| /* |
| * Check decoding of keyctl syscall. |
| * |
| * Copyright (c) 2016 Eugene Syromyatnikov <evgsyr@gmail.com> |
| * All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that the following conditions |
| * are met: |
| * 1. Redistributions of source code must retain the above copyright |
| * notice, this list of conditions and the following disclaimer. |
| * 2. Redistributions in binary form must reproduce the above copyright |
| * notice, this list of conditions and the following disclaimer in the |
| * documentation and/or other materials provided with the distribution. |
| * 3. The name of the author may not be used to endorse or promote products |
| * derived from this software without specific prior written permission. |
| * |
| * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| */ |
| |
| #include "tests.h" |
| |
| #include <asm/unistd.h> |
| |
| #ifdef __NR_keyctl |
| |
| # include <linux/types.h> |
| # include <linux/keyctl.h> |
| |
| # include <errno.h> |
| # include <inttypes.h> |
| # include <stdarg.h> |
| # include <stdbool.h> |
| # include <stdio.h> |
| # include <stdlib.h> |
| # include <string.h> |
| # include <unistd.h> |
| # include <sys/uio.h> |
| |
| /* This check should be before #include "xlat/keyctl_commands.h" */ |
| # ifndef KEYCTL_DH_COMPUTE |
| struct keyctl_dh_params { |
| int32_t private; |
| int32_t prime; |
| int32_t base; |
| }; |
| # endif |
| |
| # include "xlat.h" |
| # include "xlat/keyctl_commands.h" |
| |
| # ifndef KEY_SPEC_REQKEY_AUTH_KEY |
| # define KEY_SPEC_REQKEY_AUTH_KEY -7 |
| # endif |
| |
| # ifndef KEY_SPEC_REQUESTOR_KEYRING |
| # define KEY_SPEC_REQUESTOR_KEYRING -8 |
| # endif |
| |
| static const size_t limit = 10; |
| |
| /* |
| * Well, this is true for DESCRIBE and GET_SECURITY, and false for READ and |
| * DH_COMPUTE and I see no ability to pass this information without |
| * significantly breaking interface. |
| */ |
| bool nul_terminated_buf = true; |
| bool buf_in_arg = false; |
| |
| /* |
| * When this is called with positive size, the buffer provided is an "out" |
| * argument and rc contains resulting size (globally defined nul_terminated_buf |
| * controls whether it is nul-terminated or not). If size is negative, |
| * it contains "in" argument. |
| */ |
| void |
| print_quoted_string_limit(const char *str, size_t size, long rc) |
| { |
| size_t print_size = ((rc >= 0) && (size > 0)) ? |
| ((unsigned long) rc > size ? size : |
| (unsigned long) rc) : size; |
| size_t limited_size = print_size > limit ? limit : print_size; |
| |
| if ((rc == -1) && !buf_in_arg) { |
| printf("%p", str); |
| return; |
| } |
| |
| if (!nul_terminated_buf || |
| (strnlen(str, limited_size) == limited_size)) { |
| printf("\""); |
| print_quoted_memory(str, limited_size); |
| if (print_size > limit) |
| printf("\"..."); |
| else |
| printf("\""); |
| } else { |
| printf("\""); |
| print_quoted_string(str); |
| printf("\""); |
| } |
| } |
| |
| static void |
| print_arg(kernel_ulong_t arg, const char *str, const char *fmt, size_t size, |
| long rc) |
| { |
| if (size == (size_t) -1) |
| size = 0; |
| |
| if (str) { |
| printf("%s", str); |
| } else { |
| if (size == sizeof(uint64_t)) |
| printf(fmt, (uint64_t)arg); |
| else if (size == sizeof(uint32_t)) |
| printf(fmt, (uint32_t)arg); |
| else |
| print_quoted_string_limit((void *) (uintptr_t) arg, |
| size, rc); |
| } |
| } |
| |
| /* |
| * Arguments are passed as sz, val, str, fmt. Arguments are read until 4 |
| * arguments are retrieved or size of 0 is occurred. |
| * |
| * str == NULL && fmt == NULL && sz not in {4, 8} - print_quoted_string_limit is |
| * used for argument printing. If sz is negative, in argument is assumed, out |
| * otherwise. |
| */ |
| void |
| do_keyctl(kernel_ulong_t cmd, const char *cmd_str, ...) |
| { |
| kernel_ulong_t args[4] = { |
| (kernel_ulong_t) 0xdeadfee1badc0de5ULL, |
| (kernel_ulong_t) 0xdeadfee2badc0de6ULL, |
| (kernel_ulong_t) 0xdeadfee3badc0de7ULL, |
| (kernel_ulong_t) 0xdeadfee4badc0de8ULL, |
| }; |
| const char *arg_str[4] = { NULL }; |
| const char *arg_fmt[4] = { "%llu", "%llu", "%llu", "%llu" }; |
| size_t arg_sz[4] = { |
| sizeof(kernel_ulong_t), |
| sizeof(kernel_ulong_t), |
