1 #! /usr/bin/ksh
2 #
3 #
4 # This file and its contents are supplied under the terms of the
5 # Common Development and Distribution License ("CDDL"), version 1.0.
6 # You may only use this file in accordance with the terms of version
7 # 1.0 of the CDDL.
8 #
9 # A full copy of the text of the CDDL should have accompanied this
10 # source. A copy of the CDDL is also available via the Internet at
11 # http://www.illumos.org/license/CDDL.
12 #
13
14 # Copyright 2015, Richard Lowe.
15 # Copyright 2019 Joyent, Inc.
16
17 tmpdir=/tmp/test.$$
18 mkdir $tmpdir
19 cd $tmpdir
20
21 cleanup() {
22 cd /
23 rm -fr $tmpdir
24 }
25
26 trap 'cleanup' EXIT
27
28 cat > tester.c <<EOF
29 #include <stdio.h>
30 #include <unistd.h>
31
32 int
33 main(int argc, char **argv)
34 {
35 sleep(10000);
36 return (0);
37 }
38 EOF
39
40 gcc -o tester-aslr tester.c -Wl,-z,aslr=enabled
41 gcc -o tester-noaslr tester.c -Wl,-z,aslr=disabled
42
43 # This is the easiest way I've found to get many many DTs, but it's gross
44 gcc -o many-dts-aslr tester.c -Wl,-z,aslr=enabled $(for elt in /usr/lib/lib*.so; do echo -Wl,-N,$(basename $elt); done)
45 gcc -o many-dts-noaslr tester.c -Wl,-z,aslr=disabled $(for elt in /usr/lib/lib*.so; do echo -Wl,-N,$(basename $elt); done)
46
47 check() {
48 bin=$1
49 state=$2
50 set=$3
51 ret=0
52
53 $bin &
54 pid=$!
55 sleep 1
56 psecflags $pid | grep -q "${set}:.*aslr"
57 (( $? != $state )) && ret=1
58 kill -9 $pid
59 return $ret
60 }
61
62 fail() {
63 echo $@
64 exit 1
65 }
66
67 psecflags -s none $$
68 check ./tester-aslr 0 E || fail "DT_SUNW_ASLR 1 failed"
69 check ./many-dts-aslr 0 E || fail "DT_SUNW_ASLR 1 with many DTs failed"
70 check ./tester-aslr 1 I || fail "DT_SUNW_ASLR 1 incorrectly set the inheritable flag"
71
72 psecflags -s aslr $$
73 check ./tester-noaslr 1 E || fail "DT_SUNW_ASLR 0 failed"
74 check ./many-dts-noaslr 1 E || fail "DT_SUNW_ASLR 0 with many DTs failed"
75