OLD | NEW |
1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "sandbox/linux/bpf_dsl/bpf_dsl.h" | 5 #include "sandbox/linux/bpf_dsl/bpf_dsl.h" |
6 | 6 |
7 #include <errno.h> | 7 #include <errno.h> |
8 | 8 |
9 #include <limits> | 9 #include <limits> |
10 | 10 |
(...skipping 31 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
42 } | 42 } |
43 | 43 |
44 private: | 44 private: |
45 virtual ~ErrorResultExprImpl() {} | 45 virtual ~ErrorResultExprImpl() {} |
46 | 46 |
47 int err_; | 47 int err_; |
48 | 48 |
49 DISALLOW_COPY_AND_ASSIGN(ErrorResultExprImpl); | 49 DISALLOW_COPY_AND_ASSIGN(ErrorResultExprImpl); |
50 }; | 50 }; |
51 | 51 |
| 52 class KillResultExprImpl : public internal::ResultExprImpl { |
| 53 public: |
| 54 explicit KillResultExprImpl(const char* msg) : msg_(msg) { DCHECK(msg_); } |
| 55 |
| 56 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { |
| 57 return sb->Kill(msg_); |
| 58 } |
| 59 |
| 60 private: |
| 61 virtual ~KillResultExprImpl() {} |
| 62 |
| 63 const char* msg_; |
| 64 |
| 65 DISALLOW_COPY_AND_ASSIGN(KillResultExprImpl); |
| 66 }; |
| 67 |
| 68 class TraceResultExprImpl : public internal::ResultExprImpl { |
| 69 public: |
| 70 TraceResultExprImpl(uint16_t aux) : aux_(aux) {} |
| 71 |
| 72 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { |
| 73 return ErrorCode(ErrorCode::ERR_TRACE + aux_); |
| 74 } |
| 75 |
| 76 private: |
| 77 virtual ~TraceResultExprImpl() {} |
| 78 |
| 79 uint16_t aux_; |
| 80 |
| 81 DISALLOW_COPY_AND_ASSIGN(TraceResultExprImpl); |
| 82 }; |
| 83 |
52 class TrapResultExprImpl : public internal::ResultExprImpl { | 84 class TrapResultExprImpl : public internal::ResultExprImpl { |
53 public: | 85 public: |
54 TrapResultExprImpl(Trap::TrapFnc func, void* arg) : func_(func), arg_(arg) { | 86 TrapResultExprImpl(Trap::TrapFnc func, const void* arg) |
| 87 : func_(func), arg_(arg) { |
55 DCHECK(func_); | 88 DCHECK(func_); |
56 } | 89 } |
57 | 90 |
58 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { | 91 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { |
59 return sb->Trap(func_, arg_); | 92 return sb->Trap(func_, arg_); |
60 } | 93 } |
61 | 94 |
62 private: | 95 private: |
63 virtual ~TrapResultExprImpl() {} | 96 virtual ~TrapResultExprImpl() {} |
64 | 97 |
65 Trap::TrapFnc func_; | 98 Trap::TrapFnc func_; |
66 void* arg_; | 99 const void* arg_; |
67 | 100 |
68 DISALLOW_COPY_AND_ASSIGN(TrapResultExprImpl); | 101 DISALLOW_COPY_AND_ASSIGN(TrapResultExprImpl); |
69 }; | 102 }; |
70 | 103 |
| 104 class UnsafeTrapResultExprImpl : public internal::ResultExprImpl { |
| 105 public: |
| 106 UnsafeTrapResultExprImpl(Trap::TrapFnc func, const void* arg) |
| 107 : func_(func), arg_(arg) { |
| 108 DCHECK(func_); |
| 109 } |
| 110 |
| 111 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { |
| 112 return sb->UnsafeTrap(func_, arg_); |
| 113 } |
| 114 |
| 115 private: |
| 116 virtual ~UnsafeTrapResultExprImpl() {} |
| 117 |
| 118 Trap::TrapFnc func_; |
| 119 const void* arg_; |
| 120 |
| 121 DISALLOW_COPY_AND_ASSIGN(UnsafeTrapResultExprImpl); |
| 122 }; |
| 123 |
71 class IfThenResultExprImpl : public internal::ResultExprImpl { | 124 class IfThenResultExprImpl : public internal::ResultExprImpl { |
72 public: | 125 public: |
73 IfThenResultExprImpl(const BoolExpr& cond, | 126 IfThenResultExprImpl(const BoolExpr& cond, |
74 const ResultExpr& then_result, | 127 const ResultExpr& then_result, |
75 const ResultExpr& else_result) | 128 const ResultExpr& else_result) |
