1*49a6e16fSderaadt /* $OpenBSD: t_link.c,v 1.2 2021/12/13 16:56:48 deraadt Exp $ */
2a545a52cSbluhm /* $NetBSD: t_link.c,v 1.3 2017/01/13 20:42:36 christos Exp $ */
3a545a52cSbluhm
4a545a52cSbluhm /*-
5a545a52cSbluhm * Copyright (c) 2011 The NetBSD Foundation, Inc.
6a545a52cSbluhm * All rights reserved.
7a545a52cSbluhm *
8a545a52cSbluhm * This code is derived from software contributed to The NetBSD Foundation
9a545a52cSbluhm * by Jukka Ruohonen.
10a545a52cSbluhm *
11a545a52cSbluhm * Redistribution and use in source and binary forms, with or without
12a545a52cSbluhm * modification, are permitted provided that the following conditions
13a545a52cSbluhm * are met:
14a545a52cSbluhm * 1. Redistributions of source code must retain the above copyright
15a545a52cSbluhm * notice, this list of conditions and the following disclaimer.
16a545a52cSbluhm * 2. Redistributions in binary form must reproduce the above copyright
17a545a52cSbluhm * notice, this list of conditions and the following disclaimer in the
18a545a52cSbluhm * documentation and/or other materials provided with the distribution.
19a545a52cSbluhm *
20a545a52cSbluhm * THIS SOFTWARE IS PROVIDED BY THE NETBSD FOUNDATION, INC. AND CONTRIBUTORS
21a545a52cSbluhm * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED
22a545a52cSbluhm * TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
23a545a52cSbluhm * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE FOUNDATION OR CONTRIBUTORS
24a545a52cSbluhm * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
25a545a52cSbluhm * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
26a545a52cSbluhm * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
27a545a52cSbluhm * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
28a545a52cSbluhm * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
29a545a52cSbluhm * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
30a545a52cSbluhm * POSSIBILITY OF SUCH DAMAGE.
31a545a52cSbluhm */
32a545a52cSbluhm
33a545a52cSbluhm #include "macros.h"
34a545a52cSbluhm
35a545a52cSbluhm #include <sys/stat.h>
36a545a52cSbluhm
37a545a52cSbluhm #include "atf-c.h"
38a545a52cSbluhm #include <errno.h>
39a545a52cSbluhm #include <fcntl.h>
40a545a52cSbluhm #include <limits.h>
41a545a52cSbluhm #include <stdio.h>
42a545a52cSbluhm #include <string.h>
43a545a52cSbluhm #include <unistd.h>
44a545a52cSbluhm
45a545a52cSbluhm static const char *getpath(void);
46a545a52cSbluhm static char path[] = "link";
47a545a52cSbluhm static const char *pathl;
48a545a52cSbluhm
49a545a52cSbluhm static const char *
getpath(void)50a545a52cSbluhm getpath(void)
51a545a52cSbluhm {
52a545a52cSbluhm static char buf[LINE_MAX];
53a545a52cSbluhm
54a545a52cSbluhm (void)memset(buf, '\0', sizeof(buf));
55a545a52cSbluhm
56a545a52cSbluhm if (getcwd(buf, sizeof(buf)) == NULL)
57a545a52cSbluhm return NULL;
58a545a52cSbluhm
59a545a52cSbluhm (void)strlcat(buf, path, sizeof(buf));
60a545a52cSbluhm (void)strlcat(buf, ".link", sizeof(buf));
61a545a52cSbluhm
62a545a52cSbluhm return buf;
63a545a52cSbluhm }
64a545a52cSbluhm
65a545a52cSbluhm ATF_TC_WITH_CLEANUP(link_count);
ATF_TC_HEAD(link_count,tc)66a545a52cSbluhm ATF_TC_HEAD(link_count, tc)
67a545a52cSbluhm {
