126860105SChristian Brauner /* SPDX-License-Identifier: GPL-2.0 */ 226860105SChristian Brauner /* Helpers shared by the binfmt_misc selftests. */ 326860105SChristian Brauner #ifndef __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H 426860105SChristian Brauner #define __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H 526860105SChristian Brauner 6*87c50a58SChristian Brauner #include <elf.h> 726860105SChristian Brauner #include <errno.h> 826860105SChristian Brauner #include <fcntl.h> 926860105SChristian Brauner #include <libgen.h> 1026860105SChristian Brauner #include <limits.h> 11*87c50a58SChristian Brauner #include <link.h> 1226860105SChristian Brauner #include <stdbool.h> 1326860105SChristian Brauner #include <stdio.h> 147baee96fSChristian Brauner #include <stdlib.h> 1526860105SChristian Brauner #include <string.h> 1626860105SChristian Brauner #include <sys/mount.h> 177baee96fSChristian Brauner #include <sys/types.h> 187baee96fSChristian Brauner #include <sys/wait.h> 1926860105SChristian Brauner #include <unistd.h> 2026860105SChristian Brauner 2126860105SChristian Brauner #define BINFMT_DIR "/proc/sys/fs/binfmt_misc" 2226860105SChristian Brauner #define BINFMT_REG BINFMT_DIR "/register" 2326860105SChristian Brauner 247baee96fSChristian Brauner /* comm holds 15 usable chars; a read of /proc/self/comm appends a newline. */ 257baee96fSChristian Brauner #define TASK_COMM_LEN 16 267baee96fSChristian Brauner 277baee96fSChristian Brauner /* The canonical payload argv: run_payload() passes it, the payloads assert it. */ 287baee96fSChristian Brauner #define PAYLOAD_ARGV0 "payload-argv0" 297baee96fSChristian Brauner #define PAYLOAD_ARG1 "argone" 307baee96fSChristian Brauner #define PAYLOAD_ARG2 "argtwo" 317baee96fSChristian Brauner 32*87c50a58SChristian Brauner /* Marker the loader tests poke into the payload's e_ident padding. */ 33*87c50a58SChristian Brauner #define LOADER_MARKER "LDRTST" 34*87c50a58SChristian Brauner 357baee96fSChristian Brauner /* Exit status run_payload() reports when the exec was refused as unhandled. */ 367baee96fSChristian Brauner #define RUN_ENOEXEC 42 377baee96fSChristian Brauner 3826860105SChristian Brauner static inline int copy_file(const char *src, const char *dst) 3926860105SChristian Brauner { 4026860105SChristian Brauner char buf[4096]; 4126860105SChristian Brauner int in, out; 4226860105SChristian Brauner ssize_t n; 4326860105SChristian Brauner 4426860105SChristian Brauner in = open(src, O_RDONLY); 4526860105SChristian Brauner if (in < 0) 4626860105SChristian Brauner return -1; 4726860105SChristian Brauner /* The tests share /tmp, so never write through a name they don't own. */ 4826860105SChristian Brauner unlink(dst); 4926860105SChristian Brauner out = open(dst, O_WRONLY | O_CREAT | O_EXCL, 0755); 5026860105SChristian Brauner if (out < 0) { 5126860105SChristian Brauner close(in); 5226860105SChristian Brauner return -1; 5326860105SChristian Brauner } 5426860105SChristian Brauner while ((n = read(in, buf, sizeof(buf))) > 0) { 5526860105SChristian Brauner if (write(out, buf, n) != n) { 5626860105SChristian Brauner close(in); 5726860105SChristian Brauner close(out); 5826860105SChristian Brauner return -1; 5926860105SChristian Brauner } 6026860105SChristian Brauner } 6126860105SChristian Brauner close(in); 6226860105SChristian Brauner close(out); 6326860105SChristian Brauner return n < 0 ? -1 : 0; 6426860105SChristian Brauner } 6526860105SChristian Brauner 6626860105SChristian Brauner /* Write @rule to the register file, preserving the write's errno. */ 6726860105SChristian