Changes in Makefile

b0334450aa527ccbac7a3c37d1ba75ef96c7be91 - include: ssp: fortify

Sun, 18 May 2025 19:55:23 +0200

include: ssp: fortify sig2str(3)Reviewed by: imp, kib, des, jillesPull Request: https://github.com/freebsd/freebsd-src/pull/1696Closes: https://github.com/freebsd/freebsd-src/pull/1696 List of files: /freebsd/lib/libc/tests/secure/Makefile

85242b59d17dcbfbc82afea9d4232006df074210 - libc: tests: fix luacheck warnings in the fortification test generator

Thu, 20 Mar 2025 05:42:57 +0100

libc: tests: fix luacheck warnings in the fortification test generatorAll of these are simple shadowing that don't need to happen; we'repassing the shadowed value through in every case anyways, just use itin the closure in a more lua-natural fashion.While we're here, lint the generator every time we generate tests toensure that we don't regress without having to remember to manuallyrun luacheck.Reported by: jlduranReviewed by: jlduran, markjDifferential Revision: https://reviews.freebsd.org/D49235 List of files: /freebsd/lib/libc/tests/secure/Makefile

1f155d48f878495d31592c59cab82f975c210ad8 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:12 +0200

include: ssp: fortify The entire recv*() implementation set is ripe for opportunities tovalidate, so do what we can with what we have.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45686 List of files: /freebsd/lib/libc/tests/secure/Makefile

2aba0eea3ffffce74f9d8df20e0aaf49ea6d76c3 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:12 +0200

include: ssp: fortify Notably sanity check indices passed to the FD_*() macros against thesize of the fd_set itself.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45685 List of files: /freebsd/lib/libc/tests/secure/Makefile

1ace24b30cad59c8ae509d0c690aa55b8df73136 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:12 +0200

include: ssp: fortify Check both the buffer size of the iov object itself, as well as thatof each indidvidually io base.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45684 List of files: /freebsd/lib/libc/tests/secure/Makefile

062d9380b98663eb2a4a3d7ce9e919e743984060 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:11 +0200

include: ssp: fortify That is to say, fortify getrandom(2).Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45683 List of files: /freebsd/lib/libc/tests/secure/Makefile

b53d7aa88fd5a5e8a67dd71ea7332fa473595d28 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:11 +0200

include: ssp: fortify This includes all of the w*() equivalents to str*()/mem*() implementedin more or less the same way. For these ones, we'll just useheader-only implementations from the start to stop further clutteringthe libc symbol table.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45682 List of files: /freebsd/lib/libc/tests/secure/Makefile

d0b7445904f592bf379d64932fb6f1fdc29c4aa7 - include: ssp: fortify

Sat, 13 Jul 2024 07:16:11 +0200

include: ssp: fortify The immediately obvious and attractive targets from arearc4random_buf(3) and realpath(3) -- scraping the header didn't revealmuch else of interest.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45681 List of files: /freebsd/lib/libc/tests/secure/Makefile

88276dfbf19e3c0dbd1abee5c2e18c8a4a8c5559 - include: ssp: fortify poll/ppoll from

Sat, 13 Jul 2024 07:16:11 +0200

include: ssp: fortify poll/ppoll from For poll/ppoll we just need to bounds-check the poll array that we'reabout to write out to.Reviewed by: kib, markj (earlier version)Sponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45680 List of files: /freebsd/lib/libc/tests/secure/Makefile

020d003c86367bb5751b6d58fb58611242802c7f - libc: tests: add testing infrastructure for _FORTIFY_SOURCE

Sat, 13 Jul 2024 07:16:10 +0200

libc: tests: add testing infrastructure for _FORTIFY_SOURCEThe _FORTIFY_SOURCE tests will be generated by a lua script to avoid alot of redundancy in writing these tests. For each function that we'refortifying, the plan is to test at least the following three scenarios: - Writing up to one byte before the end of the buffer, - Writing up to the end of the buffer, - Writing one byte past the end of the bufferThe buffer is shoved into a struct on the stack to guarantee a stacklayout in which we have a valid byte after the buffer so that level 2fortification will trip and we can have confidence that it wasn't someother stack/memory protection instead.The generated tests are divided roughly into which header we'reattributing them to so that we can parallelize the build -- the full setis a bit over 9000 lines of C and takes 11s to build on the hardwarethat I'm testing on if it's a single monolothic file.Reviewed by: markjSponsored by: Klara, Inc.Sponsored by: StormshieldDifferential Revision: https://reviews.freebsd.org/D45678 List of files: /freebsd/lib/libc/tests/secure/Makefile