| /* |
| * Copyright (c) 2015-2016 Dmitry V. Levin <ldv@altlinux.org> |
| * Copyright (c) 2015-2017 The strace developers. |
| * All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * 3. The name of the author may not be used to endorse or promote products |
| * derived from this software without specific prior written permission. |
| * |
| * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| /* |
| * Based on test by Dr. David Alan Gilbert <dave@treblig.org> |
| */ |
| |
| #include <assert.h> |
| #include <stdio.h> |
| #include <string.h> |
| #include <unistd.h> |
| #include <sys/select.h> |
| |
| static fd_set set[0x1000000 / sizeof(fd_set)]; |
| |
| int main(void) |
| { |
| TAIL_ALLOC_OBJECT_CONST_PTR(struct timeval, tv); |
| struct timeval tv_in; |
| int fds[2]; |
| long rc; |
| |
| if (pipe(fds)) |
| perror_msg_and_fail("pipe"); |
| |
| /* |
| * Start with a nice simple select. |
| */ |
| FD_ZERO(set); |
| FD_SET(fds[0], set); |
| FD_SET(fds[1], set); |
| rc = syscall(TEST_SYSCALL_NR, fds[1] + 1, set, set, set, NULL); |
| if (rc < 0) |
| perror_msg_and_skip(TEST_SYSCALL_STR); |
| assert(rc == 1); |
| printf("%s(%d, [%d %d], [%d %d], [%d %d], NULL) = 1 ()\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| fds[0], fds[1], fds[0], fds[1]); |
| |
| /* |
| * Odd timeout. |
| */ |
| FD_SET(fds[0], set); |
| FD_SET(fds[1], set); |
| tv->tv_sec = 0xdeadbeefU; |
| tv->tv_usec = 0xfacefeedU; |
| memcpy(&tv_in, tv, sizeof(tv_in)); |
| rc = syscall(TEST_SYSCALL_NR, fds[1] + 1, set, set, set, tv); |
| if (rc < 0) { |
| printf("%s(%d, [%d %d], [%d %d], [%d %d]" |
| ", {tv_sec=%lld, tv_usec=%llu}) = %s\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| fds[0], fds[1], fds[0], fds[1], (long long) tv->tv_sec, |
| zero_extend_signed_to_ull(tv->tv_usec), sprintrc(rc)); |
| } else { |
| printf("%s(%d, [%d %d], [%d %d], [%d %d]" |
| ", {tv_sec=%lld, tv_usec=%llu}) = %ld" |
| " (left {tv_sec=%lld, tv_usec=%llu})\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| fds[0], fds[1], fds[0], fds[1], (long long) tv_in.tv_sec, |
| zero_extend_signed_to_ull(tv_in.tv_usec), |
| rc, (long long) tv->tv_sec, |
| zero_extend_signed_to_ull(tv->tv_usec)); |
| } |
| |
| FD_SET(fds[0], set); |
| FD_SET(fds[1], set); |
| tv->tv_sec = (time_t) 0xcafef00ddeadbeefLL; |
| tv->tv_usec = (suseconds_t) 0xbadc0dedfacefeedLL; |
| memcpy(&tv_in, tv, sizeof(tv_in)); |
| rc = syscall(TEST_SYSCALL_NR, fds[1] + 1, set, set, set, tv); |
| if (rc < 0) { |
| printf("%s(%d, [%d %d], [%d %d], [%d %d]" |
| ", {tv_sec=%lld, tv_usec=%llu}) = %s\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| fds[0], fds[1], fds[0], fds[1], (long long) tv->tv_sec, |
| zero_extend_signed_to_ull(tv->tv_usec), sprintrc(rc)); |
| } else { |
| printf("%s(%d, [%d %d], [%d %d], [%d %d]" |
| ", {tv_sec=%lld, tv_usec=%llu}) = %ld" |
| " (left {tv_sec=%lld, tv_usec=%llu})\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| fds[0], fds[1], fds[0], fds[1], (long long) tv_in.tv_sec, |
| zero_extend_signed_to_ull(tv_in.tv_usec), |
| rc, (long long) tv->tv_sec, |
| zero_extend_signed_to_ull(tv->tv_usec)); |
| } |
| |
| /* |
| * Another simple one, with a timeout. |
| */ |
| FD_SET(1, set); |
| FD_SET(2, set); |
| FD_SET(fds[0], set); |
| FD_SET(fds[1], set); |
| tv->tv_sec = 0xc0de1; |
| tv->tv_usec = 0xc0de2; |
| memcpy(&tv_in, tv, sizeof(tv_in)); |
| assert(syscall(TEST_SYSCALL_NR, fds[1] + 1, NULL, set, NULL, tv) == 3); |
| printf("%s(%d, NULL, [1 2 %d %d], NULL, {tv_sec=%lld, tv_usec=%llu})" |
| " = 3 (out [1 2 %d], left {tv_sec=%lld, tv_usec=%llu})\n", |
| TEST_SYSCALL_STR, fds[1] + 1, fds[0], fds[1], |
| (long long) tv_in.tv_sec, |
| zero_extend_signed_to_ull(tv_in.tv_usec), |
| fds[1], |
| (long long) tv->tv_sec, |
| zero_extend_signed_to_ull(tv->tv_usec)); |
| |
| /* |
| * Now the crash case that trinity found, negative nfds |
| * but with a pointer to a large chunk of valid memory. |
| */ |
| FD_ZERO(set); |
| FD_SET(fds[1], set); |
| assert(syscall(TEST_SYSCALL_NR, -1, NULL, set, NULL, NULL) == -1); |
| printf("%s(-1, NULL, %p, NULL, NULL) = -1 EINVAL (%m)\n", |
| TEST_SYSCALL_STR, set); |
| |
| /* |
| * Another variant, with nfds exceeding FD_SETSIZE limit. |
| */ |
| FD_ZERO(set); |
| FD_SET(fds[0], set); |
| tv->tv_sec = 0; |
| tv->tv_usec = 123; |
| assert(syscall(TEST_SYSCALL_NR, FD_SETSIZE + 1, set, set + 1, NULL, tv) == 0); |
| printf("%s(%d, [%d], [], NULL, {tv_sec=0, tv_usec=123}) = 0 (Timeout)\n", |
| TEST_SYSCALL_STR, FD_SETSIZE + 1, fds[0]); |
| |
| puts("+++ exited with 0 +++"); |
| return 0; |
| } |