blob: dd6d845e7af5a0f780f5613c0c55e10b5b8a357e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
|
#! /bin/bash
# SPDX-License-Identifier: GPL-2.0
# Copyright (c) 2020 Red Hat, Inc. All Rights Reserved.
#
# FS QA Test 520
#
# Verify kernel doesn't hang when mounting a crafted image
# with bad agf.freeblks metadata due to CVE-2020-12655.
#
# Also, check if
# commit d0c7feaf8767 ("xfs: add agf freeblocks verify in xfs_agf_verify")
# is included in the current kernel.
#
. ./common/preamble
_begin_fstest auto quick clone
# Override the default cleanup function.
_cleanup()
{
cd /
rm -f $tmp.*
_scratch_unmount > /dev/null 2>&1
}
# Import common functions.
. ./common/filter
# real QA test starts here
_supported_fs xfs
_disable_dmesg_check
_require_check_dmesg
_require_scratch_nocheck
# Don't let the rtbitmap fill up the data device and screw up this test
unset USE_EXTERNAL
force_crafted_metadata() {
_scratch_mkfs_xfs -f $fsdsopt "$4" >> $seqres.full 2>&1 || _fail "mkfs failed"
_scratch_xfs_set_metadata_field "$1" "$2" "$3" >> $seqres.full 2>&1
local kmsg="xfs/$seq: testing $1=$2 at $(date +"%F %T")"
local mounted=0
local hasmsg=0
echo "${kmsg}" > /dev/kmsg
_try_scratch_mount >> $seqres.full 2>&1 && mounted=1
if [ $mounted -ne 0 ]; then
dd if=/dev/zero of=$SCRATCH_MNT/test bs=65536 count=1 >> \
$seqres.full 2>&1
sync
fi
_dmesg_since_test_start | tac | sed -ne "0,\#${kmsg}#p" | tac | \
grep -E -q 'Metadata corruption detected at' && hasmsg=1
_scratch_unmount > /dev/null 2>&1
[ $mounted -eq 0 -o $hasmsg -eq 1 ] || \
_fail "potential broken kernel (mounted=${mounted},hasmsg=${hasmsg})"
}
bigval=100000000
fsdsopt="-d agcount=1,size=64m"
force_crafted_metadata freeblks 0 "agf 0"
force_crafted_metadata longest $bigval "agf 0"
force_crafted_metadata length $bigval "agf 0"
_scratch_mkfs_xfs_supported -m reflink=1 >> $seqres.full 2>&1 && \
force_crafted_metadata refcntblocks $bigval "agf 0" "-m reflink=1"
_scratch_mkfs_xfs_supported -m rmapbt=1 >> $seqres.full 2>&1 && \
force_crafted_metadata rmapblocks $bigval "agf 0" "-m rmapbt=1"
echo "Silence is golden"
# success, all done
status=0
exit
|
