Attachment 211741 Details for Bug 313081 – Testcase, a modified one from adobriyan-at-sw.ru.

Testcase, a modified one from adobriyan-at-sw.ru.

clone-get-signal.c (text/plain), 2.39 KB, created by Jan Kratochvil on 2007-09-30 13:59:01 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Kratochvil

Created: 2007-09-30 13:59:01 UTC

Size: 2.39 KB

patch

obsolete

>/* F-8?: https://bugzilla.redhat.com/show_bug.cgi?id=312951  */
>/* private RHEL-5.2?: https://bugzilla.redhat.com/show_bug.cgi?id=312961  */
>
>/* This software is provided 'as-is', without any express or implied
>   warranty.  In no event will the authors be held liable for any damages
>   arising from the use of this software.
>   
>   Permission is granted to anyone to use this software for any purpose,
>   including commercial applications, and to alter it and redistribute it
>   freely.  */
>
>/* zap_threads() does __ptrace_unlink(p) under write_lock(tasklist_lock),
>   what if p->parent waits for tasklist_lock in ptrace_detach() ?
>  
>   This program crashes the kernel (both 2.6.15 and 2.6.16-rc2 were tested)
>   very quickly (BUG() in __ptrace_unlink).  */
>
>#include <errno.h>
>#include <stdio.h>
>#include <signal.h>
>#include <string.h>
>#include <stdlib.h>
>#include <unistd.h>
>#include <pthread.h>
>#include <sys/wait.h>
>#include <sys/ptrace.h>
>#include <sys/syscall.h>
>
>/* WARNING: Check the real count.  */
>#define LOOPS 2000
>
>static void die (const char *msg)
>{
>	printf ("ERR!! %s: %s\n", msg, strerror(errno));
>	exit (1);
>}
>
>#ifdef __ia64__
>extern int __clone2 (int (*fn)(void *), void *child_stack_base,
>		     size_t stack_size, int flags, void *arg, ...);
>#define clone2 __clone2
>#else
>#define clone2(func, stack_base, size, flags, arg...) \
>	clone (func, (stack_base) + (size), flags, arg)
>#endif
>
>static pid_t clone_vm (int (*fn) (void *), void *stack_base, size_t stack_size)
>{
>	pid_t pid;
>
>	pid = clone2 (fn, stack_base, stack_size, CLONE_VM, NULL);
>	if (pid < 0)
>		die ("clone");
>
>	return pid;
>}
>
>static unsigned char child_stack[4096];
>
>static int child_func (void *arg)
>{
>	return pause ();
>}
>
>static unsigned char cdump_stack[4096];
>
>static int cdump_func (void *arg)
>{
>	return kill (syscall(__NR_getpid), SIGQUIT);
>}
>
>int main (void)
>{
>	int pid;
>	int loops;
>
>	for (loops = 0; loops < LOOPS; loops++)
>		if ((pid = fork())) {
>			if (waitpid (pid, NULL, 0) != pid)
>				die ("wait");
>			kill (-pid, SIGKILL);
>		} else {
>			int child;
>
>			if (setpgrp ())
>				die("pgrp");
>
>			child = clone_vm (child_func, child_stack,
>					  sizeof child_stack);
>
>			if (ptrace (PTRACE_ATTACH, child, NULL, 0))
>				die ("ptrace");
>
>			if (waitpid (child, NULL, __WALL) != child)
>				die ("wait");
>
>			clone_vm (cdump_func, cdump_stack, sizeof cdump_stack);
>
>			if (ptrace (PTRACE_DETACH, child, NULL, 0))
>				die ("detach");
>
>			break;
>		}
>
>	return 0;
>}

Actions: View

Attachments on bug 313081: 211741