Dmitry V. Levin
c78af2c9cf
* tests/netlink_kobject_uevent.c (test_nlmsg_type_kernel): Create a tail-allocated udev_monitor_netlink_header object and pass it to sys_send. (test_nlmsg_type_udev): Likewise. Check decoding of udev_monitor_netlink_header object that ends in unmapped memory region.
164 lines
5.7 KiB
C
164 lines
5.7 KiB
C
/*
|
|
* Copyright (c) 2017 JingPiao Chen <chenjingpiao@gmail.com>
|
|
* Copyright (c) 2017-2018 The strace developers.
|
|
* All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in the
|
|
* documentation and/or other materials provided with the distribution.
|
|
* 3. The name of the author may not be used to endorse or promote products
|
|
* derived from this software without specific prior written permission.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
|
|
* IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
|
|
* IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
|
|
* INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
|
* DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
|
* THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
*/
|
|
|
|
#include "tests.h"
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <sys/socket.h>
|
|
#include <arpa/inet.h>
|
|
#include "netlink.h"
|
|
#include "netlink_kobject_uevent.h"
|
|
|
|
static const char *errstr;
|
|
|
|
static ssize_t
|
|
sys_send(const int fd, const void *const buf, const size_t len)
|
|
{
|
|
const ssize_t rc = sendto(fd, buf, len, MSG_DONTWAIT, NULL, 0);
|
|
errstr = sprintrc(rc);
|
|
return rc;
|
|
}
|
|
|
|
static void
|
|
test_nlmsg_type_udev(const int fd)
|
|
{
|
|
static const char extra[] = "12345678";
|
|
struct udev_monitor_netlink_header uh = {
|
|
.prefix = "libudev",
|
|
.magic = htonl(0xfeedcafe),
|
|
.header_size = sizeof(uh),
|
|
.properties_off = 40,
|
|
.properties_len = 299,
|
|
.filter_subsystem_hash = htonl(0xc370b302),
|
|
.filter_devtype_hash = htonl(0x10800000),
|
|
.filter_tag_bloom_hi = htonl(0x2000400),
|
|
.filter_tag_bloom_lo = htonl(0x10800000),
|
|
};
|
|
const unsigned int extra_len = LENGTH_OF(extra);
|
|
const unsigned int uh_len = sizeof(uh);
|
|
|
|
char *const buf = tail_alloc(uh_len + extra_len);
|
|
memcpy(buf + extra_len, &uh, uh_len);
|
|
|
|
sys_send(fd, buf + extra_len, uh_len);
|
|
printf("sendto(%d, {{prefix=\"%s\", magic=htonl(%#x)"
|
|
", header_size=%u, properties_off=%u, properties_len=%u"
|
|
", filter_subsystem_hash=htonl(%#x)"
|
|
", filter_devtype_hash=htonl(%#x)"
|
|
", filter_tag_bloom_hi=htonl(%#x)"
|
|
", filter_tag_bloom_lo=htonl(%#x)}}, %u, MSG_DONTWAIT, NULL, "
|
|
"0) = %s\n"
|
|
, fd, uh.prefix,
|
|
ntohl(uh.magic), uh.header_size, uh.properties_off,
|
|
uh.properties_len, ntohl(uh.filter_subsystem_hash),
|
|
ntohl(uh.filter_devtype_hash), ntohl(uh.filter_tag_bloom_hi),
|
|