| sizeof(kernel_ulong_t), |
| sizeof(kernel_ulong_t), |
| }; |
| unsigned i; |
| unsigned cnt = 0; |
| |
| va_list ap; |
| |
| va_start(ap, cmd_str); |
| |
| do { |
| arg_sz[cnt] = va_arg(ap, size_t); |
| if (!arg_sz[cnt]) |
| break; |
| |
| if (arg_sz[cnt] == sizeof(uint64_t)) |
| args[cnt] = va_arg(ap, uint64_t); |
| else if (arg_sz[cnt] == sizeof(uint32_t)) |
| args[cnt] = va_arg(ap, uint32_t); |
| else |
| args[cnt] = (uintptr_t) va_arg(ap, void *); |
| |
| arg_str[cnt] = va_arg(ap, char *); |
| arg_fmt[cnt] = va_arg(ap, char *); |
| } while (++cnt < 4); |
| |
| long rc = syscall(__NR_keyctl, cmd, args[0], args[1], args[2], args[3]); |
| const char *errstr = sprintrc(rc); |
| printf("keyctl(%s", cmd_str); |
| for (i = 0; i < cnt; i++) { |
| printf(", "); |
| print_arg(args[i], arg_str[i], arg_fmt[i], arg_sz[i], rc); |
| } |
| printf(") = %s\n", errstr); |
| } |
| |
| int |
| main(void) |
| { |
| enum { PR_LIMIT = 10, IOV_SIZE = 11, IOV_STR_SIZE = 4096 }; |
| |
| static const char *kulong_fmt = |
| sizeof(kernel_ulong_t) == sizeof(uint64_t) ? "%#llx" : "%#x"; |
| static const char *ksize_fmt = |
| sizeof(kernel_ulong_t) == sizeof(uint64_t) ? "%llu" : "%u"; |
| static const char *ptr_fmt = |
| sizeof(void *) == sizeof(uint64_t) ? "%#llx" : "%#x"; |
| static const char unterminated1[] = { '\1', '\2', '\3', '\4', '\5' }; |
| static const char unterminated2[] = { '\6', '\7', '\10', '\11', '\12' }; |
| static const char short_type_str[] = "shrt type"; |
| static const char short_desc_str[] = "shrt desc"; |
| static const char long_type_str[] = "overly long key type"; |
| static const char long_desc_str[] = "overly long key description"; |
| static const int32_t bogus_key1 = 0xdeadf00d; |
| static const int32_t bogus_key2 = 0x1eefdead; |
| static const kernel_ulong_t bogus_key3 = |
| (kernel_ulong_t) 0xdec0ded1dec0ded2ULL; |
| static const char *bogus_key3_str = "-557785390"; |
| |
| static const struct keyctl_dh_params kcdhp_data = { |
| KEY_SPEC_GROUP_KEYRING, 1234567890, 3141592653U }; |
| static const char *kcdhp_str = "{private=KEY_SPEC_GROUP_KEYRING, " |
| "prime=1234567890, base=-1153374643}"; |
| |
| char *bogus_str = tail_memdup(unterminated1, sizeof(unterminated1)); |
| char *bogus_desc = tail_memdup(unterminated2, sizeof(unterminated2)); |
| char *short_type = tail_memdup(short_type_str, sizeof(short_type_str)); |
| char *short_desc = tail_memdup(short_desc_str, sizeof(short_desc_str)); |
| char *long_type = tail_memdup(long_type_str, sizeof(long_type_str)); |
| char *long_desc = tail_memdup(long_desc_str, sizeof(long_desc_str)); |
| char *kcdhp = tail_memdup(&kcdhp_data, sizeof(kcdhp_data)); |
| struct iovec *key_iov = tail_alloc(sizeof(*key_iov) * IOV_SIZE); |
| char *bogus_buf1 = tail_alloc(9); |
| char *bogus_buf2 = tail_alloc(256); |
| char *key_iov_str1; |
| char *key_iov_str2 = tail_alloc(4096); |
| ssize_t ret; |
| ssize_t kis_size = 0; |
| int i; |
| |
| key_iov[0].iov_base = short_type; |
| key_iov[0].iov_len = sizeof(short_type_str); |
| key_iov[1].iov_base = long_type; |
| key_iov[1].iov_len = sizeof(long_type_str); |
| key_iov[2].iov_base = short_desc; |
| key_iov[2].iov_len = sizeof(short_desc_str); |
| key_iov[3].iov_base = long_desc; |
| key_iov[3].iov_len = sizeof(long_desc_str); |
| key_iov[4].iov_base = bogus_str; |
| key_iov[4].iov_len = 32; |
| |
| for (i = 5; i < IOV_SIZE; i++) { |
| key_iov[i].iov_base = |
| (void *) (uintptr_t) (0xfffffacefffff00dULL + |
| 0x100000001ULL * i); |
| key_iov[i].iov_len = (size_t) (0xcaffeeeddefaced7ULL + |
| 0x100000001ULL * i); |
| } |
| |
| ret = asprintf(&key_iov_str1, "[{iov_base=%p, iov_len=%zu}, " |
| "{iov_base=%p, iov_len=%zu}, " |
| "{iov_base=%p, iov_len=%zu}, " |
| "{iov_base=%p, iov_len=%zu}]", |
| key_iov[IOV_SIZE - 4].iov_base, |
| key_iov[IOV_SIZE - 4].iov_len, |
| key_iov[IOV_SIZE - 3].iov_base, |
| key_iov[IOV_SIZE - 3].iov_len, |
| key_iov[IOV_SIZE - 2].iov_base, |
| key_iov[IOV_SIZE - 2].iov_len, |
| key_iov[IOV_SIZE - 1].iov_base, |
| key_iov[IOV_SIZE - 1].iov_len); |
| |
| if (ret < 0) |
| error_msg_and_fail("asprintf"); |
| |
| ret = snprintf(key_iov_str2, IOV_STR_SIZE, |
| "[{iov_base=\"%s\\0\", iov_len=%zu}, " |
| "{iov_base=\"%.10s\"..., iov_len=%zu}, " |
