220 lines
		
	
	
		
			5.1 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
			
		
		
	
	
			220 lines
		
	
	
		
			5.1 KiB
		
	
	
	
		
			C
		
	
	
	
	
	
/*
 | 
						|
 * Copyright (c) 2000, 2001, 2002, 2003, 2004, 2005, 2008, 2009
 | 
						|
 *	The President and Fellows of Harvard College.
 | 
						|
 *
 | 
						|
 * Redistribution and use in source and binary forms, with or without
 | 
						|
 * modification, are permitted provided that the following conditions
 | 
						|
 * are met:
 | 
						|
 * 1. Redistributions of source code must retain the above copyright
 | 
						|
 *    notice, this list of conditions and the following disclaimer.
 | 
						|
 * 2. Redistributions in binary form must reproduce the above copyright
 | 
						|
 *    notice, this list of conditions and the following disclaimer in the
 | 
						|
 *    documentation and/or other materials provided with the distribution.
 | 
						|
 * 3. Neither the name of the University nor the names of its contributors
 | 
						|
 *    may be used to endorse or promote products derived from this software
 | 
						|
 *    without specific prior written permission.
 | 
						|
 *
 | 
						|
 * THIS SOFTWARE IS PROVIDED BY THE UNIVERSITY AND CONTRIBUTORS ``AS IS'' AND
 | 
						|
 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
 | 
						|
 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
 | 
						|
 * ARE DISCLAIMED.  IN NO EVENT SHALL THE UNIVERSITY OR CONTRIBUTORS BE LIABLE
 | 
						|
 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
 | 
						|
 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
 | 
						|
 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
 | 
						|
 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 | 
						|
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
 | 
						|
 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 | 
						|
 * SUCH DAMAGE.
 | 
						|
 */
 | 
						|
 | 
						|
/*
 | 
						|
 * bad calls to execv()
 | 
						|
 */
 | 
						|
 | 
						|
#include <sys/types.h>
 | 
						|
#include <stdio.h>
 | 
						|
#include <stdlib.h>
 | 
						|
#include <unistd.h>
 | 
						|
#include <errno.h>
 | 
						|
#include <err.h>
 | 
						|
 | 
						|
#include "config.h"
 | 
						|
#include "test.h"
 | 
						|
 | 
						|
static
 | 
						|
int
 | 
						|
exec_common_fork(int *result)
 | 
						|
{
 | 
						|
	int pid, rv, status, err;
 | 
						|
 | 
						|
	/*
 | 
						|
	 * This does not happen in a test context (from the point of
 | 
						|
	 * view of report.c) so we have to fiddle a bit.
 | 
						|
	 */
 | 
						|
 | 
						|
	pid = fork();
 | 
						|
	if (pid<0) {
 | 
						|
		err = errno;
 | 
						|
		report_begin("forking for test");
 | 
						|
		report_result(pid, err);
 | 
						|
		report_aborted(result);
 | 
						|
		return -1;
 | 
						|
	}
 | 
						|
 | 
						|
	if (pid==0) {
 | 
						|
		/* child */
 | 
						|
		return 0;
 | 
						|
	}
 | 
						|
 | 
						|
	rv = waitpid(pid, &status, 0);
 | 
						|
	if (rv == -1) {
 | 
						|
		err = errno;
 | 
						|
		report_begin("waiting for test subprocess");
 | 
						|
		report_result(rv, err);
 | 
						|
		report_failure(result);
 | 
						|
		return -1;
 | 
						|
	}
 | 
						|
	if (WIFEXITED(status) && WEXITSTATUS(status) == MAGIC_STATUS) {
 | 
						|
		*result = SUCCESS;
 | 
						|
		return 1;
 | 
						|
	}
 | 
						|
	/* Oops... */
 | 
						|
	report_begin("exit code of subprocess; should be %d", MAGIC_STATUS);
 | 
						|
	if (WIFSIGNALED(status)) {
 | 
						|
		report_warnx("signal %d", WTERMSIG(status));
 | 
						|
	}
 | 
						|
	else {
 | 
						|
		report_warnx("exit %d", WEXITSTATUS(status));
