BPF jumps longer than 256 instructions should use K as the offset

twtiger / gosecco

Go seccomp parser and compiler

GNU Lesser General Public License v3.0

53 stars 7 forks source link

Closed chelseakomlo closed 8 years ago

chelseakomlo commented 8 years ago

BPF_JA uses K as the offset, allowing for arbitrarily long jump instructions.

olabini commented 8 years ago

Indeed, this would be good - we need to check whenever we fix up jump places if we are generating too long jumps.