| OLD | NEW |
| (Empty) |
| 1 // Copyright (c) 2012 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #include "sandbox/linux/bpf_dsl/errorcode.h" | |
| 6 | |
| 7 #include <errno.h> | |
| 8 | |
| 9 #include "base/macros.h" | |
| 10 #include "sandbox/linux/bpf_dsl/bpf_dsl.h" | |
| 11 #include "sandbox/linux/bpf_dsl/policy.h" | |
| 12 #include "sandbox/linux/bpf_dsl/policy_compiler.h" | |
| 13 #include "sandbox/linux/bpf_dsl/test_trap_registry.h" | |
| 14 #include "sandbox/linux/system_headers/linux_seccomp.h" | |
| 15 #include "testing/gtest/include/gtest/gtest.h" | |
| 16 | |
| 17 namespace sandbox { | |
| 18 namespace bpf_dsl { | |
| 19 namespace { | |
| 20 | |
| 21 class DummyPolicy : public Policy { | |
| 22 public: | |
| 23 DummyPolicy() {} | |
| 24 ~DummyPolicy() override {} | |
| 25 | |
| 26 ResultExpr EvaluateSyscall(int sysno) const override { return Allow(); } | |
| 27 | |
| 28 private: | |
| 29 DISALLOW_COPY_AND_ASSIGN(DummyPolicy); | |
| 30 }; | |
| 31 | |
| 32 class ErrorCodeTest : public ::testing::Test { | |
| 33 protected: | |
| 34 ErrorCodeTest() | |
| 35 : policy_(), trap_registry_(), compiler_(&policy_, &trap_registry_) {} | |
| 36 ~ErrorCodeTest() override {} | |
| 37 | |
| 38 DummyPolicy policy_; | |
| 39 TestTrapRegistry trap_registry_; | |
| 40 PolicyCompiler compiler_; | |
| 41 | |
| 42 DISALLOW_COPY_AND_ASSIGN(ErrorCodeTest); | |
| 43 }; | |
| 44 | |
| 45 TEST_F(ErrorCodeTest, ErrnoConstructor) { | |
| 46 ErrorCode e0; | |
| 47 EXPECT_EQ(SECCOMP_RET_INVALID, e0.err()); | |
| 48 | |
| 49 ErrorCode e1(ErrorCode::ERR_ALLOWED); | |
| 50 EXPECT_EQ(SECCOMP_RET_ALLOW, e1.err()); | |
| 51 | |
| 52 ErrorCode e2(EPERM); | |
| 53 EXPECT_EQ(SECCOMP_RET_ERRNO + EPERM, e2.err()); | |
| 54 | |
| 55 ErrorCode e3 = compiler_.Trap(NULL, NULL, true /* safe */); | |
| 56 EXPECT_EQ(SECCOMP_RET_TRAP, (e3.err() & SECCOMP_RET_ACTION)); | |
| 57 | |
| 58 uint16_t data = 0xdead; | |
| 59 ErrorCode e4(ErrorCode::ERR_TRACE + data); | |
| 60 EXPECT_EQ(SECCOMP_RET_TRACE + data, e4.err()); | |
| 61 } | |
| 62 | |
| 63 TEST_F(ErrorCodeTest, InvalidSeccompRetTrace) { | |
| 64 // Should die if the trace data does not fit in 16 bits. | |
| 65 ASSERT_DEATH(ErrorCode e(ErrorCode::ERR_TRACE + (1 << 16)), | |
| 66 "Invalid use of ErrorCode object"); | |
| 67 } | |
| 68 | |
| 69 TEST_F(ErrorCodeTest, Trap) { | |
| 70 ErrorCode e0 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 71 ErrorCode e1 = compiler_.Trap(NULL, "b", true /* safe */); | |
| 72 EXPECT_EQ((e0.err() & SECCOMP_RET_DATA) + 1, e1.err() & SECCOMP_RET_DATA); | |
| 73 | |
| 74 ErrorCode e2 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 75 EXPECT_EQ(e0.err() & SECCOMP_RET_DATA, e2.err() & SECCOMP_RET_DATA); | |
| 76 } | |
| 77 | |
| 78 TEST_F(ErrorCodeTest, Equals) { | |
| 79 ErrorCode e1(ErrorCode::ERR_ALLOWED); | |
| 80 ErrorCode e2(ErrorCode::ERR_ALLOWED); | |
| 81 EXPECT_TRUE(e1.Equals(e1)); | |
| 82 EXPECT_TRUE(e1.Equals(e2)); | |
| 83 EXPECT_TRUE(e2.Equals(e1)); | |
| 84 | |
| 85 ErrorCode e3(EPERM); | |
| 86 EXPECT_FALSE(e1.Equals(e3)); | |
| 87 | |
| 88 ErrorCode e4 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 89 ErrorCode e5 = compiler_.Trap(NULL, "b", true /* safe */); | |
| 90 ErrorCode e6 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 91 EXPECT_FALSE(e1.Equals(e4)); | |
| 92 EXPECT_FALSE(e3.Equals(e4)); | |
| 93 EXPECT_FALSE(e5.Equals(e4)); | |
| 94 EXPECT_TRUE(e6.Equals(e4)); | |
| 95 } | |
| 96 | |
| 97 TEST_F(ErrorCodeTest, LessThan) { | |
| 98 ErrorCode e1(ErrorCode::ERR_ALLOWED); | |
| 99 ErrorCode e2(ErrorCode::ERR_ALLOWED); | |
| 100 EXPECT_FALSE(e1.LessThan(e1)); | |
| 101 EXPECT_FALSE(e1.LessThan(e2)); | |
| 102 EXPECT_FALSE(e2.LessThan(e1)); | |
| 103 | |
| 104 ErrorCode e3(EPERM); | |
| 105 EXPECT_FALSE(e1.LessThan(e3)); | |
| 106 EXPECT_TRUE(e3.LessThan(e1)); | |
| 107 | |
| 108 ErrorCode e4 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 109 ErrorCode e5 = compiler_.Trap(NULL, "b", true /* safe */); | |
| 110 ErrorCode e6 = compiler_.Trap(NULL, "a", true /* safe */); | |
| 111 EXPECT_TRUE(e1.LessThan(e4)); | |
| 112 EXPECT_TRUE(e3.LessThan(e4)); | |
| 113 EXPECT_TRUE(e4.LessThan(e5)); | |
| 114 EXPECT_FALSE(e4.LessThan(e6)); | |
| 115 EXPECT_FALSE(e6.LessThan(e4)); | |
| 116 } | |
| 117 | |
| 118 } // namespace | |
| 119 } // namespace bpf_dsl | |
| 120 } // namespace sandbox | |
| OLD | NEW |