1*63d1fd59SEnji Cooper /* $NetBSD: t_socket.c,v 1.5 2017/01/13 21:30:41 christos Exp $ */ 257718be8SEnji Cooper 357718be8SEnji Cooper #include <sys/types.h> 457718be8SEnji Cooper #include <sys/mount.h> 557718be8SEnji Cooper #include <sys/socket.h> 657718be8SEnji Cooper #include <sys/un.h> 757718be8SEnji Cooper 857718be8SEnji Cooper #include <rump/rump.h> 957718be8SEnji Cooper #include <rump/rump_syscalls.h> 1057718be8SEnji Cooper 1157718be8SEnji Cooper #include <atf-c.h> 1257718be8SEnji Cooper #include <fcntl.h> 1357718be8SEnji Cooper #include <err.h> 1457718be8SEnji Cooper #include <errno.h> 1557718be8SEnji Cooper #include <stdio.h> 1657718be8SEnji Cooper #include <stdlib.h> 1757718be8SEnji Cooper #include <string.h> 1857718be8SEnji Cooper #include <unistd.h> 1957718be8SEnji Cooper #include <util.h> 2057718be8SEnji Cooper 21*63d1fd59SEnji Cooper #include "h_macros.h" 2257718be8SEnji Cooper 2357718be8SEnji Cooper ATF_TC(cmsg_sendfd_bounds); 2457718be8SEnji Cooper ATF_TC_HEAD(cmsg_sendfd_bounds, tc) 2557718be8SEnji Cooper { 2657718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "Checks that attempting to pass an " 2757718be8SEnji Cooper "invalid fd returns an error"); 2857718be8SEnji Cooper } 2957718be8SEnji Cooper 3057718be8SEnji Cooper ATF_TC_BODY(cmsg_sendfd_bounds, tc) 3157718be8SEnji Cooper { 3257718be8SEnji Cooper struct cmsghdr *cmp; 3357718be8SEnji Cooper struct msghdr msg; 3457718be8SEnji Cooper struct iovec iov; 3557718be8SEnji Cooper int s[2]; 3657718be8SEnji Cooper int fd; 3757718be8SEnji Cooper 3857718be8SEnji Cooper rump_init(); 3957718be8SEnji Cooper 4057718be8SEnji Cooper if (rump_sys_socketpair(AF_LOCAL, SOCK_STREAM, 0, s) == -1) 4157718be8SEnji Cooper atf_tc_fail("rump_sys_socket"); 4257718be8SEnji Cooper 4357718be8SEnji Cooper cmp = malloc(CMSG_SPACE(sizeof(int))); 4457718be8SEnji Cooper 4557718be8SEnji Cooper iov.iov_base = &fd; 4657718be8SEnji Cooper iov.iov_len = sizeof(int); 4757718be8SEnji Cooper 4857718be8SEnji Cooper cmp->cmsg_level = SOL_SOCKET; 4957718be8SEnji Cooper cmp->cmsg_type = SCM_RIGHTS; 5057718be8SEnji Cooper cmp->cmsg_len = CMSG_LEN(sizeof(int)); 5157718be8SEnji Cooper 5257718be8SEnji Cooper msg.msg_iov = &iov; 5357718be8SEnji Cooper msg.msg_iovlen = 1; 5457718be8SEnji Cooper msg.msg_name = NULL; 5557718be8SEnji Cooper msg.msg_namelen = 0; 5657718be8SEnji Cooper msg.msg_control = cmp; 5757718be8SEnji Cooper msg.msg_controllen = CMSG_SPACE(sizeof(int)); 5857718be8SEnji Cooper 5957718be8SEnji Cooper /* 6057718be8SEnji Cooper * ERROR HERE: trying to pass invalid fd 6157718be8SEnji Cooper * (This value was previously directly used to index the fd 6257718be8SEnji Cooper * array and therefore we are passing a hyperspace index) 6357718be8SEnji Cooper */ 6457718be8SEnji Cooper *(int *)CMSG_DATA(cmp) = 0x12345678; 6557718be8SEnji Cooper 6657718be8SEnji Cooper rump_sys_sendmsg(s[0], &msg, 0); 6757718be8SEnji Cooper if (errno != EBADF) 6857718be8SEnji Cooper atf_tc_fail("descriptor passing failed: expected EBADF (9), " 6957718be8SEnji Cooper "got %d\n(%s)", errno, strerror(errno)); 7057718be8SEnji Cooper } 7157718be8SEnji Cooper 7257718be8SEnji Cooper 7357718be8SEnji Cooper ATF_TC(cmsg_sendfd); 7457718be8SEnji Cooper ATF_TC_HEAD(cmsg_sendfd, tc) 