1*cf84ac9aSAndroid Build Coastguard Worker /*
2*cf84ac9aSAndroid Build Coastguard Worker * Check decoding of msg_name* fields of struct msghdr array argument
3*cf84ac9aSAndroid Build Coastguard Worker * of sendmmsg and recvmmsg syscalls.
4*cf84ac9aSAndroid Build Coastguard Worker *
5*cf84ac9aSAndroid Build Coastguard Worker * Copyright (c) 2016 Dmitry V. Levin <[email protected]>
6*cf84ac9aSAndroid Build Coastguard Worker * Copyright (c) 2016-2018 The strace developers.
7*cf84ac9aSAndroid Build Coastguard Worker * All rights reserved.
8*cf84ac9aSAndroid Build Coastguard Worker *
9*cf84ac9aSAndroid Build Coastguard Worker * Redistribution and use in source and binary forms, with or without
10*cf84ac9aSAndroid Build Coastguard Worker * modification, are permitted provided that the following conditions
11*cf84ac9aSAndroid Build Coastguard Worker * are met:
12*cf84ac9aSAndroid Build Coastguard Worker * 1. Redistributions of source code must retain the above copyright
13*cf84ac9aSAndroid Build Coastguard Worker * notice, this list of conditions and the following disclaimer.
14*cf84ac9aSAndroid Build Coastguard Worker * 2. Redistributions in binary form must reproduce the above copyright
15*cf84ac9aSAndroid Build Coastguard Worker * notice, this list of conditions and the following disclaimer in the
16*cf84ac9aSAndroid Build Coastguard Worker * documentation and/or other materials provided with the distribution.
17*cf84ac9aSAndroid Build Coastguard Worker * 3. The name of the author may not be used to endorse or promote products
18*cf84ac9aSAndroid Build Coastguard Worker * derived from this software without specific prior written permission.
19*cf84ac9aSAndroid Build Coastguard Worker *
20*cf84ac9aSAndroid Build Coastguard Worker * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
21*cf84ac9aSAndroid Build Coastguard Worker * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
22*cf84ac9aSAndroid Build Coastguard Worker * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
23*cf84ac9aSAndroid Build Coastguard Worker * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
24*cf84ac9aSAndroid Build Coastguard Worker * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
25*cf84ac9aSAndroid Build Coastguard Worker * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
26*cf84ac9aSAndroid Build Coastguard Worker * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
27*cf84ac9aSAndroid Build Coastguard Worker * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28*cf84ac9aSAndroid Build Coastguard Worker * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
29*cf84ac9aSAndroid Build Coastguard Worker * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30*cf84ac9aSAndroid Build Coastguard Worker */
31*cf84ac9aSAndroid Build Coastguard Worker
32*cf84ac9aSAndroid Build Coastguard Worker #include "tests.h"
33*cf84ac9aSAndroid Build Coastguard Worker
34*cf84ac9aSAndroid Build Coastguard Worker #include <errno.h>
35*cf84ac9aSAndroid Build Coastguard Worker #include <limits.h>
36*cf84ac9aSAndroid Build Coastguard Worker #include <stddef.h>
37*cf84ac9aSAndroid Build Coastguard Worker #include <stdio.h>
38*cf84ac9aSAndroid Build Coastguard Worker #include <string.h>
39*cf84ac9aSAndroid Build Coastguard Worker #include <unistd.h>
40*cf84ac9aSAndroid Build Coastguard Worker #include <sys/un.h>
41*cf84ac9aSAndroid Build Coastguard Worker
42*cf84ac9aSAndroid Build Coastguard Worker #include "msghdr.h"
43*cf84ac9aSAndroid Build Coastguard Worker
44*cf84ac9aSAndroid Build Coastguard Worker #define IOV_MAX1 (IOV_MAX + 1)
