mirror of
git://sourceware.org/git/glibc.git
synced 2024-11-21 01:12:26 +08:00
27f10a0963
As noted in bug 13888, and as I noted previously in <https://sourceware.org/ml/libc-alpha/2000-10/msg00111.html>, various tests used hardcoded paths in /tmp, so posing issues for simultaneous test runs from different build directories. This patch fixes such uses of hardcoded file names to put them in the build directory instead (in the case of stdio-common/bug5 the file names are changed as well, to avoid a conflict with the name bug5.out also used for the automatic test output redirection). It also fixes test-installation.pl likewise (that was using filenames with $$ in them rather than strictly hardcoded names, but that's still not good practice for temporary file naming). Note that my list of files changed is not identical to that in bug 13888. I added tst-spawn3.c and test-installation.pl, and removed some tests that seem to me (now) to create temporary files securely (simply using /tmp is not itself a problem if the temporary files are handled properly with mkstemp; I haven't checked whether those tests used to do things insecurely). conformtest is not changed because the makefiles always pass a --tmpdir option so the /tmp default is irrelevant, and for the same reason there is no actual problem with nptl/tst-umask1.c because again the makefiles always override the default. nptl/sockperf.c is ignored because there is no code to run it; probably that file should actually be removed. Some tests use the mktemp function, but I think they all use it in a way that *is* secure (for generating names for directories / sockets / fifos / symlinks, where the operation using the name will not follow symlinks and so there is no potential for a symlink attack on the account running the testsuite). Some tests use the tmpnam function to generate temporary file names. This is in principle insecure, but not addressed by this patch (I consider it a separate issue from the fully hardcoded paths). Tested for x86_64. [BZ #13888] * posix/Makefile (CFLAGS-tst-spawn3.c): New variable. * posix/tst-spawn3.c (do_test): Put tst-spwan3.pid in OBJPFX, not /tmp. * scripts/test-installation.pl: Put temporary files in build directory, not /tmp. * stdio-common/Makefile (CFLAGS-bug3.c): New variable. (CFLAGS-bug4.c): Likewise. (CFLAGS-bug5.c): Likewise. (CFLAGS-test-fseek.c): Likewise. (CFLAGS-test-popen.c): Likewise. (CFLAGS-test_rdwr.c): Likewise. * stdio-common/bug3.c (main): Put temporary file in OBJPFX, not /tmp. * stdio-common/bug4.c (main): Likewise. * stdio-common/bug5.c (main): Likewise. * stdio-common/test-fseek.c (TESTFILE): Likewise. * stdio-common/test-popen.c (do_test): Likewise. * stdio-common/test_rdwr.c (main): Likewise.
129 lines
2.8 KiB
C
129 lines
2.8 KiB
C
/* Copyright (C) 1991-2018 Free Software Foundation, Inc.
|
|
This file is part of the GNU C Library.
|
|
|
|
The GNU C Library is free software; you can redistribute it and/or
|
|
modify it under the terms of the GNU Lesser General Public
|
|
License as published by the Free Software Foundation; either
|
|
version 2.1 of the License, or (at your option) any later version.
|
|
|
|
The GNU C Library is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Lesser General Public License for more details.
|
|
|
|
You should have received a copy of the GNU Lesser General Public
|
|
License along with the GNU C Library; if not, see
|
|
<http://www.gnu.org/licenses/>. */
|
|
|
|
#include <errno.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
|
|
int
|
|
main (int argc, char **argv)
|
|
{
|
|
static const char hello[] = "Hello, world.\n";
|
|
static const char replace[] = "Hewwo, world.\n";
|
|
static const size_t replace_from = 2, replace_to = 4;
|
|
char filename[FILENAME_MAX];
|
|
char *name = strrchr (*argv, '/');
|
|
char buf[BUFSIZ];
|
|
FILE *f;
|
|
int lose = 0;
|
|
|
|
if (name != NULL)
|
|
++name;
|
|
else
|
|
name = *argv;
|
|
|
|
(void) sprintf (filename, OBJPFX "%s.test", name);
|
|
|
|
f = fopen (filename, "w+");
|
|
if (f == NULL)
|
|
{
|
|
perror (filename);
|
|
exit (1);
|
|
}
|
|
|
|
(void) fputs (hello, f);
|
|
rewind (f);
|
|
(void) fgets (buf, sizeof (buf), f);
|
|
rewind (f);
|
|
(void) fputs (buf, f);
|
|
rewind (f);
|
|
{
|
|
size_t i;
|
|
for (i = 0; i < replace_from; ++i)
|
|
{
|
|
int c = getc (f);
|
|
if (c == EOF)
|
|
{
|
|
printf ("EOF at %Zu.\n", i);
|
|
lose = 1;
|
|
break;
|
|
}
|
|
else if (c != hello[i])
|
|
{
|
|
printf ("Got '%c' instead of '%c' at %Zu.\n",
|
|
(unsigned char) c, hello[i], i);
|
|
lose = 1;
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
{
|
|
long int where = ftell (f);
|
|
if (where == (long int) replace_from)
|
|
{
|
|
size_t i;
|
|
for (i = replace_from; i < replace_to; ++i)
|
|
if (putc(replace[i], f) == EOF)
|
|
{
|
|
printf ("putc('%c') got %s at %Zu.\n",
|
|
replace[i], strerror (errno), i);
|
|
lose = 1;
|
|
break;
|
|
}
|
|
}
|
|
else if (where == -1L)
|
|
{
|
|
printf ("ftell got %s (should be at %Zu).\n",
|
|
strerror (errno), replace_from);
|
|
lose = 1;
|
|
}
|
|
else
|
|
{
|
|
printf ("ftell returns %lu; should be %Zu.\n", where, replace_from);
|
|
lose = 1;
|
|
}
|
|
}
|
|
|
|
if (!lose)
|
|
{
|
|
rewind (f);
|
|
if (fgets (buf, sizeof (buf), f) == NULL)
|
|
{
|
|
printf ("fgets got %s.\n", strerror(errno));
|
|
lose = 1;
|
|
}
|
|
else if (strcmp (buf, replace))
|
|
{
|
|
printf ("Read \"%s\" instead of \"%s\".\n", buf, replace);
|
|
lose = 1;
|
|
}
|
|
}
|
|
|
|
if (lose)
|
|
printf ("Test FAILED! Losing file is \"%s\".\n", filename);
|
|
else
|
|
{
|
|
(void) remove (filename);
|
|
puts ("Test succeeded.");
|
|
}
|
|
|
|
return lose ? EXIT_FAILURE : EXIT_SUCCESS;
|
|
}
|