| // SPDX-License-Identifier: GPL-2.0 |
| /* |
| * Test that loads/stores expand the stack segment, or trigger a SEGV, in |
| * various conditions. |
| * |
| * Based on test code by Tom Lane. |
| */ |
| |
| #undef NDEBUG |
| #include <assert.h> |
| |
| #include <err.h> |
| #include <errno.h> |
| #include <stdio.h> |
| #include <signal.h> |
| #include <stdlib.h> |
| #include <string.h> |
| #include <sys/resource.h> |
| #include <sys/time.h> |
| #include <sys/types.h> |
| #include <sys/wait.h> |
| #include <unistd.h> |
| |
| #define _KB (1024) |
| #define _MB (1024 * 1024) |
| |
| volatile char *stack_top_ptr; |
| volatile unsigned long stack_top_sp; |
| volatile char c; |
| |
| enum access_type { |
| LOAD, |
| STORE, |
| }; |
| |
| /* |
| * Consume stack until the stack pointer is below @target_sp, then do an access |
| * (load or store) at offset @delta from either the base of the stack or the |
| * current stack pointer. |
| */ |
| __attribute__ ((noinline)) |
| int consume_stack(unsigned long target_sp, unsigned long stack_high, int delta, enum access_type type) |
| { |
| unsigned long target; |
| char stack_cur; |
| |
| if ((unsigned long)&stack_cur > target_sp) |
| return consume_stack(target_sp, stack_high, delta, type); |
| else { |
| // We don't really need this, but without it GCC might not |
| // generate a recursive call above. |
| stack_top_ptr = &stack_cur; |
| |
| #ifdef __powerpc__ |
| asm volatile ("mr %[sp], %%r1" : [sp] "=r" (stack_top_sp)); |
| #else |
| asm volatile ("mov %%rsp, %[sp]" : [sp] "=r" (stack_top_sp)); |
| #endif |
| target = stack_high - delta + 1; |
| volatile char *p = (char *)target; |
| |
| if (type == STORE) |
| *p = c; |
| else |
| c = *p; |
| |
| // Do something to prevent the stack frame being popped prior to |
| // our access above. |
| getpid(); |
| } |
| |
| return 0; |
| } |
| |
| static int search_proc_maps(char *needle, unsigned long *low, unsigned long *high) |
| { |
| unsigned long start, end; |
| static char buf[4096]; |
| char name[128]; |
| FILE *f; |
| int rc; |
| |
| f = fopen("/proc/self/maps", "r"); |
| if (!f) { |
| perror("fopen"); |
| return -1; |
| } |
| |
| while (fgets(buf, sizeof(buf), f)) { |
| rc = sscanf(buf, "%lx-%lx %*c%*c%*c%*c %*x %*d:%*d %*d %127s\n", |
| &start, &end, name); |
| if (rc == 2) |
| continue; |
| |
| if (rc != 3) { |
| printf("sscanf errored\n"); |
| rc = -1; |
| break; |
| } |
| |
| if (strstr(name, needle)) { |
| *low = start; |
| *high = end - 1; |
| rc = 0; |
| break; |
| } |
| } |
| |
| fclose(f); |
| |
| return rc; |
| } |
| |
| int child(unsigned int stack_used, int delta, enum access_type type) |
| { |
| unsigned long low, stack_high; |
| |
| assert(search_proc_maps("[stack]", &low, &stack_high) == 0); |
| |
| assert(consume_stack(stack_high - stack_used, stack_high, delta, type) == 0); |
| |
| printf("Access OK: %s delta %-7d used size 0x%06x stack high 0x%lx top_ptr %p top sp 0x%lx actual used 0x%lx\n", |
| type == LOAD ? "load" : "store", delta, stack_used, stack_high, |
| stack_top_ptr, stack_top_sp, stack_high - stack_top_sp + 1); |
| |
| return 0; |
| } |
| |
| static int test_one(unsigned int stack_used, int delta, enum access_type type) |
| { |
| pid_t pid; |
| int rc; |
| |
| pid = fork(); |
| if (pid == 0) |
| exit(child(stack_used, delta, type)); |
| |
| assert(waitpid(pid, &rc, 0) != -1); |
| |
| if (WIFEXITED(rc) && WEXITSTATUS(rc) == 0) |
| return 0; |
| |
| // We don't expect a non-zero exit that's not a signal |
| assert(!WIFEXITED(rc)); |
| |
| printf("Faulted: %s delta %-7d used size 0x%06x signal %d\n", |
| type == LOAD ? "load" : "store", delta, stack_used, |
| WTERMSIG(rc)); |
| |
| return 1; |
| } |
| |
| // This is fairly arbitrary but is well below any of the targets below, |
| // so that the delta between the stack pointer and the target is large. |
| #define DEFAULT_SIZE (32 * _KB) |
| |
| static void test_one_type(enum access_type type, unsigned long page_size, unsigned long rlim_cur) |
| { |
| unsigned long delta; |
| |
| // We should be able to access anywhere within the rlimit |
| for (delta = page_size; delta <= rlim_cur; delta += page_size) |
| assert(test_one(DEFAULT_SIZE, delta, type) == 0); |
| |
| assert(test_one(DEFAULT_SIZE, rlim_cur, type) == 0); |
| |
| // But if we go past the rlimit it should fail |
| assert(test_one(DEFAULT_SIZE, rlim_cur + 1, type) != 0); |
| } |
| |
| static int test(void) |
| { |
| unsigned long page_size; |
| struct rlimit rlimit; |
| |
| page_size = getpagesize(); |
| getrlimit(RLIMIT_STACK, &rlimit); |
| printf("Stack rlimit is 0x%lx\n", rlimit.rlim_cur); |
| |
| printf("Testing loads ...\n"); |
| test_one_type(LOAD, page_size, rlimit.rlim_cur); |
| printf("Testing stores ...\n"); |
| test_one_type(STORE, page_size, rlimit.rlim_cur); |
| |
| printf("All OK\n"); |
| |
| return 0; |
| } |
| |
| #ifdef __powerpc__ |
| #include "utils.h" |
| |
| int main(void) |
| { |
| return test_harness(test, "stack_expansion_ldst"); |
| } |
| #else |
| int main(void) |
| { |
| return test(); |
| } |
| #endif |