[seccomp/libseccomp] 2de3b8: bpf: pfc: Add handling for 0 syscalls in the binar...

[Tom Hromatka]

Branch: refs/heads/main
Home: https://github.com/seccomp/libseccomp
Commit: 2de3b87122c18b58b3e2b32ab2e81ac43774a7aa
https://github.com/seccomp/libseccomp/commit/2de3b87122c18b58b3e2b32ab2e81ac43774a7aa
Author: Tom Hromatka <tom.hr...@oracle.com>
Date: 2022-03-18 (Fri, 18 Mar 2022)

Changed paths:
M src/gen_bpf.c
M src/gen_pfc.c

Log Message:
-----------
bpf: pfc: Add handling for 0 syscalls in the binary tree

Handle the unlikely case where a user has chosen the
binary tree optimization but has zero syscalls in their
filter.

Fixes: https://github.com/seccomp/libseccomp/issues/370
Fixes: a3732b32b8e67 ("bpf:pfc: Add optimization option to use a binary tree")
Signed-off-by: Tom Hromatka <tom.hr...@oracle.com>
Acked-by: Paul Moore <pa...@paul-moore.com>


Commit: c1c2e28520689779626dbbad8f11866b9b962748
https://github.com/seccomp/libseccomp/commit/c1c2e28520689779626dbbad8f11866b9b962748
Author: Tom Hromatka <tom.hr...@oracle.com>
Date: 2022-03-18 (Fri, 18 Mar 2022)

Changed paths:
M tests/53-sim-binary_tree.py

Log Message:
-----------
tests: fix 53-sim-binary_tree to use binary tree

SCMP_FLTATR_CTL_OPTIMIZE = 2 was not being set for test
53-sim-binary_tree.py. Set the optimization level to 2 to
ensure that the binary tree is being employed.

Fixes: 38f04da84748 ("tests: add tests for the binary tree")
Signed-off-by: Tom Hromatka <tom.hr...@oracle.com>
Acked-by: Paul Moore <pa...@paul-moore.com>


Commit: 5731dd9f73df9025b2c8924e2f4ce78a7d94af00
https://github.com/seccomp/libseccomp/commit/5731dd9f73df9025b2c8924e2f4ce78a7d94af00
Author: Tom Hromatka <tom.hr...@oracle.com>
Date: 2022-03-18 (Fri, 18 Mar 2022)

Changed paths:
M tests/.gitignore
A tests/59-basic-empty_binary_tree.c
A tests/59-basic-empty_binary_tree.py
A tests/59-basic-empty_binary_tree.tests
M tests/Makefile.am

Log Message:
-----------
tests: Add a binary tree test with zero syscalls

Add a test that exercises the binary tree optimization but
the seccomp filter has zero syscalls in it.

Related-bug: https://github.com/seccomp/libseccomp/issues/370
Signed-off-by: Tom Hromatka <tom.hr...@oracle.com>
Acked-by: Paul Moore <pa...@paul-moore.com>


Compare: https://github.com/seccomp/libseccomp/compare/5731b3c338f8...5731dd9f73df