| xf.li | bdd93d5 | 2023-05-12 07:10:14 -0700 | [diff] [blame] | 1 | /* Copyright (C) 2014-2016 Free Software Foundation, Inc. | 
 | 2 |    This file is part of the GNU C Library. | 
 | 3 |  | 
 | 4 |    The GNU C Library is free software; you can redistribute it and/or | 
 | 5 |    modify it under the terms of the GNU Lesser General Public | 
 | 6 |    License as published by the Free Software Foundation; either | 
 | 7 |    version 2.1 of the License, or (at your option) any later version. | 
 | 8 |  | 
 | 9 |    The GNU C Library is distributed in the hope that it will be useful, | 
 | 10 |    but WITHOUT ANY WARRANTY; without even the implied warranty of | 
 | 11 |    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU | 
 | 12 |    Lesser General Public License for more details. | 
 | 13 |  | 
 | 14 |    You should have received a copy of the GNU Lesser General Public | 
 | 15 |    License along with the GNU C Library; if not, see | 
 | 16 |    <http://www.gnu.org/licenses/>.  */ | 
 | 17 |  | 
 | 18 | #include <errno.h> | 
 | 19 | #include <pthread.h> | 
 | 20 | #include <signal.h> | 
 | 21 | #include <stdbool.h> | 
 | 22 | #include <stdio.h> | 
 | 23 | #include <sys/syscall.h> | 
 | 24 | #include <unistd.h> | 
 | 25 |  | 
 | 26 | /* Check that a partial setuid failure aborts the process. */ | 
 | 27 |  | 
 | 28 | static pthread_mutex_t mutex = PTHREAD_MUTEX_INITIALIZER; | 
 | 29 | static pthread_cond_t cond_send; | 
 | 30 | static void (*func_sent) (void); | 
 | 31 | static pthread_cond_t cond_recv; | 
 | 32 |  | 
 | 33 | #define FAIL(fmt, ...) \ | 
 | 34 |   do { printf ("FAIL: " fmt "\n", __VA_ARGS__); _exit (1); } while (0) | 
 | 35 |  | 
 | 36 | static void * | 
 | 37 | thread_func (void *ctx __attribute__ ((unused))) | 
 | 38 | { | 
 | 39 |   int ret = pthread_mutex_lock (&mutex); | 
 | 40 |   if (ret != 0) | 
 | 41 |     FAIL ("pthread_mutex_lock (thread): %d", ret); | 
 | 42 |  | 
 | 43 |   while (true) | 
 | 44 |     { | 
 | 45 |       if (func_sent != NULL) | 
 | 46 | 	{ | 
 | 47 | 	  void (*func) (void) = func_sent; | 
 | 48 | 	  ret = pthread_mutex_unlock (&mutex); | 
 | 49 | 	  if (ret != 0) | 
 | 50 | 	    FAIL ("pthread_mutex_unlock (thread): %d", ret); | 
 | 51 | 	  func (); | 
 | 52 | 	  ret = pthread_mutex_lock (&mutex); | 
 | 53 | 	  if (ret != 0) | 
 | 54 | 	    FAIL ("pthread_mutex_lock (thread): %d", ret); | 
 | 55 | 	  func_sent = NULL; | 
 | 56 | 	  ret = pthread_cond_signal (&cond_recv); | 
 | 57 | 	  if (ret != 0) | 
 | 58 | 	    FAIL ("pthread_cond_signal (recv): %d", ret); | 
 | 59 | 	} | 
 | 60 |       ret = pthread_cond_wait (&cond_send, &mutex); | 
 | 61 |       if (ret != 0) | 
 | 62 | 	FAIL ("pthread_cond_wait (send): %d", ret); | 
 | 63 |     } | 
 | 64 |   return NULL; | 
 | 65 | } | 
 | 66 |  | 
 | 67 | static void | 
