Exemple #1
0
void disable_non_net_syscalls_uniarch(void)
{
	unsigned int i;

	for_each_syscall(i) {
		if (validate_specific_syscall_silent(syscalls, i) == FALSE)
			continue;

		if (syscalls[i].entry->flags & ACTIVE) {
			if (is_syscall_net_related(syscalls, i) == FALSE) {
				toggle_syscall_n(i, FALSE, syscalls[i].entry->name, syscalls[i].entry->name);
			}
		}
	}
}
Exemple #2
0
void enable_random_syscalls_uniarch(void)
{
	unsigned int call;

retry:
	call = rand() % max_nr_syscalls;

	if (validate_specific_syscall_silent(syscalls, call) == FALSE)
		goto retry;

	if (no_files == TRUE)
		if (is_syscall_net_related(syscalls, call) == FALSE)
			goto retry;

	/* if we've set this to be disabled, don't enable it! */
	if (syscalls[call].entry->flags & TO_BE_DEACTIVATED)
		goto retry;

	toggle_syscall_n(call, TRUE, syscalls[call].entry->name, syscalls[call].entry->name);
}
bool child_random_syscalls(void)
{
	struct syscallrecord *rec;
	unsigned int syscallnr;
	bool do32;
	unsigned int len;

retry:
	if (no_syscalls_enabled() == TRUE) {
		output(0, "[%d] No more syscalls enabled. Exiting\n", getpid());
		shm->exit_reason = EXIT_NO_SYSCALLS_ENABLED;
		return FAIL;
	}

	/* Ok, we're doing another syscall, let's pick one. */
	do32 = choose_syscall_table();
	syscallnr = rand() % max_nr_syscalls;

	/* If we got a syscallnr which is not active repeat the attempt,
	 * since another child has switched that syscall off already.*/
	if (active_syscalls[syscallnr] == 0)
		goto retry;

	syscallnr = active_syscalls[syscallnr] - 1;

	if (validate_specific_syscall_silent(syscalls, syscallnr) == FALSE) {
		deactivate_syscall(syscallnr, do32);
		goto retry;
	}

	rec = &this_child->syscall;
	/* critical section for shm updates. */
	lock(&rec->lock);
	rec->do32bit = do32;
	rec->nr = syscallnr;
	unlock(&rec->lock);

	if (syscalls_todo) {
		if (shm->stats.total_syscalls_done >= syscalls_todo)
			shm->exit_reason = EXIT_REACHED_COUNT;
	}

	/* Generate arguments, print them out */

	generate_syscall_args(rec);
	output_syscall_prefix(rec);

	/* Sanity check: Make sure the length of the buffer remains
	 * constant across the syscall.
	 */
	len = strlen(rec->prebuffer);

	/* If we're going to pause, might as well sync pre-syscall */
	if (dopause == TRUE)
		synclogs();

	do_syscall(rec);

	/* post syscall sanity checks. */
	if (len != strlen(rec->prebuffer)) {
		output(0, "Sanity check failed: prebuffer length changed from %d to %d.\n",
			len, strlen(rec->prebuffer));
	}

	/* Output the syscall result, and clean up */
	output_syscall_postfix(rec);

	if (dopause == TRUE)
		sleep(1);

	handle_syscall_ret(rec);

	return TRUE;
}
Exemple #4
0
int child_random_syscalls(int childno)
{
    int ret;
    unsigned int syscallnr;

    ret = sigsetjmp(ret_jump, 1);
    if (ret != 0) {
        if (handle_sigreturn(childno) == 0)
            return 0;
        ret = 0;
    }

    while (shm->exit_reason == STILL_RUNNING) {

        check_parent_pid();

        while (shm->regenerating == TRUE)
            sleep(1);

        /* If the parent reseeded, we should reflect the latest seed too. */
        if (shm->seed != shm->seeds[childno])
            set_seed(childno);

        choose_syscall_table(childno);

        if (nr_active_syscalls == 0) {
            shm->exit_reason = EXIT_NO_SYSCALLS_ENABLED;
            goto out;
        }

        if (shm->exit_reason != STILL_RUNNING)
            goto out;

        syscallnr = rand() % nr_active_syscalls;
        /* If we got a syscallnr which is not actvie repeat the attempt, since another child has switched that syscall off already.*/
        if (active_syscalls[syscallnr] == 0)
            continue;

        syscallnr = active_syscalls[syscallnr] - 1;

        if (validate_specific_syscall_silent(syscalls, syscallnr) == FALSE) {
            if (biarch == FALSE) {
                deactivate_syscall(syscallnr);
            } else {
                if (shm->do32bit[childno] == TRUE)
                    deactivate_syscall32(syscallnr);
                else
                    deactivate_syscall64(syscallnr);
            }
            continue;
        }

        shm->syscallno[childno] = syscallnr;

        if (syscalls_todo) {
            if (shm->total_syscalls_done >= syscalls_todo) {
                output(0, "Reached maximum syscall count (todo = %d, done = %d), exiting...\n",
                       syscalls_todo, shm->total_syscalls_done);
                shm->exit_reason = EXIT_REACHED_COUNT;
            }
        }

        ret = mkcall(childno);
    }
out:
    return ret;
}
Exemple #5
0
void enable_random_syscalls_biarch(void)
{
	unsigned int call32 = NOTFOUND, call64 = NOTFOUND;

retry:

	//Search for 64 bit version
	if (do_64_arch) {
		struct syscallentry *entry = NULL;

		call64 = rnd() % max_nr_64bit_syscalls;

		if (validate_specific_syscall_silent(syscalls_64bit, call64) == FALSE)
			goto retry;

		entry = syscalls_64bit[call64].entry;

		if (entry->flags & TO_BE_DEACTIVATED) {
			call64 = NOTFOUND;
			goto try32bit;
		}

		if (entry->active_number != 0) {
			call64 = NOTFOUND;
			goto try32bit;
		}

		// If we got so far, then activate it.
		toggle_syscall_biarch_n(call64, syscalls_64bit, TRUE, do_64_arch, TRUE,
					&activate_syscall64, 64, entry->name);
	}

try32bit:
	//Search for 32 bit version
	if (do_32_arch) {
		struct syscallentry *entry = NULL;

		/* If we enabled a 64bit syscall above, enable its 32-bit counter-part too */
		if (do_64_arch) {
			if (call64 == NOTFOUND) {
				goto just32;
			} else {
				call32 = search_syscall_table(syscalls_32bit, max_nr_32bit_syscalls, syscalls_64bit[call64].entry->name);
				if (call32 == NOTFOUND)
					return;	// syscall is 64-bit only.
			}
		} else {
just32:
			call32 = rnd() % max_nr_32bit_syscalls;
		}

		if (validate_specific_syscall_silent(syscalls_32bit, call32) == FALSE)
			return;

		entry = syscalls_32bit[call32].entry;

		if ((entry->flags & TO_BE_DEACTIVATED) || (entry->active_number != 0))
			return;

		//If we got so far, then active it.
		toggle_syscall_biarch_n(call32, syscalls_32bit, TRUE, do_32_arch, TRUE,
					&activate_syscall32, 32, entry->name);
	}
}