1d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes/* 2d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * Check decoding of seccomp SECCOMP_SET_MODE_FILTER. 3d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 4d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * Copyright (c) 2016 Dmitry V. Levin <ldv@altlinux.org> 5d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * All rights reserved. 6d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 7d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * Redistribution and use in source and binary forms, with or without 8d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * modification, are permitted provided that the following conditions 9d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * are met: 10d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 1. Redistributions of source code must retain the above copyright 11d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * notice, this list of conditions and the following disclaimer. 12d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 2. Redistributions in binary form must reproduce the above copyright 13d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * notice, this list of conditions and the following disclaimer in the 14d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * documentation and/or other materials provided with the distribution. 15d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 3. The name of the author may not be used to endorse or promote products 16d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * derived from this software without specific prior written permission. 17d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * 18d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR 19d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES 20d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. 21d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, 22d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT 23d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, 24d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY 25d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT 26d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF 27d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 28d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes */ 29d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 30d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#include "tests.h" 31d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 32d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#include <stdio.h> 33d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#include <asm/unistd.h> 34d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#include <unistd.h> 35d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 36d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#ifdef HAVE_LINUX_SECCOMP_H 37d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes# include <linux/seccomp.h> 38d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#endif 39d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#ifdef HAVE_LINUX_FILTER_H 40d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes# include <linux/filter.h> 41d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#endif 42d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 43d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#if defined __NR_seccomp && defined SECCOMP_SET_MODE_FILTER 44d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 45d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes# define N 7 46d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 47d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughesint 48d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughesmain(void) 49d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes{ 50d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes struct sock_filter *const filter = tail_alloc(sizeof(*filter) * N); 51d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes const void *const efault = tail_alloc(1); 52d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes struct sock_fprog *const prog = tail_alloc(sizeof(*prog)); 53d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes long rc; 54d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 55d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes prog->filter = filter; 56d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes prog->len = N; 57d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes rc = syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER, -1, prog); 58d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes printf("seccomp(SECCOMP_SET_MODE_FILTER, %s, {len=%u, filter=%p})" 59d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes " = %ld %s (%m)\n", "SECCOMP_FILTER_FLAG_TSYNC|0xfffffffe", 60d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes prog->len, prog->filter, rc, errno2name()); 61d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 62d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes rc = syscall(__NR_seccomp, SECCOMP_SET_MODE_FILTER, -2L, efault); 63d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes printf("seccomp(SECCOMP_SET_MODE_FILTER, %s, %p) = %ld %s (%m)\n", 64d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes "0xfffffffe /* SECCOMP_FILTER_FLAG_??? */", 65d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes efault, rc, errno2name()); 66d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 67d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes puts("+++ exited with 0 +++"); 68d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes return 0; 69d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes} 70d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 71d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#else 72d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 73d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott HughesSKIP_MAIN_UNDEFINED("__NR_seccomp && SECCOMP_SET_MODE_FILTER") 74d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes 75d35df493b4e7684c50d2d2fa032ee3a7ac228009Elliott Hughes#endif 76