Commit Graph

29 Commits

Author SHA1 Message Date
Lennart Poettering ce8f6d478e seccomp: allow turning off of seccomp filtering via env var
Fixes: #17504

(While we are it, also move $SYSTEMD_SECCOMP_LOG= env var description
into the right document section)

Also suggested in: https://github.com/systemd/systemd/issues/17245#issuecomment-704773603
2020-11-05 20:22:19 +01:00
Zbigniew Jędrzejewski-Szmek d75615f398 nspawn: turn on higher optimization level in seccomp
$ sudo ./dump_seccomp_filter $PIDOF_NSPAWN_PAYLOAD obj
$ ~/src/libseccomp/build/tools/scmp_bpf_disasm <obj

Before the addition of @known to filter:
 line  OP   JT   JF   K
=================================
 0000: 0x20 0x00 0x00 0x00000004   ld  $data[4]
 0001: 0x15 0x00 0x6d 0x40000003   jeq 1073741827 true:0002 false:0111
 0002: 0x20 0x00 0x00 0x00000000   ld  $data[0]
 0003: 0x15 0x6b 0x00 0x00000000   jeq 0    true:0111 false:0004
 0004: 0x15 0x6a 0x00 0x00000001   jeq 1    true:0111 false:0005
 0005: 0x15 0x69 0x00 0x00000002   jeq 2    true:0111 false:0006
 0006: 0x15 0x68 0x00 0x00000003   jeq 3    true:0111 false:0007
 0007: 0x15 0x67 0x00 0x00000004   jeq 4    true:0111 false:0008
 0008: 0x15 0x66 0x00 0x00000005   jeq 5    true:0111 false:0009
 0009: 0x15 0x65 0x00 0x00000006   jeq 6    true:0111 false:0010
 0010: 0x15 0x64 0x00 0x00000007   jeq 7    true:0111 false:0011
 0011: 0x15 0x63 0x00 0x00000008   jeq 8    true:0111 false:0012
 0012: 0x15 0x62 0x00 0x00000009   jeq 9    true:0111 false:0013
 0013: 0x15 0x61 0x00 0x0000000a   jeq 10   true:0111 false:0014
 0014: 0x15 0x60 0x00 0x0000000b   jeq 11   true:0111 false:0015
 0015: 0x15 0x5f 0x00 0x0000000c   jeq 12   true:0111 false:0016
 0016: 0x15 0x5e 0x00 0x0000000d   jeq 13   true:0111 false:0017
 0017: 0x15 0x5d 0x00 0x0000000e   jeq 14   true:0111 false:0018
 0018: 0x15 0x5c 0x00 0x0000000f   jeq 15   true:0111 false:0019
 0019: 0x15 0x5b 0x00 0x00000010   jeq 16   true:0111 false:0020
 0020: 0x15 0x5a 0x00 0x00000012   jeq 18   true:0111 false:0021
 0021: 0x15 0x59 0x00 0x00000013   jeq 19   true:0111 false:0022
 0022: 0x15 0x58 0x00 0x00000014   jeq 20   true:0111 false:0023
 0023: 0x15 0x57 0x00 0x00000015   jeq 21   true:0111 false:0024
 0024: 0x15 0x56 0x00 0x00000016   jeq 22   true:0111 false:0025
 0025: 0x15 0x55 0x00 0x00000017   jeq 23   true:0111 false:0026
 0026: 0x15 0x54 0x00 0x00000018   jeq 24   true:0111 false:0027
 0027: 0x15 0x53 0x00 0x0000001a   jeq 26   true:0111 false:0028
 0028: 0x15 0x52 0x00 0x0000001b   jeq 27   true:0111 false:0029
 0029: 0x15 0x51 0x00 0x0000001c   jeq 28   true:0111 false:0030
 0030: 0x15 0x50 0x00 0x0000001d   jeq 29   true:0111 false:0031
 0031: 0x15 0x4f 0x00 0x0000001e   jeq 30   true:0111 false:0032
 0032: 0x15 0x4e 0x00 0x00000021   jeq 33   true:0111 false:0033
 0033: 0x15 0x4d 0x00 0x00000022   jeq 34   true:0111 false:0034
 0034: 0x15 0x4c 0x00 0x00000024   jeq 36   true:0111 false:0035
 0035: 0x15 0x4b 0x00 0x00000025   jeq 37   true:0111 false:0036
 0036: 0x15 0x4a 0x00 0x00000026   jeq 38   true:0111 false:0037
 0037: 0x15 0x49 0x00 0x00000027   jeq 39   true:0111 false:0038
 0038: 0x15 0x48 0x00 0x00000028   jeq 40   true:0111 false:0039
 0039: 0x15 0x47 0x00 0x00000029   jeq 41   true:0111 false:0040
 0040: 0x15 0x46 0x00 0x0000002a   jeq 42   true:0111 false:0041
 0041: 0x15 0x45 0x00 0x0000002b   jeq 43   true:0111 false:0042
 0042: 0x15 0x44 0x00 0x0000002d   jeq 45   true:0111 false:0043
 0043: 0x15 0x43 0x00 0x0000002e   jeq 46   true:0111 false:0044
 0044: 0x15 0x42 0x00 0x0000002f   jeq 47   true:0111 false:0045
 0045: 0x15 0x41 0x00 0x00000030   jeq 48   true:0111 false:0046
 0046: 0x15 0x40 0x00 0x00000031   jeq 49   true:0111 false:0047
 0047: 0x15 0x3f 0x00 0x00000032   jeq 50   true:0111 false:0048
 0048: 0x15 0x3e 0x00 0x00000034   jeq 52   true:0111 false:0049
 0049: 0x15 0x3d 0x00 0x00000036   jeq 54   true:0111 false:0050
 0050: 0x15 0x3c 0x00 0x00000037   jeq 55   true:0111 false:0051
 0051: 0x15 0x3b 0x00 0x00000039   jeq 57   true:0111 false:0052
 0052: 0x15 0x3a 0x00 0x0000003b   jeq 59   true:0111 false:0053
 0053: 0x15 0x39 0x00 0x0000003c   jeq 60   true:0111 false:0054
 0054: 0x15 0x38 0x00 0x0000003d   jeq 61   true:0111 false:0055
 0055: 0x15 0x37 0x00 0x0000003f   jeq 63   true:0111 false:0056
 0056: 0x15 0x36 0x00 0x00000040   jeq 64   true:0111 false:0057
 0057: 0x15 0x35 0x00 0x00000041   jeq 65   true:0111 false:0058
 0058: 0x15 0x34 0x00 0x00000042   jeq 66   true:0111 false:0059
 0059: 0x15 0x33 0x00 0x00000043   jeq 67   true:0111 false:0060
 0060: 0x15 0x32 0x00 0x00000046   jeq 70   true:0111 false:0061
 0061: 0x15 0x31 0x00 0x00000047   jeq 71   true:0111 false:0062
 0062: 0x15 0x30 0x00 0x00000048   jeq 72   true:0111 false:0063
 0063: 0x15 0x2f 0x00 0x00000049   jeq 73   true:0111 false:0064
 0064: 0x15 0x2e 0x00 0x0000004a   jeq 74   true:0111 false:0065
 0065: 0x15 0x2d 0x00 0x0000004b   jeq 75   true:0111 false:0066
 0066: 0x15 0x2c 0x00 0x0000004c   jeq 76   true:0111 false:0067
 0067: 0x15 0x2b 0x00 0x0000004d   jeq 77   true:0111 false:0068
 0068: 0x15 0x2a 0x00 0x0000004e   jeq 78   true:0111 false:0069
 0069: 0x15 0x29 0x00 0x00000050   jeq 80   true:0111 false:0070
 0070: 0x15 0x28 0x00 0x00000051   jeq 81   true:0111 false:0071
 0071: 0x15 0x27 0x00 0x00000052   jeq 82   true:0111 false:0072
 0072: 0x15 0x26 0x00 0x00000053   jeq 83   true:0111 false:0073
 0073: 0x15 0x25 0x00 0x00000054   jeq 84   true:0111 false:0074
 0074: 0x15 0x24 0x00 0x00000055   jeq 85   true:0111 false:0075
 0075: 0x15 0x23 0x00 0x00000058   jeq 88   true:0111 false:0076
 0076: 0x15 0x22 0x00 0x00000059   jeq 89   true:0111 false:0077
 0077: 0x15 0x21 0x00 0x0000005a   jeq 90   true:0111 false:0078
 0078: 0x15 0x20 0x00 0x0000005b   jeq 91   true:0111 false:0079
 0079: 0x15 0x1f 0x00 0x0000005c   jeq 92   true:0111 false:0080
 0080: 0x15 0x1e 0x00 0x0000005d   jeq 93   true:0111 false:0081
 0081: 0x15 0x1d 0x00 0x0000005e   jeq 94   true:0111 false:0082
 0082: 0x15 0x1c 0x00 0x0000005f   jeq 95   true:0111 false:0083
 0083: 0x15 0x1b 0x00 0x00000060   jeq 96   true:0111 false:0084
 0084: 0x15 0x1a 0x00 0x00000061   jeq 97   true:0111 false:0085
 0085: 0x15 0x19 0x00 0x00000063   jeq 99   true:0111 false:0086
 0086: 0x15 0x18 0x00 0x00000064   jeq 100  true:0111 false:0087
 0087: 0x15 0x17 0x00 0x00000066   jeq 102  true:0111 false:0088
 0088: 0x15 0x16 0x00 0x00000068   jeq 104  true:0111 false:0089
 0089: 0x15 0x15 0x00 0x00000069   jeq 105  true:0111 false:0090
 0090: 0x15 0x14 0x00 0x0000006a   jeq 106  true:0111 false:0091
 0091: 0x15 0x13 0x00 0x0000006b   jeq 107  true:0111 false:0092
 0092: 0x15 0x12 0x00 0x0000006c   jeq 108  true:0111 false:0093
 0093: 0x15 0x11 0x00 0x0000006d   jeq 109  true:0111 false:0094
 0094: 0x15 0x10 0x00 0x0000006f   jeq 111  true:0111 false:0095
 0095: 0x15 0x0f 0x00 0x00000072   jeq 114  true:0111 false:0096
 0096: 0x15 0x0e 0x00 0x00000074   jeq 116  true:0111 false:0097
 0097: 0x15 0x0d 0x00 0x00000075   jeq 117  true:0111 false:0098
 0098: 0x15 0x0c 0x00 0x00000076   jeq 118  true:0111 false:0099
 0099: 0x15 0x0b 0x00 0x00000077   jeq 119  true:0111 false:0100
 0100: 0x15 0x0a 0x00 0x00000078   jeq 120  true:0111 false:0101
 0101: 0x15 0x09 0x00 0x00000079   jeq 121  true:0111 false:0102
 0102: 0x15 0x08 0x00 0x0000007a   jeq 122  true:0111 false:0103
 0103: 0x15 0x07 0x00 0x0000007d   jeq 125  true:0111 false:0104
 0104: 0x15 0x06 0x00 0x0000007e   jeq 126  true:0111 false:0105
 0105: 0x15 0x05 0x00 0x00000084   jeq 132  true:0111 false:0106
 0106: 0x15 0x04 0x00 0x00000085   jeq 133  true:0111 false:0107
 0107: 0x15 0x03 0x00 0x00000088   jeq 136  true:0111 false:0108
 0108: 0x15 0x02 0x00 0x0000008a   jeq 138  true:0111 false:0109
 0109: 0x15 0x01 0x00 0x0000008b   jeq 139  true:0111 false:0110
 0110: 0x15 0x00 0x01 0x0000008c   jeq 140  true:0111 false:0112
 0111: 0x06 0x00 0x00 0x7fff0000   ret ALLOW
 0112: 0x15 0xff 0x00 0x0000008d   jeq 141  true:0368 false:0113
 0113: 0x15 0xfe 0x00 0x0000008e   jeq 142  true:0368 false:0114
 0114: 0x15 0xfd 0x00 0x0000008f   jeq 143  true:0368 false:0115
 0115: 0x15 0xfc 0x00 0x00000090   jeq 144  true:0368 false:0116
 0116: 0x15 0xfb 0x00 0x00000091   jeq 145  true:0368 false:0117
 0117: 0x15 0xfa 0x00 0x00000092   jeq 146  true:0368 false:0118
 0118: 0x15 0xf9 0x00 0x00000093   jeq 147  true:0368 false:0119
 0119: 0x15 0xf8 0x00 0x00000094   jeq 148  true:0368 false:0120
 0120: 0x15 0xf7 0x00 0x0000009a   jeq 154  true:0368 false:0121
 0121: 0x15 0xf6 0x00 0x0000009b   jeq 155  true:0368 false:0122
 0122: 0x15 0xf5 0x00 0x0000009c   jeq 156  true:0368 false:0123
 0123: 0x15 0xf4 0x00 0x0000009d   jeq 157  true:0368 false:0124
 0124: 0x15 0xf3 0x00 0x0000009e   jeq 158  true:0368 false:0125
 0125: 0x15 0xf2 0x00 0x0000009f   jeq 159  true:0368 false:0126
 0126: 0x15 0xf1 0x00 0x000000a0   jeq 160  true:0368 false:0127
 0127: 0x15 0xf0 0x00 0x000000a1   jeq 161  true:0368 false:0128
 0128: 0x15 0xef 0x00 0x000000a2   jeq 162  true:0368 false:0129
 0129: 0x15 0xee 0x00 0x000000a3   jeq 163  true:0368 false:0130
 0130: 0x15 0xed 0x00 0x000000a4   jeq 164  true:0368 false:0131
 0131: 0x15 0xec 0x00 0x000000a5   jeq 165  true:0368 false:0132
 0132: 0x15 0xeb 0x00 0x000000a8   jeq 168  true:0368 false:0133
 0133: 0x15 0xea 0x00 0x000000aa   jeq 170  true:0368 false:0134
 0134: 0x15 0xe9 0x00 0x000000ab   jeq 171  true:0368 false:0135
 0135: 0x15 0xe8 0x00 0x000000ac   jeq 172  true:0368 false:0136
 0136: 0x15 0xe7 0x00 0x000000ad   jeq 173  true:0368 false:0137
 0137: 0x15 0xe6 0x00 0x000000ae   jeq 174  true:0368 false:0138
 0138: 0x15 0xe5 0x00 0x000000af   jeq 175  true:0368 false:0139
 0139: 0x15 0xe4 0x00 0x000000b0   jeq 176  true:0368 false:0140
 0140: 0x15 0xe3 0x00 0x000000b1   jeq 177  true:0368 false:0141
 0141: 0x15 0xe2 0x00 0x000000b2   jeq 178  true:0368 false:0142
 0142: 0x15 0xe1 0x00 0x000000b3   jeq 179  true:0368 false:0143
 0143: 0x15 0xe0 0x00 0x000000b4   jeq 180  true:0368 false:0144
 0144: 0x15 0xdf 0x00 0x000000b5   jeq 181  true:0368 false:0145
 0145: 0x15 0xde 0x00 0x000000b6   jeq 182  true:0368 false:0146
 0146: 0x15 0xdd 0x00 0x000000b7   jeq 183  true:0368 false:0147
 0147: 0x15 0xdc 0x00 0x000000b8   jeq 184  true:0368 false:0148
 0148: 0x15 0xdb 0x00 0x000000b9   jeq 185  true:0368 false:0149
 0149: 0x15 0xda 0x00 0x000000ba   jeq 186  true:0368 false:0150
 0150: 0x15 0xd9 0x00 0x000000bb   jeq 187  true:0368 false:0151
 0151: 0x15 0xd8 0x00 0x000000be   jeq 190  true:0368 false:0152
 0152: 0x15 0xd7 0x00 0x000000bf   jeq 191  true:0368 false:0153
 0153: 0x15 0xd6 0x00 0x000000c0   jeq 192  true:0368 false:0154
 0154: 0x15 0xd5 0x00 0x000000c1   jeq 193  true:0368 false:0155
 0155: 0x15 0xd4 0x00 0x000000c2   jeq 194  true:0368 false:0156
 0156: 0x15 0xd3 0x00 0x000000c3   jeq 195  true:0368 false:0157
 0157: 0x15 0xd2 0x00 0x000000c4   jeq 196  true:0368 false:0158
 0158: 0x15 0xd1 0x00 0x000000c5   jeq 197  true:0368 false:0159
 0159: 0x15 0xd0 0x00 0x000000c6   jeq 198  true:0368 false:0160
 0160: 0x15 0xcf 0x00 0x000000c7   jeq 199  true:0368 false:0161
 0161: 0x15 0xce 0x00 0x000000c8   jeq 200  true:0368 false:0162
 0162: 0x15 0xcd 0x00 0x000000c9   jeq 201  true:0368 false:0163
 0163: 0x15 0xcc 0x00 0x000000ca   jeq 202  true:0368 false:0164
 0164: 0x15 0xcb 0x00 0x000000cb   jeq 203  true:0368 false:0165
 0165: 0x15 0xca 0x00 0x000000cc   jeq 204  true:0368 false:0166
 0166: 0x15 0xc9 0x00 0x000000cd   jeq 205  true:0368 false:0167
 0167: 0x15 0xc8 0x00 0x000000ce   jeq 206  true:0368 false:0168
 0168: 0x15 0xc7 0x00 0x000000cf   jeq 207  true:0368 false:0169
 0169: 0x15 0xc6 0x00 0x000000d0   jeq 208  true:0368 false:0170
 0170: 0x15 0xc5 0x00 0x000000d1   jeq 209  true:0368 false:0171
 0171: 0x15 0xc4 0x00 0x000000d2   jeq 210  true:0368 false:0172
 0172: 0x15 0xc3 0x00 0x000000d3   jeq 211  true:0368 false:0173
 0173: 0x15 0xc2 0x00 0x000000d4   jeq 212  true:0368 false:0174
 0174: 0x15 0xc1 0x00 0x000000d5   jeq 213  true:0368 false:0175
 0175: 0x15 0xc0 0x00 0x000000d6   jeq 214  true:0368 false:0176
 0176: 0x15 0xbf 0x00 0x000000d7   jeq 215  true:0368 false:0177
 0177: 0x15 0xbe 0x00 0x000000d8   jeq 216  true:0368 false:0178
 0178: 0x15 0xbd 0x00 0x000000d9   jeq 217  true:0368 false:0179
