-tree
> offset and make a later allocation return an address below the arena
> mapping.
> 
> [...]

Here is the summary with links:
  - [bpf-next,v2,1/2] bpf: Reject arena frees below the arena base
    https://git.kernel.org/bpf/bpf-next/c/b5a71cb2db6d
  - [bpf-next,v2,2/2] selftests/bpf: Cover scalar arena frees below the base
    https://git.kernel.org/bpf/bpf-next/c/770b62a6d389

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html



Reply via email to