Commit fa4a3f86 authored Apr 07, 2023 by Kees Cook

fortify: Add KUnit tests for runtime overflows



With fortify overflows able to be redirected, we can use KUnit to
exercise the overflow conditions. Add tests for every API covered by
CONFIG_FORTIFY_SOURCE, except for memset() and memcpy(), which are
special-cased for now.

Disable warnings in the Makefile since we're explicitly testing
known-bad string handling code patterns.

Note that this makes the LKDTM FORTIFY_STR* tests obsolete, but those
can be removed separately.

Signed-off-by: Kees Cook <keescook@chromium.org>

parent 4ce615e7

lib/Makefile

+2 −0

Original line number	Diff line number	Diff line
		@@ -402,6 +402,8 @@ obj-$(CONFIG_OVERFLOW_KUNIT_TEST) += overflow_kunit.o
		CFLAGS_stackinit_kunit.o += $(call cc-disable-warning, switch-unreachable)
		obj-$(CONFIG_STACKINIT_KUNIT_TEST) += stackinit_kunit.o
		CFLAGS_fortify_kunit.o += $(call cc-disable-warning, unsequenced)
		CFLAGS_fortify_kunit.o += $(call cc-disable-warning, stringop-overread)
		CFLAGS_fortify_kunit.o += $(call cc-disable-warning, stringop-truncation)
		CFLAGS_fortify_kunit.o += $(DISABLE_STRUCTLEAK_PLUGIN)
		obj-$(CONFIG_FORTIFY_KUNIT_TEST) += fortify_kunit.o
		obj-$(CONFIG_STRCAT_KUNIT_TEST) += strcat_kunit.o

lib/fortify_kunit.c

+605 −2

File changed.

Preview size limit exceeded, changes collapsed.