76 : cond_(cond), then_result_(then_result), else_result_(else_result) {} | 129 : cond_(cond), then_result_(then_result), else_result_(else_result) {} |
77 | 130 |
78 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { | 131 virtual ErrorCode Compile(SandboxBPF* sb) const OVERRIDE { |
79 return cond_->Compile( | 132 return cond_->Compile( |
80 sb, then_result_->Compile(sb), else_result_->Compile(sb)); | 133 sb, then_result_->Compile(sb), else_result_->Compile(sb)); |
(...skipping 140 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
221 } // namespace internal | 274 } // namespace internal |
222 | 275 |
223 ResultExpr Allow() { | 276 ResultExpr Allow() { |
224 return ResultExpr(new const AllowResultExprImpl()); | 277 return ResultExpr(new const AllowResultExprImpl()); |
225 } | 278 } |
226 | 279 |
227 ResultExpr Error(int err) { | 280 ResultExpr Error(int err) { |
228 return ResultExpr(new const ErrorResultExprImpl(err)); | 281 return ResultExpr(new const ErrorResultExprImpl(err)); |
229 } | 282 } |
230 | 283 |
231 ResultExpr Trap(Trap::TrapFnc trap_func, void* aux) { | 284 ResultExpr Kill(const char* msg) { |
| 285 return ResultExpr(new const KillResultExprImpl(msg)); |
| 286 } |
| 287 |
| 288 ResultExpr Trace(uint16_t aux) { |
| 289 return ResultExpr(new const TraceResultExprImpl(aux)); |
| 290 } |
| 291 |
| 292 ResultExpr Trap(Trap::TrapFnc trap_func, const void* aux) { |
232 return ResultExpr(new const TrapResultExprImpl(trap_func, aux)); | 293 return ResultExpr(new const TrapResultExprImpl(trap_func, aux)); |
233 } | 294 } |
234 | 295 |
| 296 ResultExpr UnsafeTrap(Trap::TrapFnc trap_func, const void* aux) { |
| 297 return ResultExpr(new const UnsafeTrapResultExprImpl(trap_func, aux)); |
| 298 } |
| 299 |
235 BoolExpr BoolConst(bool value) { | 300 BoolExpr BoolConst(bool value) { |
236 return BoolExpr(new const ConstBoolExprImpl(value)); | 301 return BoolExpr(new const ConstBoolExprImpl(value)); |
237 } | 302 } |
238 | 303 |
239 BoolExpr operator!(const BoolExpr& cond) { | 304 BoolExpr operator!(const BoolExpr& cond) { |
240 return BoolExpr(new const NegateBoolExprImpl(cond)); | 305 return BoolExpr(new const NegateBoolExprImpl(cond)); |
241 } | 306 } |
242 | 307 |
243 BoolExpr operator&&(const BoolExpr& lhs, const BoolExpr& rhs) { | 308 BoolExpr operator&&(const BoolExpr& lhs, const BoolExpr& rhs) { |
244 return BoolExpr(new const AndBoolExprImpl(lhs, rhs)); | 309 return BoolExpr(new const AndBoolExprImpl(lhs, rhs)); |
(...skipping 59 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
304 | 369 |
305 ErrorCode SandboxBPFDSLPolicy::EvaluateSyscall(SandboxBPF* sb, | 370 ErrorCode SandboxBPFDSLPolicy::EvaluateSyscall(SandboxBPF* sb, |
306 int sysno) const { | 371 int sysno) const { |
307 return EvaluateSyscall(sysno)->Compile(sb); | 372 return EvaluateSyscall(sysno)->Compile(sb); |
308 } | 373 } |
309 | 374 |
310 ErrorCode SandboxBPFDSLPolicy::InvalidSyscall(SandboxBPF* sb) const { | 375 ErrorCode SandboxBPFDSLPolicy::InvalidSyscall(SandboxBPF* sb) const { |
311 return InvalidSyscall()->Compile(sb); | 376 return InvalidSyscall()->Compile(sb); |
312 } | 377 } |
313 | 378 |
314 ResultExpr SandboxBPFDSLPolicy::Trap(Trap::TrapFnc trap_func, void* aux) { | 379 ResultExpr SandboxBPFDSLPolicy::Trap(Trap::TrapFnc trap_func, const void* aux) { |
315 return bpf_dsl::Trap(trap_func, aux); | 380 return bpf_dsl::Trap(trap_func, aux); |
316 } | 381 } |
317 | 382 |
318 } // namespace bpf_dsl | 383 } // namespace bpf_dsl |
319 } // namespace sandbox | 384 } // namespace sandbox |
OLD | NEW |