Re: [PATCH bpf-next v6 4/8] bpftool: Check EVP_Digest when computing excl_prog_hash
From: Quentin Monnet <qmo@kernel.org>
Date: 2026-07-08 08:55:22
Also in:
bpf
On 08/07/2026 08:53, Daniel Borkmann wrote:
bpftool_prog_sign() ignores the return value of EVP_Digest(). If the
digest computation fails (context allocation failure, or a digest
fetch failure under OpenSSL), EVP_Digest() returns 0 and leaves the
output buffer untouched, but the function still reports success.
Fixes: 40863f4d6ef2 ("bpftool: Add support for signing BPF programs")
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>Bpftool changes look good to me, thanks for the fix. Reviewed-by: Quentin Monnet <qmo@kernel.org>