126860105SChristian Brauner /* SPDX-License-Identifier: GPL-2.0 */ 226860105SChristian Brauner /* Helpers shared by the binfmt_misc selftests. */ 326860105SChristian Brauner #ifndef __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H 426860105SChristian Brauner #define __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H 526860105SChristian Brauner 687c50a58SChristian Brauner #include <elf.h> 726860105SChristian Brauner #include <errno.h> 826860105SChristian Brauner #include <fcntl.h> 926860105SChristian Brauner #include <libgen.h> 1026860105SChristian Brauner #include <limits.h> 1187c50a58SChristian Brauner #include <link.h> 1226860105SChristian Brauner #include <stdbool.h> 1326860105SChristian Brauner #include <stdio.h> 147baee96fSChristian Brauner #include <stdlib.h> 1526860105SChristian Brauner #include <string.h> 1626860105SChristian Brauner #include <sys/mount.h> 177baee96fSChristian Brauner #include <sys/types.h> 187baee96fSChristian Brauner #include <sys/wait.h> 1926860105SChristian Brauner #include <unistd.h> 2026860105SChristian Brauner 2126860105SChristian Brauner #define BINFMT_DIR "/proc/sys/fs/binfmt_misc" 2226860105SChristian Brauner #define BINFMT_REG BINFMT_DIR "/register" 2326860105SChristian Brauner 247baee96fSChristian Brauner /* comm holds 15 usable chars; a read of /proc/self/comm appends a newline. */ 257baee96fSChristian Brauner #define TASK_COMM_LEN 16 267baee96fSChristian Brauner 277baee96fSChristian Brauner /* The canonical payload argv: run_payload() passes it, the payloads assert it. */ 287baee96fSChristian Brauner #define PAYLOAD_ARGV0 "payload-argv0" 297baee96fSChristian Brauner #define PAYLOAD_ARG1 "argone" 307baee96fSChristian Brauner #define PAYLOAD_ARG2 "argtwo" 317baee96fSChristian Brauner 3287c50a58SChristian Brauner /* Marker the loader tests poke into the payload's e_ident padding. */ 3387c50a58SChristian Brauner #define LOADER_MARKER "LDRTST" 3487c50a58SChristian Brauner 357baee96fSChristian Brauner /* Exit status run_payload() reports when the exec was refused as unhandled. */ 367baee96fSChristian Brauner #define RUN_ENOEXEC 42 377baee96fSChristian Brauner 3826860105SChristian Brauner static inline int copy_file(const char *src, const char *dst) 3926860105SChristian Brauner { 4026860105SChristian Brauner char buf[4096]; 4126860105SChristian Brauner int in, out; 4226860105SChristian Brauner ssize_t n; 4326860105SChristian Brauner 4426860105SChristian Brauner in = open(src, O_RDONLY); 4526860105SChristian Brauner if (in < 0) 4626860105SChristian Brauner return -1; 4726860105SChristian Brauner /* The tests share /tmp, so never write through a name they don't own. */ 4826860105SChristian Brauner unlink(dst); 4926860105SChristian Brauner out = open(dst, O_WRONLY | O_CREAT | O_EXCL, 0755); 5026860105SChristian Brauner if (out < 0) { 5126860105SChristian Brauner close(in); 5226860105SChristian Brauner return -1; 5326860105SChristian Brauner } 5426860105SChristian Brauner while ((n = read(in, buf, sizeof(buf))) > 0) { 5526860105SChristian Brauner if (write(out, buf, n) != n) { 5626860105SChristian Brauner close(in); 5726860105SChristian Brauner close(out); 5826860105SChristian Brauner return -1; 5926860105SChristian Brauner } 6026860105SChristian Brauner } 