| OLD | NEW |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 #include "sandbox/linux/seccomp-bpf/errorcode.h" | 5 #include "sandbox/linux/bpf_dsl/errorcode.h" |
| 6 | 6 |
| 7 #include "sandbox/linux/seccomp-bpf/die.h" | 7 #include "base/logging.h" |
| 8 #include "sandbox/linux/system_headers/linux_seccomp.h" | 8 #include "sandbox/linux/system_headers/linux_seccomp.h" |
| 9 | 9 |
| 10 namespace sandbox { | 10 namespace sandbox { |
| 11 namespace bpf_dsl { |
| 11 | 12 |
| 12 ErrorCode::ErrorCode() : error_type_(ET_INVALID), err_(SECCOMP_RET_INVALID) { | 13 ErrorCode::ErrorCode() : error_type_(ET_INVALID), err_(SECCOMP_RET_INVALID) {} |
| 13 } | |
| 14 | 14 |
| 15 ErrorCode::ErrorCode(int err) { | 15 ErrorCode::ErrorCode(int err) { |
| 16 switch (err) { | 16 switch (err) { |
| 17 case ERR_ALLOWED: | 17 case ERR_ALLOWED: |
| 18 err_ = SECCOMP_RET_ALLOW; | 18 err_ = SECCOMP_RET_ALLOW; |
| 19 error_type_ = ET_SIMPLE; | 19 error_type_ = ET_SIMPLE; |
| 20 break; | 20 break; |
| 21 case ERR_KILL: | 21 case ERR_KILL: |
| 22 err_ = SECCOMP_RET_KILL; | 22 err_ = SECCOMP_RET_KILL; |
| 23 error_type_ = ET_SIMPLE; | 23 error_type_ = ET_SIMPLE; |
| 24 break; | 24 break; |
| 25 case ERR_MIN_ERRNO... ERR_MAX_ERRNO: | 25 case ERR_MIN_ERRNO... ERR_MAX_ERRNO: |
| 26 err_ = SECCOMP_RET_ERRNO + err; | 26 err_ = SECCOMP_RET_ERRNO + err; |
| 27 error_type_ = ET_SIMPLE; | 27 error_type_ = ET_SIMPLE; |
| 28 break; | 28 break; |
| 29 default: | 29 default: |
| 30 if ((err & ~SECCOMP_RET_DATA) == ERR_TRACE) { | 30 if ((err & ~SECCOMP_RET_DATA) == ERR_TRACE) { |
| 31 err_ = SECCOMP_RET_TRACE + (err & SECCOMP_RET_DATA); | 31 err_ = SECCOMP_RET_TRACE + (err & SECCOMP_RET_DATA); |
| 32 error_type_ = ET_SIMPLE; | 32 error_type_ = ET_SIMPLE; |
| 33 break; | 33 break; |
| 34 } | 34 } |
| 35 SANDBOX_DIE("Invalid use of ErrorCode object"); | 35 LOG(FATAL) << "Invalid use of ErrorCode object"; |
| 36 } | 36 } |
| 37 } | 37 } |
| 38 | 38 |
| 39 ErrorCode::ErrorCode(uint16_t trap_id, | 39 ErrorCode::ErrorCode(uint16_t trap_id, |
| 40 Trap::TrapFnc fnc, | 40 TrapRegistry::TrapFnc fnc, |
| 41 const void* aux, | 41 const void* aux, |
| 42 bool safe) | 42 bool safe) |
| 43 : error_type_(ET_TRAP), | 43 : error_type_(ET_TRAP), |
| 44 fnc_(fnc), | 44 fnc_(fnc), |
| 45 aux_(const_cast<void*>(aux)), | 45 aux_(const_cast<void*>(aux)), |
| 46 safe_(safe), | 46 safe_(safe), |
| 47 err_(SECCOMP_RET_TRAP + trap_id) { | 47 err_(SECCOMP_RET_TRAP + trap_id) {} |
| 48 } | |
| 49 | 48 |
| 50 ErrorCode::ErrorCode(int argno, | 49 ErrorCode::ErrorCode(int argno, |
| 51 ArgType width, | 50 ArgType width, |
| 52 uint64_t mask, | 51 uint64_t mask, |
| 53 uint64_t value, | 52 uint64_t value, |
| 54 const ErrorCode* passed, | 53 const ErrorCode* passed, |
| 55 const ErrorCode* failed) | 54 const ErrorCode* failed) |
| 56 : error_type_(ET_COND), | 55 : error_type_(ET_COND), |
| 57 mask_(mask), | 56 mask_(mask), |
| 58 value_(value), | 57 value_(value), |
| 59 argno_(argno), | 58 argno_(argno), |
| 60 width_(width), | 59 width_(width), |
| 61 passed_(passed), | 60 passed_(passed), |
| 62 failed_(failed), | 61 failed_(failed), |
| 63 err_(SECCOMP_RET_INVALID) { | 62 err_(SECCOMP_RET_INVALID) {} |
| 64 } | |
| 65 | 63 |
| 66 bool ErrorCode::Equals(const ErrorCode& err) const { | 64 bool ErrorCode::Equals(const ErrorCode& err) const { |
| 67 if (error_type_ == ET_INVALID || err.error_type_ == ET_INVALID) { | 65 if (error_type_ == ET_INVALID || err.error_type_ == ET_INVALID) { |
| 68 SANDBOX_DIE("Dereferencing invalid ErrorCode"); | 66 LOG(FATAL) << "Dereferencing invalid ErrorCode"; |
| 69 } | 67 } |
| 70 if (error_type_ != err.error_type_) { | 68 if (error_type_ != err.error_type_) { |
