validator_ragel: Link into TCB, use under env var

src/trusted/service_runtime/sel_main_chrome.c

 /*
  * Copyright (c) 2012 The Native Client Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 #include "native_client/src/trusted/service_runtime/sel_main_chrome.h"
 
 #include "native_client/src/include/portability.h"
 #include "native_client/src/include/portability_io.h"
@@ skipping 31 matching lines @@
   args->imc_bootstrap_handle = NACL_INVALID_HANDLE;
   args->irt_fd = -1;
   args->enable_exception_handling = 0;
   args->enable_debug_stub = 0;
   args->create_memory_object_func = NULL;
   args->validation_cache = NULL;
 #if NACL_WINDOWS
   args->broker_duplicate_handle_func = NULL;
   args->attach_debug_exception_handler_func = NULL;
 #endif
+  args->enable_dfa_validator = 0;
   return args;
 }
 
 static void NaClLoadIrt(struct NaClApp *nap, int irt_fd) {
   int file_desc;
   struct GioPio gio_pio;
   struct Gio *gio_desc;
 
   if (irt_fd == -1) {
     NaClLog(LOG_FATAL, "NaClLoadIrt: Integrated runtime (IRT) not present.\n");
@@ skipping 61 matching lines @@
     NaClSetCreateMemoryObjectFunc(args->create_memory_object_func);
 
   /* Inject the validation caching interface, if it exists. */
   nap->validation_cache = args->validation_cache;
 
 #if NACL_WINDOWS
   if (args->broker_duplicate_handle_func != NULL)
     NaClSetBrokerDuplicateHandleFunc(args->broker_duplicate_handle_func);
 #endif
 
+  if (args->enable_dfa_validator) {
+    fprintf(stderr, "DANGER! USING THE UNSTABLE DFA VALIDATOR!\n");
+    nap->enable_dfa_validator = 1;
+  }
+
   NaClAppInitialDescriptorHookup(nap);
 
   /*
    * NACL_SERVICE_PORT_DESCRIPTOR and NACL_SERVICE_ADDRESS_DESCRIPTOR
    * are 3 and 4.
    */
 
   /* import IMC handle - used to be "-i" */
   NaClAddImcHandle(nap, args->imc_bootstrap_handle, export_addr_to);
 
@@ skipping 171 matching lines @@
   if (LOAD_OK != errcode) {
     NaClBlockIfCommandChannelExists(nap);
   }
 
  done_ctor:
 
   NaClAllModulesFini();
 
   NaClExit(ret_code);
 }