diff options
Diffstat (limited to 'commands')
| -rw-r--r-- | commands/Kconfig | 7 | ||||
| -rw-r--r-- | commands/Makefile | 3 | ||||
| -rw-r--r-- | commands/ubsan.c | 152 |
3 files changed, 162 insertions, 0 deletions
diff --git a/commands/Kconfig b/commands/Kconfig index 039fd7d1ac..e03110fd46 100644 --- a/commands/Kconfig +++ b/commands/Kconfig @@ -2142,6 +2142,13 @@ config CMD_SEED help Seed the pseudo random number generator (PRNG) +config CMD_UBSAN + tristate "ubsan" + depends on UBSAN && COMMAND_SUPPORT + help + This is a test command for the undefined behavior sanitizer. + It triggers various undefined behavior, and detect it. + # end Miscellaneous commands endmenu diff --git a/commands/Makefile b/commands/Makefile index e69fb5046f..5cd35b78a7 100644 --- a/commands/Makefile +++ b/commands/Makefile @@ -123,3 +123,6 @@ obj-$(CONFIG_CMD_MMC_EXTCSD) += mmc_extcsd.o obj-$(CONFIG_CMD_NAND_BITFLIP) += nand-bitflip.o obj-$(CONFIG_CMD_SEED) += seed.o obj-$(CONFIG_CMD_IP_ROUTE_GET) += ip-route-get.o +obj-$(CONFIG_CMD_UBSAN) += ubsan.o + +UBSAN_SANITIZE_ubsan.o := y diff --git a/commands/ubsan.c b/commands/ubsan.c new file mode 100644 index 0000000000..784678d399 --- /dev/null +++ b/commands/ubsan.c @@ -0,0 +1,152 @@ +// SPDX-License-Identifier: GPL-2.0 +#include <common.h> +#include <command.h> +#include <abort.h> + +struct test_ubsan { + const char *cmd; + void(*fun)(void); +}; + +static void test_ubsan_add_overflow(void) +{ + volatile int val = INT_MAX; + + val += 2; +} + +static void test_ubsan_sub_overflow(void) +{ + volatile int val = INT_MIN; + volatile int val2 = 2; + + val -= val2; +} + +static void test_ubsan_mul_overflow(void) +{ + volatile int val = INT_MAX / 2; + + val *= 3; +} + +static void test_ubsan_negate_overflow(void) +{ + volatile int val = INT_MIN; + + val = -val; +} + +static void test_ubsan_divrem_overflow(void) +{ + volatile int val = 16; + volatile int val2 = 0; + + val /= val2; +} + +static void test_ubsan_shift_out_of_bounds(void) +{ + volatile int val = -1; + int val2 = 10; + + val2 <<= val; +} + +static void test_ubsan_out_of_bounds(void) +{ + volatile int i = 4, j = 5; + volatile int arr[4]; + + arr[j] = i; +} + +static void test_ubsan_load_invalid_value(void) +{ + volatile char *dst, *src; + bool val, val2, *ptr; + char c = 4; + + dst = (char *)&val; + src = &c; + *dst = *src; + + ptr = &val2; + val2 = val; +} + +static void test_ubsan_null_ptr_deref(void) +{ + volatile int *ptr = NULL; + int val; + + data_abort_mask(); + val = *ptr; + data_abort_unmask(); +} + +static void test_ubsan_misaligned_access(void) +{ + volatile char arr[5] __aligned(4) = {1, 2, 3, 4, 5}; + volatile int *ptr, val = 6; + + ptr = (int *)(arr + 1); + *ptr = val; +} + +static void test_ubsan_object_size_mismatch(void) +{ + /* "((aligned(8)))" helps this not into be misaligned for ptr-access. */ + volatile int val __aligned(8) = 4; + volatile long long *ptr, val2; + + ptr = (long long *)&val; + val2 = *ptr; +} + +static const struct test_ubsan test_ubsan_array[] = { + { .cmd = "add", .fun = test_ubsan_add_overflow }, + { .cmd = "sub", .fun = test_ubsan_sub_overflow }, + { .cmd = "mul", .fun = test_ubsan_mul_overflow }, + { .cmd = "neg", .fun = test_ubsan_negate_overflow }, + { .cmd = "div", .fun = test_ubsan_divrem_overflow }, + { .cmd = "shift", .fun = test_ubsan_shift_out_of_bounds }, + { .cmd = "oob", .fun = test_ubsan_out_of_bounds }, + { .cmd = "trap", .fun = test_ubsan_load_invalid_value }, + { .cmd = "null", .fun = test_ubsan_null_ptr_deref }, + { .cmd = "align", .fun = test_ubsan_misaligned_access }, + { .cmd = "size", .fun = test_ubsan_object_size_mismatch }, + { /* sentinel */ } +}; + +static int do_ubsan(int argc, char *argv[]) +{ + const struct test_ubsan *test; + + if (argc != 2) + return COMMAND_ERROR_USAGE; + + for (test = test_ubsan_array; test->cmd; test++) { + if (strcmp(test->cmd, argv[1]) == 0) { + test->fun(); + return 0; + } + } + + return COMMAND_ERROR_USAGE; +} + +BAREBOX_CMD_HELP_START(ubsan) +BAREBOX_CMD_HELP_TEXT("trigger undefined behavior for UBSAN to detect") +BAREBOX_CMD_HELP_TEXT("") +BAREBOX_CMD_HELP_TEXT("Functions:") +BAREBOX_CMD_HELP_TEXT("add, sub, mul, neg, div, shift, oob, trap,") +BAREBOX_CMD_HELP_TEXT("null, align, size") +BAREBOX_CMD_HELP_END + +BAREBOX_CMD_START(ubsan) + .cmd = do_ubsan, + BAREBOX_CMD_DESC("trigger undefined behavior for UBSAN to detect") + BAREBOX_CMD_GROUP(CMD_GRP_MISC) + BAREBOX_CMD_HELP(cmd_ubsan_help) +BAREBOX_CMD_END |