validator_ragel: Link into TCB, use under env var

src/trusted/validator/ncvalidate.h

Index: src/trusted/validator/ncvalidate.h
diff --git a/src/trusted/validator/ncvalidate.h b/src/trusted/validator/ncvalidate.h
index 104ecfc35fe85158c211bfb8d05fd02392b46c4e..ee6ffb2135fec34ee802c911bdce01dffc3d51fa 100644
--- a/src/trusted/validator/ncvalidate.h
+++ b/src/trusted/validator/ncvalidate.h
@@ -98,6 +98,23 @@ extern NaClValidationStatus NACL_SUBARCH_NAME(ApplyValidator,
     const NaClCPUFeatures   *cpu_features,
     struct NaClValidationCache *cache);
 
+/* Applies the DFA-based validator as in the ApplyValidator case described
+ * above.  The interface of this new validator must remain the same as of the
+ * ApplyValidator.  Less arguments will be ignored as the new validator
+ * implements features, such as stubout mode.
+ */
+extern NaClValidationStatus NACL_SUBARCH_NAME(ApplyDfaValidator,

[Nick Bray, 2012/04/19 23:11:08]

Don't specify this interface into ncvalidate, just pull a headerfile from ragel
into sel_ldr.

[pasko-google - do not use, 2012/04/20 14:30:38]

I did not want to include directly anything from unreviewed/*. Also, ragel
validating function names differ for 32bit and 64bit sandboxes
(ValidateChunkAMD64,ValidateChunkIA32)  to be able to keep them in the same
binary (good for SDK). Pulling directly into platform-independent parts would
require #ifdef-ing. So I rather went with the existing mechanism for handling
platform differences in validator.

+                                              NACL_TARGET_ARCH,
+                                              NACL_TARGET_SUBARCH)(
+    enum NaClSBKind         sb_kind,
+    uintptr_t               guest_addr,
+    uint8_t                 *data,
+    size_t                  size,
+    int                     stubout_mode,
+    int                     readonly_text,
+    const NaClCPUFeatures   *cpu_features,
+    struct NaClValidationCache *cache);
+
 /* Applies the validator, as used in a command-line tool to report issues.
  * Note: This is intentionally separated from ApplyValidator, since it need
  * not be performance critical.