419 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			C
		
	
	
	
			
		
		
	
	
			419 lines
		
	
	
		
			12 KiB
		
	
	
	
		
			C
		
	
	
	
| /*
 | |
|  * Check decoding of ioctl SG_IO v3 commands.
 | |
|  *
 | |
|  * Copyright (c) 2017 Dmitry V. Levin <ldv@altlinux.org>
 | |
|  * All rights reserved.
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  * 1. Redistributions of source code must retain the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer.
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer in the
 | |
|  *    documentation and/or other materials provided with the distribution.
 | |
|  * 3. The name of the author may not be used to endorse or promote products
 | |
|  *    derived from this software without specific prior written permission.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 | |
|  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 | |
|  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 | |
|  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 | |
|  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 | |
|  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 | |
|  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 | |
|  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 | |
|  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 | |
|  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 | |
|  */
 | |
| 
 | |
| #include "tests.h"
 | |
| 
 | |
| #ifdef HAVE_SCSI_SG_H
 | |
| 
 | |
| # include <inttypes.h>
 | |
| # include <stdio.h>
 | |
| # include <sys/ioctl.h>
 | |
| # include <sys/uio.h>
 | |
| # include <scsi/sg.h>
 | |
| 
 | |
| int
 | |
| main(void)
 | |
| {
 | |
| 	ioctl(-1, SG_IO, 0);
 | |
| 	printf("ioctl(-1, SG_IO, NULL) = -1 EBADF (%m)\n");
 | |
| 
 | |
| 	TAIL_ALLOC_OBJECT_CONST_PTR(struct sg_io_hdr, sg_io);
 | |
| 	fill_memory(sg_io, sizeof(*sg_io));
 | |
| 
 | |
| 	const void *const efault = sg_io + 1;
 | |
| 	ioctl(-1, SG_IO, efault);
 | |
| 	printf("ioctl(-1, SG_IO, %p) = -1 EBADF (%m)\n", efault);
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, [%u]) = -1 EBADF (%m)\n", sg_io->interface_id);
 | |
| 
 | |
| 	TAIL_ALLOC_OBJECT_CONST_PTR(unsigned int, piid);
 | |
| 	*piid = (unsigned char) 'S';
 | |
| 	ioctl(-1, SG_IO, piid);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S', %p}) = -1 EBADF (%m)\n", piid + 1);
 | |
| 
 | |
| 	sg_io->interface_id = (unsigned char) 'S';
 | |
| 	sg_io->dxfer_direction = -2;
 | |
| 	sg_io->flags = -1U;
 | |
| 	sg_io->info = -1U;
 | |
| 	sg_io->dxferp = (void *) (unsigned long) 0xfacefeedfffffff1ULL;
 | |
| 	sg_io->cmdp = (void *) (unsigned long) 0xfacefeedfffffff2ULL;
 | |
| 	sg_io->sbp = (void *) (unsigned long) 0xfacefeedfffffff3ULL;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_TO_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_DIRECT_IO|SG_FLAG_UNUSED_LUN_INHIBIT"
 | |
| 	       "|SG_FLAG_MMAP_IO|SG_FLAG_NO_DXFER"
 | |
| 	       "|SG_FLAG_Q_AT_TAIL|SG_FLAG_Q_AT_HEAD|0xfffeffc8"
 | |
| 	       ", dxferp=%p"
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xfffffff8"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       sg_io->dxferp,
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	sg_io->dxfer_direction = -3;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_FROM_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_DIRECT_IO|SG_FLAG_UNUSED_LUN_INHIBIT"
 | |
| 	       "|SG_FLAG_MMAP_IO|SG_FLAG_NO_DXFER"
 | |
| 	       "|SG_FLAG_Q_AT_TAIL|SG_FLAG_Q_AT_HEAD|0xfffeffc8"
 | |
| 	       ", dxferp=%p"
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xfffffff8"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       sg_io->dxferp,
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	const struct iovec iov[] = {
 | |
| 		{
 | |
| 			.iov_base = (void *) efault - 2,
 | |
| 			.iov_len = 2
 | |
| 		}, {
 | |
| 			.iov_base = (void *) efault - 3,
 | |
| 			.iov_len = 4
 | |
| 		}
 | |
| 	};
 | |
| 	struct iovec *const t_iov = tail_memdup(iov, sizeof(iov));
 | |
| 
 | |
| 	sg_io->flags = 0x24;
 | |
| 	sg_io->info = 1;
 | |
| 	sg_io->dxfer_direction = -2;
 | |
| 
 | |
| 	sg_io->iovec_count = ARRAY_SIZE(iov);
 | |
| 	sg_io->dxfer_len = iov[0].iov_len + iov[1].iov_len - 1;
 | |
| 	sg_io->dxferp = t_iov;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_TO_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_MMAP_IO|SG_FLAG_Q_AT_HEAD"
 | |
| 	       ", dxferp=[{iov_base=\"\\%o\\%o\", iov_len=%u}"
 | |
| 	       ", {iov_base=\"\\%o\\%o\\%o\", iov_len=%u}]"
