/* SPDX-License-Identifier: GPL-3.0-or-later * Copyright 2023 Red Hat GmbH * Author: Alice Frosi */ #define _GNU_SOURCE #include #include #include #include #include #include #include "gluten.h" #include "common.h" #include "testutil.h" #include "filter.h" #include "disasm.h" static int generate_install_filter(struct args_target *at) { unsigned int i; struct bpf_call calls[1]; struct syscall_entry table[] = { { .count = 1, .nr = at->nr, .entry = &calls[0] } }; struct sock_filter filter[30]; unsigned int size; for (i = 0; i < 6; i++) { if (at->args[i] != NULL) { calls[0].args[i] = (int)at->args[i]; calls[0].check_arg[i] = true; } else { calls[0].check_arg[i] = false; } } size = create_bfp_program(table, filter, 1); //bpf_disasm_all(filter, size); return install_filter(filter, size); } START_TEST(no_args) { at = mmap(NULL, sizeof(struct args_target), PROT_READ | PROT_WRITE, MAP_SHARED | MAP_ANONYMOUS, -1, 0); at->check_fd = false; at->nr = __NR_getpid; at->install_filter = generate_install_filter; setup(); mock_syscall_target(); } END_TEST START_TEST(with_getsid) { int id = 12345; at = mmap(NULL, sizeof(struct args_target), PROT_READ | PROT_WRITE, MAP_SHARED | MAP_ANONYMOUS, -1, 0); at->check_fd = false; at->nr = __NR_getsid; at->args[0] = &id; at->install_filter = generate_install_filter; setup(); mock_syscall_target(); } END_TEST START_TEST(with_getpriority) { int which = 12345; id_t who = PRIO_PROCESS; at = mmap(NULL, sizeof(struct args_target), PROT_READ | PROT_WRITE, MAP_SHARED | MAP_ANONYMOUS, -1, 0); at->check_fd = false; at->nr = __NR_getpriority; at->args[0] = &which; at->args[1] = &who; at->install_filter = generate_install_filter; setup(); mock_syscall_target(); } END_TEST Suite *op_call_suite(void) { Suite *s; int timeout = 30; TCase *simple, *args32; s = suite_create("Test filter with target"); simple = tcase_create("no args"); tcase_add_checked_fixture(simple, NULL, teardown); tcase_set_timeout(simple, timeout); tcase_add_test(simple, no_args); suite_add_tcase(s, simple); args32 = tcase_create("with args 32 bit"); tcase_add_checked_fixture(args32, NULL, teardown); tcase_set_timeout(args32, timeout); tcase_add_test(args32, with_getsid); tcase_add_test(args32, with_getpriority); suite_add_tcase(s, args32); return s; } int main(void) { int no_failed = 0; Suite *s; SRunner *runner; s = op_call_suite(); runner = srunner_create(s); srunner_run_all(runner, CK_VERBOSE); no_failed = srunner_ntests_failed(runner); srunner_free(runner); return (no_failed == 0) ? EXIT_SUCCESS : EXIT_FAILURE; }