* Check decoding of struct msghdr.msg_name* arguments of recvmsg syscall.
*
* Copyright (c) 2016 Dmitry V. Levin <ldv@altlinux.org>
+ * Copyright (c) 2016-2017 The strace developers.
* All rights reserved.
*
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. The name of the author may not be used to endorse or promote products
- * derived from this software without specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
- * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
- * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
- * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
- * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
- * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
- * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ * SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "tests.h"
static void
test_msg_name(const int send_fd, const int recv_fd)
{
- char *const recv_buf = tail_alloc(sizeof(*recv_buf));
- struct iovec *const iov = tail_alloc(sizeof(*iov));
+ TAIL_ALLOC_OBJECT_CONST_PTR(char, recv_buf);
+ TAIL_ALLOC_OBJECT_CONST_PTR(struct iovec, iov);
iov->iov_base = recv_buf;
iov->iov_len = sizeof(*recv_buf);
- struct sockaddr_un *const addr = tail_alloc(sizeof(*addr));
- struct msghdr *const msg = tail_alloc(sizeof(*msg));
+ TAIL_ALLOC_OBJECT_CONST_PTR(struct sockaddr_un, addr);
+ TAIL_ALLOC_OBJECT_CONST_PTR(struct msghdr, msg);
msg->msg_name = addr;
msg->msg_namelen = sizeof(*addr);
msg->msg_iov = iov;
if (rc < 0)
perror_msg_and_skip("recvmsg");
printf("recvmsg(%d, {msg_name={sa_family=AF_UNIX, sun_path=\"%s\"}"
- ", msg_namelen=%d->%d, msg_iov=[{\"A\", 1}], msg_iovlen=1"
- ", msg_controllen=0, msg_flags=0}, MSG_DONTWAIT) = %d\n",
+ ", msg_namelen=%d->%d, msg_iov=[{iov_base=\"A\", iov_len=1}]"
+ ", msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTWAIT)"
+ " = %d\n",
recv_fd, addr->sun_path, (int) sizeof(struct sockaddr_un),
(int) msg->msg_namelen, rc);
memset(addr, 0, sizeof(*addr));
rc = send_recv(send_fd, recv_fd, msg, MSG_DONTWAIT);
printf("recvmsg(%d, {msg_name={sa_family=AF_UNIX, sun_path=\"%s\"}"
- ", msg_namelen=%d, msg_iov=[{\"A\", 1}], msg_iovlen=1"
- ", msg_controllen=0, msg_flags=0}, MSG_DONTWAIT) = %d\n",
+ ", msg_namelen=%d, msg_iov=[{iov_base=\"A\", iov_len=1}]"
+ ", msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTWAIT)"
+ " = %d\n",
recv_fd, addr->sun_path, (int) msg->msg_namelen, rc);
msg->msg_name = 0;
rc = send_recv(send_fd, recv_fd, msg, MSG_DONTWAIT);
- printf("recvmsg(%d, {msg_name=NULL"
- ", msg_namelen=%d, msg_iov=[{\"A\", 1}], msg_iovlen=1"
+ printf("recvmsg(%d, {msg_name=NULL, msg_namelen=%d"
+ ", msg_iov=[{iov_base=\"A\", iov_len=1}], msg_iovlen=1"
", msg_controllen=0, msg_flags=0}, MSG_DONTWAIT) = %d\n",
recv_fd, (int) msg->msg_namelen, rc);
memset(addr->sun_path, 'A', sizeof(addr->sun_path));
rc = send_recv(send_fd, recv_fd, msg, MSG_DONTWAIT);
- printf("recvmsg(%d, {msg_name={sa_family=AF_UNIX}"
- ", msg_namelen=%d->%d, msg_iov=[{\"A\", 1}], msg_iovlen=1"
+ printf("recvmsg(%d, {msg_name={sa_family=AF_UNIX}, msg_namelen=%d->%d"
+ ", msg_iov=[{iov_base=\"A\", iov_len=1}], msg_iovlen=1"
", msg_controllen=0, msg_flags=0}, MSG_DONTWAIT) = %d\n",
recv_fd, (int) offsetof_sun_path, (int) msg->msg_namelen, rc);
msg->msg_name = ((void *) (addr + 1)) - msg->msg_namelen;
rc = send_recv(send_fd, recv_fd, msg, MSG_DONTWAIT);
printf("recvmsg(%d, {msg_name={sa_family=AF_UNIX, sun_path=\"%.*s\"}"
- ", msg_namelen=%d->%d, msg_iov=[{\"A\", 1}], msg_iovlen=1"
- ", msg_controllen=0, msg_flags=0}, MSG_DONTWAIT) = %d\n",
+ ", msg_namelen=%d->%d, msg_iov=[{iov_base=\"A\", iov_len=1}]"
+ ", msg_iovlen=1, msg_controllen=0, msg_flags=0}, MSG_DONTWAIT)"
+ " = %d\n",
recv_fd, (int) (sizeof(struct sockaddr) - offsetof_sun_path),
((struct sockaddr_un *) msg->msg_name)->sun_path,
(int) sizeof(struct sockaddr), (int) msg->msg_namelen, rc);
* it's ok to fail recvmsg with any reason as long as
* it doesn't read that inaccessible memory.
*/
+
+ /*
+ * Sadly, musl recvmsg wrapper blindly dereferences 2nd argument,
+ * so limit this test to glibc that doesn't.
+ */
+#ifdef __GLIBC__
rc = send_recv(send_fd, -1, msg + 1, 0);
printf("recvmsg(-1, %p, 0) = %d %s (%m)\n",
msg + 1, rc, errno2name());
+#endif
rc = send_recv(send_fd, -1, 0, 0);
printf("recvmsg(-1, NULL, 0) = %d %s (%m)\n",
projects / strace / blobdiff