1 /* Copyright (C) 1997-2019 Free Software Foundation, Inc.
2 This file is part of the GNU C Library.
4 The GNU C Library is free software; you can redistribute it and/or
5 modify it under the terms of the GNU Lesser General Public
6 License as published by the Free Software Foundation; either
7 version 2.1 of the License, or (at your option) any later version.
9 The GNU C Library is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
12 Lesser General Public License for more details.
14 You should have received a copy of the GNU Lesser General Public
15 License along with the GNU C Library; if not, see
16 <https://www.gnu.org/licenses/>. */
19 #include <sys/types.h>
29 #include <libc-pointer-arith.h>
30 #include <dso_handle.h>
34 extern int __register_atfork (void (*) (void), void (*) (void), void (*) (void), void *);
36 static int __app_register_atfork (void (*prepare
) (void), void (*parent
) (void), void (*child
) (void))
38 return __register_atfork (prepare
, parent
, child
, __dso_handle
);
41 /* Number of forks seen. */
42 static int registered_forks
;
44 /* For each fork increment the fork count. */
51 struct test_case_struct
58 const char *wordv
[10];
62 /* Simple word- and field-splitting */
63 { 0, NULL
, "one", 0, 1, { "one", }, IFS
},
64 { 0, NULL
, "one two", 0, 2, { "one", "two", }, IFS
},
65 { 0, NULL
, "one two three", 0, 3, { "one", "two", "three", }, IFS
},
66 { 0, NULL
, " \tfoo\t\tbar ", 0, 2, { "foo", "bar", }, IFS
},
67 { 0, NULL
, "red , white blue", 0, 4, { "red", ",", "white", "blue", }, " ," },
68 { 0, NULL
, "one two three", 0, 3, { "one", "two", "three", }, "" },
69 { 0, NULL
, "one \"two three\"", 0, 2, { "one", "two three", }, IFS
},
70 { 0, NULL
, "one \"two three\"", 0, 2, { "one", "two three", }, "" },
71 { 0, "two three", "one \"$var\"", 0, 2, { "one", "two three", }, IFS
},
72 { 0, "two three", "one $var", 0, 3, { "one", "two", "three", }, IFS
},
73 { 0, "two three", "one \"$var\"", 0, 2, { "one", "two three", }, "" },
74 { 0, "two three", "one $var", 0, 2, { "one", "two three", }, "" },
76 /* The non-whitespace IFS char at the end delimits the second field
77 * but does NOT start a new field. */
78 { 0, ":abc:", "$var", 0, 2, { "", "abc", }, ":" },
80 { 0, NULL
, "$(echo :abc:)", 0, 2, { "", "abc", }, ":" },
81 { 0, NULL
, "$(echo :abc:\\ )", 0, 2, { "", "abc", }, ": " },
82 { 0, NULL
, "$(echo :abc\\ )", 0, 2, { "", "abc", }, ": " },
83 { 0, ":abc:", "$(echo $var)", 0, 2, { "", "abc", }, ":" },
84 { 0, NULL
, ":abc:", 0, 1, { ":abc:", }, ":" },
85 { 0, NULL
, "$(echo :abc:)def", 0, 3, { "", "abc", "def", },
87 { 0, NULL
