diff options
-rw-r--r-- | lib/test_user_copy.c | 89 |
1 files changed, 76 insertions, 13 deletions
diff --git a/lib/test_user_copy.c b/lib/test_user_copy.c index 73ff7a628e3a..6f335a3d4ae2 100644 --- a/lib/test_user_copy.c +++ b/lib/test_user_copy.c | |||
@@ -25,6 +25,23 @@ | |||
25 | #include <linux/uaccess.h> | 25 | #include <linux/uaccess.h> |
26 | #include <linux/vmalloc.h> | 26 | #include <linux/vmalloc.h> |
27 | 27 | ||
28 | /* | ||
29 | * Several 32-bit architectures support 64-bit {get,put}_user() calls. | ||
30 | * As there doesn't appear to be anything that can safely determine | ||
31 | * their capability at compile-time, we just have to opt-out certain archs. | ||
32 | */ | ||
33 | #if BITS_PER_LONG == 64 || (!defined(CONFIG_AVR32) && \ | ||
34 | !defined(CONFIG_BLACKFIN) && \ | ||
35 | !defined(CONFIG_M32R) && \ | ||
36 | !defined(CONFIG_M68K) && \ | ||
37 | !defined(CONFIG_MICROBLAZE) && \ | ||
38 | !defined(CONFIG_MN10300) && \ | ||
39 | !defined(CONFIG_NIOS2) && \ | ||
40 | !defined(CONFIG_PPC32) && \ | ||
41 | !defined(CONFIG_SUPERH)) | ||
42 | # define TEST_U64 | ||
43 | #endif | ||
44 | |||
28 | #define test(condition, msg) \ | 45 | #define test(condition, msg) \ |
29 | ({ \ | 46 | ({ \ |
30 | int cond = (condition); \ | 47 | int cond = (condition); \ |
@@ -40,7 +57,12 @@ static int __init test_user_copy_init(void) | |||
40 | char __user *usermem; | 57 | char __user *usermem; |
41 | char *bad_usermem; | 58 | char *bad_usermem; |
42 | unsigned long user_addr; | 59 | unsigned long user_addr; |
43 | unsigned long value = 0x5A; | 60 | u8 val_u8; |
61 | u16 val_u16; | ||
62 | u32 val_u32; | ||
63 | #ifdef TEST_U64 | ||
64 | u64 val_u64; | ||
65 | #endif | ||
44 | 66 | ||
45 | kmem = kmalloc(PAGE_SIZE * 2, GFP_KERNEL); | 67 | kmem = kmalloc(PAGE_SIZE * 2, GFP_KERNEL); |
46 | if (!kmem) | 68 | if (!kmem) |
@@ -61,14 +83,39 @@ static int __init test_user_copy_init(void) | |||
61 | /* | 83 | /* |
62 | * Legitimate usage: none of these copies should fail. | 84 | * Legitimate usage: none of these copies should fail. |
63 | */ | 85 | */ |
64 | ret |= test(copy_from_user(kmem, usermem, PAGE_SIZE), | 86 | memset(kmem, 0x3a, PAGE_SIZE * 2); |
65 | "legitimate copy_from_user failed"); | ||
66 | ret |= test(copy_to_user(usermem, kmem, PAGE_SIZE), | 87 | ret |= test(copy_to_user(usermem, kmem, PAGE_SIZE), |
67 | "legitimate copy_to_user failed"); | 88 | "legitimate copy_to_user failed"); |
68 | ret |= test(get_user(value, (unsigned long __user *)usermem), | 89 | memset(kmem, 0x0, PAGE_SIZE); |
69 | "legitimate get_user failed"); | 90 | ret |= test(copy_from_user(kmem, usermem, PAGE_SIZE), |
70 | ret |= test(put_user(value, (unsigned long __user *)usermem), | 91 | "legitimate copy_from_user failed"); |
71 | "legitimate put_user failed"); | 92 | ret |= test(memcmp(kmem, kmem + PAGE_SIZE, PAGE_SIZE), |
93 | "legitimate usercopy failed to copy data"); | ||
94 | |||
95 | #define test_legit(size, check) \ | ||
96 | do { \ | ||
97 | val_##size = check; \ | ||
98 | ret |= test(put_user(val_##size, (size __user *)usermem), \ | ||
99 | "legitimate put_user (" #size ") failed"); \ | ||
100 | val_##size = 0; \ | ||
101 | ret |= test(get_user(val_##size, (size __user *)usermem), \ | ||
102 | "legitimate get_user (" #size ") failed"); \ | ||
103 | ret |= test(val_##size != check, \ | ||
104 | "legitimate get_user (" #size ") failed to do copy"); \ | ||
105 | if (val_##size != check) { \ | ||
106 | pr_info("0x%llx != 0x%llx\n", \ | ||
107 | (unsigned long long)val_##size, \ | ||
108 | (unsigned long long)check); \ | ||
109 | } \ | ||
110 | } while (0) | ||
111 | |||
112 | test_legit(u8, 0x5a); | ||
113 | test_legit(u16, 0x5a5b); | ||
114 | test_legit(u32, 0x5a5b5c5d); | ||
115 | #ifdef TEST_U64 | ||
116 | test_legit(u64, 0x5a5b5c5d6a6b6c6d); | ||
117 | #endif | ||
118 | #undef test_legit | ||
72 | 119 | ||
73 | /* | 120 | /* |
74 | * Invalid usage: none of these copies should succeed. | 121 | * Invalid usage: none of these copies should succeed. |
@@ -105,12 +152,28 @@ static int __init test_user_copy_init(void) | |||
105 | PAGE_SIZE), | 152 | PAGE_SIZE), |
106 | "illegal reversed copy_to_user passed"); | 153 | "illegal reversed copy_to_user passed"); |
107 | 154 | ||
108 | value = 0x5a; | 155 | #define test_illegal(size, check) \ |
109 | ret |= test(!get_user(value, (unsigned long __user *)kmem), | 156 | do { \ |
110 | "illegal get_user passed"); | 157 | val_##size = (check); \ |
111 | ret |= test(value != 0, "zeroing failure for illegal get_user"); | 158 | ret |= test(!get_user(val_##size, (size __user *)kmem), \ |
112 | ret |= test(!put_user(value, (unsigned long __user *)kmem), | 159 | "illegal get_user (" #size ") passed"); \ |
113 | "illegal put_user passed"); | 160 | ret |= test(val_##size != (size)0, \ |
161 | "zeroing failure for illegal get_user (" #size ")"); \ | ||
162 | if (val_##size != (size)0) { \ | ||
163 | pr_info("0x%llx != 0\n", \ | ||
164 | (unsigned long long)val_##size); \ | ||
165 | } \ | ||
166 | ret |= test(!put_user(val_##size, (size __user *)kmem), \ | ||
167 | "illegal put_user (" #size ") passed"); \ | ||
168 | } while (0) | ||
169 | |||
170 | test_illegal(u8, 0x5a); | ||
171 | test_illegal(u16, 0x5a5b); | ||
172 | test_illegal(u32, 0x5a5b5c5d); | ||
173 | #ifdef TEST_U64 | ||
174 | test_illegal(u64, 0x5a5b5c5d6a6b6c6d); | ||
175 | #endif | ||
176 | #undef test_illegal | ||
114 | 177 | ||
115 | vm_munmap(user_addr, PAGE_SIZE * 2); | 178 | vm_munmap(user_addr, PAGE_SIZE * 2); |
116 | kfree(kmem); | 179 | kfree(kmem); |