2 * Copyright (c) 1999 - 2006 Kungliga Tekniska Högskolan
3 * (Royal Institute of Technology, Stockholm, Sweden).
6 * Portions Copyright (c) 2009 Apple Inc. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in the
17 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the Institute nor the names of its contributors
20 * may be used to endorse or promote products derived from this software
21 * without specific prior written permission.
23 * THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
24 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
25 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
26 * ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
28 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
29 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
30 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
31 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
32 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
39 #ifdef HAVE_SYS_MMAN_H
47 #include "asn1-common.h"
48 #include "check-common.h"
60 /* #undef HAVE_MMAP */
63 map_alloc(enum map_type type
, const void *buf
,
64 size_t size
, struct map_page
**map
)
68 size_t len
= size
+ sizeof(long) * 2;
71 *map
= ecalloc(1, sizeof(**map
));
77 (*map
)->data_start
= p
+ sizeof(long);
78 for (i
= sizeof(long); i
> 0; i
--)
79 p
[sizeof(long) - i
] = 0xff - i
;
80 for (i
= sizeof(long); i
> 0; i
--)
81 p
[len
- i
] = 0xff - i
;
85 size_t pagesize
= getpagesize();
87 *map
= ecalloc(1, sizeof(**map
));
96 fd
= open ("/dev/zero", O_RDONLY
);
98 err (1, "open /dev/zero");
100 flags
|= MAP_PRIVATE
;
102 (*map
)->size
= size
+ pagesize
- (size
% pagesize
) + pagesize
* 2;
104 p
= (unsigned char *)mmap(0, (*map
)->size
, PROT_READ
| PROT_WRITE
,
106 if (p
== (unsigned char *)MAP_FAILED
)
111 ret
= mprotect (p
, pagesize
, 0);
115 ret
= mprotect (p
+ (*map
)->size
- pagesize
, pagesize
, 0);
121 (*map
)->data_start
= p
+ (*map
)->size
- pagesize
- size
;
124 (*map
)->data_start
= p
+ pagesize
;
130 (*map
)->data_size
= size
;
132 memcpy((*map
)->data_start
, buf
, size
);
133 return (*map
)->data_start
;
137 map_free(struct map_page
*map
, const char *test_name
, const char *map_name
)
140 unsigned char *p
= map
->start
;
143 for (i
= sizeof(long); i
> 0; i
--)
144 if (p
[sizeof(long) - i
] != 0xff - i
)
145 errx(1, "%s: %s underrun %d\n", test_name
, map_name
, i
);
146 for (i
= sizeof(long); i
> 0; i
--)
147 if (p
[map
->size
- i
] != 0xff - i
)
148 errx(1, "%s: %s overrun %lu\n", test_name
, map_name
,
149 (unsigned long)map
->size
- i
);
154 ret
= munmap (map
->start
, map
->size
);
162 print_bytes (unsigned const char *buf
, size_t len
)
166 for (i
= 0; i
< len
; ++i
)
167 printf ("%02x ", buf
[i
]);
171 #define MAP_FAILED (-1)
174 static char *current_test
= "<uninit>";
175 static char *current_state
= "<uninit>";
178 segv_handler(int sig
)
182 char msg
[] = "SIGSEGV i current test: ";
184 fd
= open("/dev/stdout", O_WRONLY
, 0600);
186 ret
= write(fd
, msg
, sizeof(msg
));
188 ret
= write(fd
, current_test
, strlen(current_test
));
190 ret
= write(fd
, " ", 1);
192 ret
= write(fd
, current_state
, strlen(current_state
));
194 ret
= write(fd
, "\n", 1);
201 generic_test (const struct test_case
*tests
,
204 int (ASN1CALL
*encode
)(unsigned char *, size_t, void *, size_t *),
205 int (ASN1CALL
*length
)(void *),
206 int (ASN1CALL
*decode
)(unsigned char *, size_t, void *, size_t *),
207 int (ASN1CALL
*free_data
)(void *),
208 int (*cmp
)(void *a
, void *b
),
209 int (ASN1CALL
*copy
)(const void *from
, void *to
))
211 unsigned char *buf
, *buf2
;
215 struct map_page
*data_map
, *buf_map
, *buf2_map
;
217 #ifdef HAVE_SIGACTION
218 struct sigaction sa
, osa
;
221 for (i
= 0; i
< ntests
; ++i
) {
223 size_t sz
, consumed_sz
, length_sz
, buf_sz
;
