io_uring/net: allow filtering on IORING_OP_CONNECT

Browse source

This adds custom filtering for IORING_OP_CONNECT, where the target
family is always exposed, and (for AF_INET / AF_INET6) port and
address are exposed. port and v4_addr are in network byte order so
filter authors can compare against on-wire constants.

Skip population unless addr_len covers the populated fields, to
avoid leaking stale io_async_msghdr data on short connects.

Signed-off-by: Shouvik Kar <auxcorelabs@gmail.com>
Link: https://patch.msgid.link/20260512110242.26219-1-auxcorelabs@gmail.com
Signed-off-by: Jens Axboe <axboe@kernel.dk>

...

This commit is contained in:

Shouvik Kar 2026-05-12 16:32:42 +05:30 • committed by Jens Axboe

parent c84701cfc9

commit 899bea8248

4 changed files with 66 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

16

include/uapi/linux/io_uring/bpf_filter.h

View file

41

io_uring/net.c

View file

7

io_uring/net.h

View file

2

io_uring/opdef.c

View file