6126860105SChristian Brauner close(in); 6226860105SChristian Brauner close(out); 6326860105SChristian Brauner return n < 0 ? -1 : 0; 6426860105SChristian Brauner } 6526860105SChristian Brauner 6626860105SChristian Brauner /* Write @rule to the register file, preserving the write's errno. */ 6726860105SChristian Brauner static inline int write_reg(const char *rule) 6826860105SChristian Brauner { 6926860105SChristian Brauner int fd, saved; 7026860105SChristian Brauner ssize_t n; 7126860105SChristian Brauner 7226860105SChristian Brauner fd = open(BINFMT_REG, O_WRONLY); 7326860105SChristian Brauner if (fd < 0) 7426860105SChristian Brauner return -1; 7526860105SChristian Brauner n = write(fd, rule, strlen(rule)); 7626860105SChristian Brauner saved = errno; 7726860105SChristian Brauner close(fd); 7826860105SChristian Brauner errno = saved; 7926860105SChristian Brauner return n < 0 ? -1 : 0; 8026860105SChristian Brauner } 8126860105SChristian Brauner 8226860105SChristian Brauner static inline void unregister(const char *name) 8326860105SChristian Brauner { 8426860105SChristian Brauner char path[PATH_MAX]; 8526860105SChristian Brauner int fd; 8626860105SChristian Brauner 8726860105SChristian Brauner snprintf(path, sizeof(path), BINFMT_DIR "/%s", name); 8826860105SChristian Brauner fd = open(path, O_WRONLY); 8926860105SChristian Brauner if (fd >= 0) { 9026860105SChristian Brauner if (write(fd, "-1", 2) < 0) 9126860105SChristian Brauner ; /* best effort */ 9226860105SChristian Brauner close(fd); 9326860105SChristian Brauner } 9426860105SChristian Brauner } 9526860105SChristian Brauner 96*6bd0c7abSChristian Brauner /* Write @line to @entry's file, reporting the errno it was refused with. */ 97*6bd0c7abSChristian Brauner static inline int entry_command(const char *entry, const char *line) 98*6bd0c7abSChristian Brauner { 99*6bd0c7abSChristian Brauner char path[PATH_MAX]; 100*6bd0c7abSChristian Brauner int fd, retval = 0; 101*6bd0c7abSChristian Brauner size_t len = strlen(line); 102*6bd0c7abSChristian Brauner 103*6bd0c7abSChristian Brauner snprintf(path, sizeof(path), BINFMT_DIR "/%s", entry); 104*6bd0c7abSChristian Brauner fd = open(path, O_WRONLY | O_CLOEXEC); 105*6bd0c7abSChristian Brauner if (fd < 0) 106*6bd0c7abSChristian Brauner return -errno; 107*6bd0c7abSChristian Brauner if (write(fd, line, len) != (ssize_t)len) 108*6bd0c7abSChristian Brauner retval = -errno; 109*6bd0c7abSChristian Brauner close(fd); 110*6bd0c7abSChristian Brauner return retval; 111*6bd0c7abSChristian Brauner } 112*6bd0c7abSChristian Brauner 113*6bd0c7abSChristian Brauner /* Does @entry's file report @line? */ 114*6bd0c7abSChristian Brauner static inline bool entry_shows(const char *entry, const char *line) 115*6bd0c7abSChristian Brauner { 116*6bd0c7abSChristian Brauner char path[PATH_MAX], buf[PATH_MAX]; 117*6bd0c7abSChristian Brauner bool found = false; 118*6bd0c7abSChristian Brauner FILE *fp; 119*6bd0c7abSChristian Brauner 120*6bd0c7abSChristian Brauner snprintf(path, sizeof(path), BINFMT_DIR "/%s", entry); 121*6bd0c7abSChristian Brauner fp = fopen(path, "r"); 122*6bd0c7abSChristian Brauner if (!fp) 123*6bd0c7abSChristian Brauner return false; 124*6bd0c7abSChristian Brauner while (fgets(buf, sizeof(buf), fp)) { 125*6bd0c7abSChristian Brauner