Add seccomp sandbox for non-SFI NaCl

sandbox/linux/seccomp-bpf/bpf_tests.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_LINUX_SECCOMP_BPF_BPF_TESTS_H__
 #define SANDBOX_LINUX_SECCOMP_BPF_BPF_TESTS_H__
 
 #include <fcntl.h>
 #include <sys/stat.h>
 #include <sys/types.h>
@@ skipping 26 matching lines @@
 // BPF_TEST() takes a C++ data type as an optional fourth parameter. If
 // present, this sets up a variable that can be accessed as "BPF_AUX". This
 // variable will be passed as an argument to the "policy" function. Policies
 // would typically use it as an argument to SandboxBPF::Trap(), if they want to
 // communicate data between the BPF_TEST() and a Trap() function.
 #define BPF_TEST(test_case_name, test_name, policy, aux...) \
   BPF_DEATH_TEST(test_case_name, test_name, DEATH_SUCCESS(), policy, aux)
 
 // Assertions are handled exactly the same as with a normal SANDBOX_TEST()
 #define BPF_ASSERT SANDBOX_ASSERT
+#define BPF_ASSERT_EQ(x, y) BPF_ASSERT(x == y)

[jln (very slow on Chromium), 2014/04/11 20:19:47]

Don't forget parentheses around (x) and (y)

[hamaji, 2014/04/15 15:09:25]

Done.

+#define BPF_ASSERT_NE(x, y) BPF_ASSERT(x != y)
+#define BPF_ASSERT_LT(x, y) BPF_ASSERT(x < y)
+#define BPF_ASSERT_GT(x, y) BPF_ASSERT(x > y)
+#define BPF_ASSERT_LE(x, y) BPF_ASSERT(x <= y)
+#define BPF_ASSERT_GE(x, y) BPF_ASSERT(x >= y)
 
 // The "Aux" type is optional. We use an "empty" type by default, so that if
 // the caller doesn't provide any type, all the BPF_AUX related data compiles
 // to nothing.
 template <class Aux = int[0]>
 class BPFTests : public UnitTests {
  public:
   typedef Aux AuxType;
 
   class TestArgs {
@@ skipping 50 matching lines @@
     }
   }
 
  private:
   DISALLOW_IMPLICIT_CONSTRUCTORS(BPFTests);
 };
 
 }  // namespace sandbox
 
 #endif  // SANDBOX_LINUX_SECCOMP_BPF_BPF_TESTS_H__