ScoopDroid/android_system_core
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge "Add a stack overflow test to crasher, and document all the options."

Browse source
This commit is contained in:
Elliott Hughes 2013-04-24 01:27:40 +00:00 • committed by Gerrit Code Review
commit cb6a842c6e
1 changed files with 38 additions and 27 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

65
debuggerd/crasher.c
View file

@ -17,6 +17,8 @@
#include <cutils/sockets.h> #include <cutils/sockets.h>
extern const char* __progname;
void crash1(void); void crash1(void);
void crashnostack(void); void crashnostack(void);
void maybeabort(void); void maybeabort(void);
@ -47,22 +49,18 @@ int smash_stack(int i) {
return *(int*)(&buf[0]); return *(int*)(&buf[0]);
} }
__attribute__((noinline)) void overflow_stack(void* p) {
fprintf(stderr, "p = %p\n", p);
void* buf[1];
buf[0] = p;
overflow_stack(&buf);
}
void test_call1() void test_call1()
{ {
*((int*) 32) = 1; *((int*) 32) = 1;
} }
void *test_thread(void *x)
{
printf("crasher: thread pid=%d tid=%d\n", getpid(), gettid());
sleep(1);
test_call1();
printf("goodbye\n");
return 0;
}
void *noisy(void *x) void *noisy(void *x)
{ {
char c = (unsigned) x; char c = (unsigned) x;
@ -118,35 +116,48 @@ __attribute__((noinline)) int crash(int a) {
int do_action(const char* arg) int do_action(const char* arg)
{ {
if(!strncmp(arg, "thread-", strlen("thread-"))) { fprintf(stderr,"crasher: init pid=%d tid=%d\n", getpid(), gettid());
if (!strncmp(arg, "thread-", strlen("thread-"))) {
return do_action_on_thread(arg + strlen("thread-")); return do_action_on_thread(arg + strlen("thread-"));
} else if (!strcmp(arg,"smash-stack")) {
return smash_stack(42);
} else if (!strcmp(arg,"stack-overflow")) {
overflow_stack(NULL);
} else if (!strcmp(arg,"nostack")) {
crashnostack();
} else if (!strcmp(arg,"ctest")) {
return ctest();
} else if (!strcmp(arg,"exit")) {
exit(1);
} else if (!strcmp(arg,"crash")) {
return crash(42);
} else if (!strcmp(arg,"abort")) {
maybeabort();
} }
if(!strcmp(arg,"smash-stack")) return smash_stack(42); fprintf(stderr, "%s OP\n", __progname);
if(!strcmp(arg,"nostack")) crashnostack(); fprintf(stderr, "where OP is:\n");
if(!strcmp(arg,"ctest")) return ctest(); fprintf(stderr, " smash-stack overwrite a stack-guard canary\n");
if(!strcmp(arg,"exit")) exit(1); fprintf(stderr, " stack-overflow recurse until the stack overflows\n");
if(!strcmp(arg,"crash")) return crash(42); fprintf(stderr, " nostack crash with a NULL stack pointer\n");
if(!strcmp(arg,"abort")) maybeabort(); fprintf(stderr, " ctest (obsoleted by thread-crash?)\n");
fprintf(stderr, " exit call exit(1)\n");
pthread_t thr; fprintf(stderr, " crash cause a SIGSEGV\n");
pthread_attr_t attr; fprintf(stderr, " abort call abort()\n");
pthread_attr_init(&attr); fprintf(stderr, "prefix any of the above with 'thread-' to not run\n");
pthread_attr_setdetachstate(&attr, PTHREAD_CREATE_DETACHED); fprintf(stderr, "on the process' main thread.\n");
pthread_create(&thr, &attr, test_thread, 0); return EXIT_SUCCESS;
while(1) sleep(1);
} }
int main(int argc, char **argv) int main(int argc, char **argv)
{ {
fprintf(stderr,"crasher: built at " __TIME__ "!@\n"); fprintf(stderr,"crasher: built at " __TIME__ "!@\n");
fprintf(stderr,"crasher: init pid=%d tid=%d\n", getpid(), gettid());
if(argc > 1) { if(argc > 1) {
return do_action(argv[1]); return do_action(argv[1]);
} else { } else {
crash1(); crash1();
// *((int*) 0) = 42;
} }
return 0; return 0;