mirror of https://github.com/mkerrisk/man-pages
seccomp.2: ffix
Signed-off-by: Michael Kerrisk <mtk.manpages@gmail.com>
This commit is contained in:
parent
2b1f1a35b5
commit
0582770c52
|
@ -692,9 +692,9 @@ install_filter(int syscall_nr, int t_arch, int f_errno)
|
|||
BPF_STMT(BPF_LD | BPF_W | BPF_ABS,
|
||||
(offsetof(struct seccomp_data, nr))),
|
||||
|
||||
/* [3] Check ABI - only needed for X86-64 in blacklist usecases.
|
||||
Use JGT instead of checking against the bit mask to avoid
|
||||
having to reload the syscall number. */
|
||||
/* [3] Check ABI - only needed for X86-64 in blacklist use
|
||||
cases. Use JGT instead of checking against the bit
|
||||
mask to avoid having to reload the syscall number. */
|
||||
BPF_JUMP(BPF_JMP | BPF_JGT | BPF_K, upper_nr_limit, 3, 0),
|
||||
|
||||
/* [4] Jump forward 1 instruction if system call number
|
||||
|
|
Loading…
Reference in New Issue