Merge branch 'bpf-verifier-resilience'

Browse source

Alexei Starovoitov says:

====================
Three patches to improve verifier ability to handle pathological bpf
programs with a lot of branches:

- make sure prog_load syscall can be aborted
- improve branch taken analysis
- introduce per-insn complexity limit for unprivileged programs
====================

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

...

This commit is contained in:

Daniel Borkmann 2018-12-04 17:22:02 +01:00

parent 025dceb0fa ceefbc96fa

commit a92a72a24d

2 changed files with 91 additions and 16 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

103

kernel/bpf/verifier.c

View file

4

tools/testing/selftests/bpf/test_verifier.c

View file