seccomp.2: ffix

Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
Michael Kerrisk 2015-04-07 15:05:14 +02:00
parent 2b1f1a35b5
commit 0582770c52
1 changed files with 3 additions and 3 deletions

View File

@ -692,9 +692,9 @@ install_filter(int syscall_nr, int t_arch, int f_errno)
BPF_STMT(BPF_LD | BPF_W | BPF_ABS,
(offsetof(struct seccomp_data, nr))),
/* [3] Check ABI - only needed for X86-64 in blacklist usecases.
Use JGT instead of checking against the bit mask to avoid
having to reload the syscall number. */
/* [3] Check ABI - only needed for X86-64 in blacklist use
cases. Use JGT instead of checking against the bit
mask to avoid having to reload the syscall number. */
BPF_JUMP(BPF_JMP | BPF_JGT | BPF_K, upper_nr_limit, 3, 0),
/* [4] Jump forward 1 instruction if system call number