aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorH.J. Lu <hjl.tools@gmail.com>2021-03-27 09:06:39 -0700
committerAndreas K. Hüttel <dilfridge@gentoo.org>2022-01-31 22:05:59 +0100
commit557a40e0e3f98d2a62a9a525f46e79489c0172ff (patch)
tree2ec0fe68d346da0484fbf0f6ea231cae121d2ac5
parenttest-strnlen.c: Initialize wchar_t string with wmemset [BZ #27655] (diff)
downloadglibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.tar.gz
glibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.tar.bz2
glibc-557a40e0e3f98d2a62a9a525f46e79489c0172ff.zip
test-strnlen.c: Check that strnlen won't go beyond the maximum length
Place strings ending at page boundary without the null byte. If an implementation goes beyond EXP_LEN, it will trigger the segfault. (cherry picked from commit cb882b21b63606aabd6e55afe23b42434d95f2ef) (cherry picked from commit a744a0a3fec76f55d896b2652e5195780a2e1242)
-rw-r--r--string/test-strnlen.c30
1 files changed, 30 insertions, 0 deletions
diff --git a/string/test-strnlen.c b/string/test-strnlen.c
index 0293acbc71..d70faa26ab 100644
--- a/string/test-strnlen.c
+++ b/string/test-strnlen.c
@@ -198,6 +198,35 @@ do_page_tests (void)
}
}
+/* Tests meant to unveil fail on implementations that access bytes
+ beyond the maxium length. */
+
+static void
+do_page_2_tests (void)
+{
+ size_t i, exp_len, offset;
+ size_t last_offset = page_size / sizeof (CHAR);
+
+ CHAR *s = (CHAR *) buf2;
+ MEMSET (s, 65, last_offset);
+
+ /* Place short strings ending at page boundary without the null
+ byte. */
+ offset = last_offset;
+ for (i = 0; i < 128; i++)
+ {
+ /* Decrease offset to stress several sizes and alignments. */
+ offset--;
+ exp_len = last_offset - offset;
+ FOR_EACH_IMPL (impl, 0)
+ {
+ /* If an implementation goes beyond EXP_LEN, it will trigger
+ the segfault. */
+ do_one_test (impl, (CHAR *) (s + offset), exp_len, exp_len);
+ }
+ }
+}
+
int
test_main (void)
{
@@ -244,6 +273,7 @@ test_main (void)
do_random_tests ();
do_page_tests ();
+ do_page_2_tests ();
return ret;
}