Brauner static inline int write_reg(const char *rule) 6826860105SChristian Brauner { 6926860105SChristian Brauner int fd, saved; 7026860105SChristian Brauner ssize_t n; 7126860105SChristian Brauner 7226860105SChristian Brauner fd = open(BINFMT_REG, O_WRONLY); 7326860105SChristian Brauner if (fd < 0) 7426860105SChristian Brauner return -1; 7526860105SChristian Brauner n = write(fd, rule, strlen(rule)); 7626860105SChristian Brauner saved = errno; 7726860105SChristian Brauner close(fd); 7826860105SChristian Brauner errno = saved; 7926860105SChristian Brauner return n < 0 ? -1 : 0; 8026860105SChristian Brauner } 8126860105SChristian Brauner 8226860105SChristian Brauner static inline void unregister(const char *name) 8326860105SChristian Brauner { 8426860105SChristian Brauner char path[PATH_MAX]; 8526860105SChristian Brauner int fd; 8626860105SChristian Brauner 8726860105SChristian Brauner snprintf(path, sizeof(path), BINFMT_DIR "/%s", name); 8826860105SChristian Brauner fd = open(path, O_WRONLY); 8926860105SChristian Brauner if (fd >= 0) { 9026860105SChristian Brauner if (write(fd, "-1", 2) < 0) 9126860105SChristian Brauner ; /* best effort */ 9226860105SChristian Brauner close(fd); 9326860105SChristian Brauner } 9426860105SChristian Brauner } 9526860105SChristian Brauner 9626860105SChristian Brauner /* Mount binfmt_misc unless it already is, and report whether it is usable. */ 9726860105SChristian Brauner static inline bool binfmt_misc_available(void) 9826860105SChristian Brauner { 9926860105SChristian Brauner if (access(BINFMT_REG, F_OK) < 0) 10026860105SChristian Brauner mount("binfmt_misc", BINFMT_DIR, "binfmt_misc", 0, NULL); 10126860105SChristian Brauner return access(BINFMT_REG, F_OK) == 0; 10226860105SChristian Brauner } 10326860105SChristian Brauner 10426860105SChristian Brauner /* Absolute path of @name in the directory this test was built into. */ 10526860105SChristian Brauner static inline int artifact_path(char *out, size_t sz, const char *name) 10626860105SChristian Brauner { 10726860105SChristian Brauner char exe[PATH_MAX]; 10826860105SChristian Brauner ssize_t n; 10926860105SChristian Brauner 11026860105SChristian Brauner n = readlink("/proc/self/exe", exe, sizeof(exe) - 1); 11126860105SChristian Brauner if (n < 0) 11226860105SChristian Brauner return -1; 11326860105SChristian Brauner exe[n] = '\0'; 11426860105SChristian Brauner if ((size_t)snprintf(out, sz, "%s/%s", dirname(exe), name) >= sz) 11526860105SChristian Brauner return -1; 11626860105SChristian Brauner return 0; 11726860105SChristian Brauner } 11826860105SChristian Brauner 1197baee96fSChristian Brauner /* Probe kernel support for a registration flag with a throwaway entry. */ 1207baee96fSChristian Brauner static inline int binfmt_flag_supported(char flag) 1217baee96fSChristian Brauner { 1227baee96fSChristian Brauner char rule[64]; 1237baee96fSChristian Brauner 1247baee96fSChristian Brauner snprintf(rule, sizeof(rule), ":bm_flag_probe:E::bmprobe::/bin/true:%c", 1257baee96fSChristian Brauner flag); 1267baee96fSChristian Brauner if (write_reg(rule)) 1277baee96fSChristian Brauner return -1; 1287baee96fSChristian Brauner unregister("bm_flag_probe"); 1297baee96fSChristian Brauner return 0; 1307baee96fSChristian Brauner } 1317baee96fSChristian Brauner 1327baee96fSChristian Brauner /* 1337baee96fSChristian Brauner * Run @path with the canonical payload argv and return its exit status, or 1347baee96fSChristian Brauner * RUN_ENOEXEC when the exec itself was refused as unhandled. 