45*cf84ac9aSAndroid Build Coastguard Worker
46*cf84ac9aSAndroid Build Coastguard Worker #ifndef TEST_NAME
47*cf84ac9aSAndroid Build Coastguard Worker # define TEST_NAME "mmsg_name"
48*cf84ac9aSAndroid Build Coastguard Worker #endif
49*cf84ac9aSAndroid Build Coastguard Worker
50*cf84ac9aSAndroid Build Coastguard Worker static void
print_msghdr(const struct msghdr * const msg,const int user_msg_namelen)51*cf84ac9aSAndroid Build Coastguard Worker print_msghdr(const struct msghdr *const msg, const int user_msg_namelen)
52*cf84ac9aSAndroid Build Coastguard Worker {
53*cf84ac9aSAndroid Build Coastguard Worker const struct sockaddr_un *const un = msg->msg_name;
54*cf84ac9aSAndroid Build Coastguard Worker const int offsetof_sun_path = offsetof(struct sockaddr_un, sun_path);
55*cf84ac9aSAndroid Build Coastguard Worker
56*cf84ac9aSAndroid Build Coastguard Worker printf("{msg_name=");
57*cf84ac9aSAndroid Build Coastguard Worker if (!un)
58*cf84ac9aSAndroid Build Coastguard Worker printf("NULL");
59*cf84ac9aSAndroid Build Coastguard Worker else if (user_msg_namelen < offsetof_sun_path) {
60*cf84ac9aSAndroid Build Coastguard Worker printf("%p", un);
61*cf84ac9aSAndroid Build Coastguard Worker } else {
62*cf84ac9aSAndroid Build Coastguard Worker printf("{sa_family=AF_UNIX");
63*cf84ac9aSAndroid Build Coastguard Worker if (user_msg_namelen > offsetof_sun_path) {
64*cf84ac9aSAndroid Build Coastguard Worker int len = user_msg_namelen < (int) msg->msg_namelen ?
65*cf84ac9aSAndroid Build Coastguard Worker user_msg_namelen : (int) msg->msg_namelen;
66*cf84ac9aSAndroid Build Coastguard Worker len -= offsetof_sun_path;
67*cf84ac9aSAndroid Build Coastguard Worker if (len > (int) sizeof(un->sun_path))
68*cf84ac9aSAndroid Build Coastguard Worker len = sizeof(un->sun_path);
69*cf84ac9aSAndroid Build Coastguard Worker printf(", sun_path=\"%.*s\"", len, un->sun_path);
70*cf84ac9aSAndroid Build Coastguard Worker }
71*cf84ac9aSAndroid Build Coastguard Worker printf("}");
72*cf84ac9aSAndroid Build Coastguard Worker }
73*cf84ac9aSAndroid Build Coastguard Worker printf(", msg_namelen=");
74*cf84ac9aSAndroid Build Coastguard Worker if (user_msg_namelen != (int) msg->msg_namelen) {
75*cf84ac9aSAndroid Build Coastguard Worker printf("%d->", user_msg_namelen);
76*cf84ac9aSAndroid Build Coastguard Worker }
77*cf84ac9aSAndroid Build Coastguard Worker printf("%d, msg_iov=[{iov_base=\"%c\", iov_len=1}]"
78*cf84ac9aSAndroid Build Coastguard Worker ", msg_iovlen=1, msg_controllen=0, msg_flags=0}",
79*cf84ac9aSAndroid Build Coastguard Worker (int) msg->msg_namelen, *(char *) msg->msg_iov[0].iov_base);
80*cf84ac9aSAndroid Build Coastguard Worker }
81*cf84ac9aSAndroid Build Coastguard Worker
82*cf84ac9aSAndroid Build Coastguard Worker static void
test_mmsg_name(const int send_fd,const int recv_fd)83*cf84ac9aSAndroid Build Coastguard Worker test_mmsg_name(const int send_fd, const int recv_fd)
84*cf84ac9aSAndroid Build Coastguard Worker {
85*cf84ac9aSAndroid Build Coastguard Worker struct sockaddr_un *const send_addr =
86*cf84ac9aSAndroid Build Coastguard Worker tail_alloc(sizeof(*send_addr) * IOV_MAX1);
87*cf84ac9aSAndroid Build Coastguard Worker char *const send_buf = tail_alloc(sizeof(*send_buf) * IOV_MAX1);
88*cf84ac9aSAndroid Build Coastguard Worker struct iovec *const send_iov = tail_alloc(sizeof(*send_iov) * IOV_MAX1);
89*cf84ac9aSAndroid Build Coastguard Worker struct mmsghdr *const send_mh = tail_alloc(sizeof(*send_mh) * IOV_MAX1);
90*cf84ac9aSAndroid Build Coastguard Worker
91*cf84ac9aSAndroid Build Coastguard Worker int i, rc;
92*cf84ac9aSAndroid Build Coastguard Worker
