| .. | .. |
|---|
| 5 | 5 | |
|---|
| 6 | 6 | typedef void(*test_ubsan_fp)(void); |
|---|
| 7 | 7 | |
|---|
| 8 | | -static void test_ubsan_add_overflow(void) |
|---|
| 9 | | -{ |
|---|
| 10 | | - volatile int val = INT_MAX; |
|---|
| 11 | | - |
|---|
| 12 | | - val += 2; |
|---|
| 13 | | -} |
|---|
| 14 | | - |
|---|
| 15 | | -static void test_ubsan_sub_overflow(void) |
|---|
| 16 | | -{ |
|---|
| 17 | | - volatile int val = INT_MIN; |
|---|
| 18 | | - volatile int val2 = 2; |
|---|
| 19 | | - |
|---|
| 20 | | - val -= val2; |
|---|
| 21 | | -} |
|---|
| 22 | | - |
|---|
| 23 | | -static void test_ubsan_mul_overflow(void) |
|---|
| 24 | | -{ |
|---|
| 25 | | - volatile int val = INT_MAX / 2; |
|---|
| 26 | | - |
|---|
| 27 | | - val *= 3; |
|---|
| 28 | | -} |
|---|
| 29 | | - |
|---|
| 30 | | -static void test_ubsan_negate_overflow(void) |
|---|
| 31 | | -{ |
|---|
| 32 | | - volatile int val = INT_MIN; |
|---|
| 33 | | - |
|---|
| 34 | | - val = -val; |
|---|
| 35 | | -} |
|---|
| 8 | +#define UBSAN_TEST(config, ...) do { \ |
|---|
| 9 | + pr_info("%s " __VA_ARGS__ "%s(%s=%s)\n", __func__, \ |
|---|
| 10 | + sizeof(" " __VA_ARGS__) > 2 ? " " : "", \ |
|---|
| 11 | + #config, IS_ENABLED(config) ? "y" : "n"); \ |
|---|
| 12 | + } while (0) |
|---|
| 36 | 13 | |
|---|
| 37 | 14 | static void test_ubsan_divrem_overflow(void) |
|---|
| 38 | 15 | { |
|---|
| 39 | 16 | volatile int val = 16; |
|---|
| 40 | 17 | volatile int val2 = 0; |
|---|
| 41 | 18 | |
|---|
| 19 | + UBSAN_TEST(CONFIG_UBSAN_DIV_ZERO); |
|---|
| 42 | 20 | val /= val2; |
|---|
| 43 | | -} |
|---|
| 44 | | - |
|---|
| 45 | | -static void test_ubsan_vla_bound_not_positive(void) |
|---|
| 46 | | -{ |
|---|
| 47 | | - volatile int size = -1; |
|---|
| 48 | | - char buf[size]; |
|---|
| 49 | | - |
|---|
| 50 | | - (void)buf; |
|---|
| 51 | 21 | } |
|---|
| 52 | 22 | |
|---|
| 53 | 23 | static void test_ubsan_shift_out_of_bounds(void) |
|---|
| 54 | 24 | { |
|---|
| 55 | | - volatile int val = -1; |
|---|
| 56 | | - int val2 = 10; |
|---|
| 25 | + volatile int neg = -1, wrap = 4; |
|---|
| 26 | + int val1 = 10; |
|---|
| 27 | + int val2 = INT_MAX; |
|---|
| 57 | 28 | |
|---|
| 58 | | - val2 <<= val; |
|---|
| 29 | + UBSAN_TEST(CONFIG_UBSAN_SHIFT, "negative exponent"); |
|---|
| 30 | + val1 <<= neg; |
|---|
| 31 | + |
|---|
| 32 | + UBSAN_TEST(CONFIG_UBSAN_SHIFT, "left overflow"); |
|---|
| 33 | + val2 <<= wrap; |
|---|
| 59 | 34 | } |
|---|
| 60 | 35 | |
|---|
| 61 | 36 | static void test_ubsan_out_of_bounds(void) |
|---|
| 62 | 37 | { |
|---|
| 63 | | - volatile int i = 4, j = 5; |
|---|
| 64 | | - volatile int arr[i]; |
|---|
| 38 | + volatile int i = 4, j = 5, k = -1; |
|---|
| 39 | + volatile char above[4] = { }; /* Protect surrounding memory. */ |
|---|
| 40 | + volatile int arr[4]; |
|---|
| 41 | + volatile char below[4] = { }; /* Protect surrounding memory. */ |
|---|
| 65 | 42 | |
|---|
| 43 | + above[0] = below[0]; |
|---|
| 44 | + |
|---|
| 45 | + UBSAN_TEST(CONFIG_UBSAN_BOUNDS, "above"); |
|---|
| 66 | 46 | arr[j] = i; |
|---|
| 47 | + |
|---|
| 48 | + UBSAN_TEST(CONFIG_UBSAN_BOUNDS, "below"); |
|---|
| 49 | + arr[k] = i; |
|---|
| 67 | 50 | } |
|---|
| 51 | + |
|---|
| 52 | +enum ubsan_test_enum { |
|---|
| 53 | + UBSAN_TEST_ZERO = 0, |
|---|
| 54 | + UBSAN_TEST_ONE, |
|---|
| 55 | + UBSAN_TEST_MAX, |
|---|
| 56 | +}; |
|---|
| 68 | 57 | |
