Merge branch 'bpf-verifier-resilience'
authorDaniel Borkmann <daniel@iogearbox.net>
Tue, 4 Dec 2018 16:22:02 +0000 (17:22 +0100)
committerDaniel Borkmann <daniel@iogearbox.net>
Tue, 4 Dec 2018 16:22:03 +0000 (17:22 +0100)
commita92a72a24d48080f6c49bb514c082fbb1e5bf8fc
tree46ba4c3e98ffb4eb565dfce9b0bb2fda5ef35ead
parent025dceb0fab31c912c41b8f32577432231d83e6b
parentceefbc96fa5c5b975d87bf8e89ba8416f6b764d9
Merge branch 'bpf-verifier-resilience'

Alexei Starovoitov says:

====================
Three patches to improve verifier ability to handle pathological bpf
programs with a lot of branches:

- make sure prog_load syscall can be aborted
- improve branch taken analysis
- introduce per-insn complexity limit for unprivileged programs
====================

Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>