1 #! /usr/bin/ksh 2 # 3 # 4 # This file and its contents are supplied under the terms of the 5 # Common Development and Distribution License ("CDDL"), version 1.0. 6 # You may only use this file in accordance with the terms of version 7 # 1.0 of the CDDL. 8 # 9 # A full copy of the text of the CDDL should have accompanied this 10 # source. A copy of the CDDL is also available via the Internet at 11 # http://www.illumos.org/license/CDDL. 12 # 13 14 # Copyright 2015, Richard Lowe. 15 16 tmpdir=/tmp/test.$$ 17 mkdir $tmpdir 18 cd $tmpdir 19 20 cleanup() { 21 cd / 22 rm -fr $tmpdir 23 } 24 25 trap 'cleanup' EXIT 26 27 cat > tester.c <<EOF 28 #include <stdio.h> 29 #include <unistd.h> 30 31 int 32 main(int argc, char **argv) 33 { 34 sleep(10000); 35 return (0); 36 } 37 EOF 38 39 gcc -o tester-aslr tester.c -Wl,-z,aslr=enabled 40 gcc -o tester-noaslr tester.c -Wl,-z,aslr=disabled 41 42 # This is the easiest way I've found to get many many DTs, but it's gross 43 gcc -o many-dts-aslr tester.c -Wl,-z,aslr=enabled $(for elt in /usr/lib/lib*.so; do echo -Wl,-N,$(basename $elt); done) 44 gcc -o many-dts-noaslr tester.c -Wl,-z,aslr=disabled $(for elt in /usr/lib/lib*.so; do echo -Wl,-N,$(basename $elt); done) 45 46 check() { 47 bin=$1 48 state=$2 49 set=$3 50 ret=0 51 52 $bin & 53 pid=$! 54 psecflags $pid | grep -q "${set}:.*aslr" 55 (( $? != $state )) && ret=1 56 kill -9 $pid 57 return $ret 58 } 59 60 fail() { 61 echo $@ 62 exit 1 63 } 64 65 psecflags -s none $$ 66 check ./tester-aslr 0 E || fail "DT_SUNW_ASLR 1 failed" 67 check ./many-dts-aslr 0 E || fail "DT_SUNW_ASLR 1 with many DTs failed" 68 check ./tester-aslr 1 I || fail "DT_SUNW_ASLR 1 incorrectly set the inheritable flag" 69 70 psecflags -s aslr $$ 71 check ./tester-noaslr 1 E || fail "DT_SUNW_ASLR 0 failed" 72 check ./many-dts-noaslr 1 E || fail "DT_SUNW_ASLR 0 with many DTs failed" 73