Simplified unit testing of sandboxing code.

sandbox/linux/seccomp-bpf/util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <dirent.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <stdarg.h>
 #include <stdlib.h>
 #include <string.h>
@@ skipping 102 matching lines @@
   }
   va_end(ap);
   return true;
 }
 
 void Util::closeAllBut(int fd, ...) {
   int proc_fd;
   int fdir;
   if ((proc_fd = Sandbox::getProcFd()) < 0 ||
       (fdir = openat(proc_fd, "self/fd", O_RDONLY|O_DIRECTORY)) < 0) {
-    Sandbox::die("Cannot access \"/proc/self/fd\"");
+    SANDBOX_DIE("Cannot access \"/proc/self/fd\"");
   }
   int dev_null = open("/dev/null", O_RDWR);
   DIR *dir = fdopendir(fdir);
   struct dirent de, *res;
   while (!readdir_r(dir, &de, &res) && res) {
     if (res->d_name[0] < '0') {
       continue;
     }
     int i = atoi(res->d_name);
     if (i >= 0 && i != dirfd(dir) && i != dev_null) {
       va_list ap;
       va_start(ap, fd);
       for (int f = fd;; f = va_arg(ap, int)) {
         if (f < 0) {
           if (i <= 2) {
             // Never ever close 0..2. If we cannot redirect to /dev/null,
             // then we are better off leaving the standard descriptors open.
             if (dev_null >= 0) {
               if (HANDLE_EINTR(dup2(dev_null, i))) {
-                Sandbox::die("Cannot dup2()");
+                SANDBOX_DIE("Cannot dup2()");
               }
             }
           } else {
             if (HANDLE_EINTR(close(i))) { }
           }
           break;
         } else if (i == f) {
           break;
         }
       }
       va_end(ap);
     }
   }
   closedir(dir);
   if (dev_null >= 0) {
     if (HANDLE_EINTR(close(dev_null))) { }
   }
   return;
 }
 
 }  // namespace