| "{iov_base=\"%s\\0\", iov_len=%zu}, " |
| "{iov_base=\"%.10s\"..., iov_len=%zu}, ", |
| (char *) key_iov[0].iov_base, key_iov[0].iov_len, |
| (char *) key_iov[1].iov_base, key_iov[1].iov_len, |
| (char *) key_iov[2].iov_base, key_iov[2].iov_len, |
| (char *) key_iov[3].iov_base, key_iov[3].iov_len); |
| |
| if ((ret < 0) || (ret >= IOV_STR_SIZE)) |
| error_msg_and_fail("snprintf"); |
| |
| for (i = 4; i < PR_LIMIT; i++) { |
| kis_size += ret; |
| |
| ret = snprintf(key_iov_str2 + kis_size, IOV_STR_SIZE - kis_size, |
| "{iov_base=%p, iov_len=%zu}, ", |
| key_iov[i].iov_base, key_iov[i].iov_len); |
| |
| if ((ret < 0) || (ret >= (IOV_STR_SIZE - kis_size))) |
| error_msg_and_fail("snprintf"); |
| } |
| |
| kis_size += ret; |
| snprintf(key_iov_str2 + kis_size, IOV_STR_SIZE - kis_size, "...]"); |
| |
| |
| /* Invalid command */ |
| do_keyctl((kernel_ulong_t) 0xbadc0dedfacefeedULL, |
| "0xfacefeed /* KEYCTL_??? */", |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee1badc0de5ULL, NULL, kulong_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee2badc0de6ULL, NULL, kulong_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee3badc0de7ULL, NULL, kulong_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee4badc0de8ULL, NULL, kulong_fmt); |
| |
| |
| /* GET_KEYRING_ID */ |
| do_keyctl(ARG_STR(KEYCTL_GET_KEYRING_ID), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xbadc0dedffffffffLLU, "-1", |
| NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_KEYRING_ID), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), "%d", |
| sizeof(int), 3141592653U, NULL, "%d", |
| NULL, 0UL); |
| |
| |
| /* KEYCTL_JOIN_SESSION_KEYRING */ |
| do_keyctl(ARG_STR(KEYCTL_JOIN_SESSION_KEYRING), |
| sizeof(char *), ARG_STR(NULL), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_JOIN_SESSION_KEYRING), |
| sizeof(char *), (char *) 0xfffffacefffffeedULL, NULL, ptr_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_JOIN_SESSION_KEYRING), |
| sizeof(char *), bogus_str, NULL, ptr_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_JOIN_SESSION_KEYRING), |
| sizeof(char *), ARG_STR("bogus name"), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_JOIN_SESSION_KEYRING), |
| sizeof(char *), "very long keyring name", "\"very long \"...", |
| NULL, 0UL); |
| |
| |
| /* KEYCTL_UPDATE */ |
| |
| buf_in_arg = true; |
| |
| do_keyctl(ARG_STR(KEYCTL_UPDATE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(char *), ARG_STR(NULL), NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_UPDATE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), (char *) 0xfffffacefffffeedULL, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee4badc0de8ULL, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_UPDATE), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(char *), bogus_str, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfee4badc0de8ULL, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_UPDATE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(short_desc_str), short_desc, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) sizeof(short_desc_str) - 1, NULL, |
| ksize_fmt, |
| 0UL); |
| |
| buf_in_arg = false; |
| |
| |
| /* KEYCTL_REVOKE */ |
| do_keyctl(ARG_STR(KEYCTL_REVOKE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_REVOKE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_REVOKE), |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_REVOKE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_CHOWN */ |
| do_keyctl(ARG_STR(KEYCTL_CHOWN), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(uid_t), ARG_STR(-1), NULL, |
| sizeof(gid_t), ARG_STR(-1), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_CHOWN), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(uid_t), 2718281828U, NULL, "%u", |
| sizeof(gid_t), 3141592653U, NULL, "%u", 0UL); |
| |
| |
| /* KEYCTL_SETPERM */ |
| do_keyctl(ARG_STR(KEYCTL_SETPERM), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQKEY_AUTH_KEY), NULL, |
| sizeof(uint32_t), 0xffffffffU, |
| "KEY_POS_VIEW|KEY_POS_READ|KEY_POS_WRITE|" |
| "KEY_POS_SEARCH|KEY_POS_LINK|KEY_POS_SETATTR|" |
| "KEY_USR_VIEW|KEY_USR_READ|KEY_USR_WRITE|" |
| "KEY_USR_SEARCH|KEY_USR_LINK|KEY_USR_SETATTR|" |
