1 // RUN: %clangxx_msan -O0 %s -o %t && %run %t 2>&1 2 // RUN: %clangxx_msan -O3 %s -o %t && %run %t 2>&1 3 4 #include <assert.h> 5 #include <errno.h> 6 #include <glob.h> 7 #include <stdio.h> 8 #include <string.h> 9 10 #include <linux/aio_abi.h> 11 #include <sys/ptrace.h> 12 #include <sys/stat.h> 13 #include <sys/uio.h> 14 15 #include <sanitizer/linux_syscall_hooks.h> 16 #include <sanitizer/msan_interface.h> 17 18 /* Test the presence of __sanitizer_syscall_ in the tool runtime, and general 19 sanity of their behaviour. */ 20 21 int main(int argc, char *argv[]) { 22 char buf[1000] __attribute__((aligned(8))); 23 const int kTen = 10; 24 const int kFortyTwo = 42; 25 memset(buf, 0, sizeof(buf)); 26 __msan_unpoison(buf, sizeof(buf)); 27 __sanitizer_syscall_pre_recvmsg(0, buf, 0); 28 __sanitizer_syscall_pre_rt_sigpending(buf, kTen); 29 __sanitizer_syscall_pre_getdents(0, buf, kTen); 30 __sanitizer_syscall_pre_getdents64(0, buf, kTen); 31 32 __msan_unpoison(buf, sizeof(buf)); 33 __sanitizer_syscall_post_recvmsg(0, 0, buf, 0); 34 __sanitizer_syscall_post_rt_sigpending(-1, buf, kTen); 35 __sanitizer_syscall_post_getdents(0, 0, buf, kTen); 36 __sanitizer_syscall_post_getdents64(0, 0, buf, kTen); 37 assert(__msan_test_shadow(buf, sizeof(buf)) == -1); 38 39 __msan_unpoison(buf, sizeof(buf)); 40 __sanitizer_syscall_post_recvmsg(kTen, 0, buf, 0); 41 42 // Tell the kernel that the output struct size is 10 bytes, verify that those 43 // bytes are unpoisoned, and the next byte is not. 44 __msan_poison(buf, kTen + 1); 45 __sanitizer_syscall_post_rt_sigpending(0, buf, kTen); 46 assert(__msan_test_shadow(buf, sizeof(buf)) == kTen); 47 48 __msan_poison(buf, kTen + 1); 49 __sanitizer_syscall_post_getdents(kTen, 0, buf, kTen); 50 assert(__msan_test_shadow(buf, sizeof(buf)) == kTen); 51 52 __msan_poison(buf, kTen + 1); 53 __sanitizer_syscall_post_getdents64(kTen, 0, buf, kTen); 54 assert(__msan_test_shadow(buf, sizeof(buf)) == kTen); 55 56 __msan_poison(buf, sizeof(buf)); 57 __sanitizer_syscall_post_clock_getres(0, 0, buf); 58 assert(__msan_test_shadow(buf, sizeof(buf)) == sizeof(long) * 2); 59 60 __msan_poison(buf, sizeof(buf)); 61 __sanitizer_syscall_post_clock_gettime(0, 0, buf); 62 assert(__msan_test_shadow(buf, sizeof(buf)) == sizeof(long) * 2); 63 64 // Failed syscall does not write to the buffer. 65 __msan_poison(buf, sizeof(buf)); 66 __sanitizer_syscall_post_clock_gettime(-1, 0, buf); 67 assert(__msan_test_shadow(buf, sizeof(buf)) == 0); 68 69 __msan_poison(buf, sizeof(buf)); 70 __sanitizer_syscall_post_read(5, 42, buf, 10); 71 assert(__msan_test_shadow(buf, sizeof(buf)) == 5); 72 73 __msan_poison(buf, sizeof(buf)); 74 __sanitizer_syscall_post_newfstatat(0, 5, "/path/to/file", buf, 0); 75 assert(__msan_test_shadow(buf, sizeof(buf)) == sizeof(struct stat)); 76 77 __msan_poison(buf, sizeof(buf)); 78 int prio = 0; 79 __sanitizer_syscall_post_mq_timedreceive(kFortyTwo, 5, buf, sizeof(buf), &prio, 0); 80 assert(__msan_test_shadow(buf, sizeof(buf)) == kFortyTwo); 81 assert(__msan_test_shadow(&prio, sizeof(prio)) == -1); 82 83 __msan_poison(buf, sizeof(buf)); 84 __sanitizer_syscall_post_ptrace(0, PTRACE_PEEKUSER, kFortyTwo, 0xABCD, buf); 85 assert(__msan_test_shadow(buf, sizeof(buf)) == sizeof(void *)); 86 87 __msan_poison(buf, sizeof(buf)); 88 struct iocb iocb[3]; 89 struct iocb *iocbp[3] = { &iocb[0], &iocb[1], &iocb[2] }; 90 memset(iocb, 0, sizeof(iocb)); 91 iocb[0].aio_lio_opcode = IOCB_CMD_PREAD; 92 iocb[0].aio_buf = (__u64)buf; 93 iocb[0].aio_nbytes = 10; 94 iocb[1].aio_lio_opcode = IOCB_CMD_PREAD; 95 iocb[1].aio_buf = (__u64)(&buf[20]); 96 iocb[1].aio_nbytes = 15; 97 struct iovec vec[2] = { {&buf[40], 3}, {&buf[50], 20} }; 98 iocb[2].aio_lio_opcode = IOCB_CMD_PREADV; 99 iocb[2].aio_buf = (__u64)(&vec); 100 iocb[2].aio_nbytes = 2; 101 __sanitizer_syscall_pre_io_submit(0, 3, &iocbp); 102 assert(__msan_test_shadow(buf, sizeof(buf)) == 10); 103 assert(__msan_test_shadow(buf + 20, sizeof(buf) - 20) == 15); 104 assert(__msan_test_shadow(buf + 40, sizeof(buf) - 40) == 3); 105 assert(__msan_test_shadow(buf + 50, sizeof(buf) - 50) == 20); 106 107 __msan_poison(buf, sizeof(buf)); 108 char *p = buf; 109 __msan_poison(&p, sizeof(p)); 110 __sanitizer_syscall_post_io_setup(0, 1, &p); 111 assert(__msan_test_shadow(&p, sizeof(p)) == -1); 112 assert(__msan_test_shadow(buf, sizeof(buf)) >= 32); 113 114 __msan_poison(buf, sizeof(buf)); 115 __sanitizer_syscall_post_pipe(0, (int *)buf); 116 assert(__msan_test_shadow(buf, sizeof(buf)) == 2 * sizeof(int)); 117 118 __msan_poison(buf, sizeof(buf)); 119 __sanitizer_syscall_post_pipe2(0, (int *)buf, 0); 120 assert(__msan_test_shadow(buf, sizeof(buf)) == 2 * sizeof(int)); 121 122 __msan_poison(buf, sizeof(buf)); 123 __sanitizer_syscall_post_socketpair(0, 0, 0, 0, (int *)buf); 124 assert(__msan_test_shadow(buf, sizeof(buf)) == 2 * sizeof(int)); 125 126 return 0; 127 } 128
