Messages in this thread | | | Subject | Re: [PATCH v17 08/15] seccomp: add system call filtering using BPF | From | Eric Dumazet <> | Date | Tue, 10 Apr 2012 12:34:34 +0200 |
| |
On Mon, 2012-04-09 at 04:22 +1000, Indan Zupancic wrote: > On Sat, April 7, 2012 06:23, Andrew Morton wrote: > > > > I think this gives userspace an easy way of causing page allocation > > failure warnings, by permitting large kmalloc() attempts. Add > > __GFP_NOWARN? > > Max is 32kb. sk_attach_filter() in net/core/filter.c is worse, > it allocates up to 512kb before even checking the length. >
I dont think so.
sk_attach_filter() uses sk_malloc() and it does a check.
# cat /proc/sys/net/core/optmem_max 20480
Of course you can change the limit on your machine.
| |