From 8b138da62f3ef370bebaaed7385020993bb787ae Mon Sep 17 00:00:00 2001 From: Daniel Borkmann Date: Mon, 16 Dec 2013 11:45:00 +0100 Subject: [PATCH] bpf_dbg: always close socket in bpf_runnable We must not leave the socket intact in bpf_runnable(). The socket is used to test if the filter code is being accepted by the kernel or not. So right after we do the setsockopt(2), we need to close it again. Signed-off-by: Daniel Borkmann Signed-off-by: David S. Miller --- tools/net/bpf_dbg.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tools/net/bpf_dbg.c b/tools/net/bpf_dbg.c index 0fdcb707a2e7..65dc757f7f7b 100644 --- a/tools/net/bpf_dbg.c +++ b/tools/net/bpf_dbg.c @@ -512,11 +512,11 @@ static bool bpf_runnable(struct sock_filter *f, unsigned int len) return false; } ret = setsockopt(sock, SOL_SOCKET, SO_ATTACH_FILTER, &bpf, sizeof(bpf)); + close(sock); if (ret < 0) { rl_printf("program not allowed to run by kernel!\n"); return false; } - close(sock); for (i = 0; i < len; i++) { if (BPF_CLASS(f[i].code) == BPF_LD && f[i].k > SKF_AD_OFF) { -- 2.20.1