Re: [PATCH blktests 3/3] sg/001: add regression test for syzcaller generated GPF
From: Omar Sandoval <osandov@osandov.com>
Date: 2017-05-18 21:28:40
Also in:
linux-scsi
On Thu, May 18, 2017 at 02:13:08PM +0200, Johannes Thumshirn wrote:
quoted hunk ↗ jump to hunk
Add a regression test for commit 48ae8484e9fc ("scsi: sg: don't return bogus Sg_requests"). This is a general protection fault triggered by syzcaller. Signed-off-by: Johannes Thumshirn <redacted> --- tests/sg/001 | 48 ++++++++++++++++++++++++++++++++++++++++++++++++ tests/sg/001.out | 2 ++ 2 files changed, 50 insertions(+) create mode 100755 tests/sg/001 create mode 100644 tests/sg/001.outdiff --git a/tests/sg/001 b/tests/sg/001 new file mode 100755 index 000000000000..3a72931d5748 --- /dev/null +++ b/tests/sg/001@@ -0,0 +1,48 @@ +#!/bin/bash +# +# Regression test for commit 48ae8484e9fc ("scsi: sg: don't return bogus Sg_requests") +# +# Copyright (C) 2017 Johannes Thumshirn <jthumshirn@suse.de> +# +# This program is free software: you can redistribute it and/or modify +# it under the terms of the GNU General Public License as published by +# the Free Software Foundation, either version 3 of the License, or +# (at your option) any later version. +# +# This program is distributed in the hope that it will be useful, +# but WITHOUT ANY WARRANTY; without even the implied warranty of +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the +# GNU General Public License for more details. +# +# You should have received a copy of the GNU General Public License +# along with this program. If not, see <http://www.gnu.org/licenses/>. + +. common/sg +. common/scsi_debug + +DESCRIPTION="Regression test for commit 48ae8484e9fc (\"scsi: sg: don't return bogus Sg_requests\")"
This description doesn't really say what the test does. If this test fails, the person running it should be able to know what the test is doing without having to decode the syzkaller reproducer. I'd prefer something like: DESCRIPTION="do bogus sg reads and writes" Or something like that, that's my best attempt at understanding the reproducer :)
+TIMED=1
+QUICK=1
+
+requires() {
+ _have_program src/sg-001 \
+ _have_program timeout \timeout is part of coreutils so this isn't necessary.
+ && _have_scsi_debug \
+ && _have_scsi_generic
+}
+
+
+test() {
+ echo "Running ${TEST_NAME}"
+
+ if ! _get_scsi_debug_dev; then
+ return 1
+ fi
+
+ _divide_timeout 2You don't use $TIMEOUT in this test, so remove this and the TIMED=1. The arbitrary timeout is fine for this kind of test, I think.
quoted hunk ↗ jump to hunk
+ timeout -s INT 10s ./src/sg-001 + + _put_scsi_debug_dev + + echo "Test complete" +}diff --git a/tests/sg/001.out b/tests/sg/001.out new file mode 100644 index 000000000000..beb4c437dd28 --- /dev/null +++ b/tests/sg/001.out@@ -0,0 +1,2 @@ +Running sg/001 +Test complete-- 2.12.0