Jakub Kicinski a2a7d57010 bpf: write back the verifier log buffer as it gets filled ... Verifier log buffer can be quite large (up to 16MB currently). As Eric Dumazet points out if we allow multiple verification requests to proceed simultaneously, malicious user may use the verifier as a way of allocating large amounts of unswappable memory to OOM the host. Switch to a strategy of allocating a smaller buffer (1024B) and writing it out into the user buffer after every print. While at it remove the old BUG_ON(). This is in preparation of the global verifier lock removal. Signed-off-by: Jakub Kicinski <jakub.kicinski@netronome.com> Reviewed-by: Simon Horman <simon.horman@netronome.com> Acked-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Daniel Borkmann <daniel@iogearbox.net> Signed-off-by: David S. Miller <davem@davemloft.net>		2017-10-10 12:30:16 -07:00
..
arraymap.c	bpf: perf event change needed for subsequent bpf helpers	2017-10-07 23:05:57 +01:00
bpf_lru_list.c	bpf: lru: Lower the PERCPU_NR_SCANS from 16 to 4	2017-04-17 13:55:52 -04:00
bpf_lru_list.h	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
cgroup.c	bpf: introduce BPF_PROG_QUERY command	2017-10-04 16:05:05 -07:00
core.c	bpf: Append prog->aux->name in bpf_get_prog_name()	2017-10-07 23:29:39 +01:00
devmap.c	bpf: devmap: pass on return value of bpf_map_precharge_memlock	2017-09-18 16:53:30 -07:00
disasm.c	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
disasm.h	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
hashtab.c	bpf: Only set node->ref = 1 if it has not been set	2017-09-01 09:57:39 -07:00
helpers.c	bpf: rename ARG_PTR_TO_STACK	2017-01-09 16:56:27 -05:00
inode.c	netfilter: xt_bpf: Fix XT_BPF_MODE_FD_PINNED mode of 'xt_bpf_info_v1'	2017-10-09 15:18:04 +02:00
lpm_trie.c	bpf: Optimize lpm trie delete	2017-09-25 14:37:54 -07:00
Makefile	bpf: move instruction printing into a separate file	2017-10-10 12:30:16 -07:00
map_in_map.c	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
map_in_map.h	bpf: Add syscall lookup support for fd array and htab	2017-06-29 13:13:25 -04:00
percpu_freelist.c	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
percpu_freelist.h	bpf: introduce percpu_freelist	2016-03-08 15:28:31 -05:00
sockmap.c	bpf: rename bpf_compute_data_end into bpf_compute_data_pointers	2017-09-26 13:36:44 -07:00
stackmap.c	bpf: Allow selecting numa node during map creation	2017-08-19 21:35:43 -07:00
syscall.c	bpf: Change bpf_obj_name_cpy() to better ensure map's name is init by 0	2017-10-07 23:29:39 +01:00
tnum.c	bpf/verifier: track signed and unsigned min/max values	2017-08-08 17:51:34 -07:00
verifier.c	bpf: write back the verifier log buffer as it gets filled	2017-10-10 12:30:16 -07:00