// Copyright (c) 2012 The Chromium Authors. All rights reserved. // Use of this source code is governed by a BSD-style license that can be // found in the LICENSE file. #ifndef SANDBOX_LINUX_BPF_DSL_SECCOMP_MACROS_H_ #define SANDBOX_LINUX_BPF_DSL_SECCOMP_MACROS_H_ #include // For __BIONIC__. // Old Bionic versions do not have sys/user.h. The if can be removed once we no // longer need to support these old Bionic versions. // All x86_64 builds use a new enough bionic to have sys/user.h. #if !defined(__BIONIC__) || defined(__x86_64__) #if !defined(__native_client_nonsfi__) #include #endif #if defined(__mips__) // sys/user.h in eglibc misses size_t definition #include #endif #endif #include "sandbox/linux/system_headers/linux_seccomp.h" // For AUDIT_ARCH_* // Impose some reasonable maximum BPF program size. Realistically, the // kernel probably has much lower limits. But by limiting to less than // 30 bits, we can ease requirements on some of our data types. #define SECCOMP_MAX_PROGRAM_SIZE (1<<30) #if defined(__i386__) #define SECCOMP_ARCH AUDIT_ARCH_I386 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[(_reg)]) #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, REG_EAX) #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, REG_EAX) #define SECCOMP_IP(_ctx) SECCOMP_REG(_ctx, REG_EIP) #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, REG_EBX) #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, REG_ECX) #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, REG_EDX) #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, REG_ESI) #define SECCOMP_PARM5(_ctx) SECCOMP_REG(_ctx, REG_EDI) #define SECCOMP_PARM6(_ctx) SECCOMP_REG(_ctx, REG_EBP) #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr)) #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch)) #define SECCOMP_IP_MSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 4) #define SECCOMP_IP_LSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 0) #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 4) #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 0) #if defined(__BIONIC__) || defined(__native_client_nonsfi__) // Old Bionic versions and PNaCl toolchain don't have sys/user.h, so we just // define regs_struct directly. This can be removed once we no longer need to // support these old Bionic versions and PNaCl toolchain. struct regs_struct { long int ebx; long int ecx; long int edx; long int esi; long int edi; long int ebp; long int eax; long int xds; long int xes; long int xfs; long int xgs; long int orig_eax; long int eip; long int xcs; long int eflags; long int esp; long int xss; }; #else typedef user_regs_struct regs_struct; #endif #define SECCOMP_PT_RESULT(_regs) (_regs).eax #define SECCOMP_PT_SYSCALL(_regs) (_regs).orig_eax #define SECCOMP_PT_IP(_regs) (_regs).eip #define SECCOMP_PT_PARM1(_regs) (_regs).ebx #define SECCOMP_PT_PARM2(_regs) (_regs).ecx #define SECCOMP_PT_PARM3(_regs) (_regs).edx #define SECCOMP_PT_PARM4(_regs) (_regs).esi #define SECCOMP_PT_PARM5(_regs) (_regs).edi #define SECCOMP_PT_PARM6(_regs) (_regs).ebp #elif defined(__x86_64__) #define SECCOMP_ARCH AUDIT_ARCH_X86_64 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[(_reg)]) #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, REG_RAX) #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, REG_RAX) #define SECCOMP_IP(_ctx) SECCOMP_REG(_ctx, REG_RIP) #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, REG_RDI) #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, REG_RSI) #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, REG_RDX) #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, REG_R10) #define SECCOMP_PARM5(_ctx) SECCOMP_REG(_ctx, REG_R8) #define