// SPDX-License-Identifier: GPL-2.0 // Copyright (C) 2020 ARM Limited #define _GNU_SOURCE #include #include #include #include #include #include #include #include #include #include #include "kselftest.h" #include "mte_common_util.h" #include "mte_def.h" #define RUNS (MT_TAG_COUNT) #define UNDERFLOW MT_GRANULE_SIZE #define OVERFLOW MT_GRANULE_SIZE #define TAG_CHECK_ON 0 #define TAG_CHECK_OFF 1 static size_t page_size; static int sizes[] = { 1, 537, 989, 1269, MT_GRANULE_SIZE - 1, MT_GRANULE_SIZE, /* page size - 1*/ 0, /* page_size */ 0, /* page size + 1 */ 0 }; static int check_mte_memory(char *ptr, int size, int mode, int tag_check) { mte_initialize_current_context(mode, (uintptr_t)ptr, size); memset(ptr, '1', size); mte_wait_after_trig(); if (cur_mte_cxt.fault_valid == true) return KSFT_FAIL; mte_initialize_current_context(mode, (uintptr_t)ptr, -UNDERFLOW); memset(ptr - UNDERFLOW, '2', UNDERFLOW); mte_wait_after_trig(); if (cur_mte_cxt.fault_valid == false && tag_check == TAG_CHECK_ON) return KSFT_FAIL; if (cur_mte_cxt.fault_valid == true && tag_check == TAG_CHECK_OFF) return KSFT_FAIL; mte_initialize_current_context(mode, (uintptr_t)ptr, size + OVERFLOW); memset(ptr + size, '3', OVERFLOW); mte_wait_after_trig(); if (cur_mte_cxt.fault_valid == false && tag_check == TAG_CHECK_ON) return KSFT_FAIL; if (cur_mte_cxt.fault_valid == true && tag_check == TAG_CHECK_OFF) return KSFT_FAIL; return KSFT_PASS; } static int check_anonymous_memory_mapping(int mem_type, int mode, int mapping, int tag_check) { char *ptr, *map_ptr; int run, result, map_size; int item = ARRAY_SIZE(sizes); mte_switch_mode(mode, MTE_ALLOW_NON_ZERO_TAG); for (run = 0; run < item; run++) { map_size = sizes[run] + OVERFLOW + UNDERFLOW; map_ptr = (char *)mte_allocate_memory(map_size, mem_type, mapping, false); if (check_allocated_memory(map_ptr, map_size, mem_type, false) != KSFT_PASS) return KSFT_FAIL; ptr = map_ptr + UNDERFLOW; mte_initialize_current_context(mode, (uintptr_t)ptr, sizes[run]); /* Only mte enabled memory will allow tag insertion */ ptr = mte_insert_tags((void *)ptr, sizes[run]); if (!ptr || cur_mte_cxt.fault_valid == true) { ksft_print_msg("FAIL: Insert tags on anonymous mmap memory\n"); munmap((void *)map_ptr, map_size); return KSFT_FAIL; } result = check_mte_memory(ptr, sizes[run], mode, tag_check); mte_clear_tags((void *)ptr, sizes[run]); mte_free_memory((void *)map_ptr, map_size, mem_type, false); if (result == KSFT_FAIL) return KSFT_FAIL; } return KSFT_PASS; } static int check_file_memory_mapping(int mem_type, int mode, int mapping, int tag_check) { char *ptr, *map_ptr; int run, fd, map_size; int total = ARRAY_SIZE(sizes); int result = KSFT_PASS; mte_switch_mode(mode, MTE_ALLOW_NON_ZERO_TAG); for (run = 0; run < total; run++) { fd = create_temp_file(); if (fd == -1) return KSFT_FAIL; map_size = sizes[run] + UNDERFLOW + OVERFLOW; map_ptr = (char *)mte_allocate_file_memory(map_size, mem_type, mapping, false, fd); if (check_allocated_memory(map_ptr, map_size, mem_type, false) != KSFT_PASS) { close(fd); return KSFT_FAIL; } ptr = map_ptr + UNDERFLOW; mte_initialize_current_context(mode, (uintptr_t)ptr, sizes[run]); /* Only mte enabled memory will allow tag insertion */ ptr = mte_insert_tags((void *)ptr, sizes[run]); if (!ptr || cur_mte_cxt.fault_valid == true) { ksft_print_msg("FAIL: Insert tags on file based memory\n"); munmap((void *)map_ptr, map_size); close(fd); return KSFT_FAIL; } result = check_mte_memory(ptr, sizes[run], mode, tag_check); mte_clear_tags((void *)ptr, sizes[run]); munmap((void *)map_ptr, map_size); close(fd); if (result == KSFT_FAIL) break; } return result; } static int check_clear_prot_mte_flag(int mem_type, int mode, int mapping) { char *ptr, *map_ptr; int run, prot_flag, result, fd, map_size; int total = ARRAY_SIZE(sizes); prot_flag = PROT_READ | PROT_WRITE; mte_switch_mode(mode, MTE_ALLOW_NON_ZERO_TAG); for (run = 0; run < total; run++) { map_size = sizes[run] + OVERFLOW + UNDERFLOW; ptr = (char *)mte_allocate_memory_tag_range(sizes[run], mem_type, mapping, UNDERFLOW, OVERFLOW); if (check_allocated_memory_range(ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW) != KSFT_PASS) return KSFT_FAIL; map_ptr = ptr - UNDERFLOW; /* Try to clear PROT_MTE property and verify it by tag checking */ if (mprotect(map_ptr, map_size, prot_flag)) { mte_free_memory_tag_range((void *)ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW); ksft_print_msg("FAIL: mprotect not ignoring clear PROT_MTE property\n"); return KSFT_FAIL; } result = check_mte_memory(ptr, sizes[run], mode, TAG_CHECK_ON); mte_free_memory_tag_range((void *)ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW); if (result != KSFT_PASS) return KSFT_FAIL; fd = create_temp_file(); if (fd == -1) return KSFT_FAIL; ptr = (char *)mte_allocate_file_memory_tag_range(sizes[run], mem_type, mapping, UNDERFLOW, OVERFLOW, fd); if (check_allocated_memory_range(ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW) != KSFT_PASS) { close(fd); return KSFT_FAIL; } map_ptr = ptr - UNDERFLOW; /* Try