1 /*-
2 * Copyright (c) 2018 John Baldwin <jhb@FreeBSD.org>
3 *
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that the following conditions
6 * are met:
7 * 1. Redistributions of source code must retain the above copyright
8 * notice, this list of conditions and the following disclaimer.
9 * 2. Redistributions in binary form must reproduce the above copyright
10 * notice, this list of conditions and the following disclaimer in the
11 * documentation and/or other materials provided with the distribution.
12 *
13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
14 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
16 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
17 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
18 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
19 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
20 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
21 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
22 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
23 * SUCH DAMAGE.
24 */
25
26 #include <sys/capsicum.h>
27 #include <sys/filio.h>
28 #include <sys/socket.h>
29 #include <sys/wait.h>
30 #include <netinet/in.h>
31 #include <stdio.h>
32 #include <stdlib.h>
33 #include <unistd.h>
34
35 #include <atf-c.h>
36
37 #include "freebsd_test_suite/macros.h"
38
39 /*
40 * A variant of ATF_REQUIRE that is suitable for use in child
41 * processes. This only works if the parent process is tripped up by
42 * the early exit and fails some requirement itself.
43 */
44 #define CHILD_REQUIRE(exp) do { \
45 if (!(exp)) \
46 child_fail_require(__FILE__, __LINE__, \
47 #exp " not met"); \
48 } while (0)
49
50 static __dead2 void
child_fail_require(const char * file,int line,const char * str)51 child_fail_require(const char *file, int line, const char *str)
52 {
53 char buf[128];
54
55 snprintf(buf, sizeof(buf), "%s:%d: %s\n", file, line, str);
56 write(2, buf, strlen(buf));
57 _exit(32);
58 }
59
60 /*
61 * Exercise the edge case of a custom ioctl list being copied from a
62 * listen socket to an accepted socket.
63 */
64 ATF_TC_WITHOUT_HEAD(cap_ioctls__listen_copy);
ATF_TC_BODY(cap_ioctls__listen_copy,tc)65 ATF_TC_BODY(cap_ioctls__listen_copy, tc)
66 {
67 struct sockaddr_in sin;
68 cap_rights_t rights;
69 u_long cmds[] = { FIONREAD };
70 socklen_t len;
71 pid_t pid;
72 char dummy;
73 int s[2], status;
74
75 ATF_REQUIRE_FEATURE("security_capabilities");
76
77 s[0] = socket(AF_INET, SOCK_STREAM, 0);
78 ATF_REQUIRE(s[0] > 0);
79
80 /* Bind to an arbitrary unused port. */
81 memset(&sin, 0, sizeof(sin));
82 sin.sin_len = sizeof(sin);
83 sin.sin_family = AF_INET;
84 sin.sin_port = 0;
85 sin.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
86 ATF_REQUIRE(bind(s[0], (struct sockaddr *)&sin, sizeof(sin)) == 0);
87
88 CHILD_REQUIRE(listen(s[0], 1) == 0);
89
90 len = sizeof(sin);
91 ATF_REQUIRE(getsockname(s[0], (struct sockaddr *)&sin, &len) == 0);
92 ATF_REQUIRE(len == sizeof(sin));
93
94 cap_rights_init(&rights, CAP_ACCEPT, CAP_IOCTL);
95 ATF_REQUIRE(cap_rights_limit(s[0], &rights) == 0);
96 ATF_REQUIRE(cap_ioctls_limit(s[0], cmds, nitems(cmds)) == 0);
97
98 pid = fork();
99 if (pid == 0) {
100 s[1] = accept(s[0], NULL, NULL);
101 CHILD_REQUIRE(s[1] > 0);
102
103 /* Close both sockets during exit(). */
104 exit(0);
105 }
106
107 ATF_REQUIRE(pid > 0);
108
109 ATF_REQUIRE(close(s[0]) == 0);
110 s[1] = socket(AF_INET, SOCK_STREAM, 0);
111 ATF_REQUIRE(s[1] > 0);
112 ATF_REQUIRE(connect(s[1], (struct sockaddr *)&sin, sizeof(sin)) == 0);
113 ATF_REQUIRE(read(s[1], &dummy, sizeof(dummy)) == 0);
114 ATF_REQUIRE(close(s[1]) == 0);
115
116 ATF_REQUIRE(wait(&status) == pid);
117 ATF_REQUIRE(WIFEXITED(status));
118 ATF_REQUIRE(WEXITSTATUS(status) == 0);
119 }
120
ATF_TP_ADD_TCS(tp)121 ATF_TP_ADD_TCS(tp)
122 {
123
124 ATF_TP_ADD_TC(tp, cap_ioctls__listen_copy);
125
126 return (atf_no_error());
127 }
128