| Index: build/android/pylib/linker/test_case.py
|
| diff --git a/build/android/pylib/linker/test_case.py b/build/android/pylib/linker/test_case.py
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..c7b0f50b59cc9f97440df027398cd31186008bd8
|
| --- /dev/null
|
| +++ b/build/android/pylib/linker/test_case.py
|
| @@ -0,0 +1,496 @@
|
| +# Copyright 2013 The Chromium Authors. All rights reserved.
|
| +# Use of this source code is governed by a BSD-style license that can be
|
| +# found in the LICENSE file.
|
| +
|
| +"""Base class for linker-specific test cases.
|
| +
|
| + The custom dynamic linker can only be tested through a custom test case
|
| + for various technical reasons:
|
| +
|
| + - It's an 'invisible feature', i.e. it doesn't expose a new API or
|
| + behaviour, all it does is save RAM when loading native libraries.
|
| +
|
| + - Checking that it works correctly requires several things that do not
|
| + fit the existing GTest-based and instrumentation-based tests:
|
| +
|
| + - Native test code needs to be run in both the browser and renderer
|
| + process at the same time just after loading native libraries, in
|
| + a completely asynchronous way.
|
| +
|
| + - Each test case requires restarting a whole new application process
|
| + with a different command-line.
|
| +
|
| + - Enabling test support in the Linker code requires building a special
|
| + APK with a flag to activate special test-only support code in the
|
| + Linker code itself.
|
| +
|
| + Host-driven tests have also been tried, but since they're really
|
| + sub-classes of instrumentation tests, they didn't work well either.
|
| +
|
| + To build and run the linker tests, do the following:
|
| +
|
| + ninja -C out/Debug chromium_linker_test_apk
|
| + build/android/test_runner.py linker
|
| +
|
| +"""
|
| +# pylint: disable=R0201
|
| +
|
| +import logging
|
| +import os
|
| +import re
|
| +import time
|
| +
|
| +from pylib import constants
|
| +from pylib.base import base_test_result
|
| +from pylib.device import device_errors
|
| +from pylib.device import intent
|
| +
|
| +
|
| +ResultType = base_test_result.ResultType
|
| +
|
| +_PACKAGE_NAME = 'org.chromium.chromium_linker_test_apk'
|
| +_ACTIVITY_NAME = '.ChromiumLinkerTestActivity'
|
| +_COMMAND_LINE_FILE = '/data/local/tmp/chromium-linker-test-command-line'
|
| +
|
| +# Path to the Linker.java source file.
|
| +_LINKER_JAVA_SOURCE_PATH = (
|
| + 'base/android/java/src/org/chromium/base/library_loader/Linker.java')
|
| +
|
| +# A regular expression used to extract the browser shared RELRO configuration
|
| +# from the Java source file above.
|
| +_RE_LINKER_BROWSER_CONFIG = re.compile(
|
| + r'.*BROWSER_SHARED_RELRO_CONFIG\s+=\s+' +
|
| + r'BROWSER_SHARED_RELRO_CONFIG_(\S+)\s*;.*',
|
| + re.MULTILINE | re.DOTALL)
|
| +
|
| +# Logcat filters used during each test. Only the 'chromium' one is really
|
| +# needed, but the logs are added to the TestResult in case of error, and
|
| +# it is handy to have the 'chromium_android_linker' ones as well when
|
| +# troubleshooting.
|
| +_LOGCAT_FILTERS = ['*:s', 'chromium:v', 'chromium_android_linker:v']
|
| +#_LOGCAT_FILTERS = ['*:v'] ## DEBUG
|
| +
|
| +# Regular expression used to match status lines in logcat.
|
| +_RE_BROWSER_STATUS_LINE = re.compile(r' BROWSER_LINKER_TEST: (FAIL|SUCCESS)$')
|
| +_RE_RENDERER_STATUS_LINE = re.compile(r' RENDERER_LINKER_TEST: (FAIL|SUCCESS)$')
|
| +
|
| +# Regular expression used to mach library load addresses in logcat.
|
| +_RE_LIBRARY_ADDRESS = re.compile(
|
| + r'(BROWSER|RENDERER)_LIBRARY_ADDRESS: (\S+) ([0-9A-Fa-f]+)')
|
| +
|
| +
|
| +def _GetBrowserSharedRelroConfig():
|
| + """Returns a string corresponding to the Linker's configuration of shared
|
| + RELRO sections in the browser process. This parses the Java linker source
|
| + file to get the appropriate information.
|
| + Return:
|
| + None in case of error (e.g. could not locate the source file).
