Author | Tokens | Token Proportion | Commits | Commit Proportion |
---|---|---|---|---|
Jeff Xu | 8454 | 94.35% | 3 | 33.33% |
Pedro Falcato | 446 | 4.98% | 2 | 22.22% |
John Hubbard | 51 | 0.57% | 3 | 33.33% |
Muhammad Usama Anjum | 9 | 0.10% | 1 | 11.11% |
Total | 8960 | 9 |
123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989
// SPDX-License-Identifier: GPL-2.0 #define _GNU_SOURCE #include <linux/mman.h> #include <sys/mman.h> #include <stdint.h> #include <asm-generic/unistd.h> #include <string.h> #include <sys/time.h> #include <sys/resource.h> #include <stdbool.h> #include "../kselftest.h" #include <syscall.h> #include <errno.h> #include <stdio.h> #include <stdlib.h> #include <fcntl.h> #include <sys/ioctl.h> #include <sys/vfs.h> #include <sys/stat.h> #include "mseal_helpers.h" static unsigned long get_vma_size(void *addr, int *prot) { FILE *maps; char line[256]; int size = 0; uintptr_t addr_start, addr_end; char protstr[5]; *prot = 0; maps = fopen("/proc/self/maps", "r"); if (!maps) return 0; while (fgets(line, sizeof(line), maps)) { if (sscanf(line, "%lx-%lx %4s", &addr_start, &addr_end, protstr) == 3) { if (addr_start == (uintptr_t) addr) { size = addr_end - addr_start; if (protstr[0] == 'r') *prot |= 0x4; if (protstr[1] == 'w') *prot |= 0x2; if (protstr[2] == 'x') *prot |= 0x1; break; } } } fclose(maps); return size; } /* * define sys_xyx to call syscall directly. */ static int sys_mseal(void *start, size_t len) { int sret; errno = 0; sret = syscall(__NR_mseal, start, len, 0); return sret; } static int sys_mprotect(void *ptr, size_t size, unsigned long prot) { int sret; errno = 0; sret = syscall(__NR_mprotect, ptr, size, prot); return sret; } static int sys_mprotect_pkey(void *ptr, size_t size, unsigned long orig_prot, unsigned long pkey) { int sret; errno = 0; sret = syscall(__NR_pkey_mprotect, ptr, size, orig_prot, pkey); return sret; } static int sys_munmap(void *ptr, size_t size) { int sret; errno = 0; sret = syscall(__NR_munmap, ptr, size); return sret; } static int sys_madvise(void *start, size_t len, int types) { int sret; errno = 0; sret = syscall(__NR_madvise, start, len, types); return sret; } static void *sys_mremap(void *addr, size_t old_len, size_t new_len, unsigned long flags, void *new_addr) { void *sret; errno = 0; sret = (void *) syscall(__NR_mremap, addr, old_len, new_len, flags, new_addr); return sret; } static int sys_pkey_alloc(unsigned long flags, unsigned long init_val) { int ret = syscall(__NR_pkey_alloc, flags, init_val); return ret; } static unsigned int __read_pkey_reg(void) { unsigned int pkey_reg = 0; #if defined(__i386__) || defined(__x86_64__) /* arch */ unsigned int eax, edx; unsigned int ecx = 0; asm volatile(".byte 0x0f,0x01,0xee\n\t" : "=a" (eax), "=d" (edx) : "c" (ecx)); pkey_reg = eax; #endif return pkey_reg; } static void __write_pkey_reg(u64 pkey_reg) { #if defined(__i386__) || defined(__x86_64__) /* arch */ unsigned int eax = pkey_reg; unsigned int ecx = 0; unsigned int edx = 0; asm volatile(".byte 0x0f,0x01,0xef\n\t" : : "a" (eax), "c" (ecx), "d" (edx)); #endif } static unsigned long pkey_bit_position(int pkey) { return pkey * PKEY_BITS_PER_PKEY; } static u64 set_pkey_bits(u64 reg, int pkey, u64 flags) { unsigned long shift = pkey_bit_position(pkey); /* mask out bits from pkey in old value */ reg &= ~((u64)PKEY_MASK << shift); /* OR in new bits for pkey */ reg |= (flags & PKEY_MASK) << shift; return reg; } static void set_pkey(int pkey, unsigned long pkey_value) { u64 new_pkey_reg; new_pkey_reg = set_pkey_bits(__read_pkey_reg(), pkey, pkey_value); __write_pkey_reg(new_pkey_reg); } static void setup_single_address(int size, void **ptrOut) { void *ptr; ptr = mmap(NULL, size, PROT_READ, MAP_ANONYMOUS | MAP_PRIVATE, -1, 0); *ptrOut = ptr; } static void setup_single_address_rw(int size, void **ptrOut) { void *ptr; unsigned long mapflags = MAP_ANONYMOUS | MAP_PRIVATE; ptr = mmap(NULL, size, PROT_READ | PROT_WRITE, mapflags, -1, 0); *ptrOut = ptr; } static int clean_single_address(void *ptr, int size) { int ret; ret = munmap(ptr, size); return ret; } static int seal_single_address(void *ptr, int size) { int ret; ret = sys_mseal(ptr, size); return ret; } bool seal_support(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); ptr = mmap(NULL, page_size, PROT_READ, MAP_ANONYMOUS | MAP_PRIVATE, -1, 0); if (ptr == (void *) -1) return false; ret = sys_mseal(ptr, page_size); if (ret < 0) return false; return true; } bool pkey_supported(void) { #if defined(__i386__) || defined(__x86_64__) /* arch */ int pkey = sys_pkey_alloc(0, 0); if (pkey > 0) return true; #endif return false; } static void test_seal_addseal(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_unmapped_start(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* munmap 2 pages from ptr. */ ret = sys_munmap(ptr, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); /* mprotect will fail because 2 pages from ptr are unmapped. */ ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(ret < 0); /* mseal will fail because 2 pages from ptr are unmapped. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(ret < 0); ret = sys_mseal(ptr + 2 * page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_unmapped_middle(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* munmap 2 pages from ptr + page. */ ret = sys_munmap(ptr + page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); /* mprotect will fail, since middle 2 pages are unmapped. */ ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(ret < 0); /* mseal will fail as well. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(ret < 0); /* we still can add seal to the first page and last page*/ ret = sys_mseal(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); ret = sys_mseal(ptr + 3 * page_size, page_size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_unmapped_end(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* unmap last 2 pages. */ ret = sys_munmap(ptr + 2 * page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); /* mprotect will fail since last 2 pages are unmapped. */ ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(ret < 0); /* mseal will fail as well. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(ret < 0); /* The first 2 pages is not sealed, and can add seals */ ret = sys_mseal(ptr, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_multiple_vmas(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split the vma into 3. */ ret = sys_mprotect(ptr + page_size, 2 * page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* mprotect will get applied to all 4 pages - 3 VMAs. */ ret = sys_mprotect(ptr, size, PROT_READ); FAIL_TEST_IF_FALSE(!ret); /* use mprotect to split the vma into 3. */ ret = sys_mprotect(ptr + page_size, 2 * page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* mseal get applied to all 4 pages - 3 VMAs. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_split_start(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split at middle */ ret = sys_mprotect(ptr, 2 * page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* seal the first page, this will split the VMA */ ret = sys_mseal(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); /* add seal to the remain 3 pages */ ret = sys_mseal(ptr + page_size, 3 * page_size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_split_end(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split at middle */ ret = sys_mprotect(ptr, 2 * page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* seal the last page */ ret = sys_mseal(ptr + 3 * page_size, page_size); FAIL_TEST_IF_FALSE(!ret); /* Adding seals to the first 3 pages */ ret = sys_mseal(ptr, 3 * page_size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_invalid_input(void) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(8 * page_size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); ret = clean_single_address(ptr + 4 * page_size, 4 * page_size); FAIL_TEST_IF_FALSE(!ret); /* invalid flag */ ret = syscall(__NR_mseal, ptr, size, 0x20); FAIL_TEST_IF_FALSE(ret < 0); /* unaligned address */ ret = sys_mseal(ptr + 1, 2 * page_size); FAIL_TEST_IF_FALSE(ret < 0); /* length too big */ ret = sys_mseal(ptr, 5 * page_size); FAIL_TEST_IF_FALSE(ret < 0); /* length overflow */ ret = sys_mseal(ptr, UINT64_MAX/page_size); FAIL_TEST_IF_FALSE(ret < 0); /* start is not in a valid VMA */ ret = sys_mseal(ptr - page_size, 5 * page_size); FAIL_TEST_IF_FALSE(ret < 0); REPORT_TEST_PASS(); } static void test_seal_zero_length(void) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); ret = sys_mprotect(ptr, 0, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* seal 0 length will be OK, same as mprotect */ ret = sys_mseal(ptr, 0); FAIL_TEST_IF_FALSE(!ret); /* verify the 4 pages are not sealed by previous call. */ ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_zero_address(void) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; int prot; /* use mmap to change protection. */ ptr = mmap(0, size, PROT_NONE, MAP_ANONYMOUS | MAP_PRIVATE | MAP_FIXED, -1, 0); FAIL_TEST_IF_FALSE(ptr == 0); size = get_vma_size(ptr, &prot); FAIL_TEST_IF_FALSE(size == 4 * page_size); ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); /* verify the 4 pages are sealed by previous call. */ ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(ret); REPORT_TEST_PASS(); } static void test_seal_twice(void) { int ret; void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); /* apply the same seal will be OK. idempotent. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_mprotect(ptr, size, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_start_mprotect(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); } /* the first page is sealed. */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); /* pages after the first page is not sealed. */ ret = sys_mprotect(ptr + page_size, page_size * 3, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_end_mprotect(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr + page_size, 3 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* first page is not sealed */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* last 3 page are sealed */ ret = sys_mprotect(ptr + page_size, page_size * 3, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_unalign_len(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, page_size * 2 - 1); FAIL_TEST_IF_FALSE(!ret); } /* 2 pages are sealed. */ ret = sys_mprotect(ptr, page_size * 2, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_mprotect(ptr + page_size * 2, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_unalign_len_variant_2(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, page_size * 2 + 1); FAIL_TEST_IF_FALSE(!ret); } /* 3 pages are sealed. */ ret = sys_mprotect(ptr, page_size * 3, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_mprotect(ptr + page_size * 3, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_two_vma(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split */ ret = sys_mprotect(ptr, page_size * 2, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = seal_single_address(ptr, page_size * 4); FAIL_TEST_IF_FALSE(!ret); } ret = sys_mprotect(ptr, page_size * 2, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_mprotect(ptr + page_size * 2, page_size * 2, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_two_vma_with_split(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split as two vma. */ ret = sys_mprotect(ptr, page_size * 2, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* mseal can apply across 2 vma, also split them. */ if (seal) { ret = seal_single_address(ptr + page_size, page_size * 2); FAIL_TEST_IF_FALSE(!ret); } /* the first page is not sealed. */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* the second page is sealed. */ ret = sys_mprotect(ptr + page_size, page_size, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); /* the third page is sealed. */ ret = sys_mprotect(ptr + 2 * page_size, page_size, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); /* the fouth page is not sealed. */ ret = sys_mprotect(ptr + 3 * page_size, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_partial_mprotect(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* seal one page. */ if (seal) { ret = seal_single_address(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); } /* mprotect first 2 page will fail, since the first page are sealed. */ ret = sys_mprotect(ptr, 2 * page_size, PROT_READ | PROT_WRITE); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_partial_mprotect_tail(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 2 * page_size; int ret; int prot; /* * Check if a partial mseal (that results in two vmas) works correctly. * It might mprotect the first, but it'll never touch the second (msealed) vma. */ setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr + page_size, page_size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_mprotect(ptr, size, PROT_EXEC); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); if (seal) { FAIL_TEST_IF_FALSE(get_vma_size(ptr + page_size, &prot) > 0); FAIL_TEST_IF_FALSE(prot == 0x4); } REPORT_TEST_PASS(); } static void test_seal_mprotect_two_vma_with_gap(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split. */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* use mprotect to split. */ ret = sys_mprotect(ptr + 3 * page_size, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* use munmap to free two pages in the middle */ ret = sys_munmap(ptr + page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); /* mprotect will fail, because there is a gap in the address. */ /* notes, internally mprotect still updated the first page. */ ret = sys_mprotect(ptr, 4 * page_size, PROT_READ); FAIL_TEST_IF_FALSE(ret < 0); /* mseal will fail as well. */ ret = sys_mseal(ptr, 4 * page_size); FAIL_TEST_IF_FALSE(ret < 0); /* the first page is not sealed. */ ret = sys_mprotect(ptr, page_size, PROT_READ); FAIL_TEST_IF_FALSE(ret == 0); /* the last page is not sealed. */ ret = sys_mprotect(ptr + 3 * page_size, page_size, PROT_READ); FAIL_TEST_IF_FALSE(ret == 0); REPORT_TEST_PASS(); } static void test_seal_mprotect_split(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split. */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* seal all 4 pages. */ if (seal) { ret = sys_mseal(ptr, 4 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* mprotect is sealed. */ ret = sys_mprotect(ptr, 2 * page_size, PROT_READ); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_mprotect(ptr + 2 * page_size, 2 * page_size, PROT_READ); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_mprotect_merge(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split one page. */ ret = sys_mprotect(ptr, page_size, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); /* seal first two pages. */ if (seal) { ret = sys_mseal(ptr, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* 2 pages are sealed. */ ret = sys_mprotect(ptr, 2 * page_size, PROT_READ); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); /* last 2 pages are not sealed. */ ret = sys_mprotect(ptr + 2 * page_size, 2 * page_size, PROT_READ); FAIL_TEST_IF_FALSE(ret == 0); REPORT_TEST_PASS(); } static void test_seal_munmap(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* 4 pages are sealed. */ ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } /* * allocate 4 pages, * use mprotect to split it as two VMAs * seal the whole range * munmap will fail on both */ static void test_seal_munmap_two_vma(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect to split */ ret = sys_mprotect(ptr, page_size * 2, PROT_READ | PROT_WRITE); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_munmap(ptr, page_size * 2); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr + page_size, page_size * 2); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } /* * allocate a VMA with 4 pages. * munmap the middle 2 pages. * seal the whole 4 pages, will fail. * munmap the first page will be OK. * munmap the last page will be OK. */ static void test_seal_munmap_vma_with_gap(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); ret = sys_munmap(ptr + page_size, page_size * 2); FAIL_TEST_IF_FALSE(!ret); if (seal) { /* can't have gap in the middle. */ ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(ret < 0); } ret = sys_munmap(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr + page_size * 2, page_size); FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_munmap_partial_across_vmas(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 2 * page_size; int ret; int prot; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr + page_size, page_size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); if (seal) { FAIL_TEST_IF_FALSE(get_vma_size(ptr + page_size, &prot) > 0); FAIL_TEST_IF_FALSE(prot == 0x4); } REPORT_TEST_PASS(); } static void test_munmap_start_freed(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; int prot; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* unmap the first page. */ ret = sys_munmap(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); /* seal the last 3 pages. */ if (seal) { ret = sys_mseal(ptr + page_size, 3 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* unmap from the first page. */ ret = sys_munmap(ptr, size); if (seal) { FAIL_TEST_IF_FALSE(ret < 0); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == page_size * 3); } else { /* note: this will be OK, even the first page is */ /* already unmapped. */ FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == 0); } REPORT_TEST_PASS(); } static void test_munmap_end_freed(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* unmap last page. */ ret = sys_munmap(ptr + page_size * 3, page_size); FAIL_TEST_IF_FALSE(!ret); /* seal the first 3 pages. */ if (seal) { ret = sys_mseal(ptr, 3 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* unmap all pages. */ ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_munmap_middle_freed(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; int prot; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* unmap 2 pages in the middle. */ ret = sys_munmap(ptr + page_size, page_size * 2); FAIL_TEST_IF_FALSE(!ret); /* seal the first page. */ if (seal) { ret = sys_mseal(ptr, page_size); FAIL_TEST_IF_FALSE(!ret); } /* munmap all 4 pages. */ ret = sys_munmap(ptr, size); if (seal) { FAIL_TEST_IF_FALSE(ret < 0); size = get_vma_size(ptr, &prot); FAIL_TEST_IF_FALSE(size == page_size); size = get_vma_size(ptr + page_size * 3, &prot); FAIL_TEST_IF_FALSE(size == page_size); } else { FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr, &prot); FAIL_TEST_IF_FALSE(size == 0); size = get_vma_size(ptr + page_size * 3, &prot); FAIL_TEST_IF_FALSE(size == 0); } REPORT_TEST_PASS(); } static void test_seal_mremap_shrink(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* shrink from 4 pages to 2 pages. */ ret2 = sys_mremap(ptr, size, 2 * page_size, 0, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == (void *) MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { FAIL_TEST_IF_FALSE(ret2 != (void *) MAP_FAILED); } REPORT_TEST_PASS(); } static void test_seal_mremap_expand(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* ummap last 2 pages. */ ret = sys_munmap(ptr + 2 * page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = sys_mseal(ptr, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* expand from 2 page to 4 pages. */ ret2 = sys_mremap(ptr, 2 * page_size, 4 * page_size, 0, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { FAIL_TEST_IF_FALSE(ret2 == ptr); } REPORT_TEST_PASS(); } static void test_seal_mremap_move(bool seal) { void *ptr, *newPtr; unsigned long page_size = getpagesize(); unsigned long size = page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); setup_single_address(size, &newPtr); FAIL_TEST_IF_FALSE(newPtr != (void *)-1); ret = clean_single_address(newPtr, size); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* move from ptr to fixed address. */ ret2 = sys_mremap(ptr, size, size, MREMAP_MAYMOVE | MREMAP_FIXED, newPtr); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { FAIL_TEST_IF_FALSE(ret2 != MAP_FAILED); } REPORT_TEST_PASS(); } static void test_seal_mmap_overwrite_prot(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* use mmap to change protection. */ ret2 = mmap(ptr, size, PROT_NONE, MAP_ANONYMOUS | MAP_PRIVATE | MAP_FIXED, -1, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == ptr); REPORT_TEST_PASS(); } static void test_seal_mmap_expand(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 12 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* ummap last 4 pages. */ ret = sys_munmap(ptr + 8 * page_size, 4 * page_size); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = sys_mseal(ptr, 8 * page_size); FAIL_TEST_IF_FALSE(!ret); } /* use mmap to expand. */ ret2 = mmap(ptr, size, PROT_READ, MAP_ANONYMOUS | MAP_PRIVATE | MAP_FIXED, -1, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == ptr); REPORT_TEST_PASS(); } static void test_seal_mmap_shrink(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 12 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* use mmap to shrink. */ ret2 = mmap(ptr, 8 * page_size, PROT_READ, MAP_ANONYMOUS | MAP_PRIVATE | MAP_FIXED, -1, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == ptr); REPORT_TEST_PASS(); } static