Re: [PATCH net-next v2 8/9] net: filter: rework/optimize internal BPF interpreter's instruction set

From: David Miller
Date: Tue Mar 25 2014 - 20:46:38 EST


From: "H. Peter Anvin" <hpa@xxxxxxxxxxxxxxx>
Date: Tue, 25 Mar 2014 17:24:27 -0700

> If you allow loops, it greatly increases the expressibility of the
> language, but we would really need another control to limit CPU usage.

We don't want super expressibility.

We want an extremely simple, trivial to validate, filtering language.
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/