1*5e3eaea3SApple OSS Distributions #include <stdlib.h>
2*5e3eaea3SApple OSS Distributions #include <unistd.h>
3*5e3eaea3SApple OSS Distributions #include <stdio.h>
4*5e3eaea3SApple OSS Distributions #include <sys/sysctl.h>
5*5e3eaea3SApple OSS Distributions #include <ptrauth.h>
6*5e3eaea3SApple OSS Distributions #include <math.h>
7*5e3eaea3SApple OSS Distributions #include <string.h>
8*5e3eaea3SApple OSS Distributions #include <errno.h>
9*5e3eaea3SApple OSS Distributions
10*5e3eaea3SApple OSS Distributions int verbose = 0;
11*5e3eaea3SApple OSS Distributions #define PRINTF(...) \
12*5e3eaea3SApple OSS Distributions if (verbose) { \
13*5e3eaea3SApple OSS Distributions printf(__VA_ARGS__); \
14*5e3eaea3SApple OSS Distributions }
15*5e3eaea3SApple OSS Distributions
16*5e3eaea3SApple OSS Distributions __attribute__((noinline))
17*5e3eaea3SApple OSS Distributions static void
foo(void)18*5e3eaea3SApple OSS Distributions foo(void)
19*5e3eaea3SApple OSS Distributions {
20*5e3eaea3SApple OSS Distributions PRINTF("In foo()\n");
21*5e3eaea3SApple OSS Distributions fflush(stdout);
22*5e3eaea3SApple OSS Distributions }
23*5e3eaea3SApple OSS Distributions
24*5e3eaea3SApple OSS Distributions volatile struct data {
25*5e3eaea3SApple OSS Distributions char buffer1[16 * 1024];
26*5e3eaea3SApple OSS Distributions int big_data[16 * 1204];
27*5e3eaea3SApple OSS Distributions char buffer2[16 * 1024];
28*5e3eaea3SApple OSS Distributions } x = {
29*5e3eaea3SApple OSS Distributions .big_data = {
30*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
31*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
32*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
33*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
34*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
35*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
36*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
37*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
38*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
39*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
40*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
41*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
42*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
43*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
44*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
45*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
46*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
47*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
48*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
49*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
50*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
51*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
52*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
53*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
54*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
55*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
56*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
57*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
58*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
59*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
60*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
61*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
62*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
63*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
64*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
65*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
66*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
67*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
68*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
69*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
70*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
71*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
72*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
73*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
74*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
75*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
76*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
77*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
78*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
79*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
80*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
81*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
82*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
83*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
84*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
85*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
86*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
87*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
88*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
89*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
90*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
91*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
92*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
93*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
94*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
95*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
96*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
97*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
98*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
99*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
100*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
101*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
102*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
103*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
104*5e3eaea3SApple OSS Distributions 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10,
105*5e3eaea3SApple OSS Distributions }
106*5e3eaea3SApple OSS Distributions };
107*5e3eaea3SApple OSS Distributions
108*5e3eaea3SApple OSS Distributions /*
109*5e3eaea3SApple OSS Distributions * volatile to stop the compiler from optimizing away calls to atan()
110*5e3eaea3SApple OSS Distributions */
111*5e3eaea3SApple OSS Distributions volatile double zero = 0.0;
112*5e3eaea3SApple OSS Distributions
113*5e3eaea3SApple OSS Distributions int
main(int argc,char ** argv)114*5e3eaea3SApple OSS Distributions main(int argc, char **argv)
115*5e3eaea3SApple OSS Distributions {
116*5e3eaea3SApple OSS Distributions void *addr;
117*5e3eaea3SApple OSS Distributions size_t s = sizeof(addr);
118*5e3eaea3SApple OSS Distributions int err;
119*5e3eaea3SApple OSS Distributions int a;
120*5e3eaea3SApple OSS Distributions
121*5e3eaea3SApple OSS Distributions /*
122*5e3eaea3SApple OSS Distributions * needs to run as root for sysctl.
123*5e3eaea3SApple OSS Distributions */
124*5e3eaea3SApple OSS Distributions if (geteuid() != 0) {
125*5e3eaea3SApple OSS Distributions PRINTF("Test not running as root\n");
126*5e3eaea3SApple OSS Distributions exit(-1);
127*5e3eaea3SApple OSS Distributions }
128*5e3eaea3SApple OSS Distributions
129*5e3eaea3SApple OSS Distributions /*
130*5e3eaea3SApple OSS Distributions * check for -v for verbose output
131*5e3eaea3SApple OSS Distributions */
132*5e3eaea3SApple OSS Distributions if (strcmp(argv[1], "-v") == 0) {
133*5e3eaea3SApple OSS Distributions verbose = 1;
134*5e3eaea3SApple OSS Distributions }
135*5e3eaea3SApple OSS Distributions
136*5e3eaea3SApple OSS Distributions /*
137*5e3eaea3SApple OSS Distributions * The argument determines what test to try.
