Commit 3f750706 authored May 23, 2019 by Ard Biesheuvel Committed by Catalin Marinas Jun 24, 2019

arm64: bpf: do not allocate executable memory



The BPF code now takes care of mapping the code pages executable
after mapping them read-only, to ensure that no RWX mapped regions
are needed, even transiently. This means we can drop the executable
permissions from the mapping at allocation time.

Acked-by: Will Deacon <will@kernel.org>
Signed-off-by: Ard Biesheuvel <ard.biesheuvel@arm.com>
Signed-off-by: Catalin Marinas <catalin.marinas@arm.com>

parent f83b4f88

arch/arm64/net/bpf_jit_comp.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -981,7 +981,7 @@ void *bpf_jit_alloc_exec(unsigned long size)
		{
		return __vmalloc_node_range(size, PAGE_SIZE, BPF_JIT_REGION_START,
		BPF_JIT_REGION_END, GFP_KERNEL,
		PAGE_KERNEL_EXEC, 0, NUMA_NO_NODE,
		PAGE_KERNEL, 0, NUMA_NO_NODE,
		__builtin_return_address(0));
		}