| "KEY_GRP_VIEW|KEY_GRP_READ|KEY_GRP_WRITE|" |
| "KEY_GRP_SEARCH|KEY_GRP_LINK|KEY_GRP_SETATTR|" |
| "KEY_OTH_VIEW|KEY_OTH_READ|KEY_OTH_WRITE|" |
| "KEY_OTH_SEARCH|KEY_OTH_LINK|KEY_OTH_SETATTR|" |
| "0xc0c0c0c0", NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_SETPERM), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(uint32_t), 0, NULL, "%#x", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_SETPERM), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(uint32_t), 0xc0c0c0c0, "0xc0c0c0c0 /* KEY_??? */", |
| NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_DESCRIBE */ |
| do_keyctl(ARG_STR(KEYCTL_DESCRIBE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DESCRIBE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DESCRIBE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 9, (uintptr_t) bogus_buf1, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 9, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DESCRIBE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 256, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 256, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DESCRIBE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) -4, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) -4, NULL, ksize_fmt, 0UL); |
| |
| |
| /* KEYCTL_CLEAR */ |
| do_keyctl(ARG_STR(KEYCTL_CLEAR), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_CLEAR), |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_CLEAR), |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_CLEAR), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_LINK */ |
| do_keyctl(ARG_STR(KEYCTL_LINK), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_LINK), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_LINK), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_UNLINK */ |
| do_keyctl(ARG_STR(KEYCTL_UNLINK), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_UNLINK), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_UNLINK), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_SEARCH */ |
| buf_in_arg = true; |
| |
| do_keyctl(ARG_STR(KEYCTL_SEARCH), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_REQUESTOR_KEYRING), NULL, |
| sizeof(char *), ARG_STR(NULL), NULL, |
| sizeof(char *), ARG_STR(NULL), NULL, |
| sizeof(int32_t), 0, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_SEARCH), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), (char *) 0xfffffacefffffeedULL, NULL, ptr_fmt, |
| sizeof(char *), (char *) 0xfffff00dfffff157ULL, NULL, ptr_fmt, |
| sizeof(int32_t), ARG_STR(KEY_SPEC_USER_SESSION_KEYRING), |
| NULL); |
| do_keyctl(ARG_STR(KEYCTL_SEARCH), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(char *), bogus_str, NULL, ptr_fmt, |
| sizeof(char *), bogus_desc, NULL, ptr_fmt, |
| sizeof(int32_t), bogus_key1, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_SEARCH), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(short_type_str), short_type, NULL, NULL, |
| sizeof(short_desc_str), short_desc, NULL, NULL, |
| sizeof(int32_t), bogus_key2, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_SEARCH), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(long_type_str), long_type, NULL, NULL, |
| sizeof(long_type_str), long_desc, NULL, NULL, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL); |
| |
| buf_in_arg = false; |
| |
| |
| /* KEYCTL_READ */ |
| nul_terminated_buf = false; |
| |
| /* Empty result is expected for these */ |
| bogus_buf1[0] = '\377'; |
| bogus_buf2[0] = '\377'; |
| |
| do_keyctl(ARG_STR(KEYCTL_READ), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_READ), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_READ), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 9, (uintptr_t) bogus_buf1, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 9, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_READ), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 256, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 256, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_READ), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) -4, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) -4, NULL, ksize_fmt, 0UL); |
| |
| nul_terminated_buf = true; |
| |
| /* KEYCTL_INSTANTIATE */ |
