netbird/gvisor
0
0
Fork 0
mirror of https://github.com/netbirdio/gvisor.git synced 2026-05-22 17:12:49 -07:00
Code Issues Packages Projects Releases Wiki Activity

Avoid redundant allocation in seccomp.optimizeSyscallRuleFunc().

Browse Source 
PiperOrigin-RevId: 586120281
This commit is contained in:
Jamie Liu
2023-11-28 15:25:20 -08:00
committed by gVisor bot
parent 8e36d125da
commit 9cf9d1d01d
1 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/seccomp/seccomp_optimizer.go
+11 -3
View File
@@ -191,11 +191,19 @@ func deduplicatePerArgs[T Or | And](rule SyscallRule) (SyscallRule, bool) {
// An optimizer will be exhausted before the next one is ever run.
// Earlier optimizers are re-exhausted if later optimizers cause change.
func optimizeSyscallRuleFuncs(rule SyscallRule, funcs []ruleOptimizerFunc) SyscallRule {
// Instantiate this closure only once, since passing it to (interface
// method) rule.Recurse() causes it to escape.
var recurse func(subRule SyscallRule) SyscallRule
recurse = func(subRule SyscallRule) SyscallRule {
return optimizeSyscallRuleFuncsRecursive(subRule, funcs, recurse)
}
return optimizeSyscallRuleFuncsRecursive(rule, funcs, recurse)
}
func optimizeSyscallRuleFuncsRecursive(rule SyscallRule, funcs []ruleOptimizerFunc, recurse func(subRule SyscallRule) SyscallRule) SyscallRule {
for changed := true; changed; {
for _, fn := range funcs {
rule.Recurse(func(subRule SyscallRule) SyscallRule {
return optimizeSyscallRuleFuncs(subRule, funcs)
})
rule.Recurse(recurse)
if rule, changed = fn(rule); changed {
break
}