1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
/*
* Check decoding of kexec_load syscall.
*
* Copyright (c) 2016 Eugene Syromyatnikov <evgsyr@gmail.com>
* Copyright (c) 2016-2021 The strace developers.
* All rights reserved.
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "tests.h"
#include "scno.h"
#include <stdio.h>
#include <unistd.h>
struct strval {
kernel_ulong_t val;
const char *str64;
const char *str32;
const char *str;
};
struct segm {
void *buf;
size_t bufsz;
void *mem;
size_t memsz;
};
int
main(void)
{
enum {
NUM_SEGMS = 17,
NUM_SEGMS_UNCUT = 5,
NUM_SEGMS_UNCUT_MAX = 9,
NUM_SEGMS_CUT = 12,
SEGMS_ARRAY_SIZE = sizeof(struct segm) * NUM_SEGMS,
};
static const kernel_ulong_t bogus_zero =
sizeof(long) < sizeof(kernel_long_t) ? F8ILL_KULONG_MASK : 0;
static const kernel_ulong_t bogus_entry =
(kernel_ulong_t) 0xdeadca57badda7a1ULL;
static const kernel_ulong_t bogus_nsegs =
(kernel_ulong_t) 0xdec0ded1defaced2ULL;
static const struct strval flags[] = {
{ (kernel_ulong_t) 0xbadc0dedda7a1054ULL,
"0xda7a0000 /* KEXEC_ARCH_??? */|0xbadc0ded0000",
"0xda7a0000 /* KEXEC_ARCH_??? */|0x",
"1054 /* KEXEC_??? */" },
{ 0, "", "", "KEXEC_ARCH_DEFAULT" },
{ 0x2a0003, "", "",
"KEXEC_ARCH_SH|KEXEC_ON_CRASH|KEXEC_PRESERVE_CONTEXT" },
{ 0xdead0000, "", "", "0xdead0000 /* KEXEC_ARCH_??? */" },
};
const char *errstr;
long rc;
struct segm *segms = tail_alloc(SEGMS_ARRAY_SIZE);
fill_memory(segms, SEGMS_ARRAY_SIZE);
segms[0].buf = segms[0].mem = NULL;
rc = syscall(__NR_kexec_load, bogus_zero, bogus_zero, bogus_zero,
flags[0].val);
printf("kexec_load(NULL, 0, NULL, %s%s) = %s\n",
sizeof(long) == 8 ? flags[0].str64 : flags[0].str32,
flags[0].str, sprintrc(rc));
rc = syscall(__NR_kexec_load, bogus_entry, bogus_nsegs,
segms + SEGMS_ARRAY_SIZE, flags[1].val);
printf("kexec_load(%#lx, %lu, %p, %s) = %s\n",
(unsigned long) bogus_entry, (unsigned long) bogus_nsegs,
segms + SEGMS_ARRAY_SIZE, flags[1].str, sprintrc(rc));
rc = syscall(__NR_kexec_load, bogus_entry, NUM_SEGMS,
segms, flags[2].val);
printf("kexec_load(%#lx, %lu, %p, %s) = %s\n",
(unsigned long) bogus_entry, (unsigned long) NUM_SEGMS,
segms, flags[2].str, sprintrc(rc));
rc = syscall(__NR_kexec_load, bogus_entry, NUM_SEGMS_CUT,
segms, flags[3].val);
errstr = sprintrc(rc);
printf("kexec_load(%#lx, %lu, [{buf=NULL, bufsz=%zu, mem=NULL, "
"memsz=%zu}, ",
(unsigned long) bogus_entry, (unsigned long) NUM_SEGMS_CUT,
segms[0].bufsz, segms[0].memsz);
for (unsigned int i = 1; i < NUM_SEGMS_UNCUT_MAX; ++i)
printf("{buf=%p, bufsz=%zu, mem=%p, memsz=%zu}, ",
segms[i].buf, segms[i].bufsz,
segms[i].mem, segms[i].memsz);
printf("...], %s) = %s\n", flags[3].str, errstr);
rc = syscall(__NR_kexec_load, bogus_entry, NUM_SEGMS_CUT,
segms + (NUM_SEGMS - NUM_SEGMS_UNCUT_MAX),
flags[0].val);
errstr = sprintrc(rc);
printf("kexec_load(%#lx, %lu, [",
(unsigned long) bogus_entry, (unsigned long) NUM_SEGMS_CUT);
for (unsigned int i = NUM_SEGMS - NUM_SEGMS_UNCUT_MAX;
i < NUM_SEGMS; ++i)
printf("{buf=%p, bufsz=%zu, mem=%p, memsz=%zu}, ",
segms[i].buf, segms[i].bufsz,
segms[i].mem, segms[i].memsz);
printf("... /* %p */], %s%s) = %s\n",
segms + NUM_SEGMS,
sizeof(long) == 8 ? flags[0].str64 : flags[0].str32,
flags[0].str, errstr);
rc = syscall(__NR_kexec_load, bogus_entry, NUM_SEGMS_UNCUT,
segms + (NUM_SEGMS - NUM_SEGMS_UNCUT),
flags[1].val);
errstr = sprintrc(rc);
printf("kexec_load(%#lx, %lu, [",
(unsigned long) bogus_entry, (unsigned long) NUM_SEGMS_UNCUT);
for (unsigned int i = NUM_SEGMS - NUM_SEGMS_UNCUT; i < NUM_SEGMS; ++i)
printf("{buf=%p, bufsz=%zu, mem=%p, memsz=%zu}%s",
segms[i].buf, segms[i].bufsz,
segms[i].mem, segms[i].memsz,
(i == NUM_SEGMS - 1) ? "" : ", ");
printf("], %s) = %s\n", flags[1].str, errstr);
rc = syscall(__NR_kexec_load, bogus_entry, NUM_SEGMS_CUT,
segms + 1, flags[2].val);
errstr = sprintrc(rc);
printf("kexec_load(%#lx, %lu, [",
(unsigned long) bogus_entry, (unsigned long) NUM_SEGMS_CUT);
for (unsigned int i = 1; i < NUM_SEGMS_UNCUT_MAX + 1; ++i)
printf("{buf=%p, bufsz=%zu, mem=%p, memsz=%zu}, ",
segms[i].buf, segms[i].bufsz,
segms[i].mem, segms[i].memsz);
printf("...], %s) = %s\n", flags[2].str, errstr);
puts("+++ exited with 0 +++");
return 0;
}
|
