diff options
| author | John Fastabend <[email protected]> | 2018-09-18 16:01:44 +0000 |
|---|---|---|
| committer | Daniel Borkmann <[email protected]> | 2018-09-22 00:46:41 +0000 |
| commit | 5607fff303636d48b88414c6be353d9fed700af2 (patch) | |
| tree | be7338b7007ecd330061ccbe9b00e339575c6f60 /drivers/net/xen-netback/interface.c | |
| parent | tools: bpf: fix license for a compat header file (diff) | |
| download | kernel-5607fff303636d48b88414c6be353d9fed700af2.tar.gz kernel-5607fff303636d48b88414c6be353d9fed700af2.zip | |
bpf: sockmap only allow ESTABLISHED sock state
After this patch we only allow socks that are in ESTABLISHED state or
are being added via a sock_ops event that is transitioning into an
ESTABLISHED state. By allowing sock_ops events we allow users to
manage sockmaps directly from sock ops programs. The two supported
sock_ops ops are BPF_SOCK_OPS_PASSIVE_ESTABLISHED_CB and
BPF_SOCK_OPS_ACTIVE_ESTABLISHED_CB.
Similar to TLS ULP this ensures sk_user_data is correct.
Reported-by: Eric Dumazet <[email protected]>
Fixes: 1aa12bdf1bfb ("bpf: sockmap, add sock close() hook to remove socks")
Signed-off-by: John Fastabend <[email protected]>
Acked-by: Yonghong Song <[email protected]>
Signed-off-by: Daniel Borkmann <[email protected]>
Diffstat (limited to 'drivers/net/xen-netback/interface.c')
0 files changed, 0 insertions, 0 deletions