18a272653SPeter Holm#!/bin/sh 28a272653SPeter Holm 38a272653SPeter Holm# 4*4d846d26SWarner Losh# SPDX-License-Identifier: BSD-2-Clause 58a272653SPeter Holm# 68a272653SPeter Holm# Copyright (c) 2019 Dell EMC Isilon 78a272653SPeter Holm# 88a272653SPeter Holm# Redistribution and use in source and binary forms, with or without 98a272653SPeter Holm# modification, are permitted provided that the following conditions 108a272653SPeter Holm# are met: 118a272653SPeter Holm# 1. Redistributions of source code must retain the above copyright 128a272653SPeter Holm# notice, this list of conditions and the following disclaimer. 138a272653SPeter Holm# 2. Redistributions in binary form must reproduce the above copyright 148a272653SPeter Holm# notice, this list of conditions and the following disclaimer in the 158a272653SPeter Holm# documentation and/or other materials provided with the distribution. 168a272653SPeter Holm# 178a272653SPeter Holm# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND 188a272653SPeter Holm# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 198a272653SPeter Holm# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 208a272653SPeter Holm# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 218a272653SPeter Holm# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 228a272653SPeter Holm# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 238a272653SPeter Holm# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 248a272653SPeter Holm# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 258a272653SPeter Holm# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 268a272653SPeter Holm# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 278a272653SPeter Holm# SUCH DAMAGE. 288a272653SPeter Holm# 298a272653SPeter Holm 308a272653SPeter Holm# Regression test for https://reviews.freebsd.org/D20800 318a272653SPeter Holm# "Use a consistent snapshot of the fd's rights in fget_mmap()" 328a272653SPeter Holm# https://people.freebsd.org/~pho/stress/log/mmap37.txt 338a272653SPeter Holm 348a272653SPeter Holm# Reported by syzbot+ae359438769fda1840f8@syzkaller.appspotmail.com 358a272653SPeter Holm# Test scenario suggestion by markj@ 368a272653SPeter Holm# Fixed by r349547 378a272653SPeter Holm 388a272653SPeter Holm. ../default.cfg 398a272653SPeter Holm 408a272653SPeter Holmodir=`pwd` 418a272653SPeter Holmcd /tmp 428a272653SPeter Holmsed '1,/^EOF/d' < $odir/$0 > mmap37.c 438a272653SPeter Holmmycc -o mmap37 -Wall -Wextra -O0 mmap37.c -lpthread || exit 1 448a272653SPeter Holmrm -f mmap37.c 458a272653SPeter Holm 468a272653SPeter Holmset -e 478a272653SPeter Holmmount | grep "on $mntpoint " | grep -q /dev/md && umount -f $mntpoint 488a272653SPeter Holm[ -c /dev/md$mdstart ] && mdconfig -d -u $mdstart 498a272653SPeter Holmmdconfig -a -t swap -s 2g -u $mdstart 508a272653SPeter Holmnewfs $newfs_flags md$mdstart > /dev/null 518a272653SPeter Holmmount /dev/md$mdstart $mntpoint 528a272653SPeter Holmset +e 538a272653SPeter Holm 548a272653SPeter Holmcd $mntpoint 558a272653SPeter Holm/tmp/mmap37 568a272653SPeter Holmcd $odir 578a272653SPeter Holm 588a272653SPeter Holmfor i in `jot 6`; do 598a272653SPeter Holm mount | grep -q "on $mntpoint " || break 608a272653SPeter Holm umount $mntpoint && break || sleep 10 618a272653SPeter Holm [ $i -eq 6 ] && 628a272653SPeter Holm { echo FATAL; fstat -mf $mntpoint; exit 1; } 638a272653SPeter Holmdone 