 0179: 0x15 0xbc 0x00 0x000000da   jeq 218  true:0368 false:0180
 0180: 0x15 0xbb 0x00 0x000000db   jeq 219  true:0368 false:0181
 0181: 0x15 0xba 0x00 0x000000dc   jeq 220  true:0368 false:0182
 0182: 0x15 0xb9 0x00 0x000000dd   jeq 221  true:0368 false:0183
 0183: 0x15 0xb8 0x00 0x000000e0   jeq 224  true:0368 false:0184
 0184: 0x15 0xb7 0x00 0x000000e1   jeq 225  true:0368 false:0185
 0185: 0x15 0xb6 0x00 0x000000e2   jeq 226  true:0368 false:0186
 0186: 0x15 0xb5 0x00 0x000000e3   jeq 227  true:0368 false:0187
 0187: 0x15 0xb4 0x00 0x000000e4   jeq 228  true:0368 false:0188
 0188: 0x15 0xb3 0x00 0x000000e5   jeq 229  true:0368 false:0189
 0189: 0x15 0xb2 0x00 0x000000e6   jeq 230  true:0368 false:0190
 0190: 0x15 0xb1 0x00 0x000000e7   jeq 231  true:0368 false:0191
 0191: 0x15 0xb0 0x00 0x000000e8   jeq 232  true:0368 false:0192
 0192: 0x15 0xaf 0x00 0x000000e9   jeq 233  true:0368 false:0193
 0193: 0x15 0xae 0x00 0x000000ea   jeq 234  true:0368 false:0194
 0194: 0x15 0xad 0x00 0x000000eb   jeq 235  true:0368 false:0195
 0195: 0x15 0xac 0x00 0x000000ec   jeq 236  true:0368 false:0196
 0196: 0x15 0xab 0x00 0x000000ed   jeq 237  true:0368 false:0197
 0197: 0x15 0xaa 0x00 0x000000ee   jeq 238  true:0368 false:0198
 0198: 0x15 0xa9 0x00 0x000000ef   jeq 239  true:0368 false:0199
 0199: 0x15 0xa8 0x00 0x000000f0   jeq 240  true:0368 false:0200
 0200: 0x15 0xa7 0x00 0x000000f1   jeq 241  true:0368 false:0201
 0201: 0x15 0xa6 0x00 0x000000f2   jeq 242  true:0368 false:0202
 0202: 0x15 0xa5 0x00 0x000000f3   jeq 243  true:0368 false:0203
 0203: 0x15 0xa4 0x00 0x000000f4   jeq 244  true:0368 false:0204
 0204: 0x15 0xa3 0x00 0x000000f5   jeq 245  true:0368 false:0205
 0205: 0x15 0xa2 0x00 0x000000f6   jeq 246  true:0368 false:0206
 0206: 0x15 0xa1 0x00 0x000000f7   jeq 247  true:0368 false:0207
 0207: 0x15 0xa0 0x00 0x000000f8   jeq 248  true:0368 false:0208
 0208: 0x15 0x9f 0x00 0x000000f9   jeq 249  true:0368 false:0209
 0209: 0x15 0x9e 0x00 0x000000fa   jeq 250  true:0368 false:0210
 0210: 0x15 0x9d 0x00 0x000000fc   jeq 252  true:0368 false:0211
 0211: 0x15 0x9c 0x00 0x000000fe   jeq 254  true:0368 false:0212
 0212: 0x15 0x9b 0x00 0x000000ff   jeq 255  true:0368 false:0213
 0213: 0x15 0x9a 0x00 0x00000100   jeq 256  true:0368 false:0214
 0214: 0x15 0x99 0x00 0x00000101   jeq 257  true:0368 false:0215
 0215: 0x15 0x98 0x00 0x00000102   jeq 258  true:0368 false:0216
 0216: 0x15 0x97 0x00 0x00000103   jeq 259  true:0368 false:0217
 0217: 0x15 0x96 0x00 0x00000104   jeq 260  true:0368 false:0218
 0218: 0x15 0x95 0x00 0x00000105   jeq 261  true:0368 false:0219
 0219: 0x15 0x94 0x00 0x00000106   jeq 262  true:0368 false:0220
 0220: 0x15 0x93 0x00 0x00000107   jeq 263  true:0368 false:0221
 0221: 0x15 0x92 0x00 0x00000109   jeq 265  true:0368 false:0222
 0222: 0x15 0x91 0x00 0x0000010a   jeq 266  true:0368 false:0223
 0223: 0x15 0x90 0x00 0x0000010b   jeq 267  true:0368 false:0224
 0224: 0x15 0x8f 0x00 0x0000010c   jeq 268  true:0368 false:0225
 0225: 0x15 0x8e 0x00 0x0000010d   jeq 269  true:0368 false:0226
 0226: 0x15 0x8d 0x00 0x0000010e   jeq 270  true:0368 false:0227
 0227: 0x15 0x8c 0x00 0x0000010f   jeq 271  true:0368 false:0228
 0228: 0x15 0x8b 0x00 0x00000110   jeq 272  true:0368 false:0229
 0229: 0x15 0x8a 0x00 0x00000112   jeq 274  true:0368 false:0230
 0230: 0x15 0x89 0x00 0x00000113   jeq 275  true:0368 false:0231
 0231: 0x15 0x88 0x00 0x00000114   jeq 276  true:0368 false:0232
 0232: 0x15 0x87 0x00 0x00000115   jeq 277  true:0368 false:0233
 0233: 0x15 0x86 0x00 0x00000116   jeq 278  true:0368 false:0234
 0234: 0x15 0x85 0x00 0x00000117   jeq 279  true:0368 false:0235
 0235: 0x15 0x84 0x00 0x00000118   jeq 280  true:0368 false:0236
 0236: 0x15 0x83 0x00 0x00000119   jeq 281  true:0368 false:0237
 0237: 0x15 0x82 0x00 0x0000011a   jeq 282  true:0368 false:0238
 0238: 0x15 0x81 0x00 0x0000011c   jeq 284  true:0368 false:0239
 0239: 0x15 0x80 0x00 0x00000121   jeq 289  true:0368 false:0240
 0240: 0x15 0x7f 0x00 0x00000122   jeq 290  true:0368 false:0241
 0241: 0x15 0x7e 0x00 0x00000123   jeq 291  true:0368 false:0242
 0242: 0x15 0x7d 0x00 0x00000124   jeq 292  true:0368 false:0243
 0243: 0x15 0x7c 0x00 0x00000125   jeq 293  true:0368 false:0244
 0244: 0x15 0x7b 0x00 0x00000126   jeq 294  true:0368 false:0245
 0245: 0x15 0x7a 0x00 0x00000127   jeq 295  true:0368 false:0246
 0246: 0x15 0x79 0x00 0x00000128   jeq 296  true:0368 false:0247
 0247: 0x15 0x78 0x00 0x00000129   jeq 297  true:0368 false:0248
 0248: 0x15 0x77 0x00 0x0000012a   jeq 298  true:0368 false:0249
 0249: 0x15 0x76 0x00 0x0000012b   jeq 299  true:0368 false:0250
 0250: 0x15 0x75 0x00 0x0000012c   jeq 300  true:0368 false:0251
 0251: 0x15 0x74 0x00 0x0000012d   jeq 301  true:0368 false:0252
 0252: 0x15 0x73 0x00 0x0000012e   jeq 302  true:0368 false:0253
 0253: 0x15 0x72 0x00 0x0000012f   jeq 303  true:0368 false:0254
 0254: 0x15 0x71 0x00 0x00000130   jeq 304  true:0368 false:0255
 0255: 0x15 0x70 0x00 0x00000131   jeq 305  true:0368 false:0256
 0256: 0x15 0x6f 0x00 0x00000132   jeq 306  true:0368 false:0257
 0257: 0x15 0x6e 0x00 0x00000133   jeq 307  true:0368 false:0258
 0258: 0x15 0x6d 0x00 0x00000134   jeq 308  true:0368 false:0259
 0259: 0x15 0x6c 0x00 0x00000135   jeq 309  true:0368 false:0260
 0260: 0x15 0x6b 0x00 0x00000136   jeq 310  true:0368 false:0261
 0261: 0x15 0x6a 0x00 0x00000137   jeq 311  true:0368 false:0262
 0262: 0x15 0x69 0x00 0x00000138   jeq 312  true:0368 false:0263
 0263: 0x15 0x68 0x00 0x00000139   jeq 313  true:0368 false:0264
 0264: 0x15 0x67 0x00 0x0000013a   jeq 314  true:0368 false:0265
 0265: 0x15 0x66 0x00 0x0000013b   jeq 315  true:0368 false:0266
 0266: 0x15 0x65 0x00 0x0000013c   jeq 316  true:0368 false:0267
 0267: 0x15 0x64 0x00 0x0000013d   jeq 317  true:0368 false:0268
 0268: 0x15 0x63 0x00 0x0000013e   jeq 318  true:0368 false:0269
 0269: 0x15 0x62 0x00 0x0000013f   jeq 319  true:0368 false:0270
 0270: 0x15 0x61 0x00 0x00000140   jeq 320  true:0368 false:0271
 0271: 0x15 0x60 0x00 0x00000141   jeq 321  true:0368 false:0272
 0272: 0x15 0x5f 0x00 0x00000142   jeq 322  true:0368 false:0273
 0273: 0x15 0x5e 0x00 0x00000143   jeq 323  true:0368 false:0274
 0274: 0x15 0x5d 0x00 0x00000144   jeq 324  true:0368 false:0275
 0275: 0x15 0x5c 0x00 0x00000145   jeq 325  true:0368 false:0276
 0276: 0x15 0x5b 0x00 0x00000146   jeq 326  true:0368 false:0277
 0277: 0x15 0x5a 0x00 0x00000147   jeq 327  true:0368 false:0278
 0278: 0x15 0x59 0x00 0x00000148   jeq 328  true:0368 false:0279
 0279: 0x15 0x58 0x00 0x00000149   jeq 329  true:0368 false:0280
 0280: 0x15 0x57 0x00 0x0000014a   jeq 330  true:0368 false:0281
 0281: 0x15 0x56 0x00 0x0000014b   jeq 331  true:0368 false:0282
 0282: 0x15 0x55 0x00 0x0000014c   jeq 332  true:0368 false:0283
 0283: 0x15 0x54 0x00 0x0000014d   jeq 333  true:0368 false:0284
 0284: 0x15 0x53 0x00 0x0000014e   jeq 334  true:0368 false:0285
 0285: 0x15 0x52 0x00 0x0000014f   jeq 335  true:0368 false:0286
 0286: 0x15 0x51 0x00 0x00000151   jeq 337  true:0368 false:0287
 0287: 0x15 0x50 0x00 0x00000154   jeq 340  true:0368 false:0288
 0288: 0x15 0x4f 0x00 0x00000155   jeq 341  true:0368 false:0289
 0289: 0x15 0x4e 0x00 0x00000158   jeq 344  true:0368 false:0290
 0290: 0x15 0x4d 0x00 0x00000159   jeq 345  true:0368 false:0291
 0291: 0x15 0x4c 0x00 0x0000015a   jeq 346  true:0368 false:0292
 0292: 0x15 0x4b 0x00 0x0000015b   jeq 347  true:0368 false:0293
 0293: 0x15 0x4a 0x00 0x0000015c   jeq 348  true:0368 false:0294
 0294: 0x15 0x49 0x00 0x0000015d   jeq 349  true:0368 false:0295
 0295: 0x15 0x48 0x00 0x0000015f   jeq 351  true:0368 false:0296
 0296: 0x15 0x47 0x00 0x00000160   jeq 352  true:0368 false:0297
 0297: 0x15 0x46 0x00 0x00000161   jeq 353  true:0368 false:0298
 0298: 0x15 0x45 0x00 0x00000162   jeq 354  true:0368 false:0299
 0299: 0x15 0x44 0x00 0x00000163   jeq 355  true:0368 false:0300
 0300: 0x15 0x43 0x00 0x00000164   jeq 356  true:0368 false:0301
 0301: 0x15 0x42 0x00 0x00000166   jeq 358  true:0368 false:0302
 0302: 0x15 0x41 0x00 0x00000167   jeq 359  true:0368 false:0303
 0303: 0x15 0x40 0x00 0x00000168   jeq 360  true:0368 false:0304
 0304: 0x15 0x3f 0x00 0x00000169   jeq 361  true:0368 false:0305
 0305: 0x15 0x3e 0x00 0x0000016a   jeq 362  true:0368 false:0306
 0306: 0x15 0x3d 0x00 0x0000016b   jeq 363  true:0368 false:0307
 0307: 0x15 0x3c 0x00 0x0000016c   jeq 364  true:0368 false:0308
 0308: 0x15 0x3b 0x00 0x0000016d   jeq 365  true:0368 false:0309
 0309: 0x15 0x3a 0x00 0x0000016e   jeq 366  true:0368 false:0310
 0310: 0x15 0x39 0x00 0x0000016f   jeq 367  true:0368 false:0311
 0311: 0x15 0x38 0x00 0x00000170   jeq 368  true:0368 false:0312
 0312: 0x15 0x37 0x00 0x00000171   jeq 369  true:0368 false:0313
 0313: 0x15 0x36 0x00 0x00000172   jeq 370  true:0368 false:0314
 0314: 0x15 0x35 0x00 0x00000173   jeq 371  true:0368 false:0315
 0315: 0x15 0x34 0x00 0x00000174   jeq 372  true:0368 false:0316
 0316: 0x15 0x33 0x00 0x00000175   jeq 373  true:0368 false:0317
 0317: 0x15 0x32 0x00 0x00000176   jeq 374  true:0368 false:0318
 0318: 0x15 0x31 0x00 0x00000177   jeq 375  true:0368 false:0319
 0319: 0x15 0x30 0x00 0x00000179   jeq 377  true:0368 false:0320
 0320: 0x15 0x2f 0x00 0x0000017a   jeq 378  true:0368 false:0321
 0321: 0x15 0x2e 0x00 0x0000017b   jeq 379  true:0368 false:0322
 0322: 0x15 0x2d 0x00 0x0000017f   jeq 383  true:0368 false:0323
 0323: 0x15 0x2c 0x00 0x00000180   jeq 384  true:0368 false:0324
 0324: 0x15 0x2b 0x00 0x00000181   jeq 385  true:0368 false:0325
 0325: 0x15 0x2a 0x00 0x00000182   jeq 386  true:0368 false:0326
 0326: 0x15 0x29 0x00 0x00000189   jeq 393  true:0368 false:0327
 0327: 0x15 0x28 0x00 0x0000018a   jeq 394  true:0368 false:0328
 0328: 0x15 0x27 0x00 0x0000018b   jeq 395  true:0368 false:0329
 0329: 0x15 0x26 0x00 0x0000018c   jeq 396  true:0368 false:0330
 0330: 0x15 0x25 0x00 0x0000018d   jeq 397  true:0368 false:0331
 0331: 0x15 0x24 0x00 0x0000018e   jeq 398  true:0368 false:0332
 0332: 0x15 0x23 0x00 0x0000018f   jeq 399  true:0368 false:0333
 0333: 0x15 0x22 0x00 0x00000190   jeq 400  true:0368 false:0334
 0334: 0x15 0x21 0x00 0x00000191   jeq 401  true:0368 false:0335
 0335: 0x15 0x20 0x00 0x00000192   jeq 402  true:0368 false:0336
 0336: 0x15 0x1f 0x00 0x00000193   jeq 403  true:0368 false:0337
 0337: 0x15 0x1e 0x00 0x00000196   jeq 406  true:0368 false:0338
 0338: 0x15 0x1d 0x00 0x00000197   jeq 407  true:0368 false:0339
 0339: 0x15 0x1c 0x00 0x00000198   jeq 408  true:0368 false:0340
 0340: 0x15 0x1b 0x00 0x00000199   jeq 409  true:0368 false:0341
 0341: 0x15 0x1a 0x00 0x0000019a   jeq 410  true:0368 false:0342
 0342: 0x15 0x19 0x00 0x0000019b   jeq 411  true:0368 false:0343
 0343: 0x15 0x18 0x00 0x0000019c   jeq 412  true:0368 false:0344
 0344: 0x15 0x17 0x00 0x0000019d   jeq 413  true:0368 false:0345
 0345: 0x15 0x16 0x00 0x0000019e   jeq 414  true:0368 false:0346
 0346: 0x15 0x15 0x00 0x000001a0   jeq 416  true:0368 false:0347
 0347: 0x15 0x14 0x00 0x000001a1   jeq 417  true:0368 false:0348
 0348: 0x15 0x13 0x00 0x000001a2   jeq 418  true:0368 false:0349
 0349: 0x15 0x12 0x00 0x000001a3   jeq 419  true:0368 false:0350
 0350: 0x15 0x11 0x00 0x000001a4   jeq 420  true:0368 false:0351
 0351: 0x15 0x10 0x00 0x000001a5   jeq 421  true:0368 false:0352
 0352: 0x15 0x0f 0x00 0x000001a6   jeq 422  true:0368 false:0353
 0353: 0x15 0x0e 0x00 0x000001a8   jeq 424  true:0368 false:0354
 0354: 0x15 0x0d 0x00 0x000001a9   jeq 425  true:0368 false:0355
 0355: 0x15 0x0c 0x00 0x000001aa   jeq 426  true:0368 false:0356
 0356: 0x15 0x0b 0x00 0x000001ab   jeq 427  true:0368 false:0357
 0357: 0x15 0x0a 0x00 0x000001ac   jeq 428  true:0368 false:0358
 0358: 0x15 0x09 0x00 0x000001ad   jeq 429  true:0368 false:0359
 0359: 0x15 0x08 0x00 0x000001ae   jeq 430  true:0368 false:0360
 0360: 0x15 0x07 0x00 0x000001af   jeq 431  true:0368 false:0361
 0361: 0x15 0x06 0x00 0x000001b0   jeq 432  true:0368 false:0362
 0362: 0x15 0x05 0x00 0x000001b1   jeq 433  true:0368 false:0363
 0363: 0x15 0x04 0x00 0x000001b2   jeq 434  true:0368 false:0364
 0364: 0x15 0x03 0x00 0x000001b3   jeq 435  true:0368 false:0365
 0365: 0x15 0x02 0x00 0x000001b5   jeq 437  true:0368 false:0366
 0366: 0x15 0x01 0x00 0x000001b7   jeq 439  true:0368 false:0367
 0367: 0x06 0x00 0x00 0x00050001   ret ERRNO(1)
 0368: 0x06 0x00 0x00 0x7fff0000   ret ALLOW

