1 | /* Check for use-after-free in clntudp_call (bug 21115). |
2 | Copyright (C) 2017-2022 Free Software Foundation, Inc. |
3 | This file is part of the GNU C Library. |
4 | |
5 | The GNU C Library is free software; you can redistribute it and/or |
6 | modify it under the terms of the GNU Lesser General Public |
7 | License as published by the Free Software Foundation; either |
8 | version 2.1 of the License, or (at your option) any later version. |
9 | |
10 | The GNU C Library is distributed in the hope that it will be useful, |
11 | but WITHOUT ANY WARRANTY; without even the implied warranty of |
12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
13 | Lesser General Public License for more details. |
14 | |
15 | You should have received a copy of the GNU Lesser General Public |
16 | License along with the GNU C Library; if not, see |
17 | <https://www.gnu.org/licenses/>. */ |
18 | |
19 | #include <netinet/in.h> |
20 | #include <rpc/clnt.h> |
21 | #include <rpc/svc.h> |
22 | #include <support/check.h> |
23 | #include <support/namespace.h> |
24 | #include <support/xsocket.h> |
25 | #include <unistd.h> |
26 | |
27 | static int |
28 | do_test (void) |
29 | { |
30 | support_become_root (); |
31 | support_enter_network_namespace (); |
32 | |
33 | /* Obtain a likely-unused port number. */ |
34 | struct sockaddr_in sin = |
35 | { |
36 | .sin_family = AF_INET, |
37 | .sin_addr.s_addr = htonl (INADDR_LOOPBACK), |
38 | }; |
39 | { |
40 | int fd = xsocket (AF_INET, SOCK_DGRAM | SOCK_CLOEXEC, 0); |
41 | xbind (fd, (struct sockaddr *) &sin, sizeof (sin)); |
42 | socklen_t sinlen = sizeof (sin); |
43 | xgetsockname (fd, (struct sockaddr *) &sin, &sinlen); |
44 | /* Close the socket, so that we will receive an error below. */ |
45 | close (fd: fd); |
46 | } |
47 | |
48 | int sock = RPC_ANYSOCK; |
49 | CLIENT *clnt = clntudp_create |
50 | (&sin, 1, 2, (struct timeval) { 1, 0 }, &sock); |
51 | TEST_VERIFY_EXIT (clnt != NULL); |
52 | TEST_VERIFY (clnt_call (clnt, 3, |
53 | (xdrproc_t) xdr_void, NULL, |
54 | (xdrproc_t) xdr_void, NULL, |
55 | ((struct timeval) { 3, 0 })) |
56 | == RPC_CANTRECV); |
57 | clnt_destroy (clnt); |
58 | |
59 | return 0; |
60 | } |
61 | |
62 | #include <support/test-driver.c> |
63 | |