1// SPDX-License-Identifier: GPL-2.0
  2#include <linux/init.h>
  3#include <linux/kernel.h>
  4#include <linux/module.h>
  5
  6typedef void(*test_ubsan_fp)(void);
  7
  8static void test_ubsan_add_overflow(void)
  9{
 10	volatile int val = INT_MAX;
 11
 12	val += 2;
 13}
 14
 15static void test_ubsan_sub_overflow(void)
 16{
 17	volatile int val = INT_MIN;
 18	volatile int val2 = 2;
 19
 20	val -= val2;
 21}
 22
 23static void test_ubsan_mul_overflow(void)
 24{
 25	volatile int val = INT_MAX / 2;
 26
 27	val *= 3;
 28}
 29
 30static void test_ubsan_negate_overflow(void)
 31{
 32	volatile int val = INT_MIN;
 33
 34	val = -val;
 35}
 36
 37static void test_ubsan_divrem_overflow(void)
 38{
 39	volatile int val = 16;
 40	volatile int val2 = 0;
 41
 42	val /= val2;
 43}
 44
 45static void test_ubsan_vla_bound_not_positive(void)
 46{
 47	volatile int size = -1;
 48	char buf[size];
 49
 50	(void)buf;
 51}
 52
 53static void test_ubsan_shift_out_of_bounds(void)
 54{
 55	volatile int val = -1;
 56	int val2 = 10;
 57
 58	val2 <<= val;
 59}
 60
 61static void test_ubsan_out_of_bounds(void)
 62{
 63	volatile int i = 4, j = 5;
 64	volatile int arr[i];
 65
 66	arr[j] = i;
 67}
 68
 69static void test_ubsan_load_invalid_value(void)
 70{
 71	volatile char *dst, *src;
 72	bool val, val2, *ptr;
 73	char c = 4;
 74
 75	dst = (char *)&val;
 76	src = &c;
 77	*dst = *src;
 78
 79	ptr = &val2;
 80	val2 = val;
 81}
 82
 83static void test_ubsan_null_ptr_deref(void)
 84{
 85	volatile int *ptr = NULL;
 86	int val;
 87
 88	val = *ptr;
 89}
 90
 91static void test_ubsan_misaligned_access(void)
 92{
 93	volatile char arr[5] __aligned(4) = {1, 2, 3, 4, 5};
 94	volatile int *ptr, val = 6;
 95
 96	ptr = (int *)(arr + 1);
 97	*ptr = val;
 98}
 99
100static void test_ubsan_object_size_mismatch(void)
101{
102	/* "((aligned(8)))" helps this not into be misaligned for ptr-access. */
103	volatile int val __aligned(8) = 4;
104	volatile long long *ptr, val2;
105
106	ptr = (long long *)&val;
107	val2 = *ptr;
108}
109
110static const test_ubsan_fp test_ubsan_array[] = {
111	test_ubsan_add_overflow,
112	test_ubsan_sub_overflow,
113	test_ubsan_mul_overflow,
114	test_ubsan_negate_overflow,
115	test_ubsan_divrem_overflow,
116	test_ubsan_vla_bound_not_positive,
117	test_ubsan_shift_out_of_bounds,
118	test_ubsan_out_of_bounds,
119	test_ubsan_load_invalid_value,
120	//test_ubsan_null_ptr_deref, /* exclude it because there is a crash */
121	test_ubsan_misaligned_access,
122	test_ubsan_object_size_mismatch,
123};
124
125static int __init test_ubsan_init(void)
126{
127	unsigned int i;
128
129	for (i = 0; i < ARRAY_SIZE(test_ubsan_array); i++)
130		test_ubsan_array[i]();
131
132	(void)test_ubsan_null_ptr_deref; /* to avoid unsed-function warning */
133	return 0;
134}
135module_init(test_ubsan_init);
136
137static void __exit test_ubsan_exit(void)
138{
139	/* do nothing */
140}
141module_exit(test_ubsan_exit);
142
143MODULE_AUTHOR("Jinbum Park <jinb.park7@gmail.com>");
144MODULE_LICENSE("GPL v2");