After the addition of @known:
 line  OP   JT   JF   K
=================================
 0000: 0x20 0x00 0x00 0x00000004   ld  $data[4]
 0001: 0x15 0x00 0xa4 0x40000003   jeq 1073741827 true:0002 false:0166
 0002: 0x20 0x00 0x00 0x00000000   ld  $data[0]
 0003: 0x15 0xa2 0x00 0x00000000   jeq 0    true:0166 false:0004
 0004: 0x15 0xa1 0x00 0x00000001   jeq 1    true:0166 false:0005
 0005: 0x15 0xa0 0x00 0x00000002   jeq 2    true:0166 false:0006
 0006: 0x15 0x9f 0x00 0x00000003   jeq 3    true:0166 false:0007
 0007: 0x15 0x9e 0x00 0x00000004   jeq 4    true:0166 false:0008
 0008: 0x15 0x9d 0x00 0x00000005   jeq 5    true:0166 false:0009
 0009: 0x15 0x9c 0x00 0x00000006   jeq 6    true:0166 false:0010
 0010: 0x15 0x9b 0x00 0x00000007   jeq 7    true:0166 false:0011
 0011: 0x15 0x9a 0x00 0x00000008   jeq 8    true:0166 false:0012
 0012: 0x15 0x99 0x00 0x00000009   jeq 9    true:0166 false:0013
 0013: 0x15 0x98 0x00 0x0000000a   jeq 10   true:0166 false:0014
 0014: 0x15 0x97 0x00 0x0000000b   jeq 11   true:0166 false:0015
 0015: 0x15 0x96 0x00 0x0000000c   jeq 12   true:0166 false:0016
 0016: 0x15 0x95 0x00 0x0000000d   jeq 13   true:0166 false:0017
 0017: 0x15 0x94 0x00 0x0000000e   jeq 14   true:0166 false:0018
 0018: 0x15 0x93 0x00 0x0000000f   jeq 15   true:0166 false:0019
 0019: 0x15 0x92 0x00 0x00000010   jeq 16   true:0166 false:0020
 0020: 0x15 0x91 0x00 0x00000012   jeq 18   true:0166 false:0021
 0021: 0x15 0x90 0x00 0x00000013   jeq 19   true:0166 false:0022
 0022: 0x15 0x8f 0x00 0x00000014   jeq 20   true:0166 false:0023
 0023: 0x15 0x8e 0x00 0x00000015   jeq 21   true:0166 false:0024
 0024: 0x15 0x8d 0x00 0x00000016   jeq 22   true:0166 false:0025
 0025: 0x15 0x8c 0x00 0x00000017   jeq 23   true:0166 false:0026
 0026: 0x15 0x8b 0x00 0x00000018   jeq 24   true:0166 false:0027
 0027: 0x15 0x87 0x00 0x00000019   jeq 25   true:0163 false:0028
 0028: 0x15 0x89 0x00 0x0000001a   jeq 26   true:0166 false:0029
 0029: 0x15 0x88 0x00 0x0000001b   jeq 27   true:0166 false:0030
 0030: 0x15 0x87 0x00 0x0000001c   jeq 28   true:0166 false:0031
 0031: 0x15 0x86 0x00 0x0000001d   jeq 29   true:0166 false:0032
 0032: 0x15 0x85 0x00 0x0000001e   jeq 30   true:0166 false:0033
 0033: 0x15 0x84 0x00 0x00000021   jeq 33   true:0166 false:0034
 0034: 0x15 0x83 0x00 0x00000022   jeq 34   true:0166 false:0035
 0035: 0x15 0x82 0x00 0x00000024   jeq 36   true:0166 false:0036
 0036: 0x15 0x81 0x00 0x00000025   jeq 37   true:0166 false:0037
 0037: 0x15 0x80 0x00 0x00000026   jeq 38   true:0166 false:0038
 0038: 0x15 0x7f 0x00 0x00000027   jeq 39   true:0166 false:0039
 0039: 0x15 0x7e 0x00 0x00000028   jeq 40   true:0166 false:0040
 0040: 0x15 0x7d 0x00 0x00000029   jeq 41   true:0166 false:0041
 0041: 0x15 0x7c 0x00 0x0000002a   jeq 42   true:0166 false:0042
 0042: 0x15 0x7b 0x00 0x0000002b   jeq 43   true:0166 false:0043
 0043: 0x15 0x7a 0x00 0x0000002d   jeq 45   true:0166 false:0044
 0044: 0x15 0x79 0x00 0x0000002e   jeq 46   true:0166 false:0045
 0045: 0x15 0x78 0x00 0x0000002f   jeq 47   true:0166 false:0046
 0046: 0x15 0x77 0x00 0x00000030   jeq 48   true:0166 false:0047
 0047: 0x15 0x76 0x00 0x00000031   jeq 49   true:0166 false:0048
 0048: 0x15 0x75 0x00 0x00000032   jeq 50   true:0166 false:0049
 0049: 0x15 0x71 0x00 0x00000033   jeq 51   true:0163 false:0050
 0050: 0x15 0x73 0x00 0x00000034   jeq 52   true:0166 false:0051
 0051: 0x15 0x72 0x00 0x00000036   jeq 54   true:0166 false:0052
 0052: 0x15 0x71 0x00 0x00000037   jeq 55   true:0166 false:0053
 0053: 0x15 0x70 0x00 0x00000039   jeq 57   true:0166 false:0054
 0054: 0x15 0x6f 0x00 0x0000003b   jeq 59   true:0166 false:0055
 0055: 0x15 0x6e 0x00 0x0000003c   jeq 60   true:0166 false:0056
 0056: 0x15 0x6d 0x00 0x0000003d   jeq 61   true:0166 false:0057
 0057: 0x15 0x69 0x00 0x0000003e   jeq 62   true:0163 false:0058
 0058: 0x15 0x6b 0x00 0x0000003f   jeq 63   true:0166 false:0059
 0059: 0x15 0x6a 0x00 0x00000040   jeq 64   true:0166 false:0060
 0060: 0x15 0x69 0x00 0x00000041   jeq 65   true:0166 false:0061
 0061: 0x15 0x68 0x00 0x00000042   jeq 66   true:0166 false:0062
 0062: 0x15 0x67 0x00 0x00000043   jeq 67   true:0166 false:0063
 0063: 0x15 0x63 0x00 0x00000044   jeq 68   true:0163 false:0064
 0064: 0x15 0x62 0x00 0x00000045   jeq 69   true:0163 false:0065
 0065: 0x15 0x64 0x00 0x00000046   jeq 70   true:0166 false:0066
 0066: 0x15 0x63 0x00 0x00000047   jeq 71   true:0166 false:0067
 0067: 0x15 0x62 0x00 0x00000048   jeq 72   true:0166 false:0068
 0068: 0x15 0x61 0x00 0x00000049   jeq 73   true:0166 false:0069
 0069: 0x15 0x60 0x00 0x0000004a   jeq 74   true:0166 false:0070
 0070: 0x15 0x5f 0x00 0x0000004b   jeq 75   true:0166 false:0071
 0071: 0x15 0x5e 0x00 0x0000004c   jeq 76   true:0166 false:0072
 0072: 0x15 0x5d 0x00 0x0000004d   jeq 77   true:0166 false:0073
 0073: 0x15 0x5c 0x00 0x0000004e   jeq 78   true:0166 false:0074
 0074: 0x15 0x58 0x00 0x0000004f   jeq 79   true:0163 false:0075
 0075: 0x15 0x5a 0x00 0x00000050   jeq 80   true:0166 false:0076
 0076: 0x15 0x59 0x00 0x00000051   jeq 81   true:0166 false:0077
 0077: 0x15 0x58 0x00 0x00000052   jeq 82   true:0166 false:0078
 0078: 0x15 0x57 0x00 0x00000053   jeq 83   true:0166 false:0079
 0079: 0x15 0x56 0x00 0x00000054   jeq 84   true:0166 false:0080
 0080: 0x15 0x55 0x00 0x00000055   jeq 85   true:0166 false:0081
 0081: 0x15 0x51 0x00 0x00000056   jeq 86   true:0163 false:0082
 0082: 0x15 0x50 0x00 0x00000057   jeq 87   true:0163 false:0083
 0083: 0x15 0x52 0x00 0x00000058   jeq 88   true:0166 false:0084
 0084: 0x15 0x51 0x00 0x00000059   jeq 89   true:0166 false:0085
 0085: 0x15 0x50 0x00 0x0000005a   jeq 90   true:0166 false:0086
 0086: 0x15 0x4f 0x00 0x0000005b   jeq 91   true:0166 false:0087
 0087: 0x15 0x4e 0x00 0x0000005c   jeq 92   true:0166 false:0088
 0088: 0x15 0x4d 0x00 0x0000005d   jeq 93   true:0166 false:0089
 0089: 0x15 0x4c 0x00 0x0000005e   jeq 94   true:0166 false:0090
 0090: 0x15 0x4b 0x00 0x0000005f   jeq 95   true:0166 false:0091
 0091: 0x15 0x4a 0x00 0x00000060   jeq 96   true:0166 false:0092
 0092: 0x15 0x49 0x00 0x00000061   jeq 97   true:0166 false:0093
 0093: 0x15 0x48 0x00 0x00000063   jeq 99   true:0166 false:0094
 0094: 0x15 0x47 0x00 0x00000064   jeq 100  true:0166 false:0095
 0095: 0x15 0x43 0x00 0x00000065   jeq 101  true:0163 false:0096
 0096: 0x15 0x45 0x00 0x00000066   jeq 102  true:0166 false:0097
 0097: 0x15 0x41 0x00 0x00000067   jeq 103  true:0163 false:0098
 0098: 0x15 0x43 0x00 0x00000068   jeq 104  true:0166 false:0099
 0099: 0x15 0x42 0x00 0x00000069   jeq 105  true:0166 false:0100
 0100: 0x15 0x41 0x00 0x0000006a   jeq 106  true:0166 false:0101
 0101: 0x15 0x40 0x00 0x0000006b   jeq 107  true:0166 false:0102
 0102: 0x15 0x3f 0x00 0x0000006c   jeq 108  true:0166 false:0103
 0103: 0x15 0x3e 0x00 0x0000006d   jeq 109  true:0166 false:0104
 0104: 0x15 0x3a 0x00 0x0000006e   jeq 110  true:0163 false:0105
 0105: 0x15 0x3c 0x00 0x0000006f   jeq 111  true:0166 false:0106
 0106: 0x15 0x38 0x00 0x00000070   jeq 112  true:0163 false:0107
 0107: 0x15 0x37 0x00 0x00000071   jeq 113  true:0163 false:0108
 0108: 0x15 0x39 0x00 0x00000072   jeq 114  true:0166 false:0109
 0109: 0x15 0x35 0x00 0x00000073   jeq 115  true:0163 false:0110
 0110: 0x15 0x37 0x00 0x00000074   jeq 116  true:0166 false:0111
 0111: 0x15 0x36 0x00 0x00000075   jeq 117  true:0166 false:0112
 0112: 0x15 0x35 0x00 0x00000076   jeq 118  true:0166 false:0113
 0113: 0x15 0x34 0x00 0x00000077   jeq 119  true:0166 false:0114
 0114: 0x15 0x33 0x00 0x00000078   jeq 120  true:0166 false:0115
 0115: 0x15 0x32 0x00 0x00000079   jeq 121  true:0166 false:0116
 0116: 0x15 0x31 0x00 0x0000007a   jeq 122  true:0166 false:0117
 0117: 0x15 0x2d 0x00 0x0000007b   jeq 123  true:0163 false:0118
 0118: 0x15 0x2c 0x00 0x0000007c   jeq 124  true:0163 false:0119
 0119: 0x15 0x2e 0x00 0x0000007d   jeq 125  true:0166 false:0120
 0120: 0x15 0x2d 0x00 0x0000007e   jeq 126  true:0166 false:0121
 0121: 0x15 0x29 0x00 0x0000007f   jeq 127  true:0163 false:0122
 0122: 0x15 0x28 0x00 0x00000080   jeq 128  true:0163 false:0123
 0123: 0x15 0x27 0x00 0x00000081   jeq 129  true:0163 false:0124
 0124: 0x15 0x26 0x00 0x00000082   jeq 130  true:0163 false:0125
 0125: 0x15 0x25 0x00 0x00000083   jeq 131  true:0163 false:0126
 0126: 0x15 0x27 0x00 0x00000084   jeq 132  true:0166 false:0127
 0127: 0x15 0x26 0x00 0x00000085   jeq 133  true:0166 false:0128
 0128: 0x15 0x22 0x00 0x00000086   jeq 134  true:0163 false:0129
 0129: 0x15 0x21 0x00 0x00000087   jeq 135  true:0163 false:0130
 0130: 0x15 0x23 0x00 0x00000088   jeq 136  true:0166 false:0131
 0131: 0x15 0x22 0x00 0x0000008a   jeq 138  true:0166 false:0132
 0132: 0x15 0x21 0x00 0x0000008b   jeq 139  true:0166 false:0133
 0133: 0x15 0x20 0x00 0x0000008c   jeq 140  true:0166 false:0134
 0134: 0x15 0x1f 0x00 0x0000008d   jeq 141  true:0166 false:0135
 0135: 0x15 0x1e 0x00 0x0000008e   jeq 142  true:0166 false:0136
 0136: 0x15 0x1d 0x00 0x0000008f   jeq 143  true:0166 false:0137
 0137: 0x15 0x1c 0x00 0x00000090   jeq 144  true:0166 false:0138
 0138: 0x15 0x1b 0x00 0x00000091   jeq 145  true:0166 false:0139
 0139: 0x15 0x1a 0x00 0x00000092   jeq 146  true:0166 false:0140
 0140: 0x15 0x19 0x00 0x00000093   jeq 147  true:0166 false:0141
 0141: 0x15 0x18 0x00 0x00000094   jeq 148  true:0166 false:0142
 0142: 0x15 0x14 0x00 0x00000095   jeq 149  true:0163 false:0143
 0143: 0x15 0x13 0x00 0x00000096   jeq 150  true:0163 false:0144
 0144: 0x15 0x12 0x00 0x00000097   jeq 151  true:0163 false:0145
 0145: 0x15 0x11 0x00 0x00000098   jeq 152  true:0163 false:0146
 0146: 0x15 0x10 0x00 0x00000099   jeq 153  true:0163 false:0147
 0147: 0x15 0x12 0x00 0x0000009a   jeq 154  true:0166 false:0148
 0148: 0x15 0x11 0x00 0x0000009b   jeq 155  true:0166 false:0149
 0149: 0x15 0x10 0x00 0x0000009c   jeq 156  true:0166 false:0150
 0150: 0x15 0x0f 0x00 0x0000009d   jeq 157  true:0166 false:0151
 0151: 0x15 0x0e 0x00 0x0000009e   jeq 158  true:0166 false:0152
 0152: 0x15 0x0d 0x00 0x0000009f   jeq 159  true:0166 false:0153
 0153: 0x15 0x0c 0x00 0x000000a0   jeq 160  true:0166 false:0154
 0154: 0x15 0x0b 0x00 0x000000a1   jeq 161  true:0166 false:0155
 0155: 0x15 0x0a 0x00 0x000000a2   jeq 162  true:0166 false:0156
 0156: 0x15 0x09 0x00 0x000000a3   jeq 163  true:0166 false:0157
 0157: 0x15 0x08 0x00 0x000000a4   jeq 164  true:0166 false:0158
 0158: 0x15 0x07 0x00 0x000000a5   jeq 165  true:0166 false:0159
 0159: 0x15 0x03 0x00 0x000000a6   jeq 166  true:0163 false:0160
 0160: 0x15 0x02 0x00 0x000000a7   jeq 167  true:0163 false:0161
 0161: 0x15 0x04 0x00 0x000000a8   jeq 168  true:0166 false:0162
 0162: 0x15 0x00 0x01 0x000000a9   jeq 169  true:0163 false:0164
 0163: 0x06 0x00 0x00 0x00050001   ret ERRNO(1)
 0164: 0x15 0x01 0x00 0x000000aa   jeq 170  true:0166 false:0165
 0165: 0x15 0x00 0x01 0x000000ab   jeq 171  true:0166 false:0167
 0166: 0x06 0x00 0x00 0x7fff0000   ret ALLOW
 0167: 0x15 0xff 0x00 0x000000ac   jeq 172  true:0423 false:0168
 0168: 0x15 0xfe 0x00 0x000000ad   jeq 173  true:0423 false:0169
 0169: 0x15 0xfd 0x00 0x000000ae   jeq 174  true:0423 false:0170
 0170: 0x15 0xfc 0x00 0x000000af   jeq 175  true:0423 false:0171
 0171: 0x15 0xfb 0x00 0x000000b0   jeq 176  true:0423 false:0172
 0172: 0x15 0xfa 0x00 0x000000b1   jeq 177  true:0423 false:0173
 0173: 0x15 0xf9 0x00 0x000000b2   jeq 178  true:0423 false:0174
 0174: 0x15 0xf8 0x00 0x000000b3   jeq 179  true:0423 false:0175
 0175: 0x15 0xf7 0x00 0x000000b4   jeq 180  true:0423 false:0176
 0176: 0x15 0xf6 0x00 0x000000b5   jeq 181  true:0423 false:0177
 0177: 0x15 0xf5 0x00 0x000000b6   jeq 182  true:0423 false:0178
 0178: 0x15 0xf4 0x00 0x000000b7   jeq 183  true:0423 false:0179
 0179: 0x15 0xf3 0x00 0x000000b8   jeq 184  true:0423 false:0180
 0180: 0x15 0xf2 0x00 0x000000b9   jeq 185  true:0423 false:0181
 0181: 0x15 0xf1 0x00 0x000000ba   jeq 186  true:0423 false:0182
 0182: 0x15 0xf0 0x00 0x000000bb   jeq 187  true:0423 false:0183
 0183: 0x15 0xec 0x00 0x000000bc   jeq 188  true:0420 false:0184
 0184: 0x15 0xee 0x00 0x000000be   jeq 190  true:0423 false:0185
 0185: 0x15 0xed 0x00 0x000000bf   jeq 191  true:0423 false:0186
 0186: 0x15 0xec 0x00 0x000000c0   jeq 192  true:0423 false:0187
 0187: 0x15 0xeb 0x00 0x000000c1   jeq 193  true:0423 false:0188
 0188: 0x15 0xea 0x00 0x000000c2   jeq 194  true:0423 false:0189
 0189: 0x15 0xe9 0x00 0x000000c3   jeq 195  true:0423 false:0190
 0190: 0x15 0xe8 0x00 0x000000c4   jeq 196  true:0423 false:0191
 0191: 0x15 0xe7 0x00 0x000000c5   jeq 197  true:0423 false:0192
 0192: 0x15 0xe6 0x00 0x000000c6   jeq 198  true:0423 false:0193
 0193: 0x15 0xe5 0x00 0x000000c7   jeq 199  true:0423 false:0194
 0194: 0x15 0xe4 0x00 0x000000c8   jeq 200  true:0423 false:0195
 0195: 0x15 0xe3 0x00 0x000000c9   jeq 201  true:0423 false:0196
 0196: 0x15 0xe2 0x00 0x000000ca   jeq 202  true:0423 false:0197
 0197: 0x15 0xe1 0x00 0x000000cb   jeq 203  true:0423 false:0198
 0198: 0x15 0xe0 0x00 0x000000cc   jeq 204  true:0423 false:0199
 0199: 0x15 0xdf 0x00 0x000000cd   jeq 205  true:0423 false:0200
 0200: 0x15 0xde 0x00 0x000000ce   jeq 206  true:0423 false:0201
 0201: 0x15 0xdd 0x00 0x000000cf   jeq 207  true:0423 false:0202
 0202: 0x15 0xdc 0x00 0x000000d0   jeq 208  true:0423 false:0203
 0203: 0x15 0xdb 0x00 0x000000d1   jeq 209  true:0423 false:0204
 0204: 0x15 0xda 0x00 0x000000d2   jeq 210  true:0423 false:0205
 0205: 0x15 0xd9 0x00 0x000000d3   jeq 211  true:0423 false:0206
 0206: 0x15 0xd8 0x00 0x000000d4   jeq 212  true:0423 false:0207
 0207: 0x15 0xd7 0x00 0x000000d5   jeq 213  true:0423 false:0208
 0208: 0x15 0xd6 0x00 0x000000d6   jeq 214  true:0423 false:0209
 0209: 0x15 0xd5 0x00 0x000000d7   jeq 215  true:0423 false:0210
 0210: 0x15 0xd4 0x00 0x000000d8   jeq 216  true:0423 false:0211
