tests: check decoding of socket filters

* tests/sock_filter-v.c: New file.
* tests/gen_tests.in (sock_filter-v): New entry.
* tests/pure_executables.list: Add sock_filter-v.
* tests/.gitignore: Likewise.

diff --git a/tests/.gitignore b/tests/.gitignore
index 555288825a3591adfc7f6174504891a93bf87b14..ec6f4273e0a06b33dcd478abdc43cdd8870e0ad8 100644 (file)
--- a/tests/.gitignore
+++ b/tests/.gitignore
@@ -349,6 +349,7 @@ sigreturn
 sigsuspend
 sleep
 so_linger
+sock_filter-v
 socketcall
 splice
 stack-fcall

diff --git a/tests/gen_tests.in b/tests/gen_tests.in
index d352e896119422f0c9564509fcccd09bdf98a950..8320337f6720f611f6af43960493a34b6020c314 100644 (file)
--- a/tests/gen_tests.in
+++ b/tests/gen_tests.in
@@ -300,6 +300,7 @@ sigprocmask -a34
 sigreturn      -esignal='!USR1'
 sigsuspend     -a19 -esignal=none
 so_linger      -e trace=getsockopt,setsockopt
+sock_filter-v  -v -e trace=getsockopt,setsockopt
 socketcall     -a20
 splice
 stat   -a32 -v -P stat.sample -P /dev/full

diff --git a/tests/pure_executables.list b/tests/pure_executables.list
index 390a40e27c2dd1eb3743475e8697b0e18b72aa72..6bdb99cc18a1ae851f666a22ddbeb2428d0069f3 100755 (executable)
--- a/tests/pure_executables.list
+++ b/tests/pure_executables.list
@@ -288,6 +288,7 @@ sigprocmask
 sigreturn
 sigsuspend
 so_linger
+sock_filter-v
 socketcall
 splice
 stat

