Lines Matching refs:filter
280 static int seccomp_check_filter(struct sock_filter *filter, unsigned int flen) in seccomp_check_filter() argument
284 struct sock_filter *ftest = &filter[pc]; in seccomp_check_filter()
412 READ_ONCE(current->seccomp.filter); in seccomp_run_filters()
511 is_ancestor(thread->seccomp.filter, in seccomp_can_sync_threads()
512 caller->seccomp.filter))) in seccomp_can_sync_threads()
526 static inline void seccomp_filter_free(struct seccomp_filter *filter) in seccomp_filter_free() argument
528 if (filter) { in seccomp_filter_free()
529 bpf_prog_destroy(filter->prog); in seccomp_filter_free()
530 kfree(filter); in seccomp_filter_free()
580 orig = tsk->seccomp.filter; in seccomp_filter_release()
582 tsk->seccomp.filter = NULL; in seccomp_filter_release()
626 __seccomp_filter_release(thread->seccomp.filter); in seccomp_sync_threads()
629 smp_store_release(&thread->seccomp.filter, in seccomp_sync_threads()
630 caller->seccomp.filter); in seccomp_sync_threads()
717 struct seccomp_filter *filter = ERR_PTR(-EFAULT); in seccomp_prepare_user_filter() local
725 fprog.filter = compat_ptr(fprog32.filter); in seccomp_prepare_user_filter()
730 filter = seccomp_prepare_filter(&fprog); in seccomp_prepare_user_filter()
732 return filter; in seccomp_prepare_user_filter()
753 struct sock_filter *insn = &fprog->filter[pc]; in seccomp_is_const_allow()
890 struct seccomp_filter *filter) in seccomp_attach_filter() argument
898 total_insns = filter->prog->len; in seccomp_attach_filter()
899 for (walker = current->seccomp.filter; walker; walker = walker->prev) in seccomp_attach_filter()
919 filter->log = true; in seccomp_attach_filter()
923 filter->wait_killable_recv = true; in seccomp_attach_filter()
929 filter->prev = current->seccomp.filter; in seccomp_attach_filter()
930 seccomp_cache_prepare(filter); in seccomp_attach_filter()
931 current->seccomp.filter = filter; in seccomp_attach_filter()
941 static void __get_seccomp_filter(struct seccomp_filter *filter) in __get_seccomp_filter() argument
943 refcount_inc(&filter->refs); in __get_seccomp_filter()
949 struct seccomp_filter *orig = tsk->seccomp.filter; in get_seccomp_filter()
1068 static u64 seccomp_next_notify_id(struct seccomp_filter *filter) in seccomp_next_notify_id() argument
1074 lockdep_assert_held(&filter->notify_lock); in seccomp_next_notify_id()
1075 return filter->notif->next_id++; in seccomp_next_notify_id()
1414 static void seccomp_notify_free(struct seccomp_filter *filter) in seccomp_notify_free() argument
1416 kfree(filter->notif); in seccomp_notify_free()
1417 filter->notif = NULL; in seccomp_notify_free()
1420 static void seccomp_notify_detach(struct seccomp_filter *filter) in seccomp_notify_detach() argument
1424 if (!filter) in seccomp_notify_detach()
1427 mutex_lock(&filter->notify_lock); in seccomp_notify_detach()
1433 list_for_each_entry(knotif, &filter->notif->notifications, list) { in seccomp_notify_detach()
1449 seccomp_notify_free(filter); in seccomp_notify_detach()
1450 mutex_unlock(&filter->notify_lock); in seccomp_notify_detach()
1455 struct seccomp_filter *filter = file->private_data; in seccomp_notify_release() local
1457 seccomp_notify_detach(filter); in seccomp_notify_release()
1458 __put_seccomp_filter(filter); in seccomp_notify_release()
