Re: [PATCH bpf v2] bpf: Fix off-by-one boundary validation in arena direct-value access

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to bpf/bpf.git (master)
by Alexei Starovoitov <ast@xxxxxxxxxx>:

On Mon, 27 Apr 2026 02:25:05 +0900 you wrote:
> BPF_MAP_TYPE_ARENA accepts BPF_PSEUDO_MAP_VALUE offsets at exactly
> the end of the arena mapping (off == arena_size). The boundary check
> in arena_map_direct_value_addr() uses `>` instead of `>=`, which
> incorrectly allows a one-past-end pointer to be accepted.
> 
> Change the condition to `>=` to correctly reject offsets that fall
> outside the valid arena user_vm range.
> 
> [...]

Here is the summary with links:
  - [bpf,v2] bpf: Fix off-by-one boundary validation in arena direct-value access
    https://git.kernel.org/bpf/bpf/c/3ac1a467e376

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html