Skip to content

Commit 6a5abf8

Browse files
iii-iAlexei Starovoitov
authored andcommitted
s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
Commit 7ded842 ("s390/bpf: Fix bpf_plt pointer arithmetic") has accidentally removed the critical piece of commit c730fce ("s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL"), causing intermittent kernel panics in e.g. perf's on_switch() prog to reappear. Restore the fix and add a comment. Fixes: 7ded842 ("s390/bpf: Fix bpf_plt pointer arithmetic") Cc: [email protected] Signed-off-by: Ilya Leoshkevich <[email protected]> Link: https://lore.kernel.org/r/[email protected] Signed-off-by: Alexei Starovoitov <[email protected]>
1 parent bf4807c commit 6a5abf8

File tree

1 file changed

+9
-1
lines changed

1 file changed

+9
-1
lines changed

arch/s390/net/bpf_jit_comp.c

Lines changed: 9 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -566,7 +566,15 @@ static void bpf_jit_plt(struct bpf_plt *plt, void *ret, void *target)
566566
{
567567
memcpy(plt, &bpf_plt, sizeof(*plt));
568568
plt->ret = ret;
569-
plt->target = target;
569+
/*
570+
* (target == NULL) implies that the branch to this PLT entry was
571+
* patched and became a no-op. However, some CPU could have jumped
572+
* to this PLT entry before patching and may be still executing it.
573+
*
574+
* Since the intention in this case is to make the PLT entry a no-op,
575+
* make the target point to the return label instead of NULL.
576+
*/
577+
plt->target = target ?: ret;
570578
}
571579

572580
/*

0 commit comments

Comments
 (0)