mirror of
https://github.com/opnsense/src.git
synced 2026-05-28 04:12:45 -04:00
Add udpconnectjail, a simple regression test to exercise an (as yet)
unfixed bug in the jail() implementation relating to using the connect() system call on UDP sockets. PR: 26506
This commit is contained in:
parent
dab342e9ad
commit
81cfeee7bf
2 changed files with 117 additions and 0 deletions
7
tools/regression/netinet/udpconnectjail/Makefile
Normal file
7
tools/regression/netinet/udpconnectjail/Makefile
Normal file
|
|
@ -0,0 +1,7 @@
|
|||
# $FreeBSD$
|
||||
|
||||
PROG= udpconnectjail
|
||||
NO_MAN= yes
|
||||
WARNS= 3
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
110
tools/regression/netinet/udpconnectjail/udpconnectjail.c
Normal file
110
tools/regression/netinet/udpconnectjail/udpconnectjail.c
Normal file
|
|
@ -0,0 +1,110 @@
|
|||
/*-
|
||||
* Copyright (c) 2005 Robert N. M. Watson
|
||||
* All rights reserved.
|
||||
*
|
||||
* Redistribution and use in source and binary forms, with or without
|
||||
* modification, are permitted provided that the following conditions
|
||||
* are met:
|
||||
* 1. Redistributions of source code must retain the above copyright
|
||||
* notice, this list of conditions and the following disclaimer.
|
||||
* 2. Redistributions in binary form must reproduce the above copyright
|
||||
* notice, this list of conditions and the following disclaimer in the
|
||||
* documentation and/or other materials provided with the distribution.
|
||||
*
|
||||
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
||||
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
||||
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
* SUCH DAMAGE.
|
||||
*
|
||||
* $FreeBSD$
|
||||
*/
|
||||
|
||||
#include <sys/param.h>
|
||||
#include <sys/jail.h>
|
||||
#include <sys/socket.h>
|
||||
|
||||
#include <netinet/in.h>
|
||||
|
||||
#include <arpa/inet.h>
|
||||
|
||||
#include <err.h>
|
||||
#include <errno.h>
|
||||
#include <stdio.h>
|
||||
#include <stdlib.h>
|
||||
#include <string.h>
|
||||
#include <unistd.h>
|
||||
|
||||
/*
|
||||
* A bug in the jail(8) code prevented processes in jail from properly
|
||||
* connecting UDP sockets. This test program attempts to exercise that bug.
|
||||
*/
|
||||
|
||||
static void
|
||||
usage(void)
|
||||
{
|
||||
|
||||
fprintf(stderr, "udpconnectjail: no arguments\n");
|
||||
exit(-1);
|
||||
}
|
||||
|
||||
static void
|
||||
test(const char *context, struct sockaddr_in *sin)
|
||||
{
|
||||
int sock;
|
||||
|
||||
sock = socket(PF_INET, SOCK_DGRAM, 0);
|
||||
if (sock == -1)
|
||||
errx(-1, "%s: socket(PF_INET, SOCK_DGRAM, 0): %s", context,
|
||||
strerror(errno));
|
||||
|
||||
if (connect(sock, (struct sockaddr *)&sin, sizeof(sin)) < 0)
|
||||
errx(-1, "%s: connect(%s): %s", context,
|
||||
inet_ntoa(sin->sin_addr), strerror(errno));
|
||||
|
||||
if (close(sock) < 0)
|
||||
errx(-1, "%s: close(): %s", context, strerror(errno));
|
||||
}
|
||||
|
||||
int
|
||||
main(int argc, __unused char *argv[])
|
||||
{
|
||||
struct sockaddr_in sin;
|
||||
struct jail thejail;
|
||||
|
||||
if (argc != 1)
|
||||
usage();
|
||||
|
||||
bzero(&sin, sizeof(sin));
|
||||
sin.sin_len = sizeof(sin);
|
||||
sin.sin_family = AF_INET;
|
||||
sin.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
|
||||
sin.sin_port = 0;
|
||||
|
||||
/*
|
||||
* First run the system call test outside of a jail.
|
||||
*/
|
||||
test("not in jail", &sin);
|
||||
|
||||
/*
|
||||
* Now re-run in a jail.
|
||||
*/
|
||||
bzero(&thejail, sizeof(thejail));
|
||||
thejail.version = 0;
|
||||
thejail.path = "/";
|
||||
thejail.hostname = "jail";
|
||||
thejail.ip_number = htonl(INADDR_LOOPBACK);
|
||||
if (jail(&thejail) < 0)
|
||||
errx(-1, "jail: %s", strerror(errno));
|
||||
test("in jail", &sin);
|
||||
|
||||
fprintf(stdout, "PASS\n");
|
||||
|
||||
return (0);
|
||||
}
|
||||
Loading…
Reference in a new issue