Refactored ErrorCode into it's own class

content/common/sandbox_init_linux.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/public/common/sandbox_init.h"
 
 #if defined(__i386__) || defined(__x86_64__)
 
 // This is an assert for GYP
 #if !defined(OS_LINUX)
@@ skipping 198 matching lines @@
   if (strcmp(pathname, kDriRcPath) == 0) {
     int ret = OpenWithCache(pathname, flags);
     return (ret == -1) ? -errno : ret;
   } else {
     return -ENOENT;
   }
 }
 
 #if defined(__x86_64__)
 // x86_64 only because it references system calls that are multiplexed on IA32.
-playground2::Sandbox::ErrorCode GpuProcessPolicy_x86_64(int sysno) {
+playground2::ErrorCode GpuProcessPolicy_x86_64(int sysno) {
   switch(sysno) {
     case __NR_read:
     case __NR_ioctl:
     case __NR_poll:
     case __NR_epoll_wait:
     case __NR_recvfrom:
     case __NR_write:
     case __NR_writev:
     case __NR_gettid:
     case __NR_sched_yield:  // Nvidia binary driver.
@@ skipping 27 matching lines @@
     case __NR_dup:
     case __NR_mlock:
     case __NR_munlock:
     case __NR_exit:
     case __NR_exit_group:
     case __NR_lseek:
     case __NR_getpid:  // Nvidia binary driver.
     case __NR_getppid:  // ATI binary driver.
     case __NR_shutdown:  // Virtual driver.
     case __NR_rt_sigaction:  // Breakpad signal handler.
-      return playground2::Sandbox::SB_ALLOWED;
+      return playground2::ErrorCode::ERR_ALLOWED;
     case __NR_socket:
       return EACCES;  // Nvidia binary driver.
     case __NR_fchmod:
       return EPERM;  // ATI binary driver.
     case __NR_open:
       // Hook open() in the GPU process to allow opening /etc/drirc,
       // needed by Mesa.
       // The hook needs dup(), lseek(), and close() to be allowed.
-      return playground2::Sandbox::ErrorCode(GpuOpenSIGSYS_Handler, NULL);
+      return playground2::Sandbox::Trap(GpuOpenSIGSYS_Handler, NULL);
     default:
       if (IsGettimeSyscall(sysno) ||
           IsKillSyscall(sysno)) { // GPU watchdog.
-        return playground2::Sandbox::SB_ALLOWED;
+        return playground2::ErrorCode::ERR_ALLOWED;
       }
       // Generally, filename-based syscalls will fail with ENOENT to behave
       // similarly to a possible future setuid sandbox.
       if (IsFileSystemSyscall(sysno)) {
         return ENOENT;
       }
       // In any other case crash the program with our SIGSYS handler
-      return playground2::Sandbox::ErrorCode(CrashSIGSYS_Handler, NULL);
+      return playground2::Sandbox::Trap(CrashSIGSYS_Handler, NULL);
   }
 }
 
 // x86_64 only because it references system calls that are multiplexed on IA32.
-playground2::Sandbox::ErrorCode FlashProcessPolicy_x86_64(int sysno) {
+playground2::ErrorCode FlashProcessPolicy_x86_64(int sysno) {
   switch (sysno) {
     case __NR_futex:
     case __NR_write:
     case __NR_epoll_wait:
     case __NR_read:
     case __NR_times:
     case __NR_clone:  // TODO(jln): restrict flags.
     case __NR_set_robust_list:
     case __NR_getuid:
     case __NR_geteuid:
@@ skipping 25 matching lines @@
     case __NR_brk:
     case __NR_sched_yield:
     case __NR_shutdown:
     case __NR_sched_getaffinity:
     case __NR_sched_setscheduler:
     case __NR_dup:  // Flash Access.
     // These are under investigation, and hopefully not here for the long term.
     case __NR_shmctl:
     case __NR_shmat:
     case __NR_shmdt:
-      return playground2::Sandbox::SB_ALLOWED;
+      return playground2::ErrorCode::ERR_ALLOWED;
     case __NR_ioctl:
       return ENOTTY;  // Flash Access.
     case __NR_socket:
       return EACCES;
 
     default:
       if (IsGettimeSyscall(sysno) ||
           IsKillSyscall(sysno)) {
-        return playground2::Sandbox::SB_ALLOWED;
+        return playground2::ErrorCode::ERR_ALLOWED;
       }
       if (IsFileSystemSyscall(sysno)) {
         return ENOENT;
       }
       // In any other case crash the program with our SIGSYS handler.
-      return playground2::Sandbox::ErrorCode(CrashSIGSYS_Handler, NULL);
+      return playground2::Sandbox::Trap(CrashSIGSYS_Handler, NULL);
   }
 }
 #endif
 
-playground2::Sandbox::ErrorCode BlacklistPtracePolicy(int sysno) {
+playground2::ErrorCode BlacklistPtracePolicy(int sysno) {
   if (sysno < static_cast<int>(MIN_SYSCALL) ||
       sysno > static_cast<int>(MAX_SYSCALL)) {
     // TODO(jln) we should not have to do that in a trivial policy.
     return ENOSYS;
   }
   switch (sysno) {
     case __NR_ptrace:
     case __NR_process_vm_readv:
     case __NR_process_vm_writev:
     case __NR_migrate_pages:
     case __NR_move_pages:
-      return playground2::Sandbox::ErrorCode(CrashSIGSYS_Handler, NULL);
+      return playground2::Sandbox::Trap(CrashSIGSYS_Handler, NULL);
     default:
-      return playground2::Sandbox::SB_ALLOWED;
+      return playground2::ErrorCode::ERR_ALLOWED;
   }
 }
 
 // Allow all syscalls.
 // This will still deny x32 or IA32 calls in 64 bits mode or
 // 64 bits system calls in compatibility mode.
-playground2::Sandbox::ErrorCode AllowAllPolicy(int sysno) {
+playground2::ErrorCode AllowAllPolicy(int sysno) {
   if (sysno < static_cast<int>(MIN_SYSCALL) ||
       sysno > static_cast<int>(MAX_SYSCALL)) {
     // TODO(jln) we should not have to do that in a trivial policy.
     return ENOSYS;
   } else {
-    return playground2::Sandbox::SB_ALLOWED;
+    return playground2::ErrorCode::ERR_ALLOWED;
   }
 }
 
 // Warms up/preloads resources needed by the policies.
 void WarmupPolicy(playground2::Sandbox::EvaluateSyscall policy) {
 #if defined(__x86_64__)
   if (policy == GpuProcessPolicy_x86_64)
     OpenWithCache(kDriRcPath, O_RDONLY);
 #endif
 }
@@ skipping 129 matching lines @@
 
 namespace content {
 
 void InitializeSandbox() {
 #if defined(__i386__) || defined(__x86_64__)
   InitializeSandbox_x86();
 #endif
 }
 
 }  // namespace content