Add a couple more tests...

sandbox/linux/seccomp/tests/test_syscalls.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <assert.h>
+#include <dirent.h>
 #include <pthread.h>
 #include <pty.h>
 #include <sys/types.h>
 #include <sys/wait.h>
 
 #include "sandbox_impl.h"
 
 
 // This is basically a marker to grep for.
 #define TEST(name) void name()
 
+TEST(test_dup) {
+  StartSeccompSandbox();
+  // Test a simple syscall that is marked as UNRESTRICTED_SYSCALL.
+  int fd = dup(1);
+  assert(fd >= 0);
+  int rc = close(fd);
+  assert(rc == 0);
+}
+
+// This has an off-by-three error because it counts ".", "..", and the
+// FD for the /proc/self/fd directory.  This doesn't matter because it
+// is only used to check for differences in the number of open FDs.
+int count_fds() {
+  DIR *dir = opendir("/proc/self/fd");
+  assert(dir != NULL);
+  int count = 0;
+  while (1) {
+    struct dirent *d = readdir(dir);
+    if (d == NULL)
+      break;
+    count++;
+  }
+  int rc = closedir(dir);
+  assert(rc == 0);
+  return count;
+}
+
 void *thread_func(void *x) {
   int *ptr = (int *) x;
   *ptr = 123;
   printf("In new thread\n");
   return (void *) 456;
 }
 
 TEST(test_thread) {
   StartSeccompSandbox();
+  int fd_count1 = count_fds();
   pthread_t tid;
-  int x;
+  int x = 999;
   void *result;
   pthread_create(&tid, NULL, thread_func, &x);
   printf("Waiting for thread\n");
   pthread_join(tid, &result);
   assert(result == (void *) 456);
   assert(x == 123);
+  // Check that the process has not leaked FDs.
+  int fd_count2 = count_fds();
+  assert(fd_count2 == fd_count1);
 }
 
 int clone_func(void *x) {
+  int *ptr = (int *) x;
+  *ptr = 124;
+  printf("In thread\n");
+  // On x86-64, returning from this function calls the __NR_exit_group
+  // syscall instead of __NR_exit.
+  syscall(__NR_exit, 100);
+  // Not reached.
+  return 200;
+}
+
+#if defined(__i386__)
+int get_gs() {
+  int gs;
+  asm volatile("mov %%gs, %0" : "=r"(gs));
+  return gs;
+}
+#endif
+
+void *get_tls_base() {
+  void *base;
+#if defined(__x86_64__)
+  asm volatile("mov %%fs:0, %0" : "=r"(base));
+#elif defined(__i386__)
+  asm volatile("mov %%gs:0, %0" : "=r"(base));
+#else
+#error Unsupported target platform
+#endif
+  return base;
+}
+
+TEST(test_clone) {
+  StartSeccompSandbox();
+  int fd_count1 = count_fds();
+  int stack_size = 0x1000;
+  char *stack = (char *) malloc(stack_size);
+  assert(stack != NULL);
+  int flags = CLONE_VM | CLONE_FS | CLONE_FILES |
+    CLONE_SIGHAND | CLONE_THREAD | CLONE_SYSVSEM |
+    CLONE_SETTLS | CLONE_PARENT_SETTID | CLONE_CHILD_CLEARTID;
+  int tid = -1;
+  int x = 999;
+
+  // The sandbox requires us to pass CLONE_TLS.  Pass settings that
+  // are enough to copy the parent thread's TLS setup.  This allows us
+  // to invoke libc in the child thread.
+#if defined(__x86_64__)
+  void *tls = get_tls_base();
+#elif defined(__i386__)
+  struct user_desc tls_desc, *tls = &tls_desc;
+  tls_desc.entry_number = get_gs() >> 3;
+  tls_desc.base_addr = (long) get_tls_base();
+  tls_desc.limit = 0xfffff;
+  tls_desc.seg_32bit = 1;
+  tls_desc.contents = 0;
+  tls_desc.read_exec_only = 0;
+  tls_desc.limit_in_pages = 1;
+  tls_desc.seg_not_present = 0;
+  tls_desc.useable = 1;
+#else
+#error Unsupported target platform
+#endif
+
+  int rc = clone(clone_func, (void *) (stack + stack_size), flags, &x,
+                 &tid, tls, &tid);
+  assert(rc > 0);
+  while (tid == rc) {
+    syscall(__NR_futex, &tid, FUTEX_WAIT, rc, NULL);
+  }
+  assert(tid == 0);
+  assert(x == 124);
+  // Check that the process has not leaked FDs.
+  int fd_count2 = count_fds();
+  assert(fd_count2 == fd_count1);
+}
+
+int uncalled_clone_func(void *x) {
   printf("In thread func, which shouldn't happen\n");
   return 1;
 }
 
 TEST(test_clone_disallowed_flags) {
   StartSeccompSandbox();
   int stack_size = 4096;
   char *stack = (char *) malloc(stack_size);
   assert(stack != NULL);
   /* We omit the flags CLONE_SETTLS, CLONE_PARENT_SETTID and
      CLONE_CHILD_CLEARTID, which is disallowed by the sandbox. */
   int flags = CLONE_VM | CLONE_FS | CLONE_FILES |
     CLONE_SIGHAND | CLONE_THREAD | CLONE_SYSVSEM;
-  int rc = clone(clone_func, (void *) (stack + stack_size), flags, NULL,
-                 NULL, NULL, NULL);
+  int rc = clone(uncalled_clone_func, (void *) (stack + stack_size),
+                 flags, NULL, NULL, NULL, NULL);
   assert(rc == -1);
   assert(errno == EPERM);
 }
 
 long long read_tsc() {
   long long rc;
   asm volatile(
       "rdtsc\n"
       "mov %%eax, (%0)\n"
       "mov %%edx, 4(%0)\n"
@@ skipping 156 matching lines @@
 struct testcase {
   const char *test_name;
   void (*test_func)();
 };
 
 struct testcase all_tests[] = {
 #include "test-list.h"
   { NULL, NULL },
 };
 
-void run_test_forked(struct testcase *test) {
+int run_test_forked(struct testcase *test) {
   printf("** %s\n", test->test_name);
   int pid = fork();
   if (pid == 0) {
     test->test_func();
     _exit(0);
   }
   int status;
   waitpid(pid, &status, 0);
   if (status != 0) {
     printf("Test failed with exit status %i\n", status);
-    exit(1);
+    return 1;
+  }
+  else {
+    return 0;
   }
 }
 
 int run_test_by_name(const char *name) {
   struct testcase *test;
   for (test = all_tests; test->test_name != NULL; test++) {
     if (strcmp(name, test->test_name) == 0) {
       test->test_func();
       return 0;
     }
   }
   fprintf(stderr, "Test '%s' not found\n", name);
   return 1;
 }
 
 int main(int argc, char **argv) {
   if (argc == 2) {
     // Run one test without forking, to aid debugging.
     return run_test_by_name(argv[1]);
   }
   else if (argc > 2) {
     // TODO: run multiple tests.
     fprintf(stderr, "Too many arguments\n");
     return 1;
   }
   else {
     // Run all tests.
     struct testcase *test;
+    int failures = 0;
     for (test = all_tests; test->test_name != NULL; test++) {
-      run_test_forked(test);
+      failures += run_test_forked(test);
+    }
+    if (failures == 0) {
+      printf("OK\n");
+      return 0;
+    }
+    else {
+      printf("%i FAILURE(S)\n", failures);
+      return 1;
     }
   }
-  return 0;
 }