summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorLawrence Brakmo <brakmo@fb.com>2017-11-11 09:19:50 +0300
committerDavid S. Miller <davem@davemloft.net>2017-11-11 09:52:41 +0300
commit7863f46bac3a1716f7d547c53f367ddf509f031e (patch)
tree22cf2ed593dad0aab4bf275252b9c906ddf46c83
parent8d6e79d3ce13e34957de87f7584cbf1bcde74c57 (diff)
downloadlinux-7863f46bac3a1716f7d547c53f367ddf509f031e.tar.xz
bpf: Fix tcp_synrto_kern.c sample program
The program was returning -1 in some cases which is not allowed by the verifier any longer. Fixes: 390ee7e29fc8 ("bpf: enforce return code for cgroup-bpf programs") Signed-off-by: Lawrence Brakmo <brakmo@fb.com> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--samples/bpf/tcp_synrto_kern.c6
1 files changed, 4 insertions, 2 deletions
diff --git a/samples/bpf/tcp_synrto_kern.c b/samples/bpf/tcp_synrto_kern.c
index 3c3fc83d81cb..232bb242823e 100644
--- a/samples/bpf/tcp_synrto_kern.c
+++ b/samples/bpf/tcp_synrto_kern.c
@@ -38,8 +38,10 @@ int bpf_synrto(struct bpf_sock_ops *skops)
* if neither port numberis 55601
*/
if (bpf_ntohl(skops->remote_port) != 55601 &&
- skops->local_port != 55601)
- return -1;
+ skops->local_port != 55601) {
+ skops->reply = -1;
+ return 1;
+ }
op = (int) skops->op;