| OLD | NEW |
| 1 // Copyright 2014 The Chromium Authors. All rights reserved. | 1 // Copyright 2014 The Chromium Authors. All rights reserved. |
| 2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
| 3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
| 4 | 4 |
| 5 // ASan internally uses some syscalls which non-SFI NaCl disallows. | 5 // ASan internally uses some syscalls which non-SFI NaCl disallows. |
| 6 // Seccomp-BPF tests die under TSan v2. See http://crbug.com/356588 | 6 // Seccomp-BPF tests die under TSan v2. See http://crbug.com/356588 |
| 7 #if !defined(ADDRESS_SANITIZER) && !defined(THREAD_SANITIZER) | 7 #if !defined(ADDRESS_SANITIZER) && !defined(THREAD_SANITIZER) |
| 8 | 8 |
| 9 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h" | 9 #include "components/nacl/loader/nonsfi/nonsfi_sandbox.h" |
| 10 | 10 |
| (...skipping 13 matching lines...) Expand all Loading... |
| 24 #include <sys/wait.h> | 24 #include <sys/wait.h> |
| 25 #include <time.h> | 25 #include <time.h> |
| 26 #include <unistd.h> | 26 #include <unistd.h> |
| 27 | 27 |
| 28 #include "base/bind.h" | 28 #include "base/bind.h" |
| 29 #include "base/callback.h" | 29 #include "base/callback.h" |
| 30 #include "base/compiler_specific.h" | 30 #include "base/compiler_specific.h" |
| 31 #include "base/files/scoped_file.h" | 31 #include "base/files/scoped_file.h" |
| 32 #include "base/logging.h" | 32 #include "base/logging.h" |
| 33 #include "base/posix/eintr_wrapper.h" | 33 #include "base/posix/eintr_wrapper.h" |
| 34 #include "base/time/time.h" | |
| 35 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h" | 34 #include "sandbox/linux/seccomp-bpf-helpers/sigsys_handlers.h" |
| 36 #include "sandbox/linux/seccomp-bpf/bpf_tests.h" | 35 #include "sandbox/linux/seccomp-bpf/bpf_tests.h" |
| 37 #include "sandbox/linux/services/linux_syscalls.h" | |
| 38 #include "third_party/lss/linux_syscall_support.h" // for MAKE_PROCESS_CPUCLOCK | 36 #include "third_party/lss/linux_syscall_support.h" // for MAKE_PROCESS_CPUCLOCK |
| 39 | 37 |
| 40 namespace { | 38 namespace { |
| 41 | 39 |
| 42 void DoPipe(base::ScopedFD* fds) { | 40 void DoPipe(base::ScopedFD* fds) { |
| 43 int tmp_fds[2]; | 41 int tmp_fds[2]; |
| 44 BPF_ASSERT_EQ(0, pipe(tmp_fds)); | 42 BPF_ASSERT_EQ(0, pipe(tmp_fds)); |
| 45 fds[0].reset(tmp_fds[0]); | 43 fds[0].reset(tmp_fds[0]); |
| 46 fds[1].reset(tmp_fds[1]); | 44 fds[1].reset(tmp_fds[1]); |
| 47 } | 45 } |
| (...skipping 355 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 403 BPF_ASSERT_LE(0, ts.tv_nsec); | 401 BPF_ASSERT_LE(0, ts.tv_nsec); |
| 404 } | 402 } |
| 405 | 403 |
| 406 BPF_TEST_C(NaClNonSfiSandboxTest, | 404 BPF_TEST_C(NaClNonSfiSandboxTest, |
| 407 clock_gettime_allowed, | 405 clock_gettime_allowed, |
| 408 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { | 406 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { |
| 409 CheckClock(CLOCK_MONOTONIC); | 407 CheckClock(CLOCK_MONOTONIC); |
| 410 CheckClock(CLOCK_PROCESS_CPUTIME_ID); | 408 CheckClock(CLOCK_PROCESS_CPUTIME_ID); |
