Re: [PATCH bpf v2 0/2] bpf: Reject negative optlen in cgroup getsockopt hook

[patchwork-bot+netdevbpf]

Hello:

This series was applied to bpf/bpf-next.git (master)
by Daniel Borkmann <daniel@xxxxxxxxxxxxx>:

On Tue, 11 Aug 2026 23:19:06 +0900 you wrote:
> A cgroup getsockopt BPF program can set a negative optlen after the
> kernel getsockopt handler has run. For TCP_ZEROCOPY_RECEIVE, the
> kernel-buffer hook did not validate the lower bound and the negative
> value could reach copy_to_sockptr() as a size_t.
> 
> Patch 1 rejects negative optlen values in the kernel-buffer hook.
> Patch 2 adds a test_progs selftest that reproduces the issue through
> TCP_ZEROCOPY_RECEIVE.
> 
> [...]

Here is the summary with links:
  - [bpf,v2,1/2] bpf: Reject negative optlen in cgroup getsockopt hook
    https://git.kernel.org/bpf/bpf-next/c/1b5aacd5b241
  - [bpf,v2,2/2] selftests/bpf: Exercise negative optlen in cgroup getsockopt hook
    https://git.kernel.org/bpf/bpf-next/c/6b0835ac79b2

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html