, "$(echo abc:de)f", 0, 2, { "abc", "def", }, ":" },
88 { 0, NULL
, "$(echo abc:de)f:ghi", 0, 2, { "abc", "def:ghi", },
90 { 0, NULL
, "abc:d$(echo ef:ghi)", 0, 2, { "abc:def", "ghi", },
92 { 0, "abc:", "$var$(echo def:ghi)", 0, 3, { "abc", "def",
94 { 0, "abc:d", "$var$(echo ef:ghi)", 0, 3, { "abc", "def",
96 { 0, "def:ghi", "$(echo abc:)$var", 0, 3, { "abc", "def",
98 { 0, "ef:ghi", "$(echo abc:d)$var", 0, 3, { "abc", "def",
101 /* Simple parameter expansion */
102 { 0, "foo", "${var}", 0, 1, { "foo", }, IFS
},
103 { 0, "foo", "$var", 0, 1, { "foo", }, IFS
},
104 { 0, "foo", "\\\"$var\\\"", 0, 1, { "\"foo\"", }, IFS
},
105 { 0, "foo", "%$var%", 0, 1, { "%foo%", }, IFS
},
106 { 0, "foo", "-$var-", 0, 1, { "-foo-", }, IFS
},
108 /* Simple quote removal */
109 { 0, NULL
, "\"quoted\"", 0, 1, { "quoted", }, IFS
},
110 { 0, "foo", "\"$var\"\"$var\"", 0, 1, { "foofoo", }, IFS
},
111 { 0, NULL
, "'singly-quoted'", 0, 1, { "singly-quoted", }, IFS
},
112 { 0, NULL
, "contin\\\nuation", 0, 1, { "continuation", }, IFS
},
113 { 0, NULL
, "explicit ''", 0, 2, { "explicit", "", }, IFS
},
114 { 0, NULL
, "explicit \"\"", 0, 2, { "explicit", "", }, IFS
},
115 { 0, NULL
, "explicit ``", 0, 1, { "explicit", }, IFS
},
117 /* Simple command substitution */
118 { 0, NULL
, "$(echo hello)", 0, 1, { "hello", }, IFS
},
119 { 0, NULL
, "$( (echo hello) )", 0, 1, { "hello", }, IFS
},
120 { 0, NULL
, "$((echo hello);(echo there))", 0, 2, { "hello", "there", }, IFS
},
121 { 0, NULL
, "`echo one two`", 0, 2, { "one", "two", }, IFS
},
122 { 0, NULL
, "$(echo ')')", 0, 1, { ")" }, IFS
},
123 { 0, NULL
, "$(echo hello; echo)", 0, 1, { "hello", }, IFS
},
124 { 0, NULL
, "a$(echo b)c", 0, 1, { "abc", }, IFS
},
126 /* Simple arithmetic expansion */
127 { 0, NULL
, "$((1 + 1))", 0, 1, { "2", }, IFS
},
128 { 0, NULL
, "$((2-3))", 0, 1, { "-1", }, IFS
},
129 { 0, NULL
, "$((-1))", 0, 1, { "-1", }, IFS
},
130 { 0, NULL
, "$[50+20]", 0, 1, { "70", }, IFS
},
131 { 0, NULL
, "$(((2+3)*(4+5)))", 0, 1, { "45", }, IFS
},
132 { 0, NULL
, "$((010))", 0, 1, { "8" }, IFS
},
133 { 0, NULL
, "$((0x10))", 0, 1, { "16" }, IFS
},
134 { 0, NULL
, "$((010+0x10))", 0, 1, { "24" }, IFS
},
135 { 0, NULL
, "$((-010+0x10))", 0, 1, { "8" }, IFS
},
136 { 0, NULL
, "$((-0x10+010))", 0, 1, { "-8" }, IFS
},
138 /* Advanced parameter expansion */
139 { 0, NULL
, "${var:-bar}", 0, 1, { "bar", }, IFS
},
140 { 0, NULL
, "${var-bar}", 0, 1, { "bar", }, IFS
},
141 { 0, "", "${var:-bar}", 0, 1, { "bar", }, IFS
},
142 { 0, "foo", "${var:-bar}", 0, 1, { "foo", }, IFS
},
143 { 0, "", "${var-bar}", 0, 0, { NULL
, }, IFS
},
144 { 0, NULL
, "${var:=bar}", 0, 1, { "bar", }, IFS
