Add test program for BPF memory corruption bug (#5603)

* Add test program for BPF memory corruption bug

* @jackcmay feedback
This commit is contained in:
Justin Starry
2019-08-22 14:25:23 -04:00
committed by GitHub
parent 919c066e5a
commit 63d62c33c6
10 changed files with 212 additions and 0 deletions

View File

@@ -0,0 +1,4 @@
/target/
Cargo.lock
/farf/

View File

@@ -0,0 +1,27 @@
# Note: This crate must be built using build.sh
[package]
name = "solana-bpf-rust-stack-bug"
version = "0.18.0-pre2"
description = "Solana BPF iter program written in Rust"
authors = ["Solana Maintainers <maintainers@solana.com>"]
repository = "https://github.com/solana-labs/solana"
license = "Apache-2.0"
homepage = "https://solana.com/"
edition = "2018"
[dependencies]
solana-sdk-bpf-utils = { path = "../../../../sdk/bpf/rust/rust-utils", version = "0.18.0-pre2" }
solana-sdk-bpf-no-std = { path = "../../../../sdk/bpf/rust/rust-no-std", version = "0.18.0-pre2" }
solana-bpf-rust-stack-bug-dep = { path = "../stack_bug_dep", version = "0.18.0-pre2" }
[dev_dependencies]
solana-sdk-bpf-test = { path = "../../../../sdk/bpf/rust/rust-test", version = "0.18.0-pre2" }
[workspace]
members = []
[lib]
crate-type = ["cdylib"]
name = "solana_bpf_rust_stack_bug"

View File

@@ -0,0 +1,6 @@
[dependencies.compiler_builtins]
path = "../../../../sdk/bpf/dependencies/rust-bpf-sysroot/src/compiler-builtins"
features = ["c", "mem"]
[target.bpfel-unknown-unknown.dependencies]
alloc = { path = "../../../../sdk/bpf/dependencies/rust-bpf-sysroot/src/liballoc" }

View File

@@ -0,0 +1,41 @@
//! @brief Example Rust-based BPF program tests loop iteration
#![no_std]
#![allow(unused_attributes)]
#[macro_use]
extern crate alloc;
#[cfg(not(test))]
extern crate solana_sdk_bpf_no_std;
extern crate solana_sdk_bpf_utils;
use alloc::vec::Vec;
use solana_sdk_bpf_utils::info;
use solana_sdk_bpf_utils::entrypoint;
use solana_sdk_bpf_utils::entrypoint::{SolKeyedAccount, SolClusterInfo};
use solana_bpf_rust_stack_bug_dep::{InitPollData, PollData};
entrypoint!(process_instruction);
fn process_instruction(ka: &mut [SolKeyedAccount], _info: &SolClusterInfo, _data: &[u8]) -> bool {
let header = vec![1u8; 6];
let option_a = vec![1u8; 1];
let option_b = vec![1u8; 1];
let init_poll = InitPollData {
timeout: 10u32,
header_len: 6,
header: &header,
option_a_len: 1,
option_a: &option_a,
option_b_len: 1,
option_b: &option_b,
};
let key1 = [1u8; 32];
let key2 = [1u8; 32];
let key3 = [1u8; 32];
let poll_data = PollData::init(init_poll, &key1, &key2, &key3, 5000);
poll_data.to_bytes();
info!("Success");
true
}