diff options
| author | Alexei Starovoitov <ast@fb.com> | 2017-12-14 17:55:14 -0800 |
|---|---|---|
| committer | Daniel Borkmann <daniel@iogearbox.net> | 2017-12-17 20:34:36 +0100 |
| commit | 60b58afc96c9df71871df2dbad42037757ceef26 (patch) | |
| tree | 5651c4845120fc28c9712f53f31962adfd4abe73 /arch/sparc | |
| parent | 1ea47e01ad6ea0fe99697c54c2413d81dd21fe32 (diff) | |
| download | linux-60b58afc96c9df71871df2dbad42037757ceef26.tar.gz linux-60b58afc96c9df71871df2dbad42037757ceef26.tar.bz2 linux-60b58afc96c9df71871df2dbad42037757ceef26.zip | |
bpf: fix net.core.bpf_jit_enable race
global bpf_jit_enable variable is tested multiple times in JITs,
blinding and verifier core. The malicious root can try to toggle
it while loading the programs. This race condition was accounted
for and there should be no issues, but it's safer to avoid
this race condition.
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Diffstat (limited to 'arch/sparc')
| -rw-r--r-- | arch/sparc/net/bpf_jit_comp_64.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/arch/sparc/net/bpf_jit_comp_64.c b/arch/sparc/net/bpf_jit_comp_64.c index 5765e7e711f7..a2f1b5e774a7 100644 --- a/arch/sparc/net/bpf_jit_comp_64.c +++ b/arch/sparc/net/bpf_jit_comp_64.c @@ -1517,7 +1517,7 @@ struct bpf_prog *bpf_int_jit_compile(struct bpf_prog *prog) u8 *image_ptr; int pass; - if (!bpf_jit_enable) + if (!prog->jit_requested) return orig_prog; tmp = bpf_jit_blind_constants(prog); |