fortify: Add KUnit tests for runtime overflows

Browse source

With fortify overflows able to be redirected, we can use KUnit to
exercise the overflow conditions. Add tests for every API covered by
CONFIG_FORTIFY_SOURCE, except for memset() and memcpy(), which are
special-cased for now.

Disable warnings in the Makefile since we're explicitly testing
known-bad string handling code patterns.

Note that this makes the LKDTM FORTIFY_STR* tests obsolete, but those
can be removed separately.

Signed-off-by: Kees Cook <keescook@chromium.org>

...

This commit is contained in:

Kees Cook 2023-04-07 12:27:15 -07:00

parent 4ce615e798

commit fa4a3f86d4

2 changed files with 607 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

lib/Makefile

View file

607

lib/fortify_kunit.c

View file