diff options
author | Lawrence Brakmo <brakmo@fb.com> | 2017-11-10 22:19:50 -0800 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2017-11-11 15:52:41 +0900 |
commit | 7863f46bac3a1716f7d547c53f367ddf509f031e (patch) | |
tree | 22cf2ed593dad0aab4bf275252b9c906ddf46c83 | |
parent | 8d6e79d3ce13e34957de87f7584cbf1bcde74c57 (diff) | |
download | linux-7863f46bac3a1716f7d547c53f367ddf509f031e.tar.bz2 |
bpf: Fix tcp_synrto_kern.c sample program
The program was returning -1 in some cases which is not allowed
by the verifier any longer.
Fixes: 390ee7e29fc8 ("bpf: enforce return code for cgroup-bpf programs")
Signed-off-by: Lawrence Brakmo <brakmo@fb.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r-- | samples/bpf/tcp_synrto_kern.c | 6 |
1 files changed, 4 insertions, 2 deletions
diff --git a/samples/bpf/tcp_synrto_kern.c b/samples/bpf/tcp_synrto_kern.c index 3c3fc83d81cb..232bb242823e 100644 --- a/samples/bpf/tcp_synrto_kern.c +++ b/samples/bpf/tcp_synrto_kern.c @@ -38,8 +38,10 @@ int bpf_synrto(struct bpf_sock_ops *skops) * if neither port numberis 55601 */ if (bpf_ntohl(skops->remote_port) != 55601 && - skops->local_port != 55601) - return -1; + skops->local_port != 55601) { + skops->reply = -1; + return 1; + } op = (int) skops->op; |