Explicitly test bit 30 in the system call number to distinguish between the new x32 API and older I…

sandbox/linux/seccomp-bpf/sandbox_bpf.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_BPF_H__
 #define SANDBOX_BPF_H__
 
 #include <endian.h>
 #include <errno.h>
 #include <fcntl.h>
@@ skipping 54 matching lines @@
 #define SECCOMP_RET_ACTION  0xffff0000U  // Masks for the return value
 #define SECCOMP_RET_DATA    0x0000ffffU  //   sections
 #endif
 #define SECCOMP_DENY_ERRNO  EPERM
 #ifndef SYS_SECCOMP
 #define SYS_SECCOMP                   1
 #endif
 
 #if defined(__i386__)
 #define MIN_SYSCALL  0
-#define MAX_SYSCALL  512
+#define MAX_SYSCALL  1024
 #define SECCOMP_ARCH AUDIT_ARCH_I386
 #define REG_RESULT   REG_EAX
 #define REG_SYSCALL  REG_EAX
 #define REG_PARM1    REG_EBX
 #define REG_PARM2    REG_ECX
 #define REG_PARM3    REG_EDX
 #define REG_PARM4    REG_ESI
 #define REG_PARM5    REG_EDI
 #define REG_PARM6    REG_EBP
 #elif defined(__x86_64__)
 #define MIN_SYSCALL  0
-#define MAX_SYSCALL  512
+#define MAX_SYSCALL  1024
 #define SECCOMP_ARCH AUDIT_ARCH_X86_64
 #define REG_RESULT   REG_RAX
 #define REG_SYSCALL  REG_RAX
 #define REG_PARM1    REG_RDI
 #define REG_PARM2    REG_RSI
 #define REG_PARM3    REG_RDX
 #define REG_PARM4    REG_R10
 #define REG_PARM5    REG_R8
 #define REG_PARM6    REG_R9
 #else
@@ skipping 137 matching lines @@
   static bool          suppressLogging_;
   static SandboxStatus status_;
   static int           proc_fd_;
   static std::vector<std::pair<EvaluateSyscall,
                                EvaluateArguments> > evaluators_;
 };
 
 }  // namespace
 
 #endif  // SANDBOX_BPF_H__