93*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < IOV_MAX1; ++i) {
94*cf84ac9aSAndroid Build Coastguard Worker int sun_len = i + 1 > (int) sizeof(send_addr[i].sun_path)
95*cf84ac9aSAndroid Build Coastguard Worker ? (int) sizeof(send_addr[i].sun_path)
96*cf84ac9aSAndroid Build Coastguard Worker : i + 1;
97*cf84ac9aSAndroid Build Coastguard Worker
98*cf84ac9aSAndroid Build Coastguard Worker send_addr[i].sun_family = AF_UNIX;
99*cf84ac9aSAndroid Build Coastguard Worker memset(send_addr[i].sun_path, 'a' + i % 26, sun_len);
100*cf84ac9aSAndroid Build Coastguard Worker
101*cf84ac9aSAndroid Build Coastguard Worker send_buf[i] = '0' + i % 10;
102*cf84ac9aSAndroid Build Coastguard Worker
103*cf84ac9aSAndroid Build Coastguard Worker send_iov[i].iov_base = &send_buf[i];
104*cf84ac9aSAndroid Build Coastguard Worker send_iov[i].iov_len = sizeof(*send_buf);
105*cf84ac9aSAndroid Build Coastguard Worker
106*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_iov = &send_iov[i];
107*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_iovlen = 1;
108*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_name = &send_addr[i];
109*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_namelen = i + 1;
110*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_control = 0;
111*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_controllen = 0;
112*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_flags = 0;
113*cf84ac9aSAndroid Build Coastguard Worker }
114*cf84ac9aSAndroid Build Coastguard Worker
115*cf84ac9aSAndroid Build Coastguard Worker rc = send_mmsg(send_fd, send_mh, IOV_MAX1, MSG_DONTWAIT);
116*cf84ac9aSAndroid Build Coastguard Worker int saved_errno = errno;
117*cf84ac9aSAndroid Build Coastguard Worker
118*cf84ac9aSAndroid Build Coastguard Worker printf("sendmmsg(%d, [", send_fd);
119*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < IOV_MAX1; ++i) {
120*cf84ac9aSAndroid Build Coastguard Worker if (i)
121*cf84ac9aSAndroid Build Coastguard Worker printf(", ");
122*cf84ac9aSAndroid Build Coastguard Worker if (i >= IOV_MAX
123*cf84ac9aSAndroid Build Coastguard Worker # if !VERBOSE
124*cf84ac9aSAndroid Build Coastguard Worker || i >= DEFAULT_STRLEN
125*cf84ac9aSAndroid Build Coastguard Worker # endif
126*cf84ac9aSAndroid Build Coastguard Worker ) {
127*cf84ac9aSAndroid Build Coastguard Worker printf("...");
128*cf84ac9aSAndroid Build Coastguard Worker break;
129*cf84ac9aSAndroid Build Coastguard Worker }
130*cf84ac9aSAndroid Build Coastguard Worker printf("{msg_hdr=");
131*cf84ac9aSAndroid Build Coastguard Worker print_msghdr(&send_mh[i].msg_hdr, i + 1);
132*cf84ac9aSAndroid Build Coastguard Worker printf("}");
133*cf84ac9aSAndroid Build Coastguard Worker }
134*cf84ac9aSAndroid Build Coastguard Worker errno = saved_errno;
135*cf84ac9aSAndroid Build Coastguard Worker printf("], %u, MSG_DONTWAIT) = %d %s (%m)\n",
136*cf84ac9aSAndroid Build Coastguard Worker IOV_MAX1, rc, errno2name());
137*cf84ac9aSAndroid Build Coastguard Worker
138*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < IOV_MAX1; ++i) {
139*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_name = 0;
140*cf84ac9aSAndroid Build Coastguard Worker send_mh[i].msg_hdr.msg_namelen = 0;
141*cf84ac9aSAndroid Build Coastguard Worker }
142*cf84ac9aSAndroid Build Coastguard Worker
143*cf84ac9aSAndroid Build Coastguard Worker /*
144*cf84ac9aSAndroid Build Coastguard Worker * When recvmmsg is called with a valid descriptor
145*cf84ac9aSAndroid Build Coastguard Worker * but inaccessible memory, it causes segfaults on some architectures.
