SECCOMP-BPF: Added supported for inspection system call arguments from BPF filters.

sandbox/linux/seccomp-bpf/util.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <dirent.h>
 #include <errno.h>
 #include <fcntl.h>
 #include <stdarg.h>
 #include <stdlib.h>
 #include <string.h>
 #include <sys/socket.h>
 #include <sys/types.h>
 #include <unistd.h>
 
 #include "sandbox/linux/seccomp-bpf/sandbox_bpf.h"
 #include "sandbox/linux/seccomp-bpf/util.h"
 
 namespace playground2 {
 
-bool Util::sendFds(int transport, const void *buf, size_t len, ...) {
+bool Util::SendFds(int transport, const void *buf, size_t len, ...) {
   int count = 0;
   va_list ap;
   va_start(ap, len);
   while (va_arg(ap, int) >= 0) {
     ++count;
   }
   va_end(ap);
   if (!count) {
     return false;
   }
@@ skipping 17 matching lines @@
   cmsg->cmsg_type      = SCM_RIGHTS;
   cmsg->cmsg_len       = CMSG_LEN(count*sizeof(int));
   va_start(ap, len);
   for (int i = 0, fd; (fd = va_arg(ap, int)) >= 0; ++i) {
     (reinterpret_cast<int *>(CMSG_DATA(cmsg)))[i] = fd;
   }
   return sendmsg(transport, &msg, 0) ==
       static_cast<ssize_t>(sizeof(dummy) + ((buf && len > 0) ? len : 0));
 }
 
-bool Util::getFds(int transport, void *buf, size_t *len, ...) {
+bool Util::GetFds(int transport, void *buf, size_t *len, ...) {
   int count = 0;
   va_list ap;
   va_start(ap, len);
   for (int *fd; (fd = va_arg(ap, int *)) != NULL; ++count) {
     *fd = -1;
   }
   va_end(ap);
   if (!count) {
     return false;
   }
@@ skipping 39 matching lines @@
     return false;
   }
   va_start(ap, len);
   for (int *fd, i = 0; (fd = va_arg(ap, int *)) != NULL; ++i) {
     *fd = (reinterpret_cast<int *>(CMSG_DATA(cmsg)))[i];
   }
   va_end(ap);
   return true;
 }
 
-void Util::closeAllBut(int fd, ...) {
+void Util::CloseAllBut(int fd, ...) {
   int proc_fd;
   int fdir;
-  if ((proc_fd = Sandbox::proc_fd()) < 0 ||
+  if ((proc_fd = Sandbox::ProcFd()) < 0 ||
       (fdir = openat(proc_fd, "self/fd", O_RDONLY|O_DIRECTORY)) < 0) {
     SANDBOX_DIE("Cannot access \"/proc/self/fd\"");
   }
   int dev_null = open("/dev/null", O_RDWR);
   DIR *dir = fdopendir(fdir);
   struct dirent de, *res;
   while (!readdir_r(dir, &de, &res) && res) {
     if (res->d_name[0] < '0') {
       continue;
     }
@@ skipping 23 matching lines @@
     }
   }
   closedir(dir);
   if (dev_null >= 0) {
     if (HANDLE_EINTR(close(dev_null))) { }
   }
   return;
 }
 
 }  // namespace