bpf: Fix tcp_synrto_kern.c sample program

The program was returning -1 in some cases which is not allowed by the verifier any longer. Fixes: 390ee7e ("bpf: enforce return code for cgroup-bpf programs") Signed-off-by: Lawrence Brakmo <[email protected]> Signed-off-by: David S. Miller <[email protected]>
opendata26 · Nov 11, 2017 · 7863f46 · 7863f46
1 parent 8d6e79d
commit 7863f46
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/samples/bpf/tcp_synrto_kern.c b/samples/bpf/tcp_synrto_kern.c
@@ -38,8 +38,10 @@ int bpf_synrto(struct bpf_sock_ops *skops)
 	 * if neither port numberis 55601
 	 */
 	if (bpf_ntohl(skops->remote_port) != 55601 &&
-	    skops->local_port != 55601)
-		return -1;
+	    skops->local_port != 55601) {
+		skops->reply = -1;
+		return 1;
+	}
 
 	op = (int) skops->op;