1357baee96fSChristian Brauner */ 1367baee96fSChristian Brauner static inline int run_payload(const char *path) 1377baee96fSChristian Brauner { 1387baee96fSChristian Brauner int status; 1397baee96fSChristian Brauner pid_t pid; 1407baee96fSChristian Brauner 1417baee96fSChristian Brauner pid = fork(); 1427baee96fSChristian Brauner if (pid == 0) { 1437baee96fSChristian Brauner execl(path, PAYLOAD_ARGV0, PAYLOAD_ARG1, PAYLOAD_ARG2, 1447baee96fSChristian Brauner (char *)NULL); 1457baee96fSChristian Brauner _exit(errno == ENOEXEC ? RUN_ENOEXEC : 126); 1467baee96fSChristian Brauner } 1477baee96fSChristian Brauner if (pid < 0 || waitpid(pid, &status, 0) != pid || !WIFEXITED(status)) 1487baee96fSChristian Brauner return -1; 1497baee96fSChristian Brauner return WEXITSTATUS(status); 1507baee96fSChristian Brauner } 1517baee96fSChristian Brauner 1527baee96fSChristian Brauner /* Does the exe link name @path? */ 1537baee96fSChristian Brauner static inline bool exe_is(const char *path) 1547baee96fSChristian Brauner { 1557baee96fSChristian Brauner char exe[PATH_MAX], real[PATH_MAX]; 1567baee96fSChristian Brauner ssize_t n; 1577baee96fSChristian Brauner 1587baee96fSChristian Brauner n = readlink("/proc/self/exe", exe, sizeof(exe) - 1); 1597baee96fSChristian Brauner if (n <= 0 || !realpath(path, real)) 1607baee96fSChristian Brauner return false; 1617baee96fSChristian Brauner exe[n] = '\0'; 1627baee96fSChristian Brauner return !strcmp(exe, real); 1637baee96fSChristian Brauner } 1647baee96fSChristian Brauner 1657baee96fSChristian Brauner /* Is comm @name truncated to what a comm can hold? */ 1667baee96fSChristian Brauner static inline bool comm_is(const char *name) 1677baee96fSChristian Brauner { 1687baee96fSChristian Brauner char comm[TASK_COMM_LEN + 2], expect[TASK_COMM_LEN]; 1697baee96fSChristian Brauner ssize_t n; 1707baee96fSChristian Brauner int fd; 1717baee96fSChristian Brauner 1727baee96fSChristian Brauner fd = open("/proc/self/comm", O_RDONLY); 1737baee96fSChristian Brauner if (fd < 0) 1747baee96fSChristian Brauner return false; 1757baee96fSChristian Brauner n = read(fd, comm, sizeof(comm) - 1); 1767baee96fSChristian Brauner close(fd); 1777baee96fSChristian Brauner if (n <= 0) 1787baee96fSChristian Brauner return false; 1797baee96fSChristian Brauner if (comm[n - 1] == '\n') 1807baee96fSChristian Brauner n--; 1817baee96fSChristian Brauner comm[n] = '\0'; 1827baee96fSChristian Brauner snprintf(expect, sizeof(expect), "%s", name); 1837baee96fSChristian Brauner return !strcmp(comm, expect); 1847baee96fSChristian Brauner } 1857baee96fSChristian Brauner 1867baee96fSChristian Brauner /* Opening @path for writing has to fail with ETXTBSY. */ 1877baee96fSChristian Brauner static inline bool write_denied(const char *path) 1887baee96fSChristian Brauner { 1897baee96fSChristian Brauner int fd = open(path, O_WRONLY); 1907baee96fSChristian Brauner 1917baee96fSChristian Brauner if (fd >= 0) { 1927baee96fSChristian Brauner close(fd); 1937baee96fSChristian Brauner return false; 1947baee96fSChristian Brauner } 1957baee96fSChristian Brauner return errno == ETXTBSY; 1967baee96fSChristian Brauner } 1977baee96fSChristian Brauner 198*87c50a58SChristian Brauner static inline int patch_file(const char *path, off_t off, const void *data, size_t len) 199*87c50a58SChristian Brauner { 200*87c50a58SChristian Brauner ssize_t n; 201*87c50a58SChristian Brauner int fd; 202*87c50a58SChristian Brauner 203*87c50a58SChristian Brauner fd = open(path, O_WRONLY); 204*87c50a58SChristian Brauner if (fd < 0) 205*87c50a58SChristian Brauner return -1; 206*87c50a58SChristian Brauner n = pwrite(fd, data, len, off); 207*87c50a58SChristian Brauner close(fd); 208*87c50a58SChristian Brauner return n == (ssize_t)len ? 