OLD | NEW |
---|---|
1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include <errno.h> | 5 #include <errno.h> |
6 #include <linux/unistd.h> | 6 #include <linux/unistd.h> |
7 #include <stdio.h> | 7 #include <stdio.h> |
8 #include <sys/prctl.h> | 8 #include <sys/prctl.h> |
9 | 9 |
10 #include <string> | 10 #include <string> |
11 | 11 |
12 #include "base/logging.h" | 12 #include "base/logging.h" |
13 #include "base/posix/eintr_wrapper.h" | 13 #include "base/posix/eintr_wrapper.h" |
14 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" | 14 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h" |
15 #include "sandbox/linux/seccomp-bpf/syscall.h" | 15 #include "sandbox/linux/seccomp-bpf/syscall.h" |
16 | 16 |
17 namespace playground2 { | 17 namespace sandbox { |
18 | 18 |
19 void Die::ExitGroup() { | 19 void Die::ExitGroup() { |
20 // exit_group() should exit our program. After all, it is defined as a | 20 // exit_group() should exit our program. After all, it is defined as a |
21 // function that doesn't return. But things can theoretically go wrong. | 21 // function that doesn't return. But things can theoretically go wrong. |
22 // Especially, since we are dealing with system call filters. Continuing | 22 // Especially, since we are dealing with system call filters. Continuing |
23 // execution would be very bad in most cases where ExitGroup() gets called. | 23 // execution would be very bad in most cases where ExitGroup() gets called. |
24 // So, we'll try a few other strategies too. | 24 // So, we'll try a few other strategies too. |
25 SandboxSyscall(__NR_exit_group, 1); | 25 SandboxSyscall(__NR_exit_group, 1); |
26 | 26 |
27 // We have no idea what our run-time environment looks like. So, signal | 27 // We have no idea what our run-time environment looks like. So, signal |
(...skipping 47 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... | |
75 // No need to loop. Short write()s are unlikely and if they happen we | 75 // No need to loop. Short write()s are unlikely and if they happen we |
76 // probably prefer them over a loop that blocks. | 76 // probably prefer them over a loop that blocks. |
77 ignore_result( | 77 ignore_result( |
78 HANDLE_EINTR(SandboxSyscall(__NR_write, 2, s.c_str(), s.length()))); | 78 HANDLE_EINTR(SandboxSyscall(__NR_write, 2, s.c_str(), s.length()))); |
79 } | 79 } |
80 } | 80 } |
81 | 81 |
82 bool Die::simple_exit_ = false; | 82 bool Die::simple_exit_ = false; |
83 bool Die::suppress_info_ = false; | 83 bool Die::suppress_info_ = false; |
84 | 84 |
85 } // namespace | 85 } // namespace |
Robert Sesek
2013/12/10 21:52:05
"namespace sandbox"
jln (very slow on Chromium)
2013/12/10 22:01:48
Done.
| |
OLD | NEW |