Skip to content

Commit

Permalink
wrong usages of sem_open in the libFuzzer
Browse files Browse the repository at this point in the history
Summary:
Fixed two non-standard usages of sem_open in the libFuzzer library and
one NetBSD-related modification with test script.


  - The return value to indicate error should be SEM_FAILED instead of
    (void *)-1 (please refer to "RETURN VALUE" section in this [[
    http://pubs.opengroup.org/onlinepubs/9699919799/functions/sem_open.html
    | page ]]). Actually, SEM_FAILED != (void *)-1 holds in NetBSD.

  - The SharedMemoryRegion::SemName function should return name
    starting with slash. Because the behaviour of name which does not
    start with slash is unspecified as the [[
    http://pubs.opengroup.org/onlinepubs/9699919799/functions/sem_open.html
    | "DESCRIPTION" section ]] specified:

> If name does not begin with the <slash> character, the effect is implementation-defined.

  - The length of name is limited to 14 in NetBSD, it is suggested to
    reduce the length of equivalence server name in the test script.

Patch by: Yang Zheng

Reviewers: vitalybuka, krytarowski, kcc

Reviewed By: kcc

Subscribers: kcc, #sanitizers, llvm-commits, joerg

Differential Revision: https://reviews.llvm.org/D46622

llvm-svn: 332003
  • Loading branch information
krytarowski committed May 10, 2018
1 parent 37fbb7f commit aee7b0f
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 4 deletions.
9 changes: 7 additions & 2 deletions compiler-rt/lib/fuzzer/FuzzerShmemPosix.cpp
Expand Up @@ -32,6 +32,11 @@ std::string SharedMemoryRegion::Path(const char *Name) {

std::string SharedMemoryRegion::SemName(const char *Name, int Idx) {
std::string Res(Name);
// When passing a name without a leading <slash> character to
// sem_open, the behaviour is unspecified in POSIX. Add a leading
// <slash> character for the name if there is no such one.
if (!Res.empty() && Res[0] != '/')
Res.insert(Res.begin(), '/');
return Res + (char)('0' + Idx);
}

Expand All @@ -52,7 +57,7 @@ bool SharedMemoryRegion::Create(const char *Name) {
for (int i = 0; i < 2; i++) {
sem_unlink(SemName(Name, i).c_str());
Semaphore[i] = sem_open(SemName(Name, i).c_str(), O_CREAT, 0644, 0);
if (Semaphore[i] == (void *)-1)
if (Semaphore[i] == SEM_FAILED)
return false;
}
IAmServer = true;
Expand All @@ -70,7 +75,7 @@ bool SharedMemoryRegion::Open(const char *Name) {
return false;
for (int i = 0; i < 2; i++) {
Semaphore[i] = sem_open(SemName(Name, i).c_str(), 0);
if (Semaphore[i] == (void *)-1)
if (Semaphore[i] == SEM_FAILED)
return false;
}
IAmServer = false;
Expand Down
4 changes: 2 additions & 2 deletions compiler-rt/test/fuzzer/equivalence-signals.test
Expand Up @@ -7,7 +7,7 @@ UNSUPPORTED: freebsd
UNSUPPORTED: darwin

RUN: %cpp_compiler %S/EquivalenceATest.cpp -o %t-EquivalenceATest
RUN: %t-EquivalenceATest -timeout=1 -run_equivalence_server=EQUIV_SIG_TEST & export APID=$!
RUN: %t-EquivalenceATest -timeout=1 -run_equivalence_server=EQ_SIG_TEST & export APID=$!
RUN: sleep 3
RUN: %t-EquivalenceATest -timeout=1 -use_equivalence_server=EQUIV_SIG_TEST -runs=500000 2>&1
RUN: %t-EquivalenceATest -timeout=1 -use_equivalence_server=EQ_SIG_TEST -runs=500000 2>&1
RUN: kill -9 $APID

0 comments on commit aee7b0f

Please sign in to comment.