]> git.ipfire.org Git - thirdparty/kernel/stable.git/commitdiff
bpf: Check percpu map value size first
authorTao Chen <chen.dylane@gmail.com>
Tue, 10 Sep 2024 14:41:10 +0000 (22:41 +0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 17 Oct 2024 13:11:49 +0000 (15:11 +0200)
[ Upstream commit 1d244784be6b01162b732a5a7d637dfc024c3203 ]

Percpu map is often used, but the map value size limit often ignored,
like issue: https://github.com/iovisor/bcc/issues/2519. Actually,
percpu map value size is bound by PCPU_MIN_UNIT_SIZE, so we
can check the value size whether it exceeds PCPU_MIN_UNIT_SIZE first,
like percpu map of local_storage. Maybe the error message seems clearer
compared with "cannot allocate memory".

Signed-off-by: Jinke Han <jinkehan@didiglobal.com>
Signed-off-by: Tao Chen <chen.dylane@gmail.com>
Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Acked-by: Jiri Olsa <jolsa@kernel.org>
Acked-by: Andrii Nakryiko <andrii@kernel.org>
Link: https://lore.kernel.org/bpf/20240910144111.1464912-2-chen.dylane@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
kernel/bpf/arraymap.c
kernel/bpf/hashtab.c

index c76870bfd816772bf0d1062182c919842ff7def5..2788da290c21619db814a0be6204015c9590bceb 100644 (file)
@@ -74,6 +74,9 @@ int array_map_alloc_check(union bpf_attr *attr)
                 * access the elements.
                 */
                return -E2BIG;
+       /* percpu map value size is bound by PCPU_MIN_UNIT_SIZE */
+       if (percpu && round_up(attr->value_size, 8) > PCPU_MIN_UNIT_SIZE)
+               return -E2BIG;
 
        return 0;
 }
index f53b4f04b935c5506ec296de5de665d250ce0a04..d08fe64e0e453ac13effb34b0dd3e7fb5d169397 100644 (file)
@@ -464,6 +464,9 @@ static int htab_map_alloc_check(union bpf_attr *attr)
                 * kmalloc-able later in htab_map_update_elem()
                 */
                return -E2BIG;
+       /* percpu map value size is bound by PCPU_MIN_UNIT_SIZE */
+       if (percpu && round_up(attr->value_size, 8) > PCPU_MIN_UNIT_SIZE)
+               return -E2BIG;
 
        return 0;
 }