lkml.org 
[lkml]   [2018]   [Nov]   [12]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    Patch in this message
    /
    From
    Subject[PATCH 4.19 360/361] bpf: wait for running BPF programs when updating map-in-map
    Date
    4.19-stable review patch.  If anyone has any objections, please let me know.

    ------------------

    From: Daniel Colascione <dancol@google.com>

    commit 1ae80cf31938c8f77c37a29bbe29e7f1cd492be8 upstream.

    The map-in-map frequently serves as a mechanism for atomic
    snapshotting of state that a BPF program might record. The current
    implementation is dangerous to use in this way, however, since
    userspace has no way of knowing when all programs that might have
    retrieved the "old" value of the map may have completed.

    This change ensures that map update operations on map-in-map map types
    always wait for all references to the old map to drop before returning
    to userspace.

    Signed-off-by: Daniel Colascione <dancol@google.com>
    Reviewed-by: Joel Fernandes (Google) <joel@joelfernandes.org>
    Signed-off-by: Alexei Starovoitov <ast@kernel.org>
    Signed-off-by: Chenbo Feng <fengc@google.com>
    Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

    ---
    kernel/bpf/syscall.c | 13 +++++++++++++
    1 file changed, 13 insertions(+)

    --- a/kernel/bpf/syscall.c
    +++ b/kernel/bpf/syscall.c
    @@ -741,6 +741,17 @@ err_put:
    return err;
    }

    +static void maybe_wait_bpf_programs(struct bpf_map *map)
    +{
    + /* Wait for any running BPF programs to complete so that
    + * userspace, when we return to it, knows that all programs
    + * that could be running use the new map value.
    + */
    + if (map->map_type == BPF_MAP_TYPE_HASH_OF_MAPS ||
    + map->map_type == BPF_MAP_TYPE_ARRAY_OF_MAPS)
    + synchronize_rcu();
    +}
    +
    #define BPF_MAP_UPDATE_ELEM_LAST_FIELD flags

    static int map_update_elem(union bpf_attr *attr)
    @@ -831,6 +842,7 @@ static int map_update_elem(union bpf_att
    }
    __this_cpu_dec(bpf_prog_active);
    preempt_enable();
    + maybe_wait_bpf_programs(map);
    out:
    free_value:
    kfree(value);
    @@ -883,6 +895,7 @@ static int map_delete_elem(union bpf_att
    rcu_read_unlock();
    __this_cpu_dec(bpf_prog_active);
    preempt_enable();
    + maybe_wait_bpf_programs(map);
    out:
    kfree(key);
    err_put:

    \
     
     \ /
      Last update: 2018-11-12 00:46    [W:2.034 / U:0.060 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site