},
145 { 0, NULL
, "${var=bar}", 0, 1, { "bar", }, IFS
},
146 { 0, "", "${var:=bar}", 0, 1, { "bar", }, IFS
},
147 { 0, "foo", "${var:=bar}", 0, 1, { "foo", }, IFS
},
148 { 0, "", "${var=bar}", 0, 0, { NULL
, }, IFS
},
149 { 0, "foo", "${var:?bar}", 0, 1, { "foo", }, IFS
},
150 { 0, NULL
, "${var:+bar}", 0, 0, { NULL
, }, IFS
},
151 { 0, NULL
, "${var+bar}", 0, 0, { NULL
, }, IFS
},
152 { 0, "", "${var:+bar}", 0, 0, { NULL
, }, IFS
},
153 { 0, "foo", "${var:+bar}", 0, 1, { "bar", }, IFS
},
154 { 0, "", "${var+bar}", 0, 1, { "bar", }, IFS
},
155 { 0, "12345", "${#var}", 0, 1, { "5", }, IFS
},
156 { 0, NULL
, "${var:-'}'}", 0, 1, { "}", }, IFS
},
157 { 0, NULL
, "${var-}", 0, 0, { NULL
}, IFS
},
159 { 0, "pizza", "${var#${var}}", 0, 0, { NULL
}, IFS
},
160 { 0, "pepperoni", "${var%$(echo oni)}", 0, 1, { "pepper" }, IFS
},
161 { 0, "6pack", "${var#$((6))}", 0, 1, { "pack" }, IFS
},
162 { 0, "b*witched", "${var##b*}", 0, 0, { NULL
}, IFS
},
163 { 0, "b*witched", "${var##\"b*\"}", 0, 1, { "witched" }, IFS
},
164 { 0, "banana", "${var%na*}", 0, 1, { "bana", }, IFS
},
165 { 0, "banana", "${var%%na*}", 0, 1, { "ba", }, IFS
},
166 { 0, "borabora-island", "${var#*bora}", 0, 1, { "bora-island", }, IFS
},
167 { 0, "borabora-island", "${var##*bora}", 0, 1, { "-island", }, IFS
},
168 { 0, "coconut", "${var##\\*co}", 0, 1, { "coconut", }, IFS
},
169 { 0, "100%", "${var%0%}", 0, 1, { "10" }, IFS
},
171 /* Pathname expansion */
172 { 0, NULL
, "???", 0, 2, { "one", "two", }, IFS
},
173 { 0, NULL
, "[ot]??", 0, 2, { "one", "two", }, IFS
},
174 { 0, NULL
, "t*", 0, 2, { "three", "two", }, IFS
},
175 { 0, NULL
, "\"t\"*", 0, 2, { "three", "two", }, IFS
},
177 /* Nested constructs */
178 { 0, "one two", "$var", 0, 2, { "one", "two", }, IFS
},
179 { 0, "one two three", "$var", 0, 3, { "one", "two", "three", }, IFS
},
180 { 0, " \tfoo\t\tbar ", "$var", 0, 2, { "foo", "bar", }, IFS
},
181 { 0, " red , white blue", "$var", 0, 3, { "red", "white", "blue", }, ", \n\t" },
182 { 0, " red , white blue", "\"$var\"", 0, 1, { " red , white blue", }, ", \n\t" },
183 { 0, NULL
, "\"$(echo hello there)\"", 0, 1, { "hello there", }, IFS
},
184 { 0, NULL
, "\"$(echo \"hello there\")\"", 0, 1, { "hello there", }, IFS
},
185 { 0, NULL
, "${var=one two} \"$var\"", 0, 3, { "one", "two", "one two", }, IFS
},
186 { 0, "1", "$(( $(echo 3)+$var ))", 0, 1, { "4", }, IFS
},
187 { 0, NULL
, "\"$(echo \"*\")\"", 0, 1, { "*", }, IFS
},
188 { 0, NULL
, "\"a\n\n$(echo)b\"", 0, 1, { "a\n\nb", }, IFS
},
189 { 0, "foo", "*$var*", 0, 1, { "*foo*", }, IFS
},
190 { 0, "o thr", "*$var*", 0, 2, { "two", "three" }, IFS
},
