1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
/* $OpenBSD: rfmem-stack.c,v 1.3 2002/02/22 01:06:58 art Exp $ */
/*
* Written by Artur Grabowski <art@openbsd.org>, 2002 Public Domain.
*/
#include <sys/param.h>
#include <sys/wait.h>
#include <sys/mman.h>
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <err.h>
#define MAGIC "inherited"
int
main()
{
char *map, *map2;
int status;
map = alloca(sizeof(MAGIC));
memset(map, 0, sizeof(MAGIC));
map2 = alloca(sizeof(MAGIC));
memset(map2, 0, sizeof(MAGIC));
switch(rfork(RFFDG|RFPROC|RFMEM)) {
case -1:
err(1, "fork");
case 0:
memcpy(map, MAGIC, sizeof(MAGIC));
sleep(1);
if (memcmp(map2, MAGIC, sizeof(MAGIC)) == 0) {
write(2, "child stack polluted\n", 21);
_exit(1);
}
_exit(0);
}
memcpy(map2, MAGIC, sizeof(MAGIC));
if (wait(&status) < 0)
err(1, "wait");
if (!WIFEXITED(status))
err(1, "child error");
if (memcmp(map, MAGIC, sizeof(MAGIC)) == 0)
return 1;
return WEXITSTATUS(status) != 0;
}
|
