mirror of
https://gitlab.com/cryptsetup/cryptsetup.git
synced 2025-12-11 19:00:02 +01:00
Add test for keyslot area overflow during validation.
This commit is contained in:
40
tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh
Executable file
40
tests/generators/generate-luks2-keyslot-invalid-area-size.img.sh
Executable file
@@ -0,0 +1,40 @@
|
|||||||
|
#!/bin/bash
|
||||||
|
|
||||||
|
. lib.sh
|
||||||
|
|
||||||
|
#
|
||||||
|
# *** Description ***
|
||||||
|
#
|
||||||
|
# generate header with well-formed json format
|
||||||
|
# where keyslot area object size is UINT64_MAX and will overflow with added length
|
||||||
|
#
|
||||||
|
|
||||||
|
# $1 full target dir
|
||||||
|
# $2 full source luks2 image
|
||||||
|
|
||||||
|
function generate()
|
||||||
|
{
|
||||||
|
json_str=$(jq -c '.keyslots."0"."area".size = "18446744073709551615"' $TMPDIR/json0)
|
||||||
|
test ${#json_str} -lt $((LUKS2_JSON_SIZE*512)) || exit 2
|
||||||
|
|
||||||
|
write_luks2_json "$json_str" $TMPDIR/json0
|
||||||
|
write_luks2_json "$json_str" $TMPDIR/json1
|
||||||
|
|
||||||
|
lib_mangle_json_hdr0
|
||||||
|
lib_mangle_json_hdr1
|
||||||
|
}
|
||||||
|
|
||||||
|
function check()
|
||||||
|
{
|
||||||
|
lib_hdr0_checksum || exit 2
|
||||||
|
lib_hdr1_checksum || exit 2
|
||||||
|
|
||||||
|
read_luks2_json0 $TGT_IMG $TMPDIR/json_res0
|
||||||
|
jq -c 'if (.keyslots."0"."area".size != "18446744073709551615")
|
||||||
|
then error("Unexpected value in result json") else empty end' $TMPDIR/json_res0 || exit 5
|
||||||
|
}
|
||||||
|
|
||||||
|
lib_prepare $@
|
||||||
|
generate
|
||||||
|
check
|
||||||
|
lib_cleanup
|
||||||
@@ -240,6 +240,7 @@ echo "[7] Test invalid metadata object property"
|
|||||||
RUN luks2-invalid-tokens.img "F" "Invalid tokens objects not rejected"
|
RUN luks2-invalid-tokens.img "F" "Invalid tokens objects not rejected"
|
||||||
RUN luks2-invalid-top-objects.img "F" "Invalid top-level objects not rejected"
|
RUN luks2-invalid-top-objects.img "F" "Invalid top-level objects not rejected"
|
||||||
RUN luks2-keyslot-invalid-area.img "F" "Invalid keyslot area object not rejected"
|
RUN luks2-keyslot-invalid-area.img "F" "Invalid keyslot area object not rejected"
|
||||||
|
RUN luks2-keyslot-invalid-area-size.img "F" "Invalid keyslot area size that can overflow not rejected"
|
||||||
RUN luks2-keyslot-invalid-objects.img "F" "Invalid keyslot objects not rejected"
|
RUN luks2-keyslot-invalid-objects.img "F" "Invalid keyslot objects not rejected"
|
||||||
RUN luks2-keyslot-invalid-af.img "F" "Invalid keyslot objects types not rejected"
|
RUN luks2-keyslot-invalid-af.img "F" "Invalid keyslot objects types not rejected"
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user