146*cf84ac9aSAndroid Build Coastguard Worker * As in these cases we test decoding of failed recvmmsg calls,
147*cf84ac9aSAndroid Build Coastguard Worker * it's ok to fail recvmmsg with any reason as long as
148*cf84ac9aSAndroid Build Coastguard Worker * it doesn't read that inaccessible memory.
149*cf84ac9aSAndroid Build Coastguard Worker */
150*cf84ac9aSAndroid Build Coastguard Worker rc = send_mmsg(-1, &send_mh[IOV_MAX], 2, MSG_DONTWAIT);
151*cf84ac9aSAndroid Build Coastguard Worker saved_errno = errno;
152*cf84ac9aSAndroid Build Coastguard Worker printf("sendmmsg(-1, [{msg_hdr=");
153*cf84ac9aSAndroid Build Coastguard Worker print_msghdr(&send_mh[IOV_MAX].msg_hdr, 0);
154*cf84ac9aSAndroid Build Coastguard Worker errno = saved_errno;
155*cf84ac9aSAndroid Build Coastguard Worker printf("}, ... /* %p */], %u, MSG_DONTWAIT) = %d %s (%m)\n",
156*cf84ac9aSAndroid Build Coastguard Worker &send_mh[IOV_MAX1], 2, rc, errno2name());
157*cf84ac9aSAndroid Build Coastguard Worker
158*cf84ac9aSAndroid Build Coastguard Worker rc = send_mmsg(send_fd, send_mh, IOV_MAX1, MSG_DONTWAIT);
159*cf84ac9aSAndroid Build Coastguard Worker if (rc < 0)
160*cf84ac9aSAndroid Build Coastguard Worker perror_msg_and_skip("sendmmsg");
161*cf84ac9aSAndroid Build Coastguard Worker
162*cf84ac9aSAndroid Build Coastguard Worker printf("sendmmsg(%d, [", send_fd);
163*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < IOV_MAX1; ++i) {
164*cf84ac9aSAndroid Build Coastguard Worker if (i)
165*cf84ac9aSAndroid Build Coastguard Worker printf(", ");
166*cf84ac9aSAndroid Build Coastguard Worker if (i >= IOV_MAX
167*cf84ac9aSAndroid Build Coastguard Worker #if !VERBOSE
168*cf84ac9aSAndroid Build Coastguard Worker || i >= DEFAULT_STRLEN
169*cf84ac9aSAndroid Build Coastguard Worker #endif
170*cf84ac9aSAndroid Build Coastguard Worker ) {
171*cf84ac9aSAndroid Build Coastguard Worker printf("...");
172*cf84ac9aSAndroid Build Coastguard Worker break;
173*cf84ac9aSAndroid Build Coastguard Worker }
174*cf84ac9aSAndroid Build Coastguard Worker printf("{msg_hdr=");
175*cf84ac9aSAndroid Build Coastguard Worker print_msghdr(&send_mh[i].msg_hdr, 0);
176*cf84ac9aSAndroid Build Coastguard Worker printf("%s}", i < rc ? ", msg_len=1" : "");
177*cf84ac9aSAndroid Build Coastguard Worker }
178*cf84ac9aSAndroid Build Coastguard Worker printf("], %u, MSG_DONTWAIT) = %d\n", IOV_MAX1, rc);
179*cf84ac9aSAndroid Build Coastguard Worker
180*cf84ac9aSAndroid Build Coastguard Worker struct sockaddr_un *const recv_addr =
181*cf84ac9aSAndroid Build Coastguard Worker tail_alloc(sizeof(*recv_addr) * IOV_MAX1);
182*cf84ac9aSAndroid Build Coastguard Worker char *const recv_buf = tail_alloc(sizeof(*recv_buf) * IOV_MAX1);
183*cf84ac9aSAndroid Build Coastguard Worker struct iovec *const recv_iov = tail_alloc(sizeof(*recv_iov) * IOV_MAX1);
184*cf84ac9aSAndroid Build Coastguard Worker struct mmsghdr *const recv_mh = tail_alloc(sizeof(*recv_mh) * IOV_MAX1);
185*cf84ac9aSAndroid Build Coastguard Worker
186*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < IOV_MAX1; ++i) {
187*cf84ac9aSAndroid Build Coastguard Worker recv_iov[i].iov_base = &recv_buf[i];
188*cf84ac9aSAndroid Build Coastguard Worker recv_iov[i].iov_len = sizeof(*recv_buf);
189*cf84ac9aSAndroid Build Coastguard Worker
190*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_name = &recv_addr[i];
