]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 518744c) | patch
bpf: drop bpf_verifier_lock
authorAlexei Starovoitov <ast@kernel.org>
Fri, 19 Apr 2019 14:44:55 +0000 (07:44 -0700)
committerDaniel Borkmann <daniel@iogearbox.net>
Mon, 22 Apr 2019 23:50:43 +0000 (01:50 +0200)
commitd0263c549f82a2ff2fb4128018c4afce671f3a8e
treeb87c6007123c872988d8939f8206a8ec8907bb39tree | snapshot
parent518744c8afdab1b5b8b7c561bd2a7c659bc84920commit | diff
bpf: drop bpf_verifier_lock

Drop bpf_verifier_lock for root to avoid being DoS-ed by unprivileged.
The BPF verifier is now fully parallel.
All unpriv users are still serialized by bpf_verifier_lock to avoid
exhausting kernel memory by running N parallel verifications.

Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
kernel/bpf/verifier.c diff | blob | history
Linux Kernel Source Tree.