|
| + 'NEVER' if the browser process shall never use shared RELROs.
|
| + 'LOW_RAM_ONLY' if if uses it only on low-end devices.
|
| + 'ALWAYS' if it always uses a shared RELRO.
|
| + """
|
| + source_path = \
|
| + os.path.join(constants.DIR_SOURCE_ROOT, _LINKER_JAVA_SOURCE_PATH)
|
| + if not os.path.exists(source_path):
|
| + logging.error('Could not find linker source file: ' + source_path)
|
| + return None
|
| +
|
| + with open(source_path) as f:
|
| + configs = _RE_LINKER_BROWSER_CONFIG.findall(f.read())
|
| + if not configs:
|
| + logging.error(
|
| + 'Can\'t find browser shared RELRO configuration value in ' + \
|
| + source_path)
|
| + return None
|
| +
|
| + if configs[0] not in ['NEVER', 'LOW_RAM_ONLY', 'ALWAYS']:
|
| + logging.error('Unexpected browser config value: ' + configs[0])
|
| + return None
|
| +
|
| + logging.info('Found linker browser shared RELRO config: ' + configs[0])
|
| + return configs[0]
|
| +
|
| +
|
| +def _StartActivityAndWaitForLinkerTestStatus(device, timeout):
|
| + """Force-start an activity and wait up to |timeout| seconds until the full
|
| + linker test status lines appear in the logcat, recorded through |device|.
|
| + Args:
|
| + device: A DeviceUtils instance.
|
| + timeout: Timeout in seconds
|
| + Returns:
|
| + A (status, logs) tuple, where status is a ResultType constant, and logs
|
| + if the final logcat output as a string.
|
| + """
|
| +
|
| + # 1. Start recording logcat with appropriate filters.
|
| + with device.GetLogcatMonitor(filter_specs=_LOGCAT_FILTERS) as logmon:
|
| +
|
| + # 2. Force-start activity.
|
| + device.StartActivity(
|
| + intent.Intent(package=_PACKAGE_NAME, activity=_ACTIVITY_NAME),
|
| + force_stop=True)
|
| +
|
| + # 3. Wait up to |timeout| seconds until the test status is in the logcat.
|
| + result = ResultType.PASS
|
| + try:
|
| + browser_match = logmon.WaitFor(_RE_BROWSER_STATUS_LINE, timeout=timeout)
|
| + logging.debug('Found browser match: %s', browser_match.group(0))
|
| + renderer_match = logmon.WaitFor(_RE_RENDERER_STATUS_LINE,
|
| + timeout=timeout)
|
| + logging.debug('Found renderer match: %s', renderer_match.group(0))
|
| + if (browser_match.group(1) != 'SUCCESS'
|
| + or renderer_match.group(1) != 'SUCCESS'):
|
| + result = ResultType.FAIL
|
| + except device_errors.CommandTimeoutError:
|
| + result = ResultType.TIMEOUT
|
| +
|
| + return result, '\n'.join(device.adb.Logcat(dump=True))
|
| +
|
| +
|
| +class LibraryLoadMap(dict):
|
| + """A helper class to pretty-print a map of library names to load addresses."""
|
| + def __str__(self):
|
| + items = ['\'%s\': 0x%x' % (name, address) for \
|
| + (name, address) in self.iteritems()]
|
| + return '{%s}' % (', '.join(items))
|
| +
|
| + def __repr__(self):
|
| + return 'LibraryLoadMap(%s)' % self.__str__()
|
| +
|
| +
|
| +class AddressList(list):
|
| + """A helper class to pretty-print a list of load addresses."""
|
| + def __str__(self):
|
| + items = ['0x%x' % address for address in self]
|
| + return '[%s]' % (', '.join(items))
|
| +
|
| + def __repr__(self):
|
| + return 'AddressList(%s)' % self.__str__()
|
| +
|
| +
|
| +def _ExtractLibraryLoadAddressesFromLogcat(logs):
|
| + """Extract the names and addresses of shared libraries loaded in the
|
| + browser and renderer processes.
|
| + Args:
|
| + logs: A string containing logcat output.
|
| + Returns:
|
| + A tuple (browser_libs, renderer_libs), where each item is a map of
|
| + library names (strings) to library load addresses (ints), for the
|
| + browser and renderer processes, respectively.
