1*57718be8SEnji Cooper /* $NetBSD: t_bpf.c,v 1.5 2012/08/14 19:40:30 alnsn Exp $ */ 2*57718be8SEnji Cooper 3*57718be8SEnji Cooper /*- 4*57718be8SEnji Cooper * Copyright (c) 2010 Antti Kantee. All Rights Reserved. 5*57718be8SEnji Cooper * 6*57718be8SEnji Cooper * Redistribution and use in source and binary forms, with or without 7*57718be8SEnji Cooper * modification, are permitted provided that the following conditions 8*57718be8SEnji Cooper * are met: 9*57718be8SEnji Cooper * 1. Redistributions of source code must retain the above copyright 10*57718be8SEnji Cooper * notice, this list of conditions and the following disclaimer. 11*57718be8SEnji Cooper * 2. Redistributions in binary form must reproduce the above copyright 12*57718be8SEnji Cooper * notice, this list of conditions and the following disclaimer in the 13*57718be8SEnji Cooper * documentation and/or other materials provided with the distribution. 14*57718be8SEnji Cooper * 15*57718be8SEnji Cooper * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS 16*57718be8SEnji Cooper * OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED 17*57718be8SEnji Cooper * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE 18*57718be8SEnji Cooper * DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE 19*57718be8SEnji Cooper * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 20*57718be8SEnji Cooper * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR 21*57718be8SEnji Cooper * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 22*57718be8SEnji Cooper * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 23*57718be8SEnji Cooper * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 24*57718be8SEnji Cooper * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 25*57718be8SEnji Cooper * SUCH DAMAGE. 26*57718be8SEnji Cooper */ 27*57718be8SEnji Cooper #include <sys/cdefs.h> 28*57718be8SEnji Cooper __RCSID("$NetBSD: t_bpf.c,v 1.5 2012/08/14 19:40:30 alnsn Exp $"); 29*57718be8SEnji Cooper 30*57718be8SEnji Cooper #include <sys/param.h> 31*57718be8SEnji Cooper #include <sys/ioctl.h> 32*57718be8SEnji Cooper #include <sys/socket.h> 33*57718be8SEnji Cooper #include <sys/mbuf.h> 34*57718be8SEnji Cooper #include <sys/sysctl.h> 35*57718be8SEnji Cooper #include <sys/mman.h> 36*57718be8SEnji Cooper #include <unistd.h> 37*57718be8SEnji Cooper 38*57718be8SEnji Cooper #include <net/if.h> 39*57718be8SEnji Cooper #include <net/bpf.h> 40*57718be8SEnji Cooper 41*57718be8SEnji Cooper #include <fcntl.h> 42*57718be8SEnji Cooper #include <stdio.h> 43*57718be8SEnji Cooper #include <string.h> 44*57718be8SEnji Cooper 45*57718be8SEnji Cooper #include <rump/rump.h> 46*57718be8SEnji Cooper #include <rump/rump_syscalls.h> 47*57718be8SEnji Cooper 48*57718be8SEnji Cooper /* XXX: atf-c.h has collisions with mbuf */ 49*57718be8SEnji Cooper #undef m_type 50*57718be8SEnji Cooper #undef m_data 51*57718be8SEnji Cooper #include <atf-c.h> 52*57718be8SEnji Cooper 53*57718be8SEnji Cooper #include "../../h_macros.h" 54*57718be8SEnji Cooper #include "../config/netconfig.c" 55*57718be8SEnji Cooper 56*57718be8SEnji Cooper ATF_TC(bpfwriteleak); 57*57718be8SEnji Cooper ATF_TC_HEAD(bpfwriteleak, tc) 58*57718be8SEnji Cooper { 59*57718be8SEnji Cooper 60*57718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "Checks that writing to /dev/bpf " 61*57718be8SEnji Cooper "does not leak mbufs"); 62*57718be8SEnji Cooper } 63*57718be8SEnji Cooper 64*57718be8SEnji Cooper static int 65*57718be8SEnji Cooper getmtdata(void) 66*57718be8SEnji Cooper { 67*57718be8SEnji Cooper struct mbstat mbstat; 68*57718be8SEnji Cooper size_t mbstatlen = sizeof(mbstat); 69*57718be8SEnji Cooper const int mbstat_mib[] = { CTL_KERN, KERN_MBUF, MBUF_STATS }; 70*57718be8SEnji Cooper 71*57718be8SEnji Cooper RL(rump_sys___sysctl(mbstat_mib, __arraycount(mbstat_mib), 72*57718be8SEnji Cooper &mbstat, &mbstatlen, NULL, 0)); 73*57718be8SEnji Cooper return mbstat.m_mtypes[MT_DATA]; 74*57718be8SEnji Cooper } 75*57718be8SEnji Cooper 76*57718be8SEnji Cooper ATF_TC_BODY(bpfwriteleak, tc) 77*57718be8SEnji Cooper { 78*57718be8SEnji Cooper char buf[28]; /* sizeof(garbage) > etherhdrlen */ 79*57718be8SEnji Cooper struct ifreq ifr; 80*57718be8SEnji Cooper int ifnum, bpfd; 81*57718be8SEnji Cooper 82*57718be8SEnji Cooper RZ(rump_init()); 83*57718be8SEnji Cooper RZ(rump_pub_shmif_create(NULL, &ifnum)); 84*57718be8SEnji Cooper sprintf(ifr.ifr_name, "shmif%d", ifnum); 85*57718be8SEnji Cooper 86*57718be8SEnji Cooper RL(bpfd = rump_sys_open("/dev/bpf", O_RDWR)); 87*57718be8SEnji Cooper RL(rump_sys_ioctl(bpfd, BIOCSETIF, &ifr)); 88*57718be8SEnji Cooper RL(rump_sys_ioctl(bpfd, BIOCSFEEDBACK, &ifr)); 89*57718be8SEnji Cooper 90*57718be8SEnji Cooper if (getmtdata() != 0) 91*57718be8SEnji Cooper atf_tc_fail("test precondition failed: MT_DATA mbufs != 0"); 92*57718be8SEnji Cooper 93*57718be8SEnji Cooper ATF_REQUIRE_ERRNO(ENETDOWN, rump_sys_write(bpfd, buf, sizeof(buf))==-1); 94*57718be8SEnji Cooper 95*57718be8SEnji Cooper ATF_REQUIRE_EQ(getmtdata(), 0); 96*57718be8SEnji Cooper } 97*57718be8SEnji Cooper 98*57718be8SEnji Cooper #if (SIZE_MAX > UINT_MAX) 99*57718be8SEnji Cooper ATF_TC(bpfwritetrunc); 100*57718be8SEnji Cooper ATF_TC_HEAD(bpfwritetrunc, tc) 101*57718be8SEnji Cooper { 102*57718be8SEnji Cooper atf_tc_set_md_var(tc, "descr", "Checks that write to /dev/bpf " 103*57718be8SEnji Cooper "does not truncate size_t to int"); 104*57718be8SEnji Cooper } 105*57718be8SEnji Cooper 106*57718be8SEnji Cooper ATF_TC_BODY(bpfwritetrunc, tc) 107*57718be8SEnji Cooper { 108*57718be8SEnji Cooper int bpfd; 109*57718be8SEnji Cooper struct ifreq ifr; 110*57718be8SEnji Cooper struct iovec *iov; 111*57718be8SEnji Cooper size_t iovlen, sz; 112*57718be8SEnji Cooper const size_t extra_bytes = 28; 113*57718be8SEnji Cooper const size_t total = extra_bytes + UINT_MAX + 1; 114*57718be8SEnji Cooper long iov_max, vm_page_size; /* round_page wants vm_page_size variable */ 115*57718be8SEnji Cooper 