648a272653SPeter Holmmdconfig -d -u $mdstart 658a272653SPeter Holmrm -f /tmp/mmap37 668a272653SPeter Holmexit 678a272653SPeter Holm 688a272653SPeter HolmEOF 698a272653SPeter Holm#include <sys/types.h> 708a272653SPeter Holm#include <sys/mman.h> 718a272653SPeter Holm#include <sys/param.h> 728a272653SPeter Holm 738a272653SPeter Holm#include <err.h> 748a272653SPeter Holm#include <errno.h> 758a272653SPeter Holm#include <fcntl.h> 768a272653SPeter Holm#include <pthread.h> 778a272653SPeter Holm#include <stdio.h> 788a272653SPeter Holm#include <stdlib.h> 798a272653SPeter Holm#include <string.h> 808a272653SPeter Holm#include <unistd.h> 818a272653SPeter Holm#include <unistd.h> 828a272653SPeter Holm 838a272653SPeter Holm#define THREADS 2 848a272653SPeter Holm#define SIZ 0x06400000U /* 100 Mb */ 858a272653SPeter Holm 868a272653SPeter Holmstatic volatile int go; 878a272653SPeter Holmstatic char path[128]; 888a272653SPeter Holm 898a272653SPeter Holmvoid * 908a272653SPeter Holmthr(void *arg) 918a272653SPeter Holm{ 928a272653SPeter Holm size_t len; 938a272653SPeter Holm void *p; 948a272653SPeter Holm int fd; 958a272653SPeter Holm 968a272653SPeter Holm fd = 0; 978a272653SPeter Holm len = SIZ; 988a272653SPeter Holm if (*(int *)arg == 0) { 998a272653SPeter Holm while (go == 1) { 1008a272653SPeter Holm if ((fd = open(path, 2)) == -1) 1018a272653SPeter Holm err(1,"open()"); 1028a272653SPeter Holm p = mmap(NULL, len, PROT_READ | PROT_WRITE, 1038a272653SPeter Holm MAP_SHARED, fd, 0); 1048a272653SPeter Holm munmap(p, len); 1058a272653SPeter Holm close(fd); 1068a272653SPeter Holm usleep(10); 1078a272653SPeter Holm } 1088a272653SPeter Holm } else { 1098a272653SPeter Holm while (go == 1) { 1108a272653SPeter Holm close(fd); 1118a272653SPeter Holm usleep(10); 1128a272653SPeter Holm } 1138a272653SPeter Holm } 1148a272653SPeter Holm 1158a272653SPeter Holm return (0); 1168a272653SPeter Holm} 1178a272653SPeter Holm 1188a272653SPeter Holmint 1198a272653SPeter Holmmain(void) 1208a272653SPeter Holm{ 1218a272653SPeter Holm pthread_t threads[THREADS]; 1228a272653SPeter Holm size_t len; 1238a272653SPeter Holm int nr[THREADS]; 1248a272653SPeter Holm int i, fd, r; 1258a272653SPeter Holm 1268a272653SPeter Holm sprintf(path, "mmap37.%06d", getpid()); 1278a272653SPeter Holm if ((fd = open(path, O_CREAT | O_TRUNC | O_RDWR, 0622)) == -1) 1288a272653SPeter Holm err(1,"open()"); 1298a272653SPeter Holm len = SIZ; 1308a272653SPeter Holm if (ftruncate(fd, len) == -1) 1318a272653SPeter Holm err(1, "ftruncate"); 1328a272653SPeter Holm close(fd); 1338a272653SPeter Holm 1348a272653SPeter Holm go = 1; 1358a272653SPeter Holm for (i = 0; i < THREADS; i++) { 1368a272653SPeter Holm nr[i] = i; 1378a272653SPeter Holm if ((r = pthread_create(&threads[i], NULL, thr, 1388a272653SPeter Holm (void *)&nr[i])) != 0) 1398a272653SPeter Holm errc(1, r, "pthread_create()"); 1408a272653SPeter Holm } 1418a272653SPeter Holm 1428a272653SPeter Holm sleep(30); 1438a272653SPeter Holm go = 0; 1448a272653SPeter Holm 1458a272653SPeter Holm for (i = 0; i < THREADS; i++) { 1468a272653SPeter Holm if ((r = pthread_join(threads[i], NULL)) != 0) 1478a272653SPeter Holm errc(1, r, "pthread_join(%d)", i); 1488a272653SPeter Holm } 1498a272653SPeter Holm if (unlink(path) == -1) 1508a272653SPeter Holm err(1, "unlink(%s)", path); 1518a272653SPeter Holm 1528a272653SPeter Holm return (0); 1538a272653SPeter Holm} 154