Daniel Borkmann a70b506efe bpf: enforce recursion limit on redirects ... Respect the stack's xmit_recursion limit for calls into dev_queue_xmit(). Currently, they are not handeled by the limiter when attached to clsact's egress parent, for example, and a buggy program redirecting it to the same device again could run into stack overflow eventually. It would be good if we could notify an admin to give him a chance to react. We reuse xmit_recursion instead of having one private to eBPF, so that the stack's current recursion depth will be taken into account as well. Follow-up to commit 3896d655f4 ("bpf: introduce bpf_clone_redirect() helper") and 27b29f6305 ("bpf: add bpf_redirect() helper"). Signed-off-by: Daniel Borkmann <daniel@iogearbox.net> Acked-by: Alexei Starovoitov <ast@kernel.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2016-06-10 18:00:57 -07:00
..
6lowpan	6lowpan: move mac802154 header	2016-04-13 10:41:10 +02:00
9p	remove lots of IS_ERR_VALUE abuses	2016-05-27 15:26:11 -07:00
802
8021q	vlan: Propagate MAC address to VLANs	2016-05-31 11:56:48 -07:00
appletalk	appletalk: fix erroneous return value	2016-02-18 14:59:34 -05:00
atm	net/atm: sk_err_soft must be positive	2016-05-23 13:51:10 -07:00
ax25	ax25: add link layer header validation function	2016-03-09 22:13:01 -05:00
batman-adv	batman-adv: initialize ELP orig address on secondary interfaces	2016-05-18 11:49:44 +08:00
bluetooth	net: add netdev_lockdep_set_classes() helper	2016-06-09 13:28:37 -07:00
bridge	bridge: Don't insert unnecessary local fdb entry on changing mac address	2016-06-08 00:31:38 -07:00
caif	net: caif: fix misleading indentation	2016-03-14 13:09:50 -04:00
can	sock: enable timestamping using control messages	2016-04-04 15:50:30 -04:00
ceph	libceph: use %s instead of %pE in dout()s	2016-05-30 23:00:23 +02:00
core	bpf: enforce recursion limit on redirects	2016-06-10 18:00:57 -07:00
dcb
dccp	dccp: do not assume DCCP code is non preemptible	2016-05-02 17:02:25 -04:00
decnet	decnet: Do not build routes to devices without decnet private data.	2016-04-10 23:01:30 -04:00
dns_resolver	KEYS: Add a facility to restrict new links into a keyring	2016-04-11 22:37:37 +01:00
dsa	net: dsa: Initialize CPU port ethtool ops per tree	2016-06-08 11:23:42 -07:00
ethernet	eth: Pull header from first fragment via eth_get_headlen	2016-02-24 13:58:05 -05:00
hsr	net/hsr: Use setup_timer and mod_timer.	2016-05-16 14:00:43 -04:00
ieee802154	net: add netdev_lockdep_set_classes() helper	2016-06-09 13:28:37 -07:00
ipv4	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
ipv6	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
ipx
irda	TTY and Serial driver update for 4.7-rc1	2016-05-20 20:57:27 -07:00
iucv	af_iucv: Validate socket address length in iucv_sock_bind()	2016-01-19 14:21:08 -05:00
kcm	kcm: fix a signedness in kcm_splice_read()	2016-05-19 11:26:51 -07:00
key
l2tp	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
l3mdev	net: Add l3mdev rule	2016-06-08 11:36:02 -07:00
lapb	net/lapb: tuse %*ph to dump buffers	2016-05-29 22:33:25 -07:00
llc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
mac80211	mac80211: fix fast_tx header alignment	2016-05-31 12:14:04 +02:00
mac802154	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next	2016-03-19 10:05:34 -07:00
mpls	skbuff: introduce skb_gso_validate_mtu	2016-06-03 19:37:21 -04:00
netfilter	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
netlabel	netlabel: fix a problem with netlbl_secattr_catmap_setrng()	2016-04-05 16:10:47 -04:00
netlink	net/netlink/af_netlink.h: Remove unused structure.	2016-06-09 22:26:24 -07:00
netrom
nfc	nfc: nci: Add nci_nfcc_loopback to the nci core	2016-05-04 01:48:16 +02:00
openvswitch	openvswitch: Add packet truncation support.	2016-06-10 17:58:03 -07:00
packet	packet: compat support for sock_fprog	2016-06-09 23:41:03 -07:00
phonet	sock: struct proto hash function may error	2016-02-11 03:54:14 -05:00
qrtr	Merge tag 'qcom-soc-for-4.7-2' into net-next	2016-05-17 14:11:19 -04:00
rds	RDS: TCP: fix race windows in send-path quiescence by rds_tcp_accept_one()	2016-06-07 15:10:15 -07:00
rfkill	rfkill: Use switch to demux userspace operations	2016-04-05 10:48:53 +02:00
rose
rxrpc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
sched	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
sctp	sctp: Fix warning in sctp_packet_transmit_chunk()	2016-06-03 22:53:26 -07:00
sunrpc	NFS client updates for Linux 4.7	2016-05-26 10:33:33 -07:00
switchdev	switchdev: pass pointer to fib_info instead of copy	2016-05-17 13:58:49 -04:00
tipc	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-06-10 11:52:24 -07:00
unix	constify security_path_{mkdir,mknod,symlink}	2016-03-28 00:47:27 -04:00
vmw_vsock	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
wimax
wireless	wext: Fix 32 bit iwpriv compatibility issue with 64 bit Kernel	2016-06-09 09:56:11 +02:00
x25	net: fix a kernel infoleak in x25 module	2016-05-09 22:45:33 -04:00
xfrm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2016-05-09 15:59:24 -04:00
compat.c	packet: compat support for sock_fprog	2016-06-09 23:41:03 -07:00
Kconfig	bpf: add generic constant blinding for use in jits	2016-05-16 13:49:32 -04:00
Makefile	net: Add Qualcomm IPC router	2016-05-08 23:46:14 -04:00
socket.c	fs: poll/select/recvmmsg: use timespec64 for timeout events	2016-05-19 19:12:14 -07:00
sysctl_net.c