116*57718be8SEnji Cooper memset(&ifr, 0, sizeof(ifr)); 117*57718be8SEnji Cooper 118*57718be8SEnji Cooper iov_max = sysconf(_SC_IOV_MAX); 119*57718be8SEnji Cooper vm_page_size = sysconf(_SC_PAGE_SIZE); 120*57718be8SEnji Cooper ATF_REQUIRE(iov_max > 1 && vm_page_size > 1); 121*57718be8SEnji Cooper 122*57718be8SEnji Cooper /* 123*57718be8SEnji Cooper * Minimize memory consumption by using many iovecs 124*57718be8SEnji Cooper * all pointing to one memory region. 125*57718be8SEnji Cooper */ 126*57718be8SEnji Cooper iov = calloc(iov_max, sizeof(struct iovec)); 127*57718be8SEnji Cooper ATF_REQUIRE(iov != NULL); 128*57718be8SEnji Cooper 129*57718be8SEnji Cooper sz = round_page((total + (iov_max - 1)) / iov_max); 130*57718be8SEnji Cooper 131*57718be8SEnji Cooper iov[0].iov_len = sz; 132*57718be8SEnji Cooper iov[0].iov_base = mmap(NULL, sz, PROT_READ, MAP_ANON, -1, 0); 133*57718be8SEnji Cooper ATF_REQUIRE(iov[0].iov_base != MAP_FAILED); 134*57718be8SEnji Cooper 135*57718be8SEnji Cooper iovlen = 1; 136*57718be8SEnji Cooper while (sz + iov[0].iov_len <= total) 137*57718be8SEnji Cooper { 138*57718be8SEnji Cooper iov[iovlen].iov_len = iov[0].iov_len; 139*57718be8SEnji Cooper iov[iovlen].iov_base = iov[0].iov_base; 140*57718be8SEnji Cooper sz += iov[0].iov_len; 141*57718be8SEnji Cooper iovlen++; 142*57718be8SEnji Cooper } 143*57718be8SEnji Cooper 144*57718be8SEnji Cooper if (sz < total) 145*57718be8SEnji Cooper { 146*57718be8SEnji Cooper iov[iovlen].iov_len = total - sz; 147*57718be8SEnji Cooper iov[iovlen].iov_base = iov[0].iov_base; 148*57718be8SEnji Cooper iovlen++; 149*57718be8SEnji Cooper } 150*57718be8SEnji Cooper 151*57718be8SEnji Cooper /* Sanity checks */ 152*57718be8SEnji Cooper ATF_REQUIRE(iovlen >= 1 && iovlen <= (size_t)iov_max); 153*57718be8SEnji Cooper ATF_REQUIRE_EQ(iov[iovlen-1].iov_len, total % iov[0].iov_len); 154*57718be8SEnji Cooper 155*57718be8SEnji Cooper RZ(rump_init()); 156*57718be8SEnji Cooper netcfg_rump_makeshmif("bpfwritetrunc", ifr.ifr_name); 157*57718be8SEnji Cooper netcfg_rump_if(ifr.ifr_name, "10.1.1.1", "255.0.0.0"); 158*57718be8SEnji Cooper 159*57718be8SEnji Cooper RL(bpfd = rump_sys_open("/dev/bpf", O_RDWR)); 160*57718be8SEnji Cooper RL(rump_sys_ioctl(bpfd, BIOCSETIF, &ifr)); 161*57718be8SEnji Cooper 162*57718be8SEnji Cooper ATF_CHECK_ERRNO(EMSGSIZE, rump_sys_writev(bpfd, iov, iovlen) == -1); 163*57718be8SEnji Cooper 164*57718be8SEnji Cooper munmap(iov[0].iov_base, iov[0].iov_len); 165*57718be8SEnji Cooper free(iov); 166*57718be8SEnji Cooper } 167*57718be8SEnji Cooper #endif /* #if (SIZE_MAX > UINT_MAX) */ 168*57718be8SEnji Cooper 169*57718be8SEnji Cooper ATF_TP_ADD_TCS(tp) 170*57718be8SEnji Cooper { 171*57718be8SEnji Cooper 172*57718be8SEnji Cooper ATF_TP_ADD_TC(tp, bpfwriteleak); 173*57718be8SEnji Cooper #if (SIZE_MAX > UINT_MAX) 174*57718be8SEnji Cooper ATF_TP_ADD_TC(tp, bpfwritetrunc); 175*57718be8SEnji Cooper #endif 176*57718be8SEnji Cooper return atf_no_error(); 177*57718be8SEnji Cooper } 178