Re: [PATCH] bpf: Fix out-of-bounds write in trie_get_next_key()
From: Byeonguk Jeong
Date: Wed Oct 23 2024 - 03:30:24 EST
On Wed, Oct 23, 2024 at 10:03:44AM +0800, Hou Tao wrote:
>
> Without the fix, there will be KASAN report as show below when dumping
> all keys in the lpm-trie through bpf_map_get_next_key().
Thank you for testing.
>
> However, I have a dumb question: does it make sense to reject the
> element with prefixlen = 0 ? Because I can't think of a use case where a
> zero-length prefix will be useful.
With prefixlen = 0, it would always return -ENOENT, I think. Maybe it is
good to reject it earlier!