LCOV - code coverage report
Current view: top level - discof/restore/generated - fd_snapct_tile_seccomp.h (source / functions) Hit Total Coverage
Test: cov.lcov Lines: 0 122 0.0 %
Date: 2025-12-06 04:45:29 Functions: 0 1 0.0 %

          Line data    Source code
       1             : /* THIS FILE WAS GENERATED BY generate_filters.py. DO NOT EDIT BY HAND! */
       2             : #ifndef HEADER_fd_src_discof_restore_generated_fd_snapct_tile_seccomp_h
       3             : #define HEADER_fd_src_discof_restore_generated_fd_snapct_tile_seccomp_h
       4             : 
       5             : #if defined(__linux__)
       6             : 
       7             : #include "../../../../src/util/fd_util_base.h"
       8             : #include <linux/audit.h>
       9             : #include <linux/capability.h>
      10             : #include <linux/filter.h>
      11             : #include <linux/seccomp.h>
      12             : #include <linux/bpf.h>
      13             : #include <linux/unistd.h>
      14             : #include <sys/syscall.h>
      15             : #include <signal.h>
      16             : #include <stddef.h>
      17             : 
      18             : #if defined(__i386__)
      19             : # define ARCH_NR  AUDIT_ARCH_I386
      20             : #elif defined(__x86_64__)
      21             : # define ARCH_NR  AUDIT_ARCH_X86_64
      22             : #elif defined(__aarch64__)
      23             : # define ARCH_NR AUDIT_ARCH_AARCH64
      24             : #else
      25             : # error "Target architecture is unsupported by seccomp."
      26             : #endif
      27             : static const unsigned int sock_filter_policy_fd_snapct_tile_instr_cnt = 117;
      28             : 
      29           0 : static void populate_sock_filter_policy_fd_snapct_tile( ulong out_cnt, struct sock_filter * out, uint logfile_fd, uint dir_fd, uint out_full_fd, uint out_inc_fd, uint ping_fd ) {
      30           0 :   FD_TEST( out_cnt >= 117 );
      31           0 :   struct sock_filter filter[117] = {
      32             :     /* Check: Jump to RET_KILL_PROCESS if the script's arch != the runtime arch */
      33           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, ( offsetof( struct seccomp_data, arch ) ) ),
      34           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ARCH_NR, 0, /* RET_KILL_PROCESS */ 113 ),
      35             :     /* loading syscall number in accumulator */
      36           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, ( offsetof( struct seccomp_data, nr ) ) ),
      37             :     /* allow write based on expression */
      38           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_write, /* check_write */ 15, 0 ),
      39             :     /* allow read based on expression */
      40           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_read, /* check_read */ 18, 0 ),
      41             :     /* allow fsync based on expression */
      42           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_fsync, /* check_fsync */ 29, 0 ),
      43             :     /* allow socket based on expression */
      44           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_socket, /* check_socket */ 30, 0 ),
      45             :     /* allow connect based on expression */
      46           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_connect, /* check_connect */ 35, 0 ),
      47             :     /* allow close based on expression */
      48           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_close, /* check_close */ 46, 0 ),
      49             :     /* simply allow ppoll */
      50           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_ppoll, /* RET_ALLOW */ 106, 0 ),
      51             :     /* allow sendto based on expression */
      52           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_sendto, /* check_sendto */ 56, 0 ),
      53             :     /* allow sendmmsg based on expression */
      54           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_sendmmsg, /* check_sendmmsg */ 67, 0 ),
      55             :     /* allow recvfrom based on expression */
      56           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_recvfrom, /* check_recvfrom */ 70, 0 ),
      57             :     /* allow setsockopt based on expression */
      58           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_setsockopt, /* check_setsockopt */ 79, 0 ),
      59             :     /* allow renameat based on expression */
      60           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_renameat, /* check_renameat */ 94, 0 ),
      61             :     /* simply allow getpid */
      62           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_getpid, /* RET_ALLOW */ 100, 0 ),
      63             :     /* simply allow getrandom */
      64           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_getrandom, /* RET_ALLOW */ 99, 0 ),
      65             :     /* allow exit based on expression */
      66           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SYS_exit, /* check_exit */ 95, 0 ),
      67             :     /* none of the syscalls matched */
      68           0 :     { BPF_JMP | BPF_JA, 0, 0, /* RET_KILL_PROCESS */ 96 },
      69             : //  check_write:
      70             :     /* load syscall argument 0 in accumulator */
      71           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      72           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 94, /* lbl_1 */ 0 ),
      73             : //  lbl_1:
      74             :     /* load syscall argument 0 in accumulator */
      75           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      76           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 92, /* RET_ALLOW */ 93 ),
      77             : //  check_read:
      78             :     /* load syscall argument 0 in accumulator */
      79           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      80           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 90, /* lbl_2 */ 0 ),
      81             : //  lbl_2:
      82             :     /* load syscall argument 0 in accumulator */
      83           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      84           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 88, /* lbl_3 */ 0 ),
      85             : //  lbl_3:
      86             :     /* load syscall argument 0 in accumulator */
      87           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      88           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 86, /* lbl_4 */ 0 ),