to clear PROT_MTE property and verify it by tag checking */ if (mprotect(map_ptr, map_size, prot_flag)) { ksft_print_msg("FAIL: mprotect not ignoring clear PROT_MTE property\n"); mte_free_memory_tag_range((void *)ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW); close(fd); return KSFT_FAIL; } result = check_mte_memory(ptr, sizes[run], mode, TAG_CHECK_ON); mte_free_memory_tag_range((void *)ptr, sizes[run], mem_type, UNDERFLOW, OVERFLOW); close(fd); if (result != KSFT_PASS) return KSFT_FAIL; } return KSFT_PASS; } int main(int argc, char *argv[]) { int err; int item = ARRAY_SIZE(sizes); err = mte_default_setup(); if (err) return err; page_size = getpagesize(); if (!page_size) { ksft_print_msg("ERR: Unable to get page size\n"); return KSFT_FAIL; } sizes[item - 3] = page_size - 1; sizes[item - 2] = page_size; sizes[item - 1] = page_size + 1; /* Register signal handlers */ mte_register_signal(SIGBUS, mte_default_handler); mte_register_signal(SIGSEGV, mte_default_handler); /* Set test plan */ ksft_set_plan(22); mte_enable_pstate_tco(); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_OFF), "Check anonymous memory with private mapping, sync error mode, mmap memory and tag check off\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_OFF), "Check file memory with private mapping, sync error mode, mmap/mprotect memory and tag check off\n"); mte_disable_pstate_tco(); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_NONE_ERR, MAP_PRIVATE, TAG_CHECK_OFF), "Check anonymous memory with private mapping, no error mode, mmap memory and tag check off\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_NONE_ERR, MAP_PRIVATE, TAG_CHECK_OFF), "Check file memory with private mapping, no error mode, mmap/mprotect memory and tag check off\n"); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check anonymous memory with private mapping, sync error mode, mmap memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MPROTECT, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check anonymous memory with private mapping, sync error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_SYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check anonymous memory with shared mapping, sync error mode, mmap memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MPROTECT, MTE_SYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check anonymous memory with shared mapping, sync error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_ASYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check anonymous memory with private mapping, async error mode, mmap memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MPROTECT, MTE_ASYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check anonymous memory with private mapping, async error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MMAP, MTE_ASYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check anonymous memory with shared mapping, async error mode, mmap memory and tag check on\n"); evaluate_test(check_anonymous_memory_mapping(USE_MPROTECT, MTE_ASYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check anonymous memory with shared mapping, async error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MMAP, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check file memory with private mapping, sync error mode, mmap memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_SYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check file memory with private mapping, sync error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MMAP, MTE_SYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check file memory with shared mapping, sync error mode, mmap memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_SYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check file memory with shared mapping, sync error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MMAP, MTE_ASYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check file memory with private mapping, async error mode, mmap memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_ASYNC_ERR, MAP_PRIVATE, TAG_CHECK_ON), "Check file memory with private mapping, async error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MMAP, MTE_ASYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check file memory with shared mapping, async error mode, mmap memory and tag check on\n"); evaluate_test(check_file_memory_mapping(USE_MPROTECT, MTE_ASYNC_ERR, MAP_SHARED, TAG_CHECK_ON), "Check file memory with shared mapping, async error mode, mmap/mprotect memory and tag check on\n"); evaluate_test(check_clear_prot_mte_flag(USE_MMAP, MTE_SYNC_ERR, MAP_PRIVATE), "Check clear PROT_MTE flags with private mapping, sync error mode and mmap memory\n"); evaluate_test(check_clear_prot_mte_flag(USE_MPROTECT, MTE_SYNC_ERR, MAP_PRIVATE), "Check clear PROT_MTE flags with private mapping and sync error mode and mmap/mprotect memory\n"); mte_restore_setup(); ksft_print_cnts(); return ksft_get_fail_cnt() == 0 ? KSFT_PASS : KSFT_FAIL; }