1 /* 2 * Check decoding of ioctl SG_IO v4 commands. 3 * 4 * Copyright (c) 2017 Dmitry V. Levin <ldv (at) altlinux.org> 5 * All rights reserved. 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that the following conditions 9 * are met: 10 * 1. Redistributions of source code must retain the above copyright 11 * notice, this list of conditions and the following disclaimer. 12 * 2. Redistributions in binary form must reproduce the above copyright 13 * notice, this list of conditions and the following disclaimer in the 14 * documentation and/or other materials provided with the distribution. 15 * 3. The name of the author may not be used to endorse or promote products 16 * derived from this software without specific prior written permission. 17 * 18 * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 19 * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 20 * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 21 * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 22 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 23 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 24 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 25 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 26 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 27 * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28 */ 29 30 #include "tests.h" 31 32 #ifdef HAVE_LINUX_BSG_H 33 34 # include <inttypes.h> 35 # include <stdio.h> 36 # include <sys/ioctl.h> 37 # include <sys/uio.h> 38 # include <linux/bsg.h> 39 40 # include "xlat/scsi_sg_commands.h" 41 42 int 43 main(void) 44 { 45 ioctl(-1, SG_IO, 0); 46 printf("ioctl(-1, SG_IO, NULL) = -1 EBADF (%m)\n"); 47 48 TAIL_ALLOC_OBJECT_CONST_PTR(struct sg_io_v4, sg_io); 49 fill_memory(sg_io, sizeof(*sg_io)); 50 51 const void *const efault = sg_io + 1; 52 ioctl(-1, SG_IO, efault); 53 printf("ioctl(-1, SG_IO, %p) = -1 EBADF (%m)\n", efault); 54 55 ioctl(-1, SG_IO, sg_io); 56 printf("ioctl(-1, SG_IO, [%u]) = -1 EBADF (%m)\n", sg_io->guard); 57 58 TAIL_ALLOC_OBJECT_CONST_PTR(unsigned int, pguard); 59 *pguard = (unsigned char) 'Q'; 60 ioctl(-1, SG_IO, pguard); 61 printf("ioctl(-1, SG_IO, {guard='Q', %p}) = -1 EBADF (%m)\n", pguard + 1); 62 63 sg_io->guard = (unsigned char) 'Q'; 64 sg_io->protocol = 0; 65 sg_io->subprotocol = 1; 66 sg_io->flags = -1U; 67 sg_io->info = -1U; 68 sg_io->request = (kernel_ulong_t) 0xfacefeedfffffff1ULL; 69 sg_io->response = (kernel_ulong_t) 0xfacefeedfffffff2ULL; 70 sg_io->dout_xferp = (kernel_ulong_t) 0xfacefeedfffffff3ULL; 71 sg_io->din_xferp = (kernel_ulong_t) 0xfacefeedfffffff4ULL; 72 ioctl(-1, SG_IO, sg_io); 73 printf("ioctl(-1, SG_IO, {guard='Q'" 74 ", protocol=BSG_PROTOCOL_SCSI" 75 ", subprotocol=BSG_SUB_PROTOCOL_SCSI_TMF" 76 ", request_len=%u" 77 ", request=%#llx" 78 ", request_tag=%#" PRI__x64 79 ", request_attr=%u" 80 ", request_priority=%u" 81 ", request_extra=%u" 82 ", max_response_len=%u" 83 ", dout_iovec_count=%u" 84 ", dout_xfer_len=%u" 85 ", din_iovec_count=%u" 86 ", din_xfer_len=%u" 87 ", dout_xferp=%#llx" 88 ", timeout=%u" 89 ", flags=BSG_FLAG_Q_AT_TAIL|BSG_FLAG_Q_AT_HEAD|0xffffffcf" 90 ", usr_ptr=%#" PRI__x64 91 ", response_len=%u" 92 ", response=%#llx" 93 ", din_xferp=%#llx" 94 ", driver_status=%#x" 95 ", transport_status=%#x" 96 ", device_status=%#x" 97 ", retry_delay=%u" 98 ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xfffffff8" 99 ", duration=%u" 100 ", response_len=%u" 101 ", din_resid=%d" 102 ", dout_resid=%d" 103 ", generated_tag=%#" PRI__x64 "}) = -1 EBADF (%m)\n", 104 sg_io->request_len, 105 (unsigned long long) (kernel_ulong_t) sg_io->request, 106 sg_io->request_tag, 107 sg_io->request_attr, 108 sg_io->request_priority, 109 sg_io->request_extra, 110 sg_io->max_response_len, 111 sg_io->dout_iovec_count, 112 sg_io->dout_xfer_len, 113 sg_io->din_iovec_count, 114 sg_io->din_xfer_len, 115 (unsigned long long) (kernel_ulong_t) sg_io->dout_xferp, 116 sg_io->timeout, 117 sg_io->usr_ptr, 118 sg_io->response_len, 119 (unsigned long long) (kernel_ulong_t) sg_io->response, 120 (unsigned long long) (kernel_ulong_t) sg_io->din_xferp, 121 sg_io->driver_status, 122 sg_io->transport_status, 123 sg_io->device_status, 124 sg_io->retry_delay, 125 sg_io->duration, 126 sg_io->response_len, 127 sg_io->din_resid, 128 sg_io->dout_resid, 129 sg_io->generated_tag); 130 131 const struct iovec iov[] = { 132 { 133 .iov_base = (void *) efault - 2, 134 .iov_len = 2 135 }, { 136 .iov_base = (void *) efault - 3, 137 .iov_len = 4 138 } 139 }; 140 const struct iovec *const t_iov = tail_memdup(iov, sizeof(iov)); 141 sg_io->dout_iovec_count = ARRAY_SIZE(iov); 142 sg_io->dout_xfer_len = iov[0].iov_len + iov[1].iov_len - 1; 143 sg_io->dout_xferp = (unsigned long) t_iov; 144 145 sg_io->din_iovec_count = 0; 146 sg_io->din_xfer_len = 5; 147 sg_io->din_resid = 1; 148 sg_io->din_xferp = (unsigned long) efault - 149 (sg_io->dout_xfer_len - sg_io->din_resid); 150 151 sg_io->request_len = 3; 152 sg_io->request = (unsigned long) efault - sg_io->request_len; 153 sg_io->response_len = 2; 154 sg_io->response = (unsigned long) efault - sg_io->response_len; 155 156 sg_io->flags = 0x20; 157 sg_io->info = 1; 158 159 ioctl(-1, SG_IO, sg_io); 160 printf("ioctl(-1, SG_IO, {guard='Q'" 161 ", protocol=BSG_PROTOCOL_SCSI" 162 ", subprotocol=BSG_SUB_PROTOCOL_SCSI_TMF" 163 ", request_len=%u" 164 ", request=\"\\x%x\\x%x\\x%x\"" 165 ", request_tag=%#" PRI__x64 166 ", request_attr=%u" 167 ", request_priority=%u" 168 ", request_extra=%u" 169 ", max_response_len=%u" 170 ", dout_iovec_count=%u" 171 ", dout_xfer_len=%u" 172 ", din_iovec_count=%u" 173 ", din_xfer_len=%u" 174 ", dout_xferp=[{iov_base=\"\\%o\\%o\", iov_len=%u}" 175 ", {iov_base=\"\\%o\\%o\\%o\", iov_len=%u}]" 176 ", timeout=%u, flags=BSG_FLAG_Q_AT_HEAD" 177 ", usr_ptr=%#" PRI__x64 178 ", response_len=%u" 179 ", response=\"\\x%x\\x%x\"" 180 ", din_xferp=\"\\x%x\\x%x\\x%x\\x%x\"" 181 ", driver_status=%#x" 182 ", transport_status=%#x" 183 ", device_status=%#x" 184 ", retry_delay=%u" 185 ", info=SG_INFO_CHECK" 186 ", duration=%u" 187 ", response_len=%u" 188 ", din_resid=%d" 189 ", dout_resid=%d" 190 ", generated_tag=%#" PRI__x64 "}) = -1 EBADF (%m)\n", 191 sg_io->request_len, 192 *(unsigned char *) ((unsigned long) sg_io->request + 0), 193 *(unsigned char *) ((unsigned long) sg_io->request + 1), 194 *(unsigned char *) ((unsigned long) sg_io->request + 2), 195 sg_io->request_tag, 196 sg_io->request_attr, 197 sg_io->request_priority, 198 sg_io->request_extra, 199 sg_io->max_response_len, 200 sg_io->dout_iovec_count, 201 sg_io->dout_xfer_len, 202 sg_io->din_iovec_count, 203 sg_io->din_xfer_len, 204 *(unsigned char *) (iov[0].iov_base + 0), 205 *(unsigned char *) (iov[0].iov_base + 1), 206 (unsigned int) iov[0].iov_len, 207 *(unsigned char *) (iov[1].iov_base + 0), 208 *(unsigned char *) (iov[1].iov_base + 1), 209 *(unsigned char *) (iov[1].iov_base + 2), 210 (unsigned int) iov[1].iov_len, 211 sg_io->timeout, 212 sg_io->usr_ptr, 213 sg_io->response_len, 214 *(unsigned char *) ((unsigned long) sg_io->response + 0), 215 *(unsigned char *) ((unsigned long) sg_io->response + 1), 216 *(unsigned char *) ((unsigned long) sg_io->din_xferp + 0), 217 *(unsigned char *) ((unsigned long) sg_io->din_xferp + 1), 218 *(unsigned char *) ((unsigned long) sg_io->din_xferp + 2), 219 *(unsigned char *) ((unsigned long) sg_io->din_xferp + 3), 220 sg_io->driver_status, 221 sg_io->transport_status, 222 sg_io->device_status, 223 sg_io->retry_delay, 224 sg_io->duration, 225 sg_io->response_len, 226 sg_io->din_resid, 227 sg_io->dout_resid, 228 sg_io->generated_tag); 229 230 puts("+++ exited with 0 +++"); 231 return 0; 232 } 233 234 #else 235 236 SKIP_MAIN_UNDEFINED("HAVE_LINUX_BSG_H") 237 238 #endif 239