|
| + """
|
| + browser_libs = LibraryLoadMap()
|
| + renderer_libs = LibraryLoadMap()
|
| + for m in _RE_LIBRARY_ADDRESS.finditer(logs):
|
| + process_type, lib_name, lib_address = m.groups()
|
| + lib_address = int(lib_address, 16)
|
| + if process_type == 'BROWSER':
|
| + browser_libs[lib_name] = lib_address
|
| + elif process_type == 'RENDERER':
|
| + renderer_libs[lib_name] = lib_address
|
| + else:
|
| + assert False, 'Invalid process type'
|
| +
|
| + return browser_libs, renderer_libs
|
| +
|
| +
|
| +def _CheckLoadAddressRandomization(lib_map_list, process_type):
|
| + """Check that a map of library load addresses is random enough.
|
| + Args:
|
| + lib_map_list: a list of dictionaries that map library names (string)
|
| + to load addresses (int). Each item in the list corresponds to a
|
| + different run / process start.
|
| + process_type: a string describing the process type.
|
| + Returns:
|
| + (status, logs) tuple, where <status> is True iff the load addresses are
|
| + randomized, False otherwise, and <logs> is a string containing an error
|
| + message detailing the libraries that are not randomized properly.
|
| + """
|
| + # Collect, for each library, its list of load addresses.
|
| + lib_addr_map = {}
|
| + for lib_map in lib_map_list:
|
| + for lib_name, lib_address in lib_map.iteritems():
|
| + if lib_name not in lib_addr_map:
|
| + lib_addr_map[lib_name] = AddressList()
|
| + lib_addr_map[lib_name].append(lib_address)
|
| +
|
| + logging.info('%s library load map: %s', process_type, lib_addr_map)
|
| +
|
| + # For each library, check the randomness of its load addresses.
|
| + bad_libs = {}
|
| + for lib_name, lib_address_list in lib_addr_map.iteritems():
|
| + # If all addresses are different, skip to next item.
|
| + lib_address_set = set(lib_address_list)
|
| + # Consider that if there is more than one pair of identical addresses in
|
| + # the list, then randomization is broken.
|
| + if len(lib_address_set) < len(lib_address_list) - 1:
|
| + bad_libs[lib_name] = lib_address_list
|
| +
|
| +
|
| + if bad_libs:
|
| + return False, '%s libraries failed randomization: %s' % \
|
| + (process_type, bad_libs)
|
| +
|
| + return True, '%s libraries properly randomized: %s' % \
|
| + (process_type, lib_addr_map)
|
| +
|
| +
|
| +class LinkerTestCaseBase(object):
|
| + """Base class for linker test cases."""
|
| +
|
| + def __init__(self, is_low_memory=False):
|
| + """Create a test case.
|
| + Args:
|
| + is_low_memory: True to simulate a low-memory device, False otherwise.
|
| + """
|
| + self.is_low_memory = is_low_memory
|
| + if is_low_memory:
|
| + test_suffix = 'ForLowMemoryDevice'
|
| + else:
|
| + test_suffix = 'ForRegularDevice'
|
| + class_name = self.__class__.__name__
|
| + self.qualified_name = '%s.%s' % (class_name, test_suffix)
|
| + self.tagged_name = self.qualified_name
|
| +
|
| + def _RunTest(self, _device):
|
| + """Run the test, must be overriden.
|
| + Args:
|
| + _device: A DeviceUtils interface.
|
| + Returns:
|
| + A (status, log) tuple, where <status> is a ResultType constant, and <log>
|
| + is the logcat output captured during the test in case of error, or None
|
| + in case of success.
|
| + """
|
| + return ResultType.FAIL, 'Unimplemented _RunTest() method!'
|
| +
|
| + def Run(self, device):
|
| + """Run the test on a given device.
|
| + Args:
|
| + device: Name of target device where to run the test.
|
| + Returns:
|
| + A base_test_result.TestRunResult() instance.
|
| + """
|
| + margin = 8
|
| + print '[ %-*s ] %s' % (margin, 'RUN', self.tagged_name)
|
| + logging.info('Running linker test: %s', self.tagged_name)
|
| +
|
| + # Create command-line file on device.
|
| + command_line_flags = ''
|
| + if self.is_low_memory:
|
| + command_line_flags = '--low-memory-device'
|
| + device.WriteFile(_COMMAND_LINE_FILE, command_line_flags)
|
| +
|
| + # Run the test.
