SECCOMP-BPF: Added supported for inspection system call arguments from BPF filters.

sandbox/linux/seccomp-bpf/verifier.h

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef SANDBOX_LINUX_SECCOMP_BPF_VERIFIER_H__
 #define SANDBOX_LINUX_SECCOMP_BPF_VERIFIER_H__
 
 #include <linux/filter.h>
 
 #include <utility>
@@ skipping 42 matching lines @@
     const std::vector<struct sock_filter>& program;
     const struct arch_seccomp_data&        data;
     unsigned int                           ip;
     uint32_t                               accumulator;
     bool                                   acc_is_valid;
 
    private:
     DISALLOW_IMPLICIT_CONSTRUCTORS(State);
   };
 
+  static bool     VerifyErrorCode(const std::vector<struct sock_filter>& prg,
+                                  struct arch_seccomp_data *data,
+                                  const ErrorCode& code, const char **err);
   static void     Ld (State *state, const struct sock_filter& insn,
                       const char **err);
   static void     Jmp(State *state, const struct sock_filter& insn,
                       const char **err);
   static uint32_t Ret(State *state, const struct sock_filter& insn,
                       const char **err);
 
   DISALLOW_IMPLICIT_CONSTRUCTORS(Verifier);
 };
 
 }  // namespace
 
 #endif  // SANDBOX_LINUX_SECCOMP_BPF_VERIFIER_H__