linux-hardening - Re: [PATCH v3 4/5] selftests/mseal: add more tests for mmap

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <a2652ed4-ea8b-4b56-bac6-6479b3df6c14@sirena.org.uk>
Date: Fri, 18 Oct 2024 19:37:22 +0100
From: Mark Brown <broonie@...nel.org>
To: Jeff Xu <jeffxu@...omium.org>
Cc: Muhammad Usama Anjum <usama.anjum@...labora.com>,
	Lorenzo Stoakes <lorenzo.stoakes@...cle.com>,
	akpm@...ux-foundation.org, linux-kselftest@...r.kernel.org,
	linux-mm@...ck.org, linux-hardening@...r.kernel.org,
	linux-kernel@...r.kernel.org, pedro.falcato@...il.com,
	willy@...radead.org, vbabka@...e.cz, Liam.Howlett@...cle.com,
	rientjes@...gle.com, keescook@...omium.org
Subject: Re: [PATCH v3 4/5] selftests/mseal: add more tests for mmap

On Fri, Oct 18, 2024 at 11:06:20AM -0700, Jeff Xu wrote:
> On Fri, Oct 18, 2024 at 6:04 AM Mark Brown <broonie@...nel.org> wrote:

> > The problem is that the macro name is confusing and not terribly
> > consistent with how the rest of the selftests work.  The standard
> > kselftest result reporting is

> >         ksft_test_result(bool result, char *name_format, ...);
> >
> > so the result of the test is a boolean flag which is passed in.  This
> > macro on the other hand sounds like a double negative so you have to
> > stop and think what the logic is, and it's not seen anywhere else so
> > nobody is going to be familiar with it.  The main thing this is doing is
> > burying a return statement in there, that's a bit surprising too.

> Thanks for explaining the problem, naming is hard. Do you have a
> suggestion on a better naming?

Honestly I'd probably deal with this by refactoring such that the macro
isn't needed and the tests follow a pattern more like:

	if (ret != 0) {
		ksft_print_msg("$ACTION failed with %d\n", ret);
		return false;
	}

when they encouter a failure, the pattern I sketched in my earlier
message, or switch to kselftest_harness.h (like I say I don't know if
the fork()ing is an issue for these tests).  If I had to have a macro
it'd probably be something like mseal_assert().

> > I'll also note that these macros are resulting in broken kselftest
> > output, the name for a test has to be stable for automated systems to be
> > able to associate test results between runs but these print

....

> > which includes the line number of the test in the name which is an
> > obvious problem, automated systems won't be able to tell that any two
> > failures are related to each other never mind the passing test.  We
> > should report why things failed but it's better to do that with a
> > ksft_print_msg(), ideally one that's directly readable rather than
> > requiring someone to go into the source code and look it up.

> I don't know what  the issue you described is ? Are you saying that we
> are missing line numbers ? it is not. here is the sample of output:

No, I'm saying that having the line numbers is a problem.

> Failure in the second test case from last:

> ok 105 test_munmap_free_multiple_ranges
> not ok 106 test_munmap_free_multiple_ranges_with_split: line:2573
> ok 107 test_munmap_free_multiple_ranges_with_split

Test 106 here is called "test_munmap_free_multiple_ranges_with_split:
line:2573" which automated systems aren't going to be able to associate
with the passing "test_munmap_free_multiple_ranges_with_split", nor with
any failures that occur on any other lines in the function.

> I would image the needs of something similar to FAIL_TEST_IF_FALSE is
> common in selftest writing:

> 1> lightweight enough so dev can pick up quickly and adapt to existing
> tests, instead of rewriting everything from scratch.
> 2> assert like syntax
> 3> fail the current test case, but continue running the next test case
> 4> take care of reporting test failures.

Honestly this just sounds and looks like kselftest_harness.h, it's
ASSERT_ and EXPECT_ macros sound exactly like what you're looking for
for asserts.  The main gotchas with it are that it's not particularly
elegant for test cases which need to enumerate system features (which I
don't think is the case for mseal()?) and that it runs each test case in
a fork()ed child which can be inconvenient for some tests.  The use of
fork() is because that make the overall test program much more robust
against breakage in individual tests and allows things like per test
timeouts.

Download attachment "signature.asc" of type "application/pgp-signature" (489 bytes)