52 lines
4.7 KiB
Python
52 lines
4.7 KiB
Python
#!/usr/bin/env python3
|
|
"""Bounded H1 extension only. No compositor, runtime budget or new campaign."""
|
|
import argparse,json,os,pathlib,resource,shlex,subprocess,sys
|
|
P=pathlib.Path
|
|
H=P(__file__).resolve().parent
|
|
ap=argparse.ArgumentParser();ap.add_argument('--sources',type=P,required=True);ap.add_argument('--output',type=P,required=True);a=ap.parse_args()
|
|
o=a.output.absolute()
|
|
assert str(o).startswith('/var/tmp/') and o.resolve()==o and not o.exists()
|
|
o.mkdir(mode=0o700);resource.setrlimit(resource.RLIMIT_CORE,(0,0));records=[]
|
|
def call(argv,label,env=None,negative=False):
|
|
r=subprocess.run(list(map(str,argv)),capture_output=True,env=env)
|
|
(o/(label+'.stdout')).write_bytes(r.stdout);(o/(label+'.stderr')).write_bytes(r.stderr)
|
|
passed=r.returncode!=0 if negative else r.returncode==0
|
|
records.append(dict(label=label,argv=list(map(str,argv)),rc=r.returncode,expected='nonzero runtime assertion/sanitizer' if negative else 0,passed=passed))
|
|
(o/'commands.json').write_text(json.dumps(records,indent=2)+'\n');return passed
|
|
assert call([sys.executable,H/'extract.py','--sources',a.sources,'--output',o],'extract')
|
|
cflags=shlex.split(subprocess.check_output(['pkg-config','--cflags','wayland-server','pixman-1','wlroots-0.20'],text=True))
|
|
libs=shlex.split(subprocess.check_output(['pkg-config','--libs','wayland-server','pixman-1','wlroots-0.20'],text=True))
|
|
base=['cc','-std=c17','-Wall','-Wextra','-Werror','-Wno-unused-parameter','-Wno-unused-function','-g','-O1','-fno-omit-frame-pointer','-I'+str(a.sources/'scene/include'),'-I'+str(o),'-I'+str(H),*cflags,str(H/'oom.c'),*libs,'-lm']
|
|
cases=['root','nested','unarmed','wrongrole','malformed','nonce','mode','symlink','invalidenv']
|
|
def env_for(label,case):
|
|
return dict(os.environ,SMX_OOM_TOKEN_PATH=str(o/(label+'.token')),SMX_OOM_NONCE='bad' if case=='invalidenv' else '123456789abcdef0123456789abcdef0',SMX_OOM_ROLE='nested_popup' if case=='nested' else 'root_popup',ASAN_OPTIONS='detect_leaks=1:abort_on_error=1',UBSAN_OPTIONS='halt_on_error=1:print_stacktrace=1')
|
|
ok=call(['cc','-std=c17','-Wall','-Wextra','-Werror','-fsyntax-only','-I'+str(a.sources/'scene/include'),*cflags,str(o/'callsite.c')],'native-header-callsite-syntax')
|
|
for name,flags in [('normal',[]),('ubsan',['-fsanitize=undefined','-fno-sanitize-recover=all']),('asan-ubsan',['-fsanitize=address,undefined','-fno-sanitize-recover=all'])]:
|
|
binary=o/name
|
|
if not call(base+flags+['-o',str(binary)],name+'-compile'):ok=False;break
|
|
for case in cases:
|
|
label=name+'-'+case;ok=call([binary,case],label,env_for(label,case)) and ok
|
|
original=(o/'scene.inc').read_text()
|
|
mutants={
|
|
'global_scope':('oom_diag.scoped && oom_diag.configured && !oom_diag.consumed &&\n\t\t\t!strcmp(oom_diag.call_role, oom_diag.role) && oom_diag_token()', 'oom_diag.configured && !oom_diag.consumed && oom_diag_token()'),
|
|
'after_publication':('struct scene_tree_clip *entry = oom_diag_reserve(parent, tree, sizeof(*entry));','scene_tree_init(tree, parent);\nstruct scene_tree_clip *entry = oom_diag_reserve(parent, tree, sizeof(*entry));'),
|
|
'wrong_role':('!strcmp(oom_diag.call_role, oom_diag.role) && oom_diag_token()','oom_diag_token()'),
|
|
'token_reuse':('&& !oom_diag.consumed &&','&&'),
|
|
'malformed_accepted':('return valid && got == length && !memcmp(token, expected, (size_t)length);','return true;'),
|
|
'nonce_ignored':('!memcmp(token, expected, (size_t)length)','!memcmp(token + 41, expected + 41, (size_t)length - 41)'),
|
|
}
|
|
for name,(old,new) in mutants.items():
|
|
assert original.count(old)==1,(name,original.count(old))
|
|
changed=original.replace(old,new)
|
|
if name=='after_publication':
|
|
marker='scene_tree_init(tree, parent);'
|
|
i=changed.index(marker,changed.index(marker)+len(marker))
|
|
changed=changed[:i]+changed[i:].replace(marker,'/* moved, not duplicated */',1)
|
|
(o/'scene.inc').write_text(changed)
|
|
binary=o/('mutant-'+name)
|
|
if not call(base+['-Wno-unused-variable','-o',str(binary)],name+'-compile'):ok=False;continue
|
|
case={'wrong_role':'wrongrole','malformed_accepted':'malformed','nonce_ignored':'nonce'}.get(name,'root')
|
|
label='mutant-'+name;ok=call([binary,case],label,env_for(label,case),negative=True) and ok
|
|
(o/'scene.inc').write_text(original)
|
|
result=dict(status='PASS_BOUNDED' if ok else 'FAIL',campaign='existing H1 source-corpus extension; no native runtime reservation',cases=cases,mutants=list(mutants),records=records,limits=['native compositor survival NOT_RUN','popup C callsite source binding only; no complete Sway build','damage/render use inherited reduced adapters; complete damage NOT_PROVEN'],core_limit=resource.getrlimit(resource.RLIMIT_CORE),dumpability='PR_SET_DUMPABLE0 and PR_GET_DUMPABLE0 asserted in each executable before test assertions')
|
|
(o/'result.json').write_text(json.dumps(result,indent=2)+'\n');print(result['status']);sys.exit(0 if ok else 1)
|