 | 68 | run_on_thread (void (*func) (void)) | 
 | 69 | { | 
 | 70 |   int ret = pthread_mutex_lock (&mutex); | 
 | 71 |   if (ret != 0) | 
 | 72 |     FAIL ("pthread_mutex_lock (%s): %d", __func__, ret); | 
 | 73 |   func_sent = func; | 
 | 74 |   ret = pthread_mutex_unlock (&mutex); | 
 | 75 |   if (ret != 0) | 
 | 76 |     FAIL ("pthread_mutex_unlock (%s): %d", __func__, ret); | 
 | 77 |  | 
 | 78 |   ret = pthread_cond_signal (&cond_send); | 
 | 79 |   if (ret != 0) | 
 | 80 |     FAIL ("pthread_mutex_lock (%s): %d", __func__, ret); | 
 | 81 |  | 
 | 82 |   ret = pthread_mutex_lock (&mutex); | 
 | 83 |   if (ret != 0) | 
 | 84 |     FAIL ("pthread_mutex_lock (%s): %d", __func__, ret); | 
 | 85 |  | 
 | 86 |   while (func_sent != NULL) | 
 | 87 |     { | 
 | 88 |       ret = pthread_cond_wait (&cond_recv, &mutex); | 
 | 89 |       if (ret != 0) | 
 | 90 | 	FAIL ("pthread_mutex_wait (%s): %d", __func__, ret); | 
 | 91 |     } | 
 | 92 |   ret = pthread_mutex_unlock (&mutex); | 
 | 93 |   if (ret != 0) | 
 | 94 |     FAIL ("pthread_mutex_unlock (%s): %d", __func__, ret); | 
 | 95 | } | 
 | 96 |  | 
 | 97 | static void | 
 | 98 | change_thread_ids (void) | 
 | 99 | { | 
 | 100 |   long ret = syscall (__NR_setresuid, 2001, 2002, 2003); | 
 | 101 |   if (ret != 0) | 
 | 102 |     FAIL ("setresuid (2001, 2002, 2003): %ld", ret); | 
 | 103 | } | 
 | 104 |  | 
 | 105 | static uid_t ruid, euid, suid; | 
 | 106 |  | 
 | 107 | static void | 
 | 108 | get_thread_ids (void) | 
 | 109 | { | 
 | 110 |   if (getresuid (&ruid, &euid, &suid) < 0) | 
 | 111 |     FAIL ("getresuid: %m (%d)", errno); | 
 | 112 | } | 
 | 113 |  | 
 | 114 | static void | 
 | 115 | abort_expected (int signal __attribute__ ((unused))) | 
 | 116 | { | 
 | 117 |   _exit (0); | 
 | 118 | } | 
 | 119 |  | 
 | 120 | static int | 
 | 121 | do_test (void) | 
 | 122 | { | 
 | 123 |   pthread_t thread; | 
 | 124 |   int ret = pthread_create (&thread, NULL, thread_func, NULL); | 
 | 125 |   if (ret != 0) | 
 | 126 |     FAIL ("pthread_create: %d", ret); | 
 | 127 |  | 
 | 128 |   run_on_thread (change_thread_ids); | 
 | 129 |  | 
 | 130 |   signal (SIGABRT, &abort_expected); | 
 | 131 |   /* This should abort the process.  */ | 
 | 132 |   if (setresuid (1001, 1002, 1003) < 0) | 
 | 133 |     FAIL ("setresuid: %m (%d)", errno); | 
 | 134 |   signal (SIGABRT, SIG_DFL); | 
 | 135 |  | 
 | 136 |   /* If we get here, check that the kernel did the right thing. */ | 
 | 137 |   run_on_thread (get_thread_ids); | 
 | 138 |   if (ruid != 1001 || euid != 1002 || suid != 1003) | 
 | 139 |     FAIL ("unexpected UIDs after setuid: %ld, %ld, %ld", | 
 | 140 | 	  (long) ruid, (long) euid, (long) suid); | 
 | 141 |   return 0; | 
 | 142 | } | 
 | 143 |  | 
 | 144 | #define TEST_FUNCTION do_test () | 
 | 145 | #include "../test-skeleton.c" |