buf[strcspn(buf, "\n")] = '\0'; 126*6bd0c7abSChristian Brauner if (!strcmp(buf, line)) { 127*6bd0c7abSChristian Brauner found = true; 128*6bd0c7abSChristian Brauner break; 129*6bd0c7abSChristian Brauner } 130*6bd0c7abSChristian Brauner } 131*6bd0c7abSChristian Brauner fclose(fp); 132*6bd0c7abSChristian Brauner return found; 133*6bd0c7abSChristian Brauner } 134*6bd0c7abSChristian Brauner 13526860105SChristian Brauner /* Mount binfmt_misc unless it already is, and report whether it is usable. */ 13626860105SChristian Brauner static inline bool binfmt_misc_available(void) 13726860105SChristian Brauner { 13826860105SChristian Brauner if (access(BINFMT_REG, F_OK) < 0) 13926860105SChristian Brauner mount("binfmt_misc", BINFMT_DIR, "binfmt_misc", 0, NULL); 14026860105SChristian Brauner return access(BINFMT_REG, F_OK) == 0; 14126860105SChristian Brauner } 14226860105SChristian Brauner 14326860105SChristian Brauner /* Absolute path of @name in the directory this test was built into. */ 14426860105SChristian Brauner static inline int artifact_path(char *out, size_t sz, const char *name) 14526860105SChristian Brauner { 14626860105SChristian Brauner char exe[PATH_MAX]; 14726860105SChristian Brauner ssize_t n; 14826860105SChristian Brauner 14926860105SChristian Brauner n = readlink("/proc/self/exe", exe, sizeof(exe) - 1); 15026860105SChristian Brauner if (n < 0) 15126860105SChristian Brauner return -1; 15226860105SChristian Brauner exe[n] = '\0'; 15326860105SChristian Brauner if ((size_t)snprintf(out, sz, "%s/%s", dirname(exe), name) >= sz) 15426860105SChristian Brauner return -1; 15526860105SChristian Brauner return 0; 15626860105SChristian Brauner } 15726860105SChristian Brauner 1587baee96fSChristian Brauner /* Probe kernel support for a registration flag with a throwaway entry. */ 159686585ecSChristian Brauner static inline bool binfmt_flag_supported(char flag) 1607baee96fSChristian Brauner { 1617baee96fSChristian Brauner char rule[64]; 1627baee96fSChristian Brauner 1637baee96fSChristian Brauner snprintf(rule, sizeof(rule), ":bm_flag_probe:E::bmprobe::/bin/true:%c", 1647baee96fSChristian Brauner flag); 1657baee96fSChristian Brauner if (write_reg(rule)) 166686585ecSChristian Brauner return false; 1677baee96fSChristian Brauner unregister("bm_flag_probe"); 168686585ecSChristian Brauner return true; 1697baee96fSChristian Brauner } 1707baee96fSChristian Brauner 1717baee96fSChristian Brauner /* 1727baee96fSChristian Brauner * Run @path with the canonical payload argv and return its exit status, or 1737baee96fSChristian Brauner * RUN_ENOEXEC when the exec itself was refused as unhandled. 1747baee96fSChristian Brauner */ 1757baee96fSChristian Brauner static inline int run_payload(const char *path) 1767baee96fSChristian Brauner { 1777baee96fSChristian Brauner int status; 1787baee96fSChristian Brauner pid_t pid; 1797baee96fSChristian Brauner 1807baee96fSChristian Brauner pid = fork(); 1817baee96fSChristian Brauner if (pid == 0) { 1827baee96fSChristian Brauner execl(path, PAYLOAD_ARGV0, PAYLOAD_ARG1, PAYLOAD_ARG2, 1837baee96fSChristian Brauner (char *)NULL); 1847baee96fSChristian Brauner _exit(errno == ENOEXEC ? RUN_ENOEXEC : 126); 1857baee96fSChristian Brauner } 1867baee96fSChristian Brauner if (pid < 0 || waitpid(pid, &status, 