Home | History | Annotate | Download | only in minijail
      1 /* Copyright (C) 2016 The Android Open Source Project
      2  *
      3  * Licensed under the Apache License, Version 2.0 (the "License");
      4  * you may not use this file except in compliance with the License.
      5  * You may obtain a copy of the License at
      6  *
      7  *     http://www.apache.org/licenses/LICENSE-2.0
      8  *
      9  * Unless required by applicable law or agreed to in writing, software
     10  * distributed under the License is distributed on an "AS IS" BASIS,
     11  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
     12  * See the License for the specific language governing permissions and
     13  * limitations under the License.
     14  */
     15 
     16 #define USE_RET_KILL 0
     17 #define USE_RET_TRAP 1
     18 
     19 #define NO_LOGGING  0
     20 #define USE_LOGGING 1
     21 
     22 /* BPF testing macros. */
     23 #define EXPECT_EQ_BLOCK(_block, _code, _k, _jt, _jf)	\
     24 do {	\
     25 	EXPECT_EQ((_block)->code, _code);		\
     26 	EXPECT_EQ((_block)->k, (unsigned int)(_k));	\
     27 	EXPECT_EQ((_block)->jt, _jt);			\
     28 	EXPECT_EQ((_block)->jf, _jf);			\
     29 } while (0)
     30 
     31 #define EXPECT_EQ_STMT(_block, _code, _k) \
     32 	EXPECT_EQ_BLOCK(_block, _code, _k, 0, 0)
     33 
     34 #define EXPECT_COMP(_block) \
     35 do {	\
     36 	EXPECT_EQ((_block)->len, BPF_ARG_COMP_LEN + 1);			\
     37 	EXPECT_EQ((_block)->instrs->code, BPF_LD+BPF_W+BPF_ABS);	\
     38 } while (0)
     39 
     40 #define EXPECT_LBL(_block) \
     41 do {	\
     42 	EXPECT_TRUE((_block)->code == (BPF_JMP+BPF_JA));	\
     43 	EXPECT_TRUE((_block)->jt == LABEL_JT);			\
     44 	EXPECT_TRUE((_block)->jf == LABEL_JF);			\
     45 } while (0)
     46 
     47 #define EXPECT_ACTUAL_LBL(_block, _id) \
     48 do {	\
     49 	EXPECT_TRUE((_block)->code == (BPF_JMP+BPF_JA));	\
     50 	EXPECT_TRUE((_block)->k == (_id));			\
     51 	EXPECT_TRUE((_block)->jt == LABEL_JT);			\
     52 	EXPECT_TRUE((_block)->jf == LABEL_JF);			\
     53 } while (0)
     54 
     55 #define EXPECT_JUMP_LBL(_block) \
     56 do {	\
     57 	EXPECT_EQ((_block)->code, BPF_JMP+BPF_JA);	\
     58 	EXPECT_EQ((_block)->jt, JUMP_JT);		\
     59 	EXPECT_EQ((_block)->jf, JUMP_JF);		\
     60 } while (0)
     61 
     62 #define EXPECT_GROUP_END(_block) \
     63 do {	\
     64 	EXPECT_EQ((_block)->len, 2U);			\
     65 	EXPECT_JUMP_LBL(&(_block)->instrs[0]);		\
     66 	EXPECT_LBL(&(_block)->instrs[1]);		\
     67 } while (0)
     68 
     69 #define EXPECT_KILL(_block) \
     70 do {	\
     71 	EXPECT_EQ((_block)->len, 1U);				\
     72 	EXPECT_EQ_STMT((_block)->instrs,			\
     73 			BPF_RET+BPF_K, SECCOMP_RET_KILL);	\
     74 } while (0)
     75 
     76 #define EXPECT_TRAP(_block) \
     77 do {	\
     78 	EXPECT_EQ((_block)->len, 1U);				\
     79 	EXPECT_EQ_STMT((_block)->instrs,			\
     80 			BPF_RET+BPF_K, SECCOMP_RET_TRAP);	\
     81 } while (0)
     82 
     83 #define EXPECT_ALLOW(_block) \
     84 do {	\
     85 	EXPECT_EQ((_block)->len, 2U);				\
     86 	EXPECT_LBL(&(_block)->instrs[0]);			\
     87 	EXPECT_EQ_STMT(&(_block)->instrs[1],			\
     88 			BPF_RET+BPF_K, SECCOMP_RET_ALLOW);	\
     89 } while (0)
     90 
     91 #define EXPECT_ARCH_VALIDATION(_filter) \
     92 do {	\
     93 	EXPECT_EQ_STMT(&(_filter)[0], BPF_LD+BPF_W+BPF_ABS, arch_nr);	\
     94 	EXPECT_EQ_BLOCK(&(_filter)[1],					\
     95 			BPF_JMP+BPF_JEQ+BPF_K, ARCH_NR, SKIP, NEXT);	\
     96 	EXPECT_EQ_STMT(&(_filter)[2], BPF_RET+BPF_K, SECCOMP_RET_KILL);	\
     97 } while (0)
     98 
     99 #define EXPECT_ALLOW_SYSCALL(_filter, _nr) \
    100 do {	\
    101 	EXPECT_EQ_BLOCK(&(_filter)[0],					\
    102 			BPF_JMP+BPF_JEQ+BPF_K, (_nr), NEXT, SKIP);	\
    103 	EXPECT_EQ_STMT(&(_filter)[1],					\
    104 			BPF_RET+BPF_K, SECCOMP_RET_ALLOW);		\
    105 } while (0)
    106 
    107 #define EXPECT_ALLOW_SYSCALL_ARGS(_filter, _nr, _id, _jt, _jf) \
    108 do {	\
    109 	EXPECT_EQ_BLOCK(&(_filter)[0],					\
    110 			BPF_JMP+BPF_JEQ+BPF_K, (_nr), NEXT, SKIP);	\
    111 	EXPECT_EQ_BLOCK(&(_filter)[1],					\
    112 			BPF_JMP+BPF_JA, (_id), (_jt), (_jf));		\
    113 } while (0)
    114