192 /* Different IFS values */
193 { 0, "a b\tc\nd ", "$var", 0, 4, { "a", "b", "c", "d" }, NULL
/* unset */ },
194 { 0, "a b\tc d ", "$var", 0, 1, { "a b\tc d " }, "" /* `null' */ },
195 { 0, "a,b c\n, d", "$var", 0, 3, { "a", "b c", " d" }, "\t\n," },
197 /* Other things that should succeed */
198 { 0, NULL
, "\\*\"|&;<>\"\\(\\)\\{\\}", 0, 1, { "*|&;<>(){}", }, IFS
},
199 { 0, "???", "$var", 0, 1, { "???", }, IFS
},
200 { 0, NULL
, "$var", 0, 0, { NULL
, }, IFS
},
201 { 0, NULL
, "\"\\n\"", 0, 1, { "\\n", }, IFS
},
202 { 0, NULL
, "", 0, 0, { NULL
, }, IFS
},
204 /* Flags not already covered (testit() has special handling for these) */
205 { 0, NULL
, "one two", WRDE_DOOFFS
, 2, { "one", "two", }, IFS
},
206 { 0, NULL
, "appended", WRDE_APPEND
, 3, { "pre1", "pre2", "appended", }, IFS
},
207 { 0, NULL
, "appended", WRDE_DOOFFS
|WRDE_APPEND
, 3, { "pre1", "pre2", "appended", }, IFS
},
209 /* Things that should fail */
210 { WRDE_BADCHAR
, NULL
, "new\nline", 0, 0, { NULL
, }, "" /* \n not IFS */ },
211 { WRDE_BADCHAR
, NULL
, "pipe|symbol", 0, 0, { NULL
, }, IFS
},
212 { WRDE_BADCHAR
, NULL
, "&ersand", 0, 0, { NULL
, }, IFS
},
213 { WRDE_BADCHAR
, NULL
, "semi;colon", 0, 0, { NULL
, }, IFS
},
214 { WRDE_BADCHAR
, NULL
, "<greater", 0, 0, { NULL
, }, IFS
},
215 { WRDE_BADCHAR
, NULL
, "less>", 0, 0, { NULL
, }, IFS
},
216 { WRDE_BADCHAR
, NULL
, "(open-paren", 0, 0, { NULL
, }, IFS
},
217 { WRDE_BADCHAR
, NULL
, "close-paren)", 0, 0, { NULL
, }, IFS
},
218 { WRDE_BADCHAR
, NULL
, "{open-brace", 0, 0, { NULL
, }, IFS
},
219 { WRDE_BADCHAR
, NULL
, "close-brace}", 0, 0, { NULL
, }, IFS
},
220 { WRDE_CMDSUB
, NULL
, "$(ls)", WRDE_NOCMD
, 0, { NULL
, }, IFS
},
221 { WRDE_BADVAL
, NULL
, "$var", WRDE_UNDEF
, 0, { NULL
, }, IFS
},
222 { WRDE_BADVAL
, NULL
, "$9", WRDE_UNDEF
, 0, { NULL
, }, IFS
},
223 { WRDE_SYNTAX
, NULL
, "$[50+20))", 0, 0, { NULL
, }, IFS
},
224 { WRDE_SYNTAX
, NULL
, "${%%noparam}", 0, 0, { NULL
, }, IFS
},
225 { WRDE_SYNTAX
, NULL
, "${missing-brace", 0, 0, { NULL
, }, IFS
},
226 { WRDE_SYNTAX
, NULL
, "$(for i in)", 0, 0, { NULL
, }, IFS
},
227 { WRDE_SYNTAX
, NULL
, "$((2+))", 0, 0, { NULL
, }, IFS
},
228 { WRDE_SYNTAX
, NULL
, "`", 0, 0, { NULL
, }, IFS
},
229 { WRDE_SYNTAX
, NULL
, "$((010+4+))", 0, 0, { NULL
}, IFS
},
230 /* Test for CVE-2014-7817. We test 3 combinations of command
231 substitution inside an arithmetic expression to make sure that
232 no commands are executed and error is returned. */
233 { WRDE_CMDSUB
, NULL
, "$((`echo 1`))", WRDE_NOCMD
, 0, { NULL
, }, IFS
},
234 { WRDE_CMDSUB
, NULL
, "$((1+`echo 1`))", WRDE_NOCMD
, 0, { NULL
, }, IFS
},