SECCOMP_PARM6(_ctx) SECCOMP_REG(_ctx, REG_R9) #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr)) #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch)) #define SECCOMP_IP_MSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 4) #define SECCOMP_IP_LSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 0) #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 4) #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 0) typedef user_regs_struct regs_struct; #define SECCOMP_PT_RESULT(_regs) (_regs).rax #define SECCOMP_PT_SYSCALL(_regs) (_regs).orig_rax #define SECCOMP_PT_IP(_regs) (_regs).rip #define SECCOMP_PT_PARM1(_regs) (_regs).rdi #define SECCOMP_PT_PARM2(_regs) (_regs).rsi #define SECCOMP_PT_PARM3(_regs) (_regs).rdx #define SECCOMP_PT_PARM4(_regs) (_regs).r10 #define SECCOMP_PT_PARM5(_regs) (_regs).r8 #define SECCOMP_PT_PARM6(_regs) (_regs).r9 #elif defined(__arm__) && (defined(__thumb__) || defined(__ARM_EABI__)) #define SECCOMP_ARCH AUDIT_ARCH_ARM // ARM sigcontext_t is different from i386/x86_64. // See in the Linux kernel. #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.arm_##_reg) // ARM EABI syscall convention. #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, r0) #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, r7) #define SECCOMP_IP(_ctx) SECCOMP_REG(_ctx, pc) #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, r0) #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, r1) #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, r2) #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, r3) #define SECCOMP_PARM5(_ctx) SECCOMP_REG(_ctx, r4) #define SECCOMP_PARM6(_ctx) SECCOMP_REG(_ctx, r5) #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr)) #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch)) #define SECCOMP_IP_MSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 4) #define SECCOMP_IP_LSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 0) #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 4) #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 0) #if defined(__BIONIC__) || defined(__native_client_nonsfi__) // Old Bionic versions and PNaCl toolchain don't have sys/user.h, so we just // define regs_struct directly. This can be removed once we no longer need to // support these old Bionic versions and PNaCl toolchain. struct regs_struct { unsigned long uregs[18]; }; #else typedef user_regs regs_struct; #endif #define REG_cpsr uregs[16] #define REG_pc uregs[15] #define REG_lr uregs[14] #define REG_sp uregs[13] #define REG_ip uregs[12] #define REG_fp uregs[11] #define REG_r10 uregs[10] #define REG_r9 uregs[9] #define REG_r8 uregs[8] #define REG_r7 uregs[7] #define REG_r6 uregs[6] #define REG_r5 uregs[5] #define REG_r4 uregs[4] #define REG_r3 uregs[3] #define REG_r2 uregs[2] #define REG_r1 uregs[1] #define REG_r0 uregs[0] #define REG_ORIG_r0 uregs[17] #define SECCOMP_PT_RESULT(_regs) (_regs).REG_r0 #define SECCOMP_PT_SYSCALL(_regs) (_regs).REG_r7 #define SECCOMP_PT_IP(_regs) (_regs).REG_pc #define SECCOMP_PT_PARM1(_regs) (_regs).REG_r0 #define SECCOMP_PT_PARM2(_regs) (_regs).REG_r1 #define SECCOMP_PT_PARM3(_regs) (_regs).REG_r2 #define SECCOMP_PT_PARM4(_regs) (_regs).REG_r3 #define SECCOMP_PT_PARM5(_regs) (_regs).REG_r4 #define SECCOMP_PT_PARM6(_regs) (_regs).REG_r5 #elif defined(__mips__) && (_MIPS_SIM == _MIPS_SIM_ABI32) #define SECCOMP_ARCH AUDIT_ARCH_MIPSEL #define SYSCALL_EIGHT_ARGS // MIPS sigcontext_t is different from i386/x86_64 and ARM. // See in the Linux kernel. #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.gregs[_reg]) // Based on MIPS o32 ABI syscall convention. // On MIPS, when indirect syscall