0 : -1; 209*87c50a58SChristian Brauner } 210*87c50a58SChristian Brauner 211*87c50a58SChristian Brauner /* start_code and end_code are the 26th and 27th fields of /proc/pid/stat. */ 212*87c50a58SChristian Brauner static inline int stat_codes(pid_t pid, unsigned long *start_code, 213*87c50a58SChristian Brauner unsigned long *end_code) 214*87c50a58SChristian Brauner { 215*87c50a58SChristian Brauner char buf[4096], path[64], *p; 216*87c50a58SChristian Brauner ssize_t n; 217*87c50a58SChristian Brauner int fd, i; 218*87c50a58SChristian Brauner 219*87c50a58SChristian Brauner snprintf(path, sizeof(path), "/proc/%d/stat", pid); 220*87c50a58SChristian Brauner fd = open(path, O_RDONLY); 221*87c50a58SChristian Brauner if (fd < 0) 222*87c50a58SChristian Brauner return -1; 223*87c50a58SChristian Brauner n = read(fd, buf, sizeof(buf) - 1); 224*87c50a58SChristian Brauner close(fd); 225*87c50a58SChristian Brauner if (n <= 0) 226*87c50a58SChristian Brauner return -1; 227*87c50a58SChristian Brauner buf[n] = '\0'; 228*87c50a58SChristian Brauner 229*87c50a58SChristian Brauner /* Skip "pid (comm)", then start_code is the 24th field after it. */ 230*87c50a58SChristian Brauner p = strrchr(buf, ')'); 231*87c50a58SChristian Brauner if (!p) 232*87c50a58SChristian Brauner return -1; 233*87c50a58SChristian Brauner p++; 234*87c50a58SChristian Brauner for (i = 0; i < 23; i++) { 235*87c50a58SChristian Brauner p = strchr(p + 1, ' '); 236*87c50a58SChristian Brauner if (!p) 237*87c50a58SChristian Brauner return -1; 238*87c50a58SChristian Brauner } 239*87c50a58SChristian Brauner if (sscanf(p, " %lu %lu", start_code, end_code) != 2) 240*87c50a58SChristian Brauner return -1; 241*87c50a58SChristian Brauner return 0; 242*87c50a58SChristian Brauner } 243*87c50a58SChristian Brauner 244*87c50a58SChristian Brauner /* Find the system loader through our own PT_INTERP. */ 245*87c50a58SChristian Brauner static inline int find_loader(char *out, size_t sz) 246*87c50a58SChristian Brauner { 247*87c50a58SChristian Brauner ElfW(Ehdr) eh; 248*87c50a58SChristian Brauner ElfW(Phdr) ph; 249*87c50a58SChristian Brauner int fd, i, ret = -1; 250*87c50a58SChristian Brauner 251*87c50a58SChristian Brauner fd = open("/proc/self/exe", O_RDONLY); 252*87c50a58SChristian Brauner if (fd < 0) 253*87c50a58SChristian Brauner return -1; 254*87c50a58SChristian Brauner if (pread(fd, &eh, sizeof(eh), 0) != sizeof(eh)) 255*87c50a58SChristian Brauner goto out; 256*87c50a58SChristian Brauner for (i = 0; i < eh.e_phnum; i++) { 257*87c50a58SChristian Brauner if (pread(fd, &ph, sizeof(ph), 258*87c50a58SChristian Brauner eh.e_phoff + i * eh.e_phentsize) != sizeof(ph)) 259*87c50a58SChristian Brauner goto out; 260*87c50a58SChristian Brauner if (ph.p_type != PT_INTERP) 261*87c50a58SChristian Brauner continue; 262*87c50a58SChristian Brauner if (!ph.p_filesz || ph.p_filesz > sz) 263*87c50a58SChristian Brauner goto out; 264*87c50a58SChristian Brauner if (pread(fd, out, ph.p_filesz, ph.p_offset) != 265*87c50a58SChristian Brauner (ssize_t)ph.p_filesz) 266*87c50a58SChristian Brauner goto out; 267*87c50a58SChristian Brauner out[ph.p_filesz - 1] = '\0'; 268*87c50a58SChristian Brauner ret = 0; 269*87c50a58SChristian Brauner break; 270*87c50a58SChristian Brauner } 271*87c50a58SChristian Brauner out: 272*87c50a58SChristian Brauner close(fd); 273*87c50a58SChristian Brauner return ret; 274*87c50a58SChristian Brauner } 275*87c50a58SChristian Brauner 27626860105SChristian Brauner #endif /* __SELFTESTS_EXEC_BINFMT_MISC_COMMON_H */ 277