forked from luck/tmp_suning_uos_patched
kasan/tests: add tests for user memory access functions
Add some tests for the newly-added user memory access API. Link: http://lkml.kernel.org/r/1462538722-1574-1-git-send-email-aryabinin@virtuozzo.com Signed-off-by: Andrey Ryabinin <aryabinin@virtuozzo.com> Cc: Alexander Potapenko <glider@google.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Ingo Molnar <mingo@elte.hu> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
parent
1771c6e1a5
commit
eae08dcab8
|
@ -12,9 +12,12 @@
|
|||
#define pr_fmt(fmt) "kasan test: %s " fmt, __func__
|
||||
|
||||
#include <linux/kernel.h>
|
||||
#include <linux/mman.h>
|
||||
#include <linux/mm.h>
|
||||
#include <linux/printk.h>
|
||||
#include <linux/slab.h>
|
||||
#include <linux/string.h>
|
||||
#include <linux/uaccess.h>
|
||||
#include <linux/module.h>
|
||||
|
||||
static noinline void __init kmalloc_oob_right(void)
|
||||
|
@ -363,6 +366,51 @@ static noinline void __init ksize_unpoisons_memory(void)
|
|||
kfree(ptr);
|
||||
}
|
||||
|
||||
static noinline void __init copy_user_test(void)
|
||||
{
|
||||
char *kmem;
|
||||
char __user *usermem;
|
||||
size_t size = 10;
|
||||
int unused;
|
||||
|
||||
kmem = kmalloc(size, GFP_KERNEL);
|
||||
if (!kmem)
|
||||
return;
|
||||
|
||||
usermem = (char __user *)vm_mmap(NULL, 0, PAGE_SIZE,
|
||||
PROT_READ | PROT_WRITE | PROT_EXEC,
|
||||
MAP_ANONYMOUS | MAP_PRIVATE, 0);
|
||||
if (IS_ERR(usermem)) {
|
||||
pr_err("Failed to allocate user memory\n");
|
||||
kfree(kmem);
|
||||
return;
|
||||
}
|
||||
|
||||
pr_info("out-of-bounds in copy_from_user()\n");
|
||||
unused = copy_from_user(kmem, usermem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in copy_to_user()\n");
|
||||
unused = copy_to_user(usermem, kmem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in __copy_from_user()\n");
|
||||
unused = __copy_from_user(kmem, usermem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in __copy_to_user()\n");
|
||||
unused = __copy_to_user(usermem, kmem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in __copy_from_user_inatomic()\n");
|
||||
unused = __copy_from_user_inatomic(kmem, usermem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in __copy_to_user_inatomic()\n");
|
||||
unused = __copy_to_user_inatomic(usermem, kmem, size + 1);
|
||||
|
||||
pr_info("out-of-bounds in strncpy_from_user()\n");
|
||||
unused = strncpy_from_user(kmem, usermem, size + 1);
|
||||
|
||||
vm_munmap((unsigned long)usermem, PAGE_SIZE);
|
||||
kfree(kmem);
|
||||
}
|
||||
|
||||
static int __init kmalloc_tests_init(void)
|
||||
{
|
||||
kmalloc_oob_right();
|
||||
|
@ -387,6 +435,7 @@ static int __init kmalloc_tests_init(void)
|
|||
kasan_stack_oob();
|
||||
kasan_global_oob();
|
||||
ksize_unpoisons_memory();
|
||||
copy_user_test();
|
||||
return -EAGAIN;
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue
Block a user