 0211: 0x15 0xd3 0x00 0x000000d9   jeq 217  true:0423 false:0212
 0212: 0x15 0xd2 0x00 0x000000da   jeq 218  true:0423 false:0213
 0213: 0x15 0xd1 0x00 0x000000db   jeq 219  true:0423 false:0214
 0214: 0x15 0xd0 0x00 0x000000dc   jeq 220  true:0423 false:0215
 0215: 0x15 0xcf 0x00 0x000000dd   jeq 221  true:0423 false:0216
 0216: 0x15 0xce 0x00 0x000000e0   jeq 224  true:0423 false:0217
 0217: 0x15 0xcd 0x00 0x000000e1   jeq 225  true:0423 false:0218
 0218: 0x15 0xcc 0x00 0x000000e2   jeq 226  true:0423 false:0219
 0219: 0x15 0xcb 0x00 0x000000e3   jeq 227  true:0423 false:0220
 0220: 0x15 0xca 0x00 0x000000e4   jeq 228  true:0423 false:0221
 0221: 0x15 0xc9 0x00 0x000000e5   jeq 229  true:0423 false:0222
 0222: 0x15 0xc8 0x00 0x000000e6   jeq 230  true:0423 false:0223
 0223: 0x15 0xc7 0x00 0x000000e7   jeq 231  true:0423 false:0224
 0224: 0x15 0xc6 0x00 0x000000e8   jeq 232  true:0423 false:0225
 0225: 0x15 0xc5 0x00 0x000000e9   jeq 233  true:0423 false:0226
 0226: 0x15 0xc4 0x00 0x000000ea   jeq 234  true:0423 false:0227
 0227: 0x15 0xc3 0x00 0x000000eb   jeq 235  true:0423 false:0228
 0228: 0x15 0xc2 0x00 0x000000ec   jeq 236  true:0423 false:0229
 0229: 0x15 0xc1 0x00 0x000000ed   jeq 237  true:0423 false:0230
 0230: 0x15 0xc0 0x00 0x000000ee   jeq 238  true:0423 false:0231
 0231: 0x15 0xbf 0x00 0x000000ef   jeq 239  true:0423 false:0232
 0232: 0x15 0xbe 0x00 0x000000f0   jeq 240  true:0423 false:0233
 0233: 0x15 0xbd 0x00 0x000000f1   jeq 241  true:0423 false:0234
 0234: 0x15 0xbc 0x00 0x000000f2   jeq 242  true:0423 false:0235
 0235: 0x15 0xbb 0x00 0x000000f3   jeq 243  true:0423 false:0236
 0236: 0x15 0xba 0x00 0x000000f4   jeq 244  true:0423 false:0237
 0237: 0x15 0xb9 0x00 0x000000f5   jeq 245  true:0423 false:0238
 0238: 0x15 0xb8 0x00 0x000000f6   jeq 246  true:0423 false:0239
 0239: 0x15 0xb7 0x00 0x000000f7   jeq 247  true:0423 false:0240
 0240: 0x15 0xb6 0x00 0x000000f8   jeq 248  true:0423 false:0241
 0241: 0x15 0xb5 0x00 0x000000f9   jeq 249  true:0423 false:0242
 0242: 0x15 0xb4 0x00 0x000000fa   jeq 250  true:0423 false:0243
 0243: 0x15 0xb3 0x00 0x000000fc   jeq 252  true:0423 false:0244
 0244: 0x15 0xaf 0x00 0x000000fd   jeq 253  true:0420 false:0245
 0245: 0x15 0xb1 0x00 0x000000fe   jeq 254  true:0423 false:0246
 0246: 0x15 0xb0 0x00 0x000000ff   jeq 255  true:0423 false:0247
 0247: 0x15 0xaf 0x00 0x00000100   jeq 256  true:0423 false:0248
 0248: 0x15 0xae 0x00 0x00000101   jeq 257  true:0423 false:0249
 0249: 0x15 0xad 0x00 0x00000102   jeq 258  true:0423 false:0250
 0250: 0x15 0xac 0x00 0x00000103   jeq 259  true:0423 false:0251
 0251: 0x15 0xab 0x00 0x00000104   jeq 260  true:0423 false:0252
 0252: 0x15 0xaa 0x00 0x00000105   jeq 261  true:0423 false:0253
 0253: 0x15 0xa9 0x00 0x00000106   jeq 262  true:0423 false:0254
 0254: 0x15 0xa8 0x00 0x00000107   jeq 263  true:0423 false:0255
 0255: 0x15 0xa4 0x00 0x00000108   jeq 264  true:0420 false:0256
 0256: 0x15 0xa6 0x00 0x00000109   jeq 265  true:0423 false:0257
 0257: 0x15 0xa5 0x00 0x0000010a   jeq 266  true:0423 false:0258
 0258: 0x15 0xa4 0x00 0x0000010b   jeq 267  true:0423 false:0259
 0259: 0x15 0xa3 0x00 0x0000010c   jeq 268  true:0423 false:0260
 0260: 0x15 0xa2 0x00 0x0000010d   jeq 269  true:0423 false:0261
 0261: 0x15 0xa1 0x00 0x0000010e   jeq 270  true:0423 false:0262
 0262: 0x15 0xa0 0x00 0x0000010f   jeq 271  true:0423 false:0263
 0263: 0x15 0x9f 0x00 0x00000110   jeq 272  true:0423 false:0264
 0264: 0x15 0x9e 0x00 0x00000112   jeq 274  true:0423 false:0265
 0265: 0x15 0x9d 0x00 0x00000113   jeq 275  true:0423 false:0266
 0266: 0x15 0x9c 0x00 0x00000114   jeq 276  true:0423 false:0267
 0267: 0x15 0x9b 0x00 0x00000115   jeq 277  true:0423 false:0268
 0268: 0x15 0x9a 0x00 0x00000116   jeq 278  true:0423 false:0269
 0269: 0x15 0x99 0x00 0x00000117   jeq 279  true:0423 false:0270
 0270: 0x15 0x98 0x00 0x00000118   jeq 280  true:0423 false:0271
 0271: 0x15 0x97 0x00 0x00000119   jeq 281  true:0423 false:0272
 0272: 0x15 0x96 0x00 0x0000011a   jeq 282  true:0423 false:0273
 0273: 0x15 0x92 0x00 0x0000011b   jeq 283  true:0420 false:0274
 0274: 0x15 0x94 0x00 0x0000011c   jeq 284  true:0423 false:0275
 0275: 0x15 0x90 0x00 0x0000011e   jeq 286  true:0420 false:0276
 0276: 0x15 0x8f 0x00 0x0000011f   jeq 287  true:0420 false:0277
 0277: 0x15 0x8e 0x00 0x00000120   jeq 288  true:0420 false:0278
 0278: 0x15 0x90 0x00 0x00000121   jeq 289  true:0423 false:0279
 0279: 0x15 0x8f 0x00 0x00000122   jeq 290  true:0423 false:0280
 0280: 0x15 0x8e 0x00 0x00000123   jeq 291  true:0423 false:0281
 0281: 0x15 0x8d 0x00 0x00000124   jeq 292  true:0423 false:0282
 0282: 0x15 0x8c 0x00 0x00000125   jeq 293  true:0423 false:0283
 0283: 0x15 0x8b 0x00 0x00000126   jeq 294  true:0423 false:0284
 0284: 0x15 0x8a 0x00 0x00000127   jeq 295  true:0423 false:0285
 0285: 0x15 0x89 0x00 0x00000128   jeq 296  true:0423 false:0286
 0286: 0x15 0x88 0x00 0x00000129   jeq 297  true:0423 false:0287
 0287: 0x15 0x87 0x00 0x0000012a   jeq 298  true:0423 false:0288
 0288: 0x15 0x86 0x00 0x0000012b   jeq 299  true:0423 false:0289
 0289: 0x15 0x85 0x00 0x0000012c   jeq 300  true:0423 false:0290
 0290: 0x15 0x84 0x00 0x0000012d   jeq 301  true:0423 false:0291
 0291: 0x15 0x83 0x00 0x0000012e   jeq 302  true:0423 false:0292
 0292: 0x15 0x82 0x00 0x0000012f   jeq 303  true:0423 false:0293
 0293: 0x15 0x81 0x00 0x00000130   jeq 304  true:0423 false:0294
 0294: 0x15 0x80 0x00 0x00000131   jeq 305  true:0423 false:0295
 0295: 0x15 0x7f 0x00 0x00000132   jeq 306  true:0423 false:0296
 0296: 0x15 0x7e 0x00 0x00000133   jeq 307  true:0423 false:0297
 0297: 0x15 0x7d 0x00 0x00000134   jeq 308  true:0423 false:0298
 0298: 0x15 0x7c 0x00 0x00000135   jeq 309  true:0423 false:0299
 0299: 0x15 0x7b 0x00 0x00000136   jeq 310  true:0423 false:0300
 0300: 0x15 0x7a 0x00 0x00000137   jeq 311  true:0423 false:0301
 0301: 0x15 0x79 0x00 0x00000138   jeq 312  true:0423 false:0302
 0302: 0x15 0x78 0x00 0x00000139   jeq 313  true:0423 false:0303
 0303: 0x15 0x77 0x00 0x0000013a   jeq 314  true:0423 false:0304
 0304: 0x15 0x76 0x00 0x0000013b   jeq 315  true:0423 false:0305
 0305: 0x15 0x75 0x00 0x0000013c   jeq 316  true:0423 false:0306
 0306: 0x15 0x74 0x00 0x0000013d   jeq 317  true:0423 false:0307
 0307: 0x15 0x73 0x00 0x0000013e   jeq 318  true:0423 false:0308
 0308: 0x15 0x72 0x00 0x0000013f   jeq 319  true:0423 false:0309
 0309: 0x15 0x71 0x00 0x00000140   jeq 320  true:0423 false:0310
 0310: 0x15 0x70 0x00 0x00000141   jeq 321  true:0423 false:0311
 0311: 0x15 0x6f 0x00 0x00000142   jeq 322  true:0423 false:0312
 0312: 0x15 0x6e 0x00 0x00000143   jeq 323  true:0423 false:0313
 0313: 0x15 0x6d 0x00 0x00000144   jeq 324  true:0423 false:0314
 0314: 0x15 0x6c 0x00 0x00000145   jeq 325  true:0423 false:0315
 0315: 0x15 0x6b 0x00 0x00000146   jeq 326  true:0423 false:0316
 0316: 0x15 0x6a 0x00 0x00000147   jeq 327  true:0423 false:0317
 0317: 0x15 0x69 0x00 0x00000148   jeq 328  true:0423 false:0318
 0318: 0x15 0x68 0x00 0x00000149   jeq 329  true:0423 false:0319
 0319: 0x15 0x67 0x00 0x0000014a   jeq 330  true:0423 false:0320
 0320: 0x15 0x66 0x00 0x0000014b   jeq 331  true:0423 false:0321
 0321: 0x15 0x65 0x00 0x0000014c   jeq 332  true:0423 false:0322
 0322: 0x15 0x64 0x00 0x0000014d   jeq 333  true:0423 false:0323
 0323: 0x15 0x63 0x00 0x0000014e   jeq 334  true:0423 false:0324
 0324: 0x15 0x62 0x00 0x0000014f   jeq 335  true:0423 false:0325
 0325: 0x15 0x5e 0x00 0x00000150   jeq 336  true:0420 false:0326
 0326: 0x15 0x60 0x00 0x00000151   jeq 337  true:0423 false:0327
 0327: 0x15 0x5c 0x00 0x00000152   jeq 338  true:0420 false:0328
 0328: 0x15 0x5b 0x00 0x00000153   jeq 339  true:0420 false:0329
 0329: 0x15 0x5d 0x00 0x00000154   jeq 340  true:0423 false:0330
 0330: 0x15 0x5c 0x00 0x00000155   jeq 341  true:0423 false:0331
 0331: 0x15 0x58 0x00 0x00000156   jeq 342  true:0420 false:0332
 0332: 0x15 0x57 0x00 0x00000157   jeq 343  true:0420 false:0333
 0333: 0x15 0x59 0x00 0x00000158   jeq 344  true:0423 false:0334
 0334: 0x15 0x58 0x00 0x00000159   jeq 345  true:0423 false:0335
 0335: 0x15 0x57 0x00 0x0000015a   jeq 346  true:0423 false:0336
 0336: 0x15 0x56 0x00 0x0000015b   jeq 347  true:0423 false:0337
 0337: 0x15 0x55 0x00 0x0000015c   jeq 348  true:0423 false:0338
 0338: 0x15 0x54 0x00 0x0000015d   jeq 349  true:0423 false:0339
 0339: 0x15 0x50 0x00 0x0000015e   jeq 350  true:0420 false:0340
 0340: 0x15 0x52 0x00 0x0000015f   jeq 351  true:0423 false:0341
 0341: 0x15 0x51 0x00 0x00000160   jeq 352  true:0423 false:0342
 0342: 0x15 0x50 0x00 0x00000161   jeq 353  true:0423 false:0343
 0343: 0x15 0x4f 0x00 0x00000162   jeq 354  true:0423 false:0344
 0344: 0x15 0x4e 0x00 0x00000163   jeq 355  true:0423 false:0345
 0345: 0x15 0x4d 0x00 0x00000164   jeq 356  true:0423 false:0346
 0346: 0x15 0x49 0x00 0x00000165   jeq 357  true:0420 false:0347
 0347: 0x15 0x4b 0x00 0x00000166   jeq 358  true:0423 false:0348
 0348: 0x15 0x4a 0x00 0x00000167   jeq 359  true:0423 false:0349
 0349: 0x15 0x49 0x00 0x00000168   jeq 360  true:0423 false:0350
 0350: 0x15 0x48 0x00 0x00000169   jeq 361  true:0423 false:0351
 0351: 0x15 0x47 0x00 0x0000016a   jeq 362  true:0423 false:0352
 0352: 0x15 0x46 0x00 0x0000016b   jeq 363  true:0423 false:0353
 0353: 0x15 0x45 0x00 0x0000016c   jeq 364  true:0423 false:0354
 0354: 0x15 0x44 0x00 0x0000016d   jeq 365  true:0423 false:0355
 0355: 0x15 0x43 0x00 0x0000016e   jeq 366  true:0423 false:0356
 0356: 0x15 0x42 0x00 0x0000016f   jeq 367  true:0423 false:0357
 0357: 0x15 0x41 0x00 0x00000170   jeq 368  true:0423 false:0358
 0358: 0x15 0x40 0x00 0x00000171   jeq 369  true:0423 false:0359
 0359: 0x15 0x3f 0x00 0x00000172   jeq 370  true:0423 false:0360
 0360: 0x15 0x3e 0x00 0x00000173   jeq 371  true:0423 false:0361
 0361: 0x15 0x3d 0x00 0x00000174   jeq 372  true:0423 false:0362
 0362: 0x15 0x3c 0x00 0x00000175   jeq 373  true:0423 false:0363
 0363: 0x15 0x3b 0x00 0x00000176   jeq 374  true:0423 false:0364
 0364: 0x15 0x3a 0x00 0x00000177   jeq 375  true:0423 false:0365
 0365: 0x15 0x36 0x00 0x00000178   jeq 376  true:0420 false:0366
 0366: 0x15 0x38 0x00 0x00000179   jeq 377  true:0423 false:0367
 0367: 0x15 0x37 0x00 0x0000017a   jeq 378  true:0423 false:0368
 0368: 0x15 0x36 0x00 0x0000017b   jeq 379  true:0423 false:0369
 0369: 0x15 0x32 0x00 0x0000017c   jeq 380  true:0420 false:0370
 0370: 0x15 0x31 0x00 0x0000017d   jeq 381  true:0420 false:0371
 0371: 0x15 0x30 0x00 0x0000017e   jeq 382  true:0420 false:0372
 0372: 0x15 0x32 0x00 0x0000017f   jeq 383  true:0423 false:0373
 0373: 0x15 0x31 0x00 0x00000180   jeq 384  true:0423 false:0374
 0374: 0x15 0x30 0x00 0x00000181   jeq 385  true:0423 false:0375
 0375: 0x15 0x2f 0x00 0x00000182   jeq 386  true:0423 false:0376
 0376: 0x15 0x2e 0x00 0x00000189   jeq 393  true:0423 false:0377
 0377: 0x15 0x2d 0x00 0x0000018a   jeq 394  true:0423 false:0378
 0378: 0x15 0x2c 0x00 0x0000018b   jeq 395  true:0423 false:0379
 0379: 0x15 0x2b 0x00 0x0000018c   jeq 396  true:0423 false:0380
 0380: 0x15 0x2a 0x00 0x0000018d   jeq 397  true:0423 false:0381
 0381: 0x15 0x29 0x00 0x0000018e   jeq 398  true:0423 false:0382
 0382: 0x15 0x28 0x00 0x0000018f   jeq 399  true:0423 false:0383
 0383: 0x15 0x27 0x00 0x00000190   jeq 400  true:0423 false:0384
 0384: 0x15 0x26 0x00 0x00000191   jeq 401  true:0423 false:0385
 0385: 0x15 0x25 0x00 0x00000192   jeq 402  true:0423 false:0386
 0386: 0x15 0x24 0x00 0x00000193   jeq 403  true:0423 false:0387
 0387: 0x15 0x20 0x00 0x00000194   jeq 404  true:0420 false:0388
 0388: 0x15 0x1f 0x00 0x00000195   jeq 405  true:0420 false:0389
 0389: 0x15 0x21 0x00 0x00000196   jeq 406  true:0423 false:0390
 0390: 0x15 0x20 0x00 0x00000197   jeq 407  true:0423 false:0391
 0391: 0x15 0x1f 0x00 0x00000198   jeq 408  true:0423 false:0392
 0392: 0x15 0x1e 0x00 0x00000199   jeq 409  true:0423 false:0393
 0393: 0x15 0x1d 0x00 0x0000019a   jeq 410  true:0423 false:0394
 0394: 0x15 0x1c 0x00 0x0000019b   jeq 411  true:0423 false:0395
 0395: 0x15 0x1b 0x00 0x0000019c   jeq 412  true:0423 false:0396
 0396: 0x15 0x1a 0x00 0x0000019d   jeq 413  true:0423 false:0397
 0397: 0x15 0x19 0x00 0x0000019e   jeq 414  true:0423 false:0398
 0398: 0x15 0x18 0x00 0x000001a0   jeq 416  true:0423 false:0399
 0399: 0x15 0x17 0x00 0x000001a1   jeq 417  true:0423 false:0400
 0400: 0x15 0x16 0x00 0x000001a2   jeq 418  true:0423 false:0401
 0401: 0x15 0x15 0x00 0x000001a3   jeq 419  true:0423 false:0402
 0402: 0x15 0x14 0x00 0x000001a4   jeq 420  true:0423 false:0403
 0403: 0x15 0x13 0x00 0x000001a5   jeq 421  true:0423 false:0404
 0404: 0x15 0x12 0x00 0x000001a6   jeq 422  true:0423 false:0405
 0405: 0x15 0x0e 0x00 0x000001a7   jeq 423  true:0420 false:0406
 0406: 0x15 0x10 0x00 0x000001a8   jeq 424  true:0423 false:0407
 0407: 0x15 0x0f 0x00 0x000001a9   jeq 425  true:0423 false:0408
 0408: 0x15 0x0e 0x00 0x000001aa   jeq 426  true:0423 false:0409
 0409: 0x15 0x0d 0x00 0x000001ab   jeq 427  true:0423 false:0410
 0410: 0x15 0x0c 0x00 0x000001ac   jeq 428  true:0423 false:0411
 0411: 0x15 0x0b 0x00 0x000001ad   jeq 429  true:0423 false:0412
 0412: 0x15 0x0a 0x00 0x000001ae   jeq 430  true:0423 false:0413
 0413: 0x15 0x09 0x00 0x000001af   jeq 431  true:0423 false:0414
 0414: 0x15 0x08 0x00 0x000001b0   jeq 432  true:0423 false:0415
 0415: 0x15 0x07 0x00 0x000001b1   jeq 433  true:0423 false:0416
 0416: 0x15 0x06 0x00 0x000001b2   jeq 434  true:0423 false:0417
 0417: 0x15 0x05 0x00 0x000001b3   jeq 435  true:0423 false:0418
 0418: 0x15 0x04 0x00 0x000001b5   jeq 437  true:0423 false:0419
 0419: 0x15 0x00 0x01 0x000001b6   jeq 438  true:0420 false:0421
 0420: 0x06 0x00 0x00 0x00050001   ret ERRNO(1)
 0421: 0x15 0x01 0x00 0x000001b7   jeq 439  true:0423 false:0422
 0422: 0x06 0x00 0x00 0x00050026   ret ERRNO(38)
 0423: 0x06 0x00 0x00 0x7fff0000   ret ALLOW