7557718be8SEnji Cooper { 7657718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "Checks that fd passing works"); 77640235e2SEnji Cooper atf_tc_set_md_var(tc, "timeout", "10"); 7857718be8SEnji Cooper } 7957718be8SEnji Cooper 8057718be8SEnji Cooper ATF_TC_BODY(cmsg_sendfd, tc) 8157718be8SEnji Cooper { 8257718be8SEnji Cooper char buf[128]; 8357718be8SEnji Cooper struct cmsghdr *cmp; 8457718be8SEnji Cooper struct msghdr msg; 8557718be8SEnji Cooper struct sockaddr_un sun; 8657718be8SEnji Cooper struct lwp *l1; 8757718be8SEnji Cooper struct iovec iov; 8857718be8SEnji Cooper socklen_t sl; 8957718be8SEnji Cooper int s1, s2, sgot; 9057718be8SEnji Cooper int rfd, fd[2], storage; 9157718be8SEnji Cooper 9257718be8SEnji Cooper rump_init(); 9357718be8SEnji Cooper 9457718be8SEnji Cooper RZ(rump_pub_lwproc_rfork(RUMP_RFCFDG)); 9557718be8SEnji Cooper l1 = rump_pub_lwproc_curlwp(); 9657718be8SEnji Cooper 9757718be8SEnji Cooper /* create unix socket and bind it to a path */ 9857718be8SEnji Cooper memset(&sun, 0, sizeof(sun)); 9957718be8SEnji Cooper sun.sun_family = AF_LOCAL; 10057718be8SEnji Cooper #define SOCKPATH "/com" 10157718be8SEnji Cooper strncpy(sun.sun_path, SOCKPATH, sizeof(SOCKPATH)); 10257718be8SEnji Cooper s1 = rump_sys_socket(AF_LOCAL, SOCK_STREAM, 0); 10357718be8SEnji Cooper if (s1 == -1) 10457718be8SEnji Cooper atf_tc_fail_errno("socket 1"); 10557718be8SEnji Cooper if (rump_sys_bind(s1, (struct sockaddr *)&sun, SUN_LEN(&sun)) == -1) 10657718be8SEnji Cooper atf_tc_fail_errno("socket 1 bind"); 10757718be8SEnji Cooper if (rump_sys_listen(s1, 1) == -1) 10857718be8SEnji Cooper atf_tc_fail_errno("socket 1 listen"); 10957718be8SEnji Cooper 11057718be8SEnji Cooper /* create second process for test */ 11157718be8SEnji Cooper RZ(rump_pub_lwproc_rfork(RUMP_RFCFDG)); 11257718be8SEnji Cooper (void)rump_pub_lwproc_curlwp(); 11357718be8SEnji Cooper 11457718be8SEnji Cooper /* connect to unix domain socket */ 11557718be8SEnji Cooper memset(&sun, 0, sizeof(sun)); 11657718be8SEnji Cooper sun.sun_family = AF_LOCAL; 11757718be8SEnji Cooper strncpy(sun.sun_path, SOCKPATH, sizeof(SOCKPATH)); 11857718be8SEnji Cooper s2 = rump_sys_socket(AF_LOCAL, SOCK_STREAM, 0); 11957718be8SEnji Cooper if (s2 == -1) 12057718be8SEnji Cooper atf_tc_fail_errno("socket 2"); 12157718be8SEnji Cooper if (rump_sys_connect(s2, (struct sockaddr *)&sun, SUN_LEN(&sun)) == -1) 12257718be8SEnji Cooper atf_tc_fail_errno("socket 2 connect"); 12357718be8SEnji Cooper 12457718be8SEnji Cooper /* open a pipe and write stuff to it */ 12557718be8SEnji Cooper if (rump_sys_pipe(fd) == -1) 12657718be8SEnji Cooper atf_tc_fail_errno("can't open pipe"); 12757718be8SEnji Cooper #define MAGICSTRING "duam xnaht" 12857718be8SEnji Cooper if (rump_sys_write(fd[1], MAGICSTRING, sizeof(MAGICSTRING)) != 12957718be8SEnji Cooper sizeof(MAGICSTRING)) 13057718be8SEnji Cooper atf_tc_fail_errno("pipe write"); /* XXX: errno */ 13157718be8SEnji Cooper 13257718be8SEnji Cooper cmp = malloc(CMSG_SPACE(sizeof(int))); 13357718be8SEnji Cooper 13457718be8SEnji Cooper iov.iov_base = &storage; 13557718be8SEnji Cooper iov.iov_len = sizeof(int); 13657718be8SEnji Cooper 13757718be8SEnji Cooper cmp->cmsg_level = SOL_SOCKET; 13857718be8SEnji Cooper cmp->cmsg_type = SCM_RIGHTS; 13957718be8SEnji Cooper cmp->cmsg_len = CMSG_LEN(sizeof(int)); 14057718be8SEnji Cooper 14157718be8SEnji Cooper msg.msg_iov = &iov; 14257718be8SEnji Cooper msg.msg_iovlen = 1; 14357718be8SEnji Cooper msg.msg_name = NULL; 14457718be8SEnji Cooper msg.msg_namelen = 0; 14557718be8SEnji Cooper msg.msg_control = cmp; 14657718be8SEnji Cooper msg.msg_controllen = CMSG_SPACE(sizeof(int)); 14757718be8SEnji Cooper *(int *)CMSG_DATA(cmp) = fd[0]; 14857718be8SEnji Cooper 14957718be8SEnji Cooper /* pass the fd */ 15057718be8SEnji Cooper if (rump_sys_sendmsg(s2, &msg, 0) == -1) 15157718be8SEnji Cooper atf_tc_fail_errno("sendmsg failed"); 15257718be8SEnji Cooper 15357718be8SEnji Cooper /* 15457718be8SEnji Cooper * We will read to the same cmsg space. Overwrite the space 15557718be8SEnji Cooper * with an invalid fd to make sure we get an explicit error 15657718be8SEnji Cooper * if we don't manage to read the fd. 15757718be8SEnji Cooper */ 15857718be8SEnji Cooper *(int *)CMSG_DATA(cmp) = -1; 15957718be8SEnji Cooper 16057718be8SEnji Cooper /* switch back to original proc */ 16157718be8SEnji Cooper rump_pub_lwproc_switch(l1); 16257718be8SEnji Cooper 16357718be8SEnji Cooper /* accept connection and read fd */ 16457718be8SEnji Cooper sl = sizeof(sun); 16557718be8SEnji Cooper sgot = rump_sys_accept(s1, (struct sockaddr *)&sun, &sl); 16657718be8SEnji Cooper if (sgot == -1) 16757718be8SEnji Cooper atf_tc_fail_errno("accept"); 16857718be8SEnji Cooper if (rump_sys_recvmsg(sgot, &msg, 0) == -1) 16957718be8SEnji Cooper atf_tc_fail_errno("recvmsg failed"); 17057718be8SEnji Cooper rfd = *(int *)CMSG_DATA(cmp); 17157718be8SEnji Cooper 17257718be8SEnji Cooper /* read from the fd */ 17357718be8SEnji Cooper memset(buf, 0, sizeof(buf)); 17457718be8SEnji Cooper if (rump_sys_read(rfd, buf, sizeof(buf)) == -1) 17557718be8SEnji Cooper atf_tc_fail_errno("read rfd"); 17657718be8SEnji Cooper 17757718be8SEnji Cooper /* check that we got the right stuff */ 17857718be8SEnji Cooper if (strcmp(buf, MAGICSTRING) != 0) 17957718be8SEnji Cooper atf_tc_fail("expected \"%s\", got \"%s\"", MAGICSTRING, buf); 18057718be8SEnji Cooper } 18157718be8SEnji Cooper 18257718be8SEnji Cooper ATF_TC(sock_cloexec); 18357718be8SEnji Cooper ATF_TC_HEAD(sock_cloexec, tc) 18457718be8SEnji Cooper { 18557718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "SOCK_CLOEXEC kernel invariant failure"); 18657718be8SEnji Cooper } 18757718be8SEnji Cooper 18857718be8SEnji Cooper ATF_TC_BODY(sock_cloexec, tc) 18957718be8SEnji Cooper { 19057718be8SEnji Cooper 19157718be8SEnji Cooper rump_init(); 19257718be8SEnji Cooper rump_pub_lwproc_rfork(RUMP_RFFDG); 19357718be8SEnji Cooper if (rump_sys_socket(-1, SOCK_CLOEXEC, 0) != -1) 19457718be8SEnji Cooper atf_tc_fail("invalid socket parameters unexpectedly worked"); 19557718be8SEnji Cooper rump_pub_lwproc_releaselwp(); 19657718be8SEnji Cooper } 19757718be8SEnji Cooper 19857718be8SEnji Cooper ATF_TP_ADD_TCS(tp) 19957718be8SEnji Cooper { 20057718be8SEnji Cooper ATF_TP_ADD_TC(tp, cmsg_sendfd); 20157718be8SEnji Cooper ATF_TP_ADD_TC(tp, cmsg_sendfd_bounds); 20257718be8SEnji Cooper ATF_TP_ADD_TC(tp, sock_cloexec); 20357718be8SEnji Cooper 20457718be8SEnji Cooper return atf_no_error(); 20557718be8SEnji Cooper } 206