|
Packit |
6c4009 |
/* Check for use-after-free in clntudp_call (bug 21115).
|
|
Packit |
6c4009 |
Copyright (C) 2017-2018 Free Software Foundation, Inc.
|
|
Packit |
6c4009 |
This file is part of the GNU C Library.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is free software; you can redistribute it and/or
|
|
Packit |
6c4009 |
modify it under the terms of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License as published by the Free Software Foundation; either
|
|
Packit |
6c4009 |
version 2.1 of the License, or (at your option) any later version.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
The GNU C Library is distributed in the hope that it will be useful,
|
|
Packit |
6c4009 |
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
6c4009 |
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit |
6c4009 |
Lesser General Public License for more details.
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
You should have received a copy of the GNU Lesser General Public
|
|
Packit |
6c4009 |
License along with the GNU C Library; if not, see
|
|
Packit |
6c4009 |
<http://www.gnu.org/licenses/>. */
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#include <netinet/in.h>
|
|
Packit |
6c4009 |
#include <rpc/clnt.h>
|
|
Packit |
6c4009 |
#include <rpc/svc.h>
|
|
Packit |
6c4009 |
#include <support/check.h>
|
|
Packit |
6c4009 |
#include <support/namespace.h>
|
|
Packit |
6c4009 |
#include <support/xsocket.h>
|
|
Packit |
6c4009 |
#include <unistd.h>
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
static int
|
|
Packit |
6c4009 |
do_test (void)
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
support_become_root ();
|
|
Packit |
6c4009 |
support_enter_network_namespace ();
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
/* Obtain a likely-unused port number. */
|
|
Packit |
6c4009 |
struct sockaddr_in sin =
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
.sin_family = AF_INET,
|
|
Packit |
6c4009 |
.sin_addr.s_addr = htonl (INADDR_LOOPBACK),
|
|
Packit |
6c4009 |
};
|
|
Packit |
6c4009 |
{
|
|
Packit |
6c4009 |
int fd = xsocket (AF_INET, SOCK_DGRAM | SOCK_CLOEXEC, 0);
|
|
Packit |
6c4009 |
xbind (fd, (struct sockaddr *) &sin, sizeof (sin));
|
|
Packit |
6c4009 |
socklen_t sinlen = sizeof (sin);
|
|
Packit |
6c4009 |
xgetsockname (fd, (struct sockaddr *) &sin, &sinlen);
|
|
Packit |
6c4009 |
/* Close the socket, so that we will receive an error below. */
|
|
Packit |
6c4009 |
close (fd);
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
int sock = RPC_ANYSOCK;
|
|
Packit |
6c4009 |
CLIENT *clnt = clntudp_create
|
|
Packit |
6c4009 |
(&sin, 1, 2, (struct timeval) { 1, 0 }, &sock);
|
|
Packit |
6c4009 |
TEST_VERIFY_EXIT (clnt != NULL);
|
|
Packit |
6c4009 |
TEST_VERIFY (clnt_call (clnt, 3,
|
|
Packit |
6c4009 |
(xdrproc_t) xdr_void, NULL,
|
|
Packit |
6c4009 |
(xdrproc_t) xdr_void, NULL,
|
|
Packit |
6c4009 |
((struct timeval) { 3, 0 }))
|
|
Packit |
6c4009 |
== RPC_CANTRECV);
|
|
Packit |
6c4009 |
clnt_destroy (clnt);
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
return 0;
|
|
Packit |
6c4009 |
}
|
|
Packit |
6c4009 |
|
|
Packit |
6c4009 |
#include <support/test-driver.c>
|