1464 find_notification(struct seccomp_filter *filter, u64 id) in find_notification() argument
1468 lockdep_assert_held(&filter->notify_lock); in find_notification()
1470 list_for_each_entry(cur, &filter->notif->notifications, list) { in find_notification()
1487 static int recv_wait_event(struct seccomp_filter *filter) in recv_wait_event() argument
1492 if (refcount_read(&filter->users) == 0) in recv_wait_event()
1495 if (atomic_dec_if_positive(&filter->notif->requests) >= 0) in recv_wait_event()
1499 ret = prepare_to_wait_event(&filter->wqh, &wait, TASK_INTERRUPTIBLE); in recv_wait_event()
1501 if (atomic_dec_if_positive(&filter->notif->requests) >= 0) in recv_wait_event()
1503 if (refcount_read(&filter->users) == 0) in recv_wait_event()
1511 finish_wait(&filter->wqh, &wait); in recv_wait_event()
1515 static long seccomp_notify_recv(struct seccomp_filter *filter, in seccomp_notify_recv() argument
1531 ret = recv_wait_event(filter); in seccomp_notify_recv()
1535 mutex_lock(&filter->notify_lock); in seccomp_notify_recv()
1536 list_for_each_entry(cur, &filter->notif->notifications, list) { in seccomp_notify_recv()
1558 wake_up_poll(&filter->wqh, EPOLLOUT | EPOLLWRNORM); in seccomp_notify_recv()
1561 mutex_unlock(&filter->notify_lock); in seccomp_notify_recv()
1572 mutex_lock(&filter->notify_lock); in seccomp_notify_recv()
1573 knotif = find_notification(filter, unotif.id); in seccomp_notify_recv()
1576 if (should_sleep_killable(filter, knotif)) in seccomp_notify_recv()
1579 atomic_inc(&filter->notif->requests); in seccomp_notify_recv()
1580 wake_up_poll(&filter->wqh, EPOLLIN | EPOLLRDNORM); in seccomp_notify_recv()
1582 mutex_unlock(&filter->notify_lock); in seccomp_notify_recv()
1588 static long seccomp_notify_send(struct seccomp_filter *filter, in seccomp_notify_send() argument
1605 ret = mutex_lock_interruptible(&filter->notify_lock); in seccomp_notify_send()
1609 knotif = find_notification(filter, resp.id); in seccomp_notify_send()
1626 if (filter->notif->flags & SECCOMP_USER_NOTIF_FD_SYNC_WAKE_UP) in seccomp_notify_send()
1631 mutex_unlock(&filter->notify_lock); in seccomp_notify_send()
1635 static long seccomp_notify_id_valid(struct seccomp_filter *filter, in seccomp_notify_id_valid() argument
1645 ret = mutex_lock_interruptible(&filter->notify_lock); in seccomp_notify_id_valid()
1649 knotif = find_notification(filter, id); in seccomp_notify_id_valid()
1655 mutex_unlock(&filter->notify_lock); in seccomp_notify_id_valid()
1659 static long seccomp_notify_set_flags(struct seccomp_filter *filter, in seccomp_notify_set_flags() argument
1667 ret = mutex_lock_interruptible(&filter->notify_lock); in seccomp_notify_set_flags()
1670 filter->notif->flags = flags; in seccomp_notify_set_flags()
1671 mutex_unlock(&filter->notify_lock); in seccomp_notify_set_flags()
1675 static long seccomp_notify_addfd(struct seccomp_filter *filter, in seccomp_notify_addfd() argument
1713 ret = mutex_lock_interruptible(&filter->notify_lock); in seccomp_notify_addfd()
1717 knotif = find_notification(filter, addfd.id); in seccomp_notify_addfd()
1752 mutex_unlock(&filter->notify_lock); in seccomp_notify_addfd()
1768 mutex_lock(&filter->notify_lock); in seccomp_notify_addfd()
1782 mutex_unlock(&filter->notify_lock); in seccomp_notify_addfd()
1792 struct seccomp_filter *filter = file->private_data; in seccomp_notify_ioctl() local