68a545a52cSbluhm atf_tc_set_md_var(tc, "descr", "link(2) counts are incremented?");
69a545a52cSbluhm }
70a545a52cSbluhm
ATF_TC_BODY(link_count,tc)71a545a52cSbluhm ATF_TC_BODY(link_count, tc)
72a545a52cSbluhm {
73a545a52cSbluhm struct stat sa, sb;
74a545a52cSbluhm int fd;
75a545a52cSbluhm
76a545a52cSbluhm (void)memset(&sa, 0, sizeof(struct stat));
77a545a52cSbluhm (void)memset(&sb, 0, sizeof(struct stat));
78a545a52cSbluhm
79a545a52cSbluhm pathl = getpath();
80a545a52cSbluhm fd = open(path, O_RDWR | O_CREAT, 0600);
81a545a52cSbluhm
82a545a52cSbluhm ATF_REQUIRE(fd >= 0);
83a545a52cSbluhm ATF_REQUIRE(pathl != NULL);
84a545a52cSbluhm
85a545a52cSbluhm ATF_REQUIRE(stat(path, &sa) == 0);
86a545a52cSbluhm ATF_REQUIRE(link(path, pathl) == 0);
87a545a52cSbluhm ATF_REQUIRE(stat(path, &sb) == 0);
88a545a52cSbluhm
89a545a52cSbluhm if (sa.st_nlink != sb.st_nlink - 1)
90a545a52cSbluhm atf_tc_fail("incorrect link(2) count");
91a545a52cSbluhm
92a545a52cSbluhm ATF_REQUIRE(close(fd) == 0);
93a545a52cSbluhm ATF_REQUIRE(unlink(path) == 0);
94a545a52cSbluhm ATF_REQUIRE(unlink(pathl) == 0);
95a545a52cSbluhm }
96a545a52cSbluhm
ATF_TC_CLEANUP(link_count,tc)97a545a52cSbluhm ATF_TC_CLEANUP(link_count, tc)
98a545a52cSbluhm {
99a545a52cSbluhm (void)unlink(path);
100a545a52cSbluhm (void)unlink(pathl);
101a545a52cSbluhm }
102a545a52cSbluhm
103a545a52cSbluhm ATF_TC_WITH_CLEANUP(link_err);
ATF_TC_HEAD(link_err,tc)104a545a52cSbluhm ATF_TC_HEAD(link_err, tc)
105a545a52cSbluhm {
106a545a52cSbluhm atf_tc_set_md_var(tc, "descr", "Test error conditions of link(2)");
107a545a52cSbluhm }
108a545a52cSbluhm
ATF_TC_BODY(link_err,tc)109a545a52cSbluhm ATF_TC_BODY(link_err, tc)
110a545a52cSbluhm {
111*49a6e16fSderaadt char buf[PATH_MAX + 1];
112a545a52cSbluhm int fd;
113a545a52cSbluhm
114a545a52cSbluhm (void)memset(buf, 'x', sizeof(buf));
115a545a52cSbluhm
116a545a52cSbluhm pathl = getpath();
117a545a52cSbluhm fd = open(path, O_RDWR | O_CREAT, 0600);
118a545a52cSbluhm
119a545a52cSbluhm ATF_REQUIRE(fd >= 0);
120a545a52cSbluhm ATF_REQUIRE(pathl != NULL);
121a545a52cSbluhm
122a545a52cSbluhm errno = 0;
123a545a52cSbluhm ATF_REQUIRE(link(path, pathl) == 0);
124a545a52cSbluhm ATF_REQUIRE_ERRNO(EEXIST, link(path, pathl) == -1);
125a545a52cSbluhm
126a545a52cSbluhm errno = 0;
127a545a52cSbluhm ATF_REQUIRE_ERRNO(ENAMETOOLONG, link(buf, "xxx") == -1);
128a545a52cSbluhm
129a545a52cSbluhm errno = 0;
130a545a52cSbluhm ATF_REQUIRE_ERRNO(ENOENT, link(path, "/d/c/b/a") == -1);
131a545a52cSbluhm
132a545a52cSbluhm errno = 0;
133a545a52cSbluhm ATF_REQUIRE_ERRNO(ENOENT, link("/a/b/c/d", path) == -1);
134a545a52cSbluhm
135a545a52cSbluhm errno = 0;
136a545a52cSbluhm ATF_REQUIRE_ERRNO(ENOENT, link("/a/b/c/d", "/d/c/b/a") == -1);
137a545a52cSbluhm
138a545a52cSbluhm errno = 0;
139a545a52cSbluhm ATF_REQUIRE_ERRNO(EFAULT, link(path, (const char *)-1) == -1);
140a545a52cSbluhm
141a545a52cSbluhm errno = 0;
142a545a52cSbluhm ATF_REQUIRE_ERRNO(EFAULT, link((const char *)-1, "xxx") == -1);
143a545a52cSbluhm
144a545a52cSbluhm ATF_REQUIRE(close(fd) == 0);
145a545a52cSbluhm ATF_REQUIRE(unlink(path) == 0);
146a545a52cSbluhm ATF_REQUIRE(unlink(pathl) == 0);
147a545a52cSbluhm }
148a545a52cSbluhm
ATF_TC_CLEANUP(link_err,tc)149a545a52cSbluhm ATF_TC_CLEANUP(link_err, tc)
