gridcraft

aleleba/gridcraft

Fork 0

mirror of https://github.com/storytold/gridcraft.git synced 2026-11-15 02:17:45 -06:00

Author	SHA1	Message	Date
skylar taylor-barrick	8bde636f27	Sandbox: test the socket owner ioctls with a real pointer (#4245 ) The merged test asserts FIOSETOWN and FIOASYNC with the ioctl argument passed by value, where the kernel reads the number as an address and fails with EFAULT whether or not the filter refuses it, so the refusal alone is not the reason the call came back. Passing a pointer, as a C caller does, the call succeeds unconfined and is EPERM confined. This covers FIOSETOWN and SIOCSPGRP that way on a socket the parent made and the program inherited as a standard stream, after reading its socket name so a pipe cannot pass for one. SIOCSPGRP is in the rules and in the filter's count assertion but in no test until now. Deleting either rule line fails this test at that ioctl's assertion; restored, it passes. The test above is untouched.	2026-11-14 22:04:39 -06:00

Author

SHA1

Message

Date

skylar taylor-barrick

8bde636f27

Sandbox: test the socket owner ioctls with a real pointer (#4245 )

The merged test asserts FIOSETOWN and FIOASYNC with the ioctl argument passed
by value, where the kernel reads the number as an address and fails with
EFAULT whether or not the filter refuses it, so the refusal alone is not the
reason the call came back. Passing a pointer, as a C caller does, the call
succeeds unconfined and is EPERM confined.

This covers FIOSETOWN and SIOCSPGRP that way on a socket the parent made and
the program inherited as a standard stream, after reading its socket name so a
pipe cannot pass for one. SIOCSPGRP is in the rules and in the filter's count
assertion but in no test until now.

Deleting either rule line fails this test at that ioctl's assertion; restored,
it passes. The test above is untouched.

2026-11-14 22:04:39 -06:00

Compare commits

Diff Content Not Available