153 lines
3.9 KiB
Bash
Executable File
153 lines
3.9 KiB
Bash
Executable File
#!/bin/sh
|
|
|
|
#
|
|
# SPDX-License-Identifier: BSD-2-Clause-FreeBSD
|
|
#
|
|
# Copyright (c) 2020 Peter Holm <pho@FreeBSD.org>
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
# 1. Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# 2. Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in the
|
|
# documentation and/or other materials provided with the distribution.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
# SUCH DAMAGE.
|
|
#
|
|
|
|
# setsockopt() fuzz test scenario inspired by syzkaller.
|
|
|
|
# "panic: mtx_lock() of spin mutex (null) @
|
|
# ../../../dev/hyperv/hvsock/hv_sock.c:519" seen.
|
|
# https://people.freebsd.org/~pho/stress/log/setsockopt.txt
|
|
# Introduced by r361275
|
|
# Fixed by r361360
|
|
|
|
. ../default.cfg
|
|
|
|
dir=/tmp
|
|
odir=`pwd`
|
|
cd $dir
|
|
sed '1,/^EOF/d' < $odir/$0 > $dir/setsockopt.c
|
|
mycc -o setsockopt -Wall -Wextra -O0 -g setsockopt.c || exit 1
|
|
rm -f setsockopt.c
|
|
|
|
daemon sh -c "(cd $odir/../testcases/swap; ./swap -t 5m)" > /dev/null 2>&1
|
|
/tmp/setsockopt
|
|
s=$?
|
|
while pgrep -q swap; do
|
|
pkill -9 swap
|
|
done
|
|
rm -rf /tmp/setsockopt /tmp/setsockopt.c
|
|
exit $s
|
|
EOF
|
|
#include <sys/param.h>
|
|
#include <sys/socket.h>
|
|
#include <sys/stat.h>
|
|
#include <sys/wait.h>
|
|
|
|
#include <netinet/in.h>
|
|
|
|
#include <err.h>
|
|
#include <errno.h>
|
|
#include <fcntl.h>
|
|
#include <netdb.h>
|
|
#include <signal.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <time.h>
|
|
#include <unistd.h>
|
|
|
|
#define PARALLEL 128
|
|
#define RUNTIME (3 * 60)
|
|
|
|
static int port;
|
|
|
|
static void
|
|
test(int idx) {
|
|
struct hostent *hostent;
|
|
struct sockaddr_in inetaddr;
|
|
int i, j, r;
|
|
int tcpsock, on;
|
|
|
|
on = 1;
|
|
for (i = 1; i < 5; i++) {
|
|
for (j = 0; j < 10000; j++) {
|
|
if ((tcpsock = socket(arc4random() % 64, arc4random() % 10, arc4random() % 10)) != -1)
|
|
break;
|
|
}
|
|
if (tcpsock == -1)
|
|
_exit(0);
|
|
|
|
/*
|
|
if (setsockopt(tcpsock,
|
|
SOL_SOCKET, SO_REUSEADDR, (char *)&on, sizeof(on)) < 0)
|
|
err(1, "setsockopt(), %s:%d", __FILE__, __LINE__);
|
|
*/
|
|
for (j = 0; j < 10000; j++) {
|
|
r = setsockopt(tcpsock, arc4random(), arc4random(), (char *)&on, sizeof(on));
|
|
if (r != -1)
|
|
break;
|
|
}
|
|
|
|
hostent = gethostbyname ("localhost");
|
|
r = -1;
|
|
for (j = 0; j < 10000 && r != 0; j++) {
|
|
bzero((char *) &inetaddr, sizeof(inetaddr));
|
|
memcpy (&inetaddr.sin_addr.s_addr, hostent->h_addr,
|
|
sizeof (struct in_addr));
|
|
|
|
// inetaddr.sin_family = AF_INET;
|
|
inetaddr.sin_family = arc4random() % 128;
|
|
// inetaddr.sin_addr.s_addr = INADDR_ANY;
|
|
inetaddr.sin_addr.s_addr = arc4random();
|
|
inetaddr.sin_port = htons(port + idx);
|
|
inetaddr.sin_len = sizeof(inetaddr);
|
|
|
|
alarm(1);
|
|
r = connect(tcpsock, (struct sockaddr *) &inetaddr,
|
|
sizeof(inetaddr));
|
|
alarm(0);
|
|
}
|
|
usleep(1000);
|
|
close(tcpsock);
|
|
}
|
|
write(tcpsock, "a", 1);
|
|
_exit(0);
|
|
}
|
|
|
|
int
|
|
main(void)
|
|
{
|
|
time_t start;
|
|
int i, pids[PARALLEL], status;
|
|
|
|
port = 77665;
|
|
start = time(NULL);
|
|
while ((time(NULL) - start) < RUNTIME) {
|
|
for (i = 0; i < PARALLEL; i++) {
|
|
if ((pids[i] = fork()) == 0)
|
|
test(i);
|
|
}
|
|
for (i = 0; i < PARALLEL; i++) {
|
|
if (waitpid(pids[i], &status, 0) == -1)
|
|
err(1, "waitpid(%d)", pids[i]);
|
|
}
|
|
}
|
|
|
|
return (0);
|
|
}
|