1798 return seccomp_notify_recv(filter, buf); in seccomp_notify_ioctl()
1800 return seccomp_notify_send(filter, buf); in seccomp_notify_ioctl()
1803 return seccomp_notify_id_valid(filter, buf); in seccomp_notify_ioctl()
1805 return seccomp_notify_set_flags(filter, arg); in seccomp_notify_ioctl()
1812 return seccomp_notify_addfd(filter, buf, _IOC_SIZE(cmd)); in seccomp_notify_ioctl()
1821 struct seccomp_filter *filter = file->private_data; in seccomp_notify_poll() local
1825 poll_wait(file, &filter->wqh, poll_tab); in seccomp_notify_poll()
1827 if (mutex_lock_interruptible(&filter->notify_lock) < 0) in seccomp_notify_poll()
1830 list_for_each_entry(cur, &filter->notif->notifications, list) { in seccomp_notify_poll()
1839 mutex_unlock(&filter->notify_lock); in seccomp_notify_poll()
1841 if (refcount_read(&filter->users) == 0) in seccomp_notify_poll()
1854 static struct file *init_listener(struct seccomp_filter *filter) in init_listener() argument
1859 filter->notif = kzalloc(sizeof(*(filter->notif)), GFP_KERNEL); in init_listener()
1860 if (!filter->notif) in init_listener()
1863 filter->notif->next_id = get_random_u64(); in init_listener()
1864 INIT_LIST_HEAD(&filter->notif->notifications); in init_listener()
1867 filter, O_RDWR); in init_listener()
1872 __get_seccomp_filter(filter); in init_listener()
1876 seccomp_notify_free(filter); in init_listener()
1898 for (cur = current->seccomp.filter; cur; cur = cur->prev) { in has_duplicate_listener()
1920 const char __user *filter) in seccomp_set_mode_filter() argument
1953 prepared = seccomp_prepare_user_filter(filter); in seccomp_set_mode_filter()
2019 const char __user *filter) in seccomp_set_mode_filter() argument
2102 long prctl_set_seccomp(unsigned long seccomp_mode, void __user *filter) in prctl_set_seccomp() argument
2119 uargs = filter; in prctl_set_seccomp()
2133 struct seccomp_filter *orig, *filter; in get_nth_filter() local
2147 orig = task->seccomp.filter; in get_nth_filter()
2152 for (filter = orig; filter; filter = filter->prev) in get_nth_filter()
2156 filter = ERR_PTR(-ENOENT); in get_nth_filter()
2161 for (filter = orig; filter && count > 1; filter = filter->prev) in get_nth_filter()
2164 if (WARN_ON(count != 1 || !filter)) { in get_nth_filter()
2165 filter = ERR_PTR(-ENOENT); in get_nth_filter()
2169 __get_seccomp_filter(filter); in get_nth_filter()
2173 return filter; in get_nth_filter()
2179 struct seccomp_filter *filter; in seccomp_get_filter() local
2188 filter = get_nth_filter(task, filter_off); in seccomp_get_filter()
2189 if (IS_ERR(filter)) in seccomp_get_filter()
2190 return PTR_ERR(filter); in seccomp_get_filter()
2192 fprog = filter->prog->orig_prog; in seccomp_get_filter()
2206 if (copy_to_user(data, fprog->filter, bpf_classic_proglen(fprog))) in seccomp_get_filter()
2210 __put_seccomp_filter(filter); in seccomp_get_filter()
2218 struct seccomp_filter *filter; in seccomp_get_metadata() local
2234 filter = get_nth_filter(task, kmd.filter_off); in seccomp_get_metadata()
2235 if (IS_ERR(filter)) in seccomp_get_metadata()
2236 return PTR_ERR(filter); in seccomp_get_metadata()
2238 if (filter->log) in seccomp_get_metadata()
2245 __put_seccomp_filter(filter); in seccomp_get_metadata()
2509 f = READ_ONCE(task->seccomp.filter); in proc_pid_seccomp_cache()