openbsd/src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2026-04-22 05:05:03 +00:00
Code Issues Projects Releases Wiki Activity

Test that __pledge_open can bypass unveil.

Browse Source
This commit is contained in:
dgl
2026-03-28 07:23:57 +00:00
parent 41316900b8
commit dca08cedf0
2 changed files with 16 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
regress/sys/kern/pledge/open/Makefile
View File

@@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.1 2026/03/27 05:06:33 dgl Exp $
# $OpenBSD: Makefile,v 1.2 2026/03/28 07:23:57 dgl Exp $
PROG= open
LDFLAGS= -static
@@ -34,6 +34,10 @@ run-devnull: ${PROG}
./${PROG} "stdio" /dev/null
REGRESS_TARGETS+= run-devnull
run-devnull-unveil: ${PROG}
./${PROG} "stdio" /dev/null / ""
REGRESS_TARGETS+= run-devnull-unveil
run-empty-promises: ${PROG}
if ./${PROG} "" /dev/null; \
then false; else [[ $$? == 134 ]]; fi

14
regress/sys/kern/pledge/open/open.c
View File

@@ -1,4 +1,4 @@
/* $OpenBSD: open.c,v 1.1 2026/03/27 05:06:33 dgl Exp $ */
/* $OpenBSD: open.c,v 1.2 2026/03/28 07:23:57 dgl Exp $ */
/*
* Copyright (c) 2026 David Leadbeater <dgl@openbsd.org>
*
@@ -33,16 +33,24 @@ int _libc___pledge_open(char *path, int flags, ...);
int
main(int argc, char **argv)
{
int fd;
int fd, i;
char *promise, *path;
struct stat sb;
if (argc != 3)
if (argc < 3)
errx(1, "argc: %d", argc);
promise = argv[1];
path = argv[2];
if (((argc - 3) % 2) != 0)
errx(1, "unveil(x, y) must be balanced");
for (i = 3; i < argc; i += 2) {
if (unveil(argv[i], argv[i+1]) == -1)
err(1, "unveil(%s, %s)", argv[i], argv[i+1]);
}
if (strcmp(promise, NO_PLEDGE) != 0 && pledge(promise, NULL) == -1)
err(1, "pledge %s", promise);