diff options
| author | Alexei Starovoitov | 2019-05-22 05:14:19 +0200 |
|---|---|---|
| committer | Daniel Borkmann | 2019-05-23 16:20:57 +0200 |
| commit | b285fcb760da7aa87d6d31e6c6a4907d82d9299c (patch) | |
| tree | 5c982c12df51d373e440d4267a1c0aaa608301df /kernel/bpf/verifier.c | |
| parent | libbpf: emit diff of mismatched public API, if any (diff) | |
| download | kernel-qcow2-linux-b285fcb760da7aa87d6d31e6c6a4907d82d9299c.tar.gz kernel-qcow2-linux-b285fcb760da7aa87d6d31e6c6a4907d82d9299c.tar.xz kernel-qcow2-linux-b285fcb760da7aa87d6d31e6c6a4907d82d9299c.zip | |
bpf: bump jmp sequence limit
The limit of 1024 subsequent jumps was causing otherwise valid
programs to be rejected. Bump it to 8192 and make the error more verbose.
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Andrii Nakryiko <andriin@fb.com>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Diffstat (limited to 'kernel/bpf/verifier.c')
| -rw-r--r-- | kernel/bpf/verifier.c | 7 |
1 files changed, 4 insertions, 3 deletions
diff --git a/kernel/bpf/verifier.c b/kernel/bpf/verifier.c index 95f9354495ad..3f8b5443cc67 100644 --- a/kernel/bpf/verifier.c +++ b/kernel/bpf/verifier.c @@ -176,7 +176,7 @@ struct bpf_verifier_stack_elem { struct bpf_verifier_stack_elem *next; }; -#define BPF_COMPLEXITY_LIMIT_STACK 1024 +#define BPF_COMPLEXITY_LIMIT_JMP_SEQ 8192 #define BPF_COMPLEXITY_LIMIT_STATES 64 #define BPF_MAP_PTR_UNPRIV 1UL @@ -782,8 +782,9 @@ static struct bpf_verifier_state *push_stack(struct bpf_verifier_env *env, if (err) goto err; elem->st.speculative |= speculative; - if (env->stack_size > BPF_COMPLEXITY_LIMIT_STACK) { - verbose(env, "BPF program is too complex\n"); + if (env->stack_size > BPF_COMPLEXITY_LIMIT_JMP_SEQ) { + verbose(env, "The sequence of %d jumps is too complex.\n", + env->stack_size); goto err; } return &elem->st; |