      89             : //  lbl_4:
      90             :     /* load syscall argument 0 in accumulator */
      91           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      92           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 84, /* lbl_5 */ 0 ),
      93             : //  lbl_5:
      94             :     /* load syscall argument 0 in accumulator */
      95           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
      96           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 82, /* lbl_6 */ 0 ),
      97             : //  lbl_6:
      98             :     /* load syscall argument 0 in accumulator */
      99           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     100           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 80, /* RET_ALLOW */ 81 ),
     101             : //  check_fsync:
     102             :     /* load syscall argument 0 in accumulator */
     103           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     104           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_ALLOW */ 79, /* RET_KILL_PROCESS */ 78 ),
     105             : //  check_socket:
     106             :     /* load syscall argument 0 in accumulator */
     107           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     108           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, AF_INET, /* lbl_7 */ 0, /* RET_KILL_PROCESS */ 76 ),
     109             : //  lbl_7:
     110             :     /* load syscall argument 1 in accumulator */
     111           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[1])),
     112           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, SOCK_STREAM|SOCK_NONBLOCK, /* lbl_8 */ 0, /* RET_KILL_PROCESS */ 74 ),
     113             : //  lbl_8:
     114             :     /* load syscall argument 2 in accumulator */
     115           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[2])),
     116           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 0, /* RET_ALLOW */ 73, /* RET_KILL_PROCESS */ 72 ),
     117             : //  check_connect:
     118             :     /* load syscall argument 0 in accumulator */
     119           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     120           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 70, /* lbl_9 */ 0 ),
     121             : //  lbl_9:
     122             :     /* load syscall argument 0 in accumulator */
     123           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     124           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 68, /* lbl_10 */ 0 ),
     125             : //  lbl_10:
     126             :     /* load syscall argument 0 in accumulator */
     127           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     128           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 66, /* lbl_11 */ 0 ),
     129             : //  lbl_11:
     130             :     /* load syscall argument 0 in accumulator */
     131           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     132           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 64, /* lbl_12 */ 0 ),
     133             : //  lbl_12:
     134             :     /* load syscall argument 0 in accumulator */
     135           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     136           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 62, /* lbl_13 */ 0 ),
     137             : //  lbl_13:
     138             :     /* load syscall argument 0 in accumulator */
     139           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     140           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 60, /* RET_ALLOW */ 61 ),
     141             : //  check_close:
     142             :     /* load syscall argument 0 in accumulator */
     143           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     144           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 58, /* lbl_14 */ 0 ),
     145             : //  lbl_14:
     146             :     /* load syscall argument 0 in accumulator */
     147           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     148           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 56, /* lbl_15 */ 0 ),
     149             : //  lbl_15:
     150             :     /* load syscall argument 0 in accumulator */
     151           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     152           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 54, /* lbl_16 */ 0 ),
     153             : //  lbl_16:
     154             :     /* load syscall argument 0 in accumulator */
     155           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     156           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 52, /* lbl_17 */ 0 ),
     157             : //  lbl_17:
     158             :     /* load syscall argument 0 in accumulator */
     159           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     160           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 50, /* lbl_18 */ 0 ),
     161             : //  lbl_18:
     162             :     /* load syscall argument 0 in accumulator */
     163           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     164           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 48, /* RET_ALLOW */ 49 ),
     165             : //  check_sendto:
     166             :     /* load syscall argument 0 in accumulator */
     167           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     168           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 46, /* lbl_19 */ 0 ),
     169             : //  lbl_19:
     170             :     /* load syscall argument 0 in accumulator */
     171           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     172           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 44, /* lbl_20 */ 0 ),
     173             : //  lbl_20:
     174             :     /* load syscall argument 0 in accumulator */
     175           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     176           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 42, /* lbl_21 */ 0 ),
     177             : //  lbl_21:
     178             :     /* load syscall argument 0 in accumulator */
     179           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     180           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 40, /* lbl_22 */ 0 ),
     181             : //  lbl_22:
     182             :     /* load syscall argument 0 in accumulator */