0) != pid || !WIFEXITED(status)) 1877baee96fSChristian Brauner return -1; 1887baee96fSChristian Brauner return WEXITSTATUS(status); 1897baee96fSChristian Brauner } 1907baee96fSChristian Brauner 1917baee96fSChristian Brauner /* Does the exe link name @path? */ 1927baee96fSChristian Brauner static inline bool exe_is(const char *path) 1937baee96fSChristian Brauner { 1947baee96fSChristian Brauner char exe[PATH_MAX], real[PATH_MAX]; 1957baee96fSChristian Brauner ssize_t n; 1967baee96fSChristian Brauner 1977baee96fSChristian Brauner n = readlink("/proc/self/exe", exe, sizeof(exe) - 1); 1987baee96fSChristian Brauner if (n <= 0 || !realpath(path, real)) 1997baee96fSChristian Brauner return false; 2007baee96fSChristian Brauner exe[n] = '\0'; 2017baee96fSChristian Brauner return !strcmp(exe, real); 2027baee96fSChristian Brauner } 2037baee96fSChristian Brauner 2047baee96fSChristian Brauner /* Is comm @name truncated to what a comm can hold? */ 2057baee96fSChristian Brauner static inline bool comm_is(const char *name) 2067baee96fSChristian Brauner { 2077baee96fSChristian Brauner char comm[TASK_COMM_LEN + 2], expect[TASK_COMM_LEN]; 2087baee96fSChristian Brauner ssize_t n; 2097baee96fSChristian Brauner int fd; 2107baee96fSChristian Brauner 2117baee96fSChristian Brauner fd = open("/proc/self/comm", O_RDONLY); 2127baee96fSChristian Brauner if (fd < 0) 2137baee96fSChristian Brauner return false; 2147baee96fSChristian Brauner n = read(fd, comm, sizeof(comm) - 1); 2157baee96fSChristian Brauner close(fd); 2167baee96fSChristian Brauner if (n <= 0) 2177baee96fSChristian Brauner return false; 2187baee96fSChristian Brauner if (comm[n - 1] == '\n') 2197baee96fSChristian Brauner n--; 2207baee96fSChristian Brauner comm[n] = '\0'; 2217baee96fSChristian Brauner snprintf(expect, sizeof(expect), "%s", name); 2227baee96fSChristian Brauner return !strcmp(comm, expect); 2237baee96fSChristian Brauner } 2247baee96fSChristian Brauner 2257baee96fSChristian Brauner /* Opening @path for writing has to fail with ETXTBSY. */ 2267baee96fSChristian Brauner static inline bool write_denied(const char *path) 2277baee96fSChristian Brauner { 2287baee96fSChristian Brauner int fd = open(path, O_WRONLY); 2297baee96fSChristian Brauner 2307baee96fSChristian Brauner if (fd >= 0) { 2317baee96fSChristian Brauner close(fd); 2327baee96fSChristian Brauner return false; 2337baee96fSChristian Brauner } 2347baee96fSChristian Brauner return errno == ETXTBSY; 2357baee96fSChristian Brauner } 2367baee96fSChristian Brauner 23787c50a58SChristian Brauner static inline int patch_file(const char *path, off_t off, const void *data, size_t len) 23887c50a58SChristian Brauner { 23987c50a58SChristian Brauner ssize_t n; 24087c50a58SChristian Brauner int fd; 24187c50a58SChristian Brauner 24287c50a58SChristian Brauner fd = open(path, O_WRONLY); 24387c50a58SChristian Brauner if (fd < 0) 24487c50a58SChristian Brauner return -1; 24587c50a58SChristian Brauner n = pwrite(fd, data, len, off); 24687c50a58SChristian Brauner close(fd); 24787c50a58SChristian Brauner return n == (ssize_t)len ? 