1# Copyright (c) 2018 The NetBSD Foundation, Inc. 2# All rights reserved. 3# 4# This code is derived from software contributed to The NetBSD Foundation 5# by Yang Zheng. 6# 7# Redistribution and use in source and binary forms, with or without 8# modification, are permitted provided that the following conditions 9# are met: 10# 1. Redistributions of source code must retain the above copyright 11# notice, this list of conditions and the following disclaimer. 12# 2. Redistributions in binary form must reproduce the above copyright 13# notice, this list of conditions and the following disclaimer in the 14# documentation and/or other materials provided with the distribution. 15# 16# THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS 17# ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED 18# TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR 19# PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS 20# BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR 21# CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF 22# SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS 23# INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN 24# CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) 25# ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE 26# POSSIBILITY OF SUCH DAMAGE. 27# 28 29test_target() 30{ 31 SUPPORT='n' 32 if uname -m | grep -q "amd64" && command -v c++ >/dev/null 2>&1 && \ 33 ! echo __clang__ | c++ -E - | grep -q __clang__; then 34 # only clang with major version newer than 7 is supported 35 CLANG_MAJOR=`echo __clang_major__ | c++ -E - | grep -o '^[[:digit:]]'` 36 if [ "$CLANG_MAJOR" -ge "7" ]; then 37 SUPPORT='y' 38 fi 39 fi 40} 41 42atf_test_case simple 43simple_head() { 44 atf_set "descr" "Test thread sanitizer for error exit condition" 45 atf_set "require.progs" "c++ paxctl" 46} 47 48atf_test_case simple_profile 49simple_profile_head() { 50 atf_set "descr" "Test thread sanitizer for simple with profiling option" 51 atf_set "require.progs" "c++ paxctl" 52} 53atf_test_case simple_pic 54simple_pic_head() { 55 atf_set "descr" "Test thread sanitizer for simple with position independent code (PIC) flag" 56 atf_set "require.progs" "c++ paxctl" 57} 58atf_test_case simple_pie 59simple_pie_head() { 60 atf_set "descr" "Test thread sanitizer for simple with position independent execution (PIE) flag" 61 atf_set "require.progs" "c++ paxctl" 62} 63 64simple_body(){ 65 cat > test.cc << EOF 66#include <stdlib.h> 67#include <stdio.h> 68#include <stdint.h> 69 70extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { 71 if (size > 0 && data[0] == 'b') { 72 fprintf(stderr, "BINGO\n"); 73 exit(1); 74 } 75 76 return 0; 77} 78EOF 79 80 c++ -fsanitize=fuzzer -o test test.cc 81 paxctl +a test 82 atf_check -s ignore -o ignore -e match:"BINGO" ./test 83} 84 85simple_profile_body(){ 86 cat > test.cc << EOF 87#include <stdlib.h> 88#include <stdio.h> 89#include <stdint.h> 90 91extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { 92 if (size > 0 && data[0] == 'b') { 93 fprintf(stderr, "BINGO\n"); 94 exit(1); 95 } 96 97 return 0; 98} 99EOF 100 101 c++ -fsanitize=fuzzer -static -o test -pg test.cc 102 paxctl +a test 103 atf_check -s ignore -o ignore -e match:"BINGO" ./test 104} 105 106simple_pic_body(){ 107 cat > test.cc << EOF 108#include <stddef.h> 109#include <stdint.h> 110int help(const uint8_t *data, size_t size); 111extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { 112 return help(data, size); 113} 114EOF 115 116 cat > pic.cc << EOF 117#include <stdlib.h> 118#include <stdio.h> 119#include <stdint.h> 120 121int help(const uint8_t *data, size_t size) { 122 if (size > 0 && data[0] == 'b') { 123 fprintf(stderr, "BINGO\n"); 124 exit(1); 125 } 126 127 return 0; 128} 129EOF 130 131 c++ -fsanitize=fuzzer -fPIC -shared -o libtest.so pic.cc 132 c++ -o test test.cc -fsanitize=fuzzer -L. -ltest 133 paxctl +a test 134 135 export LD_LIBRARY_PATH=. 136 atf_check -s ignore -o ignore -e match:"BINGO" ./test 137} 138simple_pie_body(){ 139 140 #check whether -pie flag is supported on this architecture 141 if ! c++ -pie -dM -E - < /dev/null 2>/dev/null >/dev/null; then 142 atf_set_skip "c++ -pie not supported on this architecture" 143 fi 144 cat > test.cc << EOF 145#include <stdlib.h> 146#include <stdio.h> 147#include <stdint.h> 148 149extern "C" int LLVMFuzzerTestOneInput(const uint8_t *data, size_t size) { 150 if (size > 0 && data[0] == 'b') { 151 fprintf(stderr, "BINGO\n"); 152 exit(1); 153 } 154 155 return 0; 156} 157EOF 158 159 c++ -fsanitize=fuzzer -o test -fpie -pie test.cc 160 paxctl +a test 161 atf_check -s ignore -o ignore -e match:"BINGO" ./test 162} 163 164 165atf_test_case target_not_supported 166target_not_supported_head() 167{ 168 atf_set "descr" "Test forced skip" 169} 170 171target_not_supported_body() 172{ 173 atf_skip "Target is not supported" 174} 175 176atf_init_test_cases() 177{ 178 test_target 179 test $SUPPORT = 'n' && { 180 atf_add_test_case target_not_supported 181 return 0 182 } 183 atf_add_test_case simple 184 atf_add_test_case simple_profile 185 atf_add_test_case simple_pie 186 atf_add_test_case simple_pic 187} 188