ntohl(uh.filter_tag_bloom_lo), uh_len, errstr);
|
|
|
|
memcpy(buf, &uh, uh_len);
|
|
memcpy(buf + uh_len, extra, extra_len);
|
|
sys_send(fd, buf, uh_len + extra_len);
|
|
printf("sendto(%d, {{prefix=\"%s\", magic=htonl(%#x)"
|
|
", header_size=%u, properties_off=%u, properties_len=%u"
|
|
", filter_subsystem_hash=htonl(%#x)"
|
|
", filter_devtype_hash=htonl(%#x)"
|
|
", filter_tag_bloom_hi=htonl(%#x)"
|
|
", filter_tag_bloom_lo=htonl(%#x)}, "
|
|
, fd, uh.prefix,
|
|
ntohl(uh.magic), uh.header_size, uh.properties_off,
|
|
uh.properties_len, ntohl(uh.filter_subsystem_hash),
|
|
ntohl(uh.filter_devtype_hash), ntohl(uh.filter_tag_bloom_hi),
|
|
ntohl(uh.filter_tag_bloom_lo));
|
|
print_quoted_memory(buf + uh_len, extra_len);
|
|
printf("}, %u, MSG_DONTWAIT, NULL, 0) = %s\n",
|
|
uh_len + extra_len, errstr);
|
|
|
|
memcpy(buf + extra_len + 1, &uh, uh_len - 1);
|
|
sys_send(fd, buf + extra_len + 1, uh_len);
|
|
printf("sendto(%d, ", fd);
|
|
print_quoted_memory(&uh, MIN(uh_len - 1, DEFAULT_STRLEN));
|
|
printf("%s, %u, MSG_DONTWAIT, NULL, 0) = %s\n",
|
|
(uh_len - 1 > DEFAULT_STRLEN ? "..." : ""),
|
|
uh_len, errstr);
|
|
}
|
|
|
|
static void
|
|
test_nlmsg_type_kernel(const int fd)
|
|
{
|
|
struct udev_monitor_netlink_header uh = {
|
|
.prefix = "change@",
|
|
.magic = htonl(0xfeedcafe),
|
|
.header_size = sizeof(uh),
|
|
.properties_off = 10,
|
|
.properties_len = 299,
|
|
.filter_subsystem_hash = htonl(0xfffffff),
|
|
.filter_devtype_hash = htonl(0x10000000),
|
|
.filter_tag_bloom_hi = htonl(0x2000400),
|
|
};
|
|
const unsigned int uh_len = sizeof(uh);
|
|
|
|
TAIL_ALLOC_OBJECT_CONST_PTR(struct udev_monitor_netlink_header, p);
|
|
memcpy(p, &uh, uh_len);
|
|
|
|
sys_send(fd, p, uh_len);
|
|
printf("sendto(%d, ", fd);
|
|
print_quoted_memory(&uh, MIN(uh_len, DEFAULT_STRLEN));
|
|
printf("%s, %u, MSG_DONTWAIT, NULL, 0) = %s\n",
|
|
(uh_len > DEFAULT_STRLEN ? "..." : ""),
|
|
uh_len, errstr);
|
|
}
|
|
|
|
int
|
|
main(void)
|
|
{
|
|
skip_if_unavailable("/proc/self/fd/");
|
|
|
|
int fd = create_nl_socket(NETLINK_KOBJECT_UEVENT);
|
|
|
|
test_nlmsg_type_udev(fd);
|
|
test_nlmsg_type_kernel(fd);
|
|
/* test using data that looks like a zero-length C string */
|
|
char *const buf = tail_alloc(DEFAULT_STRLEN + 1);
|
|
buf[0] = '=';
|
|
fill_memory_ex(buf + 1, DEFAULT_STRLEN, 0, DEFAULT_STRLEN);
|
|
|
|
sys_send(fd, buf + 1, DEFAULT_STRLEN);
|
|
printf("sendto(%d, ", fd);
|
|
print_quoted_memory(buf + 1, DEFAULT_STRLEN);
|
|
printf(", %u, MSG_DONTWAIT, NULL, 0) = %s\n",
|
|
DEFAULT_STRLEN, errstr);
|
|
|
|
sys_send(fd, buf, DEFAULT_STRLEN + 1);
|
|
printf("sendto(%d, ", fd);
|
|
print_quoted_memory(buf, DEFAULT_STRLEN);
|
|
printf("..., %u, MSG_DONTWAIT, NULL, 0) = %s\n",
|
|
DEFAULT_STRLEN + 1, errstr);
|
|
|
|
puts("+++ exited with 0 +++");
|
|
return 0;
|
|
}
|