[apple/xnu.git] / tests / invalid_setaudit_57414044.c

#pragma clang diagnostic ignored "-Wdeprecated-declarations"

#include <bsm/audit.h>
#include <bsm/audit_session.h>
#include <err.h>
#include <sysexits.h>
#include <unistd.h>
#include <errno.h>
#include <string.h>

#include <darwintest.h>
#include <darwintest_utils.h>

T_GLOBAL_META(T_META_RUN_CONCURRENTLY(true));

T_DECL(invalid_setaudit_57414044,
    "Verify that auditing a setaudit_addr syscall which has an invalid "
    "at_type field does not panic",
    T_META_CHECK_LEAKS(false))
{
	T_SETUPBEGIN;

	int cond, ret = auditon(A_GETCOND, &cond, sizeof(cond));
	if (ret == -1 && errno == ENOSYS) {
		T_SKIP("no kernel support for auditing; can't test");
	}
	T_ASSERT_POSIX_SUCCESS(ret, "auditon A_GETCOND");
	if (cond != AUC_AUDITING) {
		T_SKIP("auditing is not enabled; can't test");
	}

	/* set up auditing to audit `setaudit_addr` */
	auditpinfo_addr_t pinfo_addr = {.ap_pid = getpid()};
	T_ASSERT_POSIX_SUCCESS(auditon(A_GETPINFO_ADDR, &pinfo_addr, sizeof(pinfo_addr)), NULL);
	auditpinfo_t pinfo = {.ap_pid = getpid(), .ap_mask = pinfo_addr.ap_mask};
	pinfo.ap_mask.am_failure |= 0x800; /* man 5 audit_class */
	T_ASSERT_POSIX_SUCCESS(auditon(A_SETPMASK, &pinfo, sizeof(pinfo)), NULL);

	T_SETUPEND;

	struct auditinfo_addr a;
	memset(&a, 0, sizeof(a));
	a.ai_termid.at_type = 999;
	T_ASSERT_POSIX_FAILURE(setaudit_addr(&a, sizeof(a)), EINVAL,
	    "setaudit_addr should fail due to invalid at_type");
}
Commit	Line	Data
f427ee49 A	1	#pragma clang diagnostic ignored "-Wdeprecated-declarations"
	2
	3	#include <bsm/audit.h>
	4	#include <bsm/audit_session.h>
	5	#include <err.h>
	6	#include <sysexits.h>
	7	#include <unistd.h>
	8	#include <errno.h>
	9	#include <string.h>
	10
	11	#include <darwintest.h>
	12	#include <darwintest_utils.h>
	13
	14	T_GLOBAL_META(T_META_RUN_CONCURRENTLY(true));
	15
	16	T_DECL(invalid_setaudit_57414044,
	17	"Verify that auditing a setaudit_addr syscall which has an invalid "
	18	"at_type field does not panic",
	19	T_META_CHECK_LEAKS(false))
	20	{
	21	T_SETUPBEGIN;
	22
	23	int cond, ret = auditon(A_GETCOND, &cond, sizeof(cond));
	24	if (ret == -1 && errno == ENOSYS) {
	25	T_SKIP("no kernel support for auditing; can't test");
	26	}
	27	T_ASSERT_POSIX_SUCCESS(ret, "auditon A_GETCOND");
	28	if (cond != AUC_AUDITING) {
	29	T_SKIP("auditing is not enabled; can't test");
	30	}
	31
	32	/* set up auditing to audit `setaudit_addr` */
	33	auditpinfo_addr_t pinfo_addr = {.ap_pid = getpid()};
	34	T_ASSERT_POSIX_SUCCESS(auditon(A_GETPINFO_ADDR, &pinfo_addr, sizeof(pinfo_addr)), NULL);
	35	auditpinfo_t pinfo = {.ap_pid = getpid(), .ap_mask = pinfo_addr.ap_mask};
	36	pinfo.ap_mask.am_failure \|= 0x800; /* man 5 audit_class */
	37	T_ASSERT_POSIX_SUCCESS(auditon(A_SETPMASK, &pinfo, sizeof(pinfo)), NULL);
	38
	39	T_SETUPEND;
	40
	41	struct auditinfo_addr a;
	42	memset(&a, 0, sizeof(a));
	43	a.ai_termid.at_type = 999;
	44	T_ASSERT_POSIX_FAILURE(setaudit_addr(&a, sizeof(a)), EINVAL,
	45	"setaudit_addr should fail due to invalid at_type");
	46	}