| 411 CheckClock(CLOCK_REALTIME); | 409 CheckClock(CLOCK_REALTIME); |
| 412 CheckClock(CLOCK_THREAD_CPUTIME_ID); | 410 CheckClock(CLOCK_THREAD_CPUTIME_ID); |
| 413 #if defined(OS_CHROMEOS) | |
| 414 CheckClock(base::TimeTicks::kClockSystemTrace); | |
| 415 #endif | |
| 416 } | 411 } |
| 417 | 412 |
| 418 BPF_DEATH_TEST_C(NaClNonSfiSandboxTest, | 413 BPF_DEATH_TEST_C(NaClNonSfiSandboxTest, |
| 419 clock_gettime_crash_monotonic_raw, | 414 clock_gettime_crash_monotonic_raw, |
| 420 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), | 415 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), |
| 421 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { | 416 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { |
| 422 struct timespec ts; | 417 struct timespec ts; |
| 423 clock_gettime(CLOCK_MONOTONIC_RAW, &ts); | 418 clock_gettime(CLOCK_MONOTONIC_RAW, &ts); |
| 424 } | 419 } |
| 425 | 420 |
| 426 #if !defined(OS_CHROMEOS) | |
| 427 BPF_DEATH_TEST_C(NaClNonSfiSandboxTest, | |
| 428 clock_gettime_crash_system_trace, | |
| 429 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), | |
| 430 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { | |
| 431 struct timespec ts; | |
| 432 clock_gettime(base::TimeTicks::kClockSystemTrace, &ts); | |
| 433 } | |
| 434 #endif | |
| 435 | |
| 436 BPF_DEATH_TEST_C(NaClNonSfiSandboxTest, | 421 BPF_DEATH_TEST_C(NaClNonSfiSandboxTest, |
| 437 clock_gettime_crash_cpu_clock, | 422 clock_gettime_crash_cpu_clock, |
| 438 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), | 423 DEATH_MESSAGE(sandbox::GetErrorMessageContentForTests()), |
| 439 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { | 424 nacl::nonsfi::NaClNonSfiBPFSandboxPolicy) { |
| 440 // We can't use clock_getcpuclockid() because it's not implemented in newlib, | 425 // We can't use clock_getcpuclockid() because it's not implemented in newlib, |
| 441 // and it might not work inside the sandbox anyway. | 426 // and it might not work inside the sandbox anyway. |
| 442 const pid_t kInitPID = 1; | 427 const pid_t kInitPID = 1; |
| 443 const clockid_t kInitCPUClockID = | 428 const clockid_t kInitCPUClockID = |
| 444 MAKE_PROCESS_CPUCLOCK(kInitPID, CPUCLOCK_SCHED); | 429 MAKE_PROCESS_CPUCLOCK(kInitPID, CPUCLOCK_SCHED); |
| 445 | 430 |
| (...skipping 27 matching lines...) Expand all Loading... |
| 473 RESTRICT_SYSCALL_EPERM_TEST(open); | 458 RESTRICT_SYSCALL_EPERM_TEST(open); |
| 474 RESTRICT_SYSCALL_EPERM_TEST(ptrace); | 459 RESTRICT_SYSCALL_EPERM_TEST(ptrace); |
| 475 RESTRICT_SYSCALL_EPERM_TEST(set_robust_list); | 460 RESTRICT_SYSCALL_EPERM_TEST(set_robust_list); |
| 476 #if defined(__i386__) || defined(__x86_64__) | 461 #if defined(__i386__) || defined(__x86_64__) |
| 477 RESTRICT_SYSCALL_EPERM_TEST(time); | 462 RESTRICT_SYSCALL_EPERM_TEST(time); |
| 478 #endif | 463 #endif |
| 479 | 464 |
| 480 } // namespace | 465 } // namespace |
| 481 | 466 |
| 482 #endif // !ADDRESS_SANITIZER && !THREAD_SANITIZER | 467 #endif // !ADDRESS_SANITIZER && !THREAD_SANITIZER |
| OLD | NEW |