| 71 return false; | 69 return false; |
| 72 } | 70 } |
| 73 if (error_type_ == ET_SIMPLE || error_type_ == ET_TRAP) { | 71 if (error_type_ == ET_SIMPLE || error_type_ == ET_TRAP) { |
| 74 return err_ == err.err_; | 72 return err_ == err.err_; |
| 75 } else if (error_type_ == ET_COND) { | 73 } else if (error_type_ == ET_COND) { |
| 76 return mask_ == err.mask_ && value_ == err.value_ && argno_ == err.argno_ && | 74 return mask_ == err.mask_ && value_ == err.value_ && argno_ == err.argno_ && |
| 77 width_ == err.width_ && passed_->Equals(*err.passed_) && | 75 width_ == err.width_ && passed_->Equals(*err.passed_) && |
| 78 failed_->Equals(*err.failed_); | 76 failed_->Equals(*err.failed_); |
| 79 } else { | 77 } else { |
| 80 SANDBOX_DIE("Corrupted ErrorCode"); | 78 LOG(FATAL) << "Corrupted ErrorCode"; |
| 79 return false; |
| 81 } | 80 } |
| 82 } | 81 } |
| 83 | 82 |
| 84 bool ErrorCode::LessThan(const ErrorCode& err) const { | 83 bool ErrorCode::LessThan(const ErrorCode& err) const { |
| 85 // Implementing a "LessThan()" operator allows us to use ErrorCode objects | 84 // Implementing a "LessThan()" operator allows us to use ErrorCode objects |
| 86 // as keys in STL containers; most notably, it also allows us to put them | 85 // as keys in STL containers; most notably, it also allows us to put them |
| 87 // into std::set<>. Actual ordering is not important as long as it is | 86 // into std::set<>. Actual ordering is not important as long as it is |
| 88 // deterministic. | 87 // deterministic. |
| 89 if (error_type_ == ET_INVALID || err.error_type_ == ET_INVALID) { | 88 if (error_type_ == ET_INVALID || err.error_type_ == ET_INVALID) { |
| 90 SANDBOX_DIE("Dereferencing invalid ErrorCode"); | 89 LOG(FATAL) << "Dereferencing invalid ErrorCode"; |
| 91 } | 90 } |
| 92 if (error_type_ != err.error_type_) { | 91 if (error_type_ != err.error_type_) { |
| 93 return error_type_ < err.error_type_; | 92 return error_type_ < err.error_type_; |
| 94 } else { | 93 } else { |
| 95 if (error_type_ == ET_SIMPLE || error_type_ == ET_TRAP) { | 94 if (error_type_ == ET_SIMPLE || error_type_ == ET_TRAP) { |
| 96 return err_ < err.err_; | 95 return err_ < err.err_; |
| 97 } else if (error_type_ == ET_COND) { | 96 } else if (error_type_ == ET_COND) { |
| 98 if (mask_ != err.mask_) { | 97 if (mask_ != err.mask_) { |
| 99 return mask_ < err.mask_; | 98 return mask_ < err.mask_; |
| 100 } else if (value_ != err.value_) { | 99 } else if (value_ != err.value_) { |
| 101 return value_ < err.value_; | 100 return value_ < err.value_; |
| 102 } else if (argno_ != err.argno_) { | 101 } else if (argno_ != err.argno_) { |
| 103 return argno_ < err.argno_; | 102 return argno_ < err.argno_; |
| 104 } else if (width_ != err.width_) { | 103 } else if (width_ != err.width_) { |
| 105 return width_ < err.width_; | 104 return width_ < err.width_; |
| 106 } else if (!passed_->Equals(*err.passed_)) { | 105 } else if (!passed_->Equals(*err.passed_)) { |
| 107 return passed_->LessThan(*err.passed_); | 106 return passed_->LessThan(*err.passed_); |
| 108 } else if (!failed_->Equals(*err.failed_)) { | 107 } else if (!failed_->Equals(*err.failed_)) { |
| 109 return failed_->LessThan(*err.failed_); | 108 return failed_->LessThan(*err.failed_); |
| 110 } else { | 109 } else { |
| 111 return false; | 110 return false; |
| 112 } | 111 } |
| 113 } else { | 112 } else { |
| 114 SANDBOX_DIE("Corrupted ErrorCode"); | 113 LOG(FATAL) << "Corrupted ErrorCode"; |
| 114 return false; |
| 115 } | 115 } |
| 116 } | 116 } |
| 117 } | 117 } |
| 118 | 118 |
| 119 } // namespace bpf_dsl |
| 119 } // namespace sandbox | 120 } // namespace sandbox |
| OLD | NEW |