From owner-svn-src-projects@FreeBSD.ORG Mon Nov 28 20:00:47 2011 Return-Path: Delivered-To: svn-src-projects@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id B76371065675; Mon, 28 Nov 2011 20:00:47 +0000 (UTC) (envelope-from pho@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:4f8:fff6::2c]) by mx1.freebsd.org (Postfix) with ESMTP id 9D1038FC0C; Mon, 28 Nov 2011 20:00:47 +0000 (UTC) Received: from svn.freebsd.org (localhost [127.0.0.1]) by svn.freebsd.org (8.14.4/8.14.4) with ESMTP id pASK0lqH006697; Mon, 28 Nov 2011 20:00:47 GMT (envelope-from pho@svn.freebsd.org) Received: (from pho@localhost) by svn.freebsd.org (8.14.4/8.14.4/Submit) id pASK0lDk006696; Mon, 28 Nov 2011 20:00:47 GMT (envelope-from pho@svn.freebsd.org) Message-Id: <201111282000.pASK0lDk006696@svn.freebsd.org> From: Peter Holm Date: Mon, 28 Nov 2011 20:00:47 +0000 (UTC) To: src-committers@freebsd.org, svn-src-projects@freebsd.org X-SVN-Group: projects MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Cc: Subject: svn commit: r228094 - projects/stress2/misc X-BeenThere: svn-src-projects@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "SVN commit messages for the src " projects" tree" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Nov 2011 20:00:47 -0000 Author: pho Date: Mon Nov 28 20:00:47 2011 New Revision: 228094 URL: http://svn.freebsd.org/changeset/base/228094 Log: Added regression test. Added: projects/stress2/misc/readdir.sh (contents, props changed) Added: projects/stress2/misc/readdir.sh ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ projects/stress2/misc/readdir.sh Mon Nov 28 20:00:47 2011 (r228094) @@ -0,0 +1,133 @@ +#!/bin/sh + +# +# Copyright (c) 2011 Peter Holm +# All rights reserved. +# +# Redistribution and use in source and binary forms, with or without +# modification, are permitted provided that the following conditions +# are met: +# 1. Redistributions of source code must retain the above copyright +# notice, this list of conditions and the following disclaimer. +# 2. Redistributions in binary form must reproduce the above copyright +# notice, this list of conditions and the following disclaimer in the +# documentation and/or other materials provided with the distribution. +# +# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND +# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE +# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE +# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE +# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL +# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS +# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) +# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT +# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY +# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF +# SUCH DAMAGE. +# +# $FreeBSD$ +# + + +# readdir(3) fuzzing inspired by the iknowthis test suite +# by Tavis Ormandy + +# "panic: kmem_malloc(1328054272): kmem_map too small" seen + +[ `id -u ` -ne 0 ] && echo "Must be root!" && exit 1 + +. ../default.cfg + +here=`pwd` +cd /tmp +sed '1,/^EOF/d' < $here/$0 > readdir.c +cc -o readdir -Wall -Wextra readdir.c +rm -f readdir.c + +mount | grep $mntpoint | grep -q /dev/md && umount -f $mntpoint +mdconfig -l | grep -q md$mdstart && mdconfig -d -u $mdstart + + +mount -t tmpfs tmpfs $mntpoint +echo "Testing tmpfs(5)" +cp -a /usr/include $mntpoint +/tmp/readdir $mntpoint +umount $mntpoint + +echo "Testing fdescfs(5)" +/tmp/readdir /dev/fs + +echo "Testing procfs(5)" +mount -t procfs procfs $mntpoint +/tmp/readdir $mntpoint +umount $mntpoint + +mdconfig -l | grep -q md$mdstart && mdconfig -d -u $mdstart +mdconfig -a -t swap -s 1g -u $mdstart || exit 1 +bsdlabel -w md$mdstart auto +newfs -U md${mdstart}$part > /dev/null +mount /dev/md${mdstart}$part $mntpoint +cp -a /usr/include $mntpoint +echo "Testing FFS" +/tmp/readdir $mntpoint +umount $mntpoint + +mount -t nullfs /bin $mntpoint +echo "Testing nullfs(5)" +/tmp/readdir $mntpoint +umount $mntpoint + +rm -f /tmp/readdir +exit 0 +EOF +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +static void +hand(int i __unused) { /* handler */ + _exit(1); +} + +int +test(char *path) +{ + + DIR *dirp, fuzz; + int i; + + signal(SIGSEGV, hand); + + for (i = 0; i < 2000; i++) { + if ((dirp = opendir(path)) == NULL) + break; + bcopy(dirp, &fuzz, sizeof(fuzz)); + fuzz.dd_len = arc4random(); + readdir(&fuzz); + closedir(dirp); + } + + exit(0); +} + +int +main(int argc __unused, char **argv) +{ + int i; + + for (i = 0; i < 1000; i++) { + if (fork() == 0) + test(argv[1]); + wait(NULL); + } + + return (0); +}