|
| + status, logs = self._RunTest(device)
|
| +
|
| + result_text = 'OK'
|
| + if status == ResultType.FAIL:
|
| + result_text = 'FAILED'
|
| + elif status == ResultType.TIMEOUT:
|
| + result_text = 'TIMEOUT'
|
| + print '[ %*s ] %s' % (margin, result_text, self.tagged_name)
|
| +
|
| + results = base_test_result.TestRunResults()
|
| + results.AddResult(
|
| + base_test_result.BaseTestResult(
|
| + self.tagged_name,
|
| + status,
|
| + log=logs))
|
| +
|
| + return results
|
| +
|
| + def __str__(self):
|
| + return self.tagged_name
|
| +
|
| + def __repr__(self):
|
| + return self.tagged_name
|
| +
|
| +
|
| +class LinkerSharedRelroTest(LinkerTestCaseBase):
|
| + """A linker test case to check the status of shared RELRO sections.
|
| +
|
| + The core of the checks performed here are pretty simple:
|
| +
|
| + - Clear the logcat and start recording with an appropriate set of filters.
|
| + - Create the command-line appropriate for the test-case.
|
| + - Start the activity (always forcing a cold start).
|
| + - Every second, look at the current content of the filtered logcat lines
|
| + and look for instances of the following:
|
| +
|
| + BROWSER_LINKER_TEST: <status>
|
| + RENDERER_LINKER_TEST: <status>
|
| +
|
| + where <status> can be either FAIL or SUCCESS. These lines can appear
|
| + in any order in the logcat. Once both browser and renderer status are
|
| + found, stop the loop. Otherwise timeout after 30 seconds.
|
| +
|
| + Note that there can be other lines beginning with BROWSER_LINKER_TEST:
|
| + and RENDERER_LINKER_TEST:, but are not followed by a <status> code.
|
| +
|
| + - The test case passes if the <status> for both the browser and renderer
|
| + process are SUCCESS. Otherwise its a fail.
|
| + """
|
| + def _RunTest(self, device):
|
| + # Wait up to 30 seconds until the linker test status is in the logcat.
|
| + return _StartActivityAndWaitForLinkerTestStatus(device, timeout=30)
|
| +
|
| +
|
| +class LinkerLibraryAddressTest(LinkerTestCaseBase):
|
| + """A test case that verifies library load addresses.
|
| +
|
| + The point of this check is to ensure that the libraries are loaded
|
| + according to the following rules:
|
| +
|
| + - For low-memory devices, they should always be loaded at the same address
|
| + in both browser and renderer processes, both below 0x4000_0000.
|
| +
|
| + - For regular devices, the browser process should load libraries above
|
| + 0x4000_0000, and renderer ones below it.
|
| + """
|
| + def _RunTest(self, device):
|
| + result, logs = _StartActivityAndWaitForLinkerTestStatus(device, timeout=30)
|
| +
|
| + # Return immediately in case of timeout.
|
| + if result == ResultType.TIMEOUT:
|
| + return result, logs
|
| +
|
| + # Collect the library load addresses in the browser and renderer processes.
|
| + browser_libs, renderer_libs = _ExtractLibraryLoadAddressesFromLogcat(logs)
|
| +
|
| + logging.info('Browser libraries: %s', browser_libs)
|
| + logging.info('Renderer libraries: %s', renderer_libs)
|
| +
|
| + # Check that the same libraries are loaded into both processes:
|
| + browser_set = set(browser_libs.keys())
|
| + renderer_set = set(renderer_libs.keys())
|
| + if browser_set != renderer_set:
|
| + logging.error('Library set mistmach browser=%s renderer=%s',
|
| + browser_libs.keys(), renderer_libs.keys())
|
| + return ResultType.FAIL, logs
|
| +
|
| + # And that there are not empty.
|
| + if not browser_set:
|
| + logging.error('No libraries loaded in any process!')
|
| + return ResultType.FAIL, logs
|
| +
|
| + # Check that the renderer libraries are loaded at 'low-addresses'. i.e.
|
| + # below 0x4000_0000, for every kind of device.
|
| + memory_boundary = 0x40000000
|
| + bad_libs = []
|
| + for lib_name, lib_address in renderer_libs.iteritems():
|
| + if lib_address >= memory_boundary:
|
| + bad_libs.append((lib_name, lib_address))
|
| +
|
| + if bad_libs:
|
| + logging.error('Renderer libraries loaded at high addresses: %s', bad_libs)
|
| + return ResultType.FAIL, logs
|
| +
|
| + browser_config = _GetBrowserSharedRelroConfig()
|
| + if not browser_config:
|
| + return ResultType.FAIL, 'Bad linker source configuration'
|
| +
|
| + if browser_config == 'ALWAYS' or \
|
| + (browser_config == 'LOW_RAM_ONLY' and self.is_low_memory):
|
| + # The libraries must all be loaded at the same addresses. This also
|
| + # implicitly checks that the browser libraries are at low addresses.
