Re: [PATCH bpf-next v6 4/8] bpftool: Check EVP_Digest when computing excl_prog_hash
Quentin Monnet <[email protected]>
| Newsgroups | org.kernel.vger.linux-security-module,org.kernel.vger.bpf |
|---|---|
| Message-ID | <[email protected]> |
On 08/07/2026 08:53, Daniel Borkmann wrote:
> bpftool_prog_sign() ignores the return value of EVP_Digest(). If the
> digest computation fails (context allocation failure, or a digest
> fetch failure under OpenSSL), EVP_Digest() returns 0 and leaves the
> output buffer untouched, but the function still reports success.
>
> Fixes: 40863f4d6ef2 ("bpftool: Add support for signing BPF programs")
> Signed-off-by: Daniel Borkmann <[email protected]>
Bpftool changes look good to me, thanks for the fix.
Reviewed-by: Quentin Monnet <[email protected]>