Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b285fcb7 authored by Alexei Starovoitov's avatar Alexei Starovoitov Committed by Daniel Borkmann
Browse files

bpf: bump jmp sequence limit 



The limit of 1024 subsequent jumps was causing otherwise valid
programs to be rejected. Bump it to 8192 and make the error more verbose.

Signed-off-by: default avatarAlexei Starovoitov <ast@kernel.org>
Acked-by: default avatarAndrii Nakryiko <andriin@fb.com>
Signed-off-by: default avatarDaniel Borkmann <daniel@iogearbox.net>
parent 9efc7794

kernel/bpf/verifier.c

+4 −3
Original line number Diff line number Diff line
@@ -176,7 +176,7 @@ struct bpf_verifier_stack_elem { 
	struct bpf_verifier_stack_elem *next;

};



#define BPF_COMPLEXITY_LIMIT_STACK	1024

#define BPF_COMPLEXITY_LIMIT_JMP_SEQ	8192

#define BPF_COMPLEXITY_LIMIT_STATES	64



#define BPF_MAP_PTR_UNPRIV	1UL
@@ -782,8 +782,9 @@ static struct bpf_verifier_state *push_stack(struct bpf_verifier_env *env, 
	if (err)

		goto err;

	elem->st.speculative |= speculative;

	if (env->stack_size > BPF_COMPLEXITY_LIMIT_STACK) {

		verbose(env, "BPF program is too complex\n");

	if (env->stack_size > BPF_COMPLEXITY_LIMIT_JMP_SEQ) {

		verbose(env, "The sequence of %d jumps is too complex.\n",

			env->stack_size);

		goto err;

	}

	return &elem->st;