Skip to content

seccomp: Move copy_seccomp() to no failure path.

Viktor Malik requested to merge vmalikrh/centos-stream-9:seccomp-memleak-fix into main

Bugzilla: https://bugzilla.redhat.com/2218682

do_seccomp() contains a memory leak which may cause the system to run out of BPF JIT memory, if many seccomp programs are executed.

This backports the upstream commit fixing the memleak. See commit message for a reproducer and more details.

Signed-off-by: Viktor Malik vmalik@redhat.com

Merge request reports