191*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_namelen = i;
192*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_iov = &recv_iov[i];
193*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_iovlen = 1;
194*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_control = 0;
195*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_controllen = 0;
196*cf84ac9aSAndroid Build Coastguard Worker recv_mh[i].msg_hdr.msg_flags = 0;
197*cf84ac9aSAndroid Build Coastguard Worker }
198*cf84ac9aSAndroid Build Coastguard Worker
199*cf84ac9aSAndroid Build Coastguard Worker rc = recv_mmsg(recv_fd, recv_mh, IOV_MAX1, MSG_DONTWAIT, 0);
200*cf84ac9aSAndroid Build Coastguard Worker if (rc < 0)
201*cf84ac9aSAndroid Build Coastguard Worker perror_msg_and_skip("recvmmsg");
202*cf84ac9aSAndroid Build Coastguard Worker
203*cf84ac9aSAndroid Build Coastguard Worker printf("recvmmsg(%d, [", recv_fd);
204*cf84ac9aSAndroid Build Coastguard Worker for (i = 0; i < rc; ++i) {
205*cf84ac9aSAndroid Build Coastguard Worker if (i)
206*cf84ac9aSAndroid Build Coastguard Worker printf(", ");
207*cf84ac9aSAndroid Build Coastguard Worker #if !VERBOSE
208*cf84ac9aSAndroid Build Coastguard Worker if (i >= DEFAULT_STRLEN) {
209*cf84ac9aSAndroid Build Coastguard Worker printf("...");
210*cf84ac9aSAndroid Build Coastguard Worker break;
211*cf84ac9aSAndroid Build Coastguard Worker }
212*cf84ac9aSAndroid Build Coastguard Worker #endif
213*cf84ac9aSAndroid Build Coastguard Worker printf("{msg_hdr=");
214*cf84ac9aSAndroid Build Coastguard Worker print_msghdr(&recv_mh[i].msg_hdr, i);
215*cf84ac9aSAndroid Build Coastguard Worker printf(", msg_len=1}");
216*cf84ac9aSAndroid Build Coastguard Worker }
217*cf84ac9aSAndroid Build Coastguard Worker printf("], %u, MSG_DONTWAIT, NULL) = %d\n", IOV_MAX1, rc);
218*cf84ac9aSAndroid Build Coastguard Worker }
219*cf84ac9aSAndroid Build Coastguard Worker
220*cf84ac9aSAndroid Build Coastguard Worker int
main(void)221*cf84ac9aSAndroid Build Coastguard Worker main(void)
222*cf84ac9aSAndroid Build Coastguard Worker {
223*cf84ac9aSAndroid Build Coastguard Worker int fds[2];
224*cf84ac9aSAndroid Build Coastguard Worker if (socketpair(AF_UNIX, SOCK_STREAM, 0, fds))
225*cf84ac9aSAndroid Build Coastguard Worker perror_msg_and_skip("socketpair");
226*cf84ac9aSAndroid Build Coastguard Worker
227*cf84ac9aSAndroid Build Coastguard Worker const struct sockaddr_un un = {
228*cf84ac9aSAndroid Build Coastguard Worker .sun_family = AF_UNIX,
229*cf84ac9aSAndroid Build Coastguard Worker .sun_path = TEST_NAME "-recvmmsg.test.send.socket"
230*cf84ac9aSAndroid Build Coastguard Worker };
231*cf84ac9aSAndroid Build Coastguard Worker
232*cf84ac9aSAndroid Build Coastguard Worker (void) unlink(un.sun_path);
233*cf84ac9aSAndroid Build Coastguard Worker if (bind(fds[1], (const void *) &un, sizeof(un)))
234*cf84ac9aSAndroid Build Coastguard Worker perror_msg_and_skip("bind");
235*cf84ac9aSAndroid Build Coastguard Worker (void) unlink(un.sun_path);
236*cf84ac9aSAndroid Build Coastguard Worker
237*cf84ac9aSAndroid Build Coastguard Worker test_mmsg_name(fds[1], fds[0]);
238*cf84ac9aSAndroid Build Coastguard Worker
239*cf84ac9aSAndroid Build Coastguard Worker puts("+++ exited with 0 +++");
240*cf84ac9aSAndroid Build Coastguard Worker return 0;
241*cf84ac9aSAndroid Build Coastguard Worker }
242