diff options
author | 2021-03-27 09:06:39 -0700 | |
---|---|---|
committer | 2022-01-31 22:05:59 +0100 | |
commit | 557a40e0e3f98d2a62a9a525f46e79489c0172ff (patch) | |
tree | 2ec0fe68d346da0484fbf0f6ea231cae121d2ac5 | |
parent | test-strnlen.c: Initialize wchar_t string with wmemset [BZ #27655] (diff) | |
download | glibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.tar.gz glibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.tar.bz2 glibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.zip |
test-strnlen.c: Check that strnlen won't go beyond the maximum length
Place strings ending at page boundary without the null byte. If an
implementation goes beyond EXP_LEN, it will trigger the segfault.
(cherry picked from commit cb882b21b63606aabd6e55afe23b42434d95f2ef)
(cherry picked from commit a744a0a3fec76f55d896b2652e5195780a2e1242)
-rw-r--r-- | string/test-strnlen.c | 30 |
1 files changed, 30 insertions, 0 deletions
diff --git a/string/test-strnlen.c b/string/test-strnlen.c index 0293acbc71..d70faa26ab 100644 --- a/string/test-strnlen.c +++ b/string/test-strnlen.c @@ -198,6 +198,35 @@ do_page_tests (void) } } +/* Tests meant to unveil fail on implementations that access bytes + beyond the maxium length. */ + +static void +do_page_2_tests (void) +{ + size_t i, exp_len, offset; + size_t last_offset = page_size / sizeof (CHAR); + + CHAR *s = (CHAR *) buf2; + MEMSET (s, 65, last_offset); + + /* Place short strings ending at page boundary without the null + byte. */ + offset = last_offset; + for (i = 0; i < 128; i++) + { + /* Decrease offset to stress several sizes and alignments. */ + offset--; + exp_len = last_offset - offset; + FOR_EACH_IMPL (impl, 0) + { + /* If an implementation goes beyond EXP_LEN, it will trigger + the segfault. */ + do_one_test (impl, (CHAR *) (s + offset), exp_len, exp_len); + } + } +} + int test_main (void) { @@ -244,6 +273,7 @@ test_main (void) do_random_tests (); do_page_tests (); + do_page_2_tests (); return ret; } |