From: Daniel Borkmann
Date: Tue, 8 Sep 2015 18:00:09 +0200
> We may already have gotten a proper fd struct through fdget(), so
> whenever we return at the end of an map operation, we need to call
> fdput(). However, each map operation from syscall side first probes
> CHECK_ATTR() to verify that
We may already have gotten a proper fd struct through fdget(), so
whenever we return at the end of an map operation, we need to call
fdput(). However, each map operation from syscall side first probes
CHECK_ATTR() to verify that unused fields in the bpf_attr union are
zero.
In case of malformed in