bpf.h revision 68db15cc2ea5b8314b4c8f7f3920423aeb5e25eb
1fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* bpf.h 2fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * Copyright (c) 2012 The Chromium OS Authors. All rights reserved. 3fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * Use of this source code is governed by a BSD-style license that can be 4fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * found in the LICENSE file. 5fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * 6fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * Berkeley Packet Filter functions. 7fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes */ 8fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 9fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#ifndef BPF_H 10fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BPF_H 11fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 12fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#include <asm/bitsperlong.h> /* for __BITS_PER_LONG */ 1368db15cc2ea5b8314b4c8f7f3920423aeb5e25ebSamuel Tan#include <endian.h> 14d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#include <linux/audit.h> 15fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#include <linux/filter.h> 16fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#include <stddef.h> 17fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#include <sys/user.h> 18fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 198b488a5b1f0b5eab62516b50e638c1484409bb87Jorge Lucangeli Obes#include "arch.h" 208b488a5b1f0b5eab62516b50e638c1484409bb87Jorge Lucangeli Obes 218a56ec283c64512a16e4e19ae6a293ba7f543dafJorge Lucangeli Obes#if __BITS_PER_LONG == 32 || defined(__ILP32__) 22fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BITS32 23fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#elif __BITS_PER_LONG == 64 24fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BITS64 25fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#endif 26fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 27fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Constants for comparison operators. */ 28fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define MIN_OPERATOR 128 29fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesenum operator { 30fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes EQ = MIN_OPERATOR, 31fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes NE, 32fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes LT, 33fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes LE, 34fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes GT, 35ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes GE, 36ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes SET 37fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes}; 38fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 39fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* 40fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * BPF return values and data structures, 41fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes * since they're not yet in the kernel. 42fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes */ 43fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SECCOMP_RET_KILL 0x00000000U /* kill the task immediately */ 44fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SECCOMP_RET_TRAP 0x00030000U /* return SIGSYS */ 45fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SECCOMP_RET_ERRNO 0x00050000U /* return -1 and set errno */ 46fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SECCOMP_RET_ALLOW 0x7fff0000U /* allow */ 47fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 48fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SECCOMP_RET_DATA 0x0000ffffU /* mask for return value */ 49fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 50fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesstruct seccomp_data { 51fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes int nr; 52fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes __u32 arch; 53fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes __u64 instruction_pointer; 54fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes __u64 args[6]; 55fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes}; 56fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 57d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#define syscall_nr (offsetof(struct seccomp_data, nr)) 58d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#define arch_nr (offsetof(struct seccomp_data, arch)) 59d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes 60fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Size-dependent defines. */ 61fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#if defined(BITS32) 62ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes/* 63ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes * On 32 bits, comparisons take 2 instructions: 1 for loading the argument, 64ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes * 1 for the actual comparison. 65ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes */ 66ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define BPF_LOAD_ARG_LEN 1U 67ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define BPF_COMP_LEN 1U 68fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BPF_ARG_COMP_LEN (BPF_LOAD_ARG_LEN + BPF_COMP_LEN) 69fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 70fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define bpf_comp_jeq bpf_comp_jeq32 71ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define bpf_comp_jset bpf_comp_jset32 72fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 73fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define LO_ARG(idx) offsetof(struct seccomp_data, args[(idx)]) 74fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 75ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#elif defined(BITS64) 76ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes/* 77ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes * On 64 bits, comparisons take 7 instructions: 4 for loading the argument, 78ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes * and 3 for the actual comparison. 79ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes */ 80ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define BPF_LOAD_ARG_LEN 4U 81ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define BPF_COMP_LEN 3U 82fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BPF_ARG_COMP_LEN (BPF_LOAD_ARG_LEN + BPF_COMP_LEN) 83fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 84fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define bpf_comp_jeq bpf_comp_jeq64 85ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#define bpf_comp_jset bpf_comp_jset64 86fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 87fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Ensure that we load the logically correct offset. */ 8868db15cc2ea5b8314b4c8f7f3920423aeb5e25ebSamuel Tan#if defined(__LITTLE_ENDIAN__) || __BYTE_ORDER == __LITTLE_ENDIAN 89fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define LO_ARG(idx) offsetof(struct seccomp_data, args[(idx)]) 90fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define HI_ARG(idx) offsetof(struct seccomp_data, args[(idx)]) + sizeof(__u32) 91fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#else 92a21c8fc135523df5bbd4523b36096dff6e8ade4aJorge Lucangeli Obes#error "Unsupported endianness" 93fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#endif 94fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 95ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#else 96ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes#error "Unknown bit width" 97ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes 98fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#endif 99fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 100fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Common