With the optimization on:
 line  OP   JT   JF   K
=================================
 0000: 0x20 0x00 0x00 0x00000004   ld  $data[4]
 0001: 0x15 0x00 0x0d 0x40000003   jeq 1073741827 true:0002 false:0015
 0002: 0x20 0x00 0x00 0x00000000   ld  $data[0]
 0003: 0x25 0x01 0x00 0x000000a9   jgt 169  true:0005 false:0004
 0004: 0x05 0x00 0x00 0x00000143   jmp 0328
 0005: 0x25 0x00 0xa0 0x0000012f   jgt 303  true:0006 false:0166
 0006: 0x25 0x00 0x50 0x0000016f   jgt 367  true:0007 false:0087
 0007: 0x25 0x00 0x28 0x00000195   jgt 405  true:0008 false:0048
 0008: 0x25 0x00 0x14 0x000001a6   jgt 422  true:0009 false:0029
 0009: 0x25 0x00 0x0a 0x000001ae   jgt 430  true:0010 false:0020
 0010: 0x25 0x00 0x05 0x000001b2   jgt 434  true:0011 false:0016
 0011: 0x15 0x03 0x00 0x000001b7   jeq 439  true:0015 false:0012
 0012: 0x15 0xd9 0x00 0x000001b6   jeq 438  true:0230 false:0013
 0013: 0x15 0x01 0x00 0x000001b5   jeq 437  true:0015 false:0014
 0014: 0x15 0x00 0xfd 0x000001b3   jeq 435  true:0015 false:0268
 0015: 0x06 0x00 0x00 0x7fff0000   ret ALLOW
 0016: 0x15 0xff 0x00 0x000001b2   jeq 434  true:0272 false:0017
 0017: 0x15 0xfe 0x00 0x000001b1   jeq 433  true:0272 false:0018
 0018: 0x15 0xfd 0x00 0x000001b0   jeq 432  true:0272 false:0019
 0019: 0x15 0xfc 0xf8 0x000001af   jeq 431  true:0272 false:0268
 0020: 0x25 0x00 0x04 0x000001aa   jgt 426  true:0021 false:0025
 0021: 0x15 0xfa 0x00 0x000001ae   jeq 430  true:0272 false:0022
 0022: 0x15 0xf9 0x00 0x000001ad   jeq 429  true:0272 false:0023
 0023: 0x15 0xf8 0x00 0x000001ac   jeq 428  true:0272 false:0024
 0024: 0x15 0xf7 0xf3 0x000001ab   jeq 427  true:0272 false:0268
 0025: 0x15 0xf6 0x00 0x000001aa   jeq 426  true:0272 false:0026
 0026: 0x15 0xf5 0x00 0x000001a9   jeq 425  true:0272 false:0027
 0027: 0x15 0xf4 0x00 0x000001a8   jeq 424  true:0272 false:0028
 0028: 0x15 0xc9 0xef 0x000001a7   jeq 423  true:0230 false:0268
 0029: 0x25 0x00 0x09 0x0000019d   jgt 413  true:0030 false:0039
 0030: 0x25 0x00 0x04 0x000001a2   jgt 418  true:0031 false:0035
 0031: 0x15 0xf0 0x00 0x000001a6   jeq 422  true:0272 false:0032
 0032: 0x15 0xef 0x00 0x000001a5   jeq 421  true:0272 false:0033
 0033: 0x15 0xee 0x00 0x000001a4   jeq 420  true:0272 false:0034
 0034: 0x15 0xed 0xe9 0x000001a3   jeq 419  true:0272 false:0268
 0035: 0x15 0xec 0x00 0x000001a2   jeq 418  true:0272 false:0036
 0036: 0x15 0xeb 0x00 0x000001a1   jeq 417  true:0272 false:0037
 0037: 0x15 0xea 0x00 0x000001a0   jeq 416  true:0272 false:0038
 0038: 0x15 0xe9 0xe5 0x0000019e   jeq 414  true:0272 false:0268
 0039: 0x25 0x00 0x04 0x00000199   jgt 409  true:0040 false:0044
 0040: 0x15 0xe7 0x00 0x0000019d   jeq 413  true:0272 false:0041
 0041: 0x15 0xe6 0x00 0x0000019c   jeq 412  true:0272 false:0042
 0042: 0x15 0xe5 0x00 0x0000019b   jeq 411  true:0272 false:0043
 0043: 0x15 0xe4 0xe0 0x0000019a   jeq 410  true:0272 false:0268
 0044: 0x15 0xe3 0x00 0x00000199   jeq 409  true:0272 false:0045
 0045: 0x15 0xe2 0x00 0x00000198   jeq 408  true:0272 false:0046
 0046: 0x15 0xe1 0x00 0x00000197   jeq 407  true:0272 false:0047
 0047: 0x15 0xe0 0xdc 0x00000196   jeq 406  true:0272 false:0268
 0048: 0x25 0x00 0x13 0x0000017f   jgt 383  true:0049 false:0068
 0049: 0x25 0x00 0x09 0x0000018d   jgt 397  true:0050 false:0059
 0050: 0x25 0x00 0x04 0x00000191   jgt 401  true:0051 false:0055
 0051: 0x15 0xb2 0x00 0x00000195   jeq 405  true:0230 false:0052
 0052: 0x15 0xb1 0x00 0x00000194   jeq 404  true:0230 false:0053
 0053: 0x15 0xda 0x00 0x00000193   jeq 403  true:0272 false:0054
 0054: 0x15 0xd9 0xd5 0x00000192   jeq 402  true:0272 false:0268
 0055: 0x15 0xd8 0x00 0x00000191   jeq 401  true:0272 false:0056
 0056: 0x15 0xd7 0x00 0x00000190   jeq 400  true:0272 false:0057
 0057: 0x15 0xd6 0x00 0x0000018f   jeq 399  true:0272 false:0058
 0058: 0x15 0xd5 0xd1 0x0000018e   jeq 398  true:0272 false:0268
 0059: 0x25 0x00 0x04 0x00000189   jgt 393  true:0060 false:0064
 0060: 0x15 0xd3 0x00 0x0000018d   jeq 397  true:0272 false:0061
 0061: 0x15 0xd2 0x00 0x0000018c   jeq 396  true:0272 false:0062
 0062: 0x15 0xd1 0x00 0x0000018b   jeq 395  true:0272 false:0063
 0063: 0x15 0xd0 0xcc 0x0000018a   jeq 394  true:0272 false:0268
 0064: 0x15 0xcf 0x00 0x00000189   jeq 393  true:0272 false:0065
 0065: 0x15 0xce 0x00 0x00000182   jeq 386  true:0272 false:0066
 0066: 0x15 0xcd 0x00 0x00000181   jeq 385  true:0272 false:0067
 0067: 0x15 0xcc 0xc8 0x00000180   jeq 384  true:0272 false:0268
 0068: 0x25 0x00 0x09 0x00000177   jgt 375  true:0069 false:0078
 0069: 0x25 0x00 0x04 0x0000017b   jgt 379  true:0070 false:0074
 0070: 0x15 0xc9 0x00 0x0000017f   jeq 383  true:0272 false:0071
 0071: 0x15 0x9e 0x00 0x0000017e   jeq 382  true:0230 false:0072
 0072: 0x15 0x9d 0x00 0x0000017d   jeq 381  true:0230 false:0073
 0073: 0x15 0x9c 0xc2 0x0000017c   jeq 380  true:0230 false:0268
 0074: 0x15 0xc5 0x00 0x0000017b   jeq 379  true:0272 false:0075
 0075: 0x15 0xc4 0x00 0x0000017a   jeq 378  true:0272 false:0076
 0076: 0x15 0xc3 0x00 0x00000179   jeq 377  true:0272 false:0077
 0077: 0x15 0x98 0xbe 0x00000178   jeq 376  true:0230 false:0268
 0078: 0x25 0x00 0x04 0x00000173   jgt 371  true:0079 false:0083
 0079: 0x15 0xc0 0x00 0x00000177   jeq 375  true:0272 false:0080
 0080: 0x15 0xbf 0x00 0x00000176   jeq 374  true:0272 false:0081
 0081: 0x15 0xbe 0x00 0x00000175   jeq 373  true:0272 false:0082
 0082: 0x15 0xbd 0xb9 0x00000174   jeq 372  true:0272 false:0268
 0083: 0x15 0xbc 0x00 0x00000173   jeq 371  true:0272 false:0084
 0084: 0x15 0xbb 0x00 0x00000172   jeq 370  true:0272 false:0085
 0085: 0x15 0xba 0x00 0x00000171   jeq 369  true:0272 false:0086
 0086: 0x15 0xb9 0xb5 0x00000170   jeq 368  true:0272 false:0268
 0087: 0x25 0x00 0x27 0x0000014f   jgt 335  true:0088 false:0127
 0088: 0x25 0x00 0x13 0x0000015f   jgt 351  true:0089 false:0108
 0089: 0x25 0x00 0x09 0x00000167   jgt 359  true:0090 false:0099
 0090: 0x25 0x00 0x04 0x0000016b   jgt 363  true:0091 false:0095
 0091: 0x15 0xb4 0x00 0x0000016f   jeq 367  true:0272 false:0092
 0092: 0x15 0xb3 0x00 0x0000016e   jeq 366  true:0272 false:0093
 0093: 0x15 0xb2 0x00 0x0000016d   jeq 365  true:0272 false:0094
 0094: 0x15 0xb1 0xad 0x0000016c   jeq 364  true:0272 false:0268
 0095: 0x15 0xb0 0x00 0x0000016b   jeq 363  true:0272 false:0096
 0096: 0x15 0xaf 0x00 0x0000016a   jeq 362  true:0272 false:0097
 0097: 0x15 0xae 0x00 0x00000169   jeq 361  true:0272 false:0098
 0098: 0x15 0xad 0xa9 0x00000168   jeq 360  true:0272 false:0268
 0099: 0x25 0x00 0x04 0x00000163   jgt 355  true:0100 false:0104
 0100: 0x15 0xab 0x00 0x00000167   jeq 359  true:0272 false:0101
 0101: 0x15 0xaa 0x00 0x00000166   jeq 358  true:0272 false:0102
 0102: 0x15 0x7f 0x00 0x00000165   jeq 357  true:0230 false:0103
 0103: 0x15 0xa8 0xa4 0x00000164   jeq 356  true:0272 false:0268
 0104: 0x15 0xa7 0x00 0x00000163   jeq 355  true:0272 false:0105
 0105: 0x15 0xa6 0x00 0x00000162   jeq 354  true:0272 false:0106
 0106: 0x15 0xa5 0x00 0x00000161   jeq 353  true:0272 false:0107
 0107: 0x15 0xa4 0xa0 0x00000160   jeq 352  true:0272 false:0268
 0108: 0x25 0x00 0x09 0x00000157   jgt 343  true:0109 false:0118
 0109: 0x25 0x00 0x04 0x0000015b   jgt 347  true:0110 false:0114
 0110: 0x15 0xa1 0x00 0x0000015f   jeq 351  true:0272 false:0111
 0111: 0x15 0x76 0x00 0x0000015e   jeq 350  true:0230 false:0112
 0112: 0x15 0x9f 0x00 0x0000015d   jeq 349  true:0272 false:0113
 0113: 0x15 0x9e 0x9a 0x0000015c   jeq 348  true:0272 false:0268
 0114: 0x15 0x9d 0x00 0x0000015b   jeq 347  true:0272 false:0115
 0115: 0x15 0x9c 0x00 0x0000015a   jeq 346  true:0272 false:0116
 0116: 0x15 0x9b 0x00 0x00000159   jeq 345  true:0272 false:0117
 0117: 0x15 0x9a 0x96 0x00000158   jeq 344  true:0272 false:0268
 0118: 0x25 0x00 0x04 0x00000153   jgt 339  true:0119 false:0123
 0119: 0x15 0x6e 0x00 0x00000157   jeq 343  true:0230 false:0120
 0120: 0x15 0x6d 0x00 0x00000156   jeq 342  true:0230 false:0121
 0121: 0x15 0x96 0x00 0x00000155   jeq 341  true:0272 false:0122
 0122: 0x15 0x95 0x91 0x00000154   jeq 340  true:0272 false:0268
 0123: 0x15 0x6a 0x00 0x00000153   jeq 339  true:0230 false:0124
 0124: 0x15 0x69 0x00 0x00000152   jeq 338  true:0230 false:0125
 0125: 0x15 0x92 0x00 0x00000151   jeq 337  true:0272 false:0126
 0126: 0x15 0x67 0x8d 0x00000150   jeq 336  true:0230 false:0268
 0127: 0x25 0x00 0x13 0x0000013f   jgt 319  true:0128 false:0147
 0128: 0x25 0x00 0x09 0x00000147   jgt 327  true:0129 false:0138
 0129: 0x25 0x00 0x04 0x0000014b   jgt 331  true:0130 false:0134
 0130: 0x15 0x8d 0x00 0x0000014f   jeq 335  true:0272 false:0131
 0131: 0x15 0x8c 0x00 0x0000014e   jeq 334  true:0272 false:0132
 0132: 0x15 0x8b 0x00 0x0000014d   jeq 333  true:0272 false:0133
 0133: 0x15 0x8a 0x86 0x0000014c   jeq 332  true:0272 false:0268
 0134: 0x15 0x89 0x00 0x0000014b   jeq 331  true:0272 false:0135
 0135: 0x15 0x88 0x00 0x0000014a   jeq 330  true:0272 false:0136
 0136: 0x15 0x87 0x00 0x00000149   jeq 329  true:0272 false:0137
 0137: 0x15 0x86 0x82 0x00000148   jeq 328  true:0272 false:0268
 0138: 0x25 0x00 0x04 0x00000143   jgt 323  true:0139 false:0143
 0139: 0x15 0x84 0x00 0x00000147   jeq 327  true:0272 false:0140
 0140: 0x15 0x83 0x00 0x00000146   jeq 326  true:0272 false:0141
 0141: 0x15 0x82 0x00 0x00000145   jeq 325  true:0272 false:0142
 0142: 0x15 0x81 0x7d 0x00000144   jeq 324  true:0272 false:0268
 0143: 0x15 0x80 0x00 0x00000143   jeq 323  true:0272 false:0144
 0144: 0x15 0x7f 0x00 0x00000142   jeq 322  true:0272 false:0145
 0145: 0x15 0x7e 0x00 0x00000141   jeq 321  true:0272 false:0146
 0146: 0x15 0x7d 0x79 0x00000140   jeq 320  true:0272 false:0268
 0147: 0x25 0x00 0x09 0x00000137   jgt 311  true:0148 false:0157
 0148: 0x25 0x00 0x04 0x0000013b   jgt 315  true:0149 false:0153
 0149: 0x15 0x7a 0x00 0x0000013f   jeq 319  true:0272 false:0150
 0150: 0x15 0x79 0x00 0x0000013e   jeq 318  true:0272 false:0151
 0151: 0x15 0x78 0x00 0x0000013d   jeq 317  true:0272 false:0152
 0152: 0x15 0x77 0x73 0x0000013c   jeq 316  true:0272 false:0268
 0153: 0x15 0x76 0x00 0x0000013b   jeq 315  true:0272 false:0154
 0154: 0x15 0x75 0x00 0x0000013a   jeq 314  true:0272 false:0155
 0155: 0x15 0x74 0x00 0x00000139   jeq 313  true:0272 false:0156
 0156: 0x15 0x73 0x6f 0x00000138   jeq 312  true:0272 false:0268
 0157: 0x25 0x00 0x04 0x00000133   jgt 307  true:0158 false:0162
 0158: 0x15 0x71 0x00 0x00000137   jeq 311  true:0272 false:0159
 0159: 0x15 0x70 0x00 0x00000136   jeq 310  true:0272 false:0160
 0160: 0x15 0x6f 0x00 0x00000135   jeq 309  true:0272 false:0161
 0161: 0x15 0x6e 0x6a 0x00000134   jeq 308  true:0272 false:0268
 0162: 0x15 0x6d 0x00 0x00000133   jeq 307  true:0272 false:0163
 0163: 0x15 0x6c 0x00 0x00000132   jeq 306  true:0272 false:0164
 0164: 0x15 0x6b 0x00 0x00000131   jeq 305  true:0272 false:0165
 0165: 0x15 0x6a 0x66 0x00000130   jeq 304  true:0272 false:0268
 0166: 0x25 0x00 0x50 0x000000ec   jgt 236  true:0167 false:0247
 0167: 0x25 0x00 0x27 0x0000010d   jgt 269  true:0168 false:0207
 0168: 0x25 0x00 0x13 0x0000011f   jgt 287  true:0169 false:0188
 0169: 0x25 0x00 0x09 0x00000127   jgt 295  true:0170 false:0179
 0170: 0x25 0x00 0x04 0x0000012b   jgt 299  true:0171 false:0175
 0171: 0x15 0x64 0x00 0x0000012f   jeq 303  true:0272 false:0172
 0172: 0x15 0x63 0x00 0x0000012e   jeq 302  true:0272 false:0173
 0173: 0x15 0x62 0x00 0x0000012d   jeq 301  true:0272 false:0174
 0174: 0x15 0x61 0x5d 0x0000012c   jeq 300  true:0272 false:0268
 0175: 0x15 0x60 0x00 0x0000012b   jeq 299  true:0272 false:0176