235 { WRDE_CMDSUB
, NULL
, "$((1+$((`echo 1`))))", WRDE_NOCMD
, 0, { NULL
, }, IFS
},
237 { WRDE_SYNTAX
, NULL
, "`\\", 0, 0, { NULL
, }, IFS
}, /* BZ 18042 */
238 { WRDE_SYNTAX
, NULL
, "${", 0, 0, { NULL
, }, IFS
}, /* BZ 18043 */
239 { WRDE_SYNTAX
, NULL
, "L${a:", 0, 0, { NULL
, }, IFS
}, /* BZ 18043#c4 */
240 { WRDE_SYNTAX
, NULL
, "$[1/0]", WRDE_NOCMD
, 0, {NULL
, }, IFS
}, /* BZ 18100 */
242 { -1, NULL
, NULL
, 0, 0, { NULL
, }, IFS
},
245 static int testit (struct test_case_struct
*tc
);
249 command_line_test (const char *words
)
253 int retval
= wordexp (words
, &we
, 0);
254 printf ("wordexp returned %d\n", retval
);
255 for (i
= 0; i
< we
.we_wordc
; i
++)
256 printf ("we_wordv[%d] = \"%s\"\n", i
, we
.we_wordv
[i
]);
260 main (int argc
, char *argv
[])
262 const char *globfile
[] = { "one", "two", "three", NULL
};
269 struct test_case_struct ts
;
273 command_line_test (argv
[1]);
277 cwd
= getcwd (NULL
, 0);
279 /* Set up arena for pathname expansion */
281 if (mkdir (tmpdir
, S_IRWXU
) || chdir (tmpdir
))
287 for (i
= 0; globfile
[i
]; ++i
)
288 if ((fd
= creat (globfile
[i
], S_IRUSR
| S_IWUSR
)) == -1
293 /* If we are not allowed to do command substitution, we install
294 fork handlers to verify that no forks happened. No forks should
295 happen at all if command substitution is disabled. */
296 if (__app_register_atfork (register_fork
, NULL
, NULL
) != 0)
298 printf ("Failed to register fork handler.\n");
302 for (test
= 0; test_case
[test
].retval
!= -1; test
++)
303 if (testit (&test_case
[test
]))
306 /* Tilde-expansion tests. */
307 pw
= getpwnam ("root");
315 ts
.wordv
[0] = pw
->pw_dir
;
323 ts
.words
= "${var#~root}x";
333 /* "~" expands to value of $HOME when HOME is set */
335 setenv ("HOME", "/dummy/home", 1);
338 ts
.words
= "~ ~/foo";
341 ts
.wordv
[0] = "/dummy/home";
342 ts
.wordv
[1] = "/dummy/home/foo";
348 /* "~" expands to home dir from passwd file if HOME is not set */
350 pw
= getpwuid (getuid ());
359 ts
.wordv
[0] = pw
->pw_dir
;
366 /* Integer overflow in division. */
368 static const char *const numbers
[] = {
374 "9223372036854775808",
375 "18446744073709551616",
376 "170141183460469231731687303715884105728",
377 "340282366920938463463374607431768211456",
381 for (const char *const *num
= numbers
; *num
; ++num
)
385 snprintf (pattern
, sizeof (pattern
), "$[(-%s)/(-1)]", *num
);
386 int ret
= wordexp (pattern
, &p
, WRDE_NOCMD
);
389 if (p
.we_wordc
!= 1 || strcmp (p
.we_wordv
[0], *num
) != 0)
391 printf ("Integer overflow for \"%s\" failed", pattern
);
396 else if (ret
!= WRDE_SYNTAX
)
398 printf ("Integer overflow for \"%s\" failed with %d",
