]> asedeno.scripts.mit.edu Git - linux.git/commit
projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7df737e) | patch
bpf: drop bpf_verifier_lock
authorAlexei Starovoitov <ast@kernel.org>
Fri, 19 Apr 2019 14:44:55 +0000 (07:44 -0700)
committerDaniel Borkmann <daniel@iogearbox.net>
Mon, 22 Apr 2019 23:50:43 +0000 (01:50 +0200)
commit45a73c17bfb92c3ceebedc80a750ef2c2931c26b
treeb87c6007123c872988d8939f8206a8ec8907bb39tree | snapshot
parent7df737e991069d75eec1ded1c8b37e81b8c54df9commit | diff
bpf: drop bpf_verifier_lock

Drop bpf_verifier_lock for root to avoid being DoS-ed by unprivileged.
The BPF verifier is now fully parallel.
All unpriv users are still serialized by bpf_verifier_lock to avoid
exhausting kernel memory by running N parallel verifications.

Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
kernel/bpf/verifier.c diff | blob | history
local clone of linux.git