 0176: 0x15 0x5f 0x00 0x0000012a   jeq 298  true:0272 false:0177
 0177: 0x15 0x5e 0x00 0x00000129   jeq 297  true:0272 false:0178
 0178: 0x15 0x5d 0x59 0x00000128   jeq 296  true:0272 false:0268
 0179: 0x25 0x00 0x04 0x00000123   jgt 291  true:0180 false:0184
 0180: 0x15 0x5b 0x00 0x00000127   jeq 295  true:0272 false:0181
 0181: 0x15 0x5a 0x00 0x00000126   jeq 294  true:0272 false:0182
 0182: 0x15 0x59 0x00 0x00000125   jeq 293  true:0272 false:0183
 0183: 0x15 0x58 0x54 0x00000124   jeq 292  true:0272 false:0268
 0184: 0x15 0x57 0x00 0x00000123   jeq 291  true:0272 false:0185
 0185: 0x15 0x56 0x00 0x00000122   jeq 290  true:0272 false:0186
 0186: 0x15 0x55 0x00 0x00000121   jeq 289  true:0272 false:0187
 0187: 0x15 0x2a 0x50 0x00000120   jeq 288  true:0230 false:0268
 0188: 0x25 0x00 0x09 0x00000116   jgt 278  true:0189 false:0198
 0189: 0x25 0x00 0x04 0x0000011a   jgt 282  true:0190 false:0194
 0190: 0x15 0x27 0x00 0x0000011f   jeq 287  true:0230 false:0191
 0191: 0x15 0x26 0x00 0x0000011e   jeq 286  true:0230 false:0192
 0192: 0x15 0x4f 0x00 0x0000011c   jeq 284  true:0272 false:0193
 0193: 0x15 0x24 0x4a 0x0000011b   jeq 283  true:0230 false:0268
 0194: 0x15 0x4d 0x00 0x0000011a   jeq 282  true:0272 false:0195
 0195: 0x15 0x4c 0x00 0x00000119   jeq 281  true:0272 false:0196
 0196: 0x15 0x4b 0x00 0x00000118   jeq 280  true:0272 false:0197
 0197: 0x15 0x4a 0x46 0x00000117   jeq 279  true:0272 false:0268
 0198: 0x25 0x00 0x04 0x00000112   jgt 274  true:0199 false:0203
 0199: 0x15 0x48 0x00 0x00000116   jeq 278  true:0272 false:0200
 0200: 0x15 0x47 0x00 0x00000115   jeq 277  true:0272 false:0201
 0201: 0x15 0x46 0x00 0x00000114   jeq 276  true:0272 false:0202
 0202: 0x15 0x45 0x41 0x00000113   jeq 275  true:0272 false:0268
 0203: 0x15 0x44 0x00 0x00000112   jeq 274  true:0272 false:0204
 0204: 0x15 0x43 0x00 0x00000110   jeq 272  true:0272 false:0205
 0205: 0x15 0x42 0x00 0x0000010f   jeq 271  true:0272 false:0206
 0206: 0x15 0x41 0x3d 0x0000010e   jeq 270  true:0272 false:0268
 0207: 0x25 0x00 0x13 0x000000fd   jgt 253  true:0208 false:0227
 0208: 0x25 0x00 0x09 0x00000105   jgt 261  true:0209 false:0218
 0209: 0x25 0x00 0x04 0x00000109   jgt 265  true:0210 false:0214
 0210: 0x15 0x3d 0x00 0x0000010d   jeq 269  true:0272 false:0211
 0211: 0x15 0x3c 0x00 0x0000010c   jeq 268  true:0272 false:0212
 0212: 0x15 0x3b 0x00 0x0000010b   jeq 267  true:0272 false:0213
 0213: 0x15 0x3a 0x36 0x0000010a   jeq 266  true:0272 false:0268
 0214: 0x15 0x39 0x00 0x00000109   jeq 265  true:0272 false:0215
 0215: 0x15 0x0e 0x00 0x00000108   jeq 264  true:0230 false:0216
 0216: 0x15 0x37 0x00 0x00000107   jeq 263  true:0272 false:0217
 0217: 0x15 0x36 0x32 0x00000106   jeq 262  true:0272 false:0268
 0218: 0x25 0x00 0x04 0x00000101   jgt 257  true:0219 false:0223
 0219: 0x15 0x34 0x00 0x00000105   jeq 261  true:0272 false:0220
 0220: 0x15 0x33 0x00 0x00000104   jeq 260  true:0272 false:0221
 0221: 0x15 0x32 0x00 0x00000103   jeq 259  true:0272 false:0222
 0222: 0x15 0x31 0x2d 0x00000102   jeq 258  true:0272 false:0268
 0223: 0x15 0x30 0x00 0x00000101   jeq 257  true:0272 false:0224
 0224: 0x15 0x2f 0x00 0x00000100   jeq 256  true:0272 false:0225
 0225: 0x15 0x2e 0x00 0x000000ff   jeq 255  true:0272 false:0226
 0226: 0x15 0x2d 0x29 0x000000fe   jeq 254  true:0272 false:0268
 0227: 0x25 0x00 0x0a 0x000000f4   jgt 244  true:0228 false:0238
 0228: 0x25 0x00 0x05 0x000000f8   jgt 248  true:0229 false:0234
 0229: 0x15 0x00 0x01 0x000000fd   jeq 253  true:0230 false:0231
 0230: 0x06 0x00 0x00 0x00050001   ret ERRNO(1)
 0231: 0x15 0x28 0x00 0x000000fc   jeq 252  true:0272 false:0232
 0232: 0x15 0x27 0x00 0x000000fa   jeq 250  true:0272 false:0233
 0233: 0x15 0x26 0x22 0x000000f9   jeq 249  true:0272 false:0268
 0234: 0x15 0x25 0x00 0x000000f8   jeq 248  true:0272 false:0235
 0235: 0x15 0x24 0x00 0x000000f7   jeq 247  true:0272 false:0236
 0236: 0x15 0x23 0x00 0x000000f6   jeq 246  true:0272 false:0237
 0237: 0x15 0x22 0x1e 0x000000f5   jeq 245  true:0272 false:0268
 0238: 0x25 0x00 0x04 0x000000f0   jgt 240  true:0239 false:0243
 0239: 0x15 0x20 0x00 0x000000f4   jeq 244  true:0272 false:0240
 0240: 0x15 0x1f 0x00 0x000000f3   jeq 243  true:0272 false:0241
 0241: 0x15 0x1e 0x00 0x000000f2   jeq 242  true:0272 false:0242
 0242: 0x15 0x1d 0x19 0x000000f1   jeq 241  true:0272 false:0268
 0243: 0x15 0x1c 0x00 0x000000f0   jeq 240  true:0272 false:0244
 0244: 0x15 0x1b 0x00 0x000000ef   jeq 239  true:0272 false:0245
 0245: 0x15 0x1a 0x00 0x000000ee   jeq 238  true:0272 false:0246
 0246: 0x15 0x19 0x15 0x000000ed   jeq 237  true:0272 false:0268
 0247: 0x25 0x00 0x29 0x000000ca   jgt 202  true:0248 false:0289
 0248: 0x25 0x00 0x14 0x000000da   jgt 218  true:0249 false:0269
 0249: 0x25 0x00 0x09 0x000000e4   jgt 228  true:0250 false:0259
 0250: 0x25 0x00 0x04 0x000000e8   jgt 232  true:0251 false:0255
 0251: 0x15 0x14 0x00 0x000000ec   jeq 236  true:0272 false:0252
 0252: 0x15 0x13 0x00 0x000000eb   jeq 235  true:0272 false:0253
 0253: 0x15 0x12 0x00 0x000000ea   jeq 234  true:0272 false:0254
 0254: 0x15 0x11 0x0d 0x000000e9   jeq 233  true:0272 false:0268
 0255: 0x15 0x10 0x00 0x000000e8   jeq 232  true:0272 false:0256
 0256: 0x15 0x0f 0x00 0x000000e7   jeq 231  true:0272 false:0257
 0257: 0x15 0x0e 0x00 0x000000e6   jeq 230  true:0272 false:0258
 0258: 0x15 0x0d 0x09 0x000000e5   jeq 229  true:0272 false:0268
 0259: 0x25 0x00 0x04 0x000000e0   jgt 224  true:0260 false:0264
 0260: 0x15 0x0b 0x00 0x000000e4   jeq 228  true:0272 false:0261
 0261: 0x15 0x0a 0x00 0x000000e3   jeq 227  true:0272 false:0262
 0262: 0x15 0x09 0x00 0x000000e2   jeq 226  true:0272 false:0263
 0263: 0x15 0x08 0x04 0x000000e1   jeq 225  true:0272 false:0268
 0264: 0x15 0x07 0x00 0x000000e0   jeq 224  true:0272 false:0265
 0265: 0x15 0x06 0x00 0x000000dd   jeq 221  true:0272 false:0266
 0266: 0x15 0x05 0x00 0x000000dc   jeq 220  true:0272 false:0267
 0267: 0x15 0x04 0x00 0x000000db   jeq 219  true:0272 false:0268
 0268: 0x06 0x00 0x00 0x00050026   ret ERRNO(38)
 0269: 0x25 0x00 0x0a 0x000000d2   jgt 210  true:0270 false:0280
 0270: 0x25 0x00 0x05 0x000000d6   jgt 214  true:0271 false:0276
 0271: 0x15 0x00 0x01 0x000000da   jeq 218  true:0272 false:0273
 0272: 0x06 0x00 0x00 0x7fff0000   ret ALLOW
 0273: 0x15 0xff 0x00 0x000000d9   jeq 217  true:0529 false:0274
 0274: 0x15 0xfe 0x00 0x000000d8   jeq 216  true:0529 false:0275
 0275: 0x15 0xfd 0xfc 0x000000d7   jeq 215  true:0529 false:0528
 0276: 0x15 0xfc 0x00 0x000000d6   jeq 214  true:0529 false:0277
 0277: 0x15 0xfb 0x00 0x000000d5   jeq 213  true:0529 false:0278
 0278: 0x15 0xfa 0x00 0x000000d4   jeq 212  true:0529 false:0279
 0279: 0x15 0xf9 0xf8 0x000000d3   jeq 211  true:0529 false:0528
 0280: 0x25 0x00 0x04 0x000000ce   jgt 206  true:0281 false:0285
 0281: 0x15 0xf7 0x00 0x000000d2   jeq 210  true:0529 false:0282
 0282: 0x15 0xf6 0x00 0x000000d1   jeq 209  true:0529 false:0283
 0283: 0x15 0xf5 0x00 0x000000d0   jeq 208  true:0529 false:0284
 0284: 0x15 0xf4 0xf3 0x000000cf   jeq 207  true:0529 false:0528
 0285: 0x15 0xf3 0x00 0x000000ce   jeq 206  true:0529 false:0286
 0286: 0x15 0xf2 0x00 0x000000cd   jeq 205  true:0529 false:0287
 0287: 0x15 0xf1 0x00 0x000000cc   jeq 204  true:0529 false:0288
 0288: 0x15 0xf0 0xef 0x000000cb   jeq 203  true:0529 false:0528
 0289: 0x25 0x00 0x13 0x000000b9   jgt 185  true:0290 false:0309
 0290: 0x25 0x00 0x09 0x000000c2   jgt 194  true:0291 false:0300
 0291: 0x25 0x00 0x04 0x000000c6   jgt 198  true:0292 false:0296
 0292: 0x15 0xec 0x00 0x000000ca   jeq 202  true:0529 false:0293
 0293: 0x15 0xeb 0x00 0x000000c9   jeq 201  true:0529 false:0294
 0294: 0x15 0xea 0x00 0x000000c8   jeq 200  true:0529 false:0295
 0295: 0x15 0xe9 0xe8 0x000000c7   jeq 199  true:0529 false:0528
 0296: 0x15 0xe8 0x00 0x000000c6   jeq 198  true:0529 false:0297
 0297: 0x15 0xe7 0x00 0x000000c5   jeq 197  true:0529 false:0298
 0298: 0x15 0xe6 0x00 0x000000c4   jeq 196  true:0529 false:0299
 0299: 0x15 0xe5 0xe4 0x000000c3   jeq 195  true:0529 false:0528
 0300: 0x25 0x00 0x04 0x000000be   jgt 190  true:0301 false:0305
 0301: 0x15 0xe3 0x00 0x000000c2   jeq 194  true:0529 false:0302
 0302: 0x15 0xe2 0x00 0x000000c1   jeq 193  true:0529 false:0303
 0303: 0x15 0xe1 0x00 0x000000c0   jeq 192  true:0529 false:0304
 0304: 0x15 0xe0 0xdf 0x000000bf   jeq 191  true:0529 false:0528
 0305: 0x15 0xdf 0x00 0x000000be   jeq 190  true:0529 false:0306
 0306: 0x15 0xc0 0x00 0x000000bc   jeq 188  true:0499 false:0307
 0307: 0x15 0xdd 0x00 0x000000bb   jeq 187  true:0529 false:0308
 0308: 0x15 0xdc 0xdb 0x000000ba   jeq 186  true:0529 false:0528
 0309: 0x25 0x00 0x09 0x000000b1   jgt 177  true:0310 false:0319
 0310: 0x25 0x00 0x04 0x000000b5   jgt 181  true:0311 false:0315
 0311: 0x15 0xd9 0x00 0x000000b9   jeq 185  true:0529 false:0312
 0312: 0x15 0xd8 0x00 0x000000b8   jeq 184  true:0529 false:0313
 0313: 0x15 0xd7 0x00 0x000000b7   jeq 183  true:0529 false:0314
 0314: 0x15 0xd6 0xd5 0x000000b6   jeq 182  true:0529 false:0528
 0315: 0x15 0xd5 0x00 0x000000b5   jeq 181  true:0529 false:0316
 0316: 0x15 0xd4 0x00 0x000000b4   jeq 180  true:0529 false:0317
 0317: 0x15 0xd3 0x00 0x000000b3   jeq 179  true:0529 false:0318
 0318: 0x15 0xd2 0xd1 0x000000b2   jeq 178  true:0529 false:0528
 0319: 0x25 0x00 0x04 0x000000ad   jgt 173  true:0320 false:0324
 0320: 0x15 0xd0 0x00 0x000000b1   jeq 177  true:0529 false:0321
 0321: 0x15 0xcf 0x00 0x000000b0   jeq 176  true:0529 false:0322
 0322: 0x15 0xce 0x00 0x000000af   jeq 175  true:0529 false:0323
 0323: 0x15 0xcd 0xcc 0x000000ae   jeq 174  true:0529 false:0528
 0324: 0x15 0xcc 0x00 0x000000ad   jeq 173  true:0529 false:0325
 0325: 0x15 0xcb 0x00 0x000000ac   jeq 172  true:0529 false:0326
 0326: 0x15 0xca 0x00 0x000000ab   jeq 171  true:0529 false:0327
 0327: 0x15 0xc9 0xc8 0x000000aa   jeq 170  true:0529 false:0528
 0328: 0x25 0x00 0x9f 0x00000022   jgt 34   true:0329 false:0488
 0329: 0x25 0x00 0x4f 0x00000068   jgt 104  true:0330 false:0409
 0330: 0x25 0x00 0x27 0x00000088   jgt 136  true:0331 false:0370
 0331: 0x25 0x00 0x13 0x00000099   jgt 153  true:0332 false:0351
 0332: 0x25 0x00 0x09 0x000000a1   jgt 161  true:0333 false:0342
 0333: 0x25 0x00 0x04 0x000000a5   jgt 165  true:0334 false:0338
 0334: 0x15 0xa4 0x00 0x000000a9   jeq 169  true:0499 false:0335
 0335: 0x15 0xc1 0x00 0x000000a8   jeq 168  true:0529 false:0336
 0336: 0x15 0xa2 0x00 0x000000a7   jeq 167  true:0499 false:0337
 0337: 0x15 0xa1 0xbe 0x000000a6   jeq 166  true:0499 false:0528
 0338: 0x15 0xbe 0x00 0x000000a5   jeq 165  true:0529 false:0339
 0339: 0x15 0xbd 0x00 0x000000a4   jeq 164  true:0529 false:0340
 0340: 0x15 0xbc 0x00 0x000000a3   jeq 163  true:0529 false:0341
 0341: 0x15 0xbb 0xba 0x000000a2   jeq 162  true:0529 false:0528
 0342: 0x25 0x00 0x04 0x0000009d   jgt 157  true:0343 false:0347
 0343: 0x15 0xb9 0x00 0x000000a1   jeq 161  true:0529 false:0344
 0344: 0x15 0xb8 0x00 0x000000a0   jeq 160  true:0529 false:0345
 0345: 0x15 0xb7 0x00 0x0000009f   jeq 159  true:0529 false:0346
 0346: 0x15 0xb6 0xb5 0x0000009e   jeq 158  true:0529 false:0528
 0347: 0x15 0xb5 0x00 0x0000009d   jeq 157  true:0529 false:0348
 0348: 0x15 0xb4 0x00 0x0000009c   jeq 156  true:0529 false:0349
 0349: 0x15 0xb3 0x00 0x0000009b   jeq 155  true:0529 false:0350
 0350: 0x15 0xb2 0xb1 0x0000009a   jeq 154  true:0529 false:0528
 0351: 0x25 0x00 0x09 0x00000091   jgt 145  true:0352 false:0361
 0352: 0x25 0x00 0x04 0x00000095   jgt 149  true:0353 false:0357
