mirror of
https://github.com/edk2-porting/linux-next.git
synced 2025-01-16 17:43:56 +08:00
695c12147a
Prepare for having multi-prog attachments for new netns attach types by storing programs to run in a bpf_prog_array, which is well suited for iterating over programs and running them in sequence. After this change bpf(PROG_QUERY) may block to allocate memory in bpf_prog_array_copy_to_user() for collected program IDs. This forces a change in how we protect access to the attached program in the query callback. Because bpf_prog_array_copy_to_user() can sleep, we switch from an RCU read lock to holding a mutex that serializes updaters. Because we allow only one BPF flow_dissector program to be attached to netns at all times, the bpf_prog_array pointed by net->bpf.run_array is always either detached (null) or one element long. No functional changes intended. Signed-off-by: Jakub Sitnicki <jakub@cloudflare.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Acked-by: Martin KaFai Lau <kafai@fb.com> Acked-by: Andrii Nakryiko <andriin@fb.com> Link: https://lore.kernel.org/bpf/20200625141357.910330-3-jakub@cloudflare.com
22 lines
498 B
C
22 lines
498 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
/*
|
|
* BPF programs attached to network namespace
|
|
*/
|
|
|
|
#ifndef __NETNS_BPF_H__
|
|
#define __NETNS_BPF_H__
|
|
|
|
#include <linux/bpf-netns.h>
|
|
|
|
struct bpf_prog;
|
|
struct bpf_prog_array;
|
|
|
|
struct netns_bpf {
|
|
/* Array of programs to run compiled from progs or links */
|
|
struct bpf_prog_array __rcu *run_array[MAX_NETNS_BPF_ATTACH_TYPE];
|
|
struct bpf_prog *progs[MAX_NETNS_BPF_ATTACH_TYPE];
|
|
struct bpf_link *links[MAX_NETNS_BPF_ATTACH_TYPE];
|
|
};
|
|
|
|
#endif /* __NETNS_BPF_H__ */
|