138*5e3eaea3SApple OSS Distributions * "blahblah" is a test, "Xblahblah" does the test after inject an ECC error.
139*5e3eaea3SApple OSS Distributions * Tests:
140*5e3eaea3SApple OSS Distributions * "foo" - invoke a local text function.
141*5e3eaea3SApple OSS Distributions * "atan" - invoke a shared library text function.
142*5e3eaea3SApple OSS Distributions * "clean" - read from a clean data page
143*5e3eaea3SApple OSS Distributions * "dirty" - read from a dirty data page
144*5e3eaea3SApple OSS Distributions */
145*5e3eaea3SApple OSS Distributions if (strcmp(argv[argc - 1], "foo") == 0) {
146*5e3eaea3SApple OSS Distributions foo();
147*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "Xfoo") == 0) {
148*5e3eaea3SApple OSS Distributions PRINTF("Warm up call to foo()\n");
149*5e3eaea3SApple OSS Distributions foo();
150*5e3eaea3SApple OSS Distributions addr = (void *)ptrauth_strip(&foo, ptrauth_key_function_pointer);
151*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc", NULL, NULL, &addr, s);
152*5e3eaea3SApple OSS Distributions foo();
153*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "atan") == 0) {
154*5e3eaea3SApple OSS Distributions PRINTF("atan(0) is %g\n", atan(zero));
155*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "Xatan") == 0) {
156*5e3eaea3SApple OSS Distributions PRINTF("Warmup call to atan(0) is %g\n", atan(zero));
157*5e3eaea3SApple OSS Distributions addr = (void *)ptrauth_strip(&atan, ptrauth_key_function_pointer);
158*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc", NULL, NULL, &addr, s);
159*5e3eaea3SApple OSS Distributions PRINTF("atan(0) is %g\n", atan(zero));
160*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "clean") == 0) {
161*5e3eaea3SApple OSS Distributions PRINTF("x.big_data[35] is %d\n", x.big_data[35]);
162*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "Xclean") == 0) {
163*5e3eaea3SApple OSS Distributions PRINTF("initial read of x.big_data[35] is %d\n", x.big_data[35]);
164*5e3eaea3SApple OSS Distributions
165*5e3eaea3SApple OSS Distributions addr = (void *)&x.big_data[35];
166*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc", NULL, NULL, &addr, s);
167*5e3eaea3SApple OSS Distributions PRINTF("second read of x.big_data[35] is %d\n", x.big_data[35]);
168*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "dirty") == 0) {
169*5e3eaea3SApple OSS Distributions x.big_data[35] = (int)random();
170*5e3eaea3SApple OSS Distributions PRINTF("x.big_data[35] is %d\n", x.big_data[35]);
171*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "Xdirty") == 0) {
172*5e3eaea3SApple OSS Distributions x.big_data[35] = (int)random();
173*5e3eaea3SApple OSS Distributions PRINTF("initial read of dirty x.big_data[35] is %d\n", x.big_data[35]);
174*5e3eaea3SApple OSS Distributions
175*5e3eaea3SApple OSS Distributions addr = (void *)&x.big_data[35];
176*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc", NULL, NULL, &addr, s);
177*5e3eaea3SApple OSS Distributions PRINTF("second read of x.big_data[35] is %d\n", x.big_data[35]);
178*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "Xcopyout") == 0) {
179*5e3eaea3SApple OSS Distributions x.big_data[35] = (int)random();
180*5e3eaea3SApple OSS Distributions PRINTF("initial read of dirty x.big_data[35] is %d\n", x.big_data[35]);
181*5e3eaea3SApple OSS Distributions
182*5e3eaea3SApple OSS Distributions addr = (void *)&x.big_data[35];
183*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc_copyout", NULL, NULL, &addr, s);
184*5e3eaea3SApple OSS Distributions if (err) {
185*5e3eaea3SApple OSS Distributions PRINTF("copyout return %d\n", err);
186*5e3eaea3SApple OSS Distributions exit(err);
187*5e3eaea3SApple OSS Distributions }
188*5e3eaea3SApple OSS Distributions PRINTF("2nd read of dirty x.big_data[35] is %d\n", x.big_data[35]);
189*5e3eaea3SApple OSS Distributions } else if (strcmp(argv[argc - 1], "kernel") == 0) {
190*5e3eaea3SApple OSS Distributions PRINTF("Inducing ECC on kernel page\n");
191*5e3eaea3SApple OSS Distributions addr = (void *)1; /* used to flag some kernel page */
192*5e3eaea3SApple OSS Distributions err = sysctlbyname("vm.inject_ecc", NULL, NULL, &addr, s);
193*5e3eaea3SApple OSS Distributions exit(0);
194*5e3eaea3SApple OSS Distributions } else {
195*5e3eaea3SApple OSS Distributions exit(-1);
196*5e3eaea3SApple OSS Distributions }
197*5e3eaea3SApple OSS Distributions exit(0);
198*5e3eaea3SApple OSS Distributions }
199