mirror of
https://github.com/AuxXxilium/linux_dsm_epyc7002.git
synced 2024-11-24 08:40:53 +07:00
kasan/tests: add tests for user memory access functions
Add some tests for the newly-added user memory access API. Link: http://lkml.kernel.org/r/1462538722-1574-1-git-send-email-aryabinin@virtuozzo.com Signed-off-by: Andrey Ryabinin <aryabinin@virtuozzo.com> Cc: Alexander Potapenko <glider@google.com> Cc: Dmitry Vyukov <dvyukov@google.com> Cc: Ingo Molnar <mingo@elte.hu> Cc: "H. Peter Anvin" <hpa@zytor.com> Cc: Thomas Gleixner <tglx@linutronix.de> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> Signed-off-by: Linus Torvalds <torvalds@linux-foundation.org>
This commit is contained in:
parent
1771c6e1a5
commit
eae08dcab8
@ -12,9 +12,12 @@
|
|||||||
#define pr_fmt(fmt) "kasan test: %s " fmt, __func__
|
#define pr_fmt(fmt) "kasan test: %s " fmt, __func__
|
||||||
|
|
||||||
#include <linux/kernel.h>
|
#include <linux/kernel.h>
|
||||||
|
#include <linux/mman.h>
|
||||||
|
#include <linux/mm.h>
|
||||||
#include <linux/printk.h>
|
#include <linux/printk.h>
|
||||||
#include <linux/slab.h>
|
#include <linux/slab.h>
|
||||||
#include <linux/string.h>
|
#include <linux/string.h>
|
||||||
|
#include <linux/uaccess.h>
|
||||||
#include <linux/module.h>
|
#include <linux/module.h>
|
||||||
|
|
||||||
static noinline void __init kmalloc_oob_right(void)
|
static noinline void __init kmalloc_oob_right(void)
|
||||||
@ -363,6 +366,51 @@ static noinline void __init ksize_unpoisons_memory(void)
|
|||||||
kfree(ptr);
|
kfree(ptr);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
static noinline void __init copy_user_test(void)
|
||||||
|
{
|
||||||
|
char *kmem;
|
||||||
|
char __user *usermem;
|
||||||
|
size_t size = 10;
|
||||||
|
int unused;
|
||||||
|
|
||||||
|
kmem = kmalloc(size, GFP_KERNEL);
|
||||||
|
if (!kmem)
|
||||||
|
return;
|
||||||
|
|
||||||
|
usermem = (char __user *)vm_mmap(NULL, 0, PAGE_SIZE,
|
||||||
|
PROT_READ | PROT_WRITE | PROT_EXEC,
|
||||||
|
MAP_ANONYMOUS | MAP_PRIVATE, 0);
|
||||||
|
if (IS_ERR(usermem)) {
|
||||||
|
pr_err("Failed to allocate user memory\n");
|
||||||
|
kfree(kmem);
|
||||||
|
return;
|
||||||
|
}
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in copy_from_user()\n");
|
||||||
|
unused = copy_from_user(kmem, usermem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in copy_to_user()\n");
|
||||||
|
unused = copy_to_user(usermem, kmem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in __copy_from_user()\n");
|
||||||
|
unused = __copy_from_user(kmem, usermem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in __copy_to_user()\n");
|
||||||
|
unused = __copy_to_user(usermem, kmem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in __copy_from_user_inatomic()\n");
|
||||||
|
unused = __copy_from_user_inatomic(kmem, usermem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in __copy_to_user_inatomic()\n");
|
||||||
|
unused = __copy_to_user_inatomic(usermem, kmem, size + 1);
|
||||||
|
|
||||||
|
pr_info("out-of-bounds in strncpy_from_user()\n");
|
||||||
|
unused = strncpy_from_user(kmem, usermem, size + 1);
|
||||||
|
|
||||||
|
vm_munmap((unsigned long)usermem, PAGE_SIZE);
|
||||||
|
kfree(kmem);
|
||||||
|
}
|
||||||
|
|
||||||
static int __init kmalloc_tests_init(void)
|
static int __init kmalloc_tests_init(void)
|
||||||
{
|
{
|
||||||
kmalloc_oob_right();
|
kmalloc_oob_right();
|
||||||
@ -387,6 +435,7 @@ static int __init kmalloc_tests_init(void)
|
|||||||
kasan_stack_oob();
|
kasan_stack_oob();
|
||||||
kasan_global_oob();
|
kasan_global_oob();
|
||||||
ksize_unpoisons_memory();
|
ksize_unpoisons_memory();
|
||||||
|
copy_user_test();
|
||||||
return -EAGAIN;
|
return -EAGAIN;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user