diff options
| author | Paul Moore <pmoore@redhat.com> | 2015-08-24 18:05:05 -0400 |
|---|---|---|
| committer | Paul Moore <pmoore@redhat.com> | 2015-08-27 15:32:59 -0400 |
| commit | 51c46f80c1edee863bbc4eb21b03decc44e69a45 (patch) | |
| tree | f31f9fa56c7657f52055ab88c070f69b3c80667a /src/arch-x86.h | |
| parent | 1d63fad4a064b80e0b921b16ed419f3342337ed4 (diff) | |
| download | libseccomp-51c46f80c1edee863bbc4eb21b03decc44e69a45.tar.gz | |
all: block negative syscall numbers from the filter
We use negative syscalls numbers to indicate syscalls that aren't
supported by a certain arch/ABI and unfortunately there were cases
where these bogus syscall values were finding their way into the
filter. This patch corrects this and adds a new test to check for
this in the future.
Reported-by: Mike Frysinger <vapier@gentoo.org>
Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'src/arch-x86.h')
| -rw-r--r-- | src/arch-x86.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/arch-x86.h b/src/arch-x86.h index 163d0ed..6190519 100644 --- a/src/arch-x86.h +++ b/src/arch-x86.h @@ -35,7 +35,7 @@ const char *x86_syscall_resolve_num(int num); const char *x86_syscall_iterate_name(unsigned int spot); -int x86_syscall_rewrite(const struct arch_def *arch, bool strict, int *syscall); +int x86_syscall_rewrite(const struct arch_def *arch, int *syscall); int x86_filter_rewrite(const struct arch_def *arch, bool strict, int *syscall, struct db_api_arg *chain); |