jump targets. */ 101fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define NEXT 0 102fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SKIP 1 103fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define SKIPN(_n) (_n) 104fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 105fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Support for labels in BPF programs. */ 106fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define JUMP_JT 0xff 107fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define JUMP_JF 0xff 108fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define LABEL_JT 0xfe 109fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define LABEL_JF 0xfe 110fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 111fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define MAX_BPF_LABEL_LEN 32 112fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 113fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define BPF_LABELS_MAX 256 114fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesstruct bpf_labels { 115fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes int count; 116fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes struct __bpf_label { 117fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes const char *label; 118fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes unsigned int location; 119fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes } labels[BPF_LABELS_MAX]; 120fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes}; 121fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 122fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* BPF instruction manipulation functions and macros. */ 12302d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiangstatic inline size_t set_bpf_instr(struct sock_filter *instr, 12402d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang unsigned short code, unsigned int k, 12502d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang unsigned char jt, unsigned char jf) 12602d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang{ 12702d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang instr->code = code; 12802d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang instr->k = k; 12902d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang instr->jt = jt; 13002d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang instr->jf = jf; 13102d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang return 1U; 13202d0654f088b5de57f49f85c5ec064e6e581c6fcYunlian Jiang} 133fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 134fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_stmt(_block, _code, _k) \ 135fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_instr((_block), (_code), (_k), 0, 0) 136fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 137fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_jump(_block, _code, _k, _jt, _jf) \ 138fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_instr((_block), (_code), (_k), (_jt), (_jf)) 139fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 140fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_lbl(_block, _lbl_id) \ 141fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_jump((_block), BPF_JMP+BPF_JA, (_lbl_id), \ 142fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes LABEL_JT, LABEL_JF) 143fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 144fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_jump_lbl(_block, _lbl_id) \ 145fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_jump((_block), BPF_JMP+BPF_JA, (_lbl_id), \ 146fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes JUMP_JT, JUMP_JF) 147fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 148fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_ret_kill(_block) \ 149fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_stmt((_block), BPF_RET+BPF_K, SECCOMP_RET_KILL) 150fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 151bda833cbcee330eab91561a9b50b6bc24c47f2e9Jorge Lucangeli Obes#define set_bpf_ret_trap(_block) \ 152bda833cbcee330eab91561a9b50b6bc24c47f2e9Jorge Lucangeli Obes set_bpf_stmt((_block), BPF_RET+BPF_K, SECCOMP_RET_TRAP) 153bda833cbcee330eab91561a9b50b6bc24c47f2e9Jorge Lucangeli Obes 154fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_ret_errno(_block, _errno) \ 155fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_stmt((_block), BPF_RET+BPF_K, \ 156fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes SECCOMP_RET_ERRNO | ((_errno) & SECCOMP_RET_DATA)) 157fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 158fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes#define set_bpf_ret_allow(_block) \ 159fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes set_bpf_stmt((_block), BPF_RET+BPF_K, SECCOMP_RET_ALLOW) 160fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 161d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#define bpf_load_syscall_nr(_filter) \ 162d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes set_bpf_stmt((_filter), BPF_LD+BPF_W+BPF_ABS, syscall_nr) 163d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes 164fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* BPF label functions. */ 165fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesint bpf_resolve_jumps(struct bpf_labels *labels, 166fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes struct sock_filter *filter, size_t count); 167fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesint bpf_label_id(struct bpf_labels *labels, const char *label); 168fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesvoid free_label_strings(struct bpf_labels *labels); 169fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 170fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* BPF helper functions. */ 171fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obessize_t bpf_load_arg(struct sock_filter *filter, int argidx); 172fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obessize_t bpf_comp_jeq(struct sock_filter *filter, unsigned long c, 173fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes unsigned char jt, unsigned char jf); 174ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obessize_t bpf_comp_jset(struct sock_filter *filter, unsigned long mask, 175ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes unsigned char jt, unsigned char jf); 176fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 177fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes/* Functions called by syscall_filter.c */ 178d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#define ARCH_VALIDATION_LEN 3U 179d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes#define ALLOW_SYSCALL_LEN 2U 180d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes 181fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obessize_t bpf_arg_comp(struct sock_filter **pfilter, 182fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes int op, int argidx, unsigned long c, unsigned int label_id); 183d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obessize_t bpf_validate_arch(struct sock_filter *filter); 184d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obessize_t bpf_allow_syscall(struct sock_filter *filter, int nr); 185d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obessize_t bpf_allow_syscall_args(struct sock_filter *filter, 186d4467260de60d23ca7d2d506517caf71ef90984dJorge Lucangeli Obes int nr, unsigned int id); 187fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 188ffec8919585a3a30e9f8a3551e85cf06fc62cd8aJorge Lucangeli Obes/* Debug functions. */ 189fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesvoid dump_bpf_prog(struct sock_fprog *fprog); 190fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obesvoid dump_bpf_filter(struct sock_filter *filter, unsigned short len); 191fc8ab53c3ee4697b907a35ac54f26fb9477f6e7cJorge Lucangeli Obes 192224e4275abc940fa96d8cf8eec69a052957aa7e1Jorge Lucangeli Obes#endif /* BPF_H */ 193