2 * Check decoding of init_module syscall.
4 * Copyright (c) 2016 Eugene Syromyatnikov <evgsyr@gmail.com>
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that the following conditions
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. The name of the author may not be used to endorse or promote products
16 * derived from this software without specific prior written permission.
18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
19 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
20 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
21 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
22 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
23 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
24 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
25 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
32 #include <asm/unistd.h>
34 #if defined(__NR_init_module)
39 # include "init_delete_module.h"
45 static const kernel_ulong_t bogus_addr =
46 (kernel_ulong_t) 0xfffffeedfffffaceULL;
47 static const kernel_ulong_t bogus_len =
48 (kernel_ulong_t) 0xfffffca7ffffc0deULL;
51 char *bogus_param1 = tail_alloc(PARAM1_LEN);
52 char *bogus_param2 = tail_alloc(PARAM2_LEN);
55 fill_memory_ex(bogus_param1, PARAM1_LEN, PARAM1_BASE, PARAM1_LEN);
56 fill_memory_ex(bogus_param2, PARAM2_LEN, PARAM2_BASE, PARAM2_LEN);
58 rc = syscall(__NR_init_module, NULL, F8ILL_KULONG_MASK, NULL);
59 printf("init_module(NULL, %llu, NULL) = %s\n",
60 (unsigned long long) F8ILL_KULONG_MASK, sprintrc(rc));
62 rc = syscall(__NR_init_module, bogus_addr, 0, bogus_param1);
63 errstr = sprintrc(rc);
65 printf("init_module(%#llx, 0, \"", (unsigned long long) bogus_addr);
66 print_str(PARAM1_BASE, MAX_STRLEN, false);
67 printf("\"...) = %s\n", errstr);
69 bogus_param1[PARAM1_LEN - 1] = '\0';
71 rc = syscall(__NR_init_module, bogus_addr, 0, bogus_param1);
72 errstr = sprintrc(rc);
74 printf("init_module(%#llx, 0, \"", (unsigned long long) bogus_addr);
75 print_str(PARAM1_BASE, MAX_STRLEN, false);
76 printf("\") = %s\n", errstr);
78 rc = syscall(__NR_init_module, bogus_addr, bogus_len,
79 bogus_param2 + PARAM2_LEN);
80 printf("init_module(%#llx, %llu, %p) = %s\n",
81 (unsigned long long) bogus_addr, (unsigned long long) bogus_len,
82 bogus_param2 + PARAM2_LEN, sprintrc(rc));
84 rc = syscall(__NR_init_module, NULL, bogus_len, bogus_param2);
85 printf("init_module(NULL, %llu, %p) = %s\n",
86 (unsigned long long) bogus_len, bogus_param2, sprintrc(rc));
88 bogus_param2[PARAM2_LEN - 1] = '\0';
90 rc = syscall(__NR_init_module, NULL, bogus_len, bogus_param2);
91 errstr = sprintrc(rc);
93 printf("init_module(NULL, %llu, \"", (unsigned long long) bogus_len);
94 print_str(PARAM2_BASE, PARAM2_LEN - 1, true);
95 printf("\") = %s\n", errstr);
97 puts("+++ exited with 0 +++");
104 SKIP_MAIN_UNDEFINED("__NR_init_module");