0 : -1; 24887c50a58SChristian Brauner } 24987c50a58SChristian Brauner 25087c50a58SChristian Brauner /* start_code and end_code are the 26th and 27th fields of /proc/pid/stat. */ 25187c50a58SChristian Brauner static inline int stat_codes(pid_t pid, unsigned long *start_code, 25287c50a58SChristian Brauner unsigned long *end_code) 25387c50a58SChristian Brauner { 25487c50a58SChristian Brauner char buf[4096], path[64], *p; 25587c50a58SChristian Brauner ssize_t n; 25687c50a58SChristian Brauner int fd, i; 25787c50a58SChristian Brauner 25887c50a58SChristian Brauner snprintf(path, sizeof(path), "/proc/%d/stat", pid); 25987c50a58SChristian Brauner fd = open(path, O_RDONLY); 26087c50a58SChristian Brauner if (fd < 0) 26187c50a58SChristian Brauner return -1; 26287c50a58SChristian Brauner n = read(fd, buf, sizeof(buf) - 1); 26387c50a58SChristian Brauner close(fd); 26487c50a58SChristian Brauner if (n <= 0) 26587c50a58SChristian Brauner return -1; 26687c50a58SChristian Brauner buf[n] = '\0'; 26787c50a58SChristian Brauner 26887c50a58SChristian Brauner /* Skip "pid (comm)", then start_code is the 24th field after it. */ 26987c50a58SChristian Brauner p = strrchr(buf, ')'); 27087c50a58SChristian Brauner if (!p) 27187c50a58SChristian Brauner return -1; 27287c50a58SChristian Brauner p++; 27387c50a58SChristian Brauner for (i = 0; i < 23; i++) { 27487c50a58SChristian Brauner p = strchr(p + 1, ' '); 27587c50a58SChristian Brauner if (!p) 27687c50a58SChristian Brauner return -1; 27787c50a58SChristian Brauner } 27887c50a58SChristian Brauner if (sscanf(p, " %lu %lu", start_code, end_code) != 2) 27987c50a58SChristian Brauner return -1; 28087c50a58SChristian Brauner return 0; 28187c50a58SChristian Brauner } 28287c50a58SChristian Brauner 28387c50a58SChristian Brauner /* Find the system loader through our own PT_INTERP. */ 28487c50a58SChristian Brauner static inline int find_loader(char *out, size_t sz) 28587c50a58SChristian Brauner { 28687c50a58SChristian Brauner ElfW(Ehdr) eh; 28787c50a58SChristian Brauner ElfW(Phdr) ph; 28887c50a58SChristian Brauner int fd, i, ret = -1; 28987c50a58SChristian Brauner 29087c50a58SChristian Brauner fd = open("/proc/self/exe", O_RDONLY); 29187c50a58SChristian Brauner if (fd < 0) 29287c50a58SChristian Brauner return -1; 29387c50a58SChristian Brauner if (pread(fd, &eh, sizeof(eh), 0) != sizeof(eh)) 29487c50a58SChristian Brauner goto out; 29587c50a58SChristian Brauner for (i = 0; i < eh.e_phnum; i++) { 29687c50a58SChristian Brauner if (pread(fd, &ph, sizeof(ph), 29787c50a58SChristian Brauner eh.e_phoff + i * eh.e_phentsize) != sizeof(ph)) 29887c50a58SChristian Brauner goto out; 29987c50a58SChristian Brauner if (ph.p_type != PT_INTERP) 30087c50a58SChristian Brauner continue; 30187c50a58SChristian Brauner if (!ph.p_filesz || ph.p_filesz > sz) 30287c50a58SChristian Brauner goto out; 30387c50a58SChristian Brauner if (pread(fd, out, ph.p_filesz, ph.p_offset) != 30487c50a58SChristian Brauner (ssize_t)ph.p_filesz) 30587c50a58SChristian Brauner goto out; 30687c50a58SChristian Brauner out[ph.p_filesz - 1] = '\0'; 30787c50a58SChristian Brauner ret = 0; 30887c50a58SChristian Brauner break; 30987c50a58SChristian Brauner } 31087c50a58SChristian Brauner out: 31187c50a58SChristian Brauner close(fd); 31287c50a58SChristian Brauner return ret; 31387c50a58SChristian Brauner } 31487c50a58SChristian Brauner 31526860105SChristian Brauner #endif /* __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H */ 316