diff --git a/tests/sock_filter-v.c b/tests/sock_filter-v.c
new file mode 100644 (file)
index 0000000..16d5c1c
--- /dev/null
+++ b/tests/sock_filter-v.c
@@ -0,0 +1,181 @@
+/*
+ * Check decoding of socket filters.
+ *
+ * Copyright (c) 2017 Dmitry V. Levin <ldv@altlinux.org>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#include "tests.h"
+
+#include <stdio.h>
+#include <unistd.h>
+#include <netinet/in.h>
+#include <sys/socket.h>
+#include <linux/filter.h>
+
+#define PRINT_STMT_SYM(pfx, code, k)   PRINT_STMT_SYM_(pfx, #code, #k)
+#define PRINT_STMT_SYM_(pfx, code, k)  \
+       printf("%sBPF_STMT(%s, %s)", pfx, code, k)
+#define PRINT_STMT_VAL(pfx, code, k)   PRINT_STMT_VAL_(pfx, #code, k)
+#define PRINT_STMT_VAL_(pfx, code, k)  \
+       printf("%sBPF_STMT(%s, %#x)", pfx, code, k)
+
+#define PRINT_JUMP(pfx, code, k, jt, jf)       PRINT_JUMP_(pfx, #code, k, jt, jf)
+#define PRINT_JUMP_(pfx, code, k, jt, jf)      \
+       printf("%sBPF_JUMP(%s, %#x, %#x, %#x)", pfx, code, k, jt, jf)
+
+static const struct sock_filter bpf_filter[] = {
+       BPF_STMT(BPF_LD|BPF_B|BPF_ABS, SKF_LL_OFF+4),
+       BPF_STMT(BPF_LD|BPF_B|BPF_ABS, SKF_NET_OFF+8),
+       BPF_STMT(BPF_LD|BPF_B|BPF_ABS, SKF_AD_OFF+SKF_AD_PROTOCOL),
+       BPF_JUMP(BPF_JMP|BPF_K|BPF_JEQ, IPPROTO_UDP, 0, 5),
+       BPF_STMT(BPF_LD|BPF_W|BPF_LEN, 0),
+       BPF_JUMP(BPF_JMP|BPF_K|BPF_JGE, 100, 0, 3),
+       BPF_STMT(BPF_LD|BPF_B|BPF_ABS, 42),
+       BPF_JUMP(BPF_JMP|BPF_K|BPF_JEQ, 'a', 0, 1),
+       BPF_STMT(BPF_RET|BPF_K, -1U),
+       BPF_STMT(BPF_RET|BPF_K, 0)
+};
+
+static void
+print_filter(void)
+{
+       PRINT_STMT_SYM("[", BPF_LD|BPF_B|BPF_ABS, SKF_LL_OFF+4);
+       PRINT_STMT_SYM(", ", BPF_LD|BPF_B|BPF_ABS, SKF_NET_OFF+8);
+       PRINT_STMT_SYM(", ", BPF_LD|BPF_B|BPF_ABS, SKF_AD_OFF+SKF_AD_PROTOCOL);
+       PRINT_JUMP(", ", BPF_JMP|BPF_K|BPF_JEQ, IPPROTO_UDP, 0, 5);
+       PRINT_STMT_VAL(", ", BPF_LD|BPF_W|BPF_LEN, 0);
+       PRINT_JUMP(", ", BPF_JMP|BPF_K|BPF_JGE, 100, 0, 3);
+       PRINT_STMT_VAL(", ", BPF_LD|BPF_B|BPF_ABS, 42);
+       PRINT_JUMP(", ", BPF_JMP|BPF_K|BPF_JEQ, 'a', 0, 1);
+       PRINT_STMT_VAL(", ", BPF_RET|BPF_K, -1U);
+       PRINT_STMT_VAL(", ", BPF_RET|BPF_K, 0);
+       putchar(']');
+}
+
+static const char *errstr;
+
+static int
+get_filter(int fd, void *val, socklen_t *len)
+{
+       int rc = getsockopt(fd, SOL_SOCKET, SO_ATTACH_FILTER, val, len);
+       errstr = sprintrc(rc);
+       return rc;
+}
+
+static int
+set_filter(int fd, void *val, socklen_t len)
+{
+       int rc = setsockopt(fd, SOL_SOCKET, SO_ATTACH_FILTER, val, len);
+       errstr = sprintrc(rc);
+       return rc;
+}
+
+int
+main(void)
+{
+       int rc;
+       struct sock_filter *const filter =
+               tail_memdup(bpf_filter, sizeof(bpf_filter));
+       void *const efault = filter + ARRAY_SIZE(bpf_filter);
+       TAIL_ALLOC_OBJECT_CONST_PTR(struct sock_fprog, prog);
+       TAIL_ALLOC_OBJECT_CONST_PTR(socklen_t, len);
+
+       prog->len = ARRAY_SIZE(bpf_filter);
+       prog->filter = filter;
+
+       int fd = socket(AF_INET, SOCK_DGRAM, 0);
+       if (fd < 0)
+               perror_msg_and_skip("socket AF_INET SOCK_DGRAM");
+
+       /* query sock_filter program length -> 0 */
+       *len = BPF_MAXINSNS;
+       rc = get_filter(fd, NULL, len);
+       if (rc)
+               perror_msg_and_skip("getsockopt SOL_SOCKET SO_ATTACH_FILTER");
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER"
+              ", NULL, [%u->0]) = 0\n", fd, BPF_MAXINSNS);
+
+       /* getsockopt NULL optlen - EFAULT */
+       rc = get_filter(fd, NULL, NULL);
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, NULL, NULL)"
+              " = %s\n", fd, errstr);
+
+       /* attach a filter */
+       rc = set_filter(fd, prog, sizeof(*prog));
+       if (rc)
+               perror_msg_and_skip("setsockopt SOL_SOCKET SO_ATTACH_FILTER");
+       printf("setsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, {len=%u, filter=",
+              fd, prog->len);
+       print_filter();
+       printf("}, %u) = 0\n", (unsigned int) sizeof(*prog));
+
+       /* setsockopt optlen is too small - EINVAL */
+       rc = set_filter(fd, prog, sizeof(*prog) - 4);
+       printf("setsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, %p, %u) = %s\n",
+              fd, prog, (unsigned int) sizeof(*prog) - 4, errstr);
+
+#ifdef SO_ATTACH_REUSEPORT_CBPF
+       rc = setsockopt(fd, SOL_SOCKET, SO_ATTACH_REUSEPORT_CBPF,
+                       prog, sizeof(*prog));
+       errstr = sprintrc(rc);
+       printf("setsockopt(%d, SOL_SOCKET, SO_ATTACH_REUSEPORT_CBPF"
+              ", {len=%u, filter=", fd, prog->len);
+       print_filter();
+       printf("}, %u) = %s\n", (unsigned int) sizeof(*prog), errstr);
+#endif
+
+       /* query sock_filter program length -> ARRAY_SIZE(bpf_filter) */
+       *len = 0;
+       rc = get_filter(fd, efault, len);
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, %p"
+              ", [0->%u]) = %s\n",
+              fd, efault, (unsigned int) ARRAY_SIZE(bpf_filter), errstr);
+
+       /* getsockopt optlen is too small - EINVAL */
+       *len = ARRAY_SIZE(bpf_filter) - 1;
+       rc = get_filter(fd, efault, len);
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, %p"
+              ", [%u]) = %s\n",
+              fd, efault, (unsigned int) ARRAY_SIZE(bpf_filter) - 1, errstr);
+
+       /* getsockopt optval EFAULT */
+       *len = ARRAY_SIZE(bpf_filter);
+       rc = get_filter(fd, filter + 1, len);
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, %p"
+              ", [%u]) = %s\n", fd, filter + 1,
+              (unsigned int) ARRAY_SIZE(bpf_filter), errstr);
+
+       /* getsockopt optlen is too large - truncated */
+       *len = ARRAY_SIZE(bpf_filter) + 1;
+       rc = get_filter(fd, filter, len);
+       printf("getsockopt(%d, SOL_SOCKET, SO_ATTACH_FILTER, ", fd);
+       print_filter();
+       printf(", [%u->%d]) = %s\n",
+              (unsigned int) ARRAY_SIZE(bpf_filter) + 1, *len, errstr);
+
+       puts("+++ exited with 0 +++");
+       return 0;
+}