|---|
| 69 | 58 | static void test_ubsan_load_invalid_value(void) |
|---|
| 70 | 59 | { |
|---|
| 71 | 60 | volatile char *dst, *src; |
|---|
| 72 | 61 | bool val, val2, *ptr; |
|---|
| 73 | | - char c = 4; |
|---|
| 62 | + enum ubsan_test_enum eval, eval2, *eptr; |
|---|
| 63 | + unsigned char c = 0xff; |
|---|
| 74 | 64 | |
|---|
| 65 | + UBSAN_TEST(CONFIG_UBSAN_BOOL, "bool"); |
|---|
| 75 | 66 | dst = (char *)&val; |
|---|
| 76 | 67 | src = &c; |
|---|
| 77 | 68 | *dst = *src; |
|---|
| 78 | 69 | |
|---|
| 79 | 70 | ptr = &val2; |
|---|
| 80 | 71 | val2 = val; |
|---|
| 72 | + |
|---|
| 73 | + UBSAN_TEST(CONFIG_UBSAN_ENUM, "enum"); |
|---|
| 74 | + dst = (char *)&eval; |
|---|
| 75 | + src = &c; |
|---|
| 76 | + *dst = *src; |
|---|
| 77 | + |
|---|
| 78 | + eptr = &eval2; |
|---|
| 79 | + eval2 = eval; |
|---|
| 81 | 80 | } |
|---|
| 82 | 81 | |
|---|
| 83 | 82 | static void test_ubsan_null_ptr_deref(void) |
|---|
| .. | .. |
|---|
| 85 | 84 | volatile int *ptr = NULL; |
|---|
| 86 | 85 | int val; |
|---|
| 87 | 86 | |
|---|
| 87 | + UBSAN_TEST(CONFIG_UBSAN_OBJECT_SIZE); |
|---|
| 88 | 88 | val = *ptr; |
|---|
| 89 | 89 | } |
|---|
| 90 | 90 | |
|---|
| .. | .. |
|---|
| 93 | 93 | volatile char arr[5] __aligned(4) = {1, 2, 3, 4, 5}; |
|---|
| 94 | 94 | volatile int *ptr, val = 6; |
|---|
| 95 | 95 | |
|---|
| 96 | + UBSAN_TEST(CONFIG_UBSAN_ALIGNMENT); |
|---|
| 96 | 97 | ptr = (int *)(arr + 1); |
|---|
| 97 | 98 | *ptr = val; |
|---|
| 98 | 99 | } |
|---|
| 99 | 100 | |
|---|
| 100 | | -static void test_ubsan_object_size_mismatch(void) |
|---|
| 101 | | -{ |
|---|
| 102 | | - /* "((aligned(8)))" helps this not into be misaligned for ptr-access. */ |
|---|
| 103 | | - volatile int val __aligned(8) = 4; |
|---|
| 104 | | - volatile long long *ptr, val2; |
|---|
| 105 | | - |
|---|
| 106 | | - ptr = (long long *)&val; |
|---|
| 107 | | - val2 = *ptr; |
|---|
| 108 | | -} |
|---|
| 109 | | - |
|---|
| 110 | 101 | static const test_ubsan_fp test_ubsan_array[] = { |
|---|
| 111 | | - test_ubsan_add_overflow, |
|---|
| 112 | | - test_ubsan_sub_overflow, |
|---|
| 113 | | - test_ubsan_mul_overflow, |
|---|
| 114 | | - test_ubsan_negate_overflow, |
|---|
| 115 | | - test_ubsan_divrem_overflow, |
|---|
| 116 | | - test_ubsan_vla_bound_not_positive, |
|---|
| 117 | 102 | test_ubsan_shift_out_of_bounds, |
|---|
| 118 | 103 | test_ubsan_out_of_bounds, |
|---|
| 119 | 104 | test_ubsan_load_invalid_value, |
|---|
| 120 | | - //test_ubsan_null_ptr_deref, /* exclude it because there is a crash */ |
|---|
| 121 | 105 | test_ubsan_misaligned_access, |
|---|
| 122 | | - test_ubsan_object_size_mismatch, |
|---|
| 106 | +}; |
|---|
| 107 | + |
|---|
| 108 | +/* Excluded because they Oops the module. */ |
|---|
| 109 | +static const test_ubsan_fp skip_ubsan_array[] = { |
|---|
| 110 | + test_ubsan_divrem_overflow, |
|---|
| 111 | + test_ubsan_null_ptr_deref, |
|---|
| 123 | 112 | }; |
|---|
| 124 | 113 | |
|---|
| 125 | 114 | static int __init test_ubsan_init(void) |
|---|
| .. | .. |
|---|
| 129 | 118 | for (i = 0; i < ARRAY_SIZE(test_ubsan_array); i++) |
|---|
| 130 | 119 | test_ubsan_array[i](); |
|---|
| 131 | 120 | |
|---|
| 132 | | - (void)test_ubsan_null_ptr_deref; /* to avoid unsed-function warning */ |
|---|
| 133 | 121 | return 0; |
|---|
| 134 | 122 | } |
|---|
| 135 | 123 | module_init(test_ubsan_init); |
|---|