405 puts ("tests completed, now cleaning up");
408 for (i
= 0; globfile
[i
]; ++i
)
409 remove (globfile
[i
]);
417 printf ("tests failed: %d\n", fail
);
423 at_page_end (const char *words
)
425 const int pagesize
= getpagesize ();
426 char *start
= mmap (0, 2 * pagesize
, PROT_READ
|PROT_WRITE
,
427 MAP_PRIVATE
|MAP_ANONYMOUS
, -1, 0);
429 if (start
== MAP_FAILED
)
432 if (mprotect (start
+ pagesize
, pagesize
, PROT_NONE
))
434 munmap (start
, 2 * pagesize
);
438 /* Includes terminating NUL. */
439 const size_t words_size
= strlen (words
) + 1;
440 char *words_start
= start
+ pagesize
- words_size
;
441 memcpy (words_start
, words
, words_size
);
447 testit (struct test_case_struct
*tc
)
450 wordexp_t we
, sav_we
;
457 setenv ("var", tc
->env
, 1);
462 setenv ("IFS", tc
->ifs
, 1);
466 sav_we
.we_wordc
= 99;
467 sav_we
.we_wordv
= &dummy
;
471 printf ("Test %d (%s): ", ++tests
, tc
->words
);
473 const char *words
= at_page_end (tc
->words
);
475 if (tc
->flags
& WRDE_NOCMD
)
476 registered_forks
= 0;
478 if (tc
->flags
& WRDE_APPEND
)
480 /* initial wordexp() call, to be appended to */
481 if (wordexp ("pre1 pre2", &we
, tc
->flags
& ~WRDE_APPEND
) != 0)
483 printf ("FAILED setup\n");
487 retval
= wordexp (words
, &we
, tc
->flags
);
489 if ((tc
->flags
& WRDE_NOCMD
)
490 && (registered_forks
> 0))
492 printf ("FAILED fork called for WRDE_NOCMD\n");
496 if (tc
->flags
& WRDE_DOOFFS
)
497 start_offs
= sav_we
.we_offs
;
499 if (retval
!= tc
->retval
|| (retval
== 0 && we
.we_wordc
!= tc
->wordc
))
501 else if (retval
== 0)
503 for (i
= 0; i
< start_offs
; ++i
)
504 if (we
.we_wordv
[i
] != NULL
)
510 for (i
= 0; i
< we
.we_wordc
; ++i
)
511 if (we
.we_wordv
[i
+start_offs
] == NULL
512 || strcmp (tc
->wordv
[i
], we
.we_wordv
[i
+start_offs
]) != 0)
522 printf ("Test words: <%s>, need retval %d, wordc %Zd\n",
523 tc
->words
, tc
->retval
, tc
->wordc
);
525 printf ("(preceded by %d NULLs)\n", start_offs
);
526 printf ("Got retval %d, wordc %Zd: ", retval
, we
.we_wordc
);
527 if (retval
== 0 || retval
== WRDE_NOSPACE
)
529 for (i
= 0; i
< we
.we_wordc
+ start_offs
; ++i
)
530 if (we
.we_wordv
[i
] == NULL
)
533 printf ("<%s> ", we
.we_wordv
[i
]);
537 else if (retval
!= 0 && retval
!= WRDE_NOSPACE
538 && (we
.we_wordc
!= sav_we
.we_wordc
539 || we
.we_wordv
!= sav_we
.we_wordv
540 || we
.we_offs
!= sav_we
.we_offs
))
543 printf ("FAILED to restore wordexp_t members\n");
548 if (retval
== 0 || retval
== WRDE_NOSPACE
)
551 const int page_size
= getpagesize ();
552 char *start
= (char *) PTR_ALIGN_DOWN (words
, page_size
);
554 if (munmap (start
, 2 * page_size
) != 0)