     183           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     184           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 38, /* lbl_23 */ 0 ),
     185             : //  lbl_23:
     186             :     /* load syscall argument 0 in accumulator */
     187           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     188           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 36, /* RET_ALLOW */ 37 ),
     189             : //  check_sendmmsg:
     190             :     /* load syscall argument 0 in accumulator */
     191           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     192           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* lbl_24 */ 0, /* RET_KILL_PROCESS */ 34 ),
     193             : //  lbl_24:
     194             :     /* load syscall argument 3 in accumulator */
     195           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[3])),
     196           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 0, /* RET_ALLOW */ 33, /* RET_KILL_PROCESS */ 32 ),
     197             : //  check_recvfrom:
     198             :     /* load syscall argument 0 in accumulator */
     199           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     200           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 30, /* lbl_25 */ 0 ),
     201             : //  lbl_25:
     202             :     /* load syscall argument 0 in accumulator */
     203           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     204           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 28, /* lbl_26 */ 0 ),
     205             : //  lbl_26:
     206             :     /* load syscall argument 0 in accumulator */
     207           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     208           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 26, /* lbl_27 */ 0 ),
     209             : //  lbl_27:
     210             :     /* load syscall argument 0 in accumulator */
     211           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     212           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 24, /* lbl_28 */ 0 ),
     213             : //  lbl_28:
     214             :     /* load syscall argument 0 in accumulator */
     215           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     216           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 22, /* RET_ALLOW */ 23 ),
     217             : //  check_setsockopt:
     218             :     /* load syscall argument 0 in accumulator */
     219           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     220           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 2, /* RET_KILL_PROCESS */ 20, /* lbl_30 */ 0 ),
     221             : //  lbl_30:
     222             :     /* load syscall argument 0 in accumulator */
     223           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     224           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, logfile_fd, /* RET_KILL_PROCESS */ 18, /* lbl_31 */ 0 ),
     225             : //  lbl_31:
     226             :     /* load syscall argument 0 in accumulator */
     227           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     228           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_KILL_PROCESS */ 16, /* lbl_32 */ 0 ),
     229             : //  lbl_32:
     230             :     /* load syscall argument 0 in accumulator */
     231           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     232           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_full_fd, /* RET_KILL_PROCESS */ 14, /* lbl_33 */ 0 ),
     233             : //  lbl_33:
     234             :     /* load syscall argument 0 in accumulator */
     235           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     236           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, out_inc_fd, /* RET_KILL_PROCESS */ 12, /* lbl_34 */ 0 ),
     237             : //  lbl_34:
     238             :     /* load syscall argument 0 in accumulator */
     239           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     240           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, ping_fd, /* RET_KILL_PROCESS */ 10, /* lbl_29 */ 0 ),
     241             : //  lbl_29:
     242             :     /* load syscall argument 1 in accumulator */
     243           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[1])),
     244           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, IPPROTO_TCP, /* lbl_35 */ 0, /* RET_KILL_PROCESS */ 8 ),
     245             : //  lbl_35:
     246             :     /* load syscall argument 2 in accumulator */
     247           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[2])),
     248           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, TCP_NODELAY, /* RET_ALLOW */ 7, /* RET_KILL_PROCESS */ 6 ),
     249             : //  check_renameat:
     250             :     /* load syscall argument 0 in accumulator */
     251           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     252           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* lbl_36 */ 0, /* RET_KILL_PROCESS */ 4 ),
     253             : //  lbl_36:
     254             :     /* load syscall argument 2 in accumulator */
     255           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[2])),
     256           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, dir_fd, /* RET_ALLOW */ 3, /* RET_KILL_PROCESS */ 2 ),
     257             : //  check_exit:
     258             :     /* load syscall argument 0 in accumulator */
     259           0 :     BPF_STMT( BPF_LD | BPF_W | BPF_ABS, offsetof(struct seccomp_data, args[0])),
     260           0 :     BPF_JUMP( BPF_JMP | BPF_JEQ | BPF_K, 0, /* RET_ALLOW */ 1, /* RET_KILL_PROCESS */ 0 ),
     261             : //  RET_KILL_PROCESS:
     262             :     /* KILL_PROCESS is placed before ALLOW since it's the fallthrough case. */
     263           0 :     BPF_STMT( BPF_RET | BPF_K, SECCOMP_RET_KILL_PROCESS ),
     264             : //  RET_ALLOW:
     265             :     /* ALLOW has to be reached by jumping */
     266             :     BPF_STMT( BPF_RET | BPF_K, SECCOMP_RET_ALLOW ),
     267           0 :   };
     268           0 :   fd_memcpy( out, filter, sizeof( filter ) );
     269           0 : }
     270             : 
     271             : #endif /* defined(__linux__) */
     272             : 
     273             : #endif /* HEADER_fd_src_discof_restore_generated_fd_snapct_tile_seccomp_h */

Generated by: LCOV version 1.14