cuberite/polarssl
1
0
Fork 0
mirror of https://github.com/cuberite/polarssl.git synced 2025-08-31 16:56:35 -04:00
Code Issues Packages Projects Releases Wiki Activity

Memory poisoning: meta-test writes as well as reads

Browse Source 
Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
This commit is contained in:
Gilles Peskine 2023-11-22 18:22:07 +01:00
parent 014d89b782
commit 0c7d3eda0a
1 changed files with 29 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
programs/test/metatest.c
View File

@ -150,18 +150,22 @@ void memory_leak(const char *name)
/* Leak of a heap object */ /* Leak of a heap object */
} }
/* name = "test_memory_poison_%(start)_%(offset)_%(count)" /* name = "test_memory_poison_%(start)_%(offset)_%(count)_%(direction)"
* Poison a region starting at start from an 8-byte aligned origin, * Poison a region starting at start from an 8-byte aligned origin,
* encompassing count bytes. Access the region at offset from the start. * encompassing count bytes. Access the region at offset from the start.
* %(start), %(offset) and %(count) are decimal integers.
* %(direction) is either the character 'r' for read or 'w' for write.
*/ */
void test_memory_poison(const char *name) void test_memory_poison(const char *name)
{ {
size_t start = 0, offset = 0, count = 0; size_t start = 0, offset = 0, count = 0;
char direction = 'r';
if (sscanf(name, if (sscanf(name,
"%*[^0-9]%" MBEDTLS_PRINTF_SIZET "%*[^0-9]%" MBEDTLS_PRINTF_SIZET
"%*[^0-9]%" MBEDTLS_PRINTF_SIZET "%*[^0-9]%" MBEDTLS_PRINTF_SIZET
"%*[^0-9]%" MBEDTLS_PRINTF_SIZET, "%*[^0-9]%" MBEDTLS_PRINTF_SIZET
&start, &offset, &count) != 3) { "_%c",
&start, &offset, &count, &direction) != 4) {
mbedtls_fprintf(stderr, "%s: Bad name format: %s\n", __func__, name); mbedtls_fprintf(stderr, "%s: Bad name format: %s\n", __func__, name);
return; return;
} }
@ -195,7 +199,12 @@ void test_memory_poison(const char *name)
} }
MBEDTLS_TEST_MEMORY_POISON(aligned.buf + start, count); MBEDTLS_TEST_MEMORY_POISON(aligned.buf + start, count);
mbedtls_printf("%u\n", (unsigned) aligned.buf[start + offset]);
if (direction == 'w') {
aligned.buf[start + offset] = 'b';
} else {
mbedtls_printf("%u\n", (unsigned) aligned.buf[start + offset]);
}
} }
@ -346,14 +355,22 @@ metatest_t metatests[] = {
{ "double_free", "asan", double_free }, { "double_free", "asan", double_free },
{ "read_uninitialized_stack", "msan", read_uninitialized_stack }, { "read_uninitialized_stack", "msan", read_uninitialized_stack },
{ "memory_leak", "asan", memory_leak }, { "memory_leak", "asan", memory_leak },
{ "test_memory_poison_0_0_8", "asan", test_memory_poison }, { "test_memory_poison_0_0_8_r", "asan", test_memory_poison },
{ "test_memory_poison_0_7_8", "asan", test_memory_poison }, { "test_memory_poison_0_0_8_w", "asan", test_memory_poison },
{ "test_memory_poison_0_0_1", "asan", test_memory_poison }, { "test_memory_poison_0_7_8_r", "asan", test_memory_poison },
{ "test_memory_poison_0_1_2", "asan", test_memory_poison }, { "test_memory_poison_0_7_8_w", "asan", test_memory_poison },
{ "test_memory_poison_7_0_8", "asan", test_memory_poison }, { "test_memory_poison_0_0_1_r", "asan", test_memory_poison },
{ "test_memory_poison_7_7_8", "asan", test_memory_poison }, { "test_memory_poison_0_0_1_w", "asan", test_memory_poison },
{ "test_memory_poison_7_0_1", "asan", test_memory_poison }, { "test_memory_poison_0_1_2_r", "asan", test_memory_poison },
{ "test_memory_poison_7_1_2", "asan", test_memory_poison }, { "test_memory_poison_0_1_2_w", "asan", test_memory_poison },
{ "test_memory_poison_7_0_8_r", "asan", test_memory_poison },
{ "test_memory_poison_7_0_8_w", "asan", test_memory_poison },
{ "test_memory_poison_7_7_8_r", "asan", test_memory_poison },
{ "test_memory_poison_7_7_8_w", "asan", test_memory_poison },
{ "test_memory_poison_7_0_1_r", "asan", test_memory_poison },
{ "test_memory_poison_7_0_1_w", "asan", test_memory_poison },
{ "test_memory_poison_7_1_2_r", "asan", test_memory_poison },
{ "test_memory_poison_7_1_2_w", "asan", test_memory_poison },
{ "mutex_lock_not_initialized", "pthread", mutex_lock_not_initialized }, { "mutex_lock_not_initialized", "pthread", mutex_lock_not_initialized },
{ "mutex_unlock_not_initialized", "pthread", mutex_unlock_not_initialized }, { "mutex_unlock_not_initialized", "pthread", mutex_unlock_not_initialized },
{ "mutex_free_not_initialized", "pthread", mutex_free_not_initialized }, { "mutex_free_not_initialized", "pthread", mutex_free_not_initialized },