A mechanism to identify/forbid/"rewrite" non-temporal instructions (and other)

src/trusted/validator_ragel/validator.h

 /*
  * Copyright (c) 2012 The Native Client Authors. All rights reserved.
  * Use of this source code is governed by a BSD-style license that can be
  * found in the LICENSE file.
  */
 
 #ifndef NATIVE_CLIENT_SRC_TRUSTED_VALIDATOR_RAGEL_VALIDATOR_H_
 #define NATIVE_CLIENT_SRC_TRUSTED_VALIDATOR_RAGEL_VALIDATOR_H_
 
 #include "native_client/src/trusted/validator_ragel/decoder.h"
@@ skipping 46 matching lines @@
   RELATIVE_16BIT                = 0x00000082,
   RELATIVE_32BIT                = 0x00000084,
   /* Not a normal immediate: only two bits can be changed.  */
   IMMEDIATE_2BIT                = 0x20000010,
   /* Last restricted register.  */
   RESTRICTED_REGISTER_MASK      = 0x00001f00,
   RESTRICTED_REGISTER_SHIFT     =          8,
   /* Was restricted_register from previous instruction used in this one?  */
   RESTRICTED_REGISTER_USED      = 0x00002000,
   /* Mask to select all validation errors.  */
-  VALIDATION_ERRORS_MASK        = 0x01ffc000,
+  VALIDATION_ERRORS_MASK        = 0x05ffc000,
   /* Unrecognized instruction: fatal error, processing stops here.  */
   UNRECOGNIZED_INSTRUCTION      = 0x00004000,
   /* Direct jump to unaligned address outside of given region.  */
   DIRECT_JUMP_OUT_OF_RANGE      = 0x00008000,
   /* Instruction is not allowed on current CPU.  */
   CPUID_UNSUPPORTED_INSTRUCTION = 0x00010000,
   /* Base register can be one of: %r15, %rbp, %rip, %rsp.  */
   FORBIDDEN_BASE_REGISTER       = 0x00020000,
   /* Index must be restricted if present.  */
   UNRESTRICTED_INDEX_REGISTER   = 0x00040000,
@@ skipping 10 matching lines @@
   /* Operations with %r15 are forbidden.  */
   R15_MODIFIED                  = 0x00400000,
   /* Operations with %xBP are forbidden. */
   /* This includes %bpl for compatibility with old validator.  */
   BP_MODIFIED                   = 0x00800000,
   /* Operations with %xSP are forbidden. */
   /* This includes %spl for compatibility with old validator.  */
   SP_MODIFIED                   = 0x01000000,
   /* Bad call alignment: "call" must end at the end of the bundle.  */
   BAD_CALL_ALIGNMENT            = 0x02000000,
+  /* The instruction should be either forbidden or rewritten. */
+  UNSUPPORTED_INSTRUCTION       = 0x04000000,
   /* Instruction is modifiable by nacl_dyncode_modify.  */
   MODIFIABLE_INSTRUCTION        = 0x08000000,
   /* Special instruction.  Uses different, non-standard validation rules.  */
   SPECIAL_INSTRUCTION           = 0x10000000,
   /* Some 3DNow! instructions use immediate byte as opcode extensions.  */
   LAST_BYTE_IS_NOT_IMMEDIATE    = 0x20000000,
   /* Bad jump target.  Note: in this case ptr points to jump target!  */
   BAD_JUMP_TARGET               = 0x40000000
 };
 
@@ skipping 96 matching lines @@
 Bool ValidateChunkIA32(const uint8_t codeblock[],
                        size_t size,
                        uint32_t options,
                        const NaClCPUFeaturesX86 *cpu_features,
                        ValidationCallbackFunc user_callback,
                        void *callback_data);
 
 EXTERN_C_END
 
 #endif  /* NATIVE_CLIENT_SRC_TRUSTED_VALIDATOR_RAGEL_VALIDATOR_H_ */