| buf_in_arg = true; |
| |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| sizeof(int32_t), 0, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), (char *) 0xfffffacefffffeedULL, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfeedLLU, NULL, ksize_fmt, |
| sizeof(int32_t), bogus_key1, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(char *), bogus_str, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 32LLU, NULL, ksize_fmt, |
| sizeof(int32_t), bogus_key2, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(short_type_str), short_desc, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) sizeof(short_type_str) - 1, NULL, |
| ksize_fmt, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, |
| sizeof(long_type_str), long_desc, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) sizeof(long_type_str), NULL, ksize_fmt, |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL); |
| |
| buf_in_arg = false; |
| |
| |
| /* KEYCTL_NEGATE */ |
| do_keyctl(ARG_STR(KEYCTL_NEGATE), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(uint32_t), 0, NULL, "%u", |
| sizeof(int32_t), 0, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_NEGATE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(uint32_t), 3141592653U, NULL, "%u", |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_NEGATE), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, "3134983661", NULL, |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_NEGATE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, "3134983661", NULL, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_SET_REQKEY_KEYRING */ |
| do_keyctl(ARG_STR(KEYCTL_SET_REQKEY_KEYRING), |
| sizeof(int32_t), ARG_STR(KEY_REQKEY_DEFL_NO_CHANGE), NULL, |
| 0UL); |
| /* |
| * Keep it commented out until proper way of faking syscalls is not |
| * implemented. |
| */ |
| /* do_keyctl(ARG_STR(KEYCTL_SET_REQKEY_KEYRING), |
| sizeof(int32_t), |
| ARG_STR(KEY_REQKEY_DEFL_REQUESTOR_KEYRING), NULL, 0UL); */ |
| do_keyctl(ARG_STR(KEYCTL_SET_REQKEY_KEYRING), |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, |
| "0xbadc0ded /* KEY_REQKEY_DEFL_??? */", NULL, 0UL); |
| |
| |
| /* KEYCTL_SET_TIMEOUT */ |
| do_keyctl(ARG_STR(KEYCTL_SET_TIMEOUT), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(uint32_t), 0, NULL, "%u", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_SET_TIMEOUT), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(uint32_t), 3141592653U, NULL, "%u", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_SET_TIMEOUT), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, "3134983661", NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_ASSUME_AUTHORITY */ |
| do_keyctl(ARG_STR(KEYCTL_ASSUME_AUTHORITY), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_ASSUME_AUTHORITY), |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_ASSUME_AUTHORITY), |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_ASSUME_AUTHORITY), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_GET_SECURITY */ |
| do_keyctl(ARG_STR(KEYCTL_GET_SECURITY), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(uint32_t), 0xbadc0dedU, NULL, "%u", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_SECURITY), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_SECURITY), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 9, (uintptr_t) bogus_buf1, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 9, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_SECURITY), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) 256, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 256, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_SECURITY), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_THREAD_KEYRING), NULL, |
| (size_t) -4, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) -4, NULL, ksize_fmt, 0UL); |
| |
| |
| /* KEYCTL_SESSION_TO_PARENT */ |
| do_keyctl(ARG_STR(KEYCTL_SESSION_TO_PARENT), 0UL); |
| |
| |
| /* KEYCTL_REJECT */ |
| do_keyctl(ARG_STR(KEYCTL_REJECT), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(uint32_t), 0, NULL, "%u", |
| sizeof(uint32_t), 0, NULL, "%u", |
| sizeof(int32_t), 0, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_REJECT), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(uint32_t), 3141592653U, NULL, "%u", |