is being made (syscall(__NR_foo)), // real identificator (__NR_foo) is not in v0, but in a0 #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, 2) #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, 2) #define SECCOMP_IP(_ctx) (_ctx)->uc_mcontext.pc #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, 4) #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, 5) #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, 6) #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, 7) // Only the first 4 arguments of syscall are in registers. // The rest are on the stack. #define SECCOMP_STACKPARM(_ctx, n) (((long *)SECCOMP_REG(_ctx, 29))[(n)]) #define SECCOMP_PARM5(_ctx) SECCOMP_STACKPARM(_ctx, 4) #define SECCOMP_PARM6(_ctx) SECCOMP_STACKPARM(_ctx, 5) #define SECCOMP_PARM7(_ctx) SECCOMP_STACKPARM(_ctx, 6) #define SECCOMP_PARM8(_ctx) SECCOMP_STACKPARM(_ctx, 7) #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr)) #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch)) #define SECCOMP_IP_MSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 4) #define SECCOMP_IP_LSB_IDX (offsetof(struct arch_seccomp_data, \ instruction_pointer) + 0) #define SECCOMP_ARG_MSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 4) #define SECCOMP_ARG_LSB_IDX(nr) (offsetof(struct arch_seccomp_data, args) + \ 8*(nr) + 0) // On Mips we don't have structures like user_regs or user_regs_struct in // sys/user.h that we could use, so we just define regs_struct directly. struct regs_struct { unsigned long long regs[32]; }; #define REG_a3 regs[7] #define REG_a2 regs[6] #define REG_a1 regs[5] #define REG_a0 regs[4] #define REG_v1 regs[3] #define REG_v0 regs[2] #define SECCOMP_PT_RESULT(_regs) (_regs).REG_v0 #define SECCOMP_PT_SYSCALL(_regs) (_regs).REG_v0 #define SECCOMP_PT_PARM1(_regs) (_regs).REG_a0 #define SECCOMP_PT_PARM2(_regs) (_regs).REG_a1 #define SECCOMP_PT_PARM3(_regs) (_regs).REG_a2 #define SECCOMP_PT_PARM4(_regs) (_regs).REG_a3 #elif defined(__aarch64__) struct regs_struct { unsigned long long regs[31]; unsigned long long sp; unsigned long long pc; unsigned long long pstate; }; #define SECCOMP_ARCH AUDIT_ARCH_AARCH64 #define SECCOMP_REG(_ctx, _reg) ((_ctx)->uc_mcontext.regs[_reg]) #define SECCOMP_RESULT(_ctx) SECCOMP_REG(_ctx, 0) #define SECCOMP_SYSCALL(_ctx) SECCOMP_REG(_ctx, 8) #define SECCOMP_IP(_ctx) (_ctx)->uc_mcontext.pc #define SECCOMP_PARM1(_ctx) SECCOMP_REG(_ctx, 0) #define SECCOMP_PARM2(_ctx) SECCOMP_REG(_ctx, 1) #define SECCOMP_PARM3(_ctx) SECCOMP_REG(_ctx, 2) #define SECCOMP_PARM4(_ctx) SECCOMP_REG(_ctx, 3) #define SECCOMP_PARM5(_ctx) SECCOMP_REG(_ctx, 4) #define SECCOMP_PARM6(_ctx) SECCOMP_REG(_ctx, 5) #define SECCOMP_NR_IDX (offsetof(struct arch_seccomp_data, nr)) #define SECCOMP_ARCH_IDX (offsetof(struct arch_seccomp_data, arch)) #define SECCOMP_IP_MSB_IDX \ (offsetof(struct arch_seccomp_data, instruction_pointer) + 4) #define SECCOMP_IP_LSB_IDX \ (offsetof(struct arch_seccomp_data, instruction_pointer) + 0) #define SECCOMP_ARG_MSB_IDX(nr) \ (offsetof(struct arch_seccomp_data, args) + 8 * (nr) + 4) #define SECCOMP_ARG_LSB_IDX(nr) \ (offsetof(struct arch_seccomp_data, args) + 8 * (nr) + 0) #define SECCOMP_PT_RESULT(_regs) (_regs).regs[0] #define SECCOMP_PT_SYSCALL(_regs) (_regs).regs[8] #define SECCOMP_PT_IP(_regs) (_regs).pc #define SECCOMP_PT_PARM1(_regs) (_regs).regs[0] #define SECCOMP_PT_PARM2(_regs) (_regs).regs[1] #define SECCOMP_PT_PARM3(_regs) (_regs).regs[2] #define SECCOMP_PT_PARM4(_regs) (_regs).regs[3] #define SECCOMP_PT_PARM5(_regs) (_regs).regs[4] #define SECCOMP_PT_PARM6(_regs) (_regs).regs[5] #else #error Unsupported target platform #endif #endif // SANDBOX_LINUX_BPF_DSL_SECCOMP_MACROS_H_