seccomp, bpf: disable preemption before calling into bpf prog (e80d02dd) · Commits · 戴 / test

All BPF programs must be called with preemption disabled. Fixes: ("bpf: check that BPF programs run with preemption disabled") Reported-by:

kernel/seccomp.c

+2 −0

Original line number	Diff line number	Diff line
		@@ -267,6 +267,7 @@ static u32 seccomp_run_filters(const struct seccomp_data *sd,
		* All filters in the list are evaluated and the lowest BPF return
		* value always takes priority (ignoring the DATA).
		*/
		preempt_disable();
		for (; f; f = f->prev) {
		u32 cur_ret = BPF_PROG_RUN(f->prog, sd);

		@@ -275,6 +276,7 @@ static u32 seccomp_run_filters(const struct seccomp_data *sd,
		*match = f;
		}
		}
		preempt_enable();
		return ret;
		}
		#endif /* CONFIG_SECCOMP_FILTER */