|
| + addr_mismatches = []
|
| + for lib_name, lib_address in browser_libs.iteritems():
|
| + lib_address2 = renderer_libs[lib_name]
|
| + if lib_address != lib_address2:
|
| + addr_mismatches.append((lib_name, lib_address, lib_address2))
|
| +
|
| + if addr_mismatches:
|
| + logging.error('Library load address mismatches: %s',
|
| + addr_mismatches)
|
| + return ResultType.FAIL, logs
|
| +
|
| + # Otherwise, check that libraries are loaded at 'high-addresses'.
|
| + # Note that for low-memory devices, the previous checks ensure that they
|
| + # were loaded at low-addresses.
|
| + else:
|
| + bad_libs = []
|
| + for lib_name, lib_address in browser_libs.iteritems():
|
| + if lib_address < memory_boundary:
|
| + bad_libs.append((lib_name, lib_address))
|
| +
|
| + if bad_libs:
|
| + logging.error('Browser libraries loaded at low addresses: %s', bad_libs)
|
| + return ResultType.FAIL, logs
|
| +
|
| + # Everything's ok.
|
| + return ResultType.PASS, logs
|
| +
|
| +
|
| +class LinkerRandomizationTest(LinkerTestCaseBase):
|
| + """A linker test case to check that library load address randomization works
|
| + properly between successive starts of the test program/activity.
|
| +
|
| + This starts the activity several time (each time forcing a new process
|
| + creation) and compares the load addresses of the libraries in them to
|
| + detect that they have changed.
|
| +
|
| + In theory, two successive runs could (very rarely) use the same load
|
| + address, so loop 5 times and compare the values there. It is assumed
|
| + that if there are more than one pair of identical addresses, then the
|
| + load addresses are not random enough for this test.
|
| + """
|
| + def _RunTest(self, device):
|
| + max_loops = 5
|
| + browser_lib_map_list = []
|
| + renderer_lib_map_list = []
|
| + logs_list = []
|
| + for _ in range(max_loops):
|
| + # Start the activity.
|
| + result, logs = _StartActivityAndWaitForLinkerTestStatus(
|
| + device, timeout=30)
|
| + if result == ResultType.TIMEOUT:
|
| + # Something bad happened. Return immediately.
|
| + return result, logs
|
| +
|
| + # Collect library addresses.
|
| + browser_libs, renderer_libs = _ExtractLibraryLoadAddressesFromLogcat(logs)
|
| + browser_lib_map_list.append(browser_libs)
|
| + renderer_lib_map_list.append(renderer_libs)
|
| + logs_list.append(logs)
|
| +
|
| + # Check randomization in the browser libraries.
|
| + logs = '\n'.join(logs_list)
|
| +
|
| + browser_status, browser_logs = _CheckLoadAddressRandomization(
|
| + browser_lib_map_list, 'Browser')
|
| +
|
| + renderer_status, renderer_logs = _CheckLoadAddressRandomization(
|
| + renderer_lib_map_list, 'Renderer')
|
| +
|
| + browser_config = _GetBrowserSharedRelroConfig()
|
| + if not browser_config:
|
| + return ResultType.FAIL, 'Bad linker source configuration'
|
| +
|
| + if not browser_status:
|
| + if browser_config == 'ALWAYS' or \
|
| + (browser_config == 'LOW_RAM_ONLY' and self.is_low_memory):
|
| + return ResultType.FAIL, browser_logs
|
| +
|
| + # IMPORTANT NOTE: The system's ASLR implementation seems to be very poor
|
| + # when starting an activity process in a loop with "adb shell am start".
|
| + #
|
| + # When simulating a regular device, loading libraries in the browser
|
| + # process uses a simple mmap(NULL, ...) to let the kernel device where to
|
| + # load the file (this is similar to what System.loadLibrary() does).
|
| + #
|
| + # Unfortunately, at least in the context of this test, doing so while
|
| + # restarting the activity with the activity manager very, very, often
|
| + # results in the system using the same load address for all 5 runs, or
|
| + # sometimes only 4 out of 5.
|
| + #
|
| + # This has been tested experimentally on both Android 4.1.2 and 4.3.
|
| + #
|
| + # Note that this behaviour doesn't seem to happen when starting an
|
| + # application 'normally', i.e. when using the application launcher to
|
| + # start the activity.
|
| + logging.info('Ignoring system\'s low randomization of browser libraries' +
|
| + ' for regular devices')
|
| +
|
| + if not renderer_status:
|
| + return ResultType.FAIL, renderer_logs
|
| +
|
| + return ResultType.PASS, logs
|
|
|