prog: support big-endian during hints matching

Use big-endian match/replace for both blobs and ints.
Sometimes we have unmarked blobs (no little/big-endian info);
for ANYBLOBs we intentionally lose all marking;
but even for marked ints we may need this too.
Consider that kernel code does not convert the data
(i.e. not ntohs(pkt->proto) == ETH_P_BATMAN),
but instead converts the constant (i.e. pkt->proto == htons(ETH_P_BATMAN)).
In such case we will see dynamic operand that does not
match what we have in the program.

1 files changed, 15 insertions, 0 deletions

diff --git a/prog/mutation.go b/prog/mutation.go
index 2e1039551..9ab47d8d6 100644
--- a/prog/mutation.go
+++ b/prog/mutation.go
@@ -604,3 +604,18 @@ func swap64(v uint64) uint64 {
 	v |= uint64(v0) << 56
 	return v
 }
+
+func swap(v, size uint64) uint64 {
+	switch size {
+	case 64:
+		return swap64(v)
+	case 32:
+		return uint64(swap32(uint32(v)))
+	case 16:
+		return uint64(swap16(uint16(v)))
+	case 8:
+		return v
+	default:
+		panic(fmt.Sprintf("swap: bad size %v", size))
+	}
+}