Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(486)

Side by Side Diff: sandbox/linux/seccomp-bpf/trap.cc

Issue 628823003: sandbox_bpf: rework how unsafe traps are compiled/verified (Closed) Base URL: https://chromium.googlesource.com/chromium/src.git@policies
Patch Set: Sync Created 6 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « sandbox/linux/seccomp-bpf/trap.h ('k') | no next file » | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
2 // Use of this source code is governed by a BSD-style license that can be 2 // Use of this source code is governed by a BSD-style license that can be
3 // found in the LICENSE file. 3 // found in the LICENSE file.
4 4
5 #include "sandbox/linux/seccomp-bpf/trap.h" 5 #include "sandbox/linux/seccomp-bpf/trap.h"
6 6
7 #include <errno.h> 7 #include <errno.h>
8 #include <signal.h> 8 #include <signal.h>
9 #include <string.h> 9 #include <string.h>
10 #include <sys/syscall.h> 10 #include <sys/syscall.h>
(...skipping 362 matching lines...) Expand 10 before | Expand all | Expand 10 after
373 } else { 373 } else {
374 SANDBOX_INFO( 374 SANDBOX_INFO(
375 "Cannot disable sandbox and use unsafe traps unless " 375 "Cannot disable sandbox and use unsafe traps unless "
376 "CHROME_SANDBOX_DEBUGGING is turned on first"); 376 "CHROME_SANDBOX_DEBUGGING is turned on first");
377 } 377 }
378 } 378 }
379 // Returns the, possibly updated, value of has_unsafe_traps_. 379 // Returns the, possibly updated, value of has_unsafe_traps_.
380 return trap->has_unsafe_traps_; 380 return trap->has_unsafe_traps_;
381 } 381 }
382 382
383 bool Trap::IsSafeTrapId(uint16_t id) {
384 if (global_trap_ && id > 0 && id <= global_trap_->trap_array_size_) {
385 return global_trap_->trap_array_[id - 1].safe;
386 }
387 return false;
388 }
389
390 Trap* Trap::global_trap_; 383 Trap* Trap::global_trap_;
391 384
392 } // namespace sandbox 385 } // namespace sandbox
OLDNEW
« no previous file with comments | « sandbox/linux/seccomp-bpf/trap.h ('k') | no next file » | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698