150a545a52cSbluhm {
151a545a52cSbluhm (void)unlink(path);
152a545a52cSbluhm (void)unlink(pathl);
153a545a52cSbluhm }
154a545a52cSbluhm
155a545a52cSbluhm ATF_TC(link_perm);
ATF_TC_HEAD(link_perm,tc)156a545a52cSbluhm ATF_TC_HEAD(link_perm, tc)
157a545a52cSbluhm {
158a545a52cSbluhm atf_tc_set_md_var(tc, "descr", "Test permissions with link(2)");
159a545a52cSbluhm atf_tc_set_md_var(tc, "require.user", "unprivileged");
160a545a52cSbluhm }
161a545a52cSbluhm
ATF_TC_BODY(link_perm,tc)162a545a52cSbluhm ATF_TC_BODY(link_perm, tc)
163a545a52cSbluhm {
164a545a52cSbluhm int rv;
165a545a52cSbluhm
166a545a52cSbluhm errno = 0;
167a545a52cSbluhm rv = link("/root", "/root.link");
168a545a52cSbluhm ATF_REQUIRE_MSG(rv == -1 && (errno == EACCES || errno == EPERM),
169a545a52cSbluhm "link to a directory did not fail with EPERM or EACCESS; link() "
170a545a52cSbluhm "returned %d, errno %d", rv, errno);
171a545a52cSbluhm
172a545a52cSbluhm errno = 0;
173a545a52cSbluhm ATF_REQUIRE_ERRNO(EACCES,
174a545a52cSbluhm link("/root/.profile", "/root/.profile.link") == -1);
175a545a52cSbluhm }
176a545a52cSbluhm
177a545a52cSbluhm ATF_TC_WITH_CLEANUP(link_stat);
ATF_TC_HEAD(link_stat,tc)178a545a52cSbluhm ATF_TC_HEAD(link_stat, tc)
179a545a52cSbluhm {
180a545a52cSbluhm atf_tc_set_md_var(tc, "descr", "Check stat(2) of a linked file");
181a545a52cSbluhm }
182a545a52cSbluhm
ATF_TC_BODY(link_stat,tc)183a545a52cSbluhm ATF_TC_BODY(link_stat, tc)
184a545a52cSbluhm {
185a545a52cSbluhm struct stat sa, sb;
186a545a52cSbluhm int fd;
187a545a52cSbluhm
188a545a52cSbluhm (void)memset(&sa, 0, sizeof(struct stat));
189a545a52cSbluhm (void)memset(&sb, 0, sizeof(struct stat));
190a545a52cSbluhm
191a545a52cSbluhm pathl = getpath();
192a545a52cSbluhm fd = open(path, O_RDWR | O_CREAT, 0600);
193a545a52cSbluhm
194a545a52cSbluhm ATF_REQUIRE(fd >= 0);
195a545a52cSbluhm ATF_REQUIRE(pathl != NULL);
196a545a52cSbluhm
197a545a52cSbluhm ATF_REQUIRE(link(path, pathl) == 0);
198a545a52cSbluhm ATF_REQUIRE(stat(path, &sa) == 0);
199a545a52cSbluhm ATF_REQUIRE(lstat(pathl, &sb) == 0);
200a545a52cSbluhm
201a545a52cSbluhm if (sa.st_uid != sb.st_uid)
202a545a52cSbluhm atf_tc_fail("unequal UIDs");
203a545a52cSbluhm
204a545a52cSbluhm if (sa.st_mode != sb.st_mode)
205a545a52cSbluhm atf_tc_fail("unequal modes");
206a545a52cSbluhm
207a545a52cSbluhm if (sa.st_ino != sb.st_ino)
208a545a52cSbluhm atf_tc_fail("unequal inodes");
209a545a52cSbluhm
210a545a52cSbluhm ATF_REQUIRE(close(fd) == 0);
211a545a52cSbluhm ATF_REQUIRE(unlink(path) == 0);
212a545a52cSbluhm ATF_REQUIRE(unlink(pathl) == 0);
213a545a52cSbluhm }
214a545a52cSbluhm
ATF_TC_CLEANUP(link_stat,tc)215a545a52cSbluhm ATF_TC_CLEANUP(link_stat, tc)
216a545a52cSbluhm {
217a545a52cSbluhm (void)unlink(path);
218a545a52cSbluhm (void)unlink(pathl);
219a545a52cSbluhm }
220a545a52cSbluhm
ATF_TP_ADD_TCS(tp)221a545a52cSbluhm ATF_TP_ADD_TCS(tp)
222a545a52cSbluhm {
223a545a52cSbluhm
224a545a52cSbluhm ATF_TP_ADD_TC(tp, link_count);
225a545a52cSbluhm ATF_TP_ADD_TC(tp, link_err);
226a545a52cSbluhm ATF_TP_ADD_TC(tp, link_perm);
227a545a52cSbluhm ATF_TP_ADD_TC(tp, link_stat);
228a545a52cSbluhm
229a545a52cSbluhm return atf_no_error();
230a545a52cSbluhm }
231