1 /*- 2 * Copyright (c) 2018 John Baldwin <jhb@FreeBSD.org> 3 * 4 * Redistribution and use in source and binary forms, with or without 5 * modification, are permitted provided that the following conditions 6 * are met: 7 * 1. Redistributions of source code must retain the above copyright 8 * notice, this list of conditions and the following disclaimer. 9 * 2. Redistributions in binary form must reproduce the above copyright 10 * notice, this list of conditions and the following disclaimer in the 11 * documentation and/or other materials provided with the distribution. 12 * 13 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 14 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 15 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 16 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 17 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 18 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 19 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 20 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 21 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 22 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 23 * SUCH DAMAGE. 24 */ 25 26 #include <sys/cdefs.h> 27 __FBSDID("$FreeBSD$"); 28 29 #include <sys/capsicum.h> 30 #include <sys/filio.h> 31 #include <sys/socket.h> 32 #include <sys/wait.h> 33 #include <netinet/in.h> 34 #include <stdio.h> 35 #include <stdlib.h> 36 #include <unistd.h> 37 38 #include <atf-c.h> 39 40 #include "freebsd_test_suite/macros.h" 41 42 /* 43 * A variant of ATF_REQUIRE that is suitable for use in child 44 * processes. This only works if the parent process is tripped up by 45 * the early exit and fails some requirement itself. 46 */ 47 #define CHILD_REQUIRE(exp) do { \ 48 if (!(exp)) \ 49 child_fail_require(__FILE__, __LINE__, \ 50 #exp " not met"); \ 51 } while (0) 52 53 static __dead2 void 54 child_fail_require(const char *file, int line, const char *str) 55 { 56 char buf[128]; 57 58 snprintf(buf, sizeof(buf), "%s:%d: %s\n", file, line, str); 59 write(2, buf, strlen(buf)); 60 _exit(32); 61 } 62 63 /* 64 * Exercise the edge case of a custom ioctl list being copied from a 65 * listen socket to an accepted socket. 66 */ 67 ATF_TC_WITHOUT_HEAD(cap_ioctls__listen_copy); 68 ATF_TC_BODY(cap_ioctls__listen_copy, tc) 69 { 70 struct sockaddr_in sin; 71 cap_rights_t rights; 72 u_long cmds[] = { FIONREAD }; 73 socklen_t len; 74 pid_t pid; 75 char dummy; 76 int s[2], status; 77 78 ATF_REQUIRE_FEATURE("security_capabilities"); 79 80 s[0] = socket(AF_INET, SOCK_STREAM, 0); 81 ATF_REQUIRE(s[0] > 0); 82 83 /* Bind to an arbitrary unused port. */ 84 memset(&sin, 0, sizeof(sin)); 85 sin.sin_len = sizeof(sin); 86 sin.sin_family = AF_INET; 87 sin.sin_port = 0; 88 sin.sin_addr.s_addr = htonl(INADDR_LOOPBACK); 89 ATF_REQUIRE(bind(s[0], (struct sockaddr *)&sin, sizeof(sin)) == 0); 90 91 CHILD_REQUIRE(listen(s[0], 1) == 0); 92 93 len = sizeof(sin); 94 ATF_REQUIRE(getsockname(s[0], (struct sockaddr *)&sin, &len) == 0); 95 ATF_REQUIRE(len == sizeof(sin)); 96 97 cap_rights_init(&rights, CAP_ACCEPT, CAP_IOCTL); 98 ATF_REQUIRE(cap_rights_limit(s[0], &rights) == 0); 99 ATF_REQUIRE(cap_ioctls_limit(s[0], cmds, nitems(cmds)) == 0); 100 101 pid = fork(); 102 if (pid == 0) { 103 s[1] = accept(s[0], NULL, NULL); 104 CHILD_REQUIRE(s[1] > 0); 105 106 /* Close both sockets during exit(). */ 107 exit(0); 108 } 109 110 ATF_REQUIRE(pid > 0); 111 112 ATF_REQUIRE(close(s[0]) == 0); 113 s[1] = socket(AF_INET, SOCK_STREAM, 0); 114 ATF_REQUIRE(s[1] > 0); 115 ATF_REQUIRE(connect(s[1], (struct sockaddr *)&sin, sizeof(sin)) == 0); 116 ATF_REQUIRE(read(s[1], &dummy, sizeof(dummy)) == 0); 117 ATF_REQUIRE(close(s[1]) == 0); 118 119 ATF_REQUIRE(wait(&status) == pid); 120 ATF_REQUIRE(WIFEXITED(status)); 121 ATF_REQUIRE(WEXITSTATUS(status) == 0); 122 } 123 124 ATF_TP_ADD_TCS(tp) 125 { 126 127 ATF_TP_ADD_TC(tp, cap_ioctls__listen_copy); 128 129 return (atf_no_error()); 130 } 131