114 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			C
		
	
	
	
			
		
		
	
	
			114 lines
		
	
	
		
			3.1 KiB
		
	
	
	
		
			C
		
	
	
	
| /*
 | |
|  * Check decoding of setresuid/setresgid/setresuid32/setresgid32 syscalls.
 | |
|  *
 | |
|  * Copyright (c) 2016 Dmitry V. Levin <ldv@altlinux.org>
 | |
|  * All rights reserved.
 | |
|  *
 | |
|  * Redistribution and use in source and binary forms, with or without
 | |
|  * modification, are permitted provided that the following conditions
 | |
|  * are met:
 | |
|  * 1. Redistributions of source code must retain the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer.
 | |
|  * 2. Redistributions in binary form must reproduce the above copyright
 | |
|  *    notice, this list of conditions and the following disclaimer in the
 | |
|  *    documentation and/or other materials provided with the distribution.
 | |
|  * 3. The name of the author may not be used to endorse or promote products
 | |
|  *    derived from this software without specific prior written permission.
 | |
|  *
 | |
|  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
 | |
|  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
 | |
|  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
 | |
|  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
 | |
|  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
 | |
|  * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
 | |
|  * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
 | |
|  * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 | |
|  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
 | |
|  * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 | |
|  */
 | |
| 
 | |
| #include <errno.h>
 | |
| #include <stdio.h>
 | |
| #include <unistd.h>
 | |
| 
 | |
| static int
 | |
| ugid2int(const unsigned UGID_TYPE ugid)
 | |
| {
 | |
| 	if ((unsigned UGID_TYPE) -1U == ugid)
 | |
| 		return -1;
 | |
| 	else
 | |
| 		return ugid;
 | |
| }
 | |
| 
 | |
| static void
 | |
| print_int(const unsigned int num)
 | |
| {
 | |
| 	if (num == -1U)
 | |
| 		printf("-1");
 | |
| 	else
 | |
| 		printf("%u", num);
 | |
| }
 | |
| 
 | |
| static int
 | |
| num_matches_id(const unsigned int num, const unsigned int ugid)
 | |
| {
 | |
| 	return num == ugid || num == -1U;
 | |
| }
 | |
| 
 | |
| #define TRIPLE(val)	\
 | |
| 	{ val, ugid, ugid }, { ugid, val, ugid }, { ugid, ugid, val }
 | |
| 
 | |
| int
 | |
| main(void)
 | |
| {
 | |
| 	unsigned int ugid = GETUGID;
 | |
| 	CHECK_OVERFLOWUGID(ugid);
 | |
| 
 | |
| 	const struct {
 | |
| 		const long r, e, s;
 | |
| 	} tests[] = {
 | |
| 		{ ugid, ugid, ugid },
 | |
| 		TRIPLE((unsigned long) 0xffffffff00000000ULL | ugid),
 | |
| 		TRIPLE(-1U),
 | |
| 		TRIPLE(-1L),
 | |
| 		TRIPLE(0xffff0000U | ugid),
 | |
| 		TRIPLE(0xffff),
 | |
| 		TRIPLE(0xc0deffffU)
 | |
| 	};
 | |
| 
 | |
| 	unsigned int i;
 | |
| 
 | |
| 	for (i = 0; i < ARRAY_SIZE(tests); ++i) {
 | |
| 		const unsigned int rn = ugid2int(tests[i].r);
 | |
| 		const unsigned int en = ugid2int(tests[i].e);
 | |
| 		const unsigned int sn = ugid2int(tests[i].s);
 | |
| 
 | |
| 		if (!num_matches_id(rn, ugid) ||
 | |
| 		    !num_matches_id(en, ugid) ||
 | |
| 		    !num_matches_id(sn, ugid))
 | |
| 			continue;
 | |
| 
 | |
| 		if (syscall(SYSCALL_NR, tests[i].r, tests[i].e, tests[i].s)) {
 | |
| 			if (!i && ENOSYS == errno) {
 | |
| 				printf("%s(%u, %u, %u) = -1 ENOSYS (%m)\n",
 | |
| 				       SYSCALL_NAME, ugid, ugid, ugid);
 | |
| 				break;
 | |
| 			}
 | |
| 			perror_msg_and_fail("%s(%#lx, %#lx, %#lx)",
 | |
| 					    SYSCALL_NAME,
 | |
| 					    tests[i].r, tests[i].e, tests[i].s);
 | |
| 		}
 | |
| 
 | |
| 		printf("%s(", SYSCALL_NAME);
 | |
| 		print_int(rn);
 | |
| 		printf(", ");
 | |
| 		print_int(en);
 | |
| 		printf(", ");
 | |
| 		print_int(sn);
 | |
| 		printf(") = 0\n");
 | |
| 	}
 | |
| 
 | |
| 	puts("+++ exited with 0 +++");
 | |
| 	return 0;
 | |
| }
 |