 | 
						|
	}
 | 
						|
	report_failure(result);
 | 
						|
	return -1;
 | 
						|
}
 | 
						|
 | 
						|
static
 | 
						|
int
 | 
						|
exec_badprog(const void *prog, const char *desc)
 | 
						|
{
 | 
						|
	int rv;
 | 
						|
	int result;
 | 
						|
	char *args[2];
 | 
						|
	args[0] = (char *)"foo";
 | 
						|
	args[1] = NULL;
 | 
						|
 | 
						|
	if (exec_common_fork(&result) != 0) {
 | 
						|
		return result;
 | 
						|
	}
 | 
						|
 | 
						|
	report_begin(desc);
 | 
						|
	rv = execv(prog, args);
 | 
						|
	result = report_check(rv, errno, EFAULT);
 | 
						|
	int code = result ? result : MAGIC_STATUS;
 | 
						|
	exit(code);
 | 
						|
}
 | 
						|
 | 
						|
static
 | 
						|
int
 | 
						|
exec_emptyprog(void)
 | 
						|
{
 | 
						|
	int rv;
 | 
						|
	int result;
 | 
						|
	char *args[2];
 | 
						|
	args[0] = (char *)"foo";
 | 
						|
	args[1] = NULL;
 | 
						|
 | 
						|
	if (exec_common_fork(&result) != 0) {
 | 
						|
		return result;
 | 
						|
	}
 | 
						|
 | 
						|
	report_begin("exec the empty string");
 | 
						|
	rv = execv("", args);
 | 
						|
	result = report_check2(rv, errno, EINVAL, EISDIR);
 | 
						|
	int code = result ? result : MAGIC_STATUS;
 | 
						|
	exit(code);
 | 
						|
}
 | 
						|
 | 
						|
static
 | 
						|
int
 | 
						|
exec_badargs(void *args, const char *desc)
 | 
						|
{
 | 
						|
	int rv;
 | 
						|
	int result;
 | 
						|
	if (exec_common_fork(&result) != 0) {
 | 
						|
		return result;
 | 
						|
	}
 | 
						|
 | 
						|
	report_begin(desc);
 | 
						|
	rv = execv("/bin/true", args);
 | 
						|
	result = report_check(rv, errno, EFAULT);
 | 
						|
	int code = result ? result : MAGIC_STATUS;
 | 
						|
	exit(code);
 | 
						|
}
 | 
						|
 | 
						|
static
 | 
						|
int
 | 
						|
exec_onearg(void *ptr, const char *desc)
 | 
						|
{
 | 
						|
	int rv;
 | 
						|
	int result;
 | 
						|
 | 
						|
	char *args[3];
 | 
						|
	args[0] = (char *)"foo";
 | 
						|
	args[1] = (char *)ptr;
 | 
						|
	args[2] = NULL;
 | 
						|
 | 
						|
	if (exec_common_fork(&result) != 0) {
 | 
						|
		return result;
 | 
						|
	}
 | 
						|
 | 
						|
	report_begin(desc);
 | 
						|
	rv = execv("/bin/true", args);
 | 
						|
	result = report_check(rv, errno, EFAULT);
 | 
						|
	int code = result ? result : MAGIC_STATUS;
 | 
						|
	exit(code);
 | 
						|
 | 
						|
}
 | 
						|
 | 
						|
void
 | 
						|
test_execv(void)
 | 
						|
{
 | 
						|
	int ntests = 0, result = 0, lost_points = 0;
 | 
						|
	ntests++;
 | 
						|
	result = exec_badprog(NULL, "exec with NULL program");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_badprog(INVAL_PTR, "exec with invalid pointer program");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_badprog(KERN_PTR, "exec with kernel pointer program");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_emptyprog();
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_badargs(NULL, "exec with NULL arglist");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_badargs(INVAL_PTR, "exec with invalid pointer arglist");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_badargs(KERN_PTR, "exec with kernel pointer arglist");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_onearg(INVAL_PTR, "exec with invalid pointer arg");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	ntests++;
 | 
						|
	result = exec_onearg(KERN_PTR, "exec with kernel pointer arg");
 | 
						|
	handle_result(result, &lost_points);
 | 
						|
 | 
						|
	if(!lost_points)
 | 
						|
		success(TEST161_SUCCESS, SECRET, "/testbin/badcall");
 | 
						|
}
 |