 0353: 0x15 0x91 0x00 0x00000099   jeq 153  true:0499 false:0354
 0354: 0x15 0x90 0x00 0x00000098   jeq 152  true:0499 false:0355
 0355: 0x15 0x8f 0x00 0x00000097   jeq 151  true:0499 false:0356
 0356: 0x15 0x8e 0xab 0x00000096   jeq 150  true:0499 false:0528
 0357: 0x15 0x8d 0x00 0x00000095   jeq 149  true:0499 false:0358
 0358: 0x15 0xaa 0x00 0x00000094   jeq 148  true:0529 false:0359
 0359: 0x15 0xa9 0x00 0x00000093   jeq 147  true:0529 false:0360
 0360: 0x15 0xa8 0xa7 0x00000092   jeq 146  true:0529 false:0528
 0361: 0x25 0x00 0x04 0x0000008d   jgt 141  true:0362 false:0366
 0362: 0x15 0xa6 0x00 0x00000091   jeq 145  true:0529 false:0363
 0363: 0x15 0xa5 0x00 0x00000090   jeq 144  true:0529 false:0364
 0364: 0x15 0xa4 0x00 0x0000008f   jeq 143  true:0529 false:0365
 0365: 0x15 0xa3 0xa2 0x0000008e   jeq 142  true:0529 false:0528
 0366: 0x15 0xa2 0x00 0x0000008d   jeq 141  true:0529 false:0367
 0367: 0x15 0xa1 0x00 0x0000008c   jeq 140  true:0529 false:0368
 0368: 0x15 0xa0 0x00 0x0000008b   jeq 139  true:0529 false:0369
 0369: 0x15 0x9f 0x9e 0x0000008a   jeq 138  true:0529 false:0528
 0370: 0x25 0x00 0x13 0x00000078   jgt 120  true:0371 false:0390
 0371: 0x25 0x00 0x09 0x00000080   jgt 128  true:0372 false:0381
 0372: 0x25 0x00 0x04 0x00000084   jgt 132  true:0373 false:0377
 0373: 0x15 0x9b 0x00 0x00000088   jeq 136  true:0529 false:0374
 0374: 0x15 0x7c 0x00 0x00000087   jeq 135  true:0499 false:0375
 0375: 0x15 0x7b 0x00 0x00000086   jeq 134  true:0499 false:0376
 0376: 0x15 0x98 0x97 0x00000085   jeq 133  true:0529 false:0528
 0377: 0x15 0x97 0x00 0x00000084   jeq 132  true:0529 false:0378
 0378: 0x15 0x78 0x00 0x00000083   jeq 131  true:0499 false:0379
 0379: 0x15 0x77 0x00 0x00000082   jeq 130  true:0499 false:0380
 0380: 0x15 0x76 0x93 0x00000081   jeq 129  true:0499 false:0528
 0381: 0x25 0x00 0x04 0x0000007c   jgt 124  true:0382 false:0386
 0382: 0x15 0x74 0x00 0x00000080   jeq 128  true:0499 false:0383
 0383: 0x15 0x73 0x00 0x0000007f   jeq 127  true:0499 false:0384
 0384: 0x15 0x90 0x00 0x0000007e   jeq 126  true:0529 false:0385
 0385: 0x15 0x8f 0x8e 0x0000007d   jeq 125  true:0529 false:0528
 0386: 0x15 0x70 0x00 0x0000007c   jeq 124  true:0499 false:0387
 0387: 0x15 0x6f 0x00 0x0000007b   jeq 123  true:0499 false:0388
 0388: 0x15 0x8c 0x00 0x0000007a   jeq 122  true:0529 false:0389
 0389: 0x15 0x8b 0x8a 0x00000079   jeq 121  true:0529 false:0528
 0390: 0x25 0x00 0x09 0x00000070   jgt 112  true:0391 false:0400
 0391: 0x25 0x00 0x04 0x00000074   jgt 116  true:0392 false:0396
 0392: 0x15 0x88 0x00 0x00000078   jeq 120  true:0529 false:0393
 0393: 0x15 0x87 0x00 0x00000077   jeq 119  true:0529 false:0394
 0394: 0x15 0x86 0x00 0x00000076   jeq 118  true:0529 false:0395
 0395: 0x15 0x85 0x84 0x00000075   jeq 117  true:0529 false:0528
 0396: 0x15 0x84 0x00 0x00000074   jeq 116  true:0529 false:0397
 0397: 0x15 0x65 0x00 0x00000073   jeq 115  true:0499 false:0398
 0398: 0x15 0x82 0x00 0x00000072   jeq 114  true:0529 false:0399
 0399: 0x15 0x63 0x80 0x00000071   jeq 113  true:0499 false:0528
 0400: 0x25 0x00 0x04 0x0000006c   jgt 108  true:0401 false:0405
 0401: 0x15 0x61 0x00 0x00000070   jeq 112  true:0499 false:0402
 0402: 0x15 0x7e 0x00 0x0000006f   jeq 111  true:0529 false:0403
 0403: 0x15 0x5f 0x00 0x0000006e   jeq 110  true:0499 false:0404
 0404: 0x15 0x7c 0x7b 0x0000006d   jeq 109  true:0529 false:0528
 0405: 0x15 0x7b 0x00 0x0000006c   jeq 108  true:0529 false:0406
 0406: 0x15 0x7a 0x00 0x0000006b   jeq 107  true:0529 false:0407
 0407: 0x15 0x79 0x00 0x0000006a   jeq 106  true:0529 false:0408
 0408: 0x15 0x78 0x77 0x00000069   jeq 105  true:0529 false:0528
 0409: 0x25 0x00 0x27 0x00000047   jgt 71   true:0410 false:0449
 0410: 0x25 0x00 0x13 0x00000057   jgt 87   true:0411 false:0430
 0411: 0x25 0x00 0x09 0x0000005f   jgt 95   true:0412 false:0421
 0412: 0x25 0x00 0x04 0x00000064   jgt 100  true:0413 false:0417
 0413: 0x15 0x73 0x00 0x00000068   jeq 104  true:0529 false:0414
 0414: 0x15 0x54 0x00 0x00000067   jeq 103  true:0499 false:0415
 0415: 0x15 0x71 0x00 0x00000066   jeq 102  true:0529 false:0416
 0416: 0x15 0x52 0x6f 0x00000065   jeq 101  true:0499 false:0528
 0417: 0x15 0x6f 0x00 0x00000064   jeq 100  true:0529 false:0418
 0418: 0x15 0x6e 0x00 0x00000063   jeq 99   true:0529 false:0419
 0419: 0x15 0x6d 0x00 0x00000061   jeq 97   true:0529 false:0420
 0420: 0x15 0x6c 0x6b 0x00000060   jeq 96   true:0529 false:0528
 0421: 0x25 0x00 0x04 0x0000005b   jgt 91   true:0422 false:0426
 0422: 0x15 0x6a 0x00 0x0000005f   jeq 95   true:0529 false:0423
 0423: 0x15 0x69 0x00 0x0000005e   jeq 94   true:0529 false:0424
 0424: 0x15 0x68 0x00 0x0000005d   jeq 93   true:0529 false:0425
 0425: 0x15 0x67 0x66 0x0000005c   jeq 92   true:0529 false:0528
 0426: 0x15 0x66 0x00 0x0000005b   jeq 91   true:0529 false:0427
 0427: 0x15 0x65 0x00 0x0000005a   jeq 90   true:0529 false:0428
 0428: 0x15 0x64 0x00 0x00000059   jeq 89   true:0529 false:0429
 0429: 0x15 0x63 0x62 0x00000058   jeq 88   true:0529 false:0528
 0430: 0x25 0x00 0x09 0x0000004f   jgt 79   true:0431 false:0440
 0431: 0x25 0x00 0x04 0x00000053   jgt 83   true:0432 false:0436
 0432: 0x15 0x42 0x00 0x00000057   jeq 87   true:0499 false:0433
 0433: 0x15 0x41 0x00 0x00000056   jeq 86   true:0499 false:0434
 0434: 0x15 0x5e 0x00 0x00000055   jeq 85   true:0529 false:0435
 0435: 0x15 0x5d 0x5c 0x00000054   jeq 84   true:0529 false:0528
 0436: 0x15 0x5c 0x00 0x00000053   jeq 83   true:0529 false:0437
 0437: 0x15 0x5b 0x00 0x00000052   jeq 82   true:0529 false:0438
 0438: 0x15 0x5a 0x00 0x00000051   jeq 81   true:0529 false:0439
 0439: 0x15 0x59 0x58 0x00000050   jeq 80   true:0529 false:0528
 0440: 0x25 0x00 0x04 0x0000004b   jgt 75   true:0441 false:0445
 0441: 0x15 0x39 0x00 0x0000004f   jeq 79   true:0499 false:0442
 0442: 0x15 0x56 0x00 0x0000004e   jeq 78   true:0529 false:0443
 0443: 0x15 0x55 0x00 0x0000004d   jeq 77   true:0529 false:0444
 0444: 0x15 0x54 0x53 0x0000004c   jeq 76   true:0529 false:0528
 0445: 0x15 0x53 0x00 0x0000004b   jeq 75   true:0529 false:0446
 0446: 0x15 0x52 0x00 0x0000004a   jeq 74   true:0529 false:0447
 0447: 0x15 0x51 0x00 0x00000049   jeq 73   true:0529 false:0448
 0448: 0x15 0x50 0x4f 0x00000048   jeq 72   true:0529 false:0528
 0449: 0x25 0x00 0x13 0x00000034   jgt 52   true:0450 false:0469
 0450: 0x25 0x00 0x09 0x0000003f   jgt 63   true:0451 false:0460
 0451: 0x25 0x00 0x04 0x00000043   jgt 67   true:0452 false:0456
 0452: 0x15 0x4c 0x00 0x00000047   jeq 71   true:0529 false:0453
 0453: 0x15 0x4b 0x00 0x00000046   jeq 70   true:0529 false:0454
 0454: 0x15 0x2c 0x00 0x00000045   jeq 69   true:0499 false:0455
 0455: 0x15 0x2b 0x48 0x00000044   jeq 68   true:0499 false:0528
 0456: 0x15 0x48 0x00 0x00000043   jeq 67   true:0529 false:0457
 0457: 0x15 0x47 0x00 0x00000042   jeq 66   true:0529 false:0458
 0458: 0x15 0x46 0x00 0x00000041   jeq 65   true:0529 false:0459
 0459: 0x15 0x45 0x44 0x00000040   jeq 64   true:0529 false:0528
 0460: 0x25 0x00 0x04 0x0000003b   jgt 59   true:0461 false:0465
 0461: 0x15 0x43 0x00 0x0000003f   jeq 63   true:0529 false:0462
 0462: 0x15 0x24 0x00 0x0000003e   jeq 62   true:0499 false:0463
 0463: 0x15 0x41 0x00 0x0000003d   jeq 61   true:0529 false:0464
 0464: 0x15 0x40 0x3f 0x0000003c   jeq 60   true:0529 false:0528
 0465: 0x15 0x3f 0x00 0x0000003b   jeq 59   true:0529 false:0466
 0466: 0x15 0x3e 0x00 0x00000039   jeq 57   true:0529 false:0467
 0467: 0x15 0x3d 0x00 0x00000037   jeq 55   true:0529 false:0468
 0468: 0x15 0x3c 0x3b 0x00000036   jeq 54   true:0529 false:0528
 0469: 0x25 0x00 0x09 0x0000002b   jgt 43   true:0470 false:0479
 0470: 0x25 0x00 0x04 0x00000030   jgt 48   true:0471 false:0475
 0471: 0x15 0x39 0x00 0x00000034   jeq 52   true:0529 false:0472
 0472: 0x15 0x1a 0x00 0x00000033   jeq 51   true:0499 false:0473
 0473: 0x15 0x37 0x00 0x00000032   jeq 50   true:0529 false:0474
 0474: 0x15 0x36 0x35 0x00000031   jeq 49   true:0529 false:0528
 0475: 0x15 0x35 0x00 0x00000030   jeq 48   true:0529 false:0476
 0476: 0x15 0x34 0x00 0x0000002f   jeq 47   true:0529 false:0477
 0477: 0x15 0x33 0x00 0x0000002e   jeq 46   true:0529 false:0478
 0478: 0x15 0x32 0x31 0x0000002d   jeq 45   true:0529 false:0528
 0479: 0x25 0x00 0x04 0x00000027   jgt 39   true:0480 false:0484
 0480: 0x15 0x30 0x00 0x0000002b   jeq 43   true:0529 false:0481
 0481: 0x15 0x2f 0x00 0x0000002a   jeq 42   true:0529 false:0482
 0482: 0x15 0x2e 0x00 0x00000029   jeq 41   true:0529 false:0483
 0483: 0x15 0x2d 0x2c 0x00000028   jeq 40   true:0529 false:0528
 0484: 0x15 0x2c 0x00 0x00000027   jeq 39   true:0529 false:0485
 0485: 0x15 0x2b 0x00 0x00000026   jeq 38   true:0529 false:0486
 0486: 0x15 0x2a 0x00 0x00000025   jeq 37   true:0529 false:0487
 0487: 0x15 0x29 0x28 0x00000024   jeq 36   true:0529 false:0528
 0488: 0x25 0x00 0x14 0x0000000f   jgt 15   true:0489 false:0509
 0489: 0x25 0x00 0x0a 0x00000018   jgt 24   true:0490 false:0500
 0490: 0x25 0x00 0x04 0x0000001c   jgt 28   true:0491 false:0495
 0491: 0x15 0x25 0x00 0x00000022   jeq 34   true:0529 false:0492
 0492: 0x15 0x24 0x00 0x00000021   jeq 33   true:0529 false:0493
 0493: 0x15 0x23 0x00 0x0000001e   jeq 30   true:0529 false:0494
 0494: 0x15 0x22 0x21 0x0000001d   jeq 29   true:0529 false:0528
 0495: 0x15 0x21 0x00 0x0000001c   jeq 28   true:0529 false:0496
 0496: 0x15 0x20 0x00 0x0000001b   jeq 27   true:0529 false:0497
 0497: 0x15 0x1f 0x00 0x0000001a   jeq 26   true:0529 false:0498
 0498: 0x15 0x00 0x1d 0x00000019   jeq 25   true:0499 false:0528
 0499: 0x06 0x00 0x00 0x00050001   ret ERRNO(1)
 0500: 0x25 0x00 0x04 0x00000014   jgt 20   true:0501 false:0505
 0501: 0x15 0x1b 0x00 0x00000018   jeq 24   true:0529 false:0502
 0502: 0x15 0x1a 0x00 0x00000017   jeq 23   true:0529 false:0503
 0503: 0x15 0x19 0x00 0x00000016   jeq 22   true:0529 false:0504
 0504: 0x15 0x18 0x17 0x00000015   jeq 21   true:0529 false:0528
 0505: 0x15 0x17 0x00 0x00000014   jeq 20   true:0529 false:0506
 0506: 0x15 0x16 0x00 0x00000013   jeq 19   true:0529 false:0507
 0507: 0x15 0x15 0x00 0x00000012   jeq 18   true:0529 false:0508
 0508: 0x15 0x14 0x13 0x00000010   jeq 16   true:0529 false:0528
 0509: 0x25 0x00 0x09 0x00000007   jgt 7    true:0510 false:0519
 0510: 0x25 0x00 0x04 0x0000000b   jgt 11   true:0511 false:0515
 0511: 0x15 0x11 0x00 0x0000000f   jeq 15   true:0529 false:0512
 0512: 0x15 0x10 0x00 0x0000000e   jeq 14   true:0529 false:0513
 0513: 0x15 0x0f 0x00 0x0000000d   jeq 13   true:0529 false:0514
 0514: 0x15 0x0e 0x0d 0x0000000c   jeq 12   true:0529 false:0528
 0515: 0x15 0x0d 0x00 0x0000000b   jeq 11   true:0529 false:0516
 0516: 0x15 0x0c 0x00 0x0000000a   jeq 10   true:0529 false:0517
 0517: 0x15 0x0b 0x00 0x00000009   jeq 9    true:0529 false:0518
 0518: 0x15 0x0a 0x09 0x00000008   jeq 8    true:0529 false:0528
 0519: 0x25 0x00 0x04 0x00000003   jgt 3    true:0520 false:0524
 0520: 0x15 0x08 0x00 0x00000007   jeq 7    true:0529 false:0521
 0521: 0x15 0x07 0x00 0x00000006   jeq 6    true:0529 false:0522
 0522: 0x15 0x06 0x00 0x00000005   jeq 5    true:0529 false:0523
 0523: 0x15 0x05 0x04 0x00000004   jeq 4    true:0529 false:0528
 0524: 0x15 0x04 0x00 0x00000003   jeq 3    true:0529 false:0525
 0525: 0x15 0x03 0x00 0x00000002   jeq 2    true:0529 false:0526
 0526: 0x15 0x02 0x00 0x00000001   jeq 1    true:0529 false:0527
 0527: 0x15 0x01 0x00 0x00000000   jeq 0    true:0529 false:0528
 0528: 0x06 0x00 0x00 0x00050026   ret ERRNO(38)
 0529: 0x06 0x00 0x00 0x7fff0000   ret ALLOW

