|
| 1 | +/* |
| 2 | + * Check decoding of PR_SET_SPECULATION_CTRL and PR_GET_SPECULATION_CTRL |
| 3 | + * prctl operations. |
| 4 | + * |
| 5 | + * Copyright (c) 2018 The strace developers. |
| 6 | + * All rights reserved. |
| 7 | + * |
| 8 | + * Redistribution and use in source and binary forms, with or without |
| 9 | + * modification, are permitted provided that the following conditions |
| 10 | + * are met: |
| 11 | + * 1. Redistributions of source code must retain the above copyright |
| 12 | + * notice, this list of conditions and the following disclaimer. |
| 13 | + * 2. Redistributions in binary form must reproduce the above copyright |
| 14 | + * notice, this list of conditions and the following disclaimer in the |
| 15 | + * documentation and/or other materials provided with the distribution. |
| 16 | + * 3. The name of the author may not be used to endorse or promote products |
| 17 | + * derived from this software without specific prior written permission. |
| 18 | + * |
| 19 | + * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR |
| 20 | + * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES |
| 21 | + * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. |
| 22 | + * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, |
| 23 | + * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT |
| 24 | + * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, |
| 25 | + * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY |
| 26 | + * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT |
| 27 | + * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF |
| 28 | + * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
| 29 | + */ |
| 30 | + |
| 31 | +#include "tests.h" |
| 32 | +#include <asm/unistd.h> |
| 33 | + |
| 34 | +#ifdef __NR_prctl |
| 35 | + |
| 36 | +# include <stdio.h> |
| 37 | +# include <stdlib.h> |
| 38 | +# include <unistd.h> |
| 39 | +# include <linux/prctl.h> |
| 40 | + |
| 41 | +static long injected_val; |
| 42 | + |
| 43 | +long |
| 44 | +do_prctl(kernel_ulong_t cmd, kernel_ulong_t arg2, kernel_ulong_t arg3) |
| 45 | +{ |
| 46 | + long rc = syscall(__NR_prctl, cmd, arg2, arg3); |
| 47 | + |
| 48 | + if (rc != injected_val) |
| 49 | + error_msg_and_fail("Return value (%ld) differs from expected " |
| 50 | + "injected value (%ld)", |
| 51 | + rc, injected_val); |
| 52 | + |
| 53 | + return rc; |
| 54 | +} |
| 55 | + |
| 56 | +int |
| 57 | +main(int argc, char **argv) |
| 58 | +{ |
| 59 | + static const kernel_ulong_t bogus_arg2 = |
| 60 | + (kernel_ulong_t) 0xdeadfacebadc0dedULL; |
| 61 | + static const kernel_ulong_t bogus_arg3 = |
| 62 | + (kernel_ulong_t) 0xdecafeedbeefda7eULL; |
| 63 | + static const struct { |
| 64 | + long arg; |
| 65 | + const char *str; |
| 66 | + } get_strs[] = { |
| 67 | + { -1, "" }, |
| 68 | + { 0, " (PR_SPEC_NOT_AFFECTED)" }, |
| 69 | + { 1, " (PR_SPEC_PRCTL)" }, |
| 70 | + { 3, " (PR_SPEC_PRCTL|PR_SPEC_ENABLE)" }, |
| 71 | + { 8, " (PR_SPEC_FORCE_DISABLE)" }, |
