|  | /* | 
|  | * System call table mapper | 
|  | * | 
|  | * (C) 2016 Arnaldo Carvalho de Melo <acme@redhat.com> | 
|  | * | 
|  | * This program is free software; you can redistribute it and/or modify it | 
|  | * under the terms and conditions of the GNU General Public License, | 
|  | * version 2, as published by the Free Software Foundation. | 
|  | * | 
|  | * This program is distributed in the hope it will be useful, but WITHOUT | 
|  | * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or | 
|  | * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for | 
|  | * more details. | 
|  | */ | 
|  |  | 
|  | #include "syscalltbl.h" | 
|  | #include <stdlib.h> | 
|  | #include <linux/compiler.h> | 
|  |  | 
|  | #ifdef HAVE_SYSCALL_TABLE | 
|  | #include <string.h> | 
|  | #include "string2.h" | 
|  | #include "util.h" | 
|  |  | 
|  | #if defined(__x86_64__) | 
|  | #include <asm/syscalls_64.c> | 
|  | const int syscalltbl_native_max_id = SYSCALLTBL_x86_64_MAX_ID; | 
|  | static const char **syscalltbl_native = syscalltbl_x86_64; | 
|  | #endif | 
|  |  | 
|  | struct syscall { | 
|  | int id; | 
|  | const char *name; | 
|  | }; | 
|  |  | 
|  | static int syscallcmpname(const void *vkey, const void *ventry) | 
|  | { | 
|  | const char *key = vkey; | 
|  | const struct syscall *entry = ventry; | 
|  |  | 
|  | return strcmp(key, entry->name); | 
|  | } | 
|  |  | 
|  | static int syscallcmp(const void *va, const void *vb) | 
|  | { | 
|  | const struct syscall *a = va, *b = vb; | 
|  |  | 
|  | return strcmp(a->name, b->name); | 
|  | } | 
|  |  | 
|  | static int syscalltbl__init_native(struct syscalltbl *tbl) | 
|  | { | 
|  | int nr_entries = 0, i, j; | 
|  | struct syscall *entries; | 
|  |  | 
|  | for (i = 0; i <= syscalltbl_native_max_id; ++i) | 
|  | if (syscalltbl_native[i]) | 
|  | ++nr_entries; | 
|  |  | 
|  | entries = tbl->syscalls.entries = malloc(sizeof(struct syscall) * nr_entries); | 
|  | if (tbl->syscalls.entries == NULL) | 
|  | return -1; | 
|  |  | 
|  | for (i = 0, j = 0; i <= syscalltbl_native_max_id; ++i) { | 
|  | if (syscalltbl_native[i]) { | 
|  | entries[j].name = syscalltbl_native[i]; | 
|  | entries[j].id = i; | 
|  | ++j; | 
|  | } | 
|  | } | 
|  |  | 
|  | qsort(tbl->syscalls.entries, nr_entries, sizeof(struct syscall), syscallcmp); | 
|  | tbl->syscalls.nr_entries = nr_entries; | 
|  | return 0; | 
|  | } | 
|  |  | 
|  | struct syscalltbl *syscalltbl__new(void) | 
|  | { | 
|  | struct syscalltbl *tbl = malloc(sizeof(*tbl)); | 
|  | if (tbl) { | 
|  | if (syscalltbl__init_native(tbl)) { | 
|  | free(tbl); | 
|  | return NULL; | 
|  | } | 
|  | } | 
|  | return tbl; | 
|  | } | 
|  |  | 
|  | void syscalltbl__delete(struct syscalltbl *tbl) | 
|  | { | 
|  | zfree(&tbl->syscalls.entries); | 
|  | free(tbl); | 
|  | } | 
|  |  | 
|  | const char *syscalltbl__name(const struct syscalltbl *tbl __maybe_unused, int id) | 
|  | { | 
|  | return id <= syscalltbl_native_max_id ? syscalltbl_native[id]: NULL; | 
|  | } | 
|  |  | 
|  | int syscalltbl__id(struct syscalltbl *tbl, const char *name) | 
|  | { | 
|  | struct syscall *sc = bsearch(name, tbl->syscalls.entries, | 
|  | tbl->syscalls.nr_entries, sizeof(*sc), | 
|  | syscallcmpname); | 
|  |  | 
|  | return sc ? sc->id : -1; | 
|  | } | 
|  |  | 
|  | int syscalltbl__strglobmatch_next(struct syscalltbl *tbl, const char *syscall_glob, int *idx) | 
|  | { | 
|  | int i; | 
|  | struct syscall *syscalls = tbl->syscalls.entries; | 
|  |  | 
|  | for (i = *idx + 1; i < tbl->syscalls.nr_entries; ++i) { | 
|  | if (strglobmatch(syscalls[i].name, syscall_glob)) { | 
|  | *idx = i; | 
|  | return syscalls[i].id; | 
|  | } | 
|  | } | 
|  |  | 
|  | return -1; | 
|  | } | 
|  |  | 
|  | int syscalltbl__strglobmatch_first(struct syscalltbl *tbl, const char *syscall_glob, int *idx) | 
|  | { | 
|  | *idx = -1; | 
|  | return syscalltbl__strglobmatch_next(tbl, syscall_glob, idx); | 
|  | } | 
|  |  | 
|  | #else /* HAVE_SYSCALL_TABLE */ | 
|  |  | 
|  | #include <libaudit.h> | 
|  |  | 
|  | struct syscalltbl *syscalltbl__new(void) | 
|  | { | 
|  | struct syscalltbl *tbl = malloc(sizeof(*tbl)); | 
|  | if (tbl) | 
|  | tbl->audit_machine = audit_detect_machine(); | 
|  | return tbl; | 
|  | } | 
|  |  | 
|  | void syscalltbl__delete(struct syscalltbl *tbl) | 
|  | { | 
|  | free(tbl); | 
|  | } | 
|  |  | 
|  | const char *syscalltbl__name(const struct syscalltbl *tbl, int id) | 
|  | { | 
|  | return audit_syscall_to_name(id, tbl->audit_machine); | 
|  | } | 
|  |  | 
|  | int syscalltbl__id(struct syscalltbl *tbl, const char *name) | 
|  | { | 
|  | return audit_name_to_syscall(name, tbl->audit_machine); | 
|  | } | 
|  |  | 
|  | int syscalltbl__strglobmatch_next(struct syscalltbl *tbl __maybe_unused, | 
|  | const char *syscall_glob __maybe_unused, int *idx __maybe_unused) | 
|  | { | 
|  | return -1; | 
|  | } | 
|  |  | 
|  | int syscalltbl__strglobmatch_first(struct syscalltbl *tbl, const char *syscall_glob, int *idx) | 
|  | { | 
|  | return syscalltbl__strglobmatch_next(tbl, syscall_glob, idx); | 
|  | } | 
|  | #endif /* HAVE_SYSCALL_TABLE */ |