]> sourceware.org Git - glibc.git/blob - io/tst-unlinkat.c
syslog: Fix integer overflow in __vsyslog_internal (CVE-2023-6780)
[glibc.git] / io / tst-unlinkat.c
1 #include <dirent.h>
2 #include <fcntl.h>
3 #include <stdbool.h>
4 #include <stdio.h>
5 #include <stdlib.h>
6 #include <string.h>
7 #include <unistd.h>
8
9 #include <support/xunistd.h>
10
11 static void prepare (void);
12 #define PREPARE(argc, argv) prepare ()
13
14 static int do_test (void);
15 #define TEST_FUNCTION do_test ()
16
17 #include "../test-skeleton.c"
18
19 static int dir_fd;
20
21 static void
22 prepare (void)
23 {
24 size_t test_dir_len = strlen (test_dir);
25 static const char dir_name[] = "/tst-unlinkat.XXXXXX";
26
27 size_t dirbuflen = test_dir_len + sizeof (dir_name);
28 char *dirbuf = malloc (dirbuflen);
29 if (dirbuf == NULL)
30 {
31 puts ("out of memory");
32 exit (1);
33 }
34
35 snprintf (dirbuf, dirbuflen, "%s%s", test_dir, dir_name);
36 if (mkdtemp (dirbuf) == NULL)
37 {
38 puts ("cannot create temporary directory");
39 exit (1);
40 }
41
42 add_temp_file (dirbuf);
43
44 dir_fd = open (dirbuf, O_RDONLY | O_DIRECTORY);
45 if (dir_fd == -1)
46 {
47 puts ("cannot open directory");
48 exit (1);
49 }
50 }
51
52
53 static int
54 do_test (void)
55 {
56 /* fdopendir takes over the descriptor, make a copy. */
57 int dupfd = dup (dir_fd);
58 if (dupfd == -1)
59 {
60 puts ("dup failed");
61 return 1;
62 }
63 if (lseek (dupfd, 0, SEEK_SET) != 0)
64 {
65 puts ("1st lseek failed");
66 return 1;
67 }
68
69 /* The directory should be empty safe the . and .. files. */
70 DIR *dir = fdopendir (dupfd);
71 if (dir == NULL)
72 {
73 puts ("fdopendir failed");
74 return 1;
75 }
76 struct dirent64 *d;
77 while ((d = readdir64 (dir)) != NULL)
78 if (strcmp (d->d_name, ".") != 0 && strcmp (d->d_name, "..") != 0)
79 {
80 printf ("temp directory contains file \"%s\"\n", d->d_name);
81 return 1;
82 }
83 closedir (dir);
84
85 /* Try to create a file. */
86 int fd = openat (dir_fd, "some-file", O_CREAT|O_RDWR|O_EXCL, 0666);
87 if (fd == -1)
88 {
89 if (errno == ENOSYS)
90 {
91 puts ("*at functions not supported");
92 return 0;
93 }
94
95 puts ("file creation failed");
96 return 1;
97 }
98 xwrite (fd, "hello", 5);
99 close (fd);
100 puts ("file created");
101
102 /* fdopendir takes over the descriptor, make a copy. */
103 dupfd = dup (dir_fd);
104 if (dupfd == -1)
105 {
106 puts ("2nd dup failed");
107 return 1;
108 }
109 if (lseek (dupfd, 0, SEEK_SET) != 0)
110 {
111 puts ("2nd lseek failed");
112 return 1;
113 }
114
115 /* The directory should be empty safe the . and .. files. */
116 dir = fdopendir (dupfd);
117 if (dir == NULL)
118 {
119 puts ("2nd fdopendir failed");
120 return 1;
121 }
122 bool seen_file = false;
123 while ((d = readdir64 (dir)) != NULL)
124 if (strcmp (d->d_name, ".") != 0 && strcmp (d->d_name, "..") != 0)
125 {
126 if (strcmp (d->d_name, "some-file") != 0)
127 {
128 printf ("temp directory contains file \"%s\"\n", d->d_name);
129 return 1;
130 }
131
132 seen_file = true;
133 }
134 closedir (dir);
135
136 if (!seen_file)
137 {
138 puts ("file not created in correct directory");
139 return 1;
140 }
141
142 /* Remove the file now. */
143 if (unlinkat (dir_fd, "some-file", 0) != 0)
144 {
145 puts ("unlinkat failed");
146 return 1;
147 }
148
149 /* We won't need dir_fd anymore after this, so use it. */
150 if (lseek (dir_fd, 0, SEEK_SET) != 0)
151 {
152 puts ("3rd lseek failed");
153 return 1;
154 }
155
156 /* The directory should be empty safe the . and .. files. */
157 dir = fdopendir (dir_fd);
158 if (dir == NULL)
159 {
160 puts ("3rd fdopendir failed");
161 return 1;
162 }
163 while ((d = readdir64 (dir)) != NULL)
164 if (strcmp (d->d_name, ".") != 0 && strcmp (d->d_name, "..") != 0)
165 {
166 if (strcmp (d->d_name, "some-file") == 0)
167 {
168 puts ("some-file not removed");
169 return 1;
170 }
171 else
172 {
173 printf ("temp directory contains file \"%s\"\n", d->d_name);
174 return 1;
175 }
176 }
177 closedir (dir);
178
179 return 0;
180 }
This page took 0.046276 seconds and 5 git commands to generate.