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       *(unsigned char *) (iov[0].iov_base + 0),
 | |
| 	       *(unsigned char *) (iov[0].iov_base + 1),
 | |
| 	       (unsigned int) iov[0].iov_len,
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 0),
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 1),
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 2),
 | |
| 	       (unsigned int) iov[1].iov_len,
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	sg_io->flags = 0x11;
 | |
| 	sg_io->dxfer_direction = -3;
 | |
| 	sg_io->resid = sg_io->dxfer_len + 1;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_FROM_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_DIRECT_IO|SG_FLAG_Q_AT_TAIL"
 | |
| 	       ", dxferp=[{iov_base=\"\\%o\\%o\", iov_len=%u}"
 | |
| 	       ", {iov_base=\"\\%o\\%o\\%o\", iov_len=%u}]"
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       *(unsigned char *) (iov[0].iov_base + 0),
 | |
| 	       *(unsigned char *) (iov[0].iov_base + 1),
 | |
| 	       (unsigned int) iov[0].iov_len,
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 0),
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 1),
 | |
| 	       *(unsigned char *) (iov[1].iov_base + 2),
 | |
| 	       (unsigned int) iov[1].iov_len,
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	sg_io->flags = 0x10000;
 | |
| 	sg_io->info = 0xdeadbeef;
 | |
| 	sg_io->iovec_count = 0;
 | |
| 	sg_io->dxfer_len = 5;
 | |
| 	sg_io->resid = 1;
 | |
| 	sg_io->dxferp = (void *) efault - (sg_io->dxfer_len - sg_io->resid);
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_FROM_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_NO_DXFER"
 | |
| 	       ", dxferp=\"\\x%x\\x%x\\x%x\\x%x\""
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xdeadbee8"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 0),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 1),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 2),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 3),
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	sg_io->flags = 2;
 | |
| 	sg_io->dxfer_direction = -4;
 | |
| 	sg_io->dxfer_len = 3;
 | |
| 	sg_io->resid = 1;
 | |
| 	sg_io->dxferp = (void *) efault - sg_io->dxfer_len;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_TO_FROM_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=SG_FLAG_UNUSED_LUN_INHIBIT"
 | |
| 	       ", dxferp=\"\\x%x\\x%x\\x%x\" => dxferp=\"\\x%x\\x%x\""
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xdeadbee8"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 0),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 1),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 2),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 0),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 1),
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	sg_io->flags = 0;
 | |
| 	sg_io->resid = sg_io->dxfer_len;
 | |
| 
 | |
| 	ioctl(-1, SG_IO, sg_io);
 | |
| 	printf("ioctl(-1, SG_IO, {interface_id='S'"
 | |
| 	       ", dxfer_direction=SG_DXFER_TO_FROM_DEV"
 | |
| 	       ", cmd_len=%u"
 | |
| 	       ", cmdp=%p"
 | |
| 	       ", mx_sb_len=%u"
 | |
| 	       ", iovec_count=%u"
 | |
| 	       ", dxfer_len=%u"
 | |
| 	       ", timeout=%u"
 | |
| 	       ", flags=0"
 | |
| 	       ", dxferp=\"\\x%x\\x%x\\x%x\""
 | |
| 	       ", status=%#x"
 | |
| 	       ", masked_status=%#x"
 | |
| 	       ", msg_status=%#x"
 | |
| 	       ", sb_len_wr=%u"
 | |
| 	       ", sbp=%p"
 | |
| 	       ", host_status=%#x"
 | |
| 	       ", driver_status=%#x"
 | |
| 	       ", resid=%d"
 | |
| 	       ", duration=%u"
 | |
| 	       ", info=SG_INFO_CHECK|SG_INFO_DIRECT_IO|SG_INFO_MIXED_IO|0xdeadbee8"
 | |
| 	       "}) = -1 EBADF (%m)\n",
 | |
| 	       sg_io->cmd_len,
 | |
| 	       sg_io->cmdp,
 | |
| 	       sg_io->mx_sb_len,
 | |
| 	       sg_io->iovec_count,
 | |
| 	       sg_io->dxfer_len,
 | |
| 	       sg_io->timeout,
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 0),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 1),
 | |
| 	       *(unsigned char *) (sg_io->dxferp + 2),
 | |
| 	       sg_io->status,
 | |
| 	       sg_io->masked_status,
 | |
| 	       sg_io->msg_status,
 | |
| 	       sg_io->sb_len_wr,
 | |
| 	       sg_io->sbp,
 | |
| 	       sg_io->host_status,
 | |
| 	       sg_io->driver_status,
 | |
| 	       sg_io->resid,
 | |
| 	       sg_io->duration);
 | |
| 
 | |
| 	puts("+++ exited with 0 +++");
 | |
| 	return 0;
 | |
| }
 | |
| 
 | |
| #else
 | |
| 
 | |
| SKIP_MAIN_UNDEFINED("HAVE_SCSI_SG_H")
 | |
| 
 | |
| #endif
 |