void test_seal_mremap_shrink_fixed(bool seal) { void *ptr; void *newAddr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); setup_single_address(size, &newAddr); FAIL_TEST_IF_FALSE(newAddr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* mremap to move and shrink to fixed address */ ret2 = sys_mremap(ptr, size, 2 * page_size, MREMAP_MAYMOVE | MREMAP_FIXED, newAddr); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == newAddr); REPORT_TEST_PASS(); } static void test_seal_mremap_expand_fixed(bool seal) { void *ptr; void *newAddr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(page_size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); setup_single_address(size, &newAddr); FAIL_TEST_IF_FALSE(newAddr != (void *)-1); if (seal) { ret = sys_mseal(newAddr, size); FAIL_TEST_IF_FALSE(!ret); } /* mremap to move and expand to fixed address */ ret2 = sys_mremap(ptr, page_size, size, MREMAP_MAYMOVE | MREMAP_FIXED, newAddr); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == newAddr); REPORT_TEST_PASS(); } static void test_seal_mremap_move_fixed(bool seal) { void *ptr; void *newAddr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); setup_single_address(size, &newAddr); FAIL_TEST_IF_FALSE(newAddr != (void *)-1); if (seal) { ret = sys_mseal(newAddr, size); FAIL_TEST_IF_FALSE(!ret); } /* mremap to move to fixed address */ ret2 = sys_mremap(ptr, size, size, MREMAP_MAYMOVE | MREMAP_FIXED, newAddr); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else FAIL_TEST_IF_FALSE(ret2 == newAddr); REPORT_TEST_PASS(); } static void test_seal_mremap_move_fixed_zero(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* * MREMAP_FIXED can move the mapping to zero address */ ret2 = sys_mremap(ptr, size, 2 * page_size, MREMAP_MAYMOVE | MREMAP_FIXED, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { FAIL_TEST_IF_FALSE(ret2 == 0); } REPORT_TEST_PASS(); } static void test_seal_mremap_move_dontunmap(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* mremap to move, and don't unmap src addr. */ ret2 = sys_mremap(ptr, size, size, MREMAP_MAYMOVE | MREMAP_DONTUNMAP, 0); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { /* kernel will allocate a new address */ FAIL_TEST_IF_FALSE(ret2 != MAP_FAILED); } REPORT_TEST_PASS(); } static void test_seal_mremap_move_dontunmap_anyaddr(bool seal) { void *ptr, *ptr2; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; void *ret2; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* * The new address is any address that not allocated. * use allocate/free to similate that. */ setup_single_address(size, &ptr2); FAIL_TEST_IF_FALSE(ptr2 != (void *)-1); ret = sys_munmap(ptr2, size); FAIL_TEST_IF_FALSE(!ret); /* * remap to any address. */ ret2 = sys_mremap(ptr, size, size, MREMAP_MAYMOVE | MREMAP_DONTUNMAP, (void *) ptr2); if (seal) { FAIL_TEST_IF_FALSE(ret2 == MAP_FAILED); FAIL_TEST_IF_FALSE(errno == EPERM); } else { /* remap success and return ptr2 */ FAIL_TEST_IF_FALSE(ret2 == ptr2); } REPORT_TEST_PASS(); } static void test_seal_merge_and_split(void) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size; int ret; int prot; /* (24 RO) */ setup_single_address(24 * page_size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); /* use mprotect(NONE) to set out boundary */ /* (1 NONE) (22 RO) (1 NONE) */ ret = sys_mprotect(ptr, page_size, PROT_NONE); FAIL_TEST_IF_FALSE(!ret); ret = sys_mprotect(ptr + 23 * page_size, page_size, PROT_NONE); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == 22 * page_size); FAIL_TEST_IF_FALSE(prot == 4); /* use mseal to split from beginning */ /* (1 NONE) (1 RO_SEAL) (21 RO) (1 NONE) */ ret = sys_mseal(ptr + page_size, page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == page_size); FAIL_TEST_IF_FALSE(prot == 0x4); size = get_vma_size(ptr + 2 * page_size, &prot); FAIL_TEST_IF_FALSE(size == 21 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); /* use mseal to split from the end. */ /* (1 NONE) (1 RO_SEAL) (20 RO) (1 RO_SEAL) (1 NONE) */ ret = sys_mseal(ptr + 22 * page_size, page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + 22 * page_size, &prot); FAIL_TEST_IF_FALSE(size == page_size); FAIL_TEST_IF_FALSE(prot == 0x4); size = get_vma_size(ptr + 2 * page_size, &prot); FAIL_TEST_IF_FALSE(size == 20 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); /* merge with prev. */ /* (1 NONE) (2 RO_SEAL) (19 RO) (1 RO_SEAL) (1 NONE) */ ret = sys_mseal(ptr + 2 * page_size, page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == 2 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); /* merge with after. */ /* (1 NONE) (2 RO_SEAL) (18 RO) (2 RO_SEALS) (1 NONE) */ ret = sys_mseal(ptr + 21 * page_size, page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + 21 * page_size, &prot); FAIL_TEST_IF_FALSE(size == 2 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); /* split and merge from prev */ /* (1 NONE) (3 RO_SEAL) (17 RO) (2 RO_SEALS) (1 NONE) */ ret = sys_mseal(ptr + 2 * page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + 1 * page_size, &prot); FAIL_TEST_IF_FALSE(size == 3 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); ret = sys_munmap(ptr + page_size, page_size); FAIL_TEST_IF_FALSE(ret < 0); ret = sys_mprotect(ptr + 2 * page_size, page_size, PROT_NONE); FAIL_TEST_IF_FALSE(ret < 0); /* split and merge from next */ /* (1 NONE) (3 RO_SEAL) (16 RO) (3 RO_SEALS) (1 NONE) */ ret = sys_mseal(ptr + 20 * page_size, 2 * page_size); FAIL_TEST_IF_FALSE(!ret); FAIL_TEST_IF_FALSE(prot == 0x4); size = get_vma_size(ptr + 20 * page_size, &prot); FAIL_TEST_IF_FALSE(size == 3 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); /* merge from middle of prev and middle of next. */ /* (1 NONE) (22 RO_SEAL) (1 NONE) */ ret = sys_mseal(ptr + 2 * page_size, 20 * page_size); FAIL_TEST_IF_FALSE(!ret); size = get_vma_size(ptr + page_size, &prot); FAIL_TEST_IF_FALSE(size == 22 * page_size); FAIL_TEST_IF_FALSE(prot == 0x4); REPORT_TEST_PASS(); } static void test_seal_discard_ro_anon_on_rw(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address_rw(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* sealing doesn't take effect on RW memory. */ ret = sys_madvise(ptr, size, MADV_DONTNEED); FAIL_TEST_IF_FALSE(!ret); /* base seal still apply. */ ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_discard_ro_anon_on_pkey(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; int pkey; SKIP_TEST_IF_FALSE(pkey_supported()); setup_single_address_rw(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); pkey = sys_pkey_alloc(0, 0); FAIL_TEST_IF_FALSE(pkey > 0); ret = sys_mprotect_pkey((void *)ptr, size, PROT_READ | PROT_WRITE, pkey); FAIL_TEST_IF_FALSE(!ret); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* sealing doesn't take effect if PKRU allow write. */ set_pkey(pkey, 0); ret = sys_madvise(ptr, size, MADV_DONTNEED); FAIL_TEST_IF_FALSE(!ret); /* sealing will take effect if PKRU deny write. */ set_pkey(pkey, PKEY_DISABLE_WRITE); ret = sys_madvise(ptr, size, MADV_DONTNEED); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); /* base seal still apply. */ ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_discard_ro_anon_on_filebacked(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; int fd; unsigned long mapflags = MAP_PRIVATE; fd = memfd_create("test", 0); FAIL_TEST_IF_FALSE(fd > 0); ret = fallocate(fd, 0, 0, size); FAIL_TEST_IF_FALSE(!ret); ptr = mmap(NULL, size, PROT_READ, mapflags, fd, 0); FAIL_TEST_IF_FALSE(ptr != MAP_FAILED); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* sealing doesn't apply for file backed mapping. */ ret = sys_madvise(ptr, size, MADV_DONTNEED); FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); close(fd); REPORT_TEST_PASS(); } static void test_seal_discard_ro_anon_on_shared(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; unsigned long mapflags = MAP_ANONYMOUS | MAP_SHARED; ptr = mmap(NULL, size, PROT_READ, mapflags, -1, 0); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = sys_mseal(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* sealing doesn't apply for shared mapping. */ ret = sys_madvise(ptr, size, MADV_DONTNEED); FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_discard_ro_anon(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_madvise(ptr, size, MADV_DONTNEED); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_discard_across_vmas(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 2 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr + page_size, page_size); FAIL_TEST_IF_FALSE(!ret); } ret = sys_madvise(ptr, size, MADV_DONTNEED); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } static void test_seal_madvise_nodiscard(bool seal) { void *ptr; unsigned long page_size = getpagesize(); unsigned long size = 4 * page_size; int ret; setup_single_address(size, &ptr); FAIL_TEST_IF_FALSE(ptr != (void *)-1); if (seal) { ret = seal_single_address(ptr, size); FAIL_TEST_IF_FALSE(!ret); } /* * Test a random madvise flag like MADV_RANDOM that does not touch page * contents (and thus should work for msealed VMAs). RANDOM also happens to * share bits with other discard-ish flags like REMOVE. */ ret = sys_madvise(ptr, size, MADV_RANDOM); FAIL_TEST_IF_FALSE(!ret); ret = sys_munmap(ptr, size); if (seal) FAIL_TEST_IF_FALSE(ret < 0); else FAIL_TEST_IF_FALSE(!ret); REPORT_TEST_PASS(); } int main(int argc, char **argv) { bool test_seal = seal_support(); ksft_print_header(); if (!test_seal) ksft_exit_skip("sealing not supported, check CONFIG_64BIT\n"); if (!pkey_supported()) ksft_print_msg("PKEY not supported\n"); ksft_set_plan(88); test_seal_addseal(); test_seal_unmapped_start(); test_seal_unmapped_middle(); test_seal_unmapped_end(); test_seal_multiple_vmas(); test_seal_split_start(); test_seal_split_end(); test_seal_invalid_input(); test_seal_zero_length(); test_seal_twice(); test_seal_mprotect(false); test_seal_mprotect(true); test_seal_start_mprotect(false); test_seal_start_mprotect(true); test_seal_end_mprotect(false); test_seal_end_mprotect(true); test_seal_mprotect_unalign_len(false); test_seal_mprotect_unalign_len(true); test_seal_mprotect_unalign_len_variant_2(false); test_seal_mprotect_unalign_len_variant_2(true); test_seal_mprotect_two_vma(false); test_seal_mprotect_two_vma(true); test_seal_mprotect_two_vma_with_split(false); test_seal_mprotect_two_vma_with_split(true); test_seal_mprotect_partial_mprotect(false); test_seal_mprotect_partial_mprotect(true); test_seal_mprotect_two_vma_with_gap(false); test_seal_mprotect_two_vma_with_gap(true); test_seal_mprotect_merge(false); test_seal_mprotect_merge(true); test_seal_mprotect_split(false); test_seal_mprotect_split(true); test_seal_mprotect_partial_mprotect_tail(false); test_seal_mprotect_partial_mprotect_tail(true); test_seal_munmap(false); test_seal_munmap(true); test_seal_munmap_two_vma(false); test_seal_munmap_two_vma(true); test_seal_munmap_vma_with_gap(false); test_seal_munmap_vma_with_gap(true); test_seal_munmap_partial_across_vmas(false); test_seal_munmap_partial_across_vmas(true); test_munmap_start_freed(false); test_munmap_start_freed(true); test_munmap_middle_freed(false); test_munmap_middle_freed(true); test_munmap_end_freed(false); test_munmap_end_freed(true); test_seal_mremap_shrink(false); test_seal_mremap_shrink(true); test_seal_mremap_expand(false); test_seal_mremap_expand(true); test_seal_mremap_move(false); test_seal_mremap_move(true); test_seal_mremap_shrink_fixed(false); test_seal_mremap_shrink_fixed(true); test_seal_mremap_expand_fixed(false); test_seal_mremap_expand_fixed(true); test_seal_mremap_move_fixed(false); test_seal_mremap_move_fixed(true); test_seal_mremap_move_dontunmap(false); test_seal_mremap_move_dontunmap(true); test_seal_mremap_move_fixed_zero(false); test_seal_mremap_move_fixed_zero(true); test_seal_mremap_move_dontunmap_anyaddr(false); test_seal_mremap_move_dontunmap_anyaddr(true); test_seal_madvise_nodiscard(false); test_seal_madvise_nodiscard(true); test_seal_discard_ro_anon(false); test_seal_discard_ro_anon(true); test_seal_discard_across_vmas(false); test_seal_discard_across_vmas(true); test_seal_discard_ro_anon_on_rw(false); test_seal_discard_ro_anon_on_rw(true); test_seal_discard_ro_anon_on_shared(false); test_seal_discard_ro_anon_on_shared(true); test_seal_discard_ro_anon_on_filebacked(false); test_seal_discard_ro_anon_on_filebacked(true); test_seal_mmap_overwrite_prot(false); test_seal_mmap_overwrite_prot(true); test_seal_mmap_expand(false); test_seal_mmap_expand(true); test_seal_mmap_shrink(false); test_seal_mmap_shrink(true); test_seal_merge_and_split(); test_seal_zero_address(); test_seal_discard_ro_anon_on_pkey(false); test_seal_discard_ro_anon_on_pkey(true); ksft_finished(); }
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
Created with Cregit http://github.com/cregit/cregit
Version 2.0-RC1