226 current_test
= tests
[i
].name
;
228 current_state
= "init";
230 #ifdef HAVE_SIGACTION
231 sigemptyset (&sa
.sa_mask
);
234 sa
.sa_flags
|= SA_RESETHAND
;
236 sa
.sa_handler
= segv_handler
;
237 sigaction (SIGSEGV
, &sa
, &osa
);
240 data
= map_alloc(OVERRUN
, NULL
, data_size
, &data_map
);
242 buf_sz
= tests
[i
].byte_len
;
243 buf
= map_alloc(UNDERRUN
, NULL
, buf_sz
, &buf_map
);
245 current_state
= "encode";
246 ret
= (*encode
) (buf
+ buf_sz
- 1, buf_sz
,
249 printf ("encoding of %s failed %d\n", tests
[i
].name
, ret
);
253 if (sz
!= tests
[i
].byte_len
) {
254 printf ("encoding of %s has wrong len (%lu != %lu)\n",
256 (unsigned long)sz
, (unsigned long)tests
[i
].byte_len
);
261 current_state
= "length";
262 length_sz
= (*length
) (tests
[i
].val
);
263 if (sz
!= length_sz
) {
264 printf ("length for %s is bad (%lu != %lu)\n",
265 tests
[i
].name
, (unsigned long)length_sz
, (unsigned long)sz
);
270 current_state
= "memcmp";
271 if (memcmp (buf
, tests
[i
].bytes
, tests
[i
].byte_len
) != 0) {
272 printf ("encoding of %s has bad bytes:\n"
273 "correct: ", tests
[i
].name
);
274 print_bytes ((unsigned char *)tests
[i
].bytes
, tests
[i
].byte_len
);
275 printf ("\nactual: ");
276 print_bytes (buf
, sz
);
279 rk_dumpdata("correct", tests
[i
].bytes
, tests
[i
].byte_len
);
280 rk_dumpdata("actual", buf
, sz
);
287 buf2
= map_alloc(OVERRUN
, buf
, sz
, &buf2_map
);
289 current_state
= "decode";
290 ret
= (*decode
) (buf2
, sz
, data
, &consumed_sz
);
292 printf ("decoding of %s failed %d\n", tests
[i
].name
, ret
);
296 if (sz
!= consumed_sz
) {
297 printf ("different length decoding %s (%ld != %ld)\n",
299 (unsigned long)sz
, (unsigned long)consumed_sz
);
303 current_state
= "cmp";
304 if ((*cmp
)(data
, tests
[i
].val
) != 0) {
305 printf ("%s: comparison failed\n", tests
[i
].name
);
310 current_state
= "copy";
312 to
= emalloc(data_size
);
313 ret
= (*copy
)(data
, to
);
315 printf ("copy of %s failed %d\n", tests
[i
].name
, ret
);
320 current_state
= "cmp-copy";
321 if ((*cmp
)(data
, to
) != 0) {
322 printf ("%s: copy comparison failed\n", tests
[i
].name
);
328 current_state
= "free";
337 current_state
= "free";
338 map_free(buf_map
, tests
[i
].name
, "encode");
339 map_free(buf2_map
, tests
[i
].name
, "decode");
340 map_free(data_map
, tests
[i
].name
, "data");
342 #ifdef HAVE_SIGACTION
343 sigaction (SIGSEGV
, &osa
, NULL
);
346 current_state
= "done";
353 * a test size (byte_len) of -1 means that the test tries to trigger a
354 * integer overflow (and later a malloc of to little memory), just
355 * allocate some memory and hope that is enough for that test.
359 generic_decode_fail (const struct test_case
*tests
,
362 int (ASN1CALL
*decode
)(unsigned char *, size_t, void *, size_t *))
368 struct map_page
*data_map
, *buf_map
;
370 #ifdef HAVE_SIGACTION
371 struct sigaction sa
, osa
;
374 for (i
= 0; i
< ntests
; ++i
) {
379 current_test
= tests
[i
].name
;
381 current_state
= "init";
383 #ifdef HAVE_SIGACTION
384 sigemptyset (&sa
.sa_mask
);
387 sa
.sa_flags
|= SA_RESETHAND
;
389 sa
.sa_handler
= segv_handler
;
390 sigaction (SIGSEGV
, &sa
, &osa
);
393 data
= map_alloc(OVERRUN
, NULL
, data_size
, &data_map
);
395 if (tests
[i
].byte_len
< 0xffffff && tests
[i
].byte_len
>= 0) {
396 sz
= tests
[i
].byte_len
;
397 bytes
= tests
[i
].bytes
;
403 buf
= map_alloc(OVERRUN
, bytes
, sz
, &buf_map
);
405 if (tests
[i
].byte_len
== -1)
408 current_state
= "decode";
409 ret
= (*decode
) (buf
, tests
[i
].byte_len
, data
, &sz
);
411 printf ("sucessfully decoded %s\n", tests
[i
].name
);
416 current_state
= "free";
418 map_free(buf_map
, tests
[i
].name
, "encode");
419 map_free(data_map
, tests
[i
].name
, "data");
421 #ifdef HAVE_SIGACTION
422 sigaction (SIGSEGV
, &osa
, NULL
);
425 current_state
= "done";