| sizeof(uint32_t), 2718281828U, NULL, "%u", |
| sizeof(int32_t), bogus_key1, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_REJECT), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadca75facef157LLU, "4207866199", NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, "3134983661", NULL, |
| sizeof(int32_t), bogus_key2, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_REJECT), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, "3134983661", NULL, |
| sizeof(uint32_t), ARG_STR(ENODEV), NULL, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL); |
| |
| |
| /* KEYCTL_INSTANTIATE_IOV */ |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE_IOV), |
| sizeof(int32_t), 0, NULL, "%d", |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| sizeof(int32_t), 0, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE_IOV), |
| sizeof(int32_t), bogus_key1, NULL, "%d", |
| sizeof(char *), (char *) 0xfffffacefffffeedULL, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xdeadfeedLLU, NULL, ksize_fmt, |
| sizeof(int32_t), bogus_key1, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE_IOV), |
| sizeof(int32_t), bogus_key2, NULL, "%d", |
| sizeof(char *), key_iov + IOV_SIZE, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 32LLU, NULL, ksize_fmt, |
| sizeof(int32_t), bogus_key2, NULL, "%d"); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE_IOV), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| sizeof(key_iov), key_iov + IOV_SIZE - 4, key_iov_str1, NULL, |
| sizeof(kernel_ulong_t), (kernel_ulong_t) 4, NULL, |
| ksize_fmt, |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL); |
| do_keyctl(ARG_STR(KEYCTL_INSTANTIATE_IOV), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, |
| sizeof(key_iov), key_iov, key_iov_str2, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) IOV_SIZE, NULL, ksize_fmt, |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL); |
| |
| |
| /* KEYCTL_INVALIDATE */ |
| do_keyctl(ARG_STR(KEYCTL_INVALIDATE), |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_INVALIDATE), |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_INVALIDATE), |
| sizeof(int32_t), bogus_key2, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_INVALIDATE), |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_GET_PERSISTENT */ |
| do_keyctl(ARG_STR(KEYCTL_GET_PERSISTENT), |
| sizeof(uid_t), ARG_STR(-1), NULL, |
| sizeof(int32_t), ARG_STR(KEY_SPEC_GROUP_KEYRING), NULL, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_PERSISTENT), |
| sizeof(uid_t), 2718281828U, NULL, "%u", |
| sizeof(int32_t), bogus_key1, NULL, "%d", 0UL); |
| do_keyctl(ARG_STR(KEYCTL_GET_PERSISTENT), |
| sizeof(uid_t), 2718281828U, NULL, "%u", |
| sizeof(kernel_ulong_t), bogus_key3, bogus_key3_str, NULL, |
| 0UL); |
| |
| |
| /* KEYCTL_DH_COMPUTE */ |
| nul_terminated_buf = false; |
| |
| /* Empty result is expected for these */ |
| bogus_buf1[0] = '\377'; |
| bogus_buf2[0] = '\377'; |
| |
| do_keyctl(ARG_STR(KEYCTL_DH_COMPUTE), |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(char *), ARG_STR(NULL), ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DH_COMPUTE), |
| sizeof(char *), kcdhp + 1, NULL, ptr_fmt, |
| sizeof(char *), (char *) 0xfffff157ffffdeadULL, NULL, ptr_fmt, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 0xfeedf157badc0dedLLU, NULL, ksize_fmt, |
| 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DH_COMPUTE), |
| sizeof(kcdhp), kcdhp, kcdhp_str, NULL, |
| (size_t) 9, (uintptr_t) bogus_buf1, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 9, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DH_COMPUTE), |
| sizeof(kcdhp), kcdhp, kcdhp_str, NULL, |
| (size_t) 256, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) 256, NULL, ksize_fmt, 0UL); |
| do_keyctl(ARG_STR(KEYCTL_DH_COMPUTE), |
| sizeof(kcdhp), kcdhp, kcdhp_str, NULL, |
| (size_t) -1, (uintptr_t) bogus_buf2, NULL, NULL, |
| sizeof(kernel_ulong_t), |
| (kernel_ulong_t) -1, NULL, ksize_fmt, 0UL); |
| |
| nul_terminated_buf = true; |
| |
| puts("+++ exited with 0 +++"); |
| |
| return 0; |
| } |
| |
| #else |
| |
| SKIP_MAIN_UNDEFINED("__NR_keyctl"); |
| |
| #endif |
