A mechanism to identify/forbid/"rewrite" non-temporal instructions (and other)

src/trusted/validator_ragel/dfa_validate_32.c

Index: src/trusted/validator_ragel/dfa_validate_32.c
diff --git a/src/trusted/validator_ragel/dfa_validate_32.c b/src/trusted/validator_ragel/dfa_validate_32.c
index bf9ea2d7870574043422ff5f63565d787272473c..b222a05c5dce9e4bf5457f20976dc60bb04e95a9 100644
--- a/src/trusted/validator_ragel/dfa_validate_32.c
+++ b/src/trusted/validator_ragel/dfa_validate_32.c
@@ -30,6 +30,7 @@ NaClValidationStatus ApplyDfaValidator_x86_32(
     uint8_t *data,
     size_t size,
     int stubout_mode,
+    int pnacl_mode,
     int readonly_text,
     const NaClCPUFeatures *f,
     const struct NaClValidationMetadata *metadata,
@@ -37,8 +38,9 @@ NaClValidationStatus ApplyDfaValidator_x86_32(
   /* TODO(jfb) Use a safe cast here. */
   NaClCPUFeaturesX86 *cpu_features = (NaClCPUFeaturesX86 *) f;
   enum NaClValidationStatus status = NaClValidationFailed;
-  int did_stubout = 0;
   void *query = NULL;
+  struct ForbidRewriteCallbackData callback_data;
+  callback_data.pnacl_mode = pnacl_mode;
   UNREFERENCED_PARAMETER(guest_addr);
 
   if (stubout_mode)
@@ -72,8 +74,8 @@ NaClValidationStatus ApplyDfaValidator_x86_32(
       status = NaClValidationSucceeded;
   } else {
     if (ValidateChunkIA32(data, size, 0 /*options*/, cpu_features,
-                          NaClDfaStubOutCPUUnsupportedInstruction,
-                          &did_stubout))
+                          NaClDfaForbidOrRewriteInstruction,
+                          &callback_data))
       status = NaClValidationSucceeded;
   }
   if (status != NaClValidationSucceeded && errno == ENOMEM)
@@ -81,7 +83,7 @@ NaClValidationStatus ApplyDfaValidator_x86_32(
 
   /* Cache the result if validation succeeded and the code was not modified. */
   if (query != NULL) {
-    if (status == NaClValidationSucceeded && did_stubout == 0)
+    if (status == NaClValidationSucceeded && callback_data.did_rewrite == 0)
       cache->SetKnownToValidate(query);
     cache->DestroyQuery(query);
   }