Sizes: 2952, 3392, 4240 bytes.
Addition of @known results only in a small growth. "Optimization" makes the
filter longer, but it should run more quickly. We probably want to enable this
everywhere. There is clear potential futher optmization though.
2020-08-24 20:05:25 +02:00
Zbigniew Jędrzejewski-Szmek 3573e032f2 nspawn: return ENOSYS by default, EPERM for "known" calls 2020-08-24 20:05:17 +02:00
Zbigniew Jędrzejewski-Szmek 000c05207d shared/seccomp-util: added functionality to make list of filtred syscalls
While at it, start removing the "seccomp_" prefix from our
own functions. It is used by libseccomp.
2020-08-24 20:05:09 +02:00
Lennart Poettering 6b000af4f2 tree-wide: avoid some loaded terms
https://tools.ietf.org/html/draft-knodel-terminology-02
https://lwn.net/Articles/823224/

This gets rid of most but not occasions of these loaded terms:

1. scsi_id and friends are something that is supposed to be removed from
   our tree (see #7594)

2. The test suite defines an API used by the ubuntu CI. We can remove
   this too later, but this needs to be done in sync with the ubuntu CI.

3. In some cases the terms are part of APIs we call or where we expose
   concepts the kernel names the way it names them. (In particular all
   remaining uses of the word "slave" in our codebase are like this,
   it's used by the POSIX PTY layer, by the network subsystem, the mount
   API and the block device subsystem). Getting rid of the term in these
   contexts would mean doing some major fixes of the kernel ABI first.

Regarding the replacements: when whitelist/blacklist is used as noun we
replace with with allow list/deny list, and when used as verb with
allow-list/deny-list.
2020-06-25 09:00:19 +02:00
Zbigniew Jędrzejewski-Szmek f47bd09749 nspawn: log syscalls we cannot add at debug level
Without out at least a debug log line it is hard to figure out when something
goes wrong.

Reduce scope of a variable while at it.
2019-11-22 10:23:32 +01:00
Zbigniew Jędrzejewski-Szmek 9493b16871 Add @pkey syscall group
Inspired by https://bugzilla.redhat.com/show_bug.cgi?id=1769299.
This change doesn't solve the issue, but makes it easier to whitelist the
syscall group.
2019-11-08 14:41:22 +01:00
Anita Zhang 7bc5e0b12b seccomp: check more error codes from seccomp_load()
We noticed in our tests that occasionally SystemCallFilter= would
fail to set and the service would run with no syscall filtering.
Most of the time the same tests would apply the filter and fail
the service as expected. While it's not totally clear why this happens,
we noticed seccomp_load() in the systemd code base would fail open for
all errors except EPERM and EACCES.

ENOMEM, EINVAL, and EFAULT seem like reasonable values to add to the
error set based on what I gather from libseccomp code and man pages:

-ENOMEM: out of memory, failed to allocate space for a libseccomp structure, or would exceed a defined constant
-EINVAL: kernel isn't configured to support the operations, args are invalid (to seccomp_load(), seccomp(), or prctl())
-EFAULT: addresses passed as args are invalid
2019-04-12 10:23:07 +02:00
Zbigniew Jędrzejewski-Szmek ca78ad1de9 headers: remove unneeded includes from util.h
This means we need to include many more headers in various files that simply
included util.h before, but it seems cleaner to do it this way.
2019-03-27 11:53:12 +01:00
Zbigniew Jędrzejewski-Szmek 7e86bd73a4 seccomp: tighten checking of seccomp filter creation
In seccomp code, the code is changed to propagate errors which are about
anything other than unknown/unimplemented syscalls. I *think* such errors
should not happen in normal usage, but so far we would summarilly ignore all
errors, so that part is uncertain. If it turns out that other errors occur and
should be ignored, this should be added later.

In nspawn, we would count the number of added filters, but didn't use this for
anything. Drop that part.

The comments suggested that seccomp_add_syscall_filter_item() returned negative
if the syscall is unknown, but this wasn't true: it returns 0.

The error at this point can only be if the syscall was known but couldn't be
added. If the error comes from our internal whitelist in nspawn, treat this as
error, because it means that our internal table is wrong. If the error comes
from user arguments, warn and ignore. (If some syscall is not known at current
architecture, it is still silently ignored.)
2018-09-24 17:21:09 +02:00
Zbigniew Jędrzejewski-Szmek b54f36c604 seccomp: reduce logging about failure to add syscall to seccomp
Our logs are full of:
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldstat() / -10037, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call get_thread_area() / -10076, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call set_thread_area() / -10079, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldfstat() / -10034, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldolduname() / -10036, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call oldlstat() / -10035, ignoring: Numerical argument out of domain
Sep 19 09:22:10 autopkgtest systemd[690]: Failed to add rule for system call waitpid() / -10073, ignoring: Numerical argument out of domain
...
This is pointless and makes debug logs hard to read. Let's keep the logs
in test code, but disable it in nspawn and pid1. This is done through a function
parameter because those functions operate recursively and it's not possible to
make the caller to log meaningfully.


There should be no functional change, except the skipped debug logs.
2018-09-24 17:21:09 +02:00
Lennart Poettering 0c69794138 tree-wide: remove Lennart's copyright lines
These lines are generally out-of-date, incomplete and unnecessary. With
SPDX and git repository much more accurate and fine grained information
about licensing and authorship is available, hence let's drop the
per-file copyright notice. Of course, removing copyright lines of others
is problematic, hence this commit only removes my own lines and leaves
all others untouched. It might be nicer if sooner or later those could
go away too, making git the only and accurate source of authorship
information.
2018-06-14 10:20:20 +02:00
Lennart Poettering 818bf54632 tree-wide: drop 'This file is part of systemd' blurb
This part of the copyright blurb stems from the GPL use recommendations:

https://www.gnu.org/licenses/gpl-howto.en.html

The concept appears to originate in times where version control was per
file, instead of per tree, and was a way to glue the files together.
Ultimately, we nowadays don't live in that world anymore, and this
information is entirely useless anyway, as people are very welcome to
copy these files into any projects they like, and they shouldn't have to
change bits that are part of our copyright header for that.

hence, let's just get rid of this old cruft, and shorten our codebase a
bit.
2018-06-14 10:20:20 +02:00
Zbigniew Jędrzejewski-Szmek 11a1589223 tree-wide: drop license boilerplate
Files which are installed as-is (any .service and other unit files, .conf
files, .policy files, etc), are left as is. My assumption is that SPDX
identifiers are not yet that well known, so it's better to retain the
extended header to avoid any doubt.

I also kept any copyright lines. We can probably remove them, but it'd nice to
obtain explicit acks from all involved authors before doing that.
2018-04-06 18:58:55 +02:00
Zbigniew Jędrzejewski-Szmek 53e1b68390 Add SPDX license identifiers to source files under the LGPL
This follows what the kernel is doing, c.f.
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=5fd54ace4721fc5ce2bb5aef6318fcf17f421460.
2017-11-19 19:08:15 +01:00
Lennart Poettering 44898c5358 seccomp: add three more seccomp groups
@aio → asynchronous IO calls
@sync → msync/fsync/... and friends
@chown → changing file ownership

(Also, change @privileged to reference @chown now, instead of the
individual syscalls it contains)
2017-10-05 15:42:48 +02:00
Lennart Poettering 4c3a917617 seccomp: include prlimit64 and ugetrlimit in @default
Also, move prlimit64() out of @resources.

prlimit64() may be used both for getting and setting resource limits, and
is implicitly called by glibc at various places, on some archs, the same
was as getrlimit(). SImilar, igetrlimit() is an arch-specific
replacement for getrlimit(), and hence should be whitelisted at the same
place as getrlimit() and prlimit64().

Also see: https://lists.freedesktop.org/archives/systemd-devel/2017-September/039543.html
2017-10-05 11:27:34 +02:00
Zbigniew Jędrzejewski-Szmek 349cc4a507 build-sys: use #if Y instead of #ifdef Y everywhere
The advantage is that is the name is mispellt, cpp will warn us.

$ git grep -Ee "conf.set\('(HAVE|ENABLE)_" -l|xargs sed -r -i "s/conf.set\('(HAVE|ENABLE)_/conf.set10('\1_/"
$ git grep -Ee '#ifn?def (HAVE|ENABLE)' -l|xargs sed -r -i 's/#ifdef (HAVE|ENABLE)/#if \1/; s/#ifndef (HAVE|ENABLE)/#if ! \1/;'
$ git grep -Ee 'if.*defined\(HAVE' -l|xargs sed -i -r 's/defined\((HAVE_[A-Z0-9_]*)\)/\1/g'
$ git grep -Ee 'if.*defined\(ENABLE' -l|xargs sed -i -r 's/defined\((ENABLE_[A-Z0-9_]*)\)/\1/g'
+ manual changes to meson.build

squash! build-sys: use #if Y instead of #ifdef Y everywhere

v2:
- fix incorrect setting of HAVE_LIBIDN2
2017-10-04 12:09:29 +02:00
Djalal Harouni 09d3020b0a seccomp: remove '@credentials' syscall set (#6958)
This removes the '@credentials' syscall set that was added in commit
v234-468-gcd0ddf6f75.

Most of these syscalls are so simple that we do not want to filter them.
They work on the current calling process, doing only read operations,
they do not have a deep kernel path.

The problem may only be in 'capget' syscall since it can query arbitrary
processes, and used to discover processes, however sending signal 0 to
arbitrary processes can be used to discover if a process exists or not.
It is unfortunate that Linux allows to query processes of different
users. Lets put it now in '@process' syscall set, and later we may add
it to a new '@basic-process' set that allows most basic process
operations.
2017-10-03 07:20:05 +02:00
Lennart Poettering 96bedbe2e5 nspawn: replace syscall blacklist by a whitelist
Let's lock things down a bit, and maintain a list of what's permitted
rather than a list of what's prohibited in nspawn (also to make things a
bit more like Docker and friends).

Note that this slightly alters the effect of --system-call-filter=, as
now the negative list now takes precedence over the positive list.
However, given that the option is just a few days old and not included
in any released version it should be fine to change it at this point in
time.

Note that the whitelist is good chunk more restrictive thatn the
previous blacklist. Specifically:

- fanotify is not permitted (given the buffer size issues it's
  problematic in containers)
- nfsservctl is not permitted (NFS server support is not virtualized)
- pkey_xyz stuff is not permitted (really new stuff I don't grok)
- @cpu-emulation is prohibited (untested legacy stuff mostly, and if
  people really want to run dosemu in nspawn, they should use
  --system-call-filter=@cpu-emulation and all should be good)
2017-09-14 15:45:21 +02:00
Lennart Poettering 960e4569e1 nspawn: implement configurable syscall whitelisting/blacklisting
Now that we have ported nspawn's seccomp code to the generic code in
seccomp-util, let's extend it to support whitelisting and blacklisting
of specific additional syscalls.

This uses similar syntax as PID1's support for system call filtering,
but in contrast to that always implements a blacklist (and not a
whitelist), as we prepopulate the filter with a blacklist, and the
unit's system call filter logic does not come with anything
prepopulated.

(Later on we might actually want to invert the logic here, and
whitelist rather than blacklist things, but at this point let's not do
that. In case we switch this over later, the syscall add/remove logic of
this commit should be compatible conceptually.)

Fixes: #5163

Replaces: #5944
2017-09-12 14:06:21 +02:00
Lennart Poettering 7609340e2f nspawn: replace homegrown seccomp filter table largely with references to the existing syscall groups
Let's shorten the table, now that we are hooked up to the syscall group
system.
2017-09-11 18:00:07 +02:00
Lennart Poettering 402530d91e nspawn: part over seccomp code to use seccomp_add_syscall_filter_item()
Let's unify a bit of the code here.
2017-09-11 18:00:07 +02:00
Lennart Poettering 469830d142 seccomp: rework seccomp code, to improve compat with some archs
This substantially reworks the seccomp code, to ensure better
compatibility with some architectures, including i386.

So far we relied on libseccomp's internal handling of the multiple
syscall ABIs supported on Linux. This is problematic however, as it does
not define clear semantics if an ABI is not able to support specific
seccomp rules we install.

This rework hence changes a couple of things:

- We no longer use seccomp_rule_add(), but only
  seccomp_rule_add_exact(), and fail the installation of a filter if the
  architecture doesn't support it.

- We no longer rely on adding multiple syscall architectures to a single filter,
  but instead install a separate filter for each syscall architecture
  supported. This way, we can install a strict filter for x86-64, while
  permitting a less strict filter for i386.

- All high-level filter additions are now moved from execute.c to
  seccomp-util.c, so that we can test them independently of the service
  execution logic.

- Tests have been added for all types of our seccomp filters.

- SystemCallFilters= and SystemCallArchitectures= are now implemented in
  independent filters and installation logic, as they semantically are
  very much independent of each other.

Fixes: #4575
2017-01-17 22:14:27 -05:00
Lennart Poettering 8d7b0c8fd7 seccomp: add new seccomp_init_conservative() helper
This adds a new seccomp_init_conservative() helper call that is mostly just a
wrapper around seccomp_init(), but turns off NNP and adds in all secondary
archs, for best compatibility with everything else.

Pretty much all of our code used the very same constructs for these three
steps, hence unifying this in one small function makes things a lot shorter.

This also changes incorrect usage of the "scmp_filter_ctx" type at various
places. libseccomp defines it as typedef to "void*", i.e. it is a pointer type
(pretty poor choice already!) that casts implicitly to and from all other
pointer types (even poorer choice: you defined a confusing type now, and don't
even gain any bit of type safety through it...). A lot of the code assumed the
type would refer to a structure, and hence aded additional "*" here and there.
Remove that.
2016-10-24 17:32:50 +02:00
Felipe Sateler 1cec406d62 nspawn: detect SECCOMP availability, skip audit filter if unavailable
Fail hard if SECCOMP was detected but could not be installed
2016-09-06 20:25:49 -03:00
Zbigniew Jędrzejewski-Szmek d710aaf7a5 Use "return log_error_errno" in more places" 2016-07-22 21:25:09 -04:00
Lennart Poettering 54a17e01de nspawn: lock down system call filter a bit
Let's block access to the kernel keyring and a number of obsolete system calls.
Also, update list of syscalls that may alter the system clock, and do raw IO
access. Filter ptrace() if CAP_SYS_PTRACE is not passed to the container and
acct() if CAP_SYS_PACCT is not passed.

This also changes things so that kexec(), some profiling calls, the swap calls
and quotactl() is never available to containers, not even if CAP_SYS_ADMIN is
passed. After all we currently permit CAP_SYS_ADMIN to containers by default,
but these calls should not be available, even then.
2016-06-13 16:25:54 +02:00
Djalal Harouni f011b0b87a nspawn: split out seccomp call into nspawn-seccomp.[ch]
Split seccomp into nspawn-seccomp.[ch]. Currently there are no changes,
but this will make it easy in the future to share or use the seccomp logic
from systemd core.
2016-05-26 22:42:29 +02:00