bpf: always allocate at least 16 bytes for setsockopt hook
authorStanislav Fomichev <sdf@google.com>
Mon, 29 Jul 2019 21:51:10 +0000 (14:51 -0700)
committerAlexei Starovoitov <ast@kernel.org>
Thu, 1 Aug 2019 20:55:52 +0000 (13:55 -0700)
commit9babe825da769cfbd7080f95e6bddbe98ce6b95d
treea801f1b825ea6f3eef8cdf1a9306984f91426747
parenta98bf57391a24a68ec8381b9d35b60c2bee79150
bpf: always allocate at least 16 bytes for setsockopt hook

Since we always allocate memory, allocate just a little bit more
for the BPF program in case it need to override user input with
bigger value. The canonical example is TCP_CONGESTION where
input string might be too small to override (nv -> bbr or cubic).

16 bytes are chosen to match the size of TCP_CA_NAME_MAX and can
be extended in the future if needed.

Signed-off-by: Stanislav Fomichev <sdf@google.com>
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
kernel/bpf/cgroup.c