1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
|
/*
* SYSCALL_DEFINE6(splice, int, fd_in, loff_t __user *, off_in,
int, fd_out, loff_t __user *, off_out,
size_t, len, unsigned int, flags)
*/
#include <stdlib.h>
#include "sanitise.h"
#include "random.h"
#include "shm.h"
# define SPLICE_F_MOVE 1 /* Move pages instead of copying. */
# define SPLICE_F_NONBLOCK 2 /* Don't block on the pipe splicing
(but we may still block on the fd
we splice from/to). */
# define SPLICE_F_MORE 4 /* Expect more data. */
# define SPLICE_F_GIFT 8 /* Pages passed in are a gift. */
static void sanitise_splice(int childno)
{
if ((rand() % 10) < 3)
return;
if (rand_bool()) {
shm->a1[childno] = shm->pipe_fds[rand() % MAX_PIPE_FDS];
shm->a2[childno] = 0;
}
if (rand_bool()) {
shm->a3[childno] = shm->pipe_fds[rand() % MAX_PIPE_FDS];
shm->a4[childno] = 0;
}
}
struct syscall syscall_splice = {
.name = "splice",
.num_args = 6,
.arg1name = "fd_in",
.arg1type = ARG_FD,
.arg2name = "off_in",
.arg2type = ARG_ADDRESS,
.arg3name = "fd_out",
.arg3type = ARG_FD,
.arg4name = "off_out",
.arg4type = ARG_ADDRESS,
.arg5name = "len",
.arg5type = ARG_LEN,
.arg6name = "flags",
.arg6type = ARG_LIST,
.arg6list = {
.num = 4,
.values = { SPLICE_F_MOVE, SPLICE_F_NONBLOCK, SPLICE_F_MORE, SPLICE_F_GIFT },
},
.sanitise = sanitise_splice,
.flags = NEED_ALARM,
};
|