| 72 | + { 16, " (0x10)" }, |
| 73 | + { 42, " (PR_SPEC_ENABLE|PR_SPEC_FORCE_DISABLE|0x20)" }, |
| 74 | + }; |
| 75 | + static const struct { |
| 76 | + kernel_ulong_t arg; |
| 77 | + const char *str; |
| 78 | + } set_strs[] = { |
| 79 | + { 0, "0 /* PR_SPEC_??? */" }, |
| 80 | + { 1, "0x1 /* PR_SPEC_??? */" }, |
| 81 | + { 2, "PR_SPEC_ENABLE" }, |
| 82 | + { 3, "0x3 /* PR_SPEC_??? */" }, |
| 83 | + { 8, "PR_SPEC_FORCE_DISABLE" }, |
| 84 | + { 16, "0x10 /* PR_SPEC_??? */" }, |
| 85 | + { (kernel_ulong_t) 0xdecafeedbeefda7eULL, "0x" |
| 86 | +# if SIZEOF_KERNEL_LONG_T == 8 |
| 87 | + "decafeed" |
| 88 | +# endif |
| 89 | + "beefda7e /* PR_SPEC_??? */" }, |
| 90 | + }; |
| 91 | + |
| 92 | + long rc; |
| 93 | + const char *str = NULL; |
| 94 | + |
| 95 | + if (argc < 2) |
| 96 | + error_msg_and_fail("Usage: %s INJECTED_VAL", argv[0]); |
| 97 | + |
| 98 | + injected_val = strtol(argv[1], NULL, 0); |
| 99 | + |
| 100 | + /* PR_GET_SPECULATION_CTRL */ |
| 101 | + rc = do_prctl(52, 1, bogus_arg3); |
| 102 | + printf("prctl(PR_GET_SPECULATION_CTRL, 0x1 /* PR_SPEC_??? */) " |
| 103 | + "= %s (INJECTED)\n", sprintrc(rc)); |
| 104 | + |
| 105 | + rc = do_prctl(52, bogus_arg2, bogus_arg3); |
| 106 | + printf("prctl(PR_GET_SPECULATION_CTRL, %#llx /* PR_SPEC_??? */) " |
| 107 | + "= %s (INJECTED)\n", |
| 108 | + (unsigned long long) bogus_arg2, sprintrc(rc)); |
| 109 | + |
| 110 | + rc = do_prctl(52, 0, bogus_arg3); |
| 111 | + |
| 112 | + for (unsigned i = 0; i < ARRAY_SIZE(get_strs); i++) { |
| 113 | + if (get_strs[i].arg == rc) { |
| 114 | + str = get_strs[i].str; |
| 115 | + break; |
| 116 | + } |
| 117 | + } |
| 118 | + if (!str) |
| 119 | + error_msg_and_fail("Unknown return value: %ld", rc); |
| 120 | + |
| 121 | + printf("prctl(PR_GET_SPECULATION_CTRL, PR_SPEC_STORE_BYPASS) " |
| 122 | + "= %s%s (INJECTED)\n", sprintrc(rc), str); |
| 123 | + |
| 124 | + |
| 125 | + /* PR_SET_SPECULATION_CTRL*/ |
| 126 | + rc = do_prctl(53, 1, bogus_arg3); |
| 127 | + printf("prctl(PR_SET_SPECULATION_CTRL, 0x1 /* PR_SPEC_??? */, %#llx) " |
| 128 | + "= %s (INJECTED)\n", |
| 129 | + (unsigned long long) bogus_arg3, sprintrc(rc)); |
| 130 | + |
| 131 | + rc = do_prctl(53, bogus_arg2, bogus_arg3); |
| 132 | + printf("prctl(PR_SET_SPECULATION_CTRL, %#llx /* PR_SPEC_??? */, %#llx) " |
| 133 | + "= %s (INJECTED)\n", |
| 134 | + (unsigned long long) bogus_arg2, |
| 135 | + (unsigned long long) bogus_arg3, |
| 136 | + sprintrc(rc)); |
| 137 | + |
| 138 | + for (unsigned i = 0; i < ARRAY_SIZE(set_strs); i++) { |
| 139 | + rc = do_prctl(53, 0, set_strs[i].arg); |
| 140 | + printf("prctl(PR_SET_SPECULATION_CTRL, PR_SPEC_STORE_BYPASS" |
| 141 | + ", %s) = %s (INJECTED)\n", |
| 142 | + set_strs[i].str, sprintrc(rc)); |
| 143 | + } |
| 144 | + |
| 145 | + puts("+++ exited with 0 +++"); |
| 146 | + return 0; |
| 147 | +} |
| 148 | + |
| 149 | +#else |
| 150 | + |
| 151 | +SKIP